@sentry/junior 0.118.0 → 0.120.0

package/dist/{agent-hooks-J2FB7XD6.js → agent-hooks-5DDPWRYO.js}

@@ -11,20 +11,20 @@ import {
   getPlugins,
   setPlugins,
   validatePlugins
-} from "./chunk-GT2ZUALJ.js";
-import "./chunk-KC5EE27Y.js";
+} from "./chunk-24B5R6OU.js";
+import "./chunk-M243JMZH.js";
 import "./chunk-GCGJGSQL.js";
-import "./chunk-3N3FMCKN.js";
-import "./chunk-PWRFTDTY.js";
+import "./chunk-ALAKN7LR.js";
+import "./chunk-VURFJVFH.js";
 import "./chunk-VFUK3X5B.js";
-import "./chunk-FXOYURO4.js";
+import "./chunk-HDFGNU5E.js";
 import "./chunk-HZF5P5UN.js";
-import "./chunk-MLZFK4KP.js";
+import "./chunk-ALYQOZG7.js";
 import "./chunk-OB42YVAE.js";
 import "./chunk-F3B2YJ76.js";
 import "./chunk-6GWA276C.js";
-import "./chunk-QWCF4RAC.js";
-import "./chunk-HWUBBHLK.js";
+import "./chunk-DWOH57FW.js";
+import "./chunk-DMKHRBI6.js";
 import "./chunk-MLKGABMK.js";
 export {
   PluginHookDeniedError,

package/dist/api/conversations/detail.d.ts

@@ -105,6 +105,13 @@ declare const _default: import("../route").ApiRoute<import("zod").ZodObject<{
         }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
             type: import("zod").ZodLiteral<"message_handled">;
             messageId: import("zod").ZodString;
+        }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+            type: import("zod").ZodLiteral<"assistant_message">;
+            parts: import("zod").ZodArray<import("zod").ZodObject<{
+                type: import("zod").ZodLiteral<"reasoning">;
+                text: import("zod").ZodOptional<import("zod").ZodString>;
+                redacted: import("zod").ZodOptional<import("zod").ZodLiteral<true>>;
+            }, import("zod/v4/core").$strict>>;
         }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
             type: import("zod").ZodLiteral<"tool_calls">;
             calls: import("zod").ZodArray<import("zod").ZodObject<{
@@ -120,6 +127,16 @@ declare const _default: import("../route").ApiRoute<import("zod").ZodObject<{
                 input: import("zod").ZodOptional<import("zod").ZodUnknown>;
                 output: import("zod").ZodOptional<import("zod").ZodUnknown>;
             }, import("zod/v4/core").$strict>>;
+            assistant: import("zod").ZodOptional<import("zod").ZodObject<{
+                parts: import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
+                    type: import("zod").ZodLiteral<"reasoning">;
+                    text: import("zod").ZodOptional<import("zod").ZodString>;
+                    redacted: import("zod").ZodOptional<import("zod").ZodLiteral<true>>;
+                }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+                    type: import("zod").ZodLiteral<"tool_call">;
+                    toolCallId: import("zod").ZodString;
+                }, import("zod/v4/core").$strict>], "type">>;
+            }, import("zod/v4/core").$strict>>;
         }, import("zod/v4/core").$strict>, import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
             type: import("zod").ZodLiteral<"turn_lifecycle">;
             turnId: import("zod").ZodString;

package/dist/api/conversations/event-list.d.ts

@@ -22,6 +22,13 @@ declare const _default: import("../route").ApiRoute<import("zod").ZodObject<{
         }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
             type: import("zod").ZodLiteral<"message_handled">;
             messageId: import("zod").ZodString;
+        }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+            type: import("zod").ZodLiteral<"assistant_message">;
+            parts: import("zod").ZodArray<import("zod").ZodObject<{
+                type: import("zod").ZodLiteral<"reasoning">;
+                text: import("zod").ZodOptional<import("zod").ZodString>;
+                redacted: import("zod").ZodOptional<import("zod").ZodLiteral<true>>;
+            }, import("zod/v4/core").$strict>>;
         }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
             type: import("zod").ZodLiteral<"tool_calls">;
             calls: import("zod").ZodArray<import("zod").ZodObject<{
@@ -37,6 +44,16 @@ declare const _default: import("../route").ApiRoute<import("zod").ZodObject<{
                 input: import("zod").ZodOptional<import("zod").ZodUnknown>;
                 output: import("zod").ZodOptional<import("zod").ZodUnknown>;
             }, import("zod/v4/core").$strict>>;
+            assistant: import("zod").ZodOptional<import("zod").ZodObject<{
+                parts: import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
+                    type: import("zod").ZodLiteral<"reasoning">;
+                    text: import("zod").ZodOptional<import("zod").ZodString>;
+                    redacted: import("zod").ZodOptional<import("zod").ZodLiteral<true>>;
+                }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+                    type: import("zod").ZodLiteral<"tool_call">;
+                    toolCallId: import("zod").ZodString;
+                }, import("zod/v4/core").$strict>], "type">>;
+            }, import("zod/v4/core").$strict>>;
         }, import("zod/v4/core").$strict>, import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
             type: import("zod").ZodLiteral<"turn_lifecycle">;
             turnId: import("zod").ZodString;

package/dist/api/schema/conversation.d.ts

@@ -121,6 +121,13 @@ export declare const conversationReportEventDataSchema: z.ZodDiscriminatedUnion<
 }, z.core.$strict>, z.ZodObject<{
     type: z.ZodLiteral<"message_handled">;
     messageId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"assistant_message">;
+    parts: z.ZodArray<z.ZodObject<{
+        type: z.ZodLiteral<"reasoning">;
+        text: z.ZodOptional<z.ZodString>;
+        redacted: z.ZodOptional<z.ZodLiteral<true>>;
+    }, z.core.$strict>>;
 }, z.core.$strict>, z.ZodObject<{
     type: z.ZodLiteral<"tool_calls">;
     calls: z.ZodArray<z.ZodObject<{
@@ -136,6 +143,16 @@ export declare const conversationReportEventDataSchema: z.ZodDiscriminatedUnion<
         input: z.ZodOptional<z.ZodUnknown>;
         output: z.ZodOptional<z.ZodUnknown>;
     }, z.core.$strict>>;
+    assistant: z.ZodOptional<z.ZodObject<{
+        parts: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"reasoning">;
+            text: z.ZodOptional<z.ZodString>;
+            redacted: z.ZodOptional<z.ZodLiteral<true>>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"tool_call">;
+            toolCallId: z.ZodString;
+        }, z.core.$strict>], "type">>;
+    }, z.core.$strict>>;
 }, z.core.$strict>, z.ZodDiscriminatedUnion<[z.ZodObject<{
     type: z.ZodLiteral<"turn_lifecycle">;
     turnId: z.ZodString;
@@ -225,6 +242,13 @@ export declare const conversationReportEventSchema: z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"message_handled">;
         messageId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"assistant_message">;
+        parts: z.ZodArray<z.ZodObject<{
+            type: z.ZodLiteral<"reasoning">;
+            text: z.ZodOptional<z.ZodString>;
+            redacted: z.ZodOptional<z.ZodLiteral<true>>;
+        }, z.core.$strict>>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"tool_calls">;
         calls: z.ZodArray<z.ZodObject<{
@@ -240,6 +264,16 @@ export declare const conversationReportEventSchema: z.ZodObject<{
             input: z.ZodOptional<z.ZodUnknown>;
             output: z.ZodOptional<z.ZodUnknown>;
         }, z.core.$strict>>;
+        assistant: z.ZodOptional<z.ZodObject<{
+            parts: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"reasoning">;
+                text: z.ZodOptional<z.ZodString>;
+                redacted: z.ZodOptional<z.ZodLiteral<true>>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"tool_call">;
+                toolCallId: z.ZodString;
+            }, z.core.$strict>], "type">>;
+        }, z.core.$strict>>;
     }, z.core.$strict>, z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"turn_lifecycle">;
         turnId: z.ZodString;
@@ -440,6 +474,13 @@ export declare const conversationDetailReportSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"message_handled">;
             messageId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"assistant_message">;
+            parts: z.ZodArray<z.ZodObject<{
+                type: z.ZodLiteral<"reasoning">;
+                text: z.ZodOptional<z.ZodString>;
+                redacted: z.ZodOptional<z.ZodLiteral<true>>;
+            }, z.core.$strict>>;
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"tool_calls">;
             calls: z.ZodArray<z.ZodObject<{
@@ -455,6 +496,16 @@ export declare const conversationDetailReportSchema: z.ZodObject<{
                 input: z.ZodOptional<z.ZodUnknown>;
                 output: z.ZodOptional<z.ZodUnknown>;
             }, z.core.$strict>>;
+            assistant: z.ZodOptional<z.ZodObject<{
+                parts: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    type: z.ZodLiteral<"reasoning">;
+                    text: z.ZodOptional<z.ZodString>;
+                    redacted: z.ZodOptional<z.ZodLiteral<true>>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"tool_call">;
+                    toolCallId: z.ZodString;
+                }, z.core.$strict>], "type">>;
+            }, z.core.$strict>>;
         }, z.core.$strict>, z.ZodDiscriminatedUnion<[z.ZodObject<{
             type: z.ZodLiteral<"turn_lifecycle">;
             turnId: z.ZodString;
@@ -558,6 +609,13 @@ export declare const conversationEventPageSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"message_handled">;
             messageId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"assistant_message">;
+            parts: z.ZodArray<z.ZodObject<{
+                type: z.ZodLiteral<"reasoning">;
+                text: z.ZodOptional<z.ZodString>;
+                redacted: z.ZodOptional<z.ZodLiteral<true>>;
+            }, z.core.$strict>>;
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"tool_calls">;
             calls: z.ZodArray<z.ZodObject<{
@@ -573,6 +631,16 @@ export declare const conversationEventPageSchema: z.ZodObject<{
                 input: z.ZodOptional<z.ZodUnknown>;
                 output: z.ZodOptional<z.ZodUnknown>;
             }, z.core.$strict>>;
+            assistant: z.ZodOptional<z.ZodObject<{
+                parts: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    type: z.ZodLiteral<"reasoning">;
+                    text: z.ZodOptional<z.ZodString>;
+                    redacted: z.ZodOptional<z.ZodLiteral<true>>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"tool_call">;
+                    toolCallId: z.ZodString;
+                }, z.core.$strict>], "type">>;
+            }, z.core.$strict>>;
         }, z.core.$strict>, z.ZodDiscriminatedUnion<[z.ZodObject<{
             type: z.ZodLiteral<"turn_lifecycle">;
             turnId: z.ZodString;

package/dist/api/schema.js

@@ -30,7 +30,7 @@ import {
   revokePersonalTokenResponseSchema,
   statSchema,
   statsReportSchema
-} from "../chunk-7SM3P4XR.js";
+} from "../chunk-O2ULQJWR.js";
 import {
   healthReportSchema,
   pluginOperationalReportFeedSchema,

package/dist/api.js

@@ -24,12 +24,12 @@ import {
   personalTokenParamsSchema,
   revokePersonalTokenResponseSchema,
   statsReportSchema
-} from "./chunk-7SM3P4XR.js";
+} from "./chunk-O2ULQJWR.js";
 import {
   formatSlackConversationRedactedLabel,
   readHealthReport,
   resolveSlackConversationContextFromThreadId
-} from "./chunk-HN6LFYG3.js";
+} from "./chunk-Q3RL6A4E.js";
 import {
   buildSentryConversationUrl
 } from "./chunk-4CODA7P5.js";
@@ -42,7 +42,7 @@ import {
 } from "./chunk-PE44LDDQ.js";
 import {
   readStats
-} from "./chunk-L72GDKSN.js";
+} from "./chunk-6WX5SPI3.js";
 import {
   agentTurnUsageSchema,
   hasAgentTurnUsage
@@ -51,13 +51,14 @@ import "./chunk-PDO5BLNM.js";
 import {
   createPluginLogger,
   getPlugins,
-  listConversationAnnotations
-} from "./chunk-GT2ZUALJ.js";
+  listConversationAnnotations,
+  readViewerActors
+} from "./chunk-24B5R6OU.js";
 import {
   decodeStoredConversationEvent,
   getDb,
   getSqlExecutor
-} from "./chunk-KC5EE27Y.js";
+} from "./chunk-M243JMZH.js";
 import {
   juniorApiTokens,
   juniorConversationEvents,
@@ -65,24 +66,22 @@ import {
   juniorIdentities,
   juniorUsers
 } from "./chunk-GCGJGSQL.js";
-import "./chunk-3N3FMCKN.js";
-import "./chunk-PWRFTDTY.js";
+import "./chunk-ALAKN7LR.js";
+import "./chunk-VURFJVFH.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";
 import {
   canExposeConversationPayload,
   parseSlackThreadId
-} from "./chunk-FXOYURO4.js";
+} from "./chunk-HDFGNU5E.js";
 import "./chunk-HZF5P5UN.js";
-import {
-  normalizeIdentityEmail
-} from "./chunk-MLZFK4KP.js";
+import "./chunk-ALYQOZG7.js";
 import "./chunk-OB42YVAE.js";
 import "./chunk-F3B2YJ76.js";
 import "./chunk-6GWA276C.js";
-import "./chunk-QWCF4RAC.js";
-import "./chunk-HWUBBHLK.js";
+import "./chunk-DWOH57FW.js";
+import "./chunk-DMKHRBI6.js";
 import "./chunk-MLKGABMK.js";
 
 // src/api.ts
@@ -395,6 +394,11 @@ var reportingToolResultDetailsSchema = z2.object({
   status: z2.string().optional()
 }).passthrough();
 var reportingTextPartSchema = z2.object({ type: z2.literal("text"), text: z2.string() }).passthrough();
+var reportingReasoningPartSchema = z2.object({
+  type: z2.literal("thinking"),
+  thinking: z2.string(),
+  redacted: z2.literal(true).optional()
+}).passthrough();
 var reportingMediaPartSchema = z2.object({
   type: z2.enum(["image", "audio"]),
   mimeType: z2.string().min(1).optional()
@@ -435,6 +439,43 @@ function reportToolCalls(args) {
   });
   return calls.length > 0 ? { type: "tool_calls", calls } : void 0;
 }
+function reportAssistantMessage(args) {
+  const message2 = reportingAssistantMessageSchema.safeParse(args.message);
+  if (!message2.success) return void 0;
+  const hasReasoning = message2.data.content.some((part) => {
+    const reasoning = reportingReasoningPartSchema.safeParse(part);
+    return reasoning.success && reasoning.data.redacted !== true && reasoning.data.thinking.trim().length > 0;
+  });
+  if (!hasReasoning) return reportToolCalls(args);
+  const reasoningParts = [];
+  const assistantParts = [];
+  for (const part of message2.data.content) {
+    const reasoning = reportingReasoningPartSchema.safeParse(part);
+    if (reasoning.success) {
+      if (reasoning.data.redacted !== true && reasoning.data.thinking.trim().length > 0) {
+        const projected = {
+          type: "reasoning",
+          ...args.canExposePayload ? { text: reasoning.data.thinking } : { redacted: true }
+        };
+        reasoningParts.push(projected);
+        assistantParts.push(projected);
+      }
+      continue;
+    }
+    const call = reportingToolCallPartSchema.safeParse(part);
+    if (call.success) {
+      assistantParts.push({
+        type: "tool_call",
+        toolCallId: call.data.id
+      });
+    }
+  }
+  const toolCalls = reportToolCalls(args);
+  if (toolCalls?.type === "tool_calls") {
+    return { ...toolCalls, assistant: { parts: assistantParts } };
+  }
+  return reasoningParts.length > 0 ? { type: "assistant_message", parts: reasoningParts } : void 0;
+}
 function reportToolResult(args) {
   const message2 = reportingToolResultMessageSchema.safeParse(args.message);
   if (!message2.success) return void 0;
@@ -576,7 +617,7 @@ function projectConversationReportEventPage(args) {
       };
       const result = reportingToolResultMessageSchema.safeParse(event.data);
       const start = result.success ? toolStarts.get(result.data.toolCallId) : void 0;
-      data = reportToolCalls(reportArgs) ?? reportToolResult({
+      data = reportAssistantMessage(reportArgs) ?? reportToolResult({
         canExposePayload: args.canExposePayload,
         message: event.data,
         ...start && start.seq < event.seq ? { start } : {}
@@ -1699,7 +1740,7 @@ function readDescriptionText(home) {
   }
 }
 async function readSkillReports() {
-  const { discoverSkills } = await import("./skills-W4JETYSV.js");
+  const { discoverSkills } = await import("./skills-JMXY7LIY.js");
   const skills = await discoverSkills();
   return skillReportsSchema.parse(
     skills.map((skill) => ({
@@ -1709,7 +1750,7 @@ async function readSkillReports() {
   );
 }
 async function readPlugins() {
-  const { pluginCatalogRuntime } = await import("./catalog-runtime-UHHLU53I.js");
+  const { pluginCatalogRuntime } = await import("./catalog-runtime-5KR5XBMJ.js");
   return pluginsSchema.parse(
     pluginCatalogRuntime.getProviders().map((plugin) => ({
       configKeys: plugin.manifest.configKeys ?? [],
@@ -1721,8 +1762,8 @@ async function readPlugins() {
 }
 async function readRuntimeInfoReport() {
   const [{ homeDir }, { pluginCatalogRuntime }, plugins, skills] = await Promise.all([
-    import("./discovery-RMHYSRL7.js"),
-    import("./catalog-runtime-UHHLU53I.js"),
+    import("./discovery-GUFTFBTL.js"),
+    import("./catalog-runtime-5KR5XBMJ.js"),
     readPlugins(),
     readSkillReports()
   ]);
@@ -1738,7 +1779,7 @@ async function readRuntimeInfoReport() {
 }
 async function readPluginOperationalReportFeed() {
   const nowMs = Date.now();
-  const { getPluginOperationalReports } = await import("./agent-hooks-J2FB7XD6.js");
+  const { getPluginOperationalReports } = await import("./agent-hooks-5DDPWRYO.js");
   return pluginOperationalReportFeedSchema.parse({
     source: "plugins",
     generatedAt: new Date(nowMs).toISOString(),
@@ -2812,6 +2853,7 @@ function createPersonalTokenRoutes() {
 import { Hono as Hono5 } from "hono";
 import {
   pluginUserPageContentSchema as pluginUserPageContentSchema2,
+  pluginUserPageInputSchema,
   pluginUserPageLinksSchema as pluginUserPageLinksSchema2
 } from "@sentry/junior-plugin-api";
 
@@ -2820,57 +2862,6 @@ import {
   pluginUserPageContentSchema,
   pluginUserPageLinksSchema
 } from "@sentry/junior-plugin-api";
-
-// src/chat/plugins/viewer-actors.ts
-import { and as and12, eq as eq13 } from "drizzle-orm";
-import {
-  actorSchema
-} from "@sentry/junior-plugin-api";
-async function readViewerActorsFromSql(db, email) {
-  const normalizedEmail = normalizeIdentityEmail(email);
-  if (!normalizedEmail) return [];
-  const rows = await db.select({
-    displayName: juniorIdentities.displayName,
-    email: juniorUsers.primaryEmail,
-    handle: juniorIdentities.handle,
-    provider: juniorIdentities.provider,
-    providerSubjectId: juniorIdentities.providerSubjectId,
-    providerTenantId: juniorIdentities.providerTenantId
-  }).from(juniorIdentities).innerJoin(juniorUsers, eq13(juniorUsers.id, juniorIdentities.userId)).where(
-    and12(
-      eq13(juniorUsers.primaryEmailNormalized, normalizedEmail),
-      eq13(juniorIdentities.kind, "user")
-    )
-  );
-  const actors = [];
-  for (const row of rows) {
-    const candidate = row.provider === "slack" ? {
-      platform: "slack",
-      teamId: row.providerTenantId,
-      userId: row.providerSubjectId,
-      email: row.email,
-      ...row.displayName ? { fullName: row.displayName } : {},
-      ...row.handle ? { userName: row.handle } : {}
-    } : row.provider === "local" ? {
-      platform: "local",
-      userId: row.providerSubjectId,
-      email: row.email,
-      ...row.displayName ? { fullName: row.displayName } : {},
-      ...row.handle ? { userName: row.handle } : {}
-    } : void 0;
-    if (!candidate) continue;
-    const parsed = actorSchema.safeParse(candidate);
-    if (parsed.success && parsed.data.platform !== "system") {
-      actors.push(parsed.data);
-    }
-  }
-  return actors;
-}
-async function readViewerActors(email) {
-  return await readViewerActorsFromSql(getDb(), email);
-}
-
-// src/chat/plugins/user-pages.ts
 function readPluginUserPageLinks() {
   return pluginUserPageLinksSchema.parse(
     getPlugins().flatMap(
@@ -2884,6 +2875,10 @@ function readPluginUserPageLinks() {
     )
   );
 }
+function actionBelongsToPlugin(href, pluginName) {
+  const parsed = new URL(href, "http://junior.local");
+  return parsed.origin === "http://junior.local" && parsed.pathname === href && parsed.pathname.startsWith(`/api/plugins/${pluginName}/`) && !parsed.search && !parsed.hash;
+}
 async function readPluginUserPage(input) {
   const plugin = getPlugins().find(
     (candidate) => candidate.manifest.name === input.pluginName
@@ -2892,17 +2887,30 @@ async function readPluginUserPage(input) {
     (candidate) => candidate.id === input.pageId
   );
   if (!plugin || !page) return void 0;
-  return pluginUserPageContentSchema.parse(
-    await page.read({
-      db: getDb(),
-      log: createPluginLogger(plugin.manifest.name),
-      plugin: { name: plugin.manifest.name },
-      viewer: {
-        actors: await readViewerActors(input.email),
-        email: input.email
-      }
-    })
+  const content = pluginUserPageContentSchema.parse(
+    await page.read(
+      {
+        db: getDb(),
+        log: createPluginLogger(plugin.manifest.name),
+        plugin: { name: plugin.manifest.name },
+        viewer: {
+          actors: await readViewerActors(input.email),
+          email: input.email
+        }
+      },
+      input.query
+    )
   );
+  if (content.records.some(
+    (record) => record.actions?.some(
+      (action) => !actionBelongsToPlugin(action.href, plugin.manifest.name)
+    )
+  )) {
+    throw new Error(
+      `Plugin user page "${plugin.manifest.name}/${page.id}" returned an action outside its API namespace.`
+    );
+  }
+  return content;
 }
 
 // src/api/user-pages/routes.ts
@@ -2921,10 +2929,23 @@ function createUserPageRoutes() {
         { status: 401 }
       );
     }
+    const pageInput = pluginUserPageInputSchema.safeParse({
+      cursor: context.req.query("cursor") || void 0,
+      limit: context.req.query("limit") ? Number(context.req.query("limit")) : 20,
+      query: context.req.query("q") || void 0
+    });
+    if (!pageInput.success) {
+      return jsonResponse(
+        apiErrorSchema,
+        { error: "Invalid user page query." },
+        { status: 400 }
+      );
+    }
     const page = await readPluginUserPage({
       email,
       pageId: context.req.param("pageId"),
-      pluginName: context.req.param("pluginName")
+      pluginName: context.req.param("pluginName"),
+      query: pageInput.data
     });
     return page ? jsonResponse(pluginUserPageContentSchema2, page) : jsonResponse(
       apiErrorSchema,