@sentry/junior 0.122.1 → 0.123.0

package/dist/api.js

@@ -24,15 +24,18 @@ import {
   personalTokenParamsSchema,
   revokePersonalTokenResponseSchema,
   statsReportSchema
-} from "./chunk-O2ULQJWR.js";
+} from "./chunk-JMUPEYKC.js";
 import {
   formatSlackConversationRedactedLabel,
   readHealthReport,
   resolveSlackConversationContextFromThreadId
-} from "./chunk-PXPBBOIU.js";
+} from "./chunk-LEQXDCWK.js";
 import {
   buildSentryConversationUrl
 } from "./chunk-4CODA7P5.js";
+import {
+  renderPluginConversationEvent
+} from "./chunk-THYOK2SL.js";
 import {
   healthReportSchema,
   pluginOperationalReportFeedSchema,
@@ -42,7 +45,7 @@ import {
 } from "./chunk-PE44LDDQ.js";
 import {
   readStats
-} from "./chunk-IEE5CSAP.js";
+} from "./chunk-5EUADEG3.js";
 import {
   agentTurnUsageSchema,
   hasAgentTurnUsage
@@ -53,12 +56,12 @@ import {
   getPlugins,
   listConversationAnnotations,
   readViewerActors
-} from "./chunk-QE33ATQW.js";
+} from "./chunk-ZO4TL4OK.js";
 import {
   decodeStoredConversationEvent,
   getDb,
   getSqlExecutor
-} from "./chunk-M7KAZXTE.js";
+} from "./chunk-DVPWU77W.js";
 import {
   juniorApiTokens,
   juniorConversationEvents,
@@ -66,8 +69,8 @@ import {
   juniorIdentities,
   juniorUsers
 } from "./chunk-GCGJGSQL.js";
-import "./chunk-WFJ2EG4E.js";
-import "./chunk-TI7SYDD4.js";
+import "./chunk-ZOOZ25BO.js";
+import "./chunk-JCJN6TPV.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";
@@ -76,12 +79,12 @@ import {
   parseSlackThreadId
 } from "./chunk-S7G34U75.js";
 import "./chunk-HZF5P5UN.js";
-import "./chunk-4JPJTFUH.js";
+import "./chunk-JPG43UG7.js";
 import "./chunk-OB42YVAE.js";
 import "./chunk-F3B2YJ76.js";
 import "./chunk-6GWA276C.js";
-import "./chunk-PYS4QZAF.js";
-import "./chunk-LZ4XXS76.js";
+import "./chunk-VTWLP6YS.js";
+import "./chunk-7YOBVIHY.js";
 import "./chunk-MLKGABMK.js";
 
 // src/api.ts
@@ -360,8 +363,10 @@ var conversationReportSourceEventTypes = [
   "assistant_message",
   "tool_result",
   "tool_execution_started",
+  "guardian_action_reviewed",
   "turn_started",
   "turn_context",
+  "plugin_event",
   "turn_routed",
   "turn_completed",
   "turn_failed",
@@ -403,6 +408,11 @@ var reportingMediaPartSchema = z2.object({
   type: z2.enum(["image", "audio"]),
   mimeType: z2.string().min(1).optional()
 }).passthrough();
+var reportingMessageAuthorSchema = z2.object({
+  fullName: z2.string().min(1).optional(),
+  userId: z2.string().min(1).optional(),
+  userName: z2.string().min(1).optional()
+}).passthrough();
 function sanitizeModelContentPart(value) {
   const text = reportingTextPartSchema.safeParse(value);
   if (text.success) return { type: "text", text: text.data.text };
@@ -420,6 +430,17 @@ function modelVisibleToolOutput(content) {
   const only = sanitized[0];
   return only.type === "text" ? only.text : only;
 }
+function reportMessageActorIdentity(data) {
+  if (data.role !== "user") return void 0;
+  const author = reportingMessageAuthorSchema.safeParse(data.meta?.author);
+  if (!author.success) return void 0;
+  const actorIdentity = {
+    ...author.data.fullName ? { fullName: author.data.fullName } : {},
+    ...author.data.userId ? { slackUserId: author.data.userId } : {},
+    ...author.data.userName ? { slackUserName: author.data.userName } : {}
+  };
+  return Object.keys(actorIdentity).length > 0 ? actorIdentity : void 0;
+}
 function reportToolCalls(args) {
   const message2 = reportingAssistantMessageSchema.safeParse(args.message);
   if (!message2.success) return void 0;
@@ -514,15 +535,31 @@ function conversationReportToolResultIds(events) {
 }
 function reportEventData(args) {
   const { data } = args;
+  if (data.type === "plugin_event") {
+    if (!args.canExposePayload) return void 0;
+    const presentation = renderPluginConversationEvent(data);
+    if (!presentation) return void 0;
+    return {
+      type: "plugin_event",
+      namespace: data.namespace,
+      name: data.name,
+      version: data.version,
+      turnId: data.turnId,
+      presentation
+    };
+  }
   switch (data.type) {
-    case "message":
+    case "message": {
+      const actorIdentity = args.canExposePayload ? reportMessageActorIdentity(data) : void 0;
       return {
         type: "message",
         messageId: data.messageId,
         role: data.role,
+        ...actorIdentity ? { actorIdentity } : {},
         ...typeof data.meta?.eventType === "string" ? { eventType: data.meta.eventType } : {},
         ...args.canExposePayload ? { text: data.text } : { redacted: true }
       };
+    }
     case "message_handled":
       return {
         type: "message_handled",
@@ -556,6 +593,16 @@ function reportEventData(args) {
         ...data.confidence !== void 0 ? { confidence: data.confidence } : {},
         source: data.source
       };
+    case "guardian_action_reviewed":
+      return {
+        type: "guardian_action_reviewed",
+        turnId: data.turnId,
+        toolCallId: data.toolCallId,
+        toolName: data.toolName,
+        decision: data.decision,
+        riskLevel: data.riskLevel,
+        userAuthorization: data.userAuthorization
+      };
     case "turn_completed":
       return {
         type: "turn_lifecycle",
@@ -1589,6 +1636,46 @@ function metricDays(rows, endMs) {
   }
   return days;
 }
+function guardianStats(rows, endMs) {
+  const byDate = new Map(rows.map((row) => [row.date, row]));
+  const end = new Date(endMs);
+  end.setUTCHours(0, 0, 0, 0);
+  const start = new Date(end);
+  start.setUTCDate(start.getUTCDate() - (WINDOW_DAYS - 1));
+  const metricDays2 = [];
+  let allow = 0;
+  let ask = 0;
+  let deny = 0;
+  let requests = 0;
+  let costUsd;
+  for (const cursor = new Date(start); cursor.getTime() <= end.getTime(); cursor.setUTCDate(cursor.getUTCDate() + 1)) {
+    const date = cursor.toISOString().slice(0, 10);
+    const row = byDate.get(date);
+    allow += row?.allow ?? 0;
+    ask += row?.ask ?? 0;
+    deny += row?.deny ?? 0;
+    requests += row?.requests ?? 0;
+    if (row?.costUsd !== null && row?.costUsd !== void 0) {
+      costUsd = addUsd(costUsd, row.costUsd);
+    }
+    metricDays2.push({
+      allow: row?.allow ?? 0,
+      ask: row?.ask ?? 0,
+      date,
+      deny: row?.deny ?? 0,
+      requests: row?.requests ?? 0,
+      ...row?.costUsd !== null && row?.costUsd !== void 0 ? { costUsd: row.costUsd } : {}
+    });
+  }
+  return {
+    allow,
+    ask,
+    deny,
+    metricDays: metricDays2,
+    requests,
+    ...costUsd !== void 0 ? { costUsd } : {}
+  };
+}
 async function aggregateStats(db, start, end) {
   const where = statsWhere(start, end);
   const activityDate = sql5`TO_CHAR(
@@ -1668,14 +1755,40 @@ async function aggregateStats(db, start, end) {
   ]);
   return { actorRows, locationRows, metricRows, totals: totalsRows[0] };
 }
+async function aggregateGuardianStats(db, start, end) {
+  const date = sql5`TO_CHAR(
+    ${juniorConversationEvents.createdAt} AT TIME ZONE 'UTC',
+    'YYYY-MM-DD'
+  )`;
+  const decision = sql5`${juniorConversationEvents.payload}->>'decision'`;
+  const cost2 = sql5`CASE
+    WHEN jsonb_typeof(${juniorConversationEvents.payload}->'costUsd') = 'number'
+      THEN (${juniorConversationEvents.payload}->>'costUsd')::double precision
+    ELSE NULL
+  END`;
+  return await db.select({
+    allow: sql5`COUNT(*) FILTER (WHERE ${decision} = 'allow')::integer`,
+    ask: sql5`COUNT(*) FILTER (WHERE ${decision} = 'ask')::integer`,
+    costUsd: sql5`SUM(${cost2})::double precision`,
+    date,
+    deny: sql5`COUNT(*) FILTER (WHERE ${decision} = 'deny')::integer`,
+    requests: sql5`COUNT(*)::integer`
+  }).from(juniorConversationEvents).where(
+    and6(
+      eq7(juniorConversationEvents.type, "guardian_action_reviewed"),
+      gte(juniorConversationEvents.createdAt, start),
+      lte(juniorConversationEvents.createdAt, end)
+    )
+  ).groupBy(date);
+}
 async function readConversationStatsFromSql() {
   const nowMs = Date.now();
   const { end, start } = statsWindow(nowMs);
-  const { actorRows, locationRows, metricRows, totals } = await aggregateStats(
-    getDb(),
-    start,
-    end
-  );
+  const db = getDb();
+  const [{ actorRows, locationRows, metricRows, totals }, guardianRows] = await Promise.all([
+    aggregateStats(db, start, end),
+    aggregateGuardianStats(db, start, end)
+  ]);
   const actors = /* @__PURE__ */ new Map();
   const locations = /* @__PURE__ */ new Map();
   for (const row of actorRows) {
@@ -1690,6 +1803,7 @@ async function readConversationStatsFromSql() {
     durationMs: totals?.durationMs ?? 0,
     failed: totals?.failed ?? 0,
     generatedAt: new Date(nowMs).toISOString(),
+    guardian: guardianStats(guardianRows, nowMs),
     metricDays: metricDays(metricRows, nowMs),
     locations: statsItems(locations),
     actors: statsItems(actors),
@@ -1740,7 +1854,7 @@ function readDescriptionText(home) {
   }
 }
 async function readSkillReports() {
-  const { discoverSkills } = await import("./skills-TTXTVFOG.js");
+  const { discoverSkills } = await import("./skills-QTI6GGJ4.js");
   const skills = await discoverSkills();
   return skillReportsSchema.parse(
     skills.map((skill) => ({
@@ -1750,7 +1864,7 @@ async function readSkillReports() {
   );
 }
 async function readPlugins() {
-  const { pluginCatalogRuntime } = await import("./catalog-runtime-VNNMSKCB.js");
+  const { pluginCatalogRuntime } = await import("./catalog-runtime-SZAS6EVH.js");
   return pluginsSchema.parse(
     pluginCatalogRuntime.getProviders().map((plugin) => ({
       configKeys: plugin.manifest.configKeys ?? [],
@@ -1763,7 +1877,7 @@ async function readPlugins() {
 async function readRuntimeInfoReport() {
   const [{ homeDir }, { pluginCatalogRuntime }, plugins, skills] = await Promise.all([
     import("./discovery-GUFTFBTL.js"),
-    import("./catalog-runtime-VNNMSKCB.js"),
+    import("./catalog-runtime-SZAS6EVH.js"),
     readPlugins(),
     readSkillReports()
   ]);
@@ -1779,7 +1893,7 @@ async function readRuntimeInfoReport() {
 }
 async function readPluginOperationalReportFeed() {
   const nowMs = Date.now();
-  const { getPluginOperationalReports } = await import("./agent-hooks-65WXVKKX.js");
+  const { getPluginOperationalReports } = await import("./agent-hooks-7JCABN73.js");
   return pluginOperationalReportFeedSchema.parse({
     source: "plugins",
     generatedAt: new Date(nowMs).toISOString(),

package/dist/app.js

@@ -50,7 +50,7 @@ import {
   startConversationWork,
   startSlackProcessingReaction,
   stripLeadingBotMention
-} from "./chunk-VLRECFIC.js";
+} from "./chunk-5P4QBMTY.js";
 import "./chunk-FA6POGLH.js";
 import {
   ConversationTurnLifecycleService,
@@ -65,14 +65,15 @@ import {
   processPluginTask,
   requireTurnFailureEventId,
   scheduleSessionCompletedPluginTasks
-} from "./chunk-GPQLJDT5.js";
+} from "./chunk-DQQCWMA2.js";
 import {
   GET,
   conversationVisibilityFromSlackChannelType,
   resolveSlackChannelTypeFromMessage,
   resolveSlackConversationContext
-} from "./chunk-PXPBBOIU.js";
+} from "./chunk-LEQXDCWK.js";
 import "./chunk-4CODA7P5.js";
+import "./chunk-THYOK2SL.js";
 import "./chunk-PE44LDDQ.js";
 import {
   ConversationQueueMessageRejectedError,
@@ -90,7 +91,7 @@ import {
 import {
   validatePluginEgressCredentialHooks,
   validatePluginRegistrations
-} from "./chunk-HGREP4UX.js";
+} from "./chunk-A3TUEGKH.js";
 import {
   defineJuniorPlugins,
   pluginCatalogConfigFromEnv,
@@ -123,7 +124,7 @@ import {
   setConfigDefaults,
   shouldEmitDevAgentTrace,
   shouldPropagateSandboxEgressTrace
-} from "./chunk-3KYLHUVC.js";
+} from "./chunk-3S2K7SYY.js";
 import "./chunk-DIB4GX3G.js";
 import {
   RetryableDeliveryError,
@@ -134,7 +135,7 @@ import {
   formatProviderLabel,
   postSlackMessage,
   startOAuthFlow
-} from "./chunk-U5PRRZMZ.js";
+} from "./chunk-RQ6BLJJD.js";
 import {
   ConversationTurnBoundaryError,
   CooperativeTurnYieldError,
@@ -190,10 +191,10 @@ import {
   trimTrailingAssistantMessages,
   updateConversationStats,
   upsertConversationMessage
-} from "./chunk-BXT63TNS.js";
+} from "./chunk-K5DCMBUV.js";
 import "./chunk-HDSDCEPK.js";
-import "./chunk-MSDKKTRG.js";
-import "./chunk-IEE5CSAP.js";
+import "./chunk-2DZD6HX2.js";
+import "./chunk-5EUADEG3.js";
 import "./chunk-MU6HHZEN.js";
 import "./chunk-PDO5BLNM.js";
 import "./chunk-UIE3R5XU.js";
@@ -218,7 +219,7 @@ import {
   validatePlugins,
   verifyScheduledTaskCredentialSubject,
   verifySlackDirectCredentialSubject
-} from "./chunk-QE33ATQW.js";
+} from "./chunk-ZO4TL4OK.js";
 import {
   contextProvenance,
   createSlackDestination,
@@ -229,7 +230,7 @@ import {
   instructionProvenanceFor,
   requireSlackDestination,
   withConversationEventLock
-} from "./chunk-M7KAZXTE.js";
+} from "./chunk-DVPWU77W.js";
 import {
   juniorConversationEvents,
   juniorConversations
@@ -238,7 +239,7 @@ import {
   acquireActiveLock,
   getStateAdapter,
   sleep
-} from "./chunk-WFJ2EG4E.js";
+} from "./chunk-ZOOZ25BO.js";
 import {
   STANDARD_MODEL_PROFILE,
   botConfig,
@@ -256,18 +257,18 @@ import {
   modelIdForProfile,
   setSlackReactionConfig,
   standardModelId
-} from "./chunk-TI7SYDD4.js";
+} from "./chunk-JCJN6TPV.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";
 import {
   parseSlackThreadId
 } from "./chunk-S7G34U75.js";
-import "./chunk-XBYNPBPQ.js";
+import "./chunk-DAMUPWYR.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-73TQBD5S.js";
-import "./chunk-4ZV2GNHX.js";
+} from "./chunk-QKYO7ZNS.js";
+import "./chunk-XLPETJXX.js";
 import {
   credentialSubjectSchema
 } from "./chunk-W3U3YQYI.js";
@@ -294,7 +295,7 @@ import {
   withContext,
   withLogContext,
   withSpan
-} from "./chunk-4JPJTFUH.js";
+} from "./chunk-JPG43UG7.js";
 import {
   toOptionalString
 } from "./chunk-OB42YVAE.js";
@@ -309,10 +310,10 @@ import "./chunk-OOUNJNMR.js";
 import "./chunk-H4HBKISO.js";
 import {
   JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE
-} from "./chunk-PYS4QZAF.js";
+} from "./chunk-VTWLP6YS.js";
 import {
   JUNIOR_VERSION
-} from "./chunk-LZ4XXS76.js";
+} from "./chunk-7YOBVIHY.js";
 import "./chunk-MLKGABMK.js";
 
 // src/app.ts
@@ -4586,6 +4587,7 @@ var ROUTER_CLASSIFIER_MAX_TOKENS = 240;
 var LEADING_SLACK_MENTION_RE = /^\s*<@([A-Z0-9]+)(?:\|([^>]+))?>[\s,:-]*/i;
 var LEADING_NAMED_MENTION_RE = /^\s*@([a-z0-9._-]+)\b[\s,:-]*/i;
 var TRANSCRIPT_MESSAGE_LINE_RE = /^\[(assistant|system|user)\]\s+([^:]+):\s+([\s\S]+)$/i;
+var FORCED_THREAD_OPTOUT_RE = /^!stop(?:\s|$)/i;
 var THREAD_OPTOUT_PATTERNS = [
   /\bstop (?:watching|replying|participating)\b/i,
   /\bstay out\b/i,
@@ -4629,6 +4631,9 @@ function detectLeadingOtherPartyAddress(rawText, text, botUserName) {
   }
   return `named_mention:${directedName}`;
 }
+function isForcedThreadOptOutCommand(rawText, text) {
+  return FORCED_THREAD_OPTOUT_RE.test(rawText.trim()) || FORCED_THREAD_OPTOUT_RE.test(text.trim());
+}
 function isThreadOptOutInstruction(rawText, text) {
   return THREAD_OPTOUT_PATTERNS.some(
     (pattern) => pattern.test(rawText) || pattern.test(text)
@@ -4788,6 +4793,14 @@ function buildRouterSystemPrompt(botUserName) {
 async function decideSubscribedThreadReply(args) {
   const text = args.input.text.trim();
   const rawText = args.input.rawText.trim();
+  if (isForcedThreadOptOutCommand(rawText, text)) {
+    return {
+      shouldReply: false,
+      shouldUnsubscribe: true,
+      reason: "thread_opt_out" /* ThreadOptOut */,
+      reasonDetail: "forced !stop command"
+    };
+  }
   const preflightDecision = getSubscribedReplyPreflightDecision({
     botUserName: args.botUserName,
     rawText,

package/dist/{catalog-runtime-VNNMSKCB.js → catalog-runtime-SZAS6EVH.js}

@@ -1,17 +1,17 @@
 import {
   pluginCatalogRuntime
-} from "./chunk-73TQBD5S.js";
-import "./chunk-4ZV2GNHX.js";
+} from "./chunk-QKYO7ZNS.js";
+import "./chunk-XLPETJXX.js";
 import "./chunk-W3U3YQYI.js";
 import "./chunk-HZF5P5UN.js";
-import "./chunk-4JPJTFUH.js";
+import "./chunk-JPG43UG7.js";
 import "./chunk-OB42YVAE.js";
 import "./chunk-F3B2YJ76.js";
 import "./chunk-6GWA276C.js";
 import "./chunk-OOUNJNMR.js";
 import "./chunk-H4HBKISO.js";
-import "./chunk-PYS4QZAF.js";
-import "./chunk-LZ4XXS76.js";
+import "./chunk-VTWLP6YS.js";
+import "./chunk-7YOBVIHY.js";
 import "./chunk-MLKGABMK.js";
 export {
   pluginCatalogRuntime

package/dist/chat/agent/action-confirmation-retry.d.ts

@@ -0,0 +1,6 @@
+import type { PiMessage } from "@/chat/pi/messages";
+/**
+ * Return the durable tool-result boundary for one additional agent
+ * continuation when an ask rejection has no destination-visible reply.
+ */
+export declare function actionConfirmationRetryMessages(messages: readonly PiMessage[]): PiMessage[] | undefined;

package/dist/chat/agent/tools.d.ts

@@ -33,6 +33,12 @@ interface ToolWiringArgs {
     currentActor?: Actor;
     /** Live projection of the run's committed instruction-authority actors so far. */
     currentActors?: () => Actor[];
+    /** Live Pi transcript used to give Guardian bounded action context. */
+    currentAgentMessages: () => PiMessage[];
+    /** Durable transcript for this turn only, used to restore rejection state. */
+    currentTurnMessages: readonly PiMessage[];
+    /** Live same-actor instructions that authorize the pending action. */
+    currentUserIntent: () => string;
     artifactStatePatch: Partial<ThreadArtifactsState>;
     availableSkills: SkillMetadata[];
     configurationValues: Record<string, unknown>;
@@ -43,6 +49,7 @@ interface ToolWiringArgs {
     generatedFiles: FileUpload[];
     invokedSkill: SkillMetadata | null;
     observers: AgentRunObservers;
+    onFatalToolError(error: Error): void;
     onSandboxRefChanged: (sandboxRef: SandboxRef) => void;
     policy: AgentRunPolicy;
     preAgentPromptMessages: () => PiMessage[];
@@ -68,6 +75,11 @@ export interface ToolWiring {
     getPendingAuthPause: () => AuthorizationPauseError | undefined;
     mcpToolManager: McpToolManager;
     pluginHooks: PluginHookRunner;
+    /** Project core-owned review state into one durable Pi tool result. */
+    projectActionReviewResult<TResult extends {
+        details?: unknown;
+        isError?: boolean;
+    }>(toolCallId: string, result: TResult): TResult;
     getSandboxRef: () => SandboxRef | undefined;
     close(): Promise<void>;
     toolGuidance: Array<{

package/dist/chat/config.d.ts

@@ -12,6 +12,7 @@ export interface BotConfig {
     crossActorMidRunMode: CrossActorMidRunMode;
     embeddingModelId: string;
     fastModelId: string;
+    guardianModelId: string;
     imageGenerationModelId: string;
     loadingMessages: string[];
     profiles: Readonly<Record<string, ExecutionProfileConfig>>;

package/dist/chat/conversations/history.d.ts

@@ -223,6 +223,29 @@ export declare const conversationEventDataSchema: z.ZodUnion<readonly [z.ZodUnio
     type: z.ZodLiteral<"tool_execution_started">;
     toolCallId: z.ZodString;
     toolName: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"guardian_action_reviewed">;
+    turnId: z.ZodString;
+    toolCallId: z.ZodString;
+    toolName: z.ZodString;
+    costUsd: z.ZodOptional<z.ZodNumber>;
+    decision: z.ZodEnum<{
+        allow: "allow";
+        ask: "ask";
+        deny: "deny";
+    }>;
+    riskLevel: z.ZodEnum<{
+        low: "low";
+        medium: "medium";
+        high: "high";
+        critical: "critical";
+    }>;
+    userAuthorization: z.ZodEnum<{
+        unknown: "unknown";
+        low: "low";
+        medium: "medium";
+        high: "high";
+    }>;
 }, z.core.$strict>, z.ZodObject<{
     type: z.ZodLiteral<"message_handled">;
     messageId: z.ZodString;
@@ -252,6 +275,13 @@ export declare const conversationEventDataSchema: z.ZodUnion<readonly [z.ZodUnio
     kind: z.ZodString;
     version: z.ZodNumber;
     content: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"plugin_event">;
+    namespace: z.ZodString;
+    name: z.ZodString;
+    version: z.ZodNumber;
+    turnId: z.ZodString;
+    content: z.ZodRecord<z.ZodString, z.ZodUnknown>;
 }, z.core.$strict>, z.ZodObject<{
     type: z.ZodLiteral<"turn_routed">;
     turnId: z.ZodString;
@@ -392,7 +422,7 @@ export declare const conversationEventDataSchema: z.ZodUnion<readonly [z.ZodUnio
 /** One durable conversation event's validated data. */
 export type ConversationEventData = z.output<typeof conversationEventDataSchema>;
 /** Event type names recognized by current readers and observational queries. */
-export declare const KNOWN_CONVERSATION_EVENT_TYPES: readonly ["message", "message_updated", "user_message", "assistant_message", "tool_result", "mcp_provider_connected", "authorization_requested", "authorization_completed", "tool_execution_started", "message_handled", "messages_summarized", "turn_started", "turn_context", "turn_routed", "turn_completed", "turn_failed", "subagent_started", "subagent_ended", "handoff", "compaction"];
+export declare const KNOWN_CONVERSATION_EVENT_TYPES: readonly ["message", "message_updated", "user_message", "assistant_message", "tool_result", "mcp_provider_connected", "authorization_requested", "authorization_completed", "tool_execution_started", "guardian_action_reviewed", "message_handled", "messages_summarized", "turn_started", "turn_context", "plugin_event", "turn_routed", "turn_completed", "turn_failed", "subagent_started", "subagent_ended", "handoff", "compaction"];
 /** One known durable conversation event type name. */
 export type KnownConversationEventType = (typeof KNOWN_CONVERSATION_EVENT_TYPES)[number];
 declare const unknownConversationEventDataSchema: z.ZodObject<{
@@ -475,6 +505,29 @@ export declare const conversationEventSchema: z.ZodUnion<readonly [z.ZodObject<{
         type: z.ZodLiteral<"tool_execution_started">;
         toolCallId: z.ZodString;
         toolName: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"guardian_action_reviewed">;
+        turnId: z.ZodString;
+        toolCallId: z.ZodString;
+        toolName: z.ZodString;
+        costUsd: z.ZodOptional<z.ZodNumber>;
+        decision: z.ZodEnum<{
+            allow: "allow";
+            ask: "ask";
+            deny: "deny";
+        }>;
+        riskLevel: z.ZodEnum<{
+            low: "low";
+            medium: "medium";
+            high: "high";
+            critical: "critical";
+        }>;
+        userAuthorization: z.ZodEnum<{
+            unknown: "unknown";
+            low: "low";
+            medium: "medium";
+            high: "high";
+        }>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"message_handled">;
         messageId: z.ZodString;
@@ -504,6 +557,13 @@ export declare const conversationEventSchema: z.ZodUnion<readonly [z.ZodObject<{
         kind: z.ZodString;
         version: z.ZodNumber;
         content: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"plugin_event">;
+        namespace: z.ZodString;
+        name: z.ZodString;
+        version: z.ZodNumber;
+        turnId: z.ZodString;
+        content: z.ZodRecord<z.ZodString, z.ZodUnknown>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"turn_routed">;
         turnId: z.ZodString;
@@ -750,6 +810,29 @@ export declare const newConversationEventSchema: z.ZodObject<{
         type: z.ZodLiteral<"tool_execution_started">;
         toolCallId: z.ZodString;
         toolName: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"guardian_action_reviewed">;
+        turnId: z.ZodString;
+        toolCallId: z.ZodString;
+        toolName: z.ZodString;
+        costUsd: z.ZodOptional<z.ZodNumber>;
+        decision: z.ZodEnum<{
+            allow: "allow";
+            ask: "ask";
+            deny: "deny";
+        }>;
+        riskLevel: z.ZodEnum<{
+            low: "low";
+            medium: "medium";
+            high: "high";
+            critical: "critical";
+        }>;
+        userAuthorization: z.ZodEnum<{
+            unknown: "unknown";
+            low: "low";
+            medium: "medium";
+            high: "high";
+        }>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"message_handled">;
         messageId: z.ZodString;
@@ -779,6 +862,13 @@ export declare const newConversationEventSchema: z.ZodObject<{
         kind: z.ZodString;
         version: z.ZodNumber;
         content: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"plugin_event">;
+        namespace: z.ZodString;
+        name: z.ZodString;
+        version: z.ZodNumber;
+        turnId: z.ZodString;
+        content: z.ZodRecord<z.ZodString, z.ZodUnknown>;
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"turn_routed">;
         turnId: z.ZodString;