@sentry/junior 0.272.0 → 0.273.0

package/dist/app.js

@@ -1,43 +1,43 @@
-import { B as readScheduledAutomation, G as blockEventAutomation, Gr as setExperimentalFeatures, H as saveScheduledAutomationInLock, Ir as SubscribedReplyReason, Jn as hasRunnableConversationWork, K as collectEventAutomationMatchKeys, M as recordAutomationExecution, Mn as CONVERSATION_WORK_STALE_ENQUEUE_MS, R as listScheduledAutomationsForTeam, S as existingConversationId, U as scheduledRunId, Ur as getExperimentalFeatures, W as withScheduledAutomationLock, Wr as isExperimentalFeatureEnabled, Wt as appendConversationMessages, Xn as isInvalidConversationRecordError, Xr as getConfigDefaults, Xt as settleConversationTitleWork, Y as findMatchingEventAutomations, Zr as setConfigDefaults, a as confirmDispatchMailboxAppend, b as notifyAutomationBlocked, f as getPluginDispatchProjection, ht as eventGuidance, it as automationVersionOf, m as listPendingDispatchMailboxAppends, nt as eventAutomationRunLimitReason, o as createOrGetDispatch, p as isTerminalDispatchStatus, qt as projectConversationMessages, r as buildDispatchId, s as getDispatchConversationId, tt as admitEventAutomationRun, u as getDispatchRecord, v as markDispatchFailed, zr as getThreadStopDecision } from "./turn-session-routing-BV_gX7n3.js";
-import { _ as snapshotRuntimeConfig, d as restoreRuntimeConfig, f as setBotModelConfig, g as setSlackReactionConfig, h as setRuntimeLimits, i as getChatConfig, m as setProfiles, n as botConfig, o as getSlackBotToken, p as setCrossActorMidRunMode, u as resetRuntimeConfig } from "./config-BUP9wjiR.js";
-import { A as JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE, E as withSpan, L as GOOGLE_IDENTITY_PROVIDER, N as JUNIOR_WORKSPACE_SNAPSHOT_JOB_CALLBACK_ROUTE, T as withLogContext, b as setSpanAttributes, h as logWarn, m as logInfo, p as logException, r as createRequestContext, w as withContext, z as normalizeIdentityEmail } from "./logging-CjkDr-jP.js";
+import { $i as runWithWorkspaceTeamId, Ai as findMatchingWatches, C as projectConversationMessages, Ca as createPluginLogger, Dn as getPluginApiRoutes, Dr as isVercelSandboxEgressRequest, E as settleConversationTitleWork, Ei as collectEventMatchKeys, Et as isInvalidConversationRecordError, Fa as readConversationEventPage, Fi as bindScheduledAutomationCredentialSubject, Fn as validatePlugins, Gi as getSlackClient, Gr as postSlackEphemeralMessage, Hn as dismissOpenReviewItems, Ii as bindSlackDirectCredentialSubject, Jn as searchReviewItems, Ka as listConversationAnnotations, Li as verifyEventAutomationCredentialSubject, Mr as resolveBaseUrl, Ni as takeDueTimerWatches, Nn as getPlugins, On as getPluginRoutes, Or as proxyVercelSandboxEgressRequest, Pi as bindEventAutomationCredentialSubject, Pn as setPlugins, Qi as getWorkspaceTeamId, Qn as canActOnReviewItem, Ri as verifyScheduledAutomationCredentialSubject, Rn as setBriefsConfig, Rr as slackMention, Sn as createUserTokenStore, Ua as resolveRootVisibility, Wr as openSlackModal, Xr as slackEntitySchema, Za as createPluginCache, Zr as slackExternalRefIdSchema, aa as setDashboardConversationLinkOptions, ao as setConfigDefaults, ar as reviewItemReaderForUser, b as appendConversationMessages, ba as createPluginState, bn as isExperimentalFeatureEnabled, ci as consumeSandboxEgressPermissionDeniedSignal, ct as CONVERSATION_WORK_STALE_ENQUEUE_MS, fn as SubscribedReplyReason, hn as getThreadStopDecision, ia as getDashboardTaskLink, io as getConfigDefaults, mi as normalizeSandboxEgressTracePropagationDomains, oi as clearSandboxEgressSignals, qi as isDmChannel, ra as getDashboardReviewItemLink, si as consumeSandboxEgressAuthRequiredSignal, ta as getDashboardConversationLink, ui as parseSandboxEgressCredentialToken, wa as readConversationAccessFromSql, wt as hasRunnableConversationWork, xa as createPluginEmbedder, xn as setExperimentalFeatures, yn as getExperimentalFeatures, zi as verifySlackDirectCredentialSubject } from "./projection-BOpi891B.js";
+import { d as restoreRuntimeConfig, f as setBotModelConfig, g as snapshotRuntimeConfig, h as setSlackReactionConfig, i as getChatConfig, m as setRuntimeLimits, n as botConfig, o as getSlackBotToken, p as setProfiles, u as resetRuntimeConfig } from "./config-C6FTd7PX.js";
+import { A as JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE, E as withSpan, L as GOOGLE_IDENTITY_PROVIDER, N as JUNIOR_WORKSPACE_SNAPSHOT_JOB_CALLBACK_ROUTE, T as withLogContext, b as setSpanAttributes, h as logWarn, m as logInfo, p as logException, r as createRequestContext, w as withContext, z as normalizeIdentityEmail } from "./logging-CNs1e04n.js";
 import { n as captureMessage } from "./sentry-MDkYAVPV.js";
-import { t as JUNIOR_VERSION } from "./version-C48azPKq.js";
+import { t as JUNIOR_VERSION } from "./version-BpiFGZZW.js";
 import { _ as slackMessageTsSchema, f as parseSlackTeamId, g as slackMessageTsFromMs, h as parseSlackMessageTs, m as slackChannelIdSchema, n as createSlackActor, p as parseSlackUserId, s as parseActorUserId, u as parseSlackChannelId } from "./actor-B4DYygOB.js";
-import { C as getSqlExecutor, M as resolveActorIdentityId, O as withConversationMutationLock, R as recordGoogleSignIn, S as getDb, T as withConversationEventLock, _ as closeDb, g as createCache, i as readActorIdentity, l as resolveViewerUser, p as parseAvatarUrl, x as getConversationStore, y as getConversationEventStore } from "./viewer-BCRuO8Wg.js";
+import { C as getSqlExecutor, E as withConversationEventLock, N as resolveActorIdentityId, S as getDb, _ as closeDb, g as createCache, i as readActorIdentity, k as withConversationMutationLock, l as resolveViewerUser, p as parseAvatarUrl, x as getConversationStore, y as getConversationEventStore, z as recordGoogleSignIn } from "./viewer-C6Y1aXjZ.js";
 import { a as juniorAgentInvocations, d as juniorDestinations, i as juniorAgentBindings, s as juniorConversations } from "./agent-invocations-C1RNOCs8.js";
-import { _ as juniorConversationBriefs, b as juniorConversationEvents, c as juniorReviewItems, d as juniorAutomations, l as juniorAutomationRuns } from "./executor-DGDpyegI.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-BNeCWIaF.js";
-import { A as verifySlackSignature, B as scheduledAutomationRunAttributes, C as syncReviewItemSlackCards, D as parseSlackReviewItemFormTarget, E as parseSlackReviewItemClick, Et as ingestEvent, I as joinPublicChannel, O as parseSlackUserInputSubmission, S as readSlackReviewItemCardConversationId, T as buildSlackReviewItemModal, Tt as processWorkspaceSnapshotJob, X as readViewerAutomationSummary, _ as unpublishedArtifactHeaders, at as appendAndEnqueueWebMessage, et as effectiveTaskOutcomes, g as readPublicArtifact, h as publicArtifactHeaders, ht as requestAttachmentDeletion, j as parseSlackThreadId, k as runWithSlackInstallation, lt as recordWebConversationActivity, n as executeAgentRun, nt as deliverReviewItemChange, ot as conversationTurnIdForMessage, pt as collectAttachmentGarbage, rt as renderReviewItemMessage, t as createAgentRunner, ut as webActorFromEmail, v as lookupSlackUserProfile, vt as stopConversationSession, x as createSlackReviewItemShow, yt as recordSubagentEnded, z as logScheduledAutomationRunSkipped } from "./agent-runner-Cl6Usx2Y.js";
-import { At as slackEntitySchema, Bn as getDashboardTaskLink, Bt as clearSandboxEgressSignals, Cr as resolveRootVisibility, Dn as getSlackClient, Er as listConversationAnnotations, Fn as runWithWorkspaceTeamId, Ht as consumeSandboxEgressPermissionDeniedSignal, Ln as getDashboardConversationLink, M as canActOnReviewItem, Pn as getWorkspaceTeamId, S as dismissOpenReviewItems, Tt as postSlackEphemeralMessage, Vn as setDashboardConversationLinkOptions, Vt as consumeSandboxEgressAuthRequiredSignal, Wt as parseSandboxEgressCredentialToken, Xt as normalizeSandboxEgressTracePropagationDomains, _n as bindScheduledAutomationCredentialSubject, ar as createPluginLogger, bn as verifyScheduledAutomationCredentialSubject, c as getPluginRoutes, cn as collectEventMatchKeys, ct as proxyVercelSandboxEgressRequest, fn as findMatchingWatches, ft as resolveBaseUrl, gn as bindEventAutomationCredentialSubject, h as validatePlugins, hn as takeDueTimerWatches, jr as createPluginCache, jt as slackExternalRefIdSchema, kn as isDmChannel, m as setPlugins, n as createUserTokenStore, nr as createPluginState, or as readConversationAccessFromSql, p as getPlugins, rr as createPluginEmbedder, s as getPluginApiRoutes, st as isVercelSandboxEgressRequest, v as setBriefsConfig, vn as bindSlackDirectCredentialSubject, vt as slackMention, wt as openSlackModal, xn as verifySlackDirectCredentialSubject, yn as verifyEventAutomationCredentialSubject } from "./credentialed-CgTulRDH.js";
+import { _ as juniorConversationBriefs, b as juniorConversationEvents, c as juniorReviewItems, d as juniorAutomations, l as juniorAutomationRuns } from "./executor-BafgvQcc.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-TygDsPOU.js";
+import { A as verifySlackSignature, B as scheduledAutomationRunAttributes, C as syncReviewItemSlackCards, D as parseSlackReviewItemFormTarget, E as parseSlackReviewItemClick, Et as ingestEvent, I as joinPublicChannel, J as readViewerAutomationExecutions, K as ViewerTaskNotFoundError, O as parseSlackUserInputSubmission, Q as readViewerAutomations, S as readSlackReviewItemCardConversationId, T as buildSlackReviewItemModal, Tt as processWorkspaceSnapshotJob, X as readViewerAutomationSummary, _ as unpublishedArtifactHeaders, at as appendAndEnqueueWebMessage, et as effectiveTaskOutcomes, g as readPublicArtifact, h as publicArtifactHeaders, ht as requestAttachmentDeletion, j as parseSlackThreadId, k as runWithSlackInstallation, lt as recordWebConversationActivity, n as executeAgentRun, nt as deliverReviewItemChange, ot as conversationTurnIdForMessage, pt as collectAttachmentGarbage, rt as renderReviewItemMessage, t as createAgentRunner, ut as webActorFromEmail, v as lookupSlackUserProfile, vt as stopConversationSession, x as createSlackReviewItemShow, yt as recordSubagentEnded, z as logScheduledAutomationRunSkipped } from "./agent-runner-D7Qz-lGO.js";
 import { a as withLock, i as fenceLock, n as MUTATION_LOCK_TTL_MS } from "./locks-D-0h111u.js";
-import { r as getStateAdapter, t as disconnectStateAdapter } from "./adapter-BDYDi1F9.js";
+import { r as getStateAdapter, t as disconnectStateAdapter } from "./adapter-umap1cth.js";
 import { n as getNextRunAtMs } from "./cadence-R7Em4RjE.js";
-import { D as conversationSurfaceSchema, L as annotationCard, T as conversationReportStatusSchema, h as conversationFeedQuerySchema } from "./conversation-BtQzLoK8.js";
-import { b as listPendingAgentInvocationMailboxAppends, x as listPendingAgentInvocationResults } from "./store-DyVKH0QB.js";
-import { C as renderTaskInput, O as renderSlackObjectCard, d as getEventCatalog, f as SLACK_EVENT_NAMESPACE, g as slackChannelMessageRunsAutomation, h as slackChannelMessageReplyThreadTs, m as slackChannelMessageEvent } from "./session-stop-HKl0ECX0.js";
+import { D as conversationSurfaceSchema, L as annotationCard, T as conversationReportStatusSchema, Y as conversationBriefSchema, h as conversationFeedQuerySchema } from "./conversation-T4oabbBi.js";
+import { b as listPendingAgentInvocationMailboxAppends, x as listPendingAgentInvocationResults } from "./store-C1xuZcLd.js";
+import { C as renderTaskInput, O as renderSlackObjectCard, d as getEventCatalog, f as SLACK_EVENT_NAMESPACE, g as slackChannelMessageRunsAutomation, h as slackChannelMessageReplyThreadTs, m as slackChannelMessageEvent } from "./session-stop-DaT_7tYa.js";
 import { h as buttonUserInputField } from "./reporting-window-DgHgwQB3.js";
-import { c as setSandboxResourceConfig, o as getSandboxResourceConfig } from "./resolve-CuuxNfWG.js";
-import { a as getVercelConversationWorkQueue, d as getQueueProvider, g as isConversationQueueMessageRejectedError, h as conversationQueueMessageSchema, i as verifyWorkspaceSnapshotJobMessage, o as resolveConversationWorkQueueTopic, s as verifyConversationQueueMessage, t as WORKSPACE_SNAPSHOT_JOB_QUEUE_TOPIC } from "./job-queue-CjB97sii.js";
-import { S as removeActiveConversation, _ as hasRunnableConversationWork$1, c as clearExpiredConversationLease, g as getConversationWorkState, h as getConversation, m as ensureConversationWake, r as appendAndEnqueueInboundMessage, v as listActiveConversationIds } from "./store-CPF2kzbu.js";
-import { M as scheduledRunSchema } from "./automation-CV7g5h3A.js";
-import { n as validatePluginRegistrations, t as validatePluginEgressCredentialHooks } from "./validation-DcGelbBi.js";
+import { c as setSandboxResourceConfig, o as getSandboxResourceConfig } from "./resolve-DqVtd4Q9.js";
+import { a as getVercelConversationWorkQueue, d as getQueueProvider, g as isConversationQueueMessageRejectedError, h as conversationQueueMessageSchema, i as verifyWorkspaceSnapshotJobMessage, o as resolveConversationWorkQueueTopic, s as verifyConversationQueueMessage, t as WORKSPACE_SNAPSHOT_JOB_QUEUE_TOPIC } from "./job-queue-C4lphW9Y.js";
+import { S as removeActiveConversation, _ as hasRunnableConversationWork$1, c as clearExpiredConversationLease, g as getConversationWorkState, h as getConversation, m as ensureConversationWake, r as appendAndEnqueueInboundMessage, v as listActiveConversationIds } from "./store-DaxUuOmD.js";
+import { B as readScheduledAutomation, G as blockEventAutomation, H as saveScheduledAutomationInLock, K as collectEventAutomationMatchKeys, M as recordAutomationExecution, R as listScheduledAutomationsForTeam, S as existingConversationId, U as scheduledRunId, W as withScheduledAutomationLock, Y as findMatchingEventAutomations, a as confirmDispatchMailboxAppend, b as notifyAutomationBlocked, f as getPluginDispatchProjection, ht as eventGuidance, it as automationVersionOf, m as listPendingDispatchMailboxAppends, nt as eventAutomationRunLimitReason, o as createOrGetDispatch, p as isTerminalDispatchStatus, r as buildDispatchId, s as getDispatchConversationId, tt as admitEventAutomationRun, u as getDispatchRecord, v as markDispatchFailed } from "./turn-session-routing-BdCTDq9m.js";
+import { M as scheduledRunSchema, l as automationListQuerySchema, s as automationExecutionStatusSchema } from "./automation-yffXcZt9.js";
+import { n as validatePluginRegistrations, t as validatePluginEgressCredentialHooks } from "./validation-BQjCfh84.js";
 import { a as pluginRuntimeRegistrationsFromPluginSet, n as pluginCatalogConfigFromEnv, r as pluginCatalogConfigFromPluginSet, t as defineJuniorPlugins } from "./plugins-DOm9Y6qI.js";
-import { A as stopSlackThread, B as actOnReviewItem, C as isAllowedSignInEmail, D as buildSlackInboundMessage, E as recordSkippedConversationMessage, F as bindMessageAuthorIdentityId, H as readReviewItemForUser, I as startProcessingReaction, K as enqueueAgentDispatch, L as stripLeadingBotMention, M as withNormalizedThreadId, N as stopConversationTurn, O as clearSlackPendingReactions, P as THREAD_OPTOUT_ACK, R as parseContent, S as isAllowedDomain, T as resolveAllowedDomains, U as reviewItemChange, V as closeReviewItemsAnsweredByReply, W as getAttachmentStorage, _ as createProductionConversationWorkOptions, b as createSlackWebApiStatusSender, j as normalizeIncomingSlackThreadId, k as isSlackMessageStopped, q as GET$3, t as readConversationFeed, v as createProductionSlackWebhookServices, w as readEnvList, x as assertNoLegacyAllowedDomains, y as getProductionSlackAdapter, z as ReviewItemActionError } from "./list-JZUP1yog.js";
-import { n as enqueueAgentInvocationResult, o as getAuthPausedConversationTurnId } from "./result-BRhb6iN1.js";
-import { r as enqueueAgentInvocation } from "./work-zxkmbJAp.js";
-import { o as coerceThreadConversationState } from "./thread-state-Ds8JTsX6.js";
-import { o as unlinkProvider } from "./connections-CesHau9u.js";
-import { a as GET$4, i as publishAppHomeView, r as GET$5, t as receiveLocalOAuthCredential } from "./credential-sync-D2odJC30.js";
-import { a as pluginTaskQueueConsumer, c as queueCallback, n as createVercelPluginTaskCallback, o as registerVercelPluginTaskDevConsumer } from "./task-queue-BbQXCcNX.js";
-import { t as processConversationWork } from "./worker-CNNxHF1V.js";
-import { t as bindMessageAgent } from "./message-D9y8PKA1.js";
-import { t as bindSpawnAgent } from "./spawn-DqjBxqWh.js";
-import { t as processPluginTask } from "./task-runner-ChzW5E7R.js";
+import { A as recordSkippedConversationMessage, B as startProcessingReaction, C as getProductionSlackAdapter, D as isAllowedSignInEmail, E as isAllowedDomain, F as normalizeIncomingSlackThreadId, G as closeReviewItemsAnsweredByReply, H as parseContent, I as withNormalizedThreadId, J as getAttachmentStorage, K as readReviewItemForUser, L as stopConversationTurn, M as clearSlackPendingReactions, N as isSlackMessageStopped, O as readEnvList, P as stopSlackThread, R as THREAD_OPTOUT_ACK, S as createProductionSlackWebhookServices, T as assertNoLegacyAllowedDomains, U as ReviewItemActionError, V as stripLeadingBotMention, W as actOnReviewItem, X as enqueueAgentDispatch, Z as GET$3, _ as archiveConversation, a as readConversationFeed, g as encodeConversationCursor, h as decodeConversationCursor, j as buildSlackInboundMessage, k as resolveAllowedDomains, n as readConversationDetail, o as readConversationRecordFromSql, q as reviewItemChange, t as stopConversationTurnForViewer, w as createSlackWebApiStatusSender, x as createProductionConversationWorkOptions, z as bindMessageAuthorIdentityId } from "./stop-dKUc-x2K.js";
+import { n as enqueueAgentInvocationResult, o as getAuthPausedConversationTurnId } from "./result-DQwTiLTw.js";
+import { r as enqueueAgentInvocation } from "./work-ChPh_YEh.js";
+import { o as coerceThreadConversationState } from "./thread-state-BkUpE9Ae.js";
+import { o as unlinkProvider } from "./connections-Dq72KajR.js";
+import { a as GET$4, i as publishAppHomeView, r as GET$5, t as receiveLocalOAuthCredential } from "./credential-sync-BmCbHAp4.js";
+import { a as pluginTaskQueueConsumer, c as queueCallback, n as createVercelPluginTaskCallback, o as registerVercelPluginTaskDevConsumer } from "./task-queue-ymAh_-P1.js";
+import { t as processConversationWork } from "./worker-Be_sK_ou.js";
+import { t as bindMessageAgent } from "./message-CETC5lsl.js";
+import { t as bindSpawnAgent } from "./spawn-Ceikdjkp.js";
+import { t as processPluginTask } from "./task-runner-vlH6pEm3.js";
 import { createRequire } from "node:module";
 import { Hono } from "hono";
-import { z } from "zod";
 import { createHash, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
+import { z } from "zod";
 import { and, asc, eq, inArray, isNotNull, isNull, lte, ne, or, sql } from "drizzle-orm";
 import { EVENT_SUMMARY_MAX_LENGTH, EVENT_TEXT_MAX_LENGTH, dispatchOptionsSchema, eventSchema, eventTriggerFiltersText, isSlackDestination, userSchema } from "@sentry/junior-plugin-api";
 import { pathToFileURL } from "node:url";
@@ -49,6 +49,7 @@ import * as acp from "@agentclientprotocol/sdk";
 import dns from "node:dns";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
+import { HTTPException } from "hono/http-exception";
 import { bodyLimit } from "hono/body-limit";
 import { createAuthMiddleware } from "better-auth/api";
 import { betterAuth } from "better-auth/minimal";
@@ -5287,59 +5288,6 @@ function redirectUriMatches(registered, requested) {
 		return candidate !== null && isLoopbackHttp(candidate) && candidate.hostname === url.hostname && candidate.pathname === url.pathname && candidate.search === url.search;
 	});
 }
-// src/api/mcp/oauth/metadata.ts
-/**
-* Own the MCP OAuth paths, scope, and discovery documents.
-*
-* Every URL comes from the trusted public origin of the app. The documents
-* advertise Client ID Metadata Documents and no client registration endpoint.
-*/
-const MCP_PATH = "/api/mcp";
-const MCP_SCOPE = "conversations:read";
-const MCP_RESOURCE_METADATA_PATH = "/.well-known/oauth-protected-resource/api/mcp";
-const MCP_AUTHORIZATION_SERVER_METADATA_PATH = "/.well-known/oauth-authorization-server";
-const MCP_AUTHORIZE_PATH = "/api/mcp/oauth/authorize";
-const MCP_TOKEN_PATH = "/api/mcp/oauth/token";
-/** Dashboard-authenticated consent page for one pending authorization. */
-const MCP_CONSENT_PATH = "/_junior/mcp/authorize/:authorizationId";
-/** Resolve the MCP URLs for this request from the trusted public origin. */
-function resolveMcpUrls(request, baseURL) {
-	const origin = resolvePublicOrigin(request, baseURL);
-	if (!origin) throw new Error("Junior MCP requires a configured public base URL");
-	const url = (path) => new URL(path, origin).toString();
-	return {
-		authorize: url(MCP_AUTHORIZE_PATH),
-		issuer: origin.origin,
-		resource: url(MCP_PATH),
-		resourceMetadata: url(MCP_RESOURCE_METADATA_PATH),
-		token: url(MCP_TOKEN_PATH),
-		consent: (authorizationId) => url(MCP_CONSENT_PATH.replace(":authorizationId", encodeURIComponent(authorizationId)))
-	};
-}
-/** RFC 9728 protected resource metadata for `/api/mcp`. */
-function protectedResourceMetadata(urls) {
-	return {
-		resource: urls.resource,
-		authorization_servers: [urls.issuer],
-		bearer_methods_supported: ["header"],
-		scopes_supported: [MCP_SCOPE]
-	};
-}
-/** RFC 8414 authorization server metadata. CIMD is the only client model. */
-function authorizationServerMetadata(urls) {
-	return {
-		issuer: urls.issuer,
-		authorization_endpoint: urls.authorize,
-		token_endpoint: urls.token,
-		scopes_supported: [MCP_SCOPE],
-		response_types_supported: ["code"],
-		grant_types_supported: ["authorization_code", "refresh_token"],
-		code_challenge_methods_supported: ["S256"],
-		token_endpoint_auth_methods_supported: ["none"],
-		authorization_response_iss_parameter_supported: true,
-		client_id_metadata_document_supported: true
-	};
-}
 // src/api/mcp/oauth/page.ts
 /** Render one MCP sign-in page. It sends no referrer and loads no resources. */
 function renderMcpPage(page) {
@@ -5355,6 +5303,42 @@ function renderMcpPage(page) {
 		title: page.title
 	});
 }
+// src/api/mcp/oauth/scopes.ts
+/**
+* Own the MCP OAuth scopes. Each scope unlocks a fixed set of tools. No
+* scope lets a client send a message or start a Turn.
+*
+* A grant stores its scopes as one space-separated string (RFC 6749 section
+* 3.3), so grants from before the scope split still parse.
+*/
+/** Every scope, in the order that the consent page shows it. */
+const MCP_SCOPES = [
+	"conversations:read",
+	"conversations:manage",
+	"review_items:read",
+	"automations:read"
+];
+/** What each scope lets the client do, as the consent page says it. */
+const MCP_SCOPE_DESCRIPTIONS = {
+	"conversations:read": "List and read the conversations that you started or take part in",
+	"conversations:manage": "Archive your conversations and stop a running Turn",
+	"review_items:read": "List and read your review items",
+	"automations:read": "List and read the automations that you can see"
+};
+/** The `scope` value that names every scope. */
+const MCP_ALL_SCOPES = MCP_SCOPES.join(" ");
+/**
+* Parse a space-separated scope value into known scopes in canonical order.
+* Return `undefined` when it is empty or names an unknown scope.
+*/
+function parseMcpScopes(value) {
+	const names = value.split(" ").filter(Boolean);
+	if (names.length === 0) return void 0;
+	if (!names.every((name) => MCP_SCOPES.includes(name))) return void 0;
+	return MCP_SCOPES.filter((scope) => names.includes(scope));
+}
+/** A stored scope value: known scopes, space-separated, in canonical order. */
+const mcpScopeValueSchema = z.string().refine((value) => parseMcpScopes(value)?.join(" ") === value);
 // src/api/mcp/oauth/authorization.ts
 /**
 * Own the OAuth authorization endpoint and its pending requests.
@@ -5376,7 +5360,7 @@ const mcpAuthorizationSchema = z.object({
 	expiresAtMs: z.number().int().positive(),
 	redirectUri: z.string().min(1),
 	resource: z.string().min(1),
-	scope: z.literal(MCP_SCOPE),
+	scope: mcpScopeValueSchema,
 	state: z.string().max(STATE_MAX_LENGTH).optional()
 }).strict();
 /** The user who owns one consent page, and the hash of its form token. */
@@ -5483,8 +5467,8 @@ async function handleMcpAuthorize(args) {
 	const codeChallenge = params.get("code_challenge") ?? "";
 	if (params.get("code_challenge_method") !== "S256" || !CODE_CHALLENGE_PATTERN.test(codeChallenge)) return fail("invalid_request", "PKCE with S256 is required.");
 	if (oauthState !== void 0 && oauthState.length > STATE_MAX_LENGTH) return fail("invalid_request", "The state parameter is too long.");
-	const scope = params.get("scope")?.trim();
-	if (scope && scope !== "conversations:read") return fail("invalid_scope", `The only scope is ${MCP_SCOPE}.`);
+	const scopes = parseMcpScopes(params.get("scope")?.trim() || MCP_ALL_SCOPES);
+	if (!scopes) return fail("invalid_scope", `Use only these scopes: ${MCP_ALL_SCOPES}.`);
 	if (params.get("resource") !== args.urls.resource) return fail("invalid_target", `The resource must be ${args.urls.resource}.`);
 	const authorizationId = randomBytes(32).toString("base64url");
 	const authorization = {
@@ -5494,7 +5478,7 @@ async function handleMcpAuthorize(args) {
 		expiresAtMs: Date.now() + AUTHORIZATION_TTL_MS,
 		redirectUri,
 		resource: args.urls.resource,
-		scope: MCP_SCOPE,
+		scope: scopes.join(" "),
 		state: oauthState
 	};
 	await args.state.set(authorizationKey(authorizationId), authorization, AUTHORIZATION_TTL_MS);
@@ -5529,7 +5513,7 @@ const authorizationCodeSchema = z.object({
 	grantId: z.string().uuid(),
 	redirectUri: z.string().min(1),
 	resource: z.string().min(1),
-	scope: z.literal(MCP_SCOPE)
+	scope: mcpScopeValueSchema
 }).strict();
 const grantSchema = z.object({
 	clientId: z.string().min(1),
@@ -5537,7 +5521,7 @@ const grantSchema = z.object({
 	/** Absolute end of the grant. Refresh never moves it. */
 	expiresAtMs: z.number().int().positive(),
 	resource: z.string().min(1),
-	scope: z.literal(MCP_SCOPE)
+	scope: mcpScopeValueSchema
 }).strict();
 const tokenSchema = z.object({ grantId: z.string().uuid() }).strict();
 function codeKey(code) {
@@ -5572,7 +5556,7 @@ async function issueAuthorizationCode(args) {
 		grantId: randomUUID(),
 		redirectUri: args.redirectUri,
 		resource: args.resource,
-		scope: MCP_SCOPE
+		scope: args.scope
 	};
 	await args.state.set(codeKey(code), record, CODE_TTL_MS);
 	return code;
@@ -5662,8 +5646,8 @@ async function refreshGrant(args) {
 	const token = await readRecord(args.state, key, tokenSchema);
 	const grant = token ? await readGrant(args.state, token.grantId) : void 0;
 	if (!token || !grant || grant.clientId !== args.clientId || args.resource !== void 0 && args.resource !== grant.resource) return invalidGrant("The refresh token is not valid.");
-	if (args.scope !== void 0 && args.scope !== grant.scope) return {
-		description: `The only scope is ${MCP_SCOPE}.`,
+	if (args.scope !== void 0 && parseMcpScopes(args.scope)?.join(" ") !== grant.scope) return {
+		description: `Refresh keeps the granted scope: ${grant.scope}.`,
 		error: "invalid_scope",
 		ok: false
 	};
@@ -5682,9 +5666,9 @@ async function refreshGrant(args) {
 	return await issueTokens(args.state, token.grantId, grant);
 }
 /**
-* Return the user email of one MCP access token for one resource. Personal
-* tokens and other bearer values never match, because only this module
-* stores MCP access tokens.
+* Return the user email and scopes of one MCP access token for one
+* resource. Personal tokens and other bearer values never match, because
+* only this module stores MCP access tokens.
 */
 async function authenticateMcpAccessToken(args) {
 	if (!args.token.startsWith(ACCESS_TOKEN_PREFIX)) return void 0;
@@ -5692,7 +5676,62 @@ async function authenticateMcpAccessToken(args) {
 	if (!token) return void 0;
 	const grant = await readGrant(args.state, token.grantId);
 	if (!grant || grant.resource !== args.resource) return void 0;
-	return grant.email;
+	return {
+		email: grant.email,
+		scopes: parseMcpScopes(grant.scope) ?? []
+	};
+}
+// src/api/mcp/oauth/metadata.ts
+/**
+* Own the MCP OAuth paths and discovery documents.
+*
+* Every URL comes from the trusted public origin of the app. The documents
+* advertise Client ID Metadata Documents and no client registration endpoint.
+*/
+const MCP_PATH = "/api/mcp";
+const MCP_RESOURCE_METADATA_PATH = "/.well-known/oauth-protected-resource/api/mcp";
+const MCP_AUTHORIZATION_SERVER_METADATA_PATH = "/.well-known/oauth-authorization-server";
+const MCP_AUTHORIZE_PATH = "/api/mcp/oauth/authorize";
+const MCP_TOKEN_PATH = "/api/mcp/oauth/token";
+/** Dashboard-authenticated consent page for one pending authorization. */
+const MCP_CONSENT_PATH = "/_junior/mcp/authorize/:authorizationId";
+/** Resolve the MCP URLs for this request from the trusted public origin. */
+function resolveMcpUrls(request, baseURL) {
+	const origin = resolvePublicOrigin(request, baseURL);
+	if (!origin) throw new Error("Junior MCP requires a configured public base URL");
+	const url = (path) => new URL(path, origin).toString();
+	return {
+		authorize: url(MCP_AUTHORIZE_PATH),
+		issuer: origin.origin,
+		resource: url(MCP_PATH),
+		resourceMetadata: url(MCP_RESOURCE_METADATA_PATH),
+		token: url(MCP_TOKEN_PATH),
+		consent: (authorizationId) => url(MCP_CONSENT_PATH.replace(":authorizationId", encodeURIComponent(authorizationId)))
+	};
+}
+/** RFC 9728 protected resource metadata for `/api/mcp`. */
+function protectedResourceMetadata(urls) {
+	return {
+		resource: urls.resource,
+		authorization_servers: [urls.issuer],
+		bearer_methods_supported: ["header"],
+		scopes_supported: [...MCP_SCOPES]
+	};
+}
+/** RFC 8414 authorization server metadata. CIMD is the only client model. */
+function authorizationServerMetadata(urls) {
+	return {
+		issuer: urls.issuer,
+		authorization_endpoint: urls.authorize,
+		token_endpoint: urls.token,
+		scopes_supported: [...MCP_SCOPES],
+		response_types_supported: ["code"],
+		grant_types_supported: ["authorization_code", "refresh_token"],
+		code_challenge_methods_supported: ["S256"],
+		token_endpoint_auth_methods_supported: ["none"],
+		authorization_response_iss_parameter_supported: true,
+		client_id_metadata_document_supported: true
+	};
 }
 // src/api/mcp/oauth/consent-page.ts
 /**
@@ -5720,8 +5759,10 @@ function consentPage(args) {
 	const clientHost = new URL(args.authorization.clientId).host;
 	const clientName = args.authorization.clientName ?? clientHost;
 	const button = (action, label, primary) => `<button type="submit" name="action" value="${action}" style="border:0;border-radius:.375rem;cursor:pointer;font:inherit;font-weight:700;padding:.625rem 1rem;margin-right:.5rem;${primary ? "background:#a78bfa;color:#000" : "background:#333;color:#fff"}">${label}</button>`;
+	const scopeItems = (parseMcpScopes(args.authorization.scope) ?? []).map((scope) => `<li style="margin:0 0 .25rem">${escapeHtml(MCP_SCOPE_DESCRIPTIONS[scope])} <code style="color:#8a8a8a">${escapeHtml(scope)}</code></li>`).join("");
 	return renderMcpPage({
-		bodyHtml: `      <p style="margin:0 0 1rem;color:#b8b8b8;line-height:1.5">The app is published at <strong style="color:#fff">${escapeHtml(clientHost)}</strong>. It can list your ${escapeHtml(args.agentName)} conversations.</p>
+		bodyHtml: `      <p style="margin:0 0 .5rem;color:#b8b8b8;line-height:1.5">The app is published at <strong style="color:#fff">${escapeHtml(clientHost)}</strong>. In ${escapeHtml(args.agentName)}, it can:</p>
+      <ul style="margin:0 0 1rem;padding-left:1.25rem;color:#b8b8b8;line-height:1.5">${scopeItems}</ul>
       <form method="post">
         <input type="hidden" name="csrf" value="${escapeHtml(args.csrfToken)}">
         ${button("approve", "Allow", true)}${button("deny", "Deny", false)}
@@ -5791,13 +5832,15 @@ async function handleMcpConsentPage(args) {
 			email: args.user.email,
 			redirectUri: authorization.redirectUri,
 			resource: authorization.resource,
+			scope: authorization.scope,
 			state: args.state
 		}) },
 		redirectUri: authorization.redirectUri,
 		state: authorization.state
 	});
 }
-// src/api/mcp/tools/list-conversations.ts
+// src/api/mcp/conversation.ts
+/** Own the MCP view of one Conversation, shared by the conversation tools. */
 /** MCP view of one Conversation. It omits dashboard-only fields. */
 const mcpConversationSchema = z.object({
 	conversationId: z.string(),
@@ -5811,6 +5854,7 @@ const mcpConversationSchema = z.object({
 	archivedAt: z.string().optional(),
 	url: z.string().optional()
 }).strict();
+/** Map a Conversation summary to its MCP view. */
 function mcpConversation(summary) {
 	return {
 		conversationId: summary.conversationId,
@@ -5825,34 +5869,519 @@ function mcpConversation(summary) {
 		url: getDashboardConversationLink(summary.conversationId)
 	};
 }
-/** Register `listConversations`, which lists the Conversations of `user`. */
-function registerListConversationsTool(server, user) {
+/** Conversation id param shared by the conversation tools. */
+const mcpConversationIdSchema = z.string().min(1).describe("Conversation id from searchConversations.");
+/** MCP view of one user or assistant Message. */
+const mcpMessageSchema = z.object({
+	seq: z.number().int(),
+	createdAt: z.string(),
+	role: z.enum(["assistant", "user"]),
+	author: z.string().optional(),
+	text: z.string(),
+	attachments: z.array(z.object({
+		filename: z.string(),
+		contentType: z.string(),
+		bytes: z.number().int()
+	}).strict()).optional()
+}).strict();
+/**
+* Keep the user and assistant Messages of a report event page, in order.
+* System Messages and Messages with no text or attachment are left out.
+*/
+function mcpMessages(events) {
+	return events.flatMap((event) => {
+		const data = event.data;
+		if (data.type !== "message" || data.role === "system") return [];
+		const text = data.text ?? "";
+		const attachments = data.attachments?.map(({ bytes, contentType, filename }) => ({
+			bytes,
+			contentType,
+			filename
+		}));
+		if (!text && !attachments?.length) return [];
+		const author = data.actorIdentity?.fullName ?? data.actorIdentity?.slackUserName;
+		return [{
+			seq: event.seq,
+			createdAt: event.createdAt,
+			role: data.role,
+			...author ? { author } : void 0,
+			text,
+			...attachments?.length ? { attachments } : void 0
+		}];
+	});
+}
+// src/api/mcp/tool-context.ts
+/**
+* Return one structured tool result. The text block holds the same JSON, as
+* the MCP spec recommends for clients that do not read `structuredContent`.
+*/
+function mcpToolResult(result) {
+	return {
+		content: [{
+			type: "text",
+			text: JSON.stringify(result)
+		}],
+		structuredContent: result
+	};
+}
+/** Return a tool error that the client model can read and repair. */
+function mcpToolError(message) {
+	return {
+		content: [{
+			type: "text",
+			text: message
+		}],
+		isError: true
+	};
+}
+/**
+* Turn a client error from a shared API function, such as a `404` or a
+* `409`, into a tool error. Rethrow every other failure.
+*/
+function apiToolError(error) {
+	if (error instanceof HTTPException && error.status < 500) return mcpToolError(error.message);
+	throw error;
+}
+/**
+* Return whether `user` started or takes part in a Conversation. MCP tools
+* read and change only these Conversations, the same set that
+* `searchConversations` shows.
+*/
+async function isConversationParticipant(user, conversationId) {
+	return (await readConversationAccessFromSql(getDb(), [conversationId], user)).get(conversationId)?.isParticipant ?? false;
+}
+// src/api/mcp/tools/archive-conversation.ts
+/** Register `archiveConversation`, which archives or restores for the user. */
+function registerArchiveConversationTool(server, { user }) {
+	server.registerTool("archiveConversation", {
+		title: "Archive conversation",
+		description: "Archive one of your conversations, or restore it. Archiving hides it only for you, and new activity restores it.",
+		inputSchema: {
+			conversationId: mcpConversationIdSchema,
+			archived: z.boolean().default(true).describe("False restores an archived conversation."),
+			lastSeenAt: z.string().datetime().describe("`lastSeenAt` from searchConversations or getConversation. The archive fails when the conversation has newer activity.")
+		},
+		outputSchema: { archivedAt: z.string().nullable() },
+		annotations: {
+			destructiveHint: false,
+			idempotentHint: true,
+			openWorldHint: false,
+			readOnlyHint: false
+		}
+	}, async ({ archived, conversationId, lastSeenAt }) => {
+		try {
+			return mcpToolResult(await archiveConversation(user, conversationId, {
+				archived,
+				lastSeenAt
+			}));
+		} catch (error) {
+			return apiToolError(error);
+		}
+	});
+}
+// src/api/mcp/automation.ts
+/** Own the MCP view of one Automation, shared by the automation tools. */
+/** MCP view of one Automation. It omits cost and run-count charts. */
+const mcpAutomationSchema = z.object({
+	id: z.string(),
+	kind: z.enum(["scheduled", "event"]),
+	title: z.string(),
+	instruction: z.string(),
+	status: z.enum([
+		"active",
+		"blocked",
+		"paused",
+		"completed"
+	]),
+	statusReason: z.string().optional(),
+	trigger: z.string().describe("The schedule, or the events and filters that start a run."),
+	nextRunAt: z.string().optional(),
+	destination: z.string().describe("Slack channel that gets the results."),
+	createdBy: z.string(),
+	ownedByYou: z.boolean(),
+	lastRunAt: z.string().optional(),
+	lastRunStatus: z.enum([
+		"blocked",
+		"completed",
+		"failed"
+	]).optional(),
+	lastConversationId: z.string().optional(),
+	url: z.string().optional()
+}).strict();
+function triggerText(automation) {
+	if (automation.kind === "scheduled") return `${automation.schedule} (${automation.timezone})`;
+	const { events, filters } = automation.trigger;
+	return [`${events.join(", ")} on ${automation.resource}`, ...filters].join("; ");
+}
+/** Map an Automation summary to its MCP view. */
+function mcpAutomation(automation) {
+	const url = getDashboardTaskLink(automation.id);
+	return {
+		id: automation.id,
+		kind: automation.kind,
+		title: automation.title,
+		instruction: automation.instruction,
+		status: automation.status,
+		...automation.statusReason ? { statusReason: automation.statusReason } : void 0,
+		trigger: triggerText(automation),
+		...automation.kind === "scheduled" && automation.nextRunAt ? { nextRunAt: automation.nextRunAt } : void 0,
+		destination: automation.destination.label,
+		createdBy: automation.createdBy,
+		ownedByYou: automation.ownedByViewer,
+		...automation.lastRunAt ? { lastRunAt: automation.lastRunAt } : void 0,
+		...automation.lastRunStatus ? { lastRunStatus: automation.lastRunStatus } : void 0,
+		...automation.lastConversationId ? { lastConversationId: automation.lastConversationId } : void 0,
+		...url ? { url } : void 0
+	};
+}
+// src/api/mcp/tools/get-automation.ts
+const RECENT_RUN_LIMIT = 10;
+/** Register `getAutomation`, which reads one Automation and its recent runs. */
+function registerGetAutomationTool(server, { user }) {
+	server.registerTool("getAutomation", {
+		title: "Get automation",
+		description: `Get one automation and its ${RECENT_RUN_LIMIT} newest runs.`,
+		inputSchema: { id: z.string().min(1).describe("Automation id from searchAutomations.") },
+		outputSchema: {
+			automation: mcpAutomationSchema,
+			runs: z.array(z.object({
+				executedAt: z.string(),
+				status: automationExecutionStatusSchema,
+				error: z.string().optional(),
+				conversationId: z.string().optional()
+			}).strict())
+		},
+		annotations: {
+			destructiveHint: false,
+			idempotentHint: true,
+			openWorldHint: false,
+			readOnlyHint: true
+		}
+	}, async ({ id }) => {
+		try {
+			const list = await readViewerAutomationExecutions(user, id);
+			return mcpToolResult({
+				automation: mcpAutomation(list.automation),
+				runs: list.executions.slice(0, RECENT_RUN_LIMIT).map(({ conversationId, error, executedAt, status }) => ({
+					executedAt,
+					status,
+					...error ? { error } : void 0,
+					...conversationId ? { conversationId } : void 0
+				}))
+			});
+		} catch (error) {
+			if (error instanceof ViewerTaskNotFoundError) return mcpToolError("Automation not found.");
+			throw error;
+		}
+	});
+}
+// src/api/mcp/tools/get-conversation.ts
+const mcpBriefSchema = conversationBriefSchema.omit({
+	keywords: true,
+	record: true,
+	schemaVersion: true
+}).extend({ updatedAt: z.string() });
+function mcpBrief(brief, updatedAt) {
+	return {
+		summary: brief.summary,
+		intent: brief.intent,
+		outcome: brief.outcome,
+		decisions: brief.decisions,
+		openDecisions: brief.openDecisions,
+		facts: brief.facts,
+		links: brief.links,
+		updatedAt
+	};
+}
+const RECENT_EVENT_LIMIT = 100;
+/**
+* Register `getConversation`. It returns metadata, the Brief, and the last
+* Reply, not the whole transcript.
+*/
+function registerGetConversationTool(server, { user }) {
+	server.registerTool("getConversation", {
+		title: "Get conversation",
+		description: "Get one conversation: its metadata, its Brief (a summary of intent, outcome, and state), and the last assistant reply. Use listConversationMessages for the full transcript.",
+		inputSchema: { conversationId: mcpConversationIdSchema },
+		outputSchema: {
+			conversation: mcpConversationSchema,
+			brief: mcpBriefSchema.optional(),
+			lastReply: mcpMessageSchema.optional()
+		},
+		annotations: {
+			destructiveHint: false,
+			idempotentHint: true,
+			openWorldHint: false,
+			readOnlyHint: true
+		}
+	}, async ({ conversationId }) => {
+		const detail = await isConversationParticipant(user, conversationId) ? await readConversationDetail(conversationId, {
+			limit: RECENT_EVENT_LIMIT,
+			viewer: user
+		}) : void 0;
+		if (!detail) return mcpToolError("Conversation not found.");
+		const lastReply = mcpMessages(detail.events).filter((message) => message.role === "assistant").at(-1);
+		return mcpToolResult({
+			conversation: mcpConversation(detail),
+			...detail.brief ? { brief: mcpBrief(detail.brief.content, detail.brief.updatedAt) } : void 0,
+			...lastReply ? { lastReply } : void 0
+		});
+	});
+}
+// src/api/mcp/review-item.ts
+/**
+* Own the MCP view of one Review item, shared by the review item tools.
+*
+* MCP Review items stay read-only. An answer or dismissal sends a message to
+* the linked Conversations, which can start a Turn.
+*/
+/** MCP view of one Review item. Answers happen in Slack or the dashboard. */
+const mcpReviewItemSchema = z.object({
+	id: z.string(),
+	kind: z.enum(["notice", "action"]),
+	status: z.enum([
+		"open",
+		"done",
+		"dismissed"
+	]),
+	title: z.string(),
+	body: z.string(),
+	question: z.string().optional(),
+	assignees: z.array(z.string()).describe("Names or emails. Empty when anyone can act."),
+	canAct: z.boolean().describe("True when you can answer or dismiss it."),
+	conversationIds: z.array(z.string()),
+	subject: z.object({
+		id: z.string(),
+		title: z.string().optional(),
+		url: z.string().optional()
+	}).strict().optional(),
+	createdAt: z.string(),
+	updatedAt: z.string(),
+	url: z.string().optional().describe("Dashboard link to answer it.")
+}).strict();
+/** Map a Review item to its MCP view for one user. */
+function mcpReviewItem(item, userId) {
+	const url = getDashboardReviewItemLink(item.id);
+	return {
+		id: item.id,
+		kind: item.kind,
+		status: item.status,
+		title: item.title,
+		body: item.body,
+		...item.request ? { question: item.request.question } : void 0,
+		assignees: item.assignedToEveryone ? [] : item.assignees.map((person) => person.displayName ?? person.email),
+		canAct: canActOnReviewItem(item, userId),
+		conversationIds: item.conversationIds,
+		...item.subject ? { subject: {
+			id: item.subject.id,
+			...item.subject.title ? { title: item.subject.title } : void 0,
+			...item.subject.url ? { url: item.subject.url } : void 0
+		} } : void 0,
+		createdAt: item.createdAt.toISOString(),
+		updatedAt: item.updatedAt.toISOString(),
+		...url ? { url } : void 0
+	};
+}
+// src/api/mcp/tools/get-review-item.ts
+/** Register `getReviewItem`, which reads one Review item in any status. */
+function registerGetReviewItemTool(server, { user }) {
+	server.registerTool("getReviewItem", {
+		title: "Get review item",
+		description: "Get one review item, open or closed.",
+		inputSchema: { id: z.string().min(1).describe("Review item id from searchReviewItems.") },
+		outputSchema: { item: mcpReviewItemSchema },
+		annotations: {
+			destructiveHint: false,
+			idempotentHint: true,
+			openWorldHint: false,
+			readOnlyHint: true
+		}
+	}, async ({ id }) => {
+		try {
+			return mcpToolResult({ item: mcpReviewItem(await readReviewItemForUser(user, id), user.id) });
+		} catch (error) {
+			if (error instanceof ReviewItemActionError) return mcpToolError(error.message);
+			throw error;
+		}
+	});
+}
+// src/api/mcp/tools/search-automations.ts
+/** Register `searchAutomations`, which searches the Automations the user can see. */
+function registerSearchAutomationsTool(server, { user }) {
+	const listQuery = automationListQuerySchema.shape;
+	server.registerTool("searchAutomations", {
+		title: "Search automations",
+		description: "Search the automations that you can see, newest first. An automation is a saved instruction that runs on a schedule or on events.",
+		inputSchema: {
+			q: listQuery.q.describe("Text to search for in titles and instructions."),
+			scope: z.enum([
+				"all",
+				"mine",
+				"attention"
+			]).default("all").describe("`mine` lists the ones you created. `attention` lists the ones that are blocked, cannot run, or had a problem in their last run."),
+			state: listQuery.state.describe("Filter by state."),
+			page: listQuery.page.describe("Page number, from 1.")
+		},
+		outputSchema: {
+			automations: z.array(mcpAutomationSchema),
+			total: z.number().int().describe("Matches across every page.")
+		},
+		annotations: {
+			destructiveHint: false,
+			idempotentHint: true,
+			openWorldHint: false,
+			readOnlyHint: true
+		}
+	}, async ({ page, q, scope, state }) => {
+		const list = await readViewerAutomations(user, automationListQuerySchema.parse({
+			page,
+			q,
+			scope,
+			state
+		}));
+		return mcpToolResult({
+			automations: list.automations.map(mcpAutomation),
+			total: list.total
+		});
+	});
+}
+// src/api/mcp/tools/list-conversation-messages.ts
+const EVENT_SCAN_LIMIT = 200;
+/** Register `listConversationMessages`, which pages a transcript backward. */
+function registerListConversationMessagesTool(server, { user }) {
+	server.registerTool("listConversationMessages", {
+		title: "List conversation messages",
+		description: "List the user and assistant messages of one conversation, oldest first, ending with the newest. Tool calls are not included.",
+		inputSchema: {
+			conversationId: mcpConversationIdSchema,
+			before: z.string().min(1).max(1e3).optional().describe("`nextCursor` from an earlier call. Lists the messages before it."),
+			limit: z.number().int().min(1).max(50).default(10).describe("Maximum number of messages.")
+		},
+		outputSchema: {
+			messages: z.array(mcpMessageSchema),
+			nextCursor: z.string().optional().describe("Set when older messages can exist.")
+		},
+		annotations: {
+			destructiveHint: false,
+			idempotentHint: true,
+			openWorldHint: false,
+			readOnlyHint: true
+		}
+	}, async ({ before, conversationId, limit }) => {
+		const record = await isConversationParticipant(user, conversationId) ? await readConversationRecordFromSql(conversationId) : void 0;
+		if (!record) return mcpToolError("Conversation not found.");
+		const beforeSeq = before ? decodeConversationCursor({
+			conversationId,
+			cursor: before
+		})?.seq : void 0;
+		if (before && beforeSeq === void 0) return mcpToolError("The cursor is not valid. Omit `before` to read the newest messages.");
+		if (record.conversation.transcriptPurgedAtMs !== void 0) return mcpToolResult({ messages: [] });
+		const page = await readConversationEventPage(getSqlExecutor(), {
+			beforeSeq,
+			canExposePayload: true,
+			conversationId,
+			limit: EVENT_SCAN_LIMIT
+		});
+		const scanned = mcpMessages(page.events);
+		const messages = scanned.slice(-limit);
+		const olderSeq = scanned.length > messages.length ? messages[0]?.seq : page.previousSeq;
+		return mcpToolResult({
+			messages,
+			...olderSeq === void 0 ? void 0 : { nextCursor: encodeConversationCursor({
+				conversationId,
+				seq: olderSeq
+			}) }
+		});
+	});
+}
+// src/api/mcp/tools/search-conversations.ts
+/** Register `searchConversations`, which searches the Conversations of the user. */
+function registerSearchConversationsTool(server, { user }) {
 	const feedQuery = conversationFeedQuerySchema.shape;
-	server.registerTool("listConversations", {
-		title: "List conversations",
-		description: "List up to 50 of your conversations, newest activity first. Only conversations that you started or take part in are listed.",
+	server.registerTool("searchConversations", {
+		title: "Search conversations",
+		description: "Search your conversations and return up to 50, newest activity first. Only conversations that you started or take part in match.",
 		inputSchema: {
 			q: feedQuery.q.describe("Text to search for in titles and Briefs."),
-			status: feedQuery.status.describe("List conversations that you have not archived (default) or that you archived. A search ignores this filter.")
+			status: feedQuery.status.describe("Return conversations that you have not archived (default) or that you archived. A search ignores this filter.")
 		},
 		outputSchema: { conversations: z.array(mcpConversationSchema) },
 		annotations: {
-			readOnlyHint: true,
-			openWorldHint: false
+			destructiveHint: false,
+			idempotentHint: true,
+			openWorldHint: false,
+			readOnlyHint: true
 		}
 	}, async ({ q, status }) => {
-		const result = { conversations: (await readConversationFeed({
+		return mcpToolResult({ conversations: (await readConversationFeed({
 			q,
 			status,
 			viewer: user
-		})).conversations.map(mcpConversation) };
-		return {
-			content: [{
-				type: "text",
-				text: JSON.stringify(result)
-			}],
-			structuredContent: result
-		};
+		})).conversations.map(mcpConversation) });
+	});
+}
+// src/api/mcp/tools/search-review-items.ts
+/** Register `searchReviewItems`, which searches open Review items for the user. */
+function registerSearchReviewItemsTool(server, { user }) {
+	server.registerTool("searchReviewItems", {
+		title: "Search review items",
+		description: "Search the open review items that you can see, newest change first. A review item is a question or notice that waits for a person.",
+		inputSchema: {
+			q: z.string().trim().min(1).max(200).optional().describe("Words to find in the title or body."),
+			conversationId: z.string().min(1).optional().describe("Return only the items linked to this conversation."),
+			limit: z.number().int().min(1).max(50).default(20).describe("Maximum number of items.")
+		},
+		outputSchema: {
+			items: z.array(mcpReviewItemSchema),
+			truncated: z.boolean().describe("True when more items match.")
+		},
+		annotations: {
+			destructiveHint: false,
+			idempotentHint: true,
+			openWorldHint: false,
+			readOnlyHint: true
+		}
+	}, async ({ conversationId, limit, q }) => {
+		const items = await searchReviewItems(getDb(), reviewItemReaderForUser(user), {
+			...conversationId ? { conversationId } : void 0,
+			limit: limit + 1,
+			...q ? { query: q } : void 0,
+			statuses: ["open"]
+		});
+		return mcpToolResult({
+			items: items.slice(0, limit).map((item) => mcpReviewItem(item, user.id)),
+			truncated: items.length > limit
+		});
+	});
+}
+// src/api/mcp/tools/stop-conversation.ts
+/** Register `stopConversation`, which stops the active Turn. */
+function registerStopConversationTool(server, { queue, user }) {
+	server.registerTool("stopConversation", {
+		title: "Stop conversation",
+		description: "Stop the running turn of one of your conversations. Messages that wait for the turn are dropped. It starts no new work.",
+		inputSchema: { conversationId: mcpConversationIdSchema },
+		outputSchema: {
+			status: z.enum(["no_work", "requested"]).describe("`no_work` when nothing was running."),
+			droppedMessages: z.number().int()
+		},
+		annotations: {
+			destructiveHint: true,
+			idempotentHint: true,
+			openWorldHint: false,
+			readOnlyHint: false
+		}
+	}, async ({ conversationId }) => {
+		if (!await isConversationParticipant(user, conversationId)) return mcpToolError("Conversation not found.");
+		try {
+			const result = await stopConversationTurnForViewer(user, conversationId, { queue });
+			return mcpToolResult({
+				status: result.status,
+				droppedMessages: result.stoppedInboundMessageIds.length
+			});
+		} catch (error) {
+			return apiToolError(error);
+		}
 	});
 }
 // src/api/mcp/server.ts
@@ -5864,18 +6393,31 @@ function registerListConversationsTool(server, user) {
 * JSON. No MCP session or SSE stream outlives the request, so the route works
 * on any app instance and is not limited by the live-stream duration.
 */
-/** Build the MCP server for one authenticated user. */
-function createMcpServer(user) {
+/** The tools that each scope unlocks. A client sees only its granted tools. */
+const TOOLS_BY_SCOPE = {
+	"conversations:read": [
+		registerSearchConversationsTool,
+		registerGetConversationTool,
+		registerListConversationMessagesTool
+	],
+	"conversations:manage": [registerArchiveConversationTool, registerStopConversationTool],
+	"review_items:read": [registerSearchReviewItemsTool, registerGetReviewItemTool],
+	"automations:read": [registerSearchAutomationsTool, registerGetAutomationTool]
+};
+const INSTRUCTIONS = "Junior is a Slack agent. These tools read your Junior conversations, review items, and automations. They cannot send a message or start agent work. To ask Junior for work or to answer a review item, use the Slack or dashboard link in a result.";
+/** Build the MCP server for one authenticated user and granted scopes. */
+function createMcpServer(context, scopes) {
 	const server = new McpServer({
 		name: "junior",
 		version: JUNIOR_VERSION
-	});
-	registerListConversationsTool(server, user);
+	}, { instructions: INSTRUCTIONS });
+	for (const scope of scopes) for (const register of TOOLS_BY_SCOPE[scope]) register(server, context);
 	return server;
 }
 /** Answer one Streamable HTTP POST for an authenticated user. */
-async function handleMcpServerRequest(request, user) {
-	const server = createMcpServer(user);
+async function handleMcpServerRequest(request, args) {
+	const { scopes, ...context } = args;
+	const server = createMcpServer(context, scopes);
 	const transport = new WebStandardStreamableHTTPServerTransport({
 		enableJsonResponse: true,
 		sessionIdGenerator: void 0
@@ -5972,7 +6514,7 @@ function unauthorized(urls, sentToken) {
 		status: 401,
 		headers: {
 			"cache-control": "no-store",
-			"www-authenticate": `Bearer ${sentToken ? "error=\"invalid_token\", " : ""}resource_metadata="${urls.resourceMetadata}", scope="${MCP_SCOPE}"`
+			"www-authenticate": `Bearer ${sentToken ? "error=\"invalid_token\", " : ""}resource_metadata="${urls.resourceMetadata}", scope="${MCP_ALL_SCOPES}"`
 		}
 	});
 }
@@ -6001,18 +6543,22 @@ function createMcpHttpHandler(options) {
 	], MCP_PATH, async (c) => {
 		const requestUrls = urls(c.req.raw);
 		const token = bearerToken(c.req.raw);
-		const email = token ? await authenticateMcpAccessToken({
+		const grant = token ? await authenticateMcpAccessToken({
 			resource: requestUrls.resource,
 			state: options.state,
 			token
 		}) : void 0;
-		const user = email && isAllowedSignInEmail(email, options.allowedDomains) ? await resolveViewerUser(email) : void 0;
-		if (!user) return unauthorized(requestUrls, token !== void 0);
+		const user = grant && isAllowedSignInEmail(grant.email, options.allowedDomains) ? await resolveViewerUser(grant.email) : void 0;
+		if (!grant || !user) return unauthorized(requestUrls, token !== void 0);
 		if (c.req.method !== "POST") return new Response(null, {
 			status: 405,
 			headers: { allow: "POST" }
 		});
-		return await handleMcpServerRequest(c.req.raw, user);
+		return await handleMcpServerRequest(c.req.raw, {
+			queue: options.queue,
+			scopes: grant.scopes,
+			user
+		});
 	});
 	return app.fetch;
 }
@@ -6602,7 +7148,6 @@ async function createApp(options) {
 		setBotModelConfig(options ?? {});
 		setRuntimeLimits(options?.limits);
 		setSlackReactionConfig(options?.slack ?? {});
-		if (options?.slack?.crossActorMidRunMode) setCrossActorMidRunMode(options.slack.crossActorMidRunMode);
 		assertNoLegacyAllowedDomains(Object.keys(dashboard ?? {}));
 		allowedDomains = resolveAllowedDomains(options?.allowedDomains);
 		if (allowedDomains.length === 0) logWarn("app.allowed_domains.unset", { "app.reason": "allowedDomains is empty, so any Slack workspace member can use Junior" });
@@ -6750,6 +7295,7 @@ async function createApp(options) {
 			handleMcpRequest ??= createMcpHttpHandler({
 				allowedDomains,
 				baseURL: resolvePublicBaseURL(dashboard),
+				queue: conversationWorkQueue,
 				state: getMcpState()
 			});
 			return handleMcpRequest(c.req.raw);