@sentry/junior 0.179.0 → 0.181.0

package/dist/{chunk-SLGGOASN.js → chunk-4IX32NSL.js}

@@ -1,18 +1,18 @@
 import {
   credentialUserSubjectId
-} from "./chunk-CGA4ERJ5.js";
-import {
-  logInfo,
-  logWarn,
-  setSpanAttributes
-} from "./chunk-HQNE5APD.js";
+} from "./chunk-CEMMLV5L.js";
 import {
   discoverInstalledPluginPackageContent,
   normalizePluginPackageNames
-} from "./chunk-OOUNJNMR.js";
+} from "./chunk-DWPN6SCH.js";
 import {
   pluginRoots
-} from "./chunk-H4HBKISO.js";
+} from "./chunk-TXKUKMVO.js";
+import {
+  logInfo,
+  logWarn,
+  setSpanAttributes
+} from "./chunk-EBMRB6Z6.js";
 
 // src/chat/plugins/manifest.ts
 import { z } from "zod";
@@ -626,9 +626,9 @@ function normalizeCredentials(data, name) {
   return {
     type: "oauth-bearer",
     domains,
-    ...apiHeaders ? { apiHeaders } : {},
+    ...apiHeaders ? { apiHeaders } : void 0,
     authTokenEnv: result.data["auth-token-env"],
-    ...result.data["auth-token-placeholder"] ? { authTokenPlaceholder: result.data["auth-token-placeholder"] } : {}
+    ...result.data["auth-token-placeholder"] ? { authTokenPlaceholder: result.data["auth-token-placeholder"] } : void 0
   };
 }
 function normalizeRuntimeDependencies(entries, name) {
@@ -751,8 +751,8 @@ function normalizeRuntimePostinstall(commands, name) {
     const normalizedArgs = result.data.args?.map((arg) => arg.trim()).filter((arg) => arg.length > 0);
     parsed.push({
       cmd: result.data.cmd,
-      ...normalizedArgs && normalizedArgs.length > 0 ? { args: normalizedArgs } : {},
-      ...typeof result.data.sudo === "boolean" ? { sudo: result.data.sudo } : {}
+      ...normalizedArgs && normalizedArgs.length > 0 ? { args: normalizedArgs } : void 0,
+      ...typeof result.data.sudo === "boolean" ? { sudo: result.data.sudo } : void 0
     });
   }
   return parsed.length > 0 ? parsed : void 0;
@@ -831,9 +831,9 @@ function normalizeMcp(data, envVars, name) {
   return {
     transport: "http",
     url: result.data.url,
-    ...headers ? { headers } : {},
-    ...result.data["allowed-tools"] ? { allowedTools: result.data["allowed-tools"] } : {},
-    ...result.data["wrapped-tools"] ? { wrappedTools: result.data["wrapped-tools"] } : {}
+    ...headers ? { headers } : void 0,
+    ...result.data["allowed-tools"] ? { allowedTools: result.data["allowed-tools"] } : void 0,
+    ...result.data["wrapped-tools"] ? { wrappedTools: result.data["wrapped-tools"] } : void 0
   };
 }
 function parseManifestSource(parsedSource, dir, config, options) {
@@ -941,14 +941,14 @@ function parseManifestSource(parsedSource, dir, config, options) {
     displayName: data["display-name"],
     description: data.description,
     configKeys,
-    ...domains ? { domains } : {},
-    ...apiHeaders ? { apiHeaders } : {},
-    ...commandEnv ? { commandEnv } : {},
-    ...Object.keys(envVars).length > 0 ? { envVars } : {},
-    ...credentials ? { credentials } : {},
-    ...runtimeDependencies ? { runtimeDependencies } : {},
-    ...runtimePostinstall ? { runtimePostinstall } : {},
-    ...mcp ? { mcp } : {}
+    ...domains ? { domains } : void 0,
+    ...apiHeaders ? { apiHeaders } : void 0,
+    ...commandEnv ? { commandEnv } : void 0,
+    ...Object.keys(envVars).length > 0 ? { envVars } : void 0,
+    ...credentials ? { credentials } : void 0,
+    ...runtimeDependencies ? { runtimeDependencies } : void 0,
+    ...runtimePostinstall ? { runtimePostinstall } : void 0,
+    ...mcp ? { mcp } : void 0
   };
   if (data.oauth) {
     if (!credentials && options?.allowHookManagedEgress !== true) {
@@ -977,11 +977,11 @@ function parseManifestSource(parsedSource, dir, config, options) {
       clientSecretEnv: result.data["client-secret-env"],
       authorizeEndpoint: result.data["authorize-endpoint"],
       tokenEndpoint: result.data["token-endpoint"],
-      ...result.data.scope ? { scope: result.data.scope } : {},
-      ...authorizeParams ? { authorizeParams } : {},
-      ...result.data["token-auth-method"] ? { tokenAuthMethod: result.data["token-auth-method"] } : {},
-      ...tokenExtraHeaders ? { tokenExtraHeaders } : {},
-      ...result.data["treat-empty-scope-as-unreported"] ? { treatEmptyScopeAsUnreported: true } : {}
+      ...result.data.scope ? { scope: result.data.scope } : void 0,
+      ...authorizeParams ? { authorizeParams } : void 0,
+      ...result.data["token-auth-method"] ? { tokenAuthMethod: result.data["token-auth-method"] } : void 0,
+      ...tokenExtraHeaders ? { tokenExtraHeaders } : void 0,
+      ...result.data["treat-empty-scope-as-unreported"] ? { treatEmptyScopeAsUnreported: true } : void 0
     };
   }
   assertCommandEnvDoesNotExposeHostSecretRefs(
@@ -1021,7 +1021,7 @@ function parseManifestSource(parsedSource, dir, config, options) {
     manifest.target = {
       type: result.data.type,
       configKey: qualifiedKey,
-      ...commandFlags ? { commandFlags } : {}
+      ...commandFlags ? { commandFlags } : void 0
     };
   }
   return manifest;
@@ -1152,7 +1152,7 @@ function getOAuthProviderErrorAttributes(error) {
     "app.credential.provider": error.provider,
     "app.oauth.error.phase": error.phase,
     "server.address": error.resourceHost,
-    ...error.status !== void 0 ? { "http.response.status_code": error.status } : {}
+    ...error.status !== void 0 ? { "http.response.status_code": error.status } : void 0
   };
 }
 async function readBoundedOAuthErrorBody(response) {
@@ -1393,7 +1393,7 @@ function parseOAuthTokenResponse(data, requestedScope, options) {
   const result = {
     accessToken,
     refreshToken: resolvedRefreshToken,
-    ...scope ? { scope } : {}
+    ...scope ? { scope } : void 0
   };
   if (expiresIn !== void 0) {
     if (typeof expiresIn !== "number" || !Number.isFinite(expiresIn) || expiresIn <= 0) {
@@ -1593,9 +1593,9 @@ function createOAuthBearerBroker(manifest, credentials, deps) {
                     );
                   }
                   const refreshedTokens = {
-                    ...latest.refreshTokenExpiresAt ? { refreshTokenExpiresAt: latest.refreshTokenExpiresAt } : {},
+                    ...latest.refreshTokenExpiresAt ? { refreshTokenExpiresAt: latest.refreshTokenExpiresAt } : void 0,
                     ...refreshed,
-                    ...latest.account ? { account: latest.account } : {}
+                    ...latest.account ? { account: latest.account } : void 0
                   };
                   await deps.userTokenStore.set(
                     userSubjectId,
@@ -1690,8 +1690,8 @@ function registerPluginManifest(state, manifest, pluginDir, skillsDir, migration
   const definition = {
     manifest,
     dir: pluginDir,
-    ...migrationsDir ? { migrationsDir } : {},
-    ...skillsDir ? { skillsDir } : {}
+    ...migrationsDir ? { migrationsDir } : void 0,
+    ...skillsDir ? { skillsDir } : void 0
   };
   state.pluginDefinitions.push(definition);
   state.pluginsByName.set(manifest.name, definition);
@@ -1775,7 +1775,7 @@ function normalizePluginCatalogConfig(config) {
   return {
     inlineManifests: config.inlineManifests ? structuredClone(config.inlineManifests) : void 0,
     packages: normalizePluginPackageNames(config.packages),
-    ...config.manifests ? { manifests: structuredClone(config.manifests) } : {}
+    ...config.manifests ? { manifests: structuredClone(config.manifests) } : void 0
   };
 }
 function clonePluginCatalogConfig(config) {
@@ -1783,9 +1783,9 @@ function clonePluginCatalogConfig(config) {
     return void 0;
   }
   return {
-    ...config.inlineManifests ? { inlineManifests: structuredClone(config.inlineManifests) } : {},
+    ...config.inlineManifests ? { inlineManifests: structuredClone(config.inlineManifests) } : void 0,
     packages: [...config.packages ?? []],
-    ...config.manifests ? { manifests: structuredClone(config.manifests) } : {}
+    ...config.manifests ? { manifests: structuredClone(config.manifests) } : void 0
   };
 }
 function packageContentByName(packagedContent, packageName) {
@@ -1907,7 +1907,7 @@ function logLoadedPlugins(state) {
       "app.plugin.config_key_count": plugin.manifest.configKeys.length,
       "app.plugin.has_mcp": Boolean(plugin.manifest.mcp),
       "file.directory": plugin.dir,
-      ...plugin.skillsDir ? { "app.file.skill_directory": plugin.skillsDir } : {}
+      ...plugin.skillsDir ? { "app.file.skill_directory": plugin.skillsDir } : void 0
     });
   }
 }
@@ -1986,8 +1986,8 @@ function createPluginCatalogRuntime() {
         for (const command of plugin.manifest.runtimePostinstall ?? []) {
           commands.push({
             cmd: command.cmd,
-            ...command.args ? { args: [...command.args] } : {},
-            ...command.sudo !== void 0 ? { sudo: command.sudo } : {}
+            ...command.args ? { args: [...command.args] } : void 0,
+            ...command.sudo !== void 0 ? { sudo: command.sudo } : void 0
           });
         }
       }
@@ -2002,11 +2002,11 @@ function createPluginCatalogRuntime() {
         clientSecretEnv: oauth.clientSecretEnv,
         authorizeEndpoint: oauth.authorizeEndpoint,
         tokenEndpoint: oauth.tokenEndpoint,
-        ...oauth.scope ? { scope: oauth.scope } : {},
-        ...oauth.authorizeParams ? { authorizeParams: { ...oauth.authorizeParams } } : {},
-        ...oauth.tokenAuthMethod ? { tokenAuthMethod: oauth.tokenAuthMethod } : {},
-        ...oauth.tokenExtraHeaders ? { tokenExtraHeaders: { ...oauth.tokenExtraHeaders } } : {},
-        ...oauth.treatEmptyScopeAsUnreported ? { treatEmptyScopeAsUnreported: true } : {},
+        ...oauth.scope ? { scope: oauth.scope } : void 0,
+        ...oauth.authorizeParams ? { authorizeParams: { ...oauth.authorizeParams } } : void 0,
+        ...oauth.tokenAuthMethod ? { tokenAuthMethod: oauth.tokenAuthMethod } : void 0,
+        ...oauth.tokenExtraHeaders ? { tokenExtraHeaders: { ...oauth.tokenExtraHeaders } } : void 0,
+        ...oauth.treatEmptyScopeAsUnreported ? { treatEmptyScopeAsUnreported: true } : void 0,
         callbackPath: `/api/oauth/callback/${plugin.manifest.name}`
       };
     },

package/dist/{chunk-6ZWRNC4D.js → chunk-6Y5B5PEX.js}

@@ -1,6 +1,6 @@
 import {
   credentialContextSchema
-} from "./chunk-CGA4ERJ5.js";
+} from "./chunk-CEMMLV5L.js";
 
 // src/chat/sandbox/egress/schemas.ts
 import { z } from "zod";

package/dist/chunk-7H2VZTWN.js

@@ -0,0 +1,103 @@
+// src/chat/vercel-queue-client.ts
+import { QueueClient } from "@vercel/queue";
+function defaultQueueClientOptions() {
+  if (process.env.VERCEL_DEPLOYMENT_ID?.trim()) {
+    return {};
+  }
+  return { deploymentId: null };
+}
+function createVercelQueueClient() {
+  return new QueueClient(defaultQueueClientOptions());
+}
+
+// src/chat/queue/sign.ts
+import { createHmac, timingSafeEqual } from "crypto";
+import { z } from "zod";
+var QUEUE_SIGNATURE_MAX_AGE_MS = 60 * 60 * 1e3;
+function secret() {
+  return process.env.JUNIOR_SECRET?.trim() || void 0;
+}
+function digest(args) {
+  return createHmac("sha256", args.secret).update(
+    [args.context, args.signedAtMs, ...args.parts].join(args.separator)
+  ).digest("hex");
+}
+function sameHex(expected, actual) {
+  const left = Buffer.from(expected);
+  const right = Buffer.from(actual);
+  return left.length === right.length && timingSafeEqual(left, right);
+}
+function body(value) {
+  const {
+    signature: _signature,
+    signatureVersion: _signatureVersion,
+    signedAtMs: _signedAtMs,
+    ...message
+  } = value;
+  return message;
+}
+function signQueueMessage(config, message, nowMs = Date.now()) {
+  const key = secret();
+  if (!key) {
+    throw new Error("Cannot sign queue message without JUNIOR_SECRET");
+  }
+  if (!Number.isFinite(nowMs)) {
+    throw new Error("Cannot sign queue message with an invalid clock");
+  }
+  const separator = config.separator ?? "\0";
+  return {
+    ...message,
+    signedAtMs: nowMs,
+    signatureVersion: config.signatureVersion,
+    signature: digest({
+      context: config.context,
+      parts: config.parts(message),
+      secret: key,
+      separator,
+      signedAtMs: nowMs
+    })
+  };
+}
+function verifyQueueMessage(config, value, nowMs = Date.now()) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return { status: "rejected", reason: "malformed" };
+  }
+  const signed = z.object({
+    signature: z.string().trim().min(1),
+    signatureVersion: z.literal(config.signatureVersion),
+    signedAtMs: z.number().finite()
+  }).safeParse(value);
+  const message = config.schema.safeParse(body(value));
+  if (!signed.success || !message.success) {
+    return { status: "rejected", reason: "malformed" };
+  }
+  const key = secret();
+  if (!key) {
+    return { status: "unavailable", reason: "missing_secret" };
+  }
+  if (!Number.isFinite(nowMs)) {
+    return { status: "unavailable", reason: "invalid_clock" };
+  }
+  const maxAgeMs = config.maxAgeMs ?? QUEUE_SIGNATURE_MAX_AGE_MS;
+  if (Math.abs(nowMs - signed.data.signedAtMs) > maxAgeMs) {
+    return { status: "rejected", reason: "expired" };
+  }
+  const expected = digest({
+    context: config.context,
+    parts: config.parts(message.data),
+    secret: key,
+    separator: config.separator ?? "\0",
+    signedAtMs: signed.data.signedAtMs
+  });
+  if (!sameHex(expected, signed.data.signature)) {
+    return { status: "rejected", reason: "signature_mismatch" };
+  }
+  return { status: "verified", message: message.data };
+}
+
+export {
+  createVercelQueueClient,
+  QUEUE_SIGNATURE_MAX_AGE_MS,
+  signQueueMessage,
+  verifyQueueMessage
+};

package/dist/{chunk-CGA4ERJ5.js → chunk-CEMMLV5L.js}

@@ -1,6 +1,6 @@
 import {
   parseActorUserId
-} from "./chunk-M63DETLL.js";
+} from "./chunk-N7TMSOZH.js";
 
 // src/chat/credentials/context.ts
 import { z } from "zod";

package/dist/{chunk-FIANEE7Z.js → chunk-CM5HNV2W.js}

@@ -16,9 +16,9 @@ function cloneInlineManifests(registrations) {
               ...plugin.manifest.target,
               configKey: plugin.manifest.target.configKey.includes(".") ? plugin.manifest.target.configKey : `${plugin.manifest.name}.${plugin.manifest.target.configKey}`
             }
-          } : {}
+          } : void 0
         },
-        ...plugin.packageName ? { packageName: plugin.packageName } : {}
+        ...plugin.packageName ? { packageName: plugin.packageName } : void 0
       }
     ] : []
   );
@@ -63,7 +63,7 @@ function defineJuniorPlugins(inputs, options = {}) {
   return {
     packageNames,
     registrations: registrations.map((plugin) => ({ ...plugin })),
-    ...manifests ? { manifests } : {}
+    ...manifests ? { manifests } : void 0
   };
 }
 function pluginCatalogConfigFromPluginSet(pluginSet) {
@@ -84,9 +84,9 @@ function pluginCatalogConfigFromPluginSet(pluginSet) {
     return void 0;
   }
   return {
-    ...inlineManifests ? { inlineManifests } : {},
-    ...packages.length > 0 ? { packages } : {},
-    ...manifests ? { manifests } : {}
+    ...inlineManifests ? { inlineManifests } : void 0,
+    ...packages.length > 0 ? { packages } : void 0,
+    ...manifests ? { manifests } : void 0
   };
 }
 function readEnvPluginPackages(env = process.env) {

package/dist/{chunk-TKB25A3L.js → chunk-CZYNWPWD.js}

@@ -732,7 +732,8 @@ var workspaceRepoSchema = z7.object({
 var workspaceSnapshotSchema = z7.object({
   id: z7.string(),
   generatedAt: z7.iso.datetime(),
-  buildDurationMs: z7.number().int().nonnegative()
+  buildDurationMs: z7.number().int().nonnegative(),
+  sizeBytes: z7.number().int().nonnegative().nullable()
 }).strict();
 var baselineSnapshotSchema = z7.object({
   id: z7.string(),

package/dist/{chunk-3I7XE3PA.js → chunk-D6ZD7VXP.js}

@@ -5,7 +5,7 @@ import {
   getConversationEventStore,
   getDb,
   getSqlExecutor
-} from "./chunk-VP4OVRDD.js";
+} from "./chunk-RNMASWLP.js";
 import {
   juniorConversationAnnotations,
   juniorConversationEvents,
@@ -14,7 +14,7 @@ import {
   juniorUsers,
   juniorWorkspaceRepos,
   juniorWorkspaces
-} from "./chunk-R6U7N4FS.js";
+} from "./chunk-KKSVCHDO.js";
 import {
   SANDBOX_WORKSPACE_ROOT,
   getVercelSandboxCredentials,
@@ -22,24 +22,24 @@ import {
   isSandboxMissingError,
   runNonInteractiveCommand,
   sleep
-} from "./chunk-JMJNFEDC.js";
+} from "./chunk-KMBU4PJP.js";
 import {
   getStateAdapter
-} from "./chunk-3TM3FYLQ.js";
+} from "./chunk-PL57B6NC.js";
 import {
   botConfig,
   completeObject,
+  defaultModelId,
   embedTexts,
-  getSlackBotToken,
-  standardModelId
-} from "./chunk-GENV6KF2.js";
+  getSlackBotToken
+} from "./chunk-XYTJUHRZ.js";
 import {
   isActorUserId,
   parseActorUserId,
   parseSlackChannelReferenceId,
   parseSlackMessageTs,
   parseSlackTeamId
-} from "./chunk-M63DETLL.js";
+} from "./chunk-N7TMSOZH.js";
 import {
   logException,
   logInfo,
@@ -48,15 +48,15 @@ import {
   setSpanAttributes,
   setSpanStatus,
   withSpan
-} from "./chunk-HQNE5APD.js";
+} from "./chunk-EBMRB6Z6.js";
 
 // src/chat/plugins/agent-hooks.ts
 import {
   missingToolAnnotationKeys,
   normalizeResourceEventIdentifier,
+  pluginResourceEventsSchema,
   promptContextSchema,
   promptMessageSchema,
-  pluginResourceEventsSchema,
   resourceEventInputSchema
 } from "@sentry/junior-plugin-api";
 
@@ -300,13 +300,13 @@ function createPluginLogger(plugin) {
 function createPluginModel(pluginName, options = {}, runtime = {}) {
   return {
     async completeObject(input) {
-      const modelId = options.structuredModelId ?? (options.structuredModel === "default" ? standardModelId(botConfig) : botConfig.fastModelId);
+      const modelId = options.structuredModelId ?? (options.structuredModel === "default" ? defaultModelId(botConfig) : botConfig.fastModelId);
       const result = await completeObject({
         modelId,
         schema: input.schema,
         prompt: input.prompt,
-        ...input.system !== void 0 ? { system: input.system } : {},
-        ...input.maxTokens !== void 0 ? { maxTokens: input.maxTokens } : {},
+        ...input.system !== void 0 ? { system: input.system } : void 0,
+        ...input.maxTokens !== void 0 ? { maxTokens: input.maxTokens } : void 0,
         signal: runtime.signal,
         promptName: `${pluginName}.structured_completion`,
         metadata: {
@@ -316,7 +316,7 @@ function createPluginModel(pluginName, options = {}, runtime = {}) {
       });
       return {
         object: result.object,
-        ...result.costUsd !== void 0 ? { costUsd: result.costUsd } : {}
+        ...result.costUsd !== void 0 ? { costUsd: result.costUsd } : void 0
       };
     }
   };
@@ -766,7 +766,7 @@ async function withSlackRetries(task, maxAttempts = 3, context = {}) {
           "url.path": `/api/${action}`,
           "app.slack.method": action,
           "app.retry.max_attempts": maxAttempts,
-          ...attemptNumber > 1 ? { "http.request.resend_count": attemptNumber - 1 } : {},
+          ...attemptNumber > 1 ? { "http.request.resend_count": attemptNumber - 1 } : void 0,
           ...context.attributes ?? {},
           ...context.spanAttributes ?? {}
         }
@@ -779,18 +779,18 @@ async function withSlackRetries(task, maxAttempts = 3, context = {}) {
       const baseLogAttributes = {
         "app.slack.action": action,
         "app.slack.error_code": mapped.code,
-        ...mapped.apiError ? { "app.slack.api_error": mapped.apiError } : {},
-        ...mapped.detail ? { "app.slack.detail": mapped.detail } : {},
-        ...mapped.detailLine !== void 0 ? { "app.slack.detail_line": mapped.detailLine } : {},
-        ...mapped.detailRule ? { "app.slack.detail_rule": mapped.detailRule } : {},
-        ...mapped.requestId ? { "app.slack.request_id": mapped.requestId } : {},
-        ...mapped.statusCode !== void 0 ? { "http.response.status_code": mapped.statusCode } : {},
+        ...mapped.apiError ? { "app.slack.api_error": mapped.apiError } : void 0,
+        ...mapped.detail ? { "app.slack.detail": mapped.detail } : void 0,
+        ...mapped.detailLine !== void 0 ? { "app.slack.detail_line": mapped.detailLine } : void 0,
+        ...mapped.detailRule ? { "app.slack.detail_rule": mapped.detailRule } : void 0,
+        ...mapped.requestId ? { "app.slack.request_id": mapped.requestId } : void 0,
+        ...mapped.statusCode !== void 0 ? { "http.response.status_code": mapped.statusCode } : void 0,
         ...context.attributes ?? {}
       };
       if (!isRetryable || attempt >= maxAttempts || remainingDelayBudgetMs <= 0) {
         logWarn("slack.action.failed", {
           ...baseLogAttributes,
-          ...mapped.errorData ? { "app.slack.error_data": mapped.errorData } : {}
+          ...mapped.errorData ? { "app.slack.error_data": mapped.errorData } : void 0
         });
         throw mapped;
       }
@@ -1381,9 +1381,9 @@ function identityFromRow(row) {
     id: row.id,
     provider: row.provider,
     providerSubjectId: row.providerSubjectId,
-    ...row.providerTenantId ? { providerTenantId: row.providerTenantId } : {},
-    ...row.displayName ? { displayName: row.displayName } : {},
-    ...row.handle ? { handle: row.handle } : {}
+    ...row.providerTenantId ? { providerTenantId: row.providerTenantId } : void 0,
+    ...row.displayName ? { displayName: row.displayName } : void 0,
+    ...row.handle ? { handle: row.handle } : void 0
   });
 }
 async function readUserById(db, userRow) {
@@ -1401,7 +1401,7 @@ async function readUserById(db, userRow) {
     email: userRow.primaryEmail,
     id: userRow.id,
     identities: identityRows.map(identityFromRow),
-    ...userRow.displayName ? { displayName: userRow.displayName } : {}
+    ...userRow.displayName ? { displayName: userRow.displayName } : void 0
   });
 }
 async function resolveViewerUserFromSql(db, email) {
@@ -1457,7 +1457,7 @@ async function readActorIdentityFromSql(db, actor) {
   if (!row) return void 0;
   return {
     identity: identityFromRow(row.identity),
-    ...row.user ? { user: await readUserById(db, row.user) } : {}
+    ...row.user ? { user: await readUserById(db, row.user) } : void 0
   };
 }
 async function readActorIdentity(actor) {
@@ -1733,6 +1733,7 @@ function snapshotFromRow(row) {
     id: row.snapshotId,
     generatedAt: row.generatedAt,
     buildDurationMs: row.buildDurationMs,
+    sizeBytes: row.sizeBytes,
     profileHash: row.profileHash
   };
 }
@@ -1799,6 +1800,7 @@ async function setWorkspaceSnapshot(workspaceId, snapshot, options) {
       status: "ready",
       snapshotId: snapshot.id,
       buildDurationMs: snapshot.buildDurationMs,
+      sizeBytes: snapshot.sizeBytes,
       generatedAt: snapshot.generatedAt,
       buildStartedAt: null,
       buildPhase: null,
@@ -1877,6 +1879,7 @@ async function setWorkspaceSnapshotBuild(workspaceId, build, options = {}) {
       status: build.status,
       snapshotId: null,
       buildDurationMs: null,
+      sizeBytes: null,
       generatedAt: null,
       buildStartedAt: build.startedAt,
       buildPhase: build.phase,
@@ -2221,7 +2224,10 @@ function systemPromptPluginContext(plugin) {
   };
 }
 function pluginInvocationContext(context) {
-  const common = { conversationId: context.conversationId };
+  const common = {
+    conversationId: context.conversationId,
+    locationId: context.locationId
+  };
   switch (context.source.platform) {
     case "slack": {
       if (context.destination.platform !== "slack") {
@@ -2259,6 +2265,7 @@ function invocationPluginContext(plugin, context, turnId) {
   const common = {
     ...base,
     conversationId: context.conversationId,
+    locationId: context.locationId,
     embedder: createPluginEmbedder(plugin.manifest.name),
     ...context.conversationId && turnId ? {
       events: createPluginConversationEvents({
@@ -2267,11 +2274,14 @@ function invocationPluginContext(plugin, context, turnId) {
         plugin,
         turnId
       })
-    } : {},
+    } : void 0,
     model: createPluginModel(plugin.manifest.name, plugin.model),
     source: context.source,
     text: context.userText ?? "",
-    state: createPluginState(plugin.manifest.name)
+    state: createPluginState(plugin.manifest.name),
+    users: {
+      resolveActor: context.resolveActorIdentity ?? (async () => void 0)
+    }
   };
   return {
     ...common,
@@ -2567,8 +2577,8 @@ function getPluginTools(context, sandbox = createSandboxCapability(context.works
       channelCapabilities: resolveChannelCapabilities(
         slackToolContext.sourceChannelId
       ),
-      ...dashboardConversationUrl ? { conversationLink: { url: dashboardConversationUrl } } : {},
-      ...credentialSubject ? { credentialSubject } : {}
+      ...dashboardConversationUrl ? { conversationLink: { url: dashboardConversationUrl } } : void 0,
+      ...credentialSubject ? { credentialSubject } : void 0
     } : void 0;
     const annotations = context.conversationId ? createPluginAnnotations({
       conversationId: context.conversationId,
@@ -2619,12 +2629,13 @@ function getPluginTools(context, sandbox = createSandboxCapability(context.works
     const resolveActor = context.resolveActorIdentity ?? (async () => void 0);
     const common = {
       ...basePluginContext(plugin),
-      ...annotations ? { annotations } : {},
+      ...annotations ? { annotations } : void 0,
       conversationId: context.conversationId,
+      locationId: context.locationId,
       userText: context.userText,
       embedder: createPluginEmbedder(pluginName),
       egress: context.egress,
-      ...mcp ? { mcp } : {},
+      ...mcp ? { mcp } : void 0,
       model: createPluginModel(pluginName, plugin.model),
       resourceEvents,
       sandbox,
@@ -3213,7 +3224,7 @@ function createSandboxCapability(workspace, ownerSignal) {
       const signal = preparationSignal(input.signal, ownerSignal);
       const result = await runNonInteractiveCommand(workspace, {
         ...input,
-        ...signal ? { signal } : {}
+        ...signal ? { signal } : void 0
       });
       return {
         exitCode: result.exitCode,
@@ -3226,7 +3237,7 @@ function createSandboxCapability(workspace, ownerSignal) {
         {
           path: input.path,
           content: input.content,
-          ...input.mode !== void 0 ? { mode: input.mode } : {}
+          ...input.mode !== void 0 ? { mode: input.mode } : void 0
         }
       ]);
     }
@@ -3252,8 +3263,8 @@ function createPluginHookRunner(input = {}) {
         try {
           await hook({
             ...basePluginContext(plugin),
-            ...tool.conversationId ? { conversationId: tool.conversationId } : {},
-            ...annotations ? { annotations } : {},
+            ...tool.conversationId ? { conversationId: tool.conversationId } : void 0,
+            ...annotations ? { annotations } : void 0,
             result: tool.structuredContent !== void 0 ? { structuredContent: tool.structuredContent } : {},
             tool: {
               arguments: tool.arguments,