@sentry/junior-plugin-api 0.90.0 → 0.92.0

package/dist/context.d.ts

@@ -1,11 +1,12 @@
 import { z } from "zod";
 import type { ZodTypeAny } from "zod";
-import { destinationSchema, localRequesterSchema, platformSchema, requesterSchema, slackRequesterSchema, sourceSchema } from "./schemas";
+import { destinationSchema, localActorSchema, platformSchema, actorSchema, slackActorSchema, systemActorSchema, sourceSchema } from "./schemas";
 /** Runtime platform name without source or destination coordinates. */
 export type Platform = z.output<typeof platformSchema>;
-export type Requester = z.output<typeof requesterSchema>;
-export type SlackRequester = z.output<typeof slackRequesterSchema>;
-export type LocalRequester = z.output<typeof localRequesterSchema>;
+export type Actor = z.output<typeof actorSchema>;
+export type SlackActor = z.output<typeof slackActorSchema>;
+export type LocalActor = z.output<typeof localActorSchema>;
+export type SystemActor = z.output<typeof systemActorSchema>;
 export type Source = z.output<typeof sourceSchema>;
 export type SlackSource = Extract<Source, {
     platform: "slack";
@@ -67,14 +68,14 @@ interface BaseInvocationContext {
 export interface SlackInvocationContext extends BaseInvocationContext {
     /** Runtime-owned default outbound destination for this invocation. */
     destination: SlackDestination;
-    requester?: SlackRequester;
+    actor?: SlackActor;
     /** Runtime-owned source where the invocation came from. */
     source: SlackSource;
 }
 export interface LocalInvocationContext extends BaseInvocationContext {
     /** Runtime-owned default outbound destination for this invocation. */
     destination: LocalDestination;
-    requester?: LocalRequester;
+    actor?: LocalActor;
     /** Runtime-owned source where the invocation came from. */
     source: LocalSource;
 }

package/dist/credentials.d.ts

@@ -141,8 +141,8 @@ export type PluginCredentialHeaderTransform = z.output<typeof pluginCredentialHe
 export type PluginCredentialLease = z.output<typeof pluginCredentialLeaseSchema>;
 export type PluginCredentialResult = z.output<typeof pluginCredentialResultSchema>;
 export type PluginCredentialActor = {
-    type: "system";
-    id: string;
+    platform: "system";
+    name: string;
 } | {
     type: "user";
     userId: string;

package/dist/index.js

@@ -42,24 +42,29 @@ var pluginCredentialSubjectSchema = z.object({
   userId: exactActorUserIdSchema,
   allowedWhen: z.literal("private-direct-conversation")
 }).strict();
-var requesterProfileSchema = {
+var actorProfileSchema = {
   email: nonBlankStringSchema.optional(),
   fullName: nonBlankStringSchema.optional(),
   userId: exactActorUserIdSchema,
   userName: nonBlankStringSchema.optional()
 };
-var slackRequesterSchema = z.object({
-  ...requesterProfileSchema,
+var slackActorSchema = z.object({
+  ...actorProfileSchema,
   platform: z.literal("slack"),
   teamId: slackTeamIdSchema
 }).strict();
-var localRequesterSchema = z.object({
-  ...requesterProfileSchema,
+var localActorSchema = z.object({
+  ...actorProfileSchema,
   platform: z.literal("local")
 }).strict();
-var requesterSchema = z.discriminatedUnion("platform", [
-  slackRequesterSchema,
-  localRequesterSchema
+var systemActorSchema = z.object({
+  platform: z.literal("system"),
+  name: exactActorUserIdSchema
+}).strict();
+var actorSchema = z.discriminatedUnion("platform", [
+  slackActorSchema,
+  localActorSchema,
+  systemActorSchema
 ]);
 var dispatchMetadataSchema = z.record(z.string(), z.string()).superRefine((metadata, ctx) => {
   const entries = Object.entries(metadata);
@@ -172,11 +177,17 @@ var subscribableResourceSchema = z3.object({
 
 // src/tasks.ts
 import { z as z4 } from "zod";
+var pluginRunTranscriptProvenanceSchema = z4.object({
+  authority: z4.enum(["instruction", "context"]),
+  actor: actorSchema.optional()
+}).strict();
 var pluginRunTranscriptEntrySchema = z4.discriminatedUnion("type", [
   z4.object({
     type: z4.literal("message"),
     role: z4.enum(["user", "assistant"]),
-    text: z4.string().min(1)
+    text: z4.string().min(1),
+    provenance: pluginRunTranscriptProvenanceSchema.optional(),
+    isRunActor: z4.boolean().optional()
   }).strict(),
   z4.object({
     type: z4.literal("toolResult"),
@@ -189,7 +200,20 @@ var pluginRunContextSchema = z4.object({
   completedAtMs: z4.number().finite(),
   conversationId: z4.string().min(1),
   destination: destinationSchema,
-  requester: requesterSchema.optional(),
+  /**
+   * All distinct actors annotated on this run's committed instruction-authority
+   * messages, in first-seen order. Attribution provenance only, never an
+   * authority source: a plugin must not treat membership here as credential,
+   * subject, or scope ownership. Derived from full-run provenance, so it can
+   * exceed the actors visible in the transcript slice. Usually `[run.actor]`;
+   * possibly empty for system runs with no human instructions.
+   */
+  actors: z4.array(actorSchema),
+  /**
+   * The single actor this run executes as. Absent only for actor-less legacy
+   * system records, so authority-sensitive plugins must fail closed.
+   */
+  actor: actorSchema.optional(),
   runId: z4.string().min(1),
   source: sourceSchema,
   transcript: z4.array(pluginRunTranscriptEntrySchema)
@@ -409,6 +433,7 @@ export {
   EgressAuthRequired,
   EgressPolicyDenied,
   PluginToolInputError,
+  actorSchema,
   createLocalSource,
   createSlackSource,
   defineJuniorPlugin,
@@ -418,8 +443,8 @@ export {
   getSourceKey,
   isPrivateSource,
   isSlackDestination,
+  localActorSchema,
   localDestinationSchema,
-  localRequesterSchema,
   localSourceSchema,
   nonBlankStringSchema,
   platformSchema,
@@ -433,16 +458,17 @@ export {
   pluginProviderAccountSchema,
   pluginRunContextSchema,
   pluginRunTranscriptEntrySchema,
+  pluginRunTranscriptProvenanceSchema,
   pluginStoredTokensSchema,
   pluginToolContinuationSchema,
   pluginToolErrorSchema,
   pluginToolResultSchema,
   promptMessageSchema,
-  requesterSchema,
+  slackActorSchema,
   slackDestinationSchema,
-  slackRequesterSchema,
   slackSourceSchema,
   sourceSchema,
   sourceTypeSchema,
-  subscribableResourceSchema
+  subscribableResourceSchema,
+  systemActorSchema
 };

package/dist/prompt.d.ts

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import type { Destination, Platform, PluginContext, PluginEmbedder, Requester, Source } from "./context";
+import type { Destination, Platform, PluginContext, PluginEmbedder, Actor, Source } from "./context";
 import type { PluginState } from "./state";
 export declare const promptMessageSchema: z.ZodObject<{
     text: z.ZodString;
@@ -15,7 +15,7 @@ export type UserPromptContext = Pick<PluginContext, "db" | "log" | "plugin"> & {
     conversationId?: string;
     destination: Destination;
     embedder: PluginEmbedder;
-    requester?: Requester;
+    actor?: Actor;
     source: Source;
     state: PluginState;
     text: string;

package/dist/schemas.d.ts

@@ -70,7 +70,7 @@ export declare const pluginCredentialSubjectSchema: z.ZodObject<{
     userId: z.ZodString;
     allowedWhen: z.ZodLiteral<"private-direct-conversation">;
 }, z.core.$strict>;
-export declare const slackRequesterSchema: z.ZodObject<{
+export declare const slackActorSchema: z.ZodObject<{
     platform: z.ZodLiteral<"slack">;
     teamId: z.ZodString;
     email: z.ZodOptional<z.ZodString>;
@@ -78,15 +78,19 @@ export declare const slackRequesterSchema: z.ZodObject<{
     userId: z.ZodString;
     userName: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
-export declare const localRequesterSchema: z.ZodObject<{
+export declare const localActorSchema: z.ZodObject<{
     platform: z.ZodLiteral<"local">;
     email: z.ZodOptional<z.ZodString>;
     fullName: z.ZodOptional<z.ZodString>;
     userId: z.ZodString;
     userName: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
-/** Runtime-provided requester identity visible to plugin hooks. */
-export declare const requesterSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+export declare const systemActorSchema: z.ZodObject<{
+    platform: z.ZodLiteral<"system">;
+    name: z.ZodString;
+}, z.core.$strict>;
+/** Runtime-provided actor identity visible to plugin hooks. */
+export declare const actorSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     platform: z.ZodLiteral<"slack">;
     teamId: z.ZodString;
     email: z.ZodOptional<z.ZodString>;
@@ -99,6 +103,9 @@ export declare const requesterSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     fullName: z.ZodOptional<z.ZodString>;
     userId: z.ZodString;
     userName: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    platform: z.ZodLiteral<"system">;
+    name: z.ZodString;
 }, z.core.$strict>], "platform">;
 /** Plugin dispatch request accepted by Junior core. */
 export declare const dispatchOptionsSchema: z.ZodObject<{

package/dist/tasks.d.ts

@@ -7,6 +7,34 @@
 import { z } from "zod";
 import type { PluginContext, PluginEmbedder, PluginModel } from "./context";
 import type { PluginState } from "./state";
+/**
+ * Runtime-owned provenance for a transcript message: whether it is a durable
+ * instruction or ambient context, plus the actor identity when known. Missing
+ * provenance on an entry means unattributed context.
+ */
+export declare const pluginRunTranscriptProvenanceSchema: z.ZodObject<{
+    authority: z.ZodEnum<{
+        instruction: "instruction";
+        context: "context";
+    }>;
+    actor: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        platform: z.ZodLiteral<"slack">;
+        teamId: z.ZodString;
+        email: z.ZodOptional<z.ZodString>;
+        fullName: z.ZodOptional<z.ZodString>;
+        userId: z.ZodString;
+        userName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        platform: z.ZodLiteral<"local">;
+        email: z.ZodOptional<z.ZodString>;
+        fullName: z.ZodOptional<z.ZodString>;
+        userId: z.ZodString;
+        userName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        platform: z.ZodLiteral<"system">;
+        name: z.ZodString;
+    }, z.core.$strict>], "platform">>;
+}, z.core.$strict>;
 /** One normalized transcript entry from the completed run exposed to plugin tasks. */
 export declare const pluginRunTranscriptEntrySchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     type: z.ZodLiteral<"message">;
@@ -15,12 +43,37 @@ export declare const pluginRunTranscriptEntrySchema: z.ZodDiscriminatedUnion<[z.
         assistant: "assistant";
     }>;
     text: z.ZodString;
+    provenance: z.ZodOptional<z.ZodObject<{
+        authority: z.ZodEnum<{
+            instruction: "instruction";
+            context: "context";
+        }>;
+        actor: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            platform: z.ZodLiteral<"slack">;
+            teamId: z.ZodString;
+            email: z.ZodOptional<z.ZodString>;
+            fullName: z.ZodOptional<z.ZodString>;
+            userId: z.ZodString;
+            userName: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            platform: z.ZodLiteral<"local">;
+            email: z.ZodOptional<z.ZodString>;
+            fullName: z.ZodOptional<z.ZodString>;
+            userId: z.ZodString;
+            userName: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            platform: z.ZodLiteral<"system">;
+            name: z.ZodString;
+        }, z.core.$strict>], "platform">>;
+    }, z.core.$strict>>;
+    isRunActor: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strict>, z.ZodObject<{
     type: z.ZodLiteral<"toolResult">;
     toolName: z.ZodString;
     isError: z.ZodBoolean;
     text: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>], "type">;
+export type PluginRunTranscriptProvenance = z.output<typeof pluginRunTranscriptProvenanceSchema>;
 /** Runtime-owned completed-run projection exposed to plugin tasks. */
 export declare const pluginRunContextSchema: z.ZodObject<{
     completedAtMs: z.ZodNumber;
@@ -33,7 +86,7 @@ export declare const pluginRunContextSchema: z.ZodObject<{
         platform: z.ZodLiteral<"local">;
         conversationId: z.ZodString;
     }, z.core.$strict>], "platform">;
-    requester: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+    actors: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
         platform: z.ZodLiteral<"slack">;
         teamId: z.ZodString;
         email: z.ZodOptional<z.ZodString>;
@@ -46,6 +99,26 @@ export declare const pluginRunContextSchema: z.ZodObject<{
         fullName: z.ZodOptional<z.ZodString>;
         userId: z.ZodString;
         userName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        platform: z.ZodLiteral<"system">;
+        name: z.ZodString;
+    }, z.core.$strict>], "platform">>;
+    actor: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        platform: z.ZodLiteral<"slack">;
+        teamId: z.ZodString;
+        email: z.ZodOptional<z.ZodString>;
+        fullName: z.ZodOptional<z.ZodString>;
+        userId: z.ZodString;
+        userName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        platform: z.ZodLiteral<"local">;
+        email: z.ZodOptional<z.ZodString>;
+        fullName: z.ZodOptional<z.ZodString>;
+        userId: z.ZodString;
+        userName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        platform: z.ZodLiteral<"system">;
+        name: z.ZodString;
     }, z.core.$strict>], "platform">>;
     runId: z.ZodString;
     source: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -70,6 +143,30 @@ export declare const pluginRunContextSchema: z.ZodObject<{
             assistant: "assistant";
         }>;
         text: z.ZodString;
+        provenance: z.ZodOptional<z.ZodObject<{
+            authority: z.ZodEnum<{
+                instruction: "instruction";
+                context: "context";
+            }>;
+            actor: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                platform: z.ZodLiteral<"slack">;
+                teamId: z.ZodString;
+                email: z.ZodOptional<z.ZodString>;
+                fullName: z.ZodOptional<z.ZodString>;
+                userId: z.ZodString;
+                userName: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                platform: z.ZodLiteral<"local">;
+                email: z.ZodOptional<z.ZodString>;
+                fullName: z.ZodOptional<z.ZodString>;
+                userId: z.ZodString;
+                userName: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>, z.ZodObject<{
+                platform: z.ZodLiteral<"system">;
+                name: z.ZodString;
+            }, z.core.$strict>], "platform">>;
+        }, z.core.$strict>>;
+        isRunActor: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"toolResult">;
         toolName: z.ZodString;

package/dist/tools.d.ts

@@ -1,4 +1,4 @@
-import type { PluginContext, LocalInvocationContext, PluginEmbedder, PluginModel, Requester, SlackInvocationContext } from "./context";
+import type { PluginContext, LocalInvocationContext, PluginEmbedder, PluginModel, Actor, SlackInvocationContext } from "./context";
 import type { PluginCredentialSubject } from "./credentials";
 import type { PluginState } from "./state";
 import { z, type ZodType, type ZodTypeAny } from "zod";
@@ -52,13 +52,13 @@ export interface PluginEgress {
     }): Promise<Response>;
 }
 export interface SandboxPrepareHookContext extends PluginContext {
-    requester?: Requester;
+    actor?: Actor;
     sandbox: PluginSandbox;
 }
 export interface BeforeToolExecuteHookContext extends PluginContext {
     decision: PluginDecision;
     env: PluginEnv;
-    requester?: Requester;
+    actor?: Actor;
     tool: {
         input: Record<string, unknown>;
         name: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sentry/junior-plugin-api",
-  "version": "0.90.0",
+  "version": "0.92.0",
   "private": false,
   "publishConfig": {
     "access": "public"

package/src/context.ts

@@ -2,18 +2,20 @@ import { z } from "zod";
 import type { ZodTypeAny } from "zod";
 import {
   destinationSchema,
-  localRequesterSchema,
+  localActorSchema,
   platformSchema,
-  requesterSchema,
-  slackRequesterSchema,
+  actorSchema,
+  slackActorSchema,
+  systemActorSchema,
   sourceSchema,
 } from "./schemas";
 
 /** Runtime platform name without source or destination coordinates. */
 export type Platform = z.output<typeof platformSchema>;
-export type Requester = z.output<typeof requesterSchema>;
-export type SlackRequester = z.output<typeof slackRequesterSchema>;
-export type LocalRequester = z.output<typeof localRequesterSchema>;
+export type Actor = z.output<typeof actorSchema>;
+export type SlackActor = z.output<typeof slackActorSchema>;
+export type LocalActor = z.output<typeof localActorSchema>;
+export type SystemActor = z.output<typeof systemActorSchema>;
 export type Source = z.output<typeof sourceSchema>;
 export type SlackSource = Extract<Source, { platform: "slack" }>;
 export type LocalSource = Extract<Source, { platform: "local" }>;
@@ -73,7 +75,7 @@ interface BaseInvocationContext {
 export interface SlackInvocationContext extends BaseInvocationContext {
   /** Runtime-owned default outbound destination for this invocation. */
   destination: SlackDestination;
-  requester?: SlackRequester;
+  actor?: SlackActor;
   /** Runtime-owned source where the invocation came from. */
   source: SlackSource;
 }
@@ -81,7 +83,7 @@ export interface SlackInvocationContext extends BaseInvocationContext {
 export interface LocalInvocationContext extends BaseInvocationContext {
   /** Runtime-owned default outbound destination for this invocation. */
   destination: LocalDestination;
-  requester?: LocalRequester;
+  actor?: LocalActor;
   /** Runtime-owned source where the invocation came from. */
   source: LocalSource;
 }

package/src/credentials.ts

@@ -178,8 +178,8 @@ export type PluginCredentialResult = z.output<
 
 export type PluginCredentialActor =
   | {
-      type: "system";
-      id: string;
+      platform: "system";
+      name: string;
     }
   | {
       type: "user";

package/src/prompt.ts

@@ -4,7 +4,7 @@ import type {
   Platform,
   PluginContext,
   PluginEmbedder,
-  Requester,
+  Actor,
   Source,
 } from "./context";
 import type { PluginState } from "./state";
@@ -31,7 +31,7 @@ export type UserPromptContext = Pick<PluginContext, "db" | "log" | "plugin"> & {
   conversationId?: string;
   destination: Destination;
   embedder: PluginEmbedder;
-  requester?: Requester;
+  actor?: Actor;
   source: Source;
   state: PluginState;
   text: string;

package/src/schemas.ts

@@ -80,33 +80,41 @@ export const pluginCredentialSubjectSchema = z
   })
   .strict();
 
-/** Shared exact actor profile fields for platform-scoped requesters. */
-const requesterProfileSchema = {
+/** Shared exact actor profile fields for platform-scoped actors. */
+const actorProfileSchema = {
   email: nonBlankStringSchema.optional(),
   fullName: nonBlankStringSchema.optional(),
   userId: exactActorUserIdSchema,
   userName: nonBlankStringSchema.optional(),
 };
 
-export const slackRequesterSchema = z
+export const slackActorSchema = z
   .object({
-    ...requesterProfileSchema,
+    ...actorProfileSchema,
     platform: z.literal("slack"),
     teamId: slackTeamIdSchema,
   })
   .strict();
 
-export const localRequesterSchema = z
+export const localActorSchema = z
   .object({
-    ...requesterProfileSchema,
+    ...actorProfileSchema,
     platform: z.literal("local"),
   })
   .strict();
 
-/** Runtime-provided requester identity visible to plugin hooks. */
-export const requesterSchema = z.discriminatedUnion("platform", [
-  slackRequesterSchema,
-  localRequesterSchema,
+export const systemActorSchema = z
+  .object({
+    platform: z.literal("system"),
+    name: exactActorUserIdSchema,
+  })
+  .strict();
+
+/** Runtime-provided actor identity visible to plugin hooks. */
+export const actorSchema = z.discriminatedUnion("platform", [
+  slackActorSchema,
+  localActorSchema,
+  systemActorSchema,
 ]);
 
 const dispatchMetadataSchema = z

package/src/tasks.ts

@@ -6,9 +6,21 @@
  */
 import { z } from "zod";
 import type { PluginContext, PluginEmbedder, PluginModel } from "./context";
-import { destinationSchema, requesterSchema, sourceSchema } from "./schemas";
+import { destinationSchema, actorSchema, sourceSchema } from "./schemas";
 import type { PluginState } from "./state";
 
+/**
+ * Runtime-owned provenance for a transcript message: whether it is a durable
+ * instruction or ambient context, plus the actor identity when known. Missing
+ * provenance on an entry means unattributed context.
+ */
+export const pluginRunTranscriptProvenanceSchema = z
+  .object({
+    authority: z.enum(["instruction", "context"]),
+    actor: actorSchema.optional(),
+  })
+  .strict();
+
 /** One normalized transcript entry from the completed run exposed to plugin tasks. */
 export const pluginRunTranscriptEntrySchema = z.discriminatedUnion("type", [
   z
@@ -16,6 +28,8 @@ export const pluginRunTranscriptEntrySchema = z.discriminatedUnion("type", [
       type: z.literal("message"),
       role: z.enum(["user", "assistant"]),
       text: z.string().min(1),
+      provenance: pluginRunTranscriptProvenanceSchema.optional(),
+      isRunActor: z.boolean().optional(),
     })
     .strict(),
   z
@@ -28,13 +42,30 @@ export const pluginRunTranscriptEntrySchema = z.discriminatedUnion("type", [
     .strict(),
 ]);
 
+export type PluginRunTranscriptProvenance = z.output<
+  typeof pluginRunTranscriptProvenanceSchema
+>;
+
 /** Runtime-owned completed-run projection exposed to plugin tasks. */
 export const pluginRunContextSchema = z
   .object({
     completedAtMs: z.number().finite(),
     conversationId: z.string().min(1),
     destination: destinationSchema,
-    requester: requesterSchema.optional(),
+    /**
+     * All distinct actors annotated on this run's committed instruction-authority
+     * messages, in first-seen order. Attribution provenance only, never an
+     * authority source: a plugin must not treat membership here as credential,
+     * subject, or scope ownership. Derived from full-run provenance, so it can
+     * exceed the actors visible in the transcript slice. Usually `[run.actor]`;
+     * possibly empty for system runs with no human instructions.
+     */
+    actors: z.array(actorSchema),
+    /**
+     * The single actor this run executes as. Absent only for actor-less legacy
+     * system records, so authority-sensitive plugins must fail closed.
+     */
+    actor: actorSchema.optional(),
     runId: z.string().min(1),
     source: sourceSchema,
     transcript: z.array(pluginRunTranscriptEntrySchema),

package/src/tools.ts

@@ -3,7 +3,7 @@ import type {
   LocalInvocationContext,
   PluginEmbedder,
   PluginModel,
-  Requester,
+  Actor,
   SlackInvocationContext,
 } from "./context";
 import type { PluginCredentialSubject } from "./credentials";
@@ -66,14 +66,14 @@ export interface PluginEgress {
 }
 
 export interface SandboxPrepareHookContext extends PluginContext {
-  requester?: Requester;
+  actor?: Actor;
   sandbox: PluginSandbox;
 }
 
 export interface BeforeToolExecuteHookContext extends PluginContext {
   decision: PluginDecision;
   env: PluginEnv;
-  requester?: Requester;
+  actor?: Actor;
   tool: {
     input: Record<string, unknown>;
     name: string;