@sentry/junior 0.226.0 → 0.227.0

package/dist/cli/plugins.js

@@ -1,6 +1,6 @@
-import { bt as createPluginLogger, d as setPlugins, f as validatePlugins, qt as getDb } from "../agent-hooks-FUetyyLe.js";
-import { n as pluginCatalogRuntime } from "../catalog-runtime-BYGR3Dr4.js";
-import { n as validatePluginRegistrations, t as validatePluginEgressCredentialHooks } from "../validation-q2PFxkTQ.js";
+import { $t as getDb, St as createPluginLogger, d as setPlugins, f as validatePlugins } from "../agent-hooks-bEwEJhlg.js";
+import { n as pluginCatalogRuntime } from "../catalog-runtime-Cw9V2jpn.js";
+import { n as validatePluginRegistrations, t as validatePluginEgressCredentialHooks } from "../validation-BMig74Zp.js";
 import { a as pluginRuntimeRegistrationsFromPluginSet, i as pluginCliRegistrationsFromPluginSet, r as pluginCatalogConfigFromPluginSet } from "../plugins-egKWjgue.js";
 import { t as loadAppPluginSet } from "../plugin-module-BKGOXca2.js";
 import { stderr, stdout } from "node:process";

package/dist/cli/snapshot-create.js

@@ -1,6 +1,6 @@
-import { n as pluginCatalogRuntime } from "../catalog-runtime-BYGR3Dr4.js";
-import { S as disconnectStateAdapter, t as create } from "../profile-dvV7PB7u.js";
-import { r as resolve } from "../resolve-DqwGI9wq.js";
+import { n as pluginCatalogRuntime } from "../catalog-runtime-Cw9V2jpn.js";
+import { S as disconnectStateAdapter, t as create } from "../profile-upzC-wN1.js";
+import { r as resolve } from "../resolve-sF6Lg7Ay.js";
 //#region src/cli/snapshot-create.ts
 const DEFAULT_RUNTIME = "node22";
 const DEFAULT_TIMEOUT_MS = 6e5;

package/dist/cli/upgrade.js

@@ -1,6 +1,6 @@
-import { a as getChatConfig } from "../config-Bws6Rpsh.js";
-import { t as createJuniorSqlExecutor } from "../executor-D36FWjcf.js";
-import { t as createPluginCatalogRuntime } from "../registry-C6FHctIu.js";
+import { a as getChatConfig } from "../config-CYvEow1F.js";
+import { t as createJuniorSqlExecutor } from "../executor-BXMlFrV6.js";
+import { t as createPluginCatalogRuntime } from "../registry-DM5aMhjm.js";
 import { n as pluginCatalogConfigFromEnv, r as pluginCatalogConfigFromPluginSet, t as defineJuniorPlugins } from "../plugins-egKWjgue.js";
 import { t as loadAppPluginSet } from "../plugin-module-BKGOXca2.js";
 import { fileURLToPath } from "node:url";

package/dist/{client-C2WBBx7m.js → client-Pcxo3lGn.js}

@@ -1,5 +1,5 @@
-import { d as logException, g as serializeGenAiAttribute, i as extractGenAiUsageAttributes, m as normalizeGenAiFinishReason, p as logWarn, w as withSpan } from "./logging-CvjMHRvg.js";
-import { a as toCanonicalInputMessage, n as getCurrentConversationPrivacy, o as toCanonicalOutputMessage, s as toGenAiMessagesTraceAttributes } from "./conversation-privacy-pCcW0a5Y.js";
+import { d as logException, g as serializeGenAiAttribute, i as extractGenAiUsageAttributes, m as normalizeGenAiFinishReason, p as logWarn, w as withSpan } from "./logging-BPBx6WF-.js";
+import { a as toCanonicalInputMessage, n as getCurrentConversationPrivacy, o as toCanonicalOutputMessage, s as toGenAiMessagesTraceAttributes } from "./conversation-privacy-hQmyZbOC.js";
 import { calculateCost, completeSimple, getEnvApiKey, getModels, registerApiProvider } from "@earendil-works/pi-ai/compat";
 import { stream as streamAnthropic, streamSimple as streamSimpleAnthropic } from "@earendil-works/pi-ai/api/anthropic-messages";
 import { createGatewayProvider } from "@ai-sdk/gateway";

package/dist/{config-Bws6Rpsh.js → config-CYvEow1F.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { o as resolveGatewayModel, w as toOptionalTrimmed } from "./client-C2WBBx7m.js";
-import { p as logWarn } from "./logging-CvjMHRvg.js";
+import { o as resolveGatewayModel, w as toOptionalTrimmed } from "./client-Pcxo3lGn.js";
+import { p as logWarn } from "./logging-BPBx6WF-.js";
 import { l as TURN_REASONING_LEVELS, s as modelProfileSchema, t as DEFAULT_MODEL_PROFILES, u as parseTurnReasoningLevel } from "./model-profile-BwU8mqwD.js";
 //#region src/chat/slack/emoji.ts
 const SLACK_EMOJI_NAME_RE = /^(?:[a-z0-9_+-]+)(?:::(?:skin-tone-[2-6]))?$/;

package/dist/{context-Bplcgypl.js → context-0Et9iVSB.js}

@@ -295,4 +295,4 @@ function credentialUserSubjectId(context) {
 	return "subject" in context ? context.subject?.userId : void 0;
 }
 //#endregion
-export { parseSlackMessageTs as _, createActor as a, isActorUserId as c, parseStoredSlackActor as d, toStoredSlackActor as f, parseSlackUserId as g, parseSlackTeamId as h, credentialUserSubjectId as i, isUserActor as l, parseSlackChannelReferenceId as m, credentialContextSchema as n, createSlackActor as o, parseSlackChannelId as p, credentialSubjectSchema as r, createSlackResumeActor as s, credentialContextForActor as t, parseActorUserId as u };
+export { slackChannelIdSchema as _, createActor as a, parseSlackMessageTs as b, isActorUserId as c, parseStoredSlackActor as d, toStoredSlackActor as f, parseSlackUserId as g, parseSlackTeamId as h, credentialUserSubjectId as i, isUserActor as l, parseSlackChannelReferenceId as m, credentialContextSchema as n, createSlackActor as o, parseSlackChannelId as p, credentialSubjectSchema as r, createSlackResumeActor as s, credentialContextForActor as t, parseActorUserId as u, slackTeamIdSchema as v, slackMessageTsSchema as x, slackUserIdSchema as y };

package/dist/{conversation-DPbmIwjy.js → conversation-BnhOMfEB.js}

@@ -633,6 +633,41 @@ function parseBriefInput(input) {
 	};
 }
 //#endregion
+//#region src/chat/attachments/media.ts
+const INPUT_IMAGE_TYPES = [
+	"image/png",
+	"image/jpeg",
+	"image/gif",
+	"image/webp"
+];
+/** Report whether a media type is a raster image accepted by vision models. */
+function isVisionImageMediaType(mediaType) {
+	const normalized = mediaType.split(";", 1)[0]?.trim().toLowerCase();
+	return normalized ? INPUT_IMAGE_TYPES.some((type) => type === normalized) : false;
+}
+//#endregion
+//#region src/chat/attachments/input.ts
+/** Bound JSON image input below the hosting platform's request size limit. */
+const MAX_INPUT_IMAGE_BYTES = 3145728;
+const MAX_INPUT_IMAGES = 3;
+/** Image bytes accepted with a web message, never stored in its mailbox row. */
+const inputImageSchema = z.object({
+	filename: z.string().trim().min(1).max(255),
+	contentType: z.enum(INPUT_IMAGE_TYPES),
+	data: z.string().min(4).max(MAX_INPUT_IMAGE_BYTES * 4 / 3).regex(/^[A-Za-z0-9+/]*={0,2}$/).refine((data) => data.length % 4 === 0)
+}).strict();
+/** Safe attachment facts shared by mailbox input and transcript messages. */
+const messageAttachmentSchema = z.object({
+	id: z.string().min(1),
+	filename: z.string().min(1),
+	contentType: z.string().min(1),
+	bytes: z.number().int().nonnegative()
+}).strict();
+/** Read attachment metadata without exposing object storage keys or bytes. */
+function readMessageAttachments(value) {
+	return messageAttachmentSchema.array().parse(value ?? []);
+}
+//#endregion
 //#region src/chat/automations/card.ts
 /** Saved automation facts shown with a Message, not a live status view. */
 const automationCardSchema = z.object({
@@ -677,7 +712,6 @@ function messageCardText(card) {
 			card.description,
 			card.status,
 			...objectFactFields(card.facts).map((field) => `${field.label}: ${field.value}`),
-			card.sourceUpdatedAt ? `Source updated: ${card.sourceUpdatedAt}` : void 0,
 			card.trigger,
 			card.warning,
 			card.url
@@ -738,16 +772,14 @@ const archiveConversationBodySchema = z.object({
 	lastSeenAt: z.string().datetime()
 }).strict();
 const archiveConversationResponseSchema = z.object({ archivedAt: z.string().datetime().nullable() }).strict();
-const createConversationBodySchema = z.object({
-	idempotencyKey: z.string().trim().min(1).max(200),
-	message: z.string().trim().min(1).max(32e3),
-	/** New roots default public. Private roots stay participant-only. */
-	visibility: z.enum(["private", "public"]).optional()
-}).strict();
 const createConversationMessageBodySchema = z.object({
 	idempotencyKey: z.string().trim().min(1).max(200),
-	message: z.string().trim().min(1).max(32e3)
-}).strict();
+	message: z.string().trim().max(32e3),
+	images: z.array(inputImageSchema).max(3).optional()
+}).strict().refine((body) => Boolean(body.message || body.images?.length), "Add a message or an image.").refine((body) => (body.images ?? []).reduce((sum, image) => sum + image.data.length, 0) <= MAX_INPUT_IMAGE_BYTES * 4 / 3, "Images must total 3 MB or less.");
+const createConversationBodySchema = createConversationMessageBodySchema.safeExtend({ 
+/** New roots default public. Private roots stay participant-only. */
+visibility: z.enum(["private", "public"]).optional() });
 const acceptedConversationMessageSchema = z.object({
 	conversationId: z.string().min(1),
 	messageId: z.string().min(1),
@@ -772,15 +804,16 @@ const conversationPendingMessageSchema = z.object({
 	role: z.literal("user"),
 	source: z.enum(["slack", "web"]),
 	text: z.string().optional(),
+	attachments: z.array(messageAttachmentSchema).optional(),
 	redacted: z.literal(true).optional()
 }).strict().superRefine((data, context) => {
 	if (data.text === void 0 === (data.redacted !== true)) context.addIssue({
 		code: "custom",
 		message: "pending message content must be text or explicitly redacted"
 	});
-	if (data.redacted && data.actorIdentity) context.addIssue({
+	if (data.redacted && (data.actorIdentity || data.attachments)) context.addIssue({
 		code: "custom",
-		message: "redacted pending messages must not expose actor identity"
+		message: "redacted pending messages must not expose actor identity or attachments"
 	});
 });
 /** Participant-only authorization prompt for a parked web turn. */
@@ -899,15 +932,16 @@ const conversationReportMessageEventDataSchema = z.object({
 	trustedSummary: z.string().min(1).optional(),
 	cards: z.array(messageCardSchema).optional(),
 	text: z.string().optional(),
+	attachments: z.array(messageAttachmentSchema).optional(),
 	redacted: z.literal(true).optional()
 }).strict().superRefine((data, context) => {
 	if (data.text === void 0 === (data.redacted !== true)) context.addIssue({
 		code: "custom",
 		message: "message content must be text or explicitly redacted"
 	});
-	if (data.redacted && (data.actorIdentity || data.cards)) context.addIssue({
+	if (data.redacted && (data.actorIdentity || data.cards || data.attachments)) context.addIssue({
 		code: "custom",
-		message: "redacted messages must not expose actor identity or cards"
+		message: "redacted messages must not expose actor identity, cards, or attachments"
 	});
 });
 const conversationReportMessageHandledEventDataSchema = z.object({
@@ -1045,16 +1079,9 @@ const conversationReportStructuredEventDataSchema = z.object({
 	turnId: z.string().min(1).optional(),
 	presentation: conversationEventPresentationSchema
 }).strict();
-/** Public attachment metadata on conversation reports and transcript media. */
-const conversationReportDeliveredAttachmentSchema = z.object({
-	id: z.string().min(1),
-	filename: z.string().min(1),
-	contentType: z.string().min(1),
-	bytes: z.number().int().nonnegative()
-}).strict();
 const conversationReportAttachmentsDeliveredEventDataSchema = z.object({
 	type: z.literal("attachments_delivered"),
-	attachments: z.array(conversationReportDeliveredAttachmentSchema).min(1)
+	attachments: z.array(messageAttachmentSchema).min(1)
 }).strict();
 const conversationReportCompactionEventDataSchema = z.object({
 	type: z.literal("compaction"),
@@ -1294,4 +1321,4 @@ const conversationStatsReportSchema = z.object({
 	windowStart: z.string()
 }).strict();
 //#endregion
-export { messageCardKey as A, agentHistoryItemSchema as B, conversationReportEventSchema as C, createConversationBodySchema as D, conversationSummaryReportSchema as E, briefLinkSchema as F, historyReplacementSchema as G, conversationTurnFailureCodeSchema as H, briefOutcomeStatusSchema as I, contextProvenance as J, newConversationEventSchema as K, conversationBriefSchema as L, messageCardText as M, readMessageCards as N, createConversationMessageBodySchema as O, briefCodeChangeSchema as P, usageSchema as Q, parseBriefInput as R, conversationReportEventDataSchema as S, conversationStatsReportSchema as T, conversationTurnFailureReasonSchema as U, conversationEventDataSchema as V, decodeStoredConversationEvent as W, instructionProvenanceFor as X, instructionActors as Y, sameActorIdentity as Z, conversationParamsSchema as _, cancelConversationPendingMessagesBodySchema as a, conversationPendingMessageSchema as b, conversationAttachmentParamsSchema as c, conversationDetailReportSchema as d, conversationEventHistorySchema as f, conversationFeedSchema as g, conversationFeedQuerySchema as h, archiveConversationResponseSchema as i, messageCardRefSchema as j, annotationCard as k, conversationAuxiliaryCostsSchema as l, conversationEventsQuerySchema as m, actorIdentitySchema as n, cancelConversationPendingMessagesResponseSchema as o, conversationEventPageSchema as p, encodeHistoryPayload as q, archiveConversationBodySchema as r, conversationActivityPreviewSchema as s, acceptedConversationMessageSchema as t, conversationDetailQuerySchema as u, conversationPendingAuthorizationSchema as v, conversationStatsItemSchema as w, conversationPendingMessagesReportSchema as x, conversationPendingMessageDeliverySchema as y, KNOWN_CONVERSATION_EVENT_TYPES as z };
+export { contextProvenance as $, messageCardKey as A, briefLinkSchema as B, conversationReportEventSchema as C, createConversationBodySchema as D, conversationSummaryReportSchema as E, MAX_INPUT_IMAGE_BYTES as F, agentHistoryItemSchema as G, conversationBriefSchema as H, readMessageAttachments as I, conversationTurnFailureReasonSchema as J, conversationEventDataSchema as K, INPUT_IMAGE_TYPES as L, messageCardText as M, readMessageCards as N, createConversationMessageBodySchema as O, MAX_INPUT_IMAGES as P, encodeHistoryPayload as Q, isVisionImageMediaType as R, conversationReportEventDataSchema as S, conversationStatsReportSchema as T, parseBriefInput as U, briefOutcomeStatusSchema as V, KNOWN_CONVERSATION_EVENT_TYPES as W, historyReplacementSchema as X, decodeStoredConversationEvent as Y, newConversationEventSchema as Z, conversationParamsSchema as _, cancelConversationPendingMessagesBodySchema as a, conversationPendingMessageSchema as b, conversationAttachmentParamsSchema as c, conversationDetailReportSchema as d, instructionActors as et, conversationEventHistorySchema as f, conversationFeedSchema as g, conversationFeedQuerySchema as h, archiveConversationResponseSchema as i, messageCardRefSchema as j, annotationCard as k, conversationAuxiliaryCostsSchema as l, conversationEventsQuerySchema as m, actorIdentitySchema as n, sameActorIdentity as nt, cancelConversationPendingMessagesResponseSchema as o, conversationEventPageSchema as p, conversationTurnFailureCodeSchema as q, archiveConversationBodySchema as r, usageSchema as rt, conversationActivityPreviewSchema as s, acceptedConversationMessageSchema as t, instructionProvenanceFor as tt, conversationDetailQuerySchema as u, conversationPendingAuthorizationSchema as v, conversationStatsItemSchema as w, conversationPendingMessagesReportSchema as x, conversationPendingMessageDeliverySchema as y, briefCodeChangeSchema as z };

package/dist/{conversation-privacy-pCcW0a5Y.js → conversation-privacy-hQmyZbOC.js}

@@ -1,4 +1,4 @@
-import { p as logWarn } from "./logging-CvjMHRvg.js";
+import { p as logWarn } from "./logging-BPBx6WF-.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/chat/conversation-privacy.ts
 const SAFE_METADATA_KEY_LIMIT = 20;

package/dist/{credential-sync-ibuNsMyl.js → credential-sync-CUGbiiCM.js}

@@ -1,18 +1,18 @@
-import { T as lookupSlackUserProfile, Tn as createUserTokenStore, _ as putMcpStoredOAuthCredentials, d as deleteMcpAuthSession, dn as formatProviderLabel, fn as parseOAuthStatePayload, g as getMcpStoredOAuthCredentials, h as getMcpAuthSession, mt as getMcpProviderErrorAttributes, pn as resolveBaseUrl, u as finalizeMcpAuthorization, x as resolvePluginOAuthAccount, xn as postSlackMessage } from "./agent-runner-DEF7auSj.js";
-import { m as escapeXml } from "./client-C2WBBx7m.js";
-import { d as logException, h as runBestEffort, p as logWarn } from "./logging-CvjMHRvg.js";
-import { n as botConfig, o as getRuntimeMetadata } from "./config-Bws6Rpsh.js";
-import { g as parseSlackUserId } from "./context-Bplcgypl.js";
-import { Jt as getSqlExecutor, U as getSlackClient, cn as upsertIdentity, ln as upsertLinkedIdentity } from "./agent-hooks-FUetyyLe.js";
+import { Cn as createUserTokenStore, T as lookupSlackUserProfile, _ as putMcpStoredOAuthCredentials, d as deleteMcpAuthSession, dn as resolveBaseUrl, ft as getMcpProviderErrorAttributes, g as getMcpStoredOAuthCredentials, h as getMcpAuthSession, ln as formatProviderLabel, u as finalizeMcpAuthorization, un as parseOAuthStatePayload, x as resolvePluginOAuthAccount, yn as postSlackMessage } from "./agent-runner-BGDSjciH.js";
+import { m as escapeXml } from "./client-Pcxo3lGn.js";
+import { d as logException, h as runBestEffort, p as logWarn } from "./logging-BPBx6WF-.js";
+import { n as botConfig, o as getRuntimeMetadata } from "./config-CYvEow1F.js";
+import { g as parseSlackUserId } from "./context-0Et9iVSB.js";
+import { U as getSlackClient, en as getSqlExecutor, hn as upsertLinkedIdentity, mn as upsertIdentity } from "./agent-hooks-bEwEJhlg.js";
 import { i as homeDir } from "./package-discovery-7a9YqLhE.js";
-import { n as buildOAuthTokenRequest, r as parseOAuthTokenResponse, u as hasRequiredOAuthScope } from "./registry-C6FHctIu.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-BYGR3Dr4.js";
-import { t as discoverSkills } from "./skills-EhiVbjF4.js";
-import { B as recordAuthorizationCompleted, s as getTurnRecord, z as recordAuthenticationLinked } from "./checkpoint-CJe-dZFF.js";
-import { E as acquireActiveLock, w as getStateAdapter } from "./profile-dvV7PB7u.js";
-import { i as getConversationPendingAuth } from "./pending-auth-DLNJbD8H.js";
-import { r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-CTuWhjru.js";
-import { n as deleteWebAuthorization, o as wakeAuthorizedTurn, s as wakePausedTurn } from "./web-authorization-Biy8nsS7.js";
+import { n as buildOAuthTokenRequest, r as parseOAuthTokenResponse, u as hasRequiredOAuthScope } from "./registry-DM5aMhjm.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-Cw9V2jpn.js";
+import { t as discoverSkills } from "./skills-CAI5s___.js";
+import { B as recordAuthorizationCompleted, s as getTurnRecord, z as recordAuthenticationLinked } from "./checkpoint-oZYD3-Ar.js";
+import { E as acquireActiveLock, w as getStateAdapter } from "./profile-upzC-wN1.js";
+import { i as getConversationPendingAuth } from "./pending-auth-CHUjr_6d.js";
+import { r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-C_arVuaN.js";
+import { n as deleteWebAuthorization, o as wakeAuthorizedTurn, s as wakePausedTurn } from "./web-authorization-r2lKYKJ2.js";
 import { n as relayLocalOAuthCallback } from "./oauth-relay-CdCnu80W.js";
 import path from "node:path";
 import { z } from "zod";

package/dist/{executor-D36FWjcf.js → executor-BXMlFrV6.js}

@@ -1,5 +1,5 @@
 import { g as startSpanManual } from "./sentry-CgWZM_kV.js";
-import "./config-Bws6Rpsh.js";
+import "./config-CYvEow1F.js";
 import { n as juniorDestinations, r as timestamptz } from "./destinations-BeBiJeEM.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { getTableColumns, sql } from "drizzle-orm";

package/dist/{history-DI9KJT3J.d.ts → history-nukv1YN8.d.ts}

@@ -1,5 +1,30 @@
 import { z } from "zod";
 import "@sentry/junior-plugin-api";
+//#region src/chat/attachments/input.d.ts
+/** Bound JSON image input below the hosting platform's request size limit. */
+declare const MAX_INPUT_IMAGE_BYTES: number;
+declare const MAX_INPUT_IMAGES = 3;
+/** Image bytes accepted with a web message, never stored in its mailbox row. */
+declare const inputImageSchema: z.ZodObject<{
+  filename: z.ZodString;
+  contentType: z.ZodEnum<{
+    "image/png": "image/png";
+    "image/jpeg": "image/jpeg";
+    "image/gif": "image/gif";
+    "image/webp": "image/webp";
+  }>;
+  data: z.ZodString;
+}, z.core.$strict>;
+type InputImage = z.output<typeof inputImageSchema>;
+/** Safe attachment facts shared by mailbox input and transcript messages. */
+declare const messageAttachmentSchema: z.ZodObject<{
+  id: z.ZodString;
+  filename: z.ZodString;
+  contentType: z.ZodString;
+  bytes: z.ZodNumber;
+}, z.core.$strict>;
+type MessageAttachment = z.output<typeof messageAttachmentSchema>;
+//#endregion
 //#region src/chat/conversations/cards.d.ts
 /** Built-in response types accepted by Message storage and delivery. */
 declare const messageCardSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -99,4 +124,4 @@ declare const conversationTurnFailureReasonSchema: z.ZodEnum<{
   suppressed_output: "suppressed_output";
 }>;
 //#endregion
-export { messageCardText as i, conversationTurnFailureReasonSchema as n, MessageCard as r, conversationTurnFailureCodeSchema as t };
+export { InputImage as a, MessageAttachment as c, messageCardText as i, conversationTurnFailureReasonSchema as n, MAX_INPUT_IMAGES as o, MessageCard as r, MAX_INPUT_IMAGE_BYTES as s, conversationTurnFailureCodeSchema as t };

package/dist/images-8siTAUNW.js

@@ -0,0 +1,82 @@
+import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
+import { j as storeAttachment, k as readLiveAttachment } from "./agent-runner-BGDSjciH.js";
+import { en as getSqlExecutor } from "./agent-hooks-bEwEJhlg.js";
+import "./conversation-BnhOMfEB.js";
+//#region src/chat/attachments/images.ts
+var images_exports = /* @__PURE__ */ __exportAll({
+	decodeInputImages: () => decodeInputImages,
+	loadInputImages: () => loadInputImages,
+	storeInputImages: () => storeInputImages
+});
+function matchesImageType(data, contentType) {
+	switch (contentType) {
+		case "image/png": return data.subarray(0, 8).equals(Buffer.from([
+			137,
+			80,
+			78,
+			71,
+			13,
+			10,
+			26,
+			10
+		]));
+		case "image/jpeg": return data[0] === 255 && data[1] === 216 && data[2] === 255;
+		case "image/gif": return ["GIF87a", "GIF89a"].includes(data.toString("ascii", 0, 6));
+		case "image/webp": return data.toString("ascii", 0, 4) === "RIFF" && data.toString("ascii", 8, 12) === "WEBP";
+	}
+}
+/** Check declared image types against file signatures before storing uploads. */
+function decodeInputImages(images) {
+	const files = images.map((image) => {
+		const data = Buffer.from(image.data, "base64");
+		if (!matchesImageType(data, image.contentType) || data.toString("base64") !== image.data) throw new Error("Use PNG, JPEG, GIF, or WebP image files.");
+		return {
+			data,
+			bytes: data.byteLength,
+			filename: image.filename,
+			mimeType: image.contentType,
+			path: image.filename
+		};
+	});
+	if (files.reduce((sum, file) => sum + file.bytes, 0) > 3145728) throw new Error("Images must total 3 MB or less.");
+	return files;
+}
+/** Store image bytes before accepting a message into the mailbox. */
+async function storeInputImages(args) {
+	return await Promise.all(args.files.map(async (file) => {
+		return {
+			id: (await storeAttachment({
+				conversationId: args.conversationId,
+				db: getSqlExecutor(),
+				file,
+				storage: args.storage
+			})).id,
+			filename: file.filename,
+			contentType: file.mimeType,
+			bytes: file.bytes
+		};
+	}));
+}
+/** Load stored images for model input. */
+async function loadInputImages(args) {
+	return await Promise.all(args.attachments.map(async (ref) => {
+		const attachment = await readLiveAttachment({
+			attachmentId: ref.id,
+			conversationId: args.conversationId,
+			db: getSqlExecutor()
+		});
+		if (!attachment || attachment.storageProvider !== args.storage.provider) throw new Error("Input image is no longer available.");
+		const body = await args.storage.get(attachment.storageKey);
+		if (!body) throw new Error("Input image contents are unavailable.");
+		const data = Buffer.from(await new Response(body).arrayBuffer());
+		if (data.byteLength !== attachment.bytes) throw new Error("Input image size does not match stored metadata.");
+		return {
+			attachmentId: ref.id,
+			filename: attachment.filename,
+			mediaType: attachment.contentType,
+			data
+		};
+	}));
+}
+//#endregion
+export { images_exports as n, storeInputImages as r, decodeInputImages as t };

package/dist/instrumentation.js

@@ -1,6 +1,6 @@
-import { N as getDeploymentServiceVersion, P as getDeploymentTelemetryAttributes } from "./logging-CvjMHRvg.js";
+import { N as getDeploymentServiceVersion, P as getDeploymentTelemetryAttributes } from "./logging-BPBx6WF-.js";
 import { _ as vercelAIIntegration, a as getClient, b as withStreamedSpan, c as init, o as getGlobalScope } from "./sentry-CgWZM_kV.js";
-import { n as getCurrentConversationPrivacy } from "./conversation-privacy-pCcW0a5Y.js";
+import { n as getCurrentConversationPrivacy } from "./conversation-privacy-hQmyZbOC.js";
 import { t as consumePrivateTraceResultMarker } from "./private-trace-result-BLvBjy_e.js";
 //#region src/chat/sentry-payload-filter.ts
 const PAYLOAD_ATTRIBUTE_KEYS = /* @__PURE__ */ new Set([

package/dist/{job-queue-2mFFDMHB.js → job-queue-AI0_QAgc.js}

@@ -1,4 +1,4 @@
-import { a as getChatConfig } from "./config-Bws6Rpsh.js";
+import { a as getChatConfig } from "./config-CYvEow1F.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { z } from "zod";
 import { createHash, createHmac, timingSafeEqual } from "node:crypto";

package/dist/{logging-CvjMHRvg.js → logging-BPBx6WF-.js}

@@ -1,5 +1,5 @@
 import { d as setTag, f as setUser, h as startSpan, i as getActiveSpan, l as logger, n as captureMessage, p as spanToJSON, s as getTraceData, t as captureException, y as withScope } from "./sentry-CgWZM_kV.js";
-import { t as JUNIOR_VERSION } from "./version-ByLtIYyy.js";
+import { t as JUNIOR_VERSION } from "./version-lhQSfLjx.js";
 import path from "node:path";
 import { styleText } from "node:util";
 import { ConfigError, configureSync, getConfig, getLogger } from "@logtape/logtape";

package/dist/nitro.d.ts

@@ -1,4 +1,4 @@
-import { n as JuniorDashboardOptions } from "./app-TVL42pGL.js";
+import { n as JuniorDashboardOptions } from "./app-CjRIKZb5.js";
 import { n as JuniorPluginSet } from "./plugins-BT2l4We3.js";
 //#region src/nitro.d.ts
 export type JuniorNitroDashboardOptions = JuniorDashboardOptions;

package/dist/nitro.js

@@ -1,8 +1,8 @@
-import { A as JUNIOR_RETENTION_ROUTE, D as JUNIOR_HEARTBEAT_ROUTE, E as JUNIOR_HEARTBEAT_CRON_SCHEDULE, O as JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE, T as JUNIOR_CONVERSATION_WORK_CALLBACK_ROUTE, j as JUNIOR_WORKSPACE_SNAPSHOT_JOB_CALLBACK_ROUTE, k as JUNIOR_RETENTION_CRON_SCHEDULE } from "./logging-CvjMHRvg.js";
+import { A as JUNIOR_RETENTION_ROUTE, D as JUNIOR_HEARTBEAT_ROUTE, E as JUNIOR_HEARTBEAT_CRON_SCHEDULE, O as JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE, T as JUNIOR_CONVERSATION_WORK_CALLBACK_ROUTE, j as JUNIOR_WORKSPACE_SNAPSHOT_JOB_CALLBACK_ROUTE, k as JUNIOR_RETENTION_CRON_SCHEDULE } from "./logging-BPBx6WF-.js";
 import { d as resolvePackageDir, t as discoverInstalledPluginPackageContent, u as isValidPackageName } from "./package-discovery-7a9YqLhE.js";
-import { o as resolveConversationWorkQueueTopic, t as WORKSPACE_SNAPSHOT_JOB_QUEUE_TOPIC } from "./job-queue-2mFFDMHB.js";
+import { o as resolveConversationWorkQueueTopic, t as WORKSPACE_SNAPSHOT_JOB_QUEUE_TOPIC } from "./job-queue-AI0_QAgc.js";
 import { a as pluginRuntimeRegistrationsFromPluginSet, r as pluginCatalogConfigFromPluginSet } from "./plugins-egKWjgue.js";
-import { t as PLUGIN_TASK_QUEUE_TOPIC } from "./task-queue-TXhAWQwj.js";
+import { t as PLUGIN_TASK_QUEUE_TOPIC } from "./task-queue-iuDAqfZg.js";
 import { n as loadPluginSetFromModule, r as resolvePluginModule } from "./plugin-module-BKGOXca2.js";
 import path from "node:path";
 import { cpSync, existsSync, mkdirSync, readdirSync, statSync } from "node:fs";

package/dist/{oauth-authorization-l4O1rXsL.js → oauth-authorization-Cq1GaLIP.js}

@@ -1,4 +1,4 @@
-import { h as extractAssistantText } from "./checkpoint-CJe-dZFF.js";
+import { h as extractAssistantText } from "./checkpoint-oZYD3-Ar.js";
 //#region src/chat/runtime/turn.ts
 /** Classified Slack turn failure carrying the owning Sentry capture outward. */
 var ConversationTurnBoundaryError = class extends Error {

package/dist/{oauth-callback-server-Ds8M5FFX.js → oauth-callback-server-CnF03VYh.js}

@@ -1,5 +1,5 @@
-import { Tn as createUserTokenStore } from "./agent-runner-DEF7auSj.js";
-import { a as GET, n as syncLocalOAuthCredential, r as GET$1 } from "./credential-sync-ibuNsMyl.js";
+import { Cn as createUserTokenStore } from "./agent-runner-BGDSjciH.js";
+import { a as GET, n as syncLocalOAuthCredential, r as GET$1 } from "./credential-sync-CUGbiiCM.js";
 import { createServer } from "node:http";
 //#region src/chat/local/oauth-callback-server.ts
 const LOCAL_OAUTH_TIMEOUT_MS = 6e5;

package/dist/{pending-auth-DLNJbD8H.js → pending-auth-CHUjr_6d.js}

@@ -1,4 +1,4 @@
-import { i as abandonTurnRecord } from "./checkpoint-CJe-dZFF.js";
+import { i as abandonTurnRecord } from "./checkpoint-oZYD3-Ar.js";
 //#region src/chat/state/turn-id.ts
 /** Build a stable turn identifier from a message ID. */
 function buildDeterministicTurnId(messageId) {

package/dist/{profile-dvV7PB7u.js → profile-upzC-wN1.js}

@@ -1,7 +1,7 @@
-import { w as toOptionalTrimmed } from "./client-C2WBBx7m.js";
-import { v as setSpanAttributes, y as setSpanStatus } from "./logging-CvjMHRvg.js";
-import { a as getChatConfig } from "./config-Bws6Rpsh.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-BYGR3Dr4.js";
+import { w as toOptionalTrimmed } from "./client-Pcxo3lGn.js";
+import { v as setSpanAttributes, y as setSpanStatus } from "./logging-BPBx6WF-.js";
+import { a as getChatConfig } from "./config-CYvEow1F.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-Cw9V2jpn.js";
 import { createHash } from "node:crypto";
 import { createMemoryState } from "@chat-adapter/state-memory";
 import { createRedisState } from "@chat-adapter/state-redis";

package/dist/{prompt-DehgjkO5.js → prompt-CZIQcPHy.js}

@@ -1,4 +1,4 @@
-import { I as briefOutcomeStatusSchema, L as conversationBriefSchema, R as parseBriefInput } from "./conversation-DPbmIwjy.js";
+import { H as conversationBriefSchema, U as parseBriefInput, V as briefOutcomeStatusSchema } from "./conversation-BnhOMfEB.js";
 import { z } from "zod";
 //#region src/chat/briefs/generate.ts
 const MAX_INPUT_CHARS = 6e4;

package/dist/{registry-C6FHctIu.js → registry-DM5aMhjm.js}

@@ -1,5 +1,5 @@
-import { f as logInfo, p as logWarn, v as setSpanAttributes } from "./logging-CvjMHRvg.js";
-import { i as credentialUserSubjectId } from "./context-Bplcgypl.js";
+import { f as logInfo, p as logWarn, v as setSpanAttributes } from "./logging-BPBx6WF-.js";
+import { i as credentialUserSubjectId } from "./context-0Et9iVSB.js";
 import { n as normalizePluginPackageNames, o as pluginRoots, t as discoverInstalledPluginPackageContent } from "./package-discovery-7a9YqLhE.js";
 import path from "node:path";
 import { z } from "zod";

package/dist/{resolve-DqwGI9wq.js → resolve-sF6Lg7Ay.js}

@@ -1,5 +1,5 @@
-import { v as setSpanAttributes, w as withSpan } from "./logging-CvjMHRvg.js";
-import { N as SANDBOX_WORKSPACE_ROOT, k as sleep, r as isStale, t as create, u as isSandboxUnavailableError, v as getVercelSandboxCredentials, w as getStateAdapter, x as runNonInteractiveCommand } from "./profile-dvV7PB7u.js";
+import { v as setSpanAttributes, w as withSpan } from "./logging-BPBx6WF-.js";
+import { N as SANDBOX_WORKSPACE_ROOT, k as sleep, r as isStale, t as create, u as isSandboxUnavailableError, v as getVercelSandboxCredentials, w as getStateAdapter, x as runNonInteractiveCommand } from "./profile-upzC-wN1.js";
 import { z } from "zod";
 import { FileSystem, Sandbox } from "@vercel/sandbox";
 //#region src/chat/sandbox/resources.ts

package/dist/{runner-CzYEcB73.js → runner-Bu2wYpK8.js}

@@ -1,13 +1,13 @@
-import { C as withLogContext, b as setTags, d as logException } from "./logging-CvjMHRvg.js";
-import { t as credentialContextForActor } from "./context-Bplcgypl.js";
-import { Kt as getConversationStore, Wt as getConversationEventStore } from "./agent-hooks-FUetyyLe.js";
-import { M as messageCardText } from "./conversation-DPbmIwjy.js";
-import { A as commitAcceptedReply, B as recordAuthorizationCompleted, J as hydrateConversationMessages, P as loadProjection, Y as persistConversationMessages, ct as markConversationMessage, ft as upsertConversationMessage, lt as normalizeConversationText, r as saveTurnCheckpoint, rt as buildConversationContext, u as persistWithRetry, ut as recordDeliveredAssistantMessage } from "./checkpoint-CJe-dZFF.js";
-import { _ as markTurnFailed, r as getAssistantReplyText, t as authorizationId, v as startActiveTurn } from "./oauth-authorization-l4O1rXsL.js";
-import { n as scheduleSessionCompletedPluginTasks, t as processPluginTask } from "./task-runner-axUJS1No.js";
-import { t as ConversationTurnLifecycleService } from "./turn-lifecycle-C1S6vELh.js";
-import { n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-CTuWhjru.js";
-import { d as loadPendingMessageCards, i as completeAuthPauseTurn, l as buildDeliveredTurnStatePatch, t as finalizeFailedTurnReplyWithEvent } from "./turn-failure-response-csVoLOzx.js";
+import { C as withLogContext, b as setTags, d as logException } from "./logging-BPBx6WF-.js";
+import { t as credentialContextForActor } from "./context-0Et9iVSB.js";
+import { Qt as getConversationStore, Xt as getConversationEventStore } from "./agent-hooks-bEwEJhlg.js";
+import { M as messageCardText } from "./conversation-BnhOMfEB.js";
+import { A as commitAcceptedReply, B as recordAuthorizationCompleted, J as hydrateConversationMessages, P as loadProjection, Y as persistConversationMessages, ct as markConversationMessage, ft as upsertConversationMessage, lt as normalizeConversationText, r as saveTurnCheckpoint, rt as buildConversationContext, u as persistWithRetry, ut as recordDeliveredAssistantMessage } from "./checkpoint-oZYD3-Ar.js";
+import { _ as markTurnFailed, r as getAssistantReplyText, t as authorizationId, v as startActiveTurn } from "./oauth-authorization-Cq1GaLIP.js";
+import { n as scheduleSessionCompletedPluginTasks, t as processPluginTask } from "./task-runner-S3QtH38c.js";
+import { t as ConversationTurnLifecycleService } from "./turn-lifecycle-CdiIejXH.js";
+import { n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-C_arVuaN.js";
+import { d as loadPendingMessageCards, i as completeAuthPauseTurn, l as buildDeliveredTurnStatePatch, t as finalizeFailedTurnReplyWithEvent } from "./turn-failure-response-DarwGYgC.js";
 import { randomUUID } from "node:crypto";
 import { createLocalSource, localDestinationSchema } from "@sentry/junior-plugin-api";
 //#region src/chat/local/runner.ts

package/dist/{sandbox-egress-signals-BZOv0fns.js → sandbox-egress-signals-Dgerhizb.js}

@@ -1,4 +1,4 @@
-import { un as sandboxEgressSignalsResponseSchema } from "./agent-runner-DEF7auSj.js";
+import { cn as sandboxEgressSignalsResponseSchema } from "./agent-runner-BGDSjciH.js";
 //#region src/chat/local/sandbox-egress-signals.ts
 const SANDBOX_EGRESS_SIGNALS_PATH = "/api/internal/sandbox-egress/signals";
 const LOCAL_DEV_SERVER_TIMEOUT_MS = 1e3;

package/dist/{schema-BZg-xzfG.js → schema-BSiwcvjm.js}

@@ -1,5 +1,5 @@
 import { t as juniorDestinationKindSchema } from "./destinations-BeBiJeEM.js";
-import { E as conversationSummaryReportSchema, n as actorIdentitySchema, w as conversationStatsItemSchema } from "./conversation-DPbmIwjy.js";
+import { E as conversationSummaryReportSchema, n as actorIdentitySchema, w as conversationStatsItemSchema } from "./conversation-BnhOMfEB.js";
 import { a as fillUtcHours, c as sumUtcHoursIntoSixHours, i as fillUtcDays } from "./web-message-id-xPI_EFSC.js";
 import { z } from "zod";
 import { codeChangeStateSchema, taskOutcomeSchema } from "@sentry/junior-plugin-api";

package/dist/{skills-EhiVbjF4.js → skills-CAI5s___.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { p as logWarn } from "./logging-CvjMHRvg.js";
+import { p as logWarn } from "./logging-BPBx6WF-.js";
 import { s as skillRoots } from "./package-discovery-7a9YqLhE.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-BYGR3Dr4.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-Cw9V2jpn.js";
 import path from "node:path";
 import { z } from "zod";
 import fs from "node:fs/promises";

package/dist/{spawn-Ck3L0rEr.js → spawn-DRK9TBgY.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { An as toolInvocationDestination, kn as actorFromRun } from "./agent-runner-DEF7auSj.js";
-import { n as createAndEnqueueAgentInvocation } from "./work-QrbHdXTc.js";
+import { Dn as toolInvocationDestination, En as actorFromRun } from "./agent-runner-BGDSjciH.js";
+import { n as createAndEnqueueAgentInvocation } from "./work-B9koS8sW.js";
 //#region src/chat/agent-invocations/spawn.ts
 var spawn_exports = /* @__PURE__ */ __exportAll({ bindSpawnAgent: () => bindSpawnAgent });
 /** Bind a Run's Actor and credentials to new Agent invocations. */

package/dist/{task-queue-TXhAWQwj.js → task-queue-iuDAqfZg.js}

@@ -1,5 +1,5 @@
-import { p as logWarn } from "./logging-CvjMHRvg.js";
-import { c as QUEUE_SIGNATURE_MAX_AGE_MS, d as createVercelQueueClient, l as signQueueMessage, p as runWithTurnRequestDeadline, u as verifyQueueMessage } from "./job-queue-2mFFDMHB.js";
+import { p as logWarn } from "./logging-BPBx6WF-.js";
+import { c as QUEUE_SIGNATURE_MAX_AGE_MS, d as createVercelQueueClient, l as signQueueMessage, p as runWithTurnRequestDeadline, u as verifyQueueMessage } from "./job-queue-AI0_QAgc.js";
 import { z } from "zod";
 import { createHash } from "node:crypto";
 import { handleCallback, registerDevConsumer } from "@vercel/queue";
@@ -109,7 +109,7 @@ function pluginTaskCallback() {
 		maxDeliveries: PLUGIN_TASK_MAX_DELIVERIES,
 		onRejected: logPluginTaskQueueMessageRejected,
 		run: async (message) => {
-			const { processPluginTask } = await import("./task-runner-axUJS1No.js").then((n) => n.r);
+			const { processPluginTask } = await import("./task-runner-S3QtH38c.js").then((n) => n.r);
 			await processPluginTask(message);
 		},
 		topic: PLUGIN_TASK_QUEUE_TOPIC,

package/dist/{task-runner-axUJS1No.js → task-runner-S3QtH38c.js}

@@ -1,14 +1,14 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { p as logWarn } from "./logging-CvjMHRvg.js";
-import { _ as parseSlackMessageTs, r as credentialSubjectSchema } from "./context-Bplcgypl.js";
-import { At as createPluginConversationEvents, Kt as getConversationStore, Q as readActorIdentity, _t as createPluginState, bt as createPluginLogger, nn as agentTurnCostUsd, p as coreTaskRegistrations, pt as JUNIOR_THREAD_STATE_TTL_MS, qt as getDb, rn as agentTurnTotalTokens, u as getPlugins, vt as createPluginEmbedder, yt as createPluginModel } from "./agent-hooks-FUetyyLe.js";
-import { E as juniorConversations, s as juniorAutomationExecutions } from "./executor-D36FWjcf.js";
-import { Z as sameActorIdentity } from "./conversation-DPbmIwjy.js";
-import { C as isToolResultError, D as stripRuntimeTurnContext, J as hydrateConversationMessages, T as normalizeToolNameFromResult, b as instructionTextForProjection, g as getPiMessageRole, s as getTurnRecord, w as isToolResultMessage } from "./checkpoint-CJe-dZFF.js";
-import { w as getStateAdapter } from "./profile-dvV7PB7u.js";
-import { r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-CTuWhjru.js";
-import { t as resolveConversationRouting } from "./turn-session-routing-5RejBvit.js";
-import { i as pluginTaskParamsSchema, o as sendVercelPluginTask, r as pluginTaskId } from "./task-queue-TXhAWQwj.js";
+import { p as logWarn } from "./logging-BPBx6WF-.js";
+import { b as parseSlackMessageTs, r as credentialSubjectSchema } from "./context-0Et9iVSB.js";
+import { $t as getDb, Mt as createPluginConversationEvents, Q as readActorIdentity, Qt as getConversationStore, St as createPluginLogger, bt as createPluginEmbedder, cn as agentTurnCostUsd, ht as JUNIOR_THREAD_STATE_TTL_MS, ln as agentTurnTotalTokens, p as coreTaskRegistrations, u as getPlugins, xt as createPluginModel, yt as createPluginState } from "./agent-hooks-bEwEJhlg.js";
+import { E as juniorConversations, s as juniorAutomationExecutions } from "./executor-BXMlFrV6.js";
+import { nt as sameActorIdentity } from "./conversation-BnhOMfEB.js";
+import { C as isToolResultError, D as stripRuntimeTurnContext, J as hydrateConversationMessages, T as normalizeToolNameFromResult, b as instructionTextForProjection, g as getPiMessageRole, s as getTurnRecord, w as isToolResultMessage } from "./checkpoint-oZYD3-Ar.js";
+import { w as getStateAdapter } from "./profile-upzC-wN1.js";
+import { r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-C_arVuaN.js";
+import { t as resolveConversationRouting } from "./turn-session-routing-DyLGd_wU.js";
+import { i as pluginTaskParamsSchema, o as sendVercelPluginTask, r as pluginTaskId } from "./task-queue-iuDAqfZg.js";
 import { z } from "zod";
 import { createHash } from "node:crypto";
 import { and, asc, count, desc, eq, gte, inArray, lte, max, or, sql } from "drizzle-orm";