@sentry/junior 0.122.0 → 0.123.0

package/dist/{chunk-32FPGM2V.js → chunk-5EUADEG3.js}

@@ -1,6 +1,6 @@
 import {
   getDb
-} from "./chunk-DOB5RVMH.js";
+} from "./chunk-DVPWU77W.js";
 import {
   juniorStats
 } from "./chunk-GCGJGSQL.js";

package/dist/{chunk-4TGVC42X.js → chunk-5P4QBMTY.js}

@@ -13,7 +13,7 @@ import {
   persistAuthPauseTurnState,
   requireTurnFailureEventId,
   scheduleSessionCompletedPluginTasks
-} from "./chunk-V6XPIKYA.js";
+} from "./chunk-DQQCWMA2.js";
 import {
   buildSentryConversationUrl
 } from "./chunk-4CODA7P5.js";
@@ -40,7 +40,7 @@ import {
   resolveBaseUrl,
   resolvePluginOAuthAccount,
   truncateStatusText
-} from "./chunk-VCC7XFX2.js";
+} from "./chunk-RQ6BLJJD.js";
 import {
   JUNIOR_THREAD_STATE_TTL_MS,
   TurnSliceLimitExceededError,
@@ -72,7 +72,7 @@ import {
   recordDeliveredAssistantMessage,
   turnHasReply,
   updateConversationStats
-} from "./chunk-NNGYYGX5.js";
+} from "./chunk-K5DCMBUV.js";
 import {
   SlackActionError,
   getDashboardConversationLink,
@@ -81,19 +81,19 @@ import {
   getSlackClient,
   isDmChannel,
   normalizeSlackConversationId
-} from "./chunk-USKP7IM2.js";
+} from "./chunk-ZO4TL4OK.js";
 import {
   getConversationEventStore,
   getConversationStore,
   parseDestination,
   requireSlackDestination,
   sameDestination
-} from "./chunk-DOB5RVMH.js";
+} from "./chunk-DVPWU77W.js";
 import {
   acquireActiveLock,
   getDefaultRedisStateAdapterFor,
   getStateAdapter
-} from "./chunk-TZVZCIYL.js";
+} from "./chunk-ZOOZ25BO.js";
 import {
   FUNCTION_TIMEOUT_BUFFER_SECONDS,
   botConfig,
@@ -102,7 +102,7 @@ import {
   getRuntimeMetadata,
   normalizeSlackEmojiName,
   standardModelId
-} from "./chunk-2RFM7STT.js";
+} from "./chunk-JCJN6TPV.js";
 import {
   parseSlackThreadId,
   readSlackRawMessageContext,
@@ -111,15 +111,15 @@ import {
 } from "./chunk-S7G34U75.js";
 import {
   discoverSkills
-} from "./chunk-E5SRLZQV.js";
+} from "./chunk-DAMUPWYR.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-OKUZIXQM.js";
+} from "./chunk-QKYO7ZNS.js";
 import {
   buildOAuthTokenRequest,
   hasRequiredOAuthScope,
   parseOAuthTokenResponse
-} from "./chunk-GN6WW7WR.js";
+} from "./chunk-XLPETJXX.js";
 import {
   createSlackResumeActor,
   isUserActor,
@@ -132,7 +132,7 @@ import {
   logWarn,
   setTags,
   withLogContext
-} from "./chunk-4SPRQJOW.js";
+} from "./chunk-JPG43UG7.js";
 import {
   isRecord,
   toOptionalNumber,

package/dist/{chunk-ISQYBTPG.js → chunk-7YOBVIHY.js}

@@ -1,7 +1,7 @@
 // package.json
 var package_default = {
   name: "@sentry/junior",
-  version: "0.122.0",
+  version: "0.123.0",
   private: false,
   publishConfig: {
     access: "public"
@@ -63,6 +63,7 @@ var package_default = {
     "test:watch": "vitest",
     typecheck: "tsc --noEmit",
     "skills:check": "node --test scripts/check-skills.test.mjs && node scripts/check-skills.mjs",
+    "tool-annotations:check": "node --test scripts/check-tool-annotations.test.mjs && node scripts/check-tool-annotations.mjs",
     "test:coverage": "vitest run --maxWorkers=4 --coverage --reporter=default --reporter=junit --outputFile.junit=coverage/results.junit.xml"
   },
   dependencies: {
@@ -86,7 +87,7 @@ var package_default = {
     chat: "4.29.0",
     commander: "^14.0.3",
     "drizzle-orm": "catalog:",
-    hono: "^4.12.22",
+    hono: "^4.12.27",
     jiti: "^2.7.0",
     jose: "^6.2.3",
     "just-bash": "3.0.1",

package/dist/{chunk-GFTZKOTP.js → chunk-A3TUEGKH.js}

@@ -1,6 +1,6 @@
 import {
   pluginCatalogRuntime
-} from "./chunk-OKUZIXQM.js";
+} from "./chunk-QKYO7ZNS.js";
 
 // src/chat/plugins/validation.ts
 import { isDeepStrictEqual } from "util";

package/dist/{chunk-E5SRLZQV.js → chunk-DAMUPWYR.js}

@@ -1,9 +1,9 @@
 import {
   pluginCatalogRuntime
-} from "./chunk-OKUZIXQM.js";
+} from "./chunk-QKYO7ZNS.js";
 import {
   logWarn
-} from "./chunk-4SPRQJOW.js";
+} from "./chunk-JPG43UG7.js";
 import {
   skillRoots
 } from "./chunk-H4HBKISO.js";

package/dist/{chunk-V6XPIKYA.js → chunk-DQQCWMA2.js}

@@ -1,3 +1,6 @@
+import {
+  createPluginConversationEvents
+} from "./chunk-THYOK2SL.js";
 import {
   pluginTaskId,
   pluginTaskParamsSchema,
@@ -22,28 +25,29 @@ import {
   persistThreadStateById,
   stripRuntimeTurnContext,
   updateConversationStats
-} from "./chunk-NNGYYGX5.js";
+} from "./chunk-K5DCMBUV.js";
 import {
   createPluginEmbedder,
   createPluginLogger,
   createPluginModel,
   createPluginState,
   getPlugins
-} from "./chunk-USKP7IM2.js";
+} from "./chunk-ZO4TL4OK.js";
 import {
-  getDb
-} from "./chunk-DOB5RVMH.js";
+  getDb,
+  sameActorIdentity
+} from "./chunk-DVPWU77W.js";
 import {
   getStateAdapter
-} from "./chunk-TZVZCIYL.js";
+} from "./chunk-ZOOZ25BO.js";
 import {
   ProviderError,
   getProviderErrorAttributes,
   getProviderErrorUserMessage
-} from "./chunk-2RFM7STT.js";
+} from "./chunk-JCJN6TPV.js";
 import {
   buildTurnFailureResponse
-} from "./chunk-4SPRQJOW.js";
+} from "./chunk-JPG43UG7.js";
 import {
   parseSlackMessageTs
 } from "./chunk-F3B2YJ76.js";
@@ -122,18 +126,6 @@ function sanitizeText(text) {
     "[image data omitted]"
   ).replaceAll("\0", " ").trim();
 }
-function sameActorIdentity(left, right) {
-  if (!left || !right || left.platform !== right.platform) {
-    return false;
-  }
-  if (left.platform === "system" || right.platform === "system") {
-    return left.platform === "system" && right.platform === "system" && left.name === right.name;
-  }
-  if (left.platform === "slack" && right.platform === "slack") {
-    return left.teamId === right.teamId && left.userId === right.userId;
-  }
-  return left.userId === right.userId;
-}
 function messageProvenance(provenance) {
   return {
     authority: provenance.authority,
@@ -318,6 +310,12 @@ function taskPluginContext(plugin, message, options = {}) {
     embedder: createPluginEmbedder(pluginName, {
       signal: options.signal
     }),
+    events: createPluginConversationEvents({
+      conversationId: sessionParams.conversationId,
+      operationId: pluginTaskId(message),
+      plugin,
+      turnId: sessionParams.sessionId
+    }),
     id: pluginTaskId(message),
     log: createPluginLogger(pluginName),
     model: createPluginModel(pluginName, plugin.model, {

package/dist/{chunk-DOB5RVMH.js → chunk-DVPWU77W.js}

@@ -9,13 +9,13 @@ import {
   TURN_REASONING_LEVELS,
   getChatConfig,
   modelProfileSchema
-} from "./chunk-2RFM7STT.js";
+} from "./chunk-JCJN6TPV.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";
 import {
   normalizeIdentityEmail
-} from "./chunk-4SPRQJOW.js";
+} from "./chunk-JPG43UG7.js";
 import {
   parseSlackChannelReferenceId,
   parseSlackTeamId
@@ -770,6 +770,11 @@ function actorIdentityKey(actor) {
   }
   return actor.platform === "slack" ? `slack\0${actor.teamId}\0${actor.userId}` : `${actor.platform}\0${actor.userId}`;
 }
+function sameActorIdentity(left, right) {
+  return Boolean(
+    left && right && actorIdentityKey(left) === actorIdentityKey(right)
+  );
+}
 function instructionActors(provenance) {
   const seen = /* @__PURE__ */ new Set();
   const actors = [];
@@ -881,6 +886,16 @@ var toolExecutionStartedEventDataSchema = z2.object({
   toolCallId: z2.string().min(1),
   toolName: z2.string().min(1)
 }).strict();
+var guardianActionReviewedEventDataSchema = z2.object({
+  type: z2.literal("guardian_action_reviewed"),
+  turnId: z2.string().min(1),
+  toolCallId: z2.string().min(1),
+  toolName: z2.string().min(1),
+  costUsd: z2.number().finite().nonnegative().optional(),
+  decision: z2.enum(["allow", "ask", "deny"]),
+  riskLevel: z2.enum(["low", "medium", "high", "critical"]),
+  userAuthorization: z2.enum(["high", "medium", "low", "unknown"])
+}).strict();
 var conversationMessageRoleSchema = z2.union([
   z2.literal("user"),
   z2.literal("assistant"),
@@ -951,6 +966,14 @@ var turnContextEventDataSchema = z2.object({
   version: z2.number().int().positive(),
   content: z2.record(z2.string(), z2.unknown())
 }).strict();
+var pluginConversationEventDataSchema = z2.object({
+  type: z2.literal("plugin_event"),
+  namespace: z2.string().regex(/^[a-z][a-z0-9-]*$/),
+  name: z2.string().regex(/^[a-z][a-z0-9_]*$/),
+  version: z2.number().int().positive(),
+  turnId: z2.string().min(1),
+  content: z2.record(z2.string(), z2.unknown())
+}).strict();
 var turnCompletedEventDataSchema = z2.object({
   type: z2.literal("turn_completed"),
   turnId: z2.string().min(1),
@@ -989,10 +1012,12 @@ var appendableConversationEventDataSchema = z2.union([
   authorizationRequestedEventDataSchema,
   authorizationCompletedEventDataSchema,
   toolExecutionStartedEventDataSchema,
+  guardianActionReviewedEventDataSchema,
   messageHandledEventDataSchema,
   messagesSummarizedEventDataSchema,
   turnStartedEventDataSchema,
   turnContextEventDataSchema,
+  pluginConversationEventDataSchema,
   turnRoutedEventDataSchema,
   turnCompletedEventDataSchema,
   turnFailedEventDataSchema,
@@ -1013,10 +1038,12 @@ var KNOWN_CONVERSATION_EVENT_TYPES = [
   "authorization_requested",
   "authorization_completed",
   "tool_execution_started",
+  "guardian_action_reviewed",
   "message_handled",
   "messages_summarized",
   "turn_started",
   "turn_context",
+  "plugin_event",
   "turn_routed",
   "turn_completed",
   "turn_failed",
@@ -1515,6 +1542,7 @@ export {
   sameDestination,
   instructionProvenanceFor,
   contextProvenance,
+  sameActorIdentity,
   instructionActors,
   agentHistoryItemSchema,
   KNOWN_CONVERSATION_EVENT_TYPES,

package/dist/{chunk-2RFM7STT.js → chunk-JCJN6TPV.js}

@@ -12,7 +12,7 @@ import {
   normalizeGenAiFinishReason,
   serializeGenAiAttribute,
   withSpan
-} from "./chunk-4SPRQJOW.js";
+} from "./chunk-JPG43UG7.js";
 
 // src/chat/config.ts
 import { getModel as getModel2 } from "@earendil-works/pi-ai/compat";
@@ -28,6 +28,7 @@ function toOptionalTrimmed(value) {
 
 // src/chat/pi/sdk.ts
 import {
+  calculateCost,
   completeSimple,
   getEnvApiKey,
   getModel,
@@ -42,7 +43,11 @@ import {
 
 // src/chat/pi/client.ts
 import { createGatewayProvider } from "@ai-sdk/gateway";
-import { embedMany, generateObject, NoObjectGeneratedError } from "ai";
+import {
+  embedMany,
+  generateObject,
+  NoObjectGeneratedError
+} from "ai";
 
 // src/chat/services/provider-error.ts
 var ProviderError = class extends Error {
@@ -434,11 +439,40 @@ function logContextFromMetadata(modelId, metadata) {
     ...runId ? { runId } : {}
   };
 }
+function objectCompletionCost(modelId, usage) {
+  const cacheRead = usage.inputTokenDetails.cacheReadTokens;
+  const cacheWrite = usage.inputTokenDetails.cacheWriteTokens;
+  const input = usage.inputTokenDetails.noCacheTokens ?? (usage.inputTokens === void 0 ? void 0 : Math.max(0, usage.inputTokens - (cacheRead ?? 0) - (cacheWrite ?? 0)));
+  if (input === void 0 && usage.outputTokens === void 0 && cacheRead === void 0 && cacheWrite === void 0) {
+    return void 0;
+  }
+  return calculateCost(resolveGatewayModel(modelId), {
+    input: input ?? 0,
+    output: usage.outputTokens ?? 0,
+    cacheRead: cacheRead ?? 0,
+    cacheWrite: cacheWrite ?? 0,
+    ...usage.outputTokenDetails.reasoningTokens !== void 0 ? { reasoning: usage.outputTokenDetails.reasoningTokens } : {},
+    totalTokens: usage.totalTokens ?? (input ?? 0) + (usage.outputTokens ?? 0) + (cacheRead ?? 0) + (cacheWrite ?? 0),
+    cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 }
+  }).total;
+}
+function bestEffortObjectCompletionCost(modelId, usage) {
+  try {
+    return objectCompletionCost(modelId, usage);
+  } catch (error) {
+    logWarn("ai.completion.cost_estimate.failed", {
+      "exception.message": error instanceof Error ? error.message : String(error),
+      "gen_ai.request.model": modelId
+    });
+    return void 0;
+  }
+}
 async function completeObject(params) {
   const apiKey = getGatewayApiKey();
   const provider = createGatewayProvider(apiKey ? { apiKey } : {});
+  let result;
   try {
-    const result = await withSpan(
+    result = await withSpan(
       `${GEN_AI_OPERATION_CHAT} ${params.modelId}`,
       "gen_ai.chat",
       logContextFromMetadata(params.modelId, params.metadata),
@@ -450,6 +484,13 @@ async function completeObject(params) {
           ...params.system !== void 0 ? { system: params.system } : {},
           ...params.temperature !== void 0 ? { temperature: params.temperature } : {},
           ...params.maxTokens !== void 0 ? { maxOutputTokens: params.maxTokens } : {},
+          ...params.recordTelemetryPayloads === false ? {
+            experimental_telemetry: {
+              isEnabled: true,
+              recordInputs: false,
+              recordOutputs: false
+            }
+          } : {},
           ...params.signal !== void 0 ? { abortSignal: params.signal } : {}
         });
         setSpanAttributes({
@@ -470,7 +511,6 @@ async function completeObject(params) {
         ...params.maxTokens !== void 0 ? { "gen_ai.request.max_tokens": params.maxTokens } : {}
       }
     );
-    return { object: result.object };
   } catch (error) {
     const providerError = createProviderError(error, {
       ...NoObjectGeneratedError.isInstance(error) ? { kind: "invalid_response" } : {},
@@ -478,6 +518,11 @@ async function completeObject(params) {
     });
     throw providerError;
   }
+  const costUsd = bestEffortObjectCompletionCost(params.modelId, result.usage);
+  return {
+    object: result.object,
+    ...costUsd !== void 0 ? { costUsd } : {}
+  };
 }
 async function embedTexts(params) {
   const texts = params.texts.map((text) => text.trim());
@@ -695,6 +740,10 @@ var DEFAULT_FAST_MODEL_ID = getModel2(
   "vercel-ai-gateway",
   "anthropic/claude-haiku-4.5"
 ).id;
+var DEFAULT_GUARDIAN_MODEL_ID = getModel2(
+  "vercel-ai-gateway",
+  "openai/gpt-5.6-luna"
+).id;
 var DEFAULT_HANDOFF_MODEL_ID = getModel2(
   "vercel-ai-gateway",
   "openai/gpt-5.6-sol"
@@ -773,6 +822,7 @@ function readBotConfig(env, functionMaxDurationSeconds) {
   const modelId = validateGatewayModelId(env.AI_MODEL) ?? DEFAULT_MODEL_ID;
   const reasoningLevel = toOptionalTrimmed(env.AI_REASONING_LEVEL);
   const fastModelId = validateGatewayModelId(env.AI_FAST_MODEL ?? env.AI_MODEL) ?? DEFAULT_FAST_MODEL_ID;
+  const guardianModelId = validateGatewayModelId(env.AI_GUARDIAN_MODEL) ?? DEFAULT_GUARDIAN_MODEL_ID;
   const handoffModelId = validateGatewayModelId(env.AI_HANDOFF_MODEL) ?? DEFAULT_HANDOFF_MODEL_ID;
   return {
     userName: toOptionalTrimmed(env.JUNIOR_BOT_NAME) ?? "junior",
@@ -786,6 +836,7 @@ function readBotConfig(env, functionMaxDurationSeconds) {
     ) ?? DEFAULT_MODEL_CONTEXT_WINDOW_TOKENS,
     reasoningLevel: reasoningLevel === void 0 ? void 0 : parseTurnReasoningLevel(reasoningLevel),
     fastModelId,
+    guardianModelId,
     imageGenerationModelId: toOptionalTrimmed(env.AI_IMAGE_MODEL) ?? DEFAULT_IMAGE_GENERATION_MODEL_ID,
     embeddingModelId: validateEmbeddingModelId(env.AI_EMBEDDING_MODEL) ?? DEFAULT_EMBEDDING_MODEL_ID,
     loadingMessages: parseLoadingMessages(env.JUNIOR_LOADING_MESSAGES),

package/dist/{chunk-O2ULQJWR.js → chunk-JMUPEYKC.js}

@@ -39,7 +39,10 @@ function activityDays(days, nowMs, count) {
 
 // src/api/schema/conversation.ts
 import { z as z2 } from "zod";
-import { conversationAnnotationInputSchema } from "@sentry/junior-plugin-api";
+import {
+  conversationAnnotationInputSchema,
+  conversationEventPresentationSchema
+} from "@sentry/junior-plugin-api";
 var conversationReportStatusSchema = z2.enum([
   "active",
   "completed",
@@ -95,6 +98,7 @@ var conversationReportMessageEventDataSchema = z2.object({
   type: z2.literal("message"),
   messageId: z2.string().min(1),
   role: z2.enum(["assistant", "system", "user"]),
+  actorIdentity: actorIdentitySchema.optional(),
   eventType: z2.string().min(1).optional(),
   text: z2.string().optional(),
   redacted: z2.literal(true).optional()
@@ -105,6 +109,12 @@ var conversationReportMessageEventDataSchema = z2.object({
       message: "message content must be text or explicitly redacted"
     });
   }
+  if (data.redacted && data.actorIdentity) {
+    context.addIssue({
+      code: "custom",
+      message: "redacted messages must not expose actor identity"
+    });
+  }
 });
 var conversationReportMessageHandledEventDataSchema = z2.object({
   type: z2.literal("message_handled"),
@@ -210,6 +220,15 @@ var conversationReportTurnRoutedEventDataSchema = z2.object({
   confidence: z2.number().min(0).max(1).optional(),
   source: z2.enum(["configured", "inherited", "router"])
 }).strict();
+var conversationReportGuardianActionReviewedEventDataSchema = z2.object({
+  type: z2.literal("guardian_action_reviewed"),
+  turnId: z2.string().min(1),
+  toolCallId: z2.string().min(1),
+  toolName: z2.string().min(1),
+  decision: z2.enum(["allow", "ask", "deny"]),
+  riskLevel: z2.enum(["low", "medium", "high", "critical"]),
+  userAuthorization: z2.enum(["high", "medium", "low", "unknown"])
+}).strict();
 var conversationReportTurnContextEventDataSchema = z2.object({
   type: z2.literal("turn_context"),
   turnId: z2.string().min(1),
@@ -218,6 +237,14 @@ var conversationReportTurnContextEventDataSchema = z2.object({
   version: z2.number().int().positive(),
   content: z2.record(z2.string(), z2.unknown())
 }).strict();
+var conversationReportPluginEventDataSchema = z2.object({
+  type: z2.literal("plugin_event"),
+  namespace: z2.string().min(1),
+  name: z2.string().min(1),
+  version: z2.number().int().positive(),
+  turnId: z2.string().min(1),
+  presentation: conversationEventPresentationSchema
+}).strict();
 var conversationReportCompactionEventDataSchema = z2.object({
   type: z2.literal("compaction"),
   modelProfile: z2.string().min(1).optional(),
@@ -258,7 +285,9 @@ var conversationReportEventDataSchema = z2.discriminatedUnion("type", [
   conversationReportToolCallsEventDataSchema,
   conversationReportTurnLifecycleEventDataSchema,
   conversationReportTurnContextEventDataSchema,
+  conversationReportPluginEventDataSchema,
   conversationReportTurnRoutedEventDataSchema,
+  conversationReportGuardianActionReviewedEventDataSchema,
   conversationReportCompactionEventDataSchema,
   conversationReportHandoffEventDataSchema,
   conversationReportSubagentEventDataSchema
@@ -396,12 +425,29 @@ var conversationMetricDaySchema = z2.object({
   durationMs: z2.number(),
   tokens: z2.number().optional()
 }).strict();
+var guardianMetricDaySchema = z2.object({
+  allow: z2.number(),
+  ask: z2.number(),
+  costUsd: z2.number().optional(),
+  date: z2.string(),
+  deny: z2.number(),
+  requests: z2.number()
+}).strict();
+var guardianStatsSchema = z2.object({
+  allow: z2.number(),
+  ask: z2.number(),
+  costUsd: z2.number().optional(),
+  deny: z2.number(),
+  metricDays: z2.array(guardianMetricDaySchema),
+  requests: z2.number()
+}).strict();
 var conversationStatsReportSchema = z2.object({
   active: z2.number(),
   conversations: z2.number(),
   durationMs: z2.number(),
   failed: z2.number(),
   generatedAt: z2.string(),
+  guardian: guardianStatsSchema,
   metricDays: z2.array(conversationMetricDaySchema),
   locations: z2.array(conversationStatsItemSchema),
   actors: z2.array(conversationStatsItemSchema),

package/dist/{chunk-4SPRQJOW.js → chunk-JPG43UG7.js}

@@ -13,7 +13,7 @@ import {
 } from "./chunk-6GWA276C.js";
 import {
   getDeploymentTelemetryAttributes
-} from "./chunk-L2KJ2GNL.js";
+} from "./chunk-VTWLP6YS.js";
 
 // src/chat/logging.ts
 import path from "path";

package/dist/{chunk-NNGYYGX5.js → chunk-K5DCMBUV.js}

@@ -13,17 +13,17 @@ import {
   instructionProvenanceFor,
   sanitizePostgresJson,
   withConversationEventLock
-} from "./chunk-DOB5RVMH.js";
+} from "./chunk-DVPWU77W.js";
 import {
   getStateAdapter,
   sleep
-} from "./chunk-TZVZCIYL.js";
+} from "./chunk-ZOOZ25BO.js";
 import {
   botConfig,
   escapeXml,
   resolveGatewayModel,
   unwrapCurrentInstruction
-} from "./chunk-2RFM7STT.js";
+} from "./chunk-JCJN6TPV.js";
 import {
   toStoredSlackActor
 } from "./chunk-HZF5P5UN.js";
@@ -32,7 +32,7 @@ import {
   logException,
   logWarn,
   setSpanAttributes
-} from "./chunk-4SPRQJOW.js";
+} from "./chunk-JPG43UG7.js";
 import {
   isRecord,
   toOptionalNumber,
@@ -134,6 +134,16 @@ function instructionTextForProjection(text) {
   const withoutContext = text.replace(EMBEDDED_THREAD_CONTEXT_PATTERN, "").trim();
   return unwrapCurrentInstruction(withoutContext) ?? withoutContext;
 }
+function getUserMessageInstructionText(message) {
+  if (getPiMessageRole(message) !== "user") {
+    return "";
+  }
+  const content = message.content;
+  const text = typeof content === "string" ? content : Array.isArray(content) ? content.flatMap(
+    (part) => part && typeof part === "object" && part.type === "text" && typeof part.text === "string" ? [part.text] : []
+  ).join("\n") : "";
+  return instructionTextForProjection(text).trim();
+}
 function stripRuntimeTurnContext(messages) {
   return messages.flatMap((message) => {
     const content = userMessageContent(message);
@@ -1169,6 +1179,23 @@ async function recordToolExecutionStarted(args) {
     }
   ]);
 }
+async function recordGuardianActionReviewed(args) {
+  await getConversationEventStore().append(args.conversationId, [
+    {
+      data: {
+        type: "guardian_action_reviewed",
+        turnId: args.turnId,
+        toolCallId: args.toolCallId,
+        toolName: args.toolName,
+        ...args.costUsd !== void 0 ? { costUsd: args.costUsd } : {},
+        decision: args.decision,
+        riskLevel: args.riskLevel,
+        userAuthorization: args.userAuthorization
+      },
+      createdAtMs: Date.now()
+    }
+  ]);
+}
 
 // src/chat/state/turn-id.ts
 function buildDeterministicTurnId(messageId) {
@@ -2829,6 +2856,7 @@ export {
   hasRuntimeTurnContext,
   retainRuntimeTurnContext,
   instructionTextForProjection,
+  getUserMessageInstructionText,
   stripRuntimeTurnContext,
   historyItemFromPiMessage,
   piMessageFromHistoryItem,
@@ -2861,6 +2889,7 @@ export {
   loadTurnRoute,
   recordTurnRoute,
   recordToolExecutionStarted,
+  recordGuardianActionReviewed,
   buildDeterministicTurnId,
   buildDeterministicAssistantMessageId,
   ConversationTurnBoundaryError,

package/dist/{chunk-BDE5RZVF.js → chunk-LEQXDCWK.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-PE44LDDQ.js";
 import {
   normalizeSlackConversationId
-} from "./chunk-USKP7IM2.js";
+} from "./chunk-ZO4TL4OK.js";
 import {
   parseSlackThreadId
 } from "./chunk-S7G34U75.js";

package/dist/{chunk-OKUZIXQM.js → chunk-QKYO7ZNS.js}

@@ -1,6 +1,6 @@
 import {
   createPluginCatalogRuntime
-} from "./chunk-GN6WW7WR.js";
+} from "./chunk-XLPETJXX.js";
 
 // src/chat/plugins/catalog-runtime.ts
 var pluginCatalogRuntime = createPluginCatalogRuntime();