@sentry/junior 0.100.0 → 0.102.0

package/dist/app.js

@@ -5,7 +5,7 @@ import {
   processPluginTask,
   requireTurnFailureEventId,
   scheduleSessionCompletedPluginTasks
-} from "./chunk-XSBIISXS.js";
+} from "./chunk-DTUSCR2Y.js";
 import {
   buildSentryConversationUrl
 } from "./chunk-LVUKF5CE.js";
@@ -13,7 +13,7 @@ import {
   conversationVisibilityFromSlackChannelType,
   resolveSlackChannelTypeFromMessage,
   resolveSlackConversationContext
-} from "./chunk-VVIXK2BX.js";
+} from "./chunk-EMUZSROX.js";
 import {
   CONVERSATION_WORK_CHECK_IN_INTERVAL_MS,
   CONVERSATION_WORK_STALE_ENQUEUE_MS,
@@ -37,7 +37,7 @@ import {
   requestConversationContinuation,
   requestConversationWork,
   startConversationWork
-} from "./chunk-2T7DCRAW.js";
+} from "./chunk-3UK5DFKW.js";
 import {
   GET
 } from "./chunk-QNVHH5PU.js";
@@ -55,7 +55,7 @@ import {
 import {
   validatePluginEgressCredentialHooks,
   validatePluginRegistrations
-} from "./chunk-D5KZYS4T.js";
+} from "./chunk-MJSJAHBW.js";
 import {
   defineJuniorPlugins,
   pluginCatalogConfigFromEnv,
@@ -86,6 +86,7 @@ import {
   formatProviderLabel,
   formatSlackLink,
   getConfigDefaults,
+  getMcpAuthSession,
   getMcpStoredOAuthCredentials,
   latestReportedProgress,
   listThreadReplies,
@@ -105,12 +106,11 @@ import {
   splitSlackReplyText,
   startOAuthFlow,
   truncateStatusText
-} from "./chunk-45DMFMY2.js";
+} from "./chunk-ZIX4PNBI.js";
 import {
   CooperativeTurnYieldError,
   TurnInputCommitLostError,
   TurnInputDeferredError,
-  applyPendingAuthUpdate,
   buildDeterministicTurnId,
   clearPendingAuth,
   coerceThreadArtifactsState,
@@ -134,24 +134,24 @@ import {
   persistWithRetry,
   persistYieldSessionRecord,
   startActiveTurn
-} from "./chunk-NSOCZGOH.js";
+} from "./chunk-5K4N73TP.js";
 import {
   JUNIOR_THREAD_STATE_TTL_MS,
   coerceThreadConversationState
-} from "./chunk-6DTVCPLO.js";
+} from "./chunk-XIMUQ4IU.js";
 import {
   abandonAgentTurnSessionRecord,
   failAgentTurnSessionRecord,
   getAgentTurnSessionRecord,
   listAgentTurnSessionSummariesForConversation,
   recordAgentTurnSessionSummary
-} from "./chunk-IVXL57YF.js";
+} from "./chunk-EOB77KME.js";
 import {
   commitMessages,
   loadConversationProjection,
   loadProjection,
   recordAuthorizationCompleted
-} from "./chunk-IQIBZXGB.js";
+} from "./chunk-B5QS4AVO.js";
 import {
   buildConversationContext,
   createConversationMemoryService,
@@ -166,11 +166,12 @@ import {
   persistConversationMessages,
   updateConversationStats,
   upsertConversationMessage
-} from "./chunk-JPQISMMJ.js";
-import "./chunk-XJA7BPHS.js";
+} from "./chunk-VSAFV2GI.js";
+import "./chunk-3OABPOHR.js";
 import "./chunk-PDO5BLNM.js";
-import "./chunk-CM5EZD5F.js";
+import "./chunk-UIE3R5XU.js";
 import {
+  bindScheduledTaskCredentialSubject,
   bindSlackDirectCredentialSubject,
   getPluginApiRoutes,
   getPluginRoutes,
@@ -178,8 +179,9 @@ import {
   getPlugins,
   setPlugins,
   validatePlugins,
+  verifyScheduledTaskCredentialSubject,
   verifySlackDirectCredentialSubject
-} from "./chunk-TPTJEHUE.js";
+} from "./chunk-X2IPNCB5.js";
 import {
   SlackActionError,
   downloadPrivateSlackFile,
@@ -190,11 +192,11 @@ import {
   normalizeSlackConversationId,
   runWithSlackInstallationToken,
   runWithWorkspaceTeamId
-} from "./chunk-FP5N5OWZ.js";
+} from "./chunk-IQ36I3DF.js";
 import {
   createPluginLogger,
   createPluginState
-} from "./chunk-PWC24W5F.js";
+} from "./chunk-ZSHL44IQ.js";
 import {
   contextProvenance,
   getConversationStore,
@@ -204,7 +206,7 @@ import {
   juniorAgentSteps,
   juniorConversationMessages,
   juniorConversations
-} from "./chunk-VHRM6GNH.js";
+} from "./chunk-QZGVPPIJ.js";
 import "./chunk-G3E7SCME.js";
 import {
   sleep
@@ -232,7 +234,7 @@ import {
   setSlackReactionConfig,
   stripRuntimeTurnContext,
   trimTrailingAssistantMessages
-} from "./chunk-A7X2FDUO.js";
+} from "./chunk-SHBPSE7A.js";
 import {
   juniorDestinations
 } from "./chunk-FXFQNHRU.js";
@@ -241,7 +243,7 @@ import {
   readSlackRawMessageContext,
   resolveSlackChannelIdFromMessage,
   resolveSlackChannelIdFromThreadId
-} from "./chunk-LVA4I4H7.js";
+} from "./chunk-RT5BUHR5.js";
 import {
   createSlackDestination,
   destinationKey,
@@ -251,13 +253,14 @@ import {
 } from "./chunk-B7PUBQQM.js";
 import {
   discoverSkills
-} from "./chunk-3ECW2K2O.js";
+} from "./chunk-WR7H7VLJ.js";
 import {
   buildOAuthTokenRequest,
+  credentialSubjectSchema,
   hasRequiredOAuthScope,
   parseOAuthTokenResponse,
   pluginCatalogRuntime
-} from "./chunk-LMJPRYHP.js";
+} from "./chunk-77LHNQK4.js";
 import {
   buildTurnFailureResponse,
   createActor,
@@ -279,7 +282,7 @@ import {
   setTags,
   withContext,
   withSpan
-} from "./chunk-I35CTGPO.js";
+} from "./chunk-AEWZ7F65.js";
 import {
   toOptionalString
 } from "./chunk-OB42YVAE.js";
@@ -570,7 +573,6 @@ async function verifyDispatchCallbackRequest(request) {
 // src/chat/agent-dispatch/store.ts
 import { createHash } from "crypto";
 import {
-  pluginCredentialSubjectSchema,
   destinationSchema,
   isSlackDestination,
   sourceSchema
@@ -596,20 +598,11 @@ var dispatchActorSchema = z.object({
   platform: z.literal("system"),
   name: nonEmptyExactStringSchema
 }).strict();
-var credentialSubjectBindingSchema = z.object({
-  type: z.literal("slack-direct-conversation"),
-  teamId: z.string().min(1),
-  channelId: z.string().min(1),
-  signature: z.string().min(1)
-}).strict();
-var boundCredentialSubjectSchema = pluginCredentialSubjectSchema.extend({
-  binding: credentialSubjectBindingSchema
-}).strict();
 var dispatchRecordSchema = z.object({
   actor: dispatchActorSchema,
   attempt: z.number().int().nonnegative(),
   createdAtMs: z.number().finite(),
-  credentialSubject: boundCredentialSubjectSchema.optional(),
+  credentialSubject: credentialSubjectSchema.optional(),
   destination: destinationSchema,
   errorMessage: z.string().optional(),
   id: nonEmptyExactStringSchema,
@@ -638,18 +631,28 @@ var dispatchRecordSchema = z.object({
   if (!subject) {
     return;
   }
-  if (!record.destination.channelId.startsWith("D")) {
-    ctx.addIssue({
-      code: z.ZodIssueCode.custom,
-      message: "Dispatch credentialSubject requires a private direct Slack destination",
-      path: ["credentialSubject"]
-    });
+  if (subject.allowedWhen === "private-direct-conversation") {
+    if (!record.destination.channelId.startsWith("D")) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: "Dispatch credentialSubject requires a private direct Slack destination",
+        path: ["credentialSubject"]
+      });
+      return;
+    }
+    if (subject.binding.type !== "slack-direct-conversation" || subject.binding.teamId !== record.destination.teamId || subject.binding.channelId !== record.destination.channelId) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: "Dispatch credentialSubject binding must match destination",
+        path: ["credentialSubject", "binding"]
+      });
+    }
     return;
   }
-  if (subject.binding.teamId !== record.destination.teamId || subject.binding.channelId !== record.destination.channelId) {
+  if (subject.binding.type !== "scheduled-task" || subject.binding.plugin !== record.plugin || subject.binding.taskId !== subject.taskId) {
     ctx.addIssue({
       code: z.ZodIssueCode.custom,
-      message: "Dispatch credentialSubject binding must match destination",
+      message: "Dispatch credentialSubject binding must match task",
       path: ["credentialSubject", "binding"]
     });
   }
@@ -2745,7 +2748,7 @@ function dispatchOptionsErrorMessage(issues) {
     return "Dispatch credentialSubject userId is required";
   }
   if (hasIssueUnderPath(issues, ["credentialSubject", "allowedWhen"])) {
-    return "Dispatch credentialSubject allowedWhen must be private-direct-conversation";
+    return "Dispatch credentialSubject allowedWhen is invalid";
   }
   if (hasIssueUnderPath(issues, ["credentialSubject"])) {
     return "Dispatch credentialSubject type must be user";
@@ -2772,26 +2775,27 @@ function validateDispatchOptions(options) {
     throw new Error("Dispatch destination platform must be slack");
   }
   if (credentialSubject !== void 0) {
-    if (!isDmChannel(destination.channelId)) {
+    if (credentialSubject.allowedWhen === "private-direct-conversation" && !isDmChannel(destination.channelId)) {
       throw new Error(
         "Dispatch credentialSubject requires a private direct Slack destination"
       );
     }
   }
 }
-async function verifyDispatchCredentialSubjectAccess(options) {
+async function verifyDispatchCredentialSubjectAccess(options, plugin) {
   if (!options.credentialSubject) {
     return;
   }
-  const verified = verifySlackDirectCredentialSubject({
+  const verified = options.credentialSubject.allowedWhen === "scheduled-task" ? verifyScheduledTaskCredentialSubject({
+    plugin,
+    subject: options.credentialSubject
+  }) : verifySlackDirectCredentialSubject({
     channelId: options.destination.channelId,
     teamId: options.destination.teamId,
     subject: options.credentialSubject
   });
   if (!verified) {
-    throw new Error(
-      "Dispatch credentialSubject must match the private direct Slack destination"
-    );
+    throw new Error("Dispatch credentialSubject is not valid for this action");
   }
 }
 
@@ -2803,7 +2807,7 @@ function shouldScheduleDispatch(record, nowMs) {
   }
   return record.status !== "running" || typeof record.leaseExpiresAtMs !== "number" || record.leaseExpiresAtMs <= nowMs;
 }
-function bindDispatchCredentialSubject(options) {
+function bindDispatchCredentialSubject(options, plugin) {
   const { credentialSubject, ...baseOptions } = options;
   if (!credentialSubject) {
     return baseOptions;
@@ -2811,15 +2815,16 @@ function bindDispatchCredentialSubject(options) {
   if ("binding" in credentialSubject) {
     throw new Error("Dispatch credentialSubject binding is runtime-owned");
   }
-  const boundSubject = bindSlackDirectCredentialSubject({
+  const boundSubject = credentialSubject.allowedWhen === "scheduled-task" ? bindScheduledTaskCredentialSubject({
+    plugin,
+    subject: credentialSubject
+  }) : bindSlackDirectCredentialSubject({
     channelId: options.destination.channelId,
     teamId: options.destination.teamId,
     subject: credentialSubject
   });
   if (!boundSubject) {
-    throw new Error(
-      "Dispatch credentialSubject must match the private direct Slack destination"
-    );
+    throw new Error("Dispatch credentialSubject is not valid for this action");
   }
   return {
     ...baseOptions,
@@ -2838,11 +2843,17 @@ function createHeartbeatContext(args) {
     agent: {
       async dispatch(options) {
         validateDispatchOptions(options);
-        const dispatchOptions = bindDispatchCredentialSubject(options);
+        const dispatchOptions = bindDispatchCredentialSubject(
+          options,
+          pluginName
+        );
         if (dispatchCount >= MAX_DISPATCHES_PER_HEARTBEAT) {
           throw new Error("Plugin heartbeat exceeded the dispatch limit");
         }
-        await verifyDispatchCredentialSubjectAccess(dispatchOptions);
+        await verifyDispatchCredentialSubjectAccess(
+          dispatchOptions,
+          pluginName
+        );
         const result = await createOrGetDispatch({
           plugin: pluginName,
           options: dispatchOptions,
@@ -4497,6 +4508,11 @@ var CALLBACK_PAGES = {
     message: "Missing code parameter.",
     status: 400
   },
+  expired: {
+    title: "Authorization expired",
+    message: "This authorization link is no longer active. Return to Slack and retry the original request.",
+    status: 400
+  },
   success: {
     title: "Authorization complete",
     message: "Your MCP access is connected. Junior will continue the paused request in Slack.",
@@ -4508,6 +4524,12 @@ var CALLBACK_PAGES = {
     status: 500
   }
 };
+var McpOAuthAttemptExpiredError = class extends Error {
+  constructor() {
+    super("MCP OAuth authorization attempt is no longer current");
+    this.name = "McpOAuthAttemptExpiredError";
+  }
+};
 function mcpAuthorizationId(args) {
   return `${args.sessionId}:mcp:${args.provider}`;
 }
@@ -4597,20 +4619,19 @@ async function resumeAuthorizedMcpTurn(args) {
     provider,
     actorId: authSession.userId
   });
-  const resolvedSessionId = pendingAuth?.sessionId ?? authSession.sessionId;
+  if (pendingAuth?.authSessionId !== authSession.authSessionId) {
+    return;
+  }
+  const resolvedSessionId = pendingAuth.sessionId;
   const userMessage = getTurnUserMessage(conversation, resolvedSessionId);
-  if (pendingAuth) {
-    if (!isPendingAuthLatestRequest(conversation, pendingAuth)) {
-      clearPendingAuth(conversation, pendingAuth.sessionId);
-      await persistThreadStateById(threadId, { conversation });
-      await abandonAgentTurnSessionRecord({
-        conversationId: authSession.conversationId,
-        sessionId: pendingAuth.sessionId,
-        errorMessage: "Auth completed after a newer thread message abandoned this blocked request."
-      });
-      return;
-    }
-  } else if (conversation.processing.activeTurnId !== authSession.sessionId) {
+  if (!isPendingAuthLatestRequest(conversation, pendingAuth)) {
+    clearPendingAuth(conversation, pendingAuth.sessionId);
+    await persistThreadStateById(threadId, { conversation });
+    await abandonAgentTurnSessionRecord({
+      conversationId: authSession.conversationId,
+      sessionId: pendingAuth.sessionId,
+      errorMessage: "Auth completed after a newer thread message abandoned this blocked request."
+    });
     return;
   }
   if (!userMessage) {
@@ -4638,24 +4659,23 @@ async function resumeAuthorizedMcpTurn(args) {
         provider,
         actorId: authSession.userId
       });
-      const lockedSessionId = lockedPendingAuth?.sessionId ?? authSession.sessionId;
+      if (lockedPendingAuth?.authSessionId !== authSession.authSessionId) {
+        return false;
+      }
+      const lockedSessionId = lockedPendingAuth.sessionId;
       if (lockedSessionId !== resolvedSessionId) {
         return false;
       }
-      if (lockedPendingAuth) {
-        if (!isPendingAuthLatestRequest(lockedConversation, lockedPendingAuth)) {
-          clearPendingAuth(lockedConversation, lockedPendingAuth.sessionId);
-          await persistThreadStateById(threadId, {
-            conversation: lockedConversation
-          });
-          await abandonAgentTurnSessionRecord({
-            conversationId: authSession.conversationId,
-            sessionId: lockedPendingAuth.sessionId,
-            errorMessage: "Auth completed after a newer thread message abandoned this blocked request."
-          });
-          return false;
-        }
-      } else if (lockedConversation.processing.activeTurnId !== authSession.sessionId) {
+      if (!isPendingAuthLatestRequest(lockedConversation, lockedPendingAuth)) {
+        clearPendingAuth(lockedConversation, lockedPendingAuth.sessionId);
+        await persistThreadStateById(threadId, {
+          conversation: lockedConversation
+        });
+        await abandonAgentTurnSessionRecord({
+          conversationId: authSession.conversationId,
+          sessionId: lockedPendingAuth.sessionId,
+          errorMessage: "Auth completed after a newer thread message abandoned this blocked request."
+        });
         return false;
       }
       const lockedUserMessage = getTurnUserMessage(
@@ -4755,11 +4775,7 @@ async function resumeAuthorizedMcpTurn(args) {
           },
           durability: {
             recordPendingAuth: async (nextPendingAuth) => {
-              await applyPendingAuthUpdate({
-                conversation: lockedConversation,
-                conversationId: authSession.conversationId,
-                nextPendingAuth
-              });
+              lockedConversation.processing.pendingAuth = nextPendingAuth;
               await persistThreadStateById(threadId, {
                 conversation: lockedConversation
               });
@@ -4824,6 +4840,43 @@ async function resumeAuthorizedMcpTurn(args) {
     }
   });
 }
+async function isCurrentMcpAuthorizationAttempt(authSession, provider) {
+  if (!authSession.channelId || !authSession.threadTs) {
+    return false;
+  }
+  const threadId = `slack:${authSession.channelId}:${authSession.threadTs}`;
+  const currentState = await getPersistedThreadState(threadId);
+  const conversation = coerceThreadConversationState(currentState);
+  const pendingAuth = getConversationPendingAuth({
+    conversation,
+    kind: "mcp",
+    provider,
+    actorId: authSession.userId
+  });
+  return pendingAuth?.authSessionId === authSession.authSessionId && pendingAuth.sessionId === authSession.sessionId;
+}
+async function runCurrentMcpCredentialMutation(authSession, provider, mutation) {
+  if (!authSession.channelId || !authSession.threadTs) {
+    throw new McpOAuthAttemptExpiredError();
+  }
+  const threadId = `slack:${authSession.channelId}:${authSession.threadTs}`;
+  const stateAdapter = getStateAdapter();
+  await stateAdapter.connect();
+  const lock = await acquireActiveLock(stateAdapter, threadId);
+  if (!lock) {
+    throw new Error(
+      `Could not acquire MCP OAuth callback lock for ${threadId}`
+    );
+  }
+  try {
+    if (!await isCurrentMcpAuthorizationAttempt(authSession, provider)) {
+      throw new McpOAuthAttemptExpiredError();
+    }
+    return await mutation();
+  } finally {
+    await stateAdapter.releaseLock(lock);
+  }
+}
 async function GET4(request, provider, waitUntil, options) {
   const url = new URL(request.url);
   const state = url.searchParams.get("state")?.trim();
@@ -4839,7 +4892,23 @@ async function GET4(request, provider, waitUntil, options) {
     return htmlResponse("missing_code");
   }
   try {
-    const authSession = await finalizeMcpAuthorization(provider, state, code);
+    const pendingSession = await getMcpAuthSession(state);
+    if (!pendingSession || pendingSession.provider !== provider || !await isCurrentMcpAuthorizationAttempt(pendingSession, provider)) {
+      if (pendingSession) {
+        await deleteMcpAuthSession(pendingSession.authSessionId);
+      }
+      return htmlResponse("expired");
+    }
+    const authSession = await finalizeMcpAuthorization(
+      provider,
+      state,
+      code,
+      async (mutation) => await runCurrentMcpCredentialMutation(
+        pendingSession,
+        provider,
+        mutation
+      )
+    );
     try {
       await deleteMcpAuthSession(authSession.authSessionId);
     } catch (cleanupError) {
@@ -4860,6 +4929,10 @@ async function GET4(request, provider, waitUntil, options) {
     );
     return htmlResponse("success");
   } catch (callbackError) {
+    if (callbackError instanceof McpOAuthAttemptExpiredError) {
+      await deleteMcpAuthSession(state);
+      return htmlResponse("expired");
+    }
     logException(
       callbackError,
       "mcp_oauth_callback_failed",
@@ -5304,11 +5377,7 @@ async function resumeOAuthSessionRecordTurn(stored, options) {
           },
           durability: {
             recordPendingAuth: async (nextPendingAuth) => {
-              await applyPendingAuthUpdate({
-                conversation: lockedConversation,
-                conversationId: stored.resumeConversationId,
-                nextPendingAuth
-              });
+              lockedConversation.processing.pendingAuth = nextPendingAuth;
               await persistThreadStateById(stored.resumeConversationId, {
                 conversation: lockedConversation
               });
@@ -10108,11 +10177,7 @@ function createReplyToThread(deps) {
                 });
               },
               recordPendingAuth: async (pendingAuth) => {
-                await applyPendingAuthUpdate({
-                  conversation: preparedState.conversation,
-                  conversationId,
-                  nextPendingAuth: pendingAuth
-                });
+                preparedState.conversation.processing.pendingAuth = pendingAuth;
                 await persistThreadState(thread, {
                   conversation: preparedState.conversation
                 });
@@ -11200,11 +11265,7 @@ async function continueSlackAgentRun(payload, options) {
             },
             durability: {
               recordPendingAuth: async (nextPendingAuth) => {
-                await applyPendingAuthUpdate({
-                  conversation,
-                  conversationId: payload.conversationId,
-                  nextPendingAuth
-                });
+                conversation.processing.pendingAuth = nextPendingAuth;
                 await persistThreadStateById(payload.conversationId, {
                   conversation
                 });

package/dist/{catalog-runtime-PFHVMHDR.js → catalog-runtime-5CVM2DOF.js}

@@ -1,7 +1,7 @@
 import {
   pluginCatalogRuntime
-} from "./chunk-LMJPRYHP.js";
-import "./chunk-I35CTGPO.js";
+} from "./chunk-77LHNQK4.js";
+import "./chunk-AEWZ7F65.js";
 import "./chunk-OB42YVAE.js";
 import "./chunk-6GWA276C.js";
 import "./chunk-B3IT5END.js";

package/dist/chat/agent/prompt.d.ts

@@ -1,6 +1,6 @@
 import type { PiMessage } from "@/chat/pi/messages";
 import { type LogContext } from "@/chat/logging";
-import { type ConversationPrivacy } from "@/chat/conversation-privacy";
+import type { ConversationPrivacy } from "@/chat/conversation-privacy";
 import type { SkillInvocation, SkillMetadata } from "@/chat/skills";
 import type { ActiveMcpCatalogSummary } from "@/chat/tool-support/skill/mcp-tool-summary";
 import type { ToolRuntimeContext } from "@/chat/tools/types";

package/dist/chat/agent/request.d.ts

@@ -133,7 +133,7 @@ export interface AgentRunDurability {
     /** Return true when the durable worker should pause at the next Pi boundary. */
     shouldYield?: () => boolean;
     drainSteeringMessages?: (accept: (messages: AgentRunSteeringMessage[]) => Promise<void>) => Promise<AgentRunSteeringMessage[]>;
-    recordPendingAuth?: (pendingAuth: ConversationPendingAuthState) => void | Promise<void>;
+    recordPendingAuth?: (pendingAuth: ConversationPendingAuthState | undefined) => void | Promise<void>;
     onSandboxAcquired?: (sandbox: SandboxAcquiredState) => void | Promise<void>;
     onArtifactStateUpdated?: (artifactState: ThreadArtifactsState) => void | Promise<void>;
 }

package/dist/chat/agent-dispatch/validation.d.ts

@@ -2,4 +2,4 @@ import type { BoundDispatchOptions, SlackDispatchOptions } from "./types";
 /** Validate plugin-provided dispatch options before core persists them. */
 export declare function validateDispatchOptions(options: unknown): asserts options is SlackDispatchOptions;
 /** Verify runtime-owned access requirements for delegated dispatch credentials. */
-export declare function verifyDispatchCredentialSubjectAccess(options: BoundDispatchOptions): Promise<void>;
+export declare function verifyDispatchCredentialSubjectAccess(options: BoundDispatchOptions, plugin: string): Promise<void>;

package/dist/chat/conversation-privacy.d.ts

@@ -25,14 +25,10 @@ export declare function canExposeConversationPayload(input: {
 export declare function getCurrentConversationPrivacy(): ConversationPrivacy | undefined;
 /** Bind one conversation privacy mode to all async work in a turn. */
 export declare function runWithConversationPrivacy<T>(privacy: ConversationPrivacy, callback: () => T): T;
-/** Convert a GenAI message into safe metadata for private trace contexts. */
-export declare function toGenAiMessageMetadata(message: unknown): Record<string, unknown>;
-/** Convert raw text into size-only metadata for private trace contexts. */
-export declare function toGenAiTextMetadata(text: string): Record<string, unknown>;
 /** Convert an arbitrary payload into safe structured metadata for trace data fields. */
 export declare function toGenAiPayloadMetadata(payload: unknown): Record<string, unknown>;
 /** Convert an arbitrary payload into safe flattened trace attributes. */
-export declare function toGenAiPayloadTraceAttributes(prefix: string, payload: unknown): Record<string, TraceAttributeValue>;
+export declare function toGenAiPayloadTraceAttributes(prefix: "gen_ai.tool.call.arguments" | "gen_ai.tool.call.result", payload: unknown): Record<string, TraceAttributeValue>;
 /**
  * Map a pi-ai AssistantMessage to the canonical gen_ai.output.messages shape:
  * `{ role, parts: [...], finish_reason }` — drops provider noise fields.
@@ -44,5 +40,5 @@ export declare function toCanonicalOutputMessage(message: AssistantMessage): Rec
  */
 export declare function toCanonicalInputMessage(message: Message): Record<string, unknown>;
 /** Summarize a message list without exposing raw message content. */
-export declare function toGenAiMessagesTraceAttributes(prefix: string, messages: unknown[]): Record<string, TraceAttributeValue>;
+export declare function toGenAiMessagesTraceAttributes(prefix: "gen_ai.input" | "gen_ai.output", messages: unknown[]): Record<string, TraceAttributeValue>;
 export {};

package/dist/chat/conversations/store.d.ts

@@ -26,7 +26,7 @@ export interface Conversation {
     /**
      * When retention purged this conversation's content. Set means messages and
      * steps were deleted wholesale; reporting presents the transcript as expired
-     * rather than privacy-redacted (`../../../specs/data-redaction-policy.md`).
+     * rather than privacy-redacted (`../../../../../policies/data-redaction.md`).
      */
     transcriptPurgedAtMs?: number;
     /** Persisted destination visibility. Undefined means no destination row exists. */