@sentry/junior 0.216.0 → 0.218.0

package/dist/{registry-DYHLzGuO.js → registry-DiIwniX1.js}

@@ -1,4 +1,4 @@
-import { _ as setSpanAttributes, d as logInfo, f as logWarn } from "./logging-dD_n9Ocp.js";
+import { _ as setSpanAttributes, d as logInfo, f as logWarn } from "./logging-CtfUmyiN.js";
 import { i as credentialUserSubjectId } from "./context-Bplcgypl.js";
 import { n as normalizePluginPackageNames, o as pluginRoots, t as discoverInstalledPluginPackageContent } from "./package-discovery-7a9YqLhE.js";
 import path from "node:path";
@@ -31,12 +31,21 @@ function inlineCredentialsSource(credentials) {
 	setDefined$1(result, "auth-token-placeholder", credentials.authTokenPlaceholder);
 	return result;
 }
+/** Convert a camelCase `mcp.auth` block to its plugin.yaml source keys. */
+function mcpAuthSource(auth) {
+	return {
+		issuer: auth.issuer,
+		"key-id": auth.keyId,
+		"private-key-env": auth.privateKeyEnv
+	};
+}
 function inlineMcpSource(mcp) {
 	if (mcp === void 0 || !isRecord(mcp)) return mcp;
 	const result = {};
 	setDefined$1(result, "transport", mcp.transport);
 	setDefined$1(result, "url", mcp.url);
 	setDefined$1(result, "headers", mcp.headers);
+	setDefined$1(result, "auth", mcp.auth && mcpAuthSource(mcp.auth));
 	setDefined$1(result, "allowed-tools", mcp.allowedTools);
 	setDefined$1(result, "wrapped-tools", mcp.wrappedTools);
 	return result;
@@ -219,9 +228,15 @@ const oauthSourceSchema = z.object({
 	"token-auth-method": nonEmptyTrimmedString.refine((value) => value === "body" || value === "basic", { error: "must be \"body\" or \"basic\"" }).optional(),
 	"treat-empty-scope-as-unreported": z.boolean().optional()
 }).passthrough();
+const mcpAuthSourceSchema = z.object({
+	issuer: nonEmptyTrimmedString,
+	"key-id": nonEmptyTrimmedString,
+	"private-key-env": envVarString
+}).passthrough();
 const mcpSourceSchema = z.object({
 	transport: nonEmptyTrimmedString.refine((value) => value === "http", { error: "must be \"http\"" }).optional(),
 	url: httpsUrlString,
+	auth: mcpAuthSourceSchema.optional(),
 	headers: stringMapSchema.optional(),
 	"allowed-tools": nonEmptyStringArraySchema("allowed-tools").optional(),
 	"wrapped-tools": nonEmptyStringArraySchema("wrapped-tools").optional()
@@ -280,6 +295,7 @@ function manifestConfigPatch(config) {
 			setDefined(mcp, "transport", config.mcp.transport);
 			setDefined(mcp, "url", config.mcp.url);
 			setDefined(mcp, "headers", config.mcp.headers);
+			setDefined(mcp, "auth", config.mcp.auth && mcpAuthSource(config.mcp.auth));
 			setDefined(mcp, "allowed-tools", config.mcp.allowedTools);
 			setDefined(mcp, "wrapped-tools", config.mcp.wrappedTools);
 			result.mcp = mcp;
@@ -368,13 +384,20 @@ function envReferences(value) {
 function assertDeclaredEnvReferences(value, envVars, context) {
 	for (const name of envReferences(value)) {
 		if (!Object.prototype.hasOwnProperty.call(envVars, name)) throw new Error(`${context} references env var ${name} which is not declared in env-vars`);
-		if (envVars[name]?.default !== void 0) throw new Error(`${context} references env var ${name}, but API header env vars must not declare defaults`);
+		if (envVars[name]?.default !== void 0) throw new Error(`${context} references env var ${name}, but header env vars must not declare defaults`);
 	}
 }
+function assertDeclaredHeaderEnvReferences(headers, envVars, prefix) {
+	for (const [key, headerValue] of Object.entries(headers ?? {})) assertDeclaredEnvReferences(headerValue, envVars, `${prefix}.${key}`);
+}
+function assertDeclaredHostSecretEnv(name, envVars, context) {
+	if (!Object.prototype.hasOwnProperty.call(envVars, name)) throw new Error(`${context} uses env var ${name} which is not declared in env-vars`);
+	if (envVars[name]?.default !== void 0) throw new Error(`${context} uses env var ${name}, but host secret env vars must not declare defaults`);
+}
 function normalizeRequiredApiHeaders(value, prefix, envVars) {
 	const apiHeaders = normalizeStringMap(value, prefix);
 	if (!apiHeaders) throw new Error(`${prefix} must contain at least one header`);
-	for (const [key, headerValue] of Object.entries(apiHeaders)) assertDeclaredEnvReferences(headerValue, envVars, `${prefix}.${key}`);
+	assertDeclaredHeaderEnvReferences(apiHeaders, envVars, prefix);
 	return apiHeaders;
 }
 function assertCommandEnvReferencesDeclared(value, envVars, context) {
@@ -395,17 +418,20 @@ function normalizeCommandEnv(value, prefix, envVars) {
 	}
 	return Object.fromEntries(Object.entries(env).map(([key, envValue]) => [key, expandCommandEnvPlaceholders(envValue, envVars, `${prefix}.${key}`)]));
 }
-function assertCommandEnvDoesNotExposeHostSecretRefs(commandEnv, apiHeaders, credentials, oauth, pluginName) {
-	if (!commandEnv) return;
-	const hostOnlyRefs = /* @__PURE__ */ new Set();
-	for (const value of Object.values(apiHeaders ?? {})) for (const name of envReferences(value)) hostOnlyRefs.add(name);
-	if (credentials) {
-		if (credentials.authTokenEnv) hostOnlyRefs.add(credentials.authTokenEnv);
-	}
-	if (oauth) {
-		hostOnlyRefs.add(oauth.clientIdEnv);
-		hostOnlyRefs.add(oauth.clientSecretEnv);
+/** Collect every env var that carries a host-only secret for one plugin. */
+function hostOnlyEnvNames(manifest) {
+	const names = /* @__PURE__ */ new Set();
+	if (manifest.mcp?.auth) names.add(manifest.mcp.auth.privateKeyEnv);
+	for (const value of [...Object.values(manifest.apiHeaders ?? {}), ...Object.values(manifest.mcp?.headers ?? {})]) for (const name of envReferences(value)) names.add(name);
+	if (manifest.credentials?.authTokenEnv) names.add(manifest.credentials.authTokenEnv);
+	if (manifest.oauth) {
+		names.add(manifest.oauth.clientIdEnv);
+		names.add(manifest.oauth.clientSecretEnv);
 	}
+	return names;
+}
+function assertCommandEnvDoesNotExposeHostSecretRefs(commandEnv, hostOnlyRefs, pluginName) {
+	if (!commandEnv) return;
 	for (const [key, value] of Object.entries(commandEnv)) for (const name of envReferences(value)) if (hostOnlyRefs.has(name)) throw new Error(`Plugin ${pluginName} command-env.${key} references env var ${name}, but credential/API header env vars must stay host-only`);
 }
 function assertCommandEnvHostRefsAreExplicitlyExposed(commandEnv, envVars, pluginName) {
@@ -544,9 +570,16 @@ function normalizeMcp(data, envVars, name) {
 	const result = mcpSourceSchema.safeParse(prepared);
 	if (!result.success) throw new Error(issueMessage(result.error, `Plugin ${name} mcp`));
 	const headers = result.data.headers ? normalizeStringMap(result.data.headers, `Plugin ${name} mcp.headers`, { forbiddenKeys: FORBIDDEN_API_HEADER_NAMES }) : void 0;
+	assertDeclaredHeaderEnvReferences(headers, envVars, `Plugin ${name} mcp.headers`);
+	if (result.data.auth) assertDeclaredHostSecretEnv(result.data.auth["private-key-env"], envVars, `Plugin ${name} mcp.auth.private-key-env`);
 	return {
 		transport: "http",
 		url: result.data.url,
+		...result.data.auth ? { auth: {
+			issuer: result.data.auth.issuer,
+			keyId: result.data.auth["key-id"],
+			privateKeyEnv: result.data.auth["private-key-env"]
+		} } : void 0,
 		...headers ? { headers } : void 0,
 		...result.data["allowed-tools"] ? { allowedTools: result.data["allowed-tools"] } : void 0,
 		...result.data["wrapped-tools"] ? { wrappedTools: result.data["wrapped-tools"] } : void 0
@@ -620,7 +653,12 @@ function parseManifestSource(parsedSource, dir, config, options) {
 			...result.data["treat-empty-scope-as-unreported"] ? { treatEmptyScopeAsUnreported: true } : void 0
 		};
 	}
-	assertCommandEnvDoesNotExposeHostSecretRefs(data["command-env"], apiHeaders, credentials, manifest.oauth, data.name);
+	assertCommandEnvDoesNotExposeHostSecretRefs(data["command-env"], hostOnlyEnvNames({
+		apiHeaders,
+		credentials,
+		oauth: manifest.oauth,
+		mcp
+	}), data.name);
 	assertCommandEnvHostRefsAreExplicitlyExposed(data["command-env"], envVars, data.name);
 	if (data.target) {
 		const result = targetSourceSchema.safeParse(data.target);
@@ -830,12 +868,18 @@ function resolveAuthTokenPlaceholder(credentials) {
 //#region src/chat/plugins/auth/api-headers-broker.ts
 const MAX_LEASE_MS$1 = 36e5;
 const ENV_PLACEHOLDER_RE = /\$\{([A-Z_][A-Z0-9_]*)\}/g;
-function resolveHeaders(provider, headers) {
+/**
+* Fill `${NAME}` refs in plugin header values from the deployment env.
+*
+* Manifests keep the placeholder so secrets never reach build output, and the
+* parser has already required each name to be declared without a default.
+*/
+function resolvePluginHeaderEnvRefs(provider, headers, kind = "API header") {
 	return Object.fromEntries(Object.entries(headers).map(([key, value]) => {
 		return [key, value.replace(ENV_PLACEHOLDER_RE, (_match, name) => {
 			const envName = name;
 			const envValue = process.env[envName]?.trim();
-			if (!envValue) throw new Error(`Missing ${envName} for API header provider "${provider}"`);
+			if (!envValue) throw new Error(`Missing ${envName} for ${kind} provider "${provider}"`);
 			return envValue;
 		})];
 	}));
@@ -844,7 +888,7 @@ function resolveHeaders(provider, headers) {
 function resolveApiHeaderTransforms(manifest) {
 	const { domains, apiHeaders } = manifest;
 	if (!domains || !apiHeaders) return [];
-	const resolvedHeaders = resolveHeaders(manifest.name, apiHeaders);
+	const resolvedHeaders = resolvePluginHeaderEnvRefs(manifest.name, apiHeaders);
 	return domains.map((domain) => ({
 		domain,
 		headers: resolvedHeaders
@@ -1416,4 +1460,4 @@ function createPluginCatalogRuntime() {
 	};
 }
 //#endregion
-export { resolvePluginCommandEnv as a, getOAuthProviderErrorAttributes as c, parseInlinePluginManifest as d, parsePluginManifest as f, resolveAuthTokenPlaceholder as i, hasRequiredOAuthScope as l, buildOAuthTokenRequest as n, OAuthProviderError as o, parseOAuthTokenResponse as r, fetchWithBoundedOAuthErrorBodies as s, createPluginCatalogRuntime as t, CredentialUnavailableError as u };
+export { resolveAuthTokenPlaceholder as a, fetchWithBoundedOAuthErrorBodies as c, CredentialUnavailableError as d, parseInlinePluginManifest as f, resolvePluginHeaderEnvRefs as i, getOAuthProviderErrorAttributes as l, buildOAuthTokenRequest as n, resolvePluginCommandEnv as o, parsePluginManifest as p, parseOAuthTokenResponse as r, OAuthProviderError as s, createPluginCatalogRuntime as t, hasRequiredOAuthScope as u };

package/dist/{resolve-CU8DArbR.js → resolve-0BvJroyG.js}

@@ -1,5 +1,5 @@
-import { C as withSpan, _ as setSpanAttributes } from "./logging-dD_n9Ocp.js";
-import { A as sleep, P as SANDBOX_WORKSPACE_ROOT, r as isStale, t as create, u as isSandboxUnavailableError, v as getVercelSandboxCredentials, w as getStateAdapter, x as runNonInteractiveCommand } from "./profile-BfWuRDUF.js";
+import { C as withSpan, _ as setSpanAttributes } from "./logging-CtfUmyiN.js";
+import { A as sleep, P as SANDBOX_WORKSPACE_ROOT, r as isStale, t as create, u as isSandboxUnavailableError, v as getVercelSandboxCredentials, w as getStateAdapter, x as runNonInteractiveCommand } from "./profile-BRupCR8f.js";
 import { z } from "zod";
 import { FileSystem, Sandbox } from "@vercel/sandbox";
 //#region src/chat/sandbox/resources.ts

package/dist/{runner-BtHHH38l.js → runner-DDHI2RaU.js}

@@ -1,13 +1,13 @@
-import { p as authorizationId } from "./agent-BFKt9huN.js";
-import { S as withLogContext, u as logException, y as setTags } from "./logging-dD_n9Ocp.js";
+import { p as authorizationId } from "./agent-C-wRol8n.js";
+import { S as withLogContext, u as logException, y as setTags } from "./logging-CtfUmyiN.js";
 import { t as credentialContextForActor } from "./context-Bplcgypl.js";
-import { Ht as getConversationEventStore, Wt as getConversationStore } from "./agent-hooks-pyhfSnAL.js";
-import { F as loadProjection, V as recordAuthorizationCompleted, X as persistConversationMessages, Y as hydrateConversationMessages, ct as recordDeliveredAssistantMessage, d as persistWithRetry, j as commitAcceptedReply, ot as markConversationMessage, r as saveTurnCheckpoint, st as normalizeConversationText, tt as buildConversationContext, ut as upsertConversationMessage } from "./checkpoint-Ja5A32op.js";
-import { S as startActiveTurn, s as getAssistantReplyText, x as markTurnFailed } from "./pending-auth-KOZWIp4m.js";
-import { n as scheduleSessionCompletedPluginTasks, t as processPluginTask } from "./task-runner-BfOnhH3C.js";
-import { t as ConversationTurnLifecycleService } from "./turn-lifecycle-CVRu8Hmm.js";
-import { n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-B-jR3Aa8.js";
-import { d as buildDeliveredTurnStatePatch, r as finalizeFailedTurnReplyWithEvent, t as completeAuthPauseTurn } from "./auth-pause-state-BKGc9Y8O.js";
+import { Ht as getConversationEventStore, Wt as getConversationStore } from "./agent-hooks-Au93EfEr.js";
+import { F as loadProjection, V as recordAuthorizationCompleted, X as persistConversationMessages, Y as hydrateConversationMessages, ct as recordDeliveredAssistantMessage, d as persistWithRetry, j as commitAcceptedReply, ot as markConversationMessage, r as saveTurnCheckpoint, st as normalizeConversationText, tt as buildConversationContext, ut as upsertConversationMessage } from "./checkpoint-CQ6eQrJD.js";
+import { S as startActiveTurn, s as getAssistantReplyText, x as markTurnFailed } from "./pending-auth-B_nSqxpd.js";
+import { n as scheduleSessionCompletedPluginTasks, t as processPluginTask } from "./task-runner-BOuCBVgO.js";
+import { t as ConversationTurnLifecycleService } from "./turn-lifecycle-BV2Wp_qF.js";
+import { n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-DrGVG1E-.js";
+import { d as buildDeliveredTurnStatePatch, r as finalizeFailedTurnReplyWithEvent, t as completeAuthPauseTurn } from "./auth-pause-state-CU71X-6Z.js";
 import { randomUUID } from "node:crypto";
 import { createLocalSource, localDestinationSchema } from "@sentry/junior-plugin-api";
 //#region src/chat/local/runner.ts

package/dist/{sandbox-egress-signals-BvZZ02w9.js → sandbox-egress-signals-CoVhGAih.js}

@@ -1,4 +1,4 @@
-import { Y as sandboxEgressSignalsResponseSchema } from "./agent-BFKt9huN.js";
+import { Y as sandboxEgressSignalsResponseSchema } from "./agent-C-wRol8n.js";
 //#region src/chat/local/sandbox-egress-signals.ts
 const SANDBOX_EGRESS_SIGNALS_PATH = "/api/internal/sandbox-egress/signals";
 const LOCAL_DEV_SERVER_TIMEOUT_MS = 1e3;

package/dist/{short-title-CKnmS3nO.js → short-title-BdpXj7eS.js}

@@ -1,5 +1,5 @@
-import { f as logWarn } from "./logging-dD_n9Ocp.js";
-import { n as botConfig } from "./config-CdS5GQ7W.js";
+import { f as logWarn } from "./logging-CtfUmyiN.js";
+import { n as botConfig } from "./config-DceVK986.js";
 const TITLE_PROMPTS = {
 	conversation: [
 		"Generate a concise 5-8 word conversation title from the first user message below.",

package/dist/{skills-CLsaAMtU.js → skills-MlftIiVP.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { f as logWarn } from "./logging-dD_n9Ocp.js";
+import { f as logWarn } from "./logging-CtfUmyiN.js";
 import { s as skillRoots } from "./package-discovery-7a9YqLhE.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-D3hJdAMz.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-B9yDPVCR.js";
 import path from "node:path";
 import { z } from "zod";
 import fs from "node:fs/promises";

package/dist/{spawn-C6Utdbzm.js → spawn-DLlXPelG.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { C as toolInvocationDestination, y as actorFromRun } from "./agent-runner-CIiziOcz.js";
-import { n as createAndEnqueueAgentInvocation } from "./work-NIWYQvh-.js";
+import { C as toolInvocationDestination, y as actorFromRun } from "./agent-runner-skcXibgb.js";
+import { n as createAndEnqueueAgentInvocation } from "./work-DEMP0L3f.js";
 //#region src/chat/agent-invocations/spawn.ts
 var spawn_exports = /* @__PURE__ */ __exportAll({ bindSpawnAgent: () => bindSpawnAgent });
 /** Bind a Run's Actor and credentials to new Agent invocations. */

package/dist/{stats-D4Ar_7MS.js → stats-BjipUP7p.js}

@@ -1,10 +1,10 @@
-import { F as isRecord$1, I as toOptionalNumber, L as toOptionalString } from "./logging-dD_n9Ocp.js";
-import { a as getChatConfig } from "./config-CdS5GQ7W.js";
+import { F as isRecord$1, I as toOptionalNumber, L as toOptionalString } from "./logging-CtfUmyiN.js";
+import { a as getChatConfig } from "./config-DceVK986.js";
 import { _ as parseSlackMessageTs, d as parseStoredSlackActor, h as parseSlackTeamId, p as parseSlackChannelId } from "./context-Bplcgypl.js";
-import { Gt as getDb, J as withSlackRetries, U as getSlackClient, Wt as getConversationStore, fn as sameDestination, pt as JUNIOR_THREAD_STATE_TTL_MS, u as getPlugins, un as parseDestination } from "./agent-hooks-pyhfSnAL.js";
+import { Gt as getDb, J as withSlackRetries, U as getSlackClient, Wt as getConversationStore, fn as sameDestination, pt as JUNIOR_THREAD_STATE_TTL_MS, u as getPlugins, un as parseDestination } from "./agent-hooks-Au93EfEr.js";
 import { n as juniorDestinations } from "./destinations-BeBiJeEM.js";
-import { E as juniorConversations, a as juniorSchedulerRuns, c as juniorStats, l as juniorEventAutomations, o as juniorSchedulerTasks, w as juniorAttachments } from "./executor-CIl9A6cO.js";
-import { C as getDefaultRedisStateAdapterFor, w as getStateAdapter } from "./profile-BfWuRDUF.js";
+import { E as juniorConversations, a as juniorSchedulerRuns, c as juniorStats, l as juniorEventAutomations, o as juniorSchedulerTasks, w as juniorAttachments } from "./executor-CxoH7xaY.js";
+import { C as getDefaultRedisStateAdapterFor, w as getStateAdapter } from "./profile-BRupCR8f.js";
 import "./vercel-queue-DIkVcfK4.js";
 import { z } from "zod";
 import { createHash, randomUUID } from "node:crypto";

package/dist/{task-queue-BgOOj26_.js → task-queue-DyfnQ7ZM.js}

@@ -1,6 +1,6 @@
-import { f as logWarn } from "./logging-dD_n9Ocp.js";
+import { f as logWarn } from "./logging-CtfUmyiN.js";
 import { a as signQueueMessage, i as QUEUE_SIGNATURE_MAX_AGE_MS, o as verifyQueueMessage, s as createVercelQueueClient } from "./vercel-queue-DIkVcfK4.js";
-import { o as runWithTurnRequestDeadline } from "./job-queue-CIz2Sij0.js";
+import { o as runWithTurnRequestDeadline } from "./job-queue-DwA7xmCQ.js";
 import { z } from "zod";
 import { createHash } from "node:crypto";
 import { handleCallback, registerDevConsumer } from "@vercel/queue";
@@ -110,7 +110,7 @@ function pluginTaskCallback() {
 		maxDeliveries: PLUGIN_TASK_MAX_DELIVERIES,
 		onRejected: logPluginTaskQueueMessageRejected,
 		run: async (message) => {
-			const { processPluginTask } = await import("./task-runner-BfOnhH3C.js").then((n) => n.r);
+			const { processPluginTask } = await import("./task-runner-BOuCBVgO.js").then((n) => n.r);
 			await processPluginTask(message);
 		},
 		topic: PLUGIN_TASK_QUEUE_TOPIC,

package/dist/{task-runner-BfOnhH3C.js → task-runner-BOuCBVgO.js}

@@ -1,12 +1,12 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
 import { _ as parseSlackMessageTs, r as credentialSubjectSchema } from "./context-Bplcgypl.js";
-import { At as createPluginConversationEvents, Gt as getDb, Q as readActorIdentity, Wt as getConversationStore, _t as createPluginState, bt as createPluginLogger, p as coreTaskRegistrations, pt as JUNIOR_THREAD_STATE_TTL_MS, u as getPlugins, vt as createPluginEmbedder, yt as createPluginModel } from "./agent-hooks-pyhfSnAL.js";
+import { At as createPluginConversationEvents, Gt as getDb, Q as readActorIdentity, Wt as getConversationStore, _t as createPluginState, bt as createPluginLogger, p as coreTaskRegistrations, pt as JUNIOR_THREAD_STATE_TTL_MS, u as getPlugins, vt as createPluginEmbedder, yt as createPluginModel } from "./agent-hooks-Au93EfEr.js";
 import { G as sameActorIdentity } from "./conversation-BpqLg4MM.js";
-import { E as normalizeToolNameFromResult, O as stripRuntimeTurnContext, T as isToolResultMessage, Y as hydrateConversationMessages, _ as getPiMessageRole, s as getTurnRecord, w as isToolResultError, x as instructionTextForProjection } from "./checkpoint-Ja5A32op.js";
-import { w as getStateAdapter } from "./profile-BfWuRDUF.js";
-import { u as recordAutomationExecution } from "./execution-stats-BbYien1O.js";
-import { r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-B-jR3Aa8.js";
-import { i as pluginTaskParamsSchema, o as sendVercelPluginTask, r as pluginTaskId } from "./task-queue-BgOOj26_.js";
+import { E as normalizeToolNameFromResult, O as stripRuntimeTurnContext, T as isToolResultMessage, Y as hydrateConversationMessages, _ as getPiMessageRole, s as getTurnRecord, w as isToolResultError, x as instructionTextForProjection } from "./checkpoint-CQ6eQrJD.js";
+import { w as getStateAdapter } from "./profile-BRupCR8f.js";
+import { u as recordAutomationExecution } from "./execution-stats-BIyGof8p.js";
+import { r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-DrGVG1E-.js";
+import { i as pluginTaskParamsSchema, o as sendVercelPluginTask, r as pluginTaskId } from "./task-queue-DyfnQ7ZM.js";
 import { z } from "zod";
 import { createHash } from "node:crypto";
 import { destinationSchema, destinationVisibilitySchema, isSlackDestination, pluginRunContextSchema, replyAttributionSchema, sourceSchema, taskOutcomeSchema } from "@sentry/junior-plugin-api";
@@ -345,7 +345,7 @@ function slackSourceForDestination(args) {
 * Reads parent Conversations when this Conversation has no Destination.
 */
 async function resolveConversationRouting(args) {
-	const conversationStore = args.conversationStore ?? (await import("./agent-hooks-pyhfSnAL.js").then((n) => n.Vt)).getConversationStore();
+	const conversationStore = args.conversationStore ?? (await import("./agent-hooks-Au93EfEr.js").then((n) => n.Vt)).getConversationStore();
 	const chain = await loadConversationChain(args.conversationId, conversationStore);
 	let destination;
 	let source;

package/dist/{thread-state-B-jR3Aa8.js → thread-state-DrGVG1E-.js}

@@ -1,9 +1,9 @@
-import { F as isRecord, I as toOptionalNumber, L as toOptionalString } from "./logging-dD_n9Ocp.js";
-import { Gt as getDb, pt as JUNIOR_THREAD_STATE_TTL_MS } from "./agent-hooks-pyhfSnAL.js";
+import { F as isRecord, I as toOptionalNumber, L as toOptionalString } from "./logging-CtfUmyiN.js";
+import { Gt as getDb, pt as JUNIOR_THREAD_STATE_TTL_MS } from "./agent-hooks-Au93EfEr.js";
 import { n as juniorDestinations } from "./destinations-BeBiJeEM.js";
-import { u as juniorLocationConfigurations } from "./executor-CIl9A6cO.js";
-import { X as persistConversationMessages } from "./checkpoint-Ja5A32op.js";
-import { w as getStateAdapter } from "./profile-BfWuRDUF.js";
+import { u as juniorLocationConfigurations } from "./executor-CxoH7xaY.js";
+import { X as persistConversationMessages } from "./checkpoint-CQ6eQrJD.js";
+import { w as getStateAdapter } from "./profile-BRupCR8f.js";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { and, eq, sql } from "drizzle-orm";

package/dist/{turn-execution-_rlctc-2.js → turn-execution-CZKg5Fw9.js}

@@ -1,6 +1,6 @@
-import { Ht as getConversationEventStore } from "./agent-hooks-pyhfSnAL.js";
-import { n as runAgentWithTimeout } from "./agent-runner-CIiziOcz.js";
-import { t as ConversationTurnLifecycleService } from "./turn-lifecycle-CVRu8Hmm.js";
+import { Ht as getConversationEventStore } from "./agent-hooks-Au93EfEr.js";
+import { n as runAgentWithTimeout } from "./agent-runner-skcXibgb.js";
+import { t as ConversationTurnLifecycleService } from "./turn-lifecycle-BV2Wp_qF.js";
 //#region src/chat/runtime/turn-execution.ts
 /** An error thrown while the agent advances a Run. */
 var AgentRunError = class extends Error {

package/dist/{turn-lifecycle-CVRu8Hmm.js → turn-lifecycle-BV2Wp_qF.js}

@@ -1,4 +1,4 @@
-import { Ht as getConversationEventStore } from "./agent-hooks-pyhfSnAL.js";
+import { Ht as getConversationEventStore } from "./agent-hooks-Au93EfEr.js";
 //#region src/chat/conversations/turn-lifecycle.ts
 /** Persist correlated turn lifecycle facts with retry-safe terminal exclusion. */
 var ConversationTurnLifecycleService = class {

package/dist/{validation-5255qF_p.js → validation-BXDSxuOX.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-D3hJdAMz.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-B9yDPVCR.js";
 import { isDeepStrictEqual } from "node:util";
 //#region src/chat/plugins/validation.ts
 var validation_exports = /* @__PURE__ */ __exportAll({

package/dist/{version-DS_6p6x1.js → version-DNJ6W0LC.js}

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.216.0";
+var version = "0.218.0";
 //#endregion
 //#region src/version.ts
 /** Installed Junior package version, or `unknown` when package metadata is unavailable. */

package/dist/version.js

@@ -1,2 +1,2 @@
-import { t as JUNIOR_VERSION } from "./version-DS_6p6x1.js";
+import { t as JUNIOR_VERSION } from "./version-DNJ6W0LC.js";
 export { JUNIOR_VERSION };

package/dist/{web-authorization-TdkXi7XG.js → web-authorization-DhXHpeMK.js}

@@ -1,4 +1,4 @@
-import { w as getStateAdapter } from "./profile-BfWuRDUF.js";
+import { w as getStateAdapter } from "./profile-BRupCR8f.js";
 import { randomUUID } from "node:crypto";
 //#region src/chat/conversations/web-authorization.ts
 const WEB_AUTHORIZATION_PREFIX = "junior:web_authorization:v1";

package/dist/{web-input-vHOAXVxj.js → web-input-BqFF7CQB.js}

@@ -1,8 +1,8 @@
-import { f as logWarn } from "./logging-dD_n9Ocp.js";
-import { s as getSlackBotToken } from "./config-CdS5GQ7W.js";
+import { f as logWarn } from "./logging-CtfUmyiN.js";
+import { s as getSlackBotToken } from "./config-DceVK986.js";
 import "./context-Bplcgypl.js";
-import { K as normalizeSlackConversationId, Wt as getConversationStore } from "./agent-hooks-pyhfSnAL.js";
-import { c as parseSlackThreadId, ft as appendAndEnqueueExclusiveInboundMessage, pt as appendAndEnqueueInboundMessage, qt as buildDeterministicTurnId } from "./stats-D4Ar_7MS.js";
+import { K as normalizeSlackConversationId, Wt as getConversationStore } from "./agent-hooks-Au93EfEr.js";
+import { c as parseSlackThreadId, ft as appendAndEnqueueExclusiveInboundMessage, pt as appendAndEnqueueInboundMessage, qt as buildDeterministicTurnId } from "./stats-BjipUP7p.js";
 import { t as healthReportSchema } from "./reporting-schema-DosTN__Q.js";
 import { z } from "zod";
 import { createHash } from "node:crypto";

package/dist/{work-NIWYQvh-.js → work-DEMP0L3f.js}

@@ -1,13 +1,13 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { $ as AuthorizationFlowDisabledError, A as createAgentInvocationSchema, M as AgentInvocationLimitError, O as agentBindingSchema, f as PluginCredentialFailureError, j as AgentInvocationBusyError, k as agentInvocationSchema } from "./agent-BFKt9huN.js";
-import { Ht as getConversationEventStore, Kt as getSqlExecutor, Wt as getConversationStore } from "./agent-hooks-pyhfSnAL.js";
-import { f as juniorAgentBindings, p as juniorAgentInvocations } from "./executor-CIl9A6cO.js";
-import { L as openConversationProjection, o as failTurnRecord, r as saveTurnCheckpoint, s as getTurnRecord, v as getTerminalAssistantMessages } from "./checkpoint-Ja5A32op.js";
-import { pt as appendAndEnqueueInboundMessage } from "./stats-D4Ar_7MS.js";
-import { _ as isTurnInputCommitLostError, h as getConversationTurnBoundaryError, p as TurnInputCommitLostError, s as getAssistantReplyText } from "./pending-auth-KOZWIp4m.js";
-import { t as ConversationTurnLifecycleService } from "./turn-lifecycle-CVRu8Hmm.js";
-import { n as executeTurn, t as AgentRunError } from "./turn-execution-_rlctc-2.js";
-import { n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState } from "./thread-state-B-jR3Aa8.js";
+import { $ as AuthorizationFlowDisabledError, A as createAgentInvocationSchema, M as AgentInvocationLimitError, O as agentBindingSchema, f as PluginCredentialFailureError, j as AgentInvocationBusyError, k as agentInvocationSchema } from "./agent-C-wRol8n.js";
+import { Ht as getConversationEventStore, Kt as getSqlExecutor, Wt as getConversationStore } from "./agent-hooks-Au93EfEr.js";
+import { f as juniorAgentBindings, p as juniorAgentInvocations } from "./executor-CxoH7xaY.js";
+import { L as openConversationProjection, o as failTurnRecord, r as saveTurnCheckpoint, s as getTurnRecord, v as getTerminalAssistantMessages } from "./checkpoint-CQ6eQrJD.js";
+import { pt as appendAndEnqueueInboundMessage } from "./stats-BjipUP7p.js";
+import { _ as isTurnInputCommitLostError, h as getConversationTurnBoundaryError, p as TurnInputCommitLostError, s as getAssistantReplyText } from "./pending-auth-B_nSqxpd.js";
+import { t as ConversationTurnLifecycleService } from "./turn-lifecycle-BV2Wp_qF.js";
+import { n as executeTurn, t as AgentRunError } from "./turn-execution-CZKg5Fw9.js";
+import { n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState } from "./thread-state-DrGVG1E-.js";
 import { z } from "zod";
 import { createHash } from "node:crypto";
 import { and, asc, count, eq, inArray } from "drizzle-orm";

package/dist/{worker-BgY7599f.js → worker-DvK47zmH.js}

@@ -1,10 +1,10 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { b as isProviderRetryError } from "./client-DqG_LDSH.js";
-import { S as withLogContext, d as logInfo, f as logWarn, u as logException } from "./logging-dD_n9Ocp.js";
-import { a as getChatConfig } from "./config-CdS5GQ7W.js";
-import { At as recordConversationRetry, Ct as drainConversationMailbox, Et as getConversationWorkState, Ft as startConversationWork, Ht as isInvalidConversationRecordError, Nt as requestAnotherSlice, St as deadLetterAttempt, Vt as isFinalAttempt, _t as clearConsumedConversationWake, bt as completeConversationWork, dt as ackMessages, gt as checkInConversationWork, jt as releaseConversationWork, kt as recordAttemptFailure, mt as beginConversationResume, wt as ensureConversationWake, xt as countPendingConversationMessages, yt as completeConversationStop, zt as hasConversationStop } from "./stats-D4Ar_7MS.js";
+import { b as isProviderRetryError } from "./client-BV3_abpr.js";
+import { S as withLogContext, d as logInfo, f as logWarn, u as logException } from "./logging-CtfUmyiN.js";
+import { a as getChatConfig } from "./config-DceVK986.js";
+import { At as recordConversationRetry, Ct as drainConversationMailbox, Et as getConversationWorkState, Ft as startConversationWork, Ht as isInvalidConversationRecordError, Nt as requestAnotherSlice, St as deadLetterAttempt, Vt as isFinalAttempt, _t as clearConsumedConversationWake, bt as completeConversationWork, dt as ackMessages, gt as checkInConversationWork, jt as releaseConversationWork, kt as recordAttemptFailure, mt as beginConversationResume, wt as ensureConversationWake, xt as countPendingConversationMessages, yt as completeConversationStop, zt as hasConversationStop } from "./stats-BjipUP7p.js";
 import { c as ConversationQueueMessageRejectedError } from "./vercel-queue-DIkVcfK4.js";
-import { a as getTurnRequestDeadline } from "./job-queue-CIz2Sij0.js";
+import { a as getTurnRequestDeadline } from "./job-queue-DwA7xmCQ.js";
 //#region src/chat/task-execution/worker.ts
 var worker_exports = /* @__PURE__ */ __exportAll({
 	CONVERSATION_WORK_DEFER_DELAY_MS: () => CONVERSATION_WORK_DEFER_DELAY_MS,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sentry/junior",
-  "version": "0.216.0",
+  "version": "0.218.0",
   "private": false,
   "publishConfig": {
     "access": "public"
@@ -85,7 +85,7 @@
     "pg": "^8.16.3",
     "yaml": "^2.9.0",
     "zod": "^4.5.4",
-    "@sentry/junior-plugin-api": "0.216.0"
+    "@sentry/junior-plugin-api": "0.218.0"
   },
   "devDependencies": {
     "@emnapi/core": "^1.10.0",
@@ -104,9 +104,9 @@
     "typescript": "^6.0.3",
     "vercel": "^54.4.0",
     "vitest": "^4.1.7",
-    "@sentry/junior-memory": "0.216.0",
+    "@sentry/junior-github": "0.218.0",
     "@sentry/junior-testing": "0.0.0",
-    "@sentry/junior-github": "0.216.0"
+    "@sentry/junior-memory": "0.218.0"
   },
   "scripts": {
     "build": "tsdown",