@sentry/junior 0.237.0 → 0.238.1

package/dist/api/schema.d.ts

@@ -4344,6 +4344,10 @@ type AutomationUpdate = z.output<typeof automationUpdateSchema>;
 /** Catalog metadata only; callbacks and provider connections stay on the server. */
 export declare const automationEventCatalogSchema: z.ZodArray<z.ZodObject<{
   type: z.ZodString;
+  identifier: z.ZodOptional<z.ZodObject<{
+    format: z.ZodString;
+    pattern: z.ZodCustom<RegExp, RegExp>;
+  }, z.core.$strict>>;
   supportedEvents: z.ZodArray<z.ZodString>;
   suggestedEvents: z.ZodOptional<z.ZodArray<z.ZodString>>;
   matchFields: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{

package/dist/api/schema.js

@@ -1,5 +1,6 @@
-import { A as forkConversationResponseSchema, C as conversationReportEventSchema, D as createConversationBodySchema, E as conversationSummaryReportSchema, K as resolveMessageCards, M as MAX_INPUT_IMAGE_BYTES, O as createConversationMessageBodySchema, P as INPUT_IMAGE_TYPES, S as conversationReportEventDataSchema, T as conversationStatsReportSchema, U as messageCardText, X as conversationTurnFailureCodeSchema, Z as conversationTurnFailureReasonSchema, _ as conversationParamsSchema, a as cancelConversationPendingMessagesBodySchema, b as conversationPendingMessageSchema, d as conversationDetailReportSchema, f as conversationEventHistorySchema, g as conversationFeedSchema, h as conversationFeedQuerySchema, i as archiveConversationResponseSchema, j as MAX_INPUT_IMAGES, k as forkConversationBodySchema, l as conversationAuxiliaryCostsSchema, m as conversationEventsQuerySchema, o as cancelConversationPendingMessagesResponseSchema, p as conversationEventPageSchema, r as archiveConversationBodySchema, s as conversationActivityPreviewSchema, t as acceptedConversationMessageSchema, u as conversationDetailQuerySchema, v as conversationPendingAuthorizationSchema, x as conversationPendingMessagesReportSchema, y as conversationPendingMessageDeliverySchema } from "../conversation-9Fxa1Zbq.js";
+import { a as conversationTurnFailureReasonSchema, i as conversationTurnFailureCodeSchema } from "../history-BLTUgFYO.js";
+import { A as forkConversationResponseSchema, C as conversationReportEventSchema, D as createConversationBodySchema, E as conversationSummaryReportSchema, K as resolveMessageCards, M as MAX_INPUT_IMAGE_BYTES, O as createConversationMessageBodySchema, P as INPUT_IMAGE_TYPES, S as conversationReportEventDataSchema, T as conversationStatsReportSchema, U as messageCardText, _ as conversationParamsSchema, a as cancelConversationPendingMessagesBodySchema, b as conversationPendingMessageSchema, d as conversationDetailReportSchema, f as conversationEventHistorySchema, g as conversationFeedSchema, h as conversationFeedQuerySchema, i as archiveConversationResponseSchema, j as MAX_INPUT_IMAGES, k as forkConversationBodySchema, l as conversationAuxiliaryCostsSchema, m as conversationEventsQuerySchema, o as cancelConversationPendingMessagesResponseSchema, p as conversationEventPageSchema, r as archiveConversationBodySchema, s as conversationActivityPreviewSchema, t as acceptedConversationMessageSchema, u as conversationDetailQuerySchema, v as conversationPendingAuthorizationSchema, x as conversationPendingMessagesReportSchema, y as conversationPendingMessageDeliverySchema } from "../conversation-DwD-vquD.js";
 import { C as eventAutomationSummarySchema, S as automationVersionSchema, _ as automationSummarySchema, a as automationExecutionSchema, b as automationVersionListSchema, d as automationParamsSchema, f as automationRunListSchema, g as automationSchedulePreviewSchema, h as automationScheduleIntentSchema, i as automationExecutionListSchema, l as automationListQuerySchema, m as automationRunWindowsSchema, n as automationEditSchema, o as automationExecutionStatusDaySchema, p as automationRunSchema, r as automationEventCatalogSchema, s as automationExecutionStatusSchema, t as automationEditErrorSchema, u as automationListSchema, v as automationUpdateSchema, w as scheduledAutomationSummarySchema, x as automationVersionParamsSchema, y as automationVersionActivateSchema } from "../automation-CrQGQ2MT.js";
 import { C as skillReportsSchema, S as skillReportSchema, _ as pluginPackageContentItemReportSchema, b as pluginsSchema, g as pluginOperationalReportSchema, h as pluginOperationalReportFeedSchema, m as healthReportSchema, t as webMessageId, v as pluginPackageContentReportSchema, x as runtimeInfoReportSchema, y as pluginSchema } from "../web-message-id-xPI_EFSC.js";
-import { A as codeChangeSummarySchema, C as locationParamsSchema, D as dailyConversationActivitySchema, F as codeRepositorySummarySchema, I as apiErrorSchema, M as codePersonReportSchema, N as codeRepositoryParamsSchema, O as codeActivityDaySchema, P as codeRepositoryReportSchema, S as locationDirectoryReportSchema, _ as actorProfileReportSchema, a as workspaceBodySchema, b as locationActivityDayReportSchema, c as workspaceRepoSchema, d as createdPersonalTokenSchema, f as personalTokenListSchema, g as actorDirectoryReportSchema, h as revokePersonalTokenResponseSchema, i as deleteWorkspaceResponseSchema, j as codeOverviewReportSchema, k as codeChangeSummaryReportSchema, l as workspaceSchema, m as personalTokenParamsSchema, n as statsReportSchema, o as workspaceListSchema, p as personalTokenMetadataSchema, r as baselineSnapshotSchema, s as workspaceParamsSchema, t as statSchema, u as createPersonalTokenBodySchema, v as personParamsSchema, x as locationDetailReportSchema, y as personalSpendReportSchema } from "../schema-C5bgOpRg.js";
+import { A as codeChangeSummarySchema, C as locationParamsSchema, D as dailyConversationActivitySchema, F as codeRepositorySummarySchema, I as apiErrorSchema, M as codePersonReportSchema, N as codeRepositoryParamsSchema, O as codeActivityDaySchema, P as codeRepositoryReportSchema, S as locationDirectoryReportSchema, _ as actorProfileReportSchema, a as workspaceBodySchema, b as locationActivityDayReportSchema, c as workspaceRepoSchema, d as createdPersonalTokenSchema, f as personalTokenListSchema, g as actorDirectoryReportSchema, h as revokePersonalTokenResponseSchema, i as deleteWorkspaceResponseSchema, j as codeOverviewReportSchema, k as codeChangeSummaryReportSchema, l as workspaceSchema, m as personalTokenParamsSchema, n as statsReportSchema, o as workspaceListSchema, p as personalTokenMetadataSchema, r as baselineSnapshotSchema, s as workspaceParamsSchema, t as statSchema, u as createPersonalTokenBodySchema, v as personParamsSchema, x as locationDetailReportSchema, y as personalSpendReportSchema } from "../schema-CxWAN2zq.js";
 export { INPUT_IMAGE_TYPES, MAX_INPUT_IMAGES, MAX_INPUT_IMAGE_BYTES, acceptedConversationMessageSchema, actorDirectoryReportSchema, actorProfileReportSchema, apiErrorSchema, archiveConversationBodySchema, archiveConversationResponseSchema, automationEditErrorSchema, automationEditSchema, automationEventCatalogSchema, automationExecutionListSchema, automationExecutionSchema, automationExecutionStatusDaySchema, automationExecutionStatusSchema, automationListQuerySchema, automationListSchema, automationParamsSchema, automationRunListSchema, automationRunSchema, automationRunWindowsSchema, automationScheduleIntentSchema, automationSchedulePreviewSchema, automationSummarySchema, automationUpdateSchema, automationVersionActivateSchema, automationVersionListSchema, automationVersionParamsSchema, automationVersionSchema, baselineSnapshotSchema, cancelConversationPendingMessagesBodySchema, cancelConversationPendingMessagesResponseSchema, codeActivityDaySchema, codeChangeSummaryReportSchema, codeChangeSummarySchema, codeOverviewReportSchema, codePersonReportSchema, codeRepositoryParamsSchema, codeRepositoryReportSchema, codeRepositorySummarySchema, conversationActivityPreviewSchema, conversationAuxiliaryCostsSchema, conversationDetailQuerySchema, conversationDetailReportSchema, conversationEventHistorySchema, conversationEventPageSchema, conversationEventsQuerySchema, conversationFeedQuerySchema, conversationFeedSchema, conversationParamsSchema, conversationPendingAuthorizationSchema, conversationPendingMessageDeliverySchema, conversationPendingMessageSchema, conversationPendingMessagesReportSchema, conversationReportEventDataSchema, conversationReportEventSchema, conversationStatsReportSchema, conversationSummaryReportSchema, conversationTurnFailureCodeSchema, conversationTurnFailureReasonSchema, createConversationBodySchema, createConversationMessageBodySchema, createPersonalTokenBodySchema, createdPersonalTokenSchema, dailyConversationActivitySchema, deleteWorkspaceResponseSchema, eventAutomationSummarySchema, forkConversationBodySchema, forkConversationResponseSchema, healthReportSchema, locationActivityDayReportSchema, locationDetailReportSchema, locationDirectoryReportSchema, locationParamsSchema, messageCardText, personParamsSchema, personalSpendReportSchema, personalTokenListSchema, personalTokenMetadataSchema, personalTokenParamsSchema, pluginOperationalReportFeedSchema, pluginOperationalReportSchema, pluginPackageContentItemReportSchema, pluginPackageContentReportSchema, pluginSchema, pluginsSchema, resolveMessageCards, revokePersonalTokenResponseSchema, runtimeInfoReportSchema, scheduledAutomationSummarySchema, skillReportSchema, skillReportsSchema, statSchema, statsReportSchema, webMessageId, workspaceBodySchema, workspaceListSchema, workspaceParamsSchema, workspaceRepoSchema, workspaceSchema };

package/dist/api.d.ts

@@ -1,5 +1,5 @@
 import { n as ConversationWorkQueue } from "./queue-B5SnqRln.js";
-import "./db-Ca9Nt5ci.js";
+import "./db-CWZP77Ex.js";
 import { Hono } from "hono";
 import { z } from "zod";
 import { User } from "@sentry/junior-plugin-api";

package/dist/api.js

@@ -1,21 +1,23 @@
-import { Dt as getEventCatalog, G as readScheduledAutomation, K as saveScheduledAutomation, M as parseSlackThreadId, Pt as cancelHumanFacingPendingMessages, Q as eventAutomationTriggerAvailable, R as editScheduledAutomation, Wt as getConversation, X as editEventAutomation, Z as AutomationEditError, at as getEventAutomation, ct as saveEventAutomation, et as resolveTaskOutcomes, ft as readAutomationVersion, g as readStats, gt as requireAutomationRevision, ht as automationRevision, k as readLiveAttachment, kt as pluginEventCatalog, lt as setEventAutomationStatus, mt as AutomationConflictError, pt as sameDefinitionValue, rt as eventAutomationBelongsToUser, ut as automationDefinition, z as lookupSlackUser } from "./agent-runner-DMAsnPb9.js";
-import { d as logException, p as logWarn } from "./logging-rB_ngE_R.js";
-import { b as parseSlackMessageTs, h as parseSlackTeamId, p as parseSlackChannelId } from "./context-0Et9iVSB.js";
-import { At as conversationHasParticipantUser, C as WorkspaceValidationError, Dt as conversationArchivedForEmail, Et as conversationArchiveTimes, Ft as readLatestConversationBrief, Gt as listConversationAnnotations, It as readConversationEventPage, Kt as listConversationAnnotationsById, Lt as buildSentryConversationUrl, M as workspaceRepoCheckoutPath, Mt as conversationNotArchivedForUser, Nt as viewerConversationMembership, O as SANDBOX_RUNTIME, Ot as conversationArchivedForUser, Q as findUserByEmail, Qt as getConversationEventStore, S as updateWorkspace, Tt as readConversationAccessFromSql, W as getSlackClient, Y as withSlackRetries, _ as deleteWorkspace, b as listWorkspaces, cn as parseSessionSource, en as getConversationStore, et as resolveViewerUser, fn as agentTurnUsageSchema, g as createWorkspace, in as withConversationEventLock, jt as conversationNotArchivedForEmail, kt as conversationHasParticipantEmail, mn as resolveRootConversationId, nn as getSqlExecutor, on as locationFromRow, pn as hasAgentTurnUsage, tn as getDb, tt as updateViewerDisplayName, u as getPlugins, v as getWorkspace, wt as createPluginLogger, x as listWorkspacesByRepository } from "./agent-hooks-otHGbhBx.js";
+import { $ as eventAutomationBelongsToUser, Et as pluginEventCatalog, F as lookupSlackUser, H as saveScheduledAutomation, J as eventAutomationTriggerAvailable, K as editEventAutomation, O as parseSlackThreadId, P as editScheduledAutomation, T as readLiveAttachment, V as readScheduledAutomation, Vt as getConversation, X as resolveTaskOutcomes, at as setEventAutomationStatus, ct as readAutomationVersion, dt as automationRevision, ft as requireAutomationRevision, g as readStats, it as saveEventAutomation, jt as cancelHumanFacingPendingMessages, lt as sameDefinitionValue, ot as automationDefinition, q as AutomationEditError, tt as getEventAutomation, ut as AutomationConflictError, wt as getEventCatalog } from "./agent-runner-DjQSEVuD.js";
+import { d as logException, p as logWarn } from "./logging-Bne7JUXI.js";
+import { d as parseSlackTeamId, g as parseSlackMessageTs, l as parseSlackChannelId } from "./actor-BTtLaeWy.js";
+import { C as agentTurnUsageSchema, T as resolveRootConversationId, _ as locationFromRow, c as getConversationEventStore, d as getDb, f as getSqlExecutor, i as resolveViewerUser, m as withConversationEventLock, o as updateViewerDisplayName, t as findUserByEmail, u as getConversationStore, w as hasAgentTurnUsage, y as parseSessionSource } from "./viewer-DF3HTfW5.js";
 import { n as juniorDestinations } from "./destinations-BeBiJeEM.js";
-import { C as juniorCodeChanges, D as juniorConversations, E as conversationReadColumns, O as juniorIdentities, _ as juniorConversationBriefs, b as juniorConversationEvents, h as juniorConversationParticipants, k as juniorUsers, w as juniorCodeRepositories, x as juniorApiTokens, y as juniorConversationMetrics } from "./executor-BNxfDS1V.js";
-import { A as forkConversationResponseSchema, D as createConversationBodySchema, N as readMessageAttachments, O as createConversationMessageBodySchema, P as INPUT_IMAGE_TYPES, T as conversationStatsReportSchema, _ as conversationParamsSchema, a as cancelConversationPendingMessagesBodySchema, c as conversationAttachmentParamsSchema, d as conversationDetailReportSchema, g as conversationFeedSchema, h as conversationFeedQuerySchema, i as archiveConversationResponseSchema, k as forkConversationBodySchema, m as conversationEventsQuerySchema, nt as contextProvenance, o as cancelConversationPendingMessagesResponseSchema, p as conversationEventPageSchema, r as archiveConversationBodySchema, t as acceptedConversationMessageSchema, u as conversationDetailQuerySchema, x as conversationPendingMessagesReportSchema } from "./conversation-9Fxa1Zbq.js";
-import { F as loadTurnProjection, vt as piMessageFromHistoryItem } from "./checkpoint-BlIIiHG5.js";
-import { n as hash, t as create } from "./profile-D6apIG2N.js";
-import { t as getCachedSnapshot } from "./resolve-sJtTzuBO.js";
-import { a as getVercelConversationWorkQueue } from "./job-queue-Dq5_zt_l.js";
+import { C as juniorCodeChanges, D as juniorConversations, E as conversationReadColumns, O as juniorIdentities, _ as juniorConversationBriefs, b as juniorConversationEvents, h as juniorConversationParticipants, k as juniorUsers, w as juniorCodeRepositories, x as juniorApiTokens, y as juniorConversationMetrics } from "./executor-DmIad4GI.js";
+import { u as contextProvenance } from "./history-BLTUgFYO.js";
+import { F as loadTurnProjection, vt as piMessageFromHistoryItem } from "./checkpoint-C37Xgtj-.js";
+import { At as viewerConversationMembership, C as WorkspaceValidationError, Ct as conversationArchiveTimes, Dt as conversationHasParticipantUser, Et as conversationHasParticipantEmail, Ht as listConversationAnnotations, M as workspaceRepoCheckoutPath, Mt as readLatestConversationBrief, Nt as readConversationEventPage, O as SANDBOX_RUNTIME, Ot as conversationNotArchivedForEmail, Pt as buildSentryConversationUrl, S as updateWorkspace, St as readConversationAccessFromSql, Tt as conversationArchivedForUser, Ut as listConversationAnnotationsById, _ as deleteWorkspace, at as getSlackClient, b as listWorkspaces, g as createWorkspace, kt as conversationNotArchivedForUser, u as getPlugins, ut as withSlackRetries, v as getWorkspace, wt as conversationArchivedForEmail, x as listWorkspacesByRepository, xt as createPluginLogger } from "./agent-hooks-p3UA9FI1.js";
+import { A as forkConversationResponseSchema, D as createConversationBodySchema, N as readMessageAttachments, O as createConversationMessageBodySchema, P as INPUT_IMAGE_TYPES, T as conversationStatsReportSchema, _ as conversationParamsSchema, a as cancelConversationPendingMessagesBodySchema, c as conversationAttachmentParamsSchema, d as conversationDetailReportSchema, g as conversationFeedSchema, h as conversationFeedQuerySchema, i as archiveConversationResponseSchema, k as forkConversationBodySchema, m as conversationEventsQuerySchema, o as cancelConversationPendingMessagesResponseSchema, p as conversationEventPageSchema, r as archiveConversationBodySchema, t as acceptedConversationMessageSchema, u as conversationDetailQuerySchema, x as conversationPendingMessagesReportSchema } from "./conversation-DwD-vquD.js";
+import { n as hash, t as create } from "./profile-DIcHBAxe.js";
+import { t as getCachedSnapshot } from "./resolve-BkpWmZgN.js";
+import { a as getVercelConversationWorkQueue } from "./job-queue-CXpx6KfD.js";
 import { F as weekdaySchema, I as getFirstRunAtMs, M as compileScheduleIntent, _ as automationSummarySchema, b as automationVersionListSchema, c as automationLifecycleSchema, d as automationParamsSchema, f as automationRunListSchema, g as automationSchedulePreviewSchema, h as automationScheduleIntentSchema, i as automationExecutionListSchema, j as ScheduleIntentError, l as automationListQuerySchema, n as automationEditSchema, r as automationEventCatalogSchema, t as automationEditErrorSchema, u as automationListSchema, v as automationUpdateSchema, x as automationVersionParamsSchema, y as automationVersionActivateSchema } from "./automation-CrQGQ2MT.js";
 import { C as skillReportsSchema, a as fillUtcHours, b as pluginsSchema, c as sumUtcHoursIntoSixHours, d as trailingUtcSixHourWindow, f as utcDayKey, h as pluginOperationalReportFeedSchema, i as fillUtcDays, l as trailingUtcDayWindow, m as healthReportSchema, n as DAY_MS$1, o as fillUtcSixHours, p as utcHourKey, r as HOUR_MS$1, s as startOfUtcHour, u as trailingUtcHourWindow, x as runtimeInfoReportSchema } from "./web-message-id-xPI_EFSC.js";
-import { C as clearSlackPendingReactions, L as createVercelAttachmentStorage, V as readHealthReport, _ as readViewerAutomationSummary, a as recordWebConversationActivity, b as resolveViewerTaskCandidate, d as resolveSlackConversationContextFromThreadId, f as ViewerTaskNotFoundError, g as readViewerAutomationRuns, h as readViewerAutomationExecutions, i as createConversationId, j as legacyWebMailboxMetadataSchema, l as getProductionSlackAdapter, m as readConversationSourceTask, o as webActorFromEmail, p as deleteViewerTask, r as createAndEnqueueConversation, t as appendAndEnqueueWebMessage, u as formatSlackConversationRedactedLabel, v as readViewerAutomationVersions, y as readViewerAutomations } from "./web-input-C56ivZuH.js";
-import { A as conversationAggregateColumns, j as conversationRangeColumns, k as conversationActiveDaysColumn } from "./task-runner-Bh8XONXT.js";
-import { r as getWebAuthorization } from "./web-authorization-DDt4FZld.js";
-import { t as decodeInputImages } from "./images-D6Y3FJDQ.js";
-import { C as locationParamsSchema, E as activitySixHours$1, I as apiErrorSchema, M as codePersonReportSchema, N as codeRepositoryParamsSchema, P as codeRepositoryReportSchema, S as locationDirectoryReportSchema, T as activityHours$1, _ as actorProfileReportSchema, a as workspaceBodySchema, d as createdPersonalTokenSchema, f as personalTokenListSchema, g as actorDirectoryReportSchema, h as revokePersonalTokenResponseSchema, i as deleteWorkspaceResponseSchema, j as codeOverviewReportSchema, l as workspaceSchema, m as personalTokenParamsSchema, n as statsReportSchema, o as workspaceListSchema, s as workspaceParamsSchema, u as createPersonalTokenBodySchema, v as personParamsSchema, w as activityDays$1, x as locationDetailReportSchema, y as personalSpendReportSchema } from "./schema-C5bgOpRg.js";
+import { B as readHealthReport, C as clearSlackPendingReactions, I as createVercelAttachmentStorage, _ as readViewerAutomationSummary, a as recordWebConversationActivity, b as resolveViewerTaskCandidate, d as resolveSlackConversationContextFromThreadId, f as ViewerTaskNotFoundError, g as readViewerAutomationRuns, h as readViewerAutomationExecutions, i as createConversationId, j as legacyWebMailboxMetadataSchema, l as getProductionSlackAdapter, m as readConversationSourceTask, o as webActorFromEmail, p as deleteViewerTask, r as createAndEnqueueConversation, t as appendAndEnqueueWebMessage, u as formatSlackConversationRedactedLabel, v as readViewerAutomationVersions, y as readViewerAutomations } from "./web-input-qVi8134S.js";
+import { A as conversationAggregateColumns, j as conversationRangeColumns, k as conversationActiveDaysColumn } from "./task-runner-BZUoctJ1.js";
+import { r as getWebAuthorization } from "./web-authorization-Dg_R1tMc.js";
+import { t as decodeInputImages } from "./images-1xUjTHGf.js";
+import { C as locationParamsSchema, E as activitySixHours$1, I as apiErrorSchema, M as codePersonReportSchema, N as codeRepositoryParamsSchema, P as codeRepositoryReportSchema, S as locationDirectoryReportSchema, T as activityHours$1, _ as actorProfileReportSchema, a as workspaceBodySchema, d as createdPersonalTokenSchema, f as personalTokenListSchema, g as actorDirectoryReportSchema, h as revokePersonalTokenResponseSchema, i as deleteWorkspaceResponseSchema, j as codeOverviewReportSchema, l as workspaceSchema, m as personalTokenParamsSchema, n as statsReportSchema, o as workspaceListSchema, s as workspaceParamsSchema, u as createPersonalTokenBodySchema, v as personParamsSchema, w as activityDays$1, x as locationDetailReportSchema, y as personalSpendReportSchema } from "./schema-CxWAN2zq.js";
 import { Hono } from "hono";
 import path from "node:path";
 import { z } from "zod";
@@ -3354,7 +3356,7 @@ async function readPeoplePluginReports(args) {
 		reports: [],
 		source: "plugins"
 	});
-	const { getPluginProfileReports } = await import("./agent-hooks-otHGbhBx.js").then((n) => n.t);
+	const { getPluginProfileReports } = await import("./agent-hooks-p3UA9FI1.js").then((n) => n.t);
 	return pluginOperationalReportFeedSchema.parse({
 		generatedAt: new Date(nowMs).toISOString(),
 		reports: await getPluginProfileReports({
@@ -3742,9 +3744,13 @@ function createPersonalTokenRoutes() {
 * This module joins registered readers with the authenticated viewer and
 * validates every plugin response before it reaches the dashboard.
 */
-/** List safe navigation metadata for registered plugin user pages. */
-function readPluginUserPageLinks() {
-	return pluginUserPageLinksSchema.parse(getPlugins().flatMap((plugin) => (plugin.userPages ?? []).map((page) => ({
+/** Admin pages are hidden from everyone except Junior admins. */
+function viewerCanSeePage(page, viewer) {
+	return page.navigation !== "admin" || viewer?.isAdmin === true;
+}
+/** List safe navigation metadata for the plugin user pages one viewer can see. */
+function readPluginUserPageLinks(viewer) {
+	return pluginUserPageLinksSchema.parse(getPlugins().flatMap((plugin) => (plugin.userPages ?? []).filter((page) => viewerCanSeePage(page, viewer)).map((page) => ({
 		description: page.description,
 		id: page.id,
 		label: page.label,
@@ -3764,6 +3770,7 @@ async function readPluginUserPage(input) {
 	if (!plugin || !page) return void 0;
 	const viewer = await resolveViewerUser(input.email);
 	if (!viewer) throw new Error("Authenticated viewer user could not be resolved");
+	if (!viewerCanSeePage(page, viewer)) return void 0;
 	const content = pluginUserPageContentSchema.parse(await page.read({
 		db: getDb(),
 		log: createPluginLogger(plugin.manifest.name),
@@ -3784,7 +3791,7 @@ const userPageQuerySchema = z.object({
 /** Create authenticated discovery and read routes for plugin user pages. */
 function createUserPageRoutes() {
 	const app = new Hono();
-	app.get("/", () => jsonResponse(pluginUserPageLinksSchema, readPluginUserPageLinks()));
+	app.get("/", (context) => jsonResponse(pluginUserPageLinksSchema, readPluginUserPageLinks(context.get("viewer"))));
 	app.get("/:pluginName/:pageId", requireViewer, validateRequest("query", userPageQuerySchema, "Invalid user page query."), async (context) => {
 		const viewer = context.get("viewer");
 		const { q, ...query } = context.req.valid("query");
@@ -4317,7 +4324,7 @@ function readDescriptionText(home) {
 }
 /** Read discovered skill names for authenticated runtime diagnostics. */
 async function readSkillReports() {
-	const { discoverSkills } = await import("./skills-BVpr_Gnv.js").then((n) => n.o);
+	const { discoverSkills } = await import("./skills-PHvy-ZgH.js").then((n) => n.o);
 	const skills = await discoverSkills();
 	return skillReportsSchema.parse(skills.map((skill) => ({
 		name: skill.name,
@@ -4326,7 +4333,7 @@ async function readSkillReports() {
 }
 /** Read safe configured plugin metadata for authenticated runtime diagnostics. */
 async function readPlugins() {
-	const { pluginCatalogRuntime } = await import("./catalog-runtime-DlXuhrmk.js").then((n) => n.t);
+	const { pluginCatalogRuntime } = await import("./catalog-runtime-xq-njrMs.js").then((n) => n.t);
 	return pluginsSchema.parse(pluginCatalogRuntime.getProviders().map((plugin) => ({
 		configKeys: plugin.manifest.configKeys ?? [],
 		description: plugin.manifest.description,
@@ -4338,7 +4345,7 @@ async function readPlugins() {
 async function readRuntimeInfoReport() {
 	const [{ homeDir }, { pluginCatalogRuntime }, plugins, skills] = await Promise.all([
 		import("./package-discovery-BVvSnQBB.js").then((n) => n.r),
-		import("./catalog-runtime-DlXuhrmk.js").then((n) => n.t),
+		import("./catalog-runtime-xq-njrMs.js").then((n) => n.t),
 		readPlugins(),
 		readSkillReports()
 	]);
@@ -4355,7 +4362,7 @@ async function readRuntimeInfoReport() {
 /** Read sanitized operational summaries contributed by plugins. */
 async function readPluginOperationalReportFeed() {
 	const nowMs = Date.now();
-	const { getPluginOperationalReports } = await import("./agent-hooks-otHGbhBx.js").then((n) => n.t);
+	const { getPluginOperationalReports } = await import("./agent-hooks-p3UA9FI1.js").then((n) => n.t);
 	return pluginOperationalReportFeedSchema.parse({
 		source: "plugins",
 		generatedAt: new Date(nowMs).toISOString(),

package/dist/{app-MEd7wbF0.d.ts → app-FB2hmHpZ.d.ts}

@@ -1,5 +1,5 @@
 import { n as ConversationWorkQueue, t as ConversationQueueMessage } from "./queue-B5SnqRln.js";
-import { t as ConversationStore } from "./store-DoewL5mG.js";
+import { t as ConversationStore } from "./store-BxxbxBlm.js";
 import "./history-DvqWZlYX.js";
 import { n as JuniorPluginSet } from "./plugins-CjfUP5gJ.js";
 import { Hono } from "hono";

package/dist/app.d.ts

@@ -1,4 +1,4 @@
-import { i as ModelProfileInput, n as createApp, r as JuniorDashboardOptions, t as JuniorAppOptions } from "./app-MEd7wbF0.js";
+import { i as ModelProfileInput, n as createApp, r as JuniorDashboardOptions, t as JuniorAppOptions } from "./app-FB2hmHpZ.js";
 import { i as defineJuniorPlugins, n as JuniorPluginSet, r as JuniorPluginSetOptions, t as JuniorPluginInput } from "./plugins-CjfUP5gJ.js";
 import { t as JUNIOR_VERSION } from "./version-CnXZ614E.js";
 export { JUNIOR_VERSION, JuniorAppOptions, type JuniorDashboardOptions, type JuniorPluginInput, type JuniorPluginSet, type JuniorPluginSetOptions, type ModelProfileInput, createApp, defineJuniorPlugins };

package/dist/app.js

@@ -1,29 +1,32 @@
-import { $ as effectiveTaskOutcomes, $t as requestConversationWork, A as requestAttachmentDeletion, B as logScheduledAutomationRunSkipped, C as isExperimentalFeatureEnabled, Cn as startOAuthFlow, Ct as processWorkspaceSnapshotJob, Dt as getEventCatalog, Fn as createUserTokenStore, G as readScheduledAutomation, Gt as getConversationWorkState, H as listScheduledAutomations, Hn as getConfigDefaults, J as scheduledRunId, Kt as hasRunnableConversationWork, Lt as clearExpiredConversationLease, M as parseSlackThreadId, Mt as appendAndEnqueueInboundMessage, Nn as slackEntitySchema, O as collectAttachmentGarbage, On as slackMention, Ot as eventGuidance, Pn as slackExternalRefIdSchema, S as getExperimentalFeatures, T as lookupSlackUserProfile, U as listScheduledAutomationsForTeam, Un as setConfigDefaults, Ut as ensureConversationWake, V as scheduledAutomationRunAttributes, Wt as getConversation, Y as withScheduledAutomationLock, Zt as removeActiveConversation, _n as consumeSandboxEgressPermissionDeniedSignal, a as executeCredentialedEgressRequest, an as hasRunnableConversationWork$1, b as unpublishedArtifactHeaders, bn as formatProviderLabel, c as deleteMcpAuthSessionsForUserProvider, cn as renderTaskInput, dn as resolveSandboxEgressProviderForHost, fn as normalizeSandboxEgressTracePropagationDomains, gn as consumeSandboxEgressAuthRequiredSignal, hn as clearSandboxEgressSignals, it as findMatchingEventAutomations, l as deleteMcpServerSessionId, mn as SANDBOX_EGRESS_PROXY_PATH, pn as shouldPropagateSandboxEgressTrace, q as saveScheduledAutomationInLock, qt as listActiveConversationIds, r as executeAgentRun, rn as CONVERSATION_WORK_STALE_ENQUEUE_MS, sn as isInvalidConversationRecordError, t as createAgentRunner, tn as stopConversationWork, tt as collectEventAutomationMatchKeys, u as deleteMcpStoredOAuthCredentials, v as publicArtifactHeaders, vn as parseSandboxEgressCredentialToken, w as setExperimentalFeatures, wt as ingestEvent, y as readPublicArtifact } from "./agent-runner-DMAsnPb9.js";
-import { C as withLogContext, O as JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE, S as withContext, d as logException, f as logInfo, j as JUNIOR_WORKSPACE_SNAPSHOT_JOB_CALLBACK_ROUTE, p as logWarn, r as createRequestContext, v as setSpanAttributes, w as withSpan, y as setSpanStatus } from "./logging-rB_ngE_R.js";
+import { An as slackEntitySchema, Bn as setConfigDefaults, Bt as ensureConversationWake, E as requestAttachmentDeletion, G as withScheduledAutomationLock, Ht as getConversationWorkState, I as logScheduledAutomationRunSkipped, Jt as removeActiveConversation, L as scheduledAutomationRunAttributes, Mn as createUserTokenStore, O as parseSlackThreadId, Pt as clearExpiredConversationLease, Qt as stopConversationWork, R as listScheduledAutomations, Tn as slackMention, Tt as eventGuidance, U as saveScheduledAutomationInLock, Ut as hasRunnableConversationWork, V as readScheduledAutomation, Vt as getConversation, W as scheduledRunId, Wt as listActiveConversationIds, Xt as requestConversationWork, Y as effectiveTaskOutcomes, Z as collectEventAutomationMatchKeys, _n as formatProviderLabel, an as renderTaskInput, b as unpublishedArtifactHeaders, bn as startOAuthFlow, bt as ingestEvent, c as deleteMcpAuthSessionsForUserProvider, cn as resolveSandboxEgressProviderForHost, dn as SANDBOX_EGRESS_PROXY_PATH, en as CONVERSATION_WORK_STALE_ENQUEUE_MS, et as findMatchingEventAutomations, fn as clearSandboxEgressSignals, hn as parseSandboxEgressCredentialToken, i as executeCredentialedEgressRequest, in as isInvalidConversationRecordError, jn as slackExternalRefIdSchema, kt as appendAndEnqueueInboundMessage, l as deleteMcpServerSessionId, ln as normalizeSandboxEgressTracePropagationDomains, mn as consumeSandboxEgressPermissionDeniedSignal, n as executeAgentRun, nn as hasRunnableConversationWork$1, pn as consumeSandboxEgressAuthRequiredSignal, t as createAgentRunner, u as deleteMcpStoredOAuthCredentials, un as shouldPropagateSandboxEgressTrace, v as publicArtifactHeaders, w as collectAttachmentGarbage, wt as getEventCatalog, x as lookupSlackUserProfile, y as readPublicArtifact, yt as processWorkspaceSnapshotJob, z as listScheduledAutomationsForTeam, zn as getConfigDefaults } from "./agent-runner-DjQSEVuD.js";
+import { C as withLogContext, O as JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE, S as withContext, d as logException, f as logInfo, j as JUNIOR_WORKSPACE_SNAPSHOT_JOB_CALLBACK_ROUTE, p as logWarn, r as createRequestContext, v as setSpanAttributes, w as withSpan, y as setSpanStatus } from "./logging-Bne7JUXI.js";
 import { r as continueTrace } from "./sentry-CgWZM_kV.js";
-import { t as JUNIOR_VERSION } from "./version-EQ4MWuUJ.js";
-import { _ as snapshotRuntimeConfig, d as restoreRuntimeConfig, f as setBotModelConfig, g as setSlackReactionConfig, h as setRuntimeLimits, i as getChatConfig, m as setProfiles, n as botConfig, o as getSlackBotToken, p as setCrossActorMidRunMode, u as resetRuntimeConfig } from "./config-CxpPG6nR.js";
-import { _ as slackChannelIdSchema, g as parseSlackUserId, h as parseSlackTeamId, u as parseActorUserId, v as slackTeamIdSchema, x as slackMessageTsSchema, y as slackUserIdSchema } from "./context-0Et9iVSB.js";
-import { $ as readActorIdentity, F as bindScheduledAutomationCredentialSubject, Gt as listConversationAnnotations, Ht as resolveRootVisibility, I as bindSlackDirectCredentialSubject, K as isDmChannel, L as verifyEventAutomationCredentialSubject, P as bindEventAutomationCredentialSubject, Qt as getConversationEventStore, R as verifyScheduledAutomationCredentialSubject, Tt as readConversationAccessFromSql, W as getSlackClient, X as getWorkspaceTeamId, Z as runWithWorkspaceTeamId, _t as getDashboardConversationLink, a as getPluginRoutes, an as withConversationMutationLock, bt as setDashboardConversationLinkOptions, d as setPlugins, en as getConversationStore, f as validatePlugins, h as setBriefsConfig, hn as deleteProviderIdentityForSlackUser, ht as takeDueTimerWatches, i as getPluginApiRoutes, in as withConversationEventLock, lt as collectEventMatchKeys, nn as getSqlExecutor, pt as findMatchingWatches, st as cancelSubscriptions, tn as getDb, u as getPlugins, wt as createPluginLogger, xt as createPluginState, yt as getDashboardTaskLink, z as verifySlackDirectCredentialSubject } from "./agent-hooks-otHGbhBx.js";
+import { t as JUNIOR_VERSION } from "./version-Dayi_ng2.js";
+import { _ as snapshotRuntimeConfig, d as restoreRuntimeConfig, f as setBotModelConfig, g as setSlackReactionConfig, h as setRuntimeLimits, i as getChatConfig, m as setProfiles, n as botConfig, o as getSlackBotToken, p as setCrossActorMidRunMode, u as resetRuntimeConfig } from "./config-CGK_VplU.js";
+import { _ as slackMessageTsSchema, d as parseSlackTeamId, f as parseSlackUserId, h as slackUserIdSchema, m as slackTeamIdSchema, o as parseActorUserId, p as slackChannelIdSchema } from "./actor-BTtLaeWy.js";
+import { E as deleteProviderIdentityForSlackUser, c as getConversationEventStore, d as getDb, f as getSqlExecutor, g as withConversationMutationLock, m as withConversationEventLock, r as readActorIdentity, u as getConversationStore } from "./viewer-DF3HTfW5.js";
 import { n as juniorDestinations } from "./destinations-BeBiJeEM.js";
-import { D as juniorConversations, _ as juniorConversationBriefs, a as juniorSchedulerRuns, b as juniorConversationEvents, m as juniorAgentInvocations, o as juniorSchedulerTasks, p as juniorAgentBindings } from "./executor-BNxfDS1V.js";
-import { V as annotationCard } from "./conversation-9Fxa1Zbq.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-DlXuhrmk.js";
-import { J as appendConversationMessages, Z as projectConversationMessages, et as settleConversationTitleWork } from "./checkpoint-BlIIiHG5.js";
-import { O as withLock$1, w as getStateAdapter } from "./profile-D6apIG2N.js";
-import { f as setSandboxResourceConfig, u as getSandboxResourceConfig } from "./resolve-sJtTzuBO.js";
-import { a as getVercelConversationWorkQueue, g as isConversationQueueMessageRejectedError, h as conversationQueueMessageSchema, i as verifyWorkspaceSnapshotJobMessage, o as resolveConversationWorkQueueTopic, s as verifyConversationQueueMessage, t as WORKSPACE_SNAPSHOT_JOB_QUEUE_TOPIC } from "./job-queue-Dq5_zt_l.js";
+import { D as juniorConversations, _ as juniorConversationBriefs, a as juniorSchedulerRuns, b as juniorConversationEvents, m as juniorAgentInvocations, o as juniorSchedulerTasks, p as juniorAgentBindings } from "./executor-DmIad4GI.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-xq-njrMs.js";
+import { J as appendConversationMessages, Z as projectConversationMessages, et as settleConversationTitleWork } from "./checkpoint-C37Xgtj-.js";
+import { $ as verifySlackDirectCredentialSubject, G as findMatchingWatches, Ht as listConversationAnnotations, J as bindEventAutomationCredentialSubject, Q as verifyScheduledAutomationCredentialSubject, St as readConversationAccessFromSql, V as collectEventMatchKeys, X as bindSlackDirectCredentialSubject, Y as bindScheduledAutomationCredentialSubject, Z as verifyEventAutomationCredentialSubject, _t as setDashboardConversationLinkOptions, a as getPluginRoutes, at as getSlackClient, d as setPlugins, dt as getWorkspaceTeamId, f as validatePlugins, ft as runWithWorkspaceTeamId, gt as getDashboardTaskLink, h as setBriefsConfig, i as getPluginApiRoutes, mt as getDashboardConversationLink, q as takeDueTimerWatches, st as isDmChannel, u as getPlugins, vt as createPluginState, xt as createPluginLogger, z as cancelSubscriptions, zt as resolveRootVisibility } from "./agent-hooks-p3UA9FI1.js";
+import { V as annotationCard } from "./conversation-DwD-vquD.js";
+import { O as withLock$1, w as getStateAdapter } from "./profile-DIcHBAxe.js";
+import { c as getThreadStopDecision } from "./pending-auth-C6w4Gwve.js";
+import { f as setSandboxResourceConfig, u as getSandboxResourceConfig } from "./resolve-BkpWmZgN.js";
+import { a as getVercelConversationWorkQueue, g as isConversationQueueMessageRejectedError, h as conversationQueueMessageSchema, i as verifyWorkspaceSnapshotJobMessage, o as resolveConversationWorkQueueTopic, s as verifyConversationQueueMessage, t as WORKSPACE_SNAPSHOT_JOB_QUEUE_TOPIC } from "./job-queue-CXpx6KfD.js";
 import { D as scheduledRunSchema, L as getNextRunAtMs } from "./automation-CrQGQ2MT.js";
-import { n as validatePluginRegistrations, t as validatePluginEgressCredentialHooks } from "./validation-BNPhuAvt.js";
+import { i as setExperimentalFeatures, n as getExperimentalFeatures, r as isExperimentalFeatureEnabled } from "./experimental-Qn9rKLgx.js";
+import { n as validatePluginRegistrations, t as validatePluginEgressCredentialHooks } from "./validation-DsLyiOfn.js";
 import { a as pluginRuntimeRegistrationsFromPluginSet, n as pluginCatalogConfigFromEnv, r as pluginCatalogConfigFromPluginSet, t as defineJuniorPlugins } from "./plugins-egKWjgue.js";
-import { A as getAuthPausedConversationTurnId, B as GET$3, C as clearSlackPendingReactions, D as stopSlackThread, E as isSlackMessageStopped, F as getThreadStopDecision, I as renderSlackObjectCard, L as createVercelAttachmentStorage, M as THREAD_OPTOUT_ACK, N as startProcessingReaction, O as normalizeIncomingSlackThreadId, P as parseContent, S as buildSlackInboundMessage, T as verifySlackSignature, _ as readViewerAutomationSummary, a as recordWebConversationActivity, c as createProductionSlackWebhookServices, k as withNormalizedThreadId, l as getProductionSlackAdapter, n as conversationTurnIdForMessage, o as webActorFromEmail, s as createProductionConversationWorkOptions, t as appendAndEnqueueWebMessage, w as runWithSlackInstallation, x as recordSkippedConversationMessage, z as enqueueAgentDispatch } from "./web-input-C56ivZuH.js";
-import { O as recordAutomationExecution, _ as markDispatchFailed, a as confirmDispatchMailboxAppend, d as getPluginDispatchProjection, f as isTerminalDispatchStatus, l as getDispatchRecord, o as createOrGetDispatch, p as listPendingDispatchMailboxAppends, s as getDispatchConversationId, t as processPluginTask } from "./task-runner-Bh8XONXT.js";
-import { c as listPendingAgentInvocationMailboxAppends, r as enqueueAgentInvocation } from "./work-DJ7hb9Ul.js";
-import { s as coerceThreadConversationState } from "./thread-state-BnQln4jO.js";
-import { a as GET$4, i as publishAppHomeView, r as GET$5, t as receiveLocalOAuthCredential } from "./credential-sync-D9yGg3q5.js";
-import { a as registerVercelPluginTaskDevConsumer, n as createVercelPluginTaskCallback, s as queueCallback } from "./task-queue-BAiZ7_CF.js";
-import { t as processConversationWork } from "./worker-DiiV8Lba.js";
-import { t as bindSpawnAgent } from "./spawn-CJhmyE4E.js";
+import { A as getAuthPausedConversationTurnId, C as clearSlackPendingReactions, D as stopSlackThread, E as isSlackMessageStopped, F as renderSlackObjectCard, I as createVercelAttachmentStorage, M as THREAD_OPTOUT_ACK, N as startProcessingReaction, O as normalizeIncomingSlackThreadId, P as parseContent, R as enqueueAgentDispatch, S as buildSlackInboundMessage, T as verifySlackSignature, _ as readViewerAutomationSummary, a as recordWebConversationActivity, c as createProductionSlackWebhookServices, k as withNormalizedThreadId, l as getProductionSlackAdapter, n as conversationTurnIdForMessage, o as webActorFromEmail, s as createProductionConversationWorkOptions, t as appendAndEnqueueWebMessage, w as runWithSlackInstallation, x as recordSkippedConversationMessage, z as GET$3 } from "./web-input-qVi8134S.js";
+import { O as recordAutomationExecution, _ as markDispatchFailed, a as confirmDispatchMailboxAppend, d as getPluginDispatchProjection, f as isTerminalDispatchStatus, l as getDispatchRecord, o as createOrGetDispatch, p as listPendingDispatchMailboxAppends, s as getDispatchConversationId, t as processPluginTask } from "./task-runner-BZUoctJ1.js";
+import { c as listPendingAgentInvocationMailboxAppends, r as enqueueAgentInvocation } from "./work-BbcghZZp.js";
+import { s as coerceThreadConversationState } from "./thread-state-SnFcB9Rk.js";
+import { a as GET$4, i as publishAppHomeView, r as GET$5, t as receiveLocalOAuthCredential } from "./credential-sync-BBeYpK4k.js";
+import { a as registerVercelPluginTaskDevConsumer, n as createVercelPluginTaskCallback, s as queueCallback } from "./task-queue-B9uJqkal.js";
+import { t as processConversationWork } from "./worker-B-uRQzKw.js";
+import { t as bindSpawnAgent } from "./spawn-CY34_HCm.js";
 import { createRequire } from "node:module";
 import { Hono } from "hono";
 import { z } from "zod";
@@ -4875,6 +4878,7 @@ function dashboardHostRoutePaths(dashboard, authenticatedRoutes = []) {
 	const peoplePath = pagePath("people");
 	const pagePaths = [
 		basePath,
+		pagePath("admin"),
 		pagePath("code"),
 		`${pagePath("code")}/*`,
 		conversationsPath,

package/dist/{briefs-DDA1ugXk.js → briefs-mzUaJkBX.js}

@@ -1,7 +1,7 @@
-import { r as completeObject } from "./client-CPMbTmJU.js";
+import { r as completeObject } from "./client-BZdqKg6S.js";
 import { r as defaultModelId } from "./model-profile-BwU8mqwD.js";
-import { B as parseBriefInput, I as briefCodeChangeSchema, d as conversationDetailReportSchema, p as conversationEventPageSchema } from "./conversation-9Fxa1Zbq.js";
-import { n as briefEntriesFromReportEvents, s as generateBrief, t as BRIEF_PROMPT } from "./prompt-Ctwy6hSI.js";
+import { B as parseBriefInput, I as briefCodeChangeSchema, d as conversationDetailReportSchema, p as conversationEventPageSchema } from "./conversation-DwD-vquD.js";
+import { n as briefEntriesFromReportEvents, s as generateBrief, t as BRIEF_PROMPT } from "./prompt-CMU-B4FA.js";
 import { CLI_USAGE } from "./cli/run.js";
 import path from "node:path";
 import { z } from "zod";
@@ -269,7 +269,7 @@ async function parseRunOptions(argv) {
 * `DATABASE_URL` at import, and `briefs pull` must work with only a token.
 */
 async function configuredDefaultModelId() {
-	const { botConfig } = await import("./config-CxpPG6nR.js").then((n) => n.r);
+	const { botConfig } = await import("./config-CGK_VplU.js").then((n) => n.r);
 	return defaultModelId(botConfig);
 }
 function apiUrl(baseUrl, pathname) {

package/dist/{catalog-runtime-DlXuhrmk.js → catalog-runtime-xq-njrMs.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { t as createPluginCatalogRuntime } from "./registry-zfTzTHe6.js";
+import { t as createPluginCatalogRuntime } from "./registry-VSrEYeaD.js";
 //#region src/chat/plugins/catalog-runtime.ts
 var catalog_runtime_exports = /* @__PURE__ */ __exportAll({ pluginCatalogRuntime: () => pluginCatalogRuntime });
 const pluginCatalogRuntime = createPluginCatalogRuntime();

package/dist/{checkpoint-BlIIiHG5.js → checkpoint-C37Xgtj-.js}

@@ -1,10 +1,13 @@
-import { d as unwrapCurrentInstruction, f as escapeXml, i as completeText, o as resolveGatewayModel } from "./client-CPMbTmJU.js";
-import { d as logException, o as getActiveTraceId, p as logWarn, t as buildTurnFailureResponse, v as setSpanAttributes } from "./logging-rB_ngE_R.js";
-import { n as botConfig } from "./config-CxpPG6nR.js";
-import { b as parseSlackMessageTs, f as toStoredSlackActor } from "./context-0Et9iVSB.js";
-import { Jt as agentsInstructionsUpdatedEvent, Qt as getConversationEventStore, Xt as authenticationUnlinkedEvent, Yt as authenticationLinkedEvent, en as getConversationStore, in as withConversationEventLock, ln as addAgentTurnUsage, nn as getSqlExecutor, qt as JUNIOR_NATIVE_EVENT_NAMESPACE, rn as createSqlConversationEventStore, sn as bindProviderConversation } from "./agent-hooks-otHGbhBx.js";
-import { H as messageCardRef, J as agentHistoryItemSchema, it as instructionProvenanceFor, nt as contextProvenance, rt as instructionActors } from "./conversation-9Fxa1Zbq.js";
-import { D as fenceLock, O as withLock, T as MUTATION_LOCK_TTL_MS, k as sleep, w as getStateAdapter } from "./profile-D6apIG2N.js";
+import { d as unwrapCurrentInstruction, f as escapeXml, i as completeText, o as resolveGatewayModel } from "./client-BZdqKg6S.js";
+import { d as logException, o as getActiveTraceId, p as logWarn, t as buildTurnFailureResponse, v as setSpanAttributes } from "./logging-Bne7JUXI.js";
+import { n as botConfig } from "./config-CGK_VplU.js";
+import { c as toStoredSlackActor, g as parseSlackMessageTs } from "./actor-BTtLaeWy.js";
+import { b as addAgentTurnUsage, c as getConversationEventStore, f as getSqlExecutor, m as withConversationEventLock, p as createSqlConversationEventStore, u as getConversationStore, v as bindProviderConversation } from "./viewer-DF3HTfW5.js";
+import { d as instructionActors, f as instructionProvenanceFor, n as agentHistoryItemSchema, u as contextProvenance } from "./history-BLTUgFYO.js";
+import { p as credentialSubjectSchema } from "./registry-VSrEYeaD.js";
+import { Gt as agentsInstructionsUpdatedEvent, Kt as authenticationLinkedEvent, Wt as JUNIOR_NATIVE_EVENT_NAMESPACE, qt as authenticationUnlinkedEvent } from "./agent-hooks-p3UA9FI1.js";
+import { H as messageCardRef } from "./conversation-DwD-vquD.js";
+import { D as fenceLock, O as withLock, T as MUTATION_LOCK_TTL_MS, k as sleep, w as getStateAdapter } from "./profile-DIcHBAxe.js";
 import { isDeepStrictEqual } from "node:util";
 import { z } from "zod";
 import { createHash } from "node:crypto";
@@ -24,7 +27,7 @@ function authorizationObservationMessage(data, createdAtMs) {
 		role: "user",
 		content: [{
 			type: "text",
-			text: `${label} completed for provider "${data.provider}". Continue the blocked request and retry the provider operation if needed.`
+			text: `${label} completed for provider "${data.provider}". Continue the request that waited for it and retry the provider operation. If the person dropped that request since, do not continue it; say only that ${data.provider} is connected.`
 		}],
 		timestamp: createdAtMs
 	});
@@ -1528,6 +1531,7 @@ const storedTurnRecordSchema = z.object({
 	schemaVersion: z.literal(TURN_CURSOR_SCHEMA_VERSION),
 	version: z.number().int().nonnegative(),
 	conversationId: z.string().min(1),
+	credentialSubject: credentialSubjectSchema.optional(),
 	dispatchId: z.string().min(1).optional(),
 	dispatchOutcome: z.enum([
 		"blocked",
@@ -1645,6 +1649,7 @@ function materializeTurnRecord(stored, piProjection, turnStartMessageIndex, runt
 		cumulativeDurationMs: runtimeMetrics?.cumulativeDurationMs ?? 0,
 		...definedProps$1({
 			channelName: runtimeMetrics?.channelName,
+			credentialSubject: stored.credentialSubject,
 			cumulativeToolCallCount: stored.cumulativeToolCallCount,
 			cumulativeUsage: runtimeMetrics?.cumulativeUsage,
 			dispatchId: stored.dispatchId,
@@ -1714,6 +1719,7 @@ function buildStoredRecord(args) {
 		committedSeq: args.committedSeq,
 		...definedProps$1({
 			actor: args.actor,
+			credentialSubject: args.credentialSubject,
 			cumulativeToolCallCount: args.cumulativeToolCallCount,
 			dispatchId: args.dispatchId,
 			dispatchOutcome: args.dispatchOutcome,
@@ -1789,6 +1795,7 @@ async function updateTurnState(args) {
 			lastProgressAtMs: parsed.lastProgressAtMs,
 			previousVersion: parsed.version,
 			...definedProps$1({
+				credentialSubject: args.existing.credentialSubject,
 				cumulativeToolCallCount: args.existing.cumulativeToolCallCount,
 				dispatchId: args.existing.dispatchId,
 				dispatchOutcome: args.existing.dispatchOutcome,
@@ -1862,6 +1869,7 @@ async function upsertTurnRecordLocked(args, fence) {
 			historyVersion: commit.historyVersion,
 			previousVersion: existingRecord?.version,
 			...definedProps$1({
+				credentialSubject: existingRecord?.credentialSubject ?? args.credentialSubject,
 				cumulativeToolCallCount: args.cumulativeToolCallCount ?? existingRecord?.cumulativeToolCallCount,
 				dispatchId,
 				dispatchOutcome: args.dispatchOutcome ?? existingRecord?.dispatchOutcome,
@@ -2038,6 +2046,7 @@ function sharedWrite(args, latest) {
 		...definedProps({
 			actor: args.actor,
 			channelName: args.channelName ?? latest?.channelName,
+			credentialSubject: args.credentialSubject,
 			destination: args.destination,
 			destinationVisibility: args.destinationVisibility,
 			dispatchId: args.dispatchId ?? latest?.dispatchId,
@@ -2079,9 +2088,9 @@ async function savePaused(args) {
 	const nextSliceId = keepSlice ? args.sliceId : args.sliceId + 1;
 	try {
 		const latest = await getTurnRecord(args.conversationId, args.turnId);
-		const messages = args.reason === "yield" ? [...args.messages] : continuableMessages(args.messages, latest?.piMessages);
+		const messages = args.reason === "yield" || args.beforePrompt ? [...args.messages] : continuableMessages(args.messages, latest?.piMessages);
 		if (args.reason === "auth") {
-			if (messages.length > 0 && !isContinuablePiBoundary(messages)) return;
+			if (!args.beforePrompt && messages.length > 0 && !isContinuablePiBoundary(messages)) return;
 		} else if (messages.length === 0 || !isContinuablePiBoundary(messages)) return;
 		const base = {
 			...sharedWrite(args, latest),

package/dist/cli/chat.js

@@ -1,4 +1,4 @@
-import { r as executeAgentRun, t as createAgentRunner } from "../agent-runner-DMAsnPb9.js";
+import { n as executeAgentRun, t as createAgentRunner } from "../agent-runner-DjQSEVuD.js";
 import { t as loadAppPluginSet } from "../plugin-module-CVvEUSMH.js";
 import path from "node:path";
 import { createHash, randomUUID } from "node:crypto";
@@ -100,10 +100,10 @@ async function loadLocalPluginSet() {
 async function configureLocalChatPlugins(pluginSet) {
 	const [pluginsModule, agentHooksModule, catalogRuntimeModule, validationModule, databaseModule] = await Promise.all([
 		import("../plugins-egKWjgue.js").then((n) => n.o),
-		import("../agent-hooks-otHGbhBx.js").then((n) => n.t),
-		import("../catalog-runtime-DlXuhrmk.js").then((n) => n.t),
-		import("../validation-BNPhuAvt.js").then((n) => n.r),
-		import("../agent-hooks-otHGbhBx.js").then((n) => n.Zt)
+		import("../agent-hooks-p3UA9FI1.js").then((n) => n.t),
+		import("../catalog-runtime-xq-njrMs.js").then((n) => n.t),
+		import("../validation-DsLyiOfn.js").then((n) => n.r),
+		import("../viewer-DF3HTfW5.js").then((n) => n.s)
 	]);
 	const resolvedPluginSet = pluginSet === void 0 ? await loadLocalPluginSet() : pluginSet ?? void 0;
 	const plugins = pluginsModule.pluginRuntimeRegistrationsFromPluginSet(resolvedPluginSet);
@@ -153,18 +153,18 @@ function localDevServerUrl() {
 async function prepareLocalChatRun(io, pluginSet) {
 	defaultStateAdapterForLocalChat();
 	await configureLocalChatPlugins(pluginSet);
-	const { setExperimentalFeatures } = await import("../agent-runner-DMAsnPb9.js").then((n) => n.x);
+	const { setExperimentalFeatures } = await import("../experimental-Qn9rKLgx.js").then((n) => n.t);
 	setExperimentalFeatures({ subagents: true });
-	const { setBriefsConfig } = await import("../agent-hooks-otHGbhBx.js").then((n) => n.m);
+	const { setBriefsConfig } = await import("../agent-hooks-p3UA9FI1.js").then((n) => n.m);
 	setBriefsConfig({ enabled: true });
-	const { runLocalAgentTurn } = await import("../runner-DkCk8cbc.js");
-	const { startLocalOAuthCallbackServer } = await import("../oauth-callback-server-Csw7RssK.js");
+	const { runLocalAgentTurn } = await import("../runner-52ezCnZF.js");
+	const { startLocalOAuthCallbackServer } = await import("../oauth-callback-server-Cb-HPZPS.js");
 	const { createLocalOAuthState } = await import("../oauth-relay-CdCnu80W.js").then((n) => n.t);
-	const { createLocalSandboxEgressSignalTransport } = await import("../sandbox-egress-signals-tSQ8OEcw.js");
-	const { bindSpawnAgent } = await import("../spawn-CJhmyE4E.js").then((n) => n.n);
-	const { createAgentInvocationWorker, routeAgentInvocationWork } = await import("../work-DJ7hb9Ul.js").then((n) => n.a);
+	const { createLocalSandboxEgressSignalTransport } = await import("../sandbox-egress-signals-Cmhf3P6Y.js");
+	const { bindSpawnAgent } = await import("../spawn-CY34_HCm.js").then((n) => n.n);
+	const { createAgentInvocationWorker, routeAgentInvocationWork } = await import("../work-BbcghZZp.js").then((n) => n.a);
 	const { createLocalConversationWork } = await import("../conversation-work-C6y3T5Hx.js");
-	const { processConversationWork } = await import("../worker-DiiV8Lba.js").then((n) => n.n);
+	const { processConversationWork } = await import("../worker-B-uRQzKw.js").then((n) => n.n);
 	let agentRunner;
 	const localConversationWork = createLocalConversationWork(async (message) => {
 		if (!agentRunner) throw new Error("Local agent runner is not ready");

package/dist/cli/check.js

@@ -1,6 +1,6 @@
-import { D as JUNIOR_HEARTBEAT_ROUTE, M as LEGACY_JUNIOR_CONVERSATION_WORK_FUNCTION, T as JUNIOR_CONVERSATION_WORK_CALLBACK_ROUTE } from "../logging-rB_ngE_R.js";
-import { f as parseInlinePluginManifest, p as parsePluginManifest } from "../registry-zfTzTHe6.js";
-import { i as parseSkillFile } from "../skills-BVpr_Gnv.js";
+import { D as JUNIOR_HEARTBEAT_ROUTE, M as LEGACY_JUNIOR_CONVERSATION_WORK_FUNCTION, T as JUNIOR_CONVERSATION_WORK_CALLBACK_ROUTE } from "../logging-Bne7JUXI.js";
+import { _ as parsePluginManifest, g as parseInlinePluginManifest } from "../registry-VSrEYeaD.js";
+import { i as parseSkillFile } from "../skills-PHvy-ZgH.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { pathToFileURL } from "node:url";

package/dist/cli/main.js

@@ -24,8 +24,11 @@ async function runUpgrade(pluginSet) {
 async function runChat(argv, pluginSet) {
 	return await (await import("./chat.js")).runChat(argv, void 0, { pluginSet });
 }
+async function runAdmin(argv) {
+	return await (await import("../admin-leAJ2k0P.js")).runAdmin(argv);
+}
 async function runBriefs(argv) {
-	return await (await import("../briefs-DDA1ugXk.js")).runBriefs(argv);
+	return await (await import("../briefs-mzUaJkBX.js")).runBriefs(argv);
 }
 function topLevelCommand(argv) {
 	return (argv[0] === "--" ? argv.slice(1) : argv)[0];
@@ -36,10 +39,11 @@ async function runMain(argv, options = {}) {
 	const instrument = options.instrument ?? true;
 	if (instrument) await initSentry();
 	const command = topLevelCommand(argv);
-	const cliPluginsModule = command && command !== "init" && command !== "briefs" ? await import("./plugins.js") : void 0;
+	const cliPluginsModule = command && command !== "init" && command !== "briefs" && command !== "admin" ? await import("./plugins.js") : void 0;
 	const pluginSet = cliPluginsModule ? await cliPluginsModule.loadCliPluginSet() ?? null : void 0;
 	const pluginCommands = cliPluginsModule ? await cliPluginsModule.loadCliPluginCommands(pluginSet) : void 0;
 	const exitCode = await runCli(argv, {
+		runAdmin,
 		runBriefs,
 		runChat: async (chatArgv) => await runChat(chatArgv, pluginSet),
 		runInit,

package/dist/cli/plugins.js

@@ -1,6 +1,7 @@
-import { d as setPlugins, f as validatePlugins, tn as getDb, wt as createPluginLogger } from "../agent-hooks-otHGbhBx.js";
-import { n as pluginCatalogRuntime } from "../catalog-runtime-DlXuhrmk.js";
-import { n as validatePluginRegistrations, t as validatePluginEgressCredentialHooks } from "../validation-BNPhuAvt.js";
+import { d as getDb } from "../viewer-DF3HTfW5.js";
+import { n as pluginCatalogRuntime } from "../catalog-runtime-xq-njrMs.js";
+import { d as setPlugins, f as validatePlugins, xt as createPluginLogger } from "../agent-hooks-p3UA9FI1.js";
+import { n as validatePluginRegistrations, t as validatePluginEgressCredentialHooks } from "../validation-DsLyiOfn.js";
 import { a as pluginRuntimeRegistrationsFromPluginSet, i as pluginCliRegistrationsFromPluginSet, r as pluginCatalogConfigFromPluginSet } from "../plugins-egKWjgue.js";
 import { t as loadAppPluginSet } from "../plugin-module-CVvEUSMH.js";
 import { stderr, stdout } from "node:process";
@@ -14,6 +15,7 @@ import { Command, CommanderError } from "commander";
 */
 const pluginCliLoader = createJiti(import.meta.url, { moduleCache: false });
 const CORE_COMMAND_NAMES = /* @__PURE__ */ new Set([
+	"admin",
 	"chat",
 	"check",
 	"init",

package/dist/cli/run.d.ts

@@ -1,6 +1,7 @@
 //#region src/cli/run.d.ts
-export declare const CLI_USAGE = "usage: junior init <dir>\n       junior snapshot create\n       junior check [dir]\n       junior upgrade\n       junior chat\n       junior chat -p <message>\n       junior briefs pull <conversationId...> --base-url <url> [--token <token>] --out <dir>\n       junior briefs run <snapshot...> [--model <id>] [--prompt <file>] [--turn-by-turn] [--out <dir>]";
+export declare const CLI_USAGE = "usage: junior init <dir>\n       junior admin list|grant <email>|revoke <email>\n       junior snapshot create\n       junior check [dir]\n       junior upgrade\n       junior chat\n       junior chat -p <message>\n       junior briefs pull <conversationId...> --base-url <url> [--token <token>] --out <dir>\n       junior briefs run <snapshot...> [--model <id>] [--prompt <file>] [--turn-by-turn] [--out <dir>]";
 interface CliHandlers {
+  runAdmin: (argv: string[]) => Promise<number>;
   runBriefs: (argv: string[]) => Promise<number>;
   runChat: (argv: string[]) => Promise<number>;
   runInit: (dir: string) => Promise<void>;

package/dist/cli/run.js

@@ -1,5 +1,5 @@
 //#region src/cli/run.ts
-const CLI_USAGE = "usage: junior init <dir>\n       junior snapshot create\n       junior check [dir]\n       junior upgrade\n       junior chat\n       junior chat -p <message>\n       junior briefs pull <conversationId...> --base-url <url> [--token <token>] --out <dir>\n       junior briefs run <snapshot...> [--model <id>] [--prompt <file>] [--turn-by-turn] [--out <dir>]";
+const CLI_USAGE = "usage: junior init <dir>\n       junior admin list|grant <email>|revoke <email>\n       junior snapshot create\n       junior check [dir]\n       junior upgrade\n       junior chat\n       junior chat -p <message>\n       junior briefs pull <conversationId...> --base-url <url> [--token <token>] --out <dir>\n       junior briefs run <snapshot...> [--model <id>] [--prompt <file>] [--turn-by-turn] [--out <dir>]";
 const DEFAULT_IO = { error: console.error };
 /** Strip Node's leading argv separator while preserving command-level flags. */
 function normalizeCliArgv(argv) {
@@ -9,6 +9,7 @@ function normalizeCliArgv(argv) {
 async function runCli(argv, handlers, io = DEFAULT_IO) {
 	const [command, subcommand, ...rest] = normalizeCliArgv(argv);
 	if (command === "chat") return await handlers.runChat(subcommand === void 0 ? [] : [subcommand, ...rest]);
+	if (command === "admin") return await handlers.runAdmin(subcommand === void 0 ? [] : [subcommand, ...rest]);
 	if (command === "briefs") return await handlers.runBriefs(subcommand === void 0 ? [] : [subcommand, ...rest]);
 	if (command === "init") {
 		if (!subcommand || rest.length > 0) {

package/dist/cli/snapshot-create.js

@@ -1,6 +1,6 @@
-import { n as pluginCatalogRuntime } from "../catalog-runtime-DlXuhrmk.js";
-import { S as disconnectStateAdapter, t as create } from "../profile-D6apIG2N.js";
-import { r as resolve } from "../resolve-sJtTzuBO.js";
+import { n as pluginCatalogRuntime } from "../catalog-runtime-xq-njrMs.js";
+import { S as disconnectStateAdapter, t as create } from "../profile-DIcHBAxe.js";
+import { r as resolve } from "../resolve-BkpWmZgN.js";
 //#region src/cli/snapshot-create.ts
 const DEFAULT_RUNTIME = "node22";
 const DEFAULT_TIMEOUT_MS = 6e5;

package/dist/cli/upgrade.d.ts

@@ -1,4 +1,4 @@
-import "../db-Ca9Nt5ci.js";
+import "../db-CWZP77Ex.js";
 import { n as JuniorPluginSet } from "../plugins-CjfUP5gJ.js";
 //#region src/cli/upgrade/types.d.ts
 interface UpgradeIo {

package/dist/cli/upgrade.js

@@ -1,6 +1,6 @@
-import { i as getChatConfig } from "../config-CxpPG6nR.js";
-import { t as createJuniorSqlExecutor } from "../executor-BNxfDS1V.js";
-import { t as createPluginCatalogRuntime } from "../registry-zfTzTHe6.js";
+import { i as getChatConfig } from "../config-CGK_VplU.js";
+import { t as createJuniorSqlExecutor } from "../executor-DmIad4GI.js";
+import { t as createPluginCatalogRuntime } from "../registry-VSrEYeaD.js";
 import { n as pluginCatalogConfigFromEnv, r as pluginCatalogConfigFromPluginSet, t as defineJuniorPlugins } from "../plugins-egKWjgue.js";
 import { t as loadAppPluginSet } from "../plugin-module-CVvEUSMH.js";
 import { basename, dirname, join, resolve } from "node:path";

package/dist/{client-CPMbTmJU.js → client-BZdqKg6S.js}

@@ -1,5 +1,5 @@
-import { d as logException, g as serializeGenAiAttribute, i as extractGenAiUsageAttributes, m as normalizeGenAiFinishReason, p as logWarn, w as withSpan } from "./logging-rB_ngE_R.js";
-import { a as toCanonicalInputMessage, n as getCurrentConversationPrivacy, o as toCanonicalOutputMessage, s as toGenAiMessagesTraceAttributes } from "./conversation-privacy-Dbkdvozu.js";
+import { d as logException, g as serializeGenAiAttribute, i as extractGenAiUsageAttributes, m as normalizeGenAiFinishReason, p as logWarn, w as withSpan } from "./logging-Bne7JUXI.js";
+import { a as toCanonicalInputMessage, n as getCurrentConversationPrivacy, o as toCanonicalOutputMessage, s as toGenAiMessagesTraceAttributes } from "./conversation-privacy-Ci3QLNOb.js";
 import { calculateCost, completeSimple, getEnvApiKey, getModels, registerApiProvider } from "@earendil-works/pi-ai/compat";
 import { stream as streamAnthropic, streamSimple as streamSimpleAnthropic } from "@earendil-works/pi-ai/api/anthropic-messages";
 import { createGatewayProvider } from "@ai-sdk/gateway";