Skip to content
- Slack sends an event to
/api/webhooks/slack.
- Junior validates and routes the event.
- Thread work is enqueued to
junior-thread-message.
/api/queue/callback processes queued work.- Agent turn runs with configured tools, loaded skills, and capability gates.
- If an authenticated command needs provider access, the runtime infers the required capability, fetches requester-bound credentials for that turn, and injects them at the host boundary.
- If OAuth is required, Junior sends the link privately to the requesting user and resumes the blocked request after the callback.
- Reply is posted back to the original Slack thread.
- Avoids long-running webhook request paths.
- Makes retries explicit and observable.
- Preserves thread execution invariants in background turns.
- Webhook ingress and queue callback are both required for production.
- Tool and credential usage is capability-gated, requester-bound, and turn-scoped.
- Loaded skill plugins determine which provider credentials can be injected at all.
- Failure states are logged and surfaced for operator recovery.