@sentry/junior-plugin-api 0.146.0 → 0.148.0

package/dist/context.d.ts

@@ -1,11 +1,12 @@
 import { z } from "zod";
 import type { ZodTypeAny } from "zod";
-import { destinationSchema, identitySchema, localActorSchema, platformSchema, actorSchema, slackActorSchema, systemActorSchema, sourceSchema, userSchema } from "./schemas";
+import { destinationSchema, identitySchema, webActorSchema, localActorSchema, platformSchema, actorSchema, slackActorSchema, systemActorSchema, sourceSchema, userSchema } from "./schemas";
 /** Runtime platform name without source or destination coordinates. */
 export type Platform = z.output<typeof platformSchema>;
 export type Actor = z.output<typeof actorSchema>;
 export type SlackActor = z.output<typeof slackActorSchema>;
 export type LocalActor = z.output<typeof localActorSchema>;
+export type WebActor = z.output<typeof webActorSchema>;
 export type SystemActor = z.output<typeof systemActorSchema>;
 export type Identity = z.output<typeof identitySchema>;
 export type User = z.output<typeof userSchema>;
@@ -16,6 +17,9 @@ export type SlackSource = Extract<Source, {
 export type LocalSource = Extract<Source, {
     platform: "local";
 }>;
+export type WebSource = Extract<Source, {
+    platform: "web";
+}>;
 export type SourceVisibility = Source["visibility"];
 export type Destination = z.output<typeof destinationSchema>;
 export type SlackDestination = Extract<Destination, {
@@ -85,7 +89,14 @@ export interface LocalInvocationContext extends BaseInvocationContext {
     /** Runtime-owned source where the invocation came from. */
     source: LocalSource;
 }
-export type InvocationContext = LocalInvocationContext | SlackInvocationContext;
+export interface WebInvocationContext extends BaseInvocationContext {
+    /** Existing conversation destination used for location and tool context. */
+    destination: Destination;
+    actor?: WebActor;
+    /** Runtime-owned dashboard/web source for this invocation. */
+    source: WebSource;
+}
+export type InvocationContext = LocalInvocationContext | SlackInvocationContext | WebInvocationContext;
 /** Build a normalized Slack source from runtime-owned Slack coordinates. */
 export declare function createSlackSource(input: {
     channelId: string;
@@ -97,6 +108,8 @@ export declare function createSlackSource(input: {
 }): SlackSource;
 /** Build a normalized local source from a local conversation id. */
 export declare function createLocalSource(conversationId: string): LocalSource;
+/** Build a normalized web/dashboard source from a conversation id. */
+export declare function createWebSource(conversationId: string, visibility?: SourceVisibility): WebSource;
 /** Return whether a source is private to a person or restricted group. */
 export declare function isPrivateSource(source: Source): boolean;
 /** Return the stable source identity used for idempotency and attribution. */

package/dist/credentials.d.ts

@@ -10,6 +10,8 @@ export declare const pluginAuthorizationSchema: z.ZodObject<{
 }, z.core.$strict>;
 /** Runtime schema for a provider account attached to stored OAuth tokens. */
 export declare const pluginProviderAccountSchema: z.ZodObject<{
+    displayName: z.ZodOptional<z.ZodString>;
+    handle: z.ZodOptional<z.ZodString>;
     id: z.ZodString;
     label: z.ZodOptional<z.ZodString>;
     url: z.ZodOptional<z.ZodString>;
@@ -17,6 +19,8 @@ export declare const pluginProviderAccountSchema: z.ZodObject<{
 /** Runtime schema for OAuth tokens stored by the host for plugin credentials. */
 export declare const pluginStoredTokensSchema: z.ZodObject<{
     account: z.ZodOptional<z.ZodObject<{
+        displayName: z.ZodOptional<z.ZodString>;
+        handle: z.ZodOptional<z.ZodString>;
         id: z.ZodString;
         label: z.ZodOptional<z.ZodString>;
         url: z.ZodOptional<z.ZodString>;
@@ -43,6 +47,8 @@ export declare const pluginCredentialHeaderTransformSchema: z.ZodObject<{
 /** Runtime schema for a short-lived plugin-issued credential lease. */
 export declare const pluginCredentialLeaseSchema: z.ZodObject<{
     account: z.ZodOptional<z.ZodObject<{
+        displayName: z.ZodOptional<z.ZodString>;
+        handle: z.ZodOptional<z.ZodString>;
         id: z.ZodString;
         label: z.ZodOptional<z.ZodString>;
         url: z.ZodOptional<z.ZodString>;
@@ -62,6 +68,8 @@ export declare const pluginCredentialLeaseSchema: z.ZodObject<{
 export declare const pluginCredentialResultSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     lease: z.ZodObject<{
         account: z.ZodOptional<z.ZodObject<{
+            displayName: z.ZodOptional<z.ZodString>;
+            handle: z.ZodOptional<z.ZodString>;
             id: z.ZodString;
             label: z.ZodOptional<z.ZodString>;
             url: z.ZodOptional<z.ZodString>;

package/dist/index.js

@@ -111,9 +111,16 @@ var localSourceSchema = z3.object({
   visibility: z3.literal("private"),
   conversationId: localConversationIdSchema
 }).strict();
+var webSourceSchema = z3.object({
+  platform: z3.literal("web"),
+  visibility: sourceVisibilitySchema,
+  // Web can continue any existing conversation id, including Slack roots.
+  conversationId: exactNonBlankStringSchema
+}).strict();
 var sourceSchema = z3.discriminatedUnion("platform", [
   slackSourceSchema,
-  localSourceSchema
+  localSourceSchema,
+  webSourceSchema
 ]);
 var pluginCredentialSubjectSchema = z3.discriminatedUnion(
   "allowedWhen",
@@ -146,6 +153,10 @@ var localActorSchema = z3.object({
   ...actorProfileSchema,
   platform: z3.literal("local")
 }).strict();
+var webActorSchema = z3.object({
+  ...actorProfileSchema,
+  platform: z3.literal("web")
+}).strict();
 var systemActorSchema = z3.object({
   platform: z3.literal("system"),
   name: exactActorUserIdSchema
@@ -153,6 +164,7 @@ var systemActorSchema = z3.object({
 var actorSchema = z3.discriminatedUnion("platform", [
   slackActorSchema,
   localActorSchema,
+  webActorSchema,
   systemActorSchema
 ]);
 var identitySchema = z3.object({
@@ -250,18 +262,29 @@ function createLocalSource(conversationId) {
     conversationId
   };
 }
+function createWebSource(conversationId, visibility = "public") {
+  return {
+    platform: "web",
+    visibility,
+    conversationId
+  };
+}
 function isPrivateSource(source) {
   return source.visibility === "private";
 }
 function getSourceKey(source) {
-  if (source.platform === "local") {
-    return source.conversationId;
-  }
-  const messageKey = source.threadTs ?? source.messageTs;
-  if (!messageKey) {
-    return void 0;
+  switch (source.platform) {
+    case "web":
+    case "local":
+      return source.conversationId;
+    case "slack": {
+      const messageKey = source.threadTs ?? source.messageTs;
+      if (!messageKey) {
+        return void 0;
+      }
+      return `slack:${source.teamId}:${source.channelId}:${messageKey}`;
+    }
   }
-  return `slack:${source.teamId}:${source.channelId}:${messageKey}`;
 }
 function isSlackDestination(destination) {
   return destination?.platform === "slack";
@@ -293,6 +316,24 @@ function definePromptContext(definition) {
 import { z as z5 } from "zod";
 var RESOURCE_EVENT_SUMMARY_MAX_LENGTH = 4e3;
 var RESOURCE_EVENT_TEXT_MAX_LENGTH = 8e3;
+var RESOURCE_EVENT_DATA_MAX_KEYS = 32;
+var RESOURCE_EVENT_DATA_MAX_JSON_BYTES = 4e3;
+var resourceEventDataSchema = z5.record(z5.string(), z5.unknown()).superRefine((value, context) => {
+  const keys = Object.keys(value);
+  if (keys.length > RESOURCE_EVENT_DATA_MAX_KEYS) {
+    context.addIssue({
+      code: "custom",
+      message: `Resource event data may include at most ${RESOURCE_EVENT_DATA_MAX_KEYS} keys.`
+    });
+  }
+  const jsonBytes = new TextEncoder().encode(JSON.stringify(value)).byteLength;
+  if (jsonBytes > RESOURCE_EVENT_DATA_MAX_JSON_BYTES) {
+    context.addIssue({
+      code: "custom",
+      message: `Resource event data may be at most ${RESOURCE_EVENT_DATA_MAX_JSON_BYTES} JSON bytes.`
+    });
+  }
+});
 var resourceEventTypeSchema = z5.string().regex(/^[a-z][a-z0-9_-]*(?:\.[a-z][a-z0-9_-]*)+$/).describe(
   "Canonical dotted event type, such as issue.closed or pull_request.review.changes_requested."
 );
@@ -374,6 +415,8 @@ var resourceEventInputSchema = z5.object({
   occurredAtMs: z5.number().finite(),
   terminal: z5.boolean().optional(),
   trustedSummary: z5.string().min(1).transform((value) => value.slice(0, RESOURCE_EVENT_SUMMARY_MAX_LENGTH)),
+  /** Trusted structured facts. Prefer ids and urls over long prose. */
+  data: resourceEventDataSchema.optional(),
   untrustedText: z5.string().transform((value) => value.slice(0, RESOURCE_EVENT_TEXT_MAX_LENGTH)).optional()
 }).strict();
 var resourceEventSchema = resourceEventInputSchema.extend({
@@ -562,6 +605,8 @@ var pluginAuthorizationSchema = z9.object({
   type: z9.literal("oauth")
 }).strict();
 var pluginProviderAccountSchema = z9.object({
+  displayName: nonBlankStringSchema.optional(),
+  handle: nonBlankStringSchema.optional(),
   id: nonBlankStringSchema,
   label: nonBlankStringSchema.optional(),
   url: nonBlankStringSchema.optional()
@@ -789,6 +834,8 @@ export {
   EgressPolicyDenied,
   PluginToolInputError,
   REQUIRED_TOOL_ANNOTATION_KEYS,
+  RESOURCE_EVENT_DATA_MAX_JSON_BYTES,
+  RESOURCE_EVENT_DATA_MAX_KEYS,
   RESOURCE_EVENT_SUMMARY_MAX_LENGTH,
   RESOURCE_EVENT_TEXT_MAX_LENGTH,
   actorSchema,
@@ -797,6 +844,7 @@ export {
   conversationEventPresentationSchema,
   createLocalSource,
   createSlackSource,
+  createWebSource,
   defineConversationEvent,
   defineJuniorPlugin,
   definePluginTool,
@@ -839,6 +887,7 @@ export {
   promptContextSchema,
   promptMessageSchema,
   replyAttributionSchema,
+  resourceEventDataSchema,
   resourceEventInputSchema,
   resourceEventSchema,
   resourceEventTypeSchema,
@@ -853,5 +902,7 @@ export {
   systemActorSchema,
   toolApprovalModeSchema,
   userSchema,
+  webActorSchema,
+  webSourceSchema,
   zodTool
 };

package/dist/resource-events.d.ts

@@ -1,6 +1,10 @@
 import { z } from "zod";
 export declare const RESOURCE_EVENT_SUMMARY_MAX_LENGTH = 4000;
 export declare const RESOURCE_EVENT_TEXT_MAX_LENGTH = 8000;
+export declare const RESOURCE_EVENT_DATA_MAX_KEYS = 32;
+export declare const RESOURCE_EVENT_DATA_MAX_JSON_BYTES = 4000;
+/** Small trusted facts from the plugin. The agent should not look these up again. */
+export declare const resourceEventDataSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
 /** Canonical dotted event type published and selected across plugins. */
 export declare const resourceEventTypeSchema: z.ZodString;
 export declare const resourceTypeSchema: z.ZodString;
@@ -38,8 +42,10 @@ export declare const resourceEventInputSchema: z.ZodObject<{
     occurredAtMs: z.ZodNumber;
     terminal: z.ZodOptional<z.ZodBoolean>;
     trustedSummary: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     untrustedText: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
 }, z.core.$strict>;
+export type ResourceEventData = z.output<typeof resourceEventDataSchema>;
 export type ResourceEventInput = z.output<typeof resourceEventInputSchema>;
 export declare const resourceEventSchema: z.ZodObject<{
     eventKey: z.ZodString;
@@ -48,6 +54,7 @@ export declare const resourceEventSchema: z.ZodObject<{
     occurredAtMs: z.ZodNumber;
     terminal: z.ZodOptional<z.ZodBoolean>;
     trustedSummary: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     untrustedText: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
     namespace: z.ZodString;
 }, z.core.$strict>;

package/dist/schemas.d.ts

@@ -53,6 +53,15 @@ export declare const localSourceSchema: z.ZodObject<{
     visibility: z.ZodLiteral<"private">;
     conversationId: z.ZodString;
 }, z.core.$strict>;
+/** Runtime-owned dashboard/web coordinates for the inbound invocation. */
+export declare const webSourceSchema: z.ZodObject<{
+    platform: z.ZodLiteral<"web">;
+    visibility: z.ZodEnum<{
+        public: "public";
+        private: "private";
+    }>;
+    conversationId: z.ZodString;
+}, z.core.$strict>;
 /** Runtime-owned provider-neutral coordinates for the inbound invocation. */
 export declare const sourceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     platform: z.ZodLiteral<"slack">;
@@ -68,6 +77,13 @@ export declare const sourceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     platform: z.ZodLiteral<"local">;
     visibility: z.ZodLiteral<"private">;
     conversationId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    platform: z.ZodLiteral<"web">;
+    visibility: z.ZodEnum<{
+        public: "public";
+        private: "private";
+    }>;
+    conversationId: z.ZodString;
 }, z.core.$strict>], "platform">;
 /** Stable user credential subject shape accepted from plugins. */
 export declare const pluginCredentialSubjectSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -95,6 +111,13 @@ export declare const localActorSchema: z.ZodObject<{
     userId: z.ZodString;
     userName: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
+export declare const webActorSchema: z.ZodObject<{
+    platform: z.ZodLiteral<"web">;
+    email: z.ZodOptional<z.ZodString>;
+    fullName: z.ZodOptional<z.ZodString>;
+    userId: z.ZodString;
+    userName: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
 export declare const systemActorSchema: z.ZodObject<{
     platform: z.ZodLiteral<"system">;
     name: z.ZodString;
@@ -113,6 +136,12 @@ export declare const actorSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     fullName: z.ZodOptional<z.ZodString>;
     userId: z.ZodString;
     userName: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    platform: z.ZodLiteral<"web">;
+    email: z.ZodOptional<z.ZodString>;
+    fullName: z.ZodOptional<z.ZodString>;
+    userId: z.ZodString;
+    userName: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>, z.ZodObject<{
     platform: z.ZodLiteral<"system">;
     name: z.ZodString;
@@ -187,5 +216,12 @@ export declare const dispatchOptionsSchema: z.ZodObject<{
         platform: z.ZodLiteral<"local">;
         visibility: z.ZodLiteral<"private">;
         conversationId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        platform: z.ZodLiteral<"web">;
+        visibility: z.ZodEnum<{
+            public: "public";
+            private: "private";
+        }>;
+        conversationId: z.ZodString;
     }, z.core.$strict>], "platform">;
 }, z.core.$strict>;

package/dist/tasks.d.ts

@@ -31,6 +31,12 @@ export declare const pluginRunTranscriptProvenanceSchema: z.ZodObject<{
         fullName: z.ZodOptional<z.ZodString>;
         userId: z.ZodString;
         userName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        platform: z.ZodLiteral<"web">;
+        email: z.ZodOptional<z.ZodString>;
+        fullName: z.ZodOptional<z.ZodString>;
+        userId: z.ZodString;
+        userName: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>, z.ZodObject<{
         platform: z.ZodLiteral<"system">;
         name: z.ZodString;
@@ -62,6 +68,12 @@ export declare const pluginRunTranscriptEntrySchema: z.ZodDiscriminatedUnion<[z.
             fullName: z.ZodOptional<z.ZodString>;
             userId: z.ZodString;
             userName: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            platform: z.ZodLiteral<"web">;
+            email: z.ZodOptional<z.ZodString>;
+            fullName: z.ZodOptional<z.ZodString>;
+            userId: z.ZodString;
+            userName: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>, z.ZodObject<{
             platform: z.ZodLiteral<"system">;
             name: z.ZodString;
@@ -100,6 +112,12 @@ export declare const pluginRunContextSchema: z.ZodObject<{
         fullName: z.ZodOptional<z.ZodString>;
         userId: z.ZodString;
         userName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        platform: z.ZodLiteral<"web">;
+        email: z.ZodOptional<z.ZodString>;
+        fullName: z.ZodOptional<z.ZodString>;
+        userId: z.ZodString;
+        userName: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>, z.ZodObject<{
         platform: z.ZodLiteral<"system">;
         name: z.ZodString;
@@ -117,6 +135,12 @@ export declare const pluginRunContextSchema: z.ZodObject<{
         fullName: z.ZodOptional<z.ZodString>;
         userId: z.ZodString;
         userName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        platform: z.ZodLiteral<"web">;
+        email: z.ZodOptional<z.ZodString>;
+        fullName: z.ZodOptional<z.ZodString>;
+        userId: z.ZodString;
+        userName: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>, z.ZodObject<{
         platform: z.ZodLiteral<"system">;
         name: z.ZodString;
@@ -136,6 +160,13 @@ export declare const pluginRunContextSchema: z.ZodObject<{
         platform: z.ZodLiteral<"local">;
         visibility: z.ZodLiteral<"private">;
         conversationId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        platform: z.ZodLiteral<"web">;
+        visibility: z.ZodEnum<{
+            public: "public";
+            private: "private";
+        }>;
+        conversationId: z.ZodString;
     }, z.core.$strict>], "platform">;
     transcript: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"message">;
@@ -162,6 +193,12 @@ export declare const pluginRunContextSchema: z.ZodObject<{
                 fullName: z.ZodOptional<z.ZodString>;
                 userId: z.ZodString;
                 userName: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                platform: z.ZodLiteral<"web">;
+                email: z.ZodOptional<z.ZodString>;
+                fullName: z.ZodOptional<z.ZodString>;
+                userId: z.ZodString;
+                userName: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>, z.ZodObject<{
                 platform: z.ZodLiteral<"system">;
                 name: z.ZodString;

package/dist/tools.d.ts

@@ -1,4 +1,4 @@
-import type { PluginContext, LocalInvocationContext, PluginEmbedder, Identity, PluginModel, Actor, SlackInvocationContext, User } from "./context";
+import type { Actor, Identity, LocalInvocationContext, PluginContext, PluginEmbedder, PluginModel, SlackInvocationContext, User, WebInvocationContext } from "./context";
 import type { PluginCredentialSubject } from "./credentials";
 import type { PluginAnnotations } from "./annotations";
 import type { SlackConversationLink } from "./operations";
@@ -285,7 +285,7 @@ interface BaseToolRegistrationHookContext extends PluginContext {
     /**
      * Opaque Junior conversation/session identity for this turn.
      * Interactive Slack turns use `slack:{channelId}:{threadTs}`.
-     * Scheduled/API turns use an internal id such as `agent-dispatch:{id}`.
+     * Scheduled/web turns use an internal id such as `agent-dispatch:{id}`.
      * Do not parse as Slack unless the value starts with `slack:`.
      */
     conversationId?: string;
@@ -313,5 +313,8 @@ interface SlackToolRegistrationContext extends BaseToolRegistrationHookContext,
 interface LocalToolRegistrationContext extends BaseToolRegistrationHookContext, LocalInvocationContext {
     slack?: never;
 }
-export type ToolRegistrationHookContext = LocalToolRegistrationContext | SlackToolRegistrationContext;
+interface WebToolRegistrationContext extends BaseToolRegistrationHookContext, WebInvocationContext {
+    slack?: never;
+}
+export type ToolRegistrationHookContext = LocalToolRegistrationContext | SlackToolRegistrationContext | WebToolRegistrationContext;
 export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sentry/junior-plugin-api",
-  "version": "0.146.0",
+  "version": "0.148.0",
   "private": false,
   "publishConfig": {
     "access": "public"

package/src/context.ts

@@ -3,6 +3,7 @@ import type { ZodTypeAny } from "zod";
 import {
   destinationSchema,
   identitySchema,
+  webActorSchema,
   localActorSchema,
   platformSchema,
   actorSchema,
@@ -17,12 +18,14 @@ export type Platform = z.output<typeof platformSchema>;
 export type Actor = z.output<typeof actorSchema>;
 export type SlackActor = z.output<typeof slackActorSchema>;
 export type LocalActor = z.output<typeof localActorSchema>;
+export type WebActor = z.output<typeof webActorSchema>;
 export type SystemActor = z.output<typeof systemActorSchema>;
 export type Identity = z.output<typeof identitySchema>;
 export type User = z.output<typeof userSchema>;
 export type Source = z.output<typeof sourceSchema>;
 export type SlackSource = Extract<Source, { platform: "slack" }>;
 export type LocalSource = Extract<Source, { platform: "local" }>;
+export type WebSource = Extract<Source, { platform: "web" }>;
 export type SourceVisibility = Source["visibility"];
 
 export type Destination = z.output<typeof destinationSchema>;
@@ -98,7 +101,18 @@ export interface LocalInvocationContext extends BaseInvocationContext {
   source: LocalSource;
 }
 
-export type InvocationContext = LocalInvocationContext | SlackInvocationContext;
+export interface WebInvocationContext extends BaseInvocationContext {
+  /** Existing conversation destination used for location and tool context. */
+  destination: Destination;
+  actor?: WebActor;
+  /** Runtime-owned dashboard/web source for this invocation. */
+  source: WebSource;
+}
+
+export type InvocationContext =
+  | LocalInvocationContext
+  | SlackInvocationContext
+  | WebInvocationContext;
 
 /** Build a normalized Slack source from runtime-owned Slack coordinates. */
 export function createSlackSource(input: {
@@ -128,6 +142,18 @@ export function createLocalSource(conversationId: string): LocalSource {
   };
 }
 
+/** Build a normalized web/dashboard source from a conversation id. */
+export function createWebSource(
+  conversationId: string,
+  visibility: SourceVisibility = "public",
+): WebSource {
+  return {
+    platform: "web",
+    visibility,
+    conversationId,
+  };
+}
+
 /** Return whether a source is private to a person or restricted group. */
 export function isPrivateSource(source: Source): boolean {
   return source.visibility === "private";
@@ -135,14 +161,18 @@ export function isPrivateSource(source: Source): boolean {
 
 /** Return the stable source identity used for idempotency and attribution. */
 export function getSourceKey(source: Source): string | undefined {
-  if (source.platform === "local") {
-    return source.conversationId;
-  }
-  const messageKey = source.threadTs ?? source.messageTs;
-  if (!messageKey) {
-    return undefined;
+  switch (source.platform) {
+    case "web":
+    case "local":
+      return source.conversationId;
+    case "slack": {
+      const messageKey = source.threadTs ?? source.messageTs;
+      if (!messageKey) {
+        return undefined;
+      }
+      return `slack:${source.teamId}:${source.channelId}:${messageKey}`;
+    }
   }
-  return `slack:${source.teamId}:${source.channelId}:${messageKey}`;
 }
 
 /** Narrow a runtime destination to the Slack-specific address shape. */

package/src/credentials.ts

@@ -21,6 +21,8 @@ export const pluginAuthorizationSchema = z
 /** Runtime schema for a provider account attached to stored OAuth tokens. */
 export const pluginProviderAccountSchema = z
   .object({
+    displayName: nonBlankStringSchema.optional(),
+    handle: nonBlankStringSchema.optional(),
     id: nonBlankStringSchema,
     label: nonBlankStringSchema.optional(),
     url: nonBlankStringSchema.optional(),

package/src/resource-events.ts

@@ -2,6 +2,28 @@ import { z } from "zod";
 
 export const RESOURCE_EVENT_SUMMARY_MAX_LENGTH = 4_000;
 export const RESOURCE_EVENT_TEXT_MAX_LENGTH = 8_000;
+export const RESOURCE_EVENT_DATA_MAX_KEYS = 32;
+export const RESOURCE_EVENT_DATA_MAX_JSON_BYTES = 4_000;
+
+/** Small trusted facts from the plugin. The agent should not look these up again. */
+export const resourceEventDataSchema = z
+  .record(z.string(), z.unknown())
+  .superRefine((value, context) => {
+    const keys = Object.keys(value);
+    if (keys.length > RESOURCE_EVENT_DATA_MAX_KEYS) {
+      context.addIssue({
+        code: "custom",
+        message: `Resource event data may include at most ${RESOURCE_EVENT_DATA_MAX_KEYS} keys.`,
+      });
+    }
+    const jsonBytes = new TextEncoder().encode(JSON.stringify(value)).byteLength;
+    if (jsonBytes > RESOURCE_EVENT_DATA_MAX_JSON_BYTES) {
+      context.addIssue({
+        code: "custom",
+        message: `Resource event data may be at most ${RESOURCE_EVENT_DATA_MAX_JSON_BYTES} JSON bytes.`,
+      });
+    }
+  });
 
 /** Canonical dotted event type published and selected across plugins. */
 export const resourceEventTypeSchema = z
@@ -124,6 +146,8 @@ export const resourceEventInputSchema = z
       .string()
       .min(1)
       .transform((value) => value.slice(0, RESOURCE_EVENT_SUMMARY_MAX_LENGTH)),
+    /** Trusted structured facts. Prefer ids and urls over long prose. */
+    data: resourceEventDataSchema.optional(),
     untrustedText: z
       .string()
       .transform((value) => value.slice(0, RESOURCE_EVENT_TEXT_MAX_LENGTH))
@@ -131,6 +155,7 @@ export const resourceEventInputSchema = z
   })
   .strict();
 
+export type ResourceEventData = z.output<typeof resourceEventDataSchema>;
 export type ResourceEventInput = z.output<typeof resourceEventInputSchema>;
 
 export const resourceEventSchema = resourceEventInputSchema.extend({

package/src/schemas.ts

@@ -71,10 +71,21 @@ export const localSourceSchema = z
   })
   .strict();
 
+/** Runtime-owned dashboard/web coordinates for the inbound invocation. */
+export const webSourceSchema = z
+  .object({
+    platform: z.literal("web"),
+    visibility: sourceVisibilitySchema,
+    // Web can continue any existing conversation id, including Slack roots.
+    conversationId: exactNonBlankStringSchema,
+  })
+  .strict();
+
 /** Runtime-owned provider-neutral coordinates for the inbound invocation. */
 export const sourceSchema = z.discriminatedUnion("platform", [
   slackSourceSchema,
   localSourceSchema,
+  webSourceSchema,
 ]);
 
 /** Stable user credential subject shape accepted from plugins. */
@@ -122,6 +133,13 @@ export const localActorSchema = z
   })
   .strict();
 
+export const webActorSchema = z
+  .object({
+    ...actorProfileSchema,
+    platform: z.literal("web"),
+  })
+  .strict();
+
 export const systemActorSchema = z
   .object({
     platform: z.literal("system"),
@@ -133,6 +151,7 @@ export const systemActorSchema = z
 export const actorSchema = z.discriminatedUnion("platform", [
   slackActorSchema,
   localActorSchema,
+  webActorSchema,
   systemActorSchema,
 ]);
 

package/src/tools.ts

@@ -1,12 +1,13 @@
 import type {
-  PluginContext,
+  Actor,
+  Identity,
   LocalInvocationContext,
+  PluginContext,
   PluginEmbedder,
-  Identity,
   PluginModel,
-  Actor,
   SlackInvocationContext,
   User,
+  WebInvocationContext,
 } from "./context";
 import type { PluginCredentialSubject } from "./credentials";
 import type { PluginAnnotations } from "./annotations";
@@ -514,7 +515,7 @@ interface BaseToolRegistrationHookContext extends PluginContext {
   /**
    * Opaque Junior conversation/session identity for this turn.
    * Interactive Slack turns use `slack:{channelId}:{threadTs}`.
-   * Scheduled/API turns use an internal id such as `agent-dispatch:{id}`.
+   * Scheduled/web turns use an internal id such as `agent-dispatch:{id}`.
    * Do not parse as Slack unless the value starts with `slack:`.
    */
   conversationId?: string;
@@ -544,6 +545,12 @@ interface LocalToolRegistrationContext
   slack?: never;
 }
 
+interface WebToolRegistrationContext
+  extends BaseToolRegistrationHookContext, WebInvocationContext {
+  slack?: never;
+}
+
 export type ToolRegistrationHookContext =
   | LocalToolRegistrationContext
-  | SlackToolRegistrationContext;
+  | SlackToolRegistrationContext
+  | WebToolRegistrationContext;