@sentry/junior 0.255.0 → 0.257.0

package/dist/{logging-D3aYP0aG.js → logging-CWxiIuCF.js}

@@ -1,5 +1,5 @@
 import { d as setTag, f as setUser, h as startSpan, i as getActiveSpan, l as logger, n as captureMessage, p as spanToJSON, s as getTraceData, t as captureException, y as withScope } from "./sentry-CgWZM_kV.js";
-import { t as JUNIOR_VERSION } from "./version-CDM8Rq6E.js";
+import { t as JUNIOR_VERSION } from "./version-BcdZy2zg.js";
 import path from "node:path";
 import { styleText } from "node:util";
 import { ConfigError, configureSync, getConfig, getLogger } from "@logtape/logtape";
@@ -18,6 +18,26 @@ function isRecord(value) {
 	return typeof value === "object" && value !== null;
 }
 //#endregion
+//#region src/chat/identities/identity.ts
+/**
+* Provider of the native Google identity. Core links it through Google
+* sign-in. Its tenant is empty and its subject is the Google OIDC `sub`.
+*/
+const GOOGLE_IDENTITY_PROVIDER = "google";
+const NATIVE_IDENTITY_PROVIDERS = /* @__PURE__ */ new Set(["slack", GOOGLE_IDENTITY_PROVIDER]);
+/**
+* Return whether only core may link identities for this provider. Plugin
+* OAuth accounts must not link under these names, because other checks trust
+* them.
+*/
+function isNativeIdentityProvider(provider) {
+	return NATIVE_IDENTITY_PROVIDERS.has(provider);
+}
+/** Canonicalize email addresses for identity lookup and linking. */
+function normalizeIdentityEmail(email) {
+	return email?.trim().toLowerCase() || void 0;
+}
+//#endregion
 //#region src/chat/log-context.ts
 /** Async attribute domain consumed directly by LogTape. */
 const logContextStorage = new AsyncLocalStorage();
@@ -38,11 +58,15 @@ function logContextToAttributes(context) {
 		"messaging.system": context.platform === "slack" ? "slack" : context.platform,
 		"messaging.message.conversation_id": context.messageConversationId,
 		"messaging.destination.name": context.destinationName,
-		"enduser.id": context.userId,
-		"enduser.pseudo.id": context.userName,
+		"user.id": context.userId,
+		"user.name": context.userName,
+		"user.email": normalizeIdentityEmail(context.userEmail),
+		"user.full_name": context.userFullName,
 		"app.run.id": context.runId,
 		"app.actor.type": context.actorType,
 		"app.actor.id": context.actorId,
+		"app.task.id": context.taskId,
+		"app.credential.allowed_when": context.credentialAllowedWhen,
 		"gen_ai.agent.name": context.assistantUserName,
 		"gen_ai.request.model": context.modelId,
 		"app.skill.name": context.skillName,
@@ -78,12 +102,6 @@ function getBoundLogAttributes() {
 	return logContextStorage.getStore() ?? {};
 }
 //#endregion
-//#region src/chat/identities/identity.ts
-/** Canonicalize email addresses for identity lookup and linking. */
-function normalizeIdentityEmail(email) {
-	return email?.trim().toLowerCase() || void 0;
-}
-//#endregion
 //#region src/deployment.ts
 const JUNIOR_HEARTBEAT_ROUTE = "/api/internal/heartbeat";
 const JUNIOR_HEARTBEAT_CRON_SCHEDULE = "* * * * *";
@@ -218,8 +236,10 @@ const CONSOLE_PRIORITY_INDEX = new Map([
 const CONSOLE_ALWAYS_HIDDEN_KEYS = /* @__PURE__ */ new Set([
 	"gen_ai.agent.name",
 	"app.platform",
-	"enduser.id",
-	"enduser.pseudo.id",
+	"user.id",
+	"user.name",
+	"user.email",
+	"user.full_name",
 	"http.request.method",
 	"messaging.system",
 	"url.full",
@@ -246,8 +266,10 @@ const SENTRY_TAG_ATTRIBUTE_KEYS = /* @__PURE__ */ new Set([
 function getSentryEnvironment() {
 	return (process.env.SENTRY_ENVIRONMENT ?? process.env.VERCEL_ENV ?? process.env.NODE_ENV ?? "").trim().toLowerCase();
 }
-function shouldSuppressInfoLog(level) {
-	return getSentryEnvironment() === "production" && level === "info";
+/** Marks an audit event. Sentry keeps it in production. */
+const AUDIT_LOG_ATTRIBUTE = "app.log.audit";
+function shouldSuppressInfoLog(level, attributes) {
+	return getSentryEnvironment() === "production" && level === "info" && attributes[AUDIT_LOG_ATTRIBUTE] !== true;
 }
 function shouldEmitConsole(level) {
 	if (process.env.NODE_ENV === "test") return level === "error";
@@ -516,7 +538,7 @@ function getLogTapeLogger(category = []) {
 	return logger;
 }
 function emitSentry(level, body, attributes) {
-	if (shouldSuppressInfoLog(level)) return;
+	if (shouldSuppressInfoLog(level, attributes)) return;
 	const loggerFn = logger?.[level];
 	if (typeof loggerFn === "function") {
 		loggerFn(body, attributes);
@@ -946,6 +968,19 @@ function logInfo(eventName, attributes = {}) {
 	log.info(eventName, attributes);
 }
 /**
+* Emit an audit event: an info event that Sentry also keeps in production.
+*
+* Use it only to record who caused an external side effect and why. Other
+* info events stay out of Sentry in production. Sentry log retention is not
+* durable audit storage.
+*/
+function logAudit(eventName, attributes = {}) {
+	log.info(eventName, {
+		...attributes,
+		[AUDIT_LOG_ATTRIBUTE]: true
+	});
+}
+/**
 * Emit a warning event with occurrence-specific attributes.
 *
 * Bind correlation context at the owning operation boundary instead of
@@ -1207,4 +1242,4 @@ function extractGenAiUsageAttributes(...sources) {
 	};
 }
 //#endregion
-export { JUNIOR_RETENTION_ROUTE as A, withLogContext as C, JUNIOR_HEARTBEAT_ROUTE as D, JUNIOR_HEARTBEAT_CRON_SCHEDULE as E, normalizeIdentityEmail as F, isRecord as I, toOptionalNumber as L, LEGACY_JUNIOR_CONVERSATION_WORK_FUNCTION as M, getDeploymentServiceVersion as N, JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE as O, getDeploymentTelemetryAttributes as P, toOptionalString as R, withContext as S, JUNIOR_CONVERSATION_WORK_CALLBACK_ROUTE as T, setSentryUser as _, extractGenAiUsageSummary as a, setTags as b, getLogContextAttributesForSpan as c, logException as d, logInfo as f, serializeGenAiAttribute as g, runBestEffort as h, extractGenAiUsageAttributes as i, JUNIOR_WORKSPACE_SNAPSHOT_JOB_CALLBACK_ROUTE as j, JUNIOR_RETENTION_CRON_SCHEDULE as k, getTracePropagationHeaders as l, normalizeGenAiFinishReason as m, createChatSdkLogger as n, getActiveTraceId as o, logWarn as p, createRequestContext as r, getLogContextAttributes as s, buildTurnFailureResponse as t, logError as u, setSpanAttributes as v, withSpan as w, summarizeMessageText as x, setSpanStatus as y };
+export { JUNIOR_RETENTION_CRON_SCHEDULE as A, toOptionalNumber as B, withContext as C, JUNIOR_HEARTBEAT_CRON_SCHEDULE as D, JUNIOR_CONVERSATION_WORK_CALLBACK_ROUTE as E, getDeploymentTelemetryAttributes as F, GOOGLE_IDENTITY_PROVIDER as I, isNativeIdentityProvider as L, JUNIOR_WORKSPACE_SNAPSHOT_JOB_CALLBACK_ROUTE as M, LEGACY_JUNIOR_CONVERSATION_WORK_FUNCTION as N, JUNIOR_HEARTBEAT_ROUTE as O, getDeploymentServiceVersion as P, normalizeIdentityEmail as R, summarizeMessageText as S, withSpan as T, toOptionalString as V, serializeGenAiAttribute as _, extractGenAiUsageSummary as a, setSpanStatus as b, getLogContextAttributesForSpan as c, logError as d, logException as f, runBestEffort as g, normalizeGenAiFinishReason as h, extractGenAiUsageAttributes as i, JUNIOR_RETENTION_ROUTE as j, JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE as k, getTracePropagationHeaders as l, logWarn as m, createChatSdkLogger as n, getActiveTraceId as o, logInfo as p, createRequestContext as r, getLogContextAttributes as s, buildTurnFailureResponse as t, logAudit as u, setSentryUser as v, withLogContext as w, setTags as x, setSpanAttributes as y, isRecord as z };

package/dist/{message-B9xqD2BP.js → message-TUOdbSBW.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { Ht as toolInvocationDestination, Q as getActiveAgentInvocationForConversation, Vt as actorFromRun, Y as createAgentInvocationForMessage, Z as findChildAgentConversationId, _t as AgentMessageTargetError, vt as PARENT_AGENT_TARGET } from "./agent-runner-Caiof09f.js";
-import { n as enqueueAgentMessageToParent } from "./result-Df5nEDX2.js";
-import { r as enqueueAgentInvocation } from "./work-BAn43SsN.js";
+import { Ht as actorFromRun, Q as getActiveAgentInvocationForConversation, Ut as toolInvocationDestination, Y as createAgentInvocationForMessage, Z as findChildAgentConversationId, _t as AgentMessageTargetError, vt as PARENT_AGENT_TARGET } from "./agent-runner-D7OboVb3.js";
+import { n as enqueueAgentMessageToParent } from "./result-C883vngT.js";
+import { r as enqueueAgentInvocation } from "./work-nAfDSUFP.js";
 //#region src/chat/agent-invocations/message.ts
 var message_exports = /* @__PURE__ */ __exportAll({ bindMessageAgent: () => bindMessageAgent });
 /**

package/dist/nitro.d.ts

@@ -1,4 +1,4 @@
-import { r as JuniorDashboardOptions } from "./app-B0gT1Slp.js";
+import { r as JuniorDashboardOptions } from "./app-BsU5QNBd.js";
 import { n as JuniorPluginSet } from "./plugins-CjfUP5gJ.js";
 //#region src/nitro.d.ts
 export type JuniorNitroDashboardOptions = JuniorDashboardOptions;

package/dist/nitro.js

@@ -1,8 +1,8 @@
-import { A as JUNIOR_RETENTION_ROUTE, D as JUNIOR_HEARTBEAT_ROUTE, E as JUNIOR_HEARTBEAT_CRON_SCHEDULE, O as JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE, T as JUNIOR_CONVERSATION_WORK_CALLBACK_ROUTE, j as JUNIOR_WORKSPACE_SNAPSHOT_JOB_CALLBACK_ROUTE, k as JUNIOR_RETENTION_CRON_SCHEDULE } from "./logging-D3aYP0aG.js";
+import { A as JUNIOR_RETENTION_CRON_SCHEDULE, D as JUNIOR_HEARTBEAT_CRON_SCHEDULE, E as JUNIOR_CONVERSATION_WORK_CALLBACK_ROUTE, M as JUNIOR_WORKSPACE_SNAPSHOT_JOB_CALLBACK_ROUTE, O as JUNIOR_HEARTBEAT_ROUTE, j as JUNIOR_RETENTION_ROUTE, k as JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE } from "./logging-CWxiIuCF.js";
 import { d as resolvePackageDir, t as discoverInstalledPluginPackageContent, u as isValidPackageName } from "./package-discovery-BVvSnQBB.js";
-import { o as resolveConversationWorkQueueTopic, t as WORKSPACE_SNAPSHOT_JOB_QUEUE_TOPIC } from "./job-queue-BaCL36FY.js";
+import { o as resolveConversationWorkQueueTopic, t as WORKSPACE_SNAPSHOT_JOB_QUEUE_TOPIC } from "./job-queue-B6SV9uVa.js";
 import { a as pluginRuntimeRegistrationsFromPluginSet, r as pluginCatalogConfigFromPluginSet } from "./plugins-egKWjgue.js";
-import { t as PLUGIN_TASK_QUEUE_TOPIC } from "./task-queue-VvIKqlQ4.js";
+import { t as PLUGIN_TASK_QUEUE_TOPIC } from "./task-queue-B17vV0La.js";
 import { n as loadPluginSetFromModule, r as resolvePluginModule } from "./plugin-module-CVvEUSMH.js";
 import path from "node:path";
 import { cpSync, existsSync, mkdirSync, readdirSync, statSync } from "node:fs";

package/dist/{oauth-callback-server-i5qdAou6.js → oauth-callback-server-Dj5UJODo.js}

@@ -1,5 +1,5 @@
-import { Lt as createUserTokenStore } from "./agent-runner-Caiof09f.js";
-import { a as GET, n as syncLocalOAuthCredential, r as GET$1 } from "./credential-sync-BZuqqIHk.js";
+import { Rt as createUserTokenStore } from "./agent-runner-D7OboVb3.js";
+import { a as GET, n as syncLocalOAuthCredential, r as GET$1 } from "./credential-sync-BXfohNmJ.js";
 import { createServer } from "node:http";
 //#region src/chat/local/oauth-callback-server.ts
 const LOCAL_OAUTH_TIMEOUT_MS = 6e5;

package/dist/{pending-auth-D2t1Moxf.js → pending-auth-s_QFribU.js}

@@ -1,6 +1,6 @@
-import { v as isProviderRetryError } from "./client-Clj7onnT.js";
-import { cn as estimateTextTokens, q as abandonTurnRecord } from "./tasks-dJooqiip.js";
-import { r as isExperimentalFeatureEnabled } from "./experimental-Qn9rKLgx.js";
+import { v as isProviderRetryError } from "./client-D8HnkOQX.js";
+import { J as abandonTurnRecord, ln as estimateTextTokens } from "./tasks-D_WIJtvO.js";
+import { r as isExperimentalFeatureEnabled } from "./experimental-CQIvMUO7.js";
 import { z } from "zod";
 //#region src/chat/state/turn-id.ts
 /** Build a stable turn identifier from a message ID. */

package/dist/{profile-DnkX3e2S.js → profile-h-72wM78.js}

@@ -1,7 +1,7 @@
-import { S as toOptionalTrimmed } from "./client-Clj7onnT.js";
-import { v as setSpanAttributes, y as setSpanStatus } from "./logging-D3aYP0aG.js";
-import { i as getChatConfig } from "./config-BDAfLTI9.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-hKmI-iZa.js";
+import { S as toOptionalTrimmed } from "./client-D8HnkOQX.js";
+import { b as setSpanStatus, y as setSpanAttributes } from "./logging-CWxiIuCF.js";
+import { i as getChatConfig } from "./config-CJRnWK9H.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-CZzhGQ7F.js";
 import { createHash } from "node:crypto";
 import { createMemoryState } from "@chat-adapter/state-memory";
 import { createRedisState } from "@chat-adapter/state-redis";

package/dist/{prompt-C04mP1hu.js → prompt-DyoEj9c2.js}

@@ -1,4 +1,4 @@
-import { H as conversationBriefSchema, U as parseBriefInput, V as briefOutcomeStatusSchema } from "./conversation-T18Xlkx9.js";
+import { H as conversationBriefSchema, U as parseBriefInput, V as briefOutcomeStatusSchema } from "./conversation-CKNLYBJt.js";
 import { z } from "zod";
 //#region src/chat/briefs/generate.ts
 const MAX_INPUT_CHARS = 6e4;

package/dist/{registry-CmKmKHpp.js → registry-sLTr-sV9.js}

@@ -1,5 +1,5 @@
-import { f as logInfo, p as logWarn, v as setSpanAttributes } from "./logging-D3aYP0aG.js";
-import { o as parseActorUserId } from "./actor-BTtLaeWy.js";
+import { m as logWarn, p as logInfo, y as setSpanAttributes } from "./logging-CWxiIuCF.js";
+import { a as isUserActor, o as parseActorUserId } from "./actor-BTtLaeWy.js";
 import { n as normalizePluginPackageNames, o as pluginRoots, t as discoverInstalledPluginPackageContent } from "./package-discovery-BVvSnQBB.js";
 import path from "node:path";
 import { z } from "zod";
@@ -840,6 +840,46 @@ function credentialContextForActor(actor, subject) {
 		userId: actor.userId
 	} };
 }
+/**
+* Name the person accountable for credential authority in logs.
+*
+* `userId` is the user actor, or the owner of delegated credentials when the
+* system acts for an Automation or Watch. `actorType` says who acted.
+*/
+function credentialLogContext(context) {
+	if ("type" in context.actor) return {
+		userId: context.actor.userId,
+		actorType: "user",
+		actorId: context.actor.userId
+	};
+	const subject = "subject" in context ? context.subject : void 0;
+	return {
+		actorType: "system",
+		actorId: context.actor.name,
+		...subject ? {
+			userId: subject.userId,
+			credentialAllowedWhen: subject.allowedWhen,
+			..."taskId" in subject ? { taskId: subject.taskId } : void 0
+		} : void 0
+	};
+}
+/**
+* Name the run's people in logs: the accountable person and who acted.
+*
+* A user actor is the accountable person. A system actor names the owner of
+* delegated credentials, when the run has them.
+*/
+function actorLogContext(actor, credentialContext) {
+	const credential = credentialContext ? credentialLogContext(credentialContext) : {};
+	if (!isUserActor(actor)) return credential;
+	return {
+		...credential,
+		userId: actor.userId,
+		userName: actor.userName,
+		userEmail: actor.email,
+		userFullName: actor.fullName
+	};
+}
 /** Return the user whose OAuth token may satisfy this credential request. */
 function credentialUserSubjectId(context) {
 	if ("type" in context.actor) return context.actor.userId;
@@ -1604,4 +1644,4 @@ function createPluginCatalogRuntime() {
 	};
 }
 //#endregion
-export { parsePluginManifest as _, resolveAuthTokenPlaceholder as a, fetchWithBoundedOAuthErrorBodies as c, credentialContextForActor as d, credentialContextSchema as f, parseInlinePluginManifest as g, CredentialUnavailableError as h, resolvePluginHeaderEnvRefs as i, getOAuthProviderErrorAttributes as l, credentialUserSubjectId as m, buildOAuthTokenRequest as n, resolvePluginCommandEnv as o, credentialSubjectSchema as p, parseOAuthTokenResponse as r, OAuthProviderError as s, createPluginCatalogRuntime as t, hasRequiredOAuthScope as u };
+export { CredentialUnavailableError as _, resolveAuthTokenPlaceholder as a, fetchWithBoundedOAuthErrorBodies as c, actorLogContext as d, credentialContextForActor as f, credentialUserSubjectId as g, credentialSubjectSchema as h, resolvePluginHeaderEnvRefs as i, getOAuthProviderErrorAttributes as l, credentialLogContext as m, buildOAuthTokenRequest as n, resolvePluginCommandEnv as o, credentialContextSchema as p, parseOAuthTokenResponse as r, OAuthProviderError as s, createPluginCatalogRuntime as t, hasRequiredOAuthScope as u, parseInlinePluginManifest as v, parsePluginManifest as y };

package/dist/{resolve-jfNHtEBx.js → resolve-ncQPZROQ.js}

@@ -1,5 +1,5 @@
-import { v as setSpanAttributes, w as withSpan } from "./logging-D3aYP0aG.js";
-import { N as SANDBOX_WORKSPACE_ROOT, k as sleep, r as isStale, t as create, u as isSandboxUnavailableError, v as getVercelSandboxCredentials, w as getStateAdapter, x as runNonInteractiveCommand } from "./profile-DnkX3e2S.js";
+import { T as withSpan, y as setSpanAttributes } from "./logging-CWxiIuCF.js";
+import { N as SANDBOX_WORKSPACE_ROOT, k as sleep, r as isStale, t as create, u as isSandboxUnavailableError, v as getVercelSandboxCredentials, w as getStateAdapter, x as runNonInteractiveCommand } from "./profile-h-72wM78.js";
 import { z } from "zod";
 import { FileSystem, Sandbox } from "@vercel/sandbox";
 //#region src/chat/sandbox/resources.ts

package/dist/{result-Df5nEDX2.js → result-C883vngT.js}

@@ -1,12 +1,12 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { $ as getAgentInvocation, X as createAgentInvocationFromLatest, ct as isTerminalAgentInvocation, et as getAgentInvocationIdForEvents, ft as markAgentInvocationParentMailboxAppended, it as getAgentInvocationResultMessageId, nt as getAgentInvocationIdForResult, st as getLatestAgentInvocationForConversation, tt as getAgentInvocationIdForMessage } from "./agent-runner-Caiof09f.js";
+import { $ as getAgentInvocation, X as createAgentInvocationFromLatest, ct as isTerminalAgentInvocation, et as getAgentInvocationIdForEvents, ft as markAgentInvocationParentMailboxAppended, it as getAgentInvocationResultMessageId, nt as getAgentInvocationIdForResult, st as getLatestAgentInvocationForConversation, tt as getAgentInvocationIdForMessage } from "./agent-runner-D7OboVb3.js";
 import { t as createActor } from "./actor-BTtLaeWy.js";
-import { d as credentialContextForActor } from "./registry-CmKmKHpp.js";
-import { X as getTurnRecord, Z as listTurnSummaries } from "./tasks-dJooqiip.js";
-import { a as EVENT_WAIT_MS, c as timerWatchCredentialSubject, s as isEventMailboxMetadata } from "./session-stop-BEBfE97J.js";
-import { a as EVENT_SYSTEM_ACTOR, i as EVENT_MESSAGE_AUTHOR, o as isEventConversationMessage } from "./prompt-C04mP1hu.js";
-import { r as appendAndEnqueueInboundMessage } from "./store-BashBewg.js";
-import { r as enqueueAgentInvocation } from "./work-BAn43SsN.js";
+import { f as credentialContextForActor } from "./registry-sLTr-sV9.js";
+import { Q as listTurnSummaries, Z as getTurnRecord } from "./tasks-D_WIJtvO.js";
+import { a as EVENT_WAIT_MS, c as timerWatchCredentialSubject, s as isEventMailboxMetadata } from "./session-stop-CQjKd4a2.js";
+import { a as EVENT_SYSTEM_ACTOR, i as EVENT_MESSAGE_AUTHOR, o as isEventConversationMessage } from "./prompt-DyoEj9c2.js";
+import { r as appendAndEnqueueInboundMessage } from "./store-DXFIQy-G.js";
+import { r as enqueueAgentInvocation } from "./work-nAfDSUFP.js";
 import { z } from "zod";
 import { createEventSource, createLocalSource, createWebSource } from "@sentry/junior-plugin-api";
 //#region src/chat/task-execution/mailbox-input.ts

package/dist/{runner-CmzoXEI4.js → runner-CzYImdOF.js}

@@ -1,14 +1,14 @@
-import { C as withLogContext, b as setTags, d as logException } from "./logging-D3aYP0aG.js";
-import { c as getConversationEventStore, u as getConversationStore } from "./viewer-Rnim7alE.js";
-import { d as credentialContextForActor } from "./registry-CmKmKHpp.js";
-import { $ as persistWithRetry, Ct as commitAcceptedReply, Ft as recordAuthorizationCompleted, K as saveTurnCheckpoint, Ot as loadProjection, Qt as buildConversationContext, Ut as hydrateConversationMessages, Wt as persistConversationMessages, an as recordDeliveredAssistantMessage, in as normalizeConversationText, rn as markConversationMessage, sn as upsertConversationMessage } from "./tasks-dJooqiip.js";
-import { K as messageCardText } from "./conversation-T18Xlkx9.js";
+import { f as logException, w as withLogContext, x as setTags } from "./logging-CWxiIuCF.js";
+import { d as getConversationStore, l as getConversationEventStore } from "./viewer-DSZXygMU.js";
+import { f as credentialContextForActor } from "./registry-sLTr-sV9.js";
+import { $t as buildConversationContext, Gt as persistConversationMessages, It as recordAuthorizationCompleted, Wt as hydrateConversationMessages, an as normalizeConversationText, cn as upsertConversationMessage, et as persistWithRetry, in as markConversationMessage, kt as loadProjection, on as recordDeliveredAssistantMessage, q as saveTurnCheckpoint, wt as commitAcceptedReply } from "./tasks-D_WIJtvO.js";
+import { K as messageCardText } from "./conversation-CKNLYBJt.js";
 import { f as markTurnFailed, p as startActiveTurn, t as authorizationId } from "./oauth-authorization-BA4Dt6a7.js";
-import { n as getAssistantReplyText } from "./assistant-reply-BddmM66R.js";
-import { n as scheduleSessionCompletedPluginTasks, t as processPluginTask } from "./task-runner-D2CpD6GN.js";
-import { t as ConversationTurnLifecycleService } from "./turn-lifecycle-BfodfmiY.js";
-import { n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-CsMC-ob0.js";
-import { d as loadPendingMessageCards, i as completeAuthPauseTurn, l as buildDeliveredTurnStatePatch, t as finalizeFailedTurnReplyWithEvent } from "./turn-failure-response-zB364t7_.js";
+import { n as getAssistantReplyText } from "./assistant-reply-CbTPebzL.js";
+import { n as scheduleSessionCompletedPluginTasks, t as processPluginTask } from "./task-runner-DUjvzYXj.js";
+import { t as ConversationTurnLifecycleService } from "./turn-lifecycle-CO-ylUmV.js";
+import { n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-Ch4yuCqG.js";
+import { d as loadPendingMessageCards, i as completeAuthPauseTurn, l as buildDeliveredTurnStatePatch, t as finalizeFailedTurnReplyWithEvent } from "./turn-failure-response-C5nBKC4S.js";
 import { randomUUID } from "node:crypto";
 import { createLocalSource, localDestinationSchema } from "@sentry/junior-plugin-api";
 //#region src/chat/local/runner.ts

package/dist/{sandbox-egress-signals-DjMNKLZz.js → sandbox-egress-signals-CZbMINHI.js}

@@ -1,4 +1,4 @@
-import { Mt as sandboxEgressSignalsResponseSchema } from "./agent-runner-Caiof09f.js";
+import { Mt as sandboxEgressSignalsResponseSchema } from "./agent-runner-D7OboVb3.js";
 //#region src/chat/local/sandbox-egress-signals.ts
 const SANDBOX_EGRESS_SIGNALS_PATH = "/api/internal/sandbox-egress/signals";
 const LOCAL_DEV_SERVER_TIMEOUT_MS = 1e3;

package/dist/{schema-BBgv0MNf.js → schema-Dy69D4Ge.js}

@@ -1,5 +1,5 @@
-import { r as AGENT_INVOCATION_STATUSES, u as juniorDestinationKindSchema } from "./agent-invocations-BY60iNw-.js";
-import { D as conversationUsageSchema, E as conversationSummaryReportSchema, M as conversationChildAgentTotalsSchema, l as conversationAuxiliaryCostsSchema, n as actorIdentitySchema, w as conversationStatsItemSchema } from "./conversation-T18Xlkx9.js";
+import { r as AGENT_INVOCATION_STATUSES, u as juniorDestinationKindSchema } from "./agent-invocations-Bdu3ROfo.js";
+import { D as conversationUsageSchema, E as conversationSummaryReportSchema, M as conversationChildAgentTotalsSchema, l as conversationAuxiliaryCostsSchema, n as actorIdentitySchema, w as conversationStatsItemSchema } from "./conversation-CKNLYBJt.js";
 import "./automation-CHdlHVZP.js";
 import { a as fillUtcHours, c as sumUtcHoursIntoSixHours, i as fillUtcDays } from "./web-message-id-xPI_EFSC.js";
 import { z } from "zod";
@@ -141,11 +141,12 @@ const codeRepositoryReportSchema = z.object({
 		name: z.string().min(1)
 	}).strict())
 }).strict();
-/** Person-scoped code activity for one People profile. */
+/** Person-scoped code activity and recent code changes for one People profile. */
 const codePersonReportSchema = z.object({
 	activityDays: z.array(codeActivityDaySchema),
 	activityHours: z.array(codeActivityDaySchema).optional(),
 	activitySixHours: z.array(codeActivityDaySchema).optional(),
+	changes: z.array(codeChangeSummaryReportSchema),
 	generatedAt: z.string(),
 	summary: codeChangeSummarySchema,
 	windowEnd: z.string(),

package/dist/{session-stop-BEBfE97J.js → session-stop-CQjKd4a2.js}

@@ -1,19 +1,19 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { d as logException, f as logInfo, p as logWarn } from "./logging-D3aYP0aG.js";
-import { n as botConfig } from "./config-BDAfLTI9.js";
-import { f as getSqlExecutor, u as getConversationStore } from "./viewer-Rnim7alE.js";
-import { s as juniorConversations } from "./agent-invocations-BY60iNw-.js";
-import "./executor-Dh4Ofsnx.js";
-import { p as credentialSubjectSchema } from "./registry-CmKmKHpp.js";
-import { St as ToolInputError, _t as normalizeToolNameFromResult, gt as isToolResultMessage, ht as isToolResultError, pt as isAssistantMessage, z as postSlackMessage } from "./tasks-dJooqiip.js";
-import { it as JUNIOR_THREAD_STATE_TTL_MS, rt as verifyTimerWatchCredentialSubject, u as getPlugins } from "./agent-hooks-CDVx26Uu.js";
-import { w as getStateAdapter } from "./profile-DnkX3e2S.js";
-import { r as sanitizeAssistantText } from "./assistant-reply-BddmM66R.js";
-import { r as EVENT_AUTHOR_ID } from "./prompt-C04mP1hu.js";
-import { r as appendAndEnqueueInboundMessage } from "./store-BashBewg.js";
+import { f as logException, m as logWarn, p as logInfo } from "./logging-CWxiIuCF.js";
+import { n as botConfig } from "./config-CJRnWK9H.js";
+import { d as getConversationStore, p as getSqlExecutor } from "./viewer-DSZXygMU.js";
+import { s as juniorConversations } from "./agent-invocations-Bdu3ROfo.js";
+import "./executor-Do0THDRR.js";
+import { h as credentialSubjectSchema } from "./registry-sLTr-sV9.js";
+import { B as postSlackMessage, Ct as ToolInputError, _t as isToolResultMessage, gt as isToolResultError, mt as isAssistantMessage, vt as normalizeToolNameFromResult } from "./tasks-D_WIJtvO.js";
+import { it as JUNIOR_THREAD_STATE_TTL_MS, rt as verifyTimerWatchCredentialSubject, u as getPlugins } from "./agent-hooks-BjtTzvru.js";
+import { w as getStateAdapter } from "./profile-h-72wM78.js";
+import { r as sanitizeAssistantText } from "./assistant-reply-CbTPebzL.js";
+import { r as EVENT_AUTHOR_ID } from "./prompt-DyoEj9c2.js";
+import { r as appendAndEnqueueInboundMessage } from "./store-DXFIQy-G.js";
 import { z } from "zod";
 import { eq, inArray } from "drizzle-orm";
-import { eventMatchSchema, normalizeEventIdentifier, objectTypeSchema } from "@sentry/junior-plugin-api";
+import { eventMatchFieldsSchema, eventMatchSchema, normalizeEventIdentifier, objectTypeSchema } from "@sentry/junior-plugin-api";
 //#region src/chat/automation-result.ts
 /**
 * Automation run result.
@@ -525,6 +525,13 @@ function workspaceSnapshotFinishedEvent(input) {
 }
 //#endregion
 //#region src/chat/slack/channel-message-events.ts
+/**
+* Slack channel-message Events for Event automations.
+*
+* Core publishes these Events from Slack ingress, so the `slack` namespace is
+* core owned, like `junior`. Anyone in the channel writes the Event text, so an
+* automation can watch only its own channel and always uses system credentials.
+*/
 /** Core-owned event namespace for Slack Events. Not a plugin publisher. */
 const SLACK_EVENT_NAMESPACE = "slack";
 /** The trigger identifier that names the channel of the automation. */
@@ -532,6 +539,10 @@ const SLACK_CURRENT_CHANNEL_IDENTIFIER = "current_channel";
 const CHANNEL_RESOURCE_TYPE = "channel";
 const MESSAGE_POSTED_EVENT = "message.posted";
 const CHANNEL_ID_PATTERN = /^[CG][A-Z0-9]{2,}$/;
+const CHANNEL_MESSAGE_MATCH_FIELDS = eventMatchFieldsSchema.parse({ userId: {
+	kind: "string",
+	description: "Slack user ID of the message author. Required to run on bot posts, such as alert bots."
+} });
 /** Event registration for new top-level Slack channel messages. */
 function slackChannelMessageEvents() {
 	return { resourceTypes: [{
@@ -542,7 +553,8 @@ function slackChannelMessageEvents() {
 		},
 		supportedEvents: [MESSAGE_POSTED_EVENT],
 		suggestedEvents: [],
-		guidance: { [MESSAGE_POSTED_EVENT]: "A person posted a new top-level message in this channel. A reply goes in that message's thread. If the instructions do not apply to this message, end with no action." }
+		matchFields: CHANNEL_MESSAGE_MATCH_FIELDS,
+		guidance: { [MESSAGE_POSTED_EVENT]: "A person or bot posted a new top-level message in this channel. A bot post runs the automation only when match names the bot in userId. A reply goes in that message's thread. If the instructions do not apply to this message, end with no action." }
 	}] };
 }
 /**
@@ -569,27 +581,41 @@ function requireSlackChannelMessageScope(automation) {
 /**
 * Build the Event for one new top-level channel message, or nothing.
 *
-* Thread replies and bot posts, including Slackbot, do not count. Bots can
-* post often and use up the run limit of the automation.
+* Thread replies and Slackbot posts do not count. Other bot posts are marked
+* with `postedByBot`, so only automations that name the bot can run on them.
 */
 function slackChannelMessageEvent(input) {
-	if (input.botId || input.subtype === "bot_message" || input.userId === "USLACKBOT") return;
+	if (input.userId === "USLACKBOT") return void 0;
 	if (input.threadTs && input.threadTs !== input.ts) return void 0;
 	if (!CHANNEL_ID_PATTERN.test(input.channelId)) return void 0;
+	const postedByBot = Boolean(input.botId || input.subtype === "bot_message");
 	return {
 		eventKey: `${input.channelId}:${input.ts}`,
 		eventType: MESSAGE_POSTED_EVENT,
 		identifier: input.channelId,
 		occurredAtMs: Math.floor(Number(input.ts) * 1e3),
-		trustedSummary: `<@${input.userId}> posted a new message in <#${input.channelId}>.`,
+		trustedSummary: `${postedByBot ? "The bot " : ""}<@${input.userId}> posted a new message in <#${input.channelId}>.`,
 		data: {
 			channelId: input.channelId,
 			messageTs: input.ts,
-			userId: input.userId
+			userId: input.userId,
+			...postedByBot ? { postedByBot: true } : void 0
 		},
 		...input.text?.trim() ? { untrustedText: input.text } : void 0
 	};
 }
+/**
+* Decide whether a channel-message Event may run one automation.
+*
+* A bot post runs only automations whose match names its author in `userId`.
+* Bots can post often and would use up the run limit of every other
+* automation in the channel.
+*/
+function slackChannelMessageRunsAutomation(event, automation) {
+	if (event.namespace !== "slack") return true;
+	if (event.data?.postedByBot !== true) return true;
+	return automation.trigger.match?.userId !== void 0;
+}
 /** Return the source message thread for a channel-message run. */
 function slackChannelMessageReplyThreadTs(event) {
 	if (event.namespace !== "slack") return void 0;
@@ -782,4 +808,4 @@ async function skipInputBeforeConversationStop(context) {
 	return { status: "completed" };
 }
 //#endregion
-export { recordFinishedTurnForAutomatedLimit as A, registeredEventMatchSchema as C, requireSupportedEventMatch as D, requireEventIdentifier as E, finishedRunReply as F, readAutomationResult as I, remindMissingAutomationResult as L, FINISH_AUTOMATION_RUN_TOOL_NAME as M, automationResultSchema as N, renderTaskInput as O, deliversFinalText as P, runDispatchOutcome as R, pluginSupportsEvent as S, registeredResourceTypeSchema as T, workspaceSnapshotWatch as _, EVENT_WAIT_MS as a, eventNamespaceSchema as b, timerWatchCredentialSubject as c, requireSlackChannelMessageScope as d, slackChannelMessageEvent as f, workspaceSnapshotFinishedEvent as g, WORKSPACE_SNAPSHOT_READY_EVENT as h, skipInputBeforeConversationStop as i, resetAutomatedTurnLimit as j, maybePostAutomatedTurnLimitNotice as k, getEventCatalog as l, WORKSPACE_SNAPSHOT_FAILED_EVENT as m, markConversationsStopped as n, enqueueEventNotification as o, slackChannelMessageReplyThreadTs as p, session_stop_exports as r, isEventMailboxMetadata as s, getConversationStoppedAtMs as t, SLACK_EVENT_NAMESPACE as u, automationEventCatalog as v, registeredEventTypeSchema as w, hasEventCatalogEntries as x, eventGuidance as y };
+export { maybePostAutomatedTurnLimitNotice as A, pluginSupportsEvent as C, requireEventIdentifier as D, registeredResourceTypeSchema as E, deliversFinalText as F, finishedRunReply as I, readAutomationResult as L, resetAutomatedTurnLimit as M, FINISH_AUTOMATION_RUN_TOOL_NAME as N, requireSupportedEventMatch as O, automationResultSchema as P, remindMissingAutomationResult as R, hasEventCatalogEntries as S, registeredEventTypeSchema as T, workspaceSnapshotFinishedEvent as _, EVENT_WAIT_MS as a, eventGuidance as b, timerWatchCredentialSubject as c, requireSlackChannelMessageScope as d, slackChannelMessageEvent as f, WORKSPACE_SNAPSHOT_READY_EVENT as g, WORKSPACE_SNAPSHOT_FAILED_EVENT as h, skipInputBeforeConversationStop as i, recordFinishedTurnForAutomatedLimit as j, renderTaskInput as k, getEventCatalog as l, slackChannelMessageRunsAutomation as m, markConversationsStopped as n, enqueueEventNotification as o, slackChannelMessageReplyThreadTs as p, session_stop_exports as r, isEventMailboxMetadata as s, getConversationStoppedAtMs as t, SLACK_EVENT_NAMESPACE as u, workspaceSnapshotWatch as v, registeredEventMatchSchema as w, eventNamespaceSchema as x, automationEventCatalog as y, runDispatchOutcome as z };

package/dist/{skills-Dc-AMYi4.js → skills-C22SLruK.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { p as logWarn } from "./logging-D3aYP0aG.js";
+import { m as logWarn } from "./logging-CWxiIuCF.js";
 import { s as skillRoots } from "./package-discovery-BVvSnQBB.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-hKmI-iZa.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-CZzhGQ7F.js";
 import path from "node:path";
 import { z } from "zod";
 import fs from "node:fs/promises";

package/dist/{spawn-OgTwBUj0.js → spawn-DY9CLXDL.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { Ht as toolInvocationDestination, Vt as actorFromRun } from "./agent-runner-Caiof09f.js";
-import { n as createAndEnqueueAgentInvocation } from "./work-BAn43SsN.js";
+import { Ht as actorFromRun, Ut as toolInvocationDestination } from "./agent-runner-D7OboVb3.js";
+import { n as createAndEnqueueAgentInvocation } from "./work-nAfDSUFP.js";
 //#region src/chat/agent-invocations/spawn.ts
 var spawn_exports = /* @__PURE__ */ __exportAll({ bindSpawnAgent: () => bindSpawnAgent });
 /** Bind a Run's Actor and credentials to new Agent invocations. */

package/dist/{store-BashBewg.js → store-DXFIQy-G.js}

@@ -1,10 +1,10 @@
-import { I as isRecord, L as toOptionalNumber, R as toOptionalString } from "./logging-D3aYP0aG.js";
-import { i as getChatConfig } from "./config-BDAfLTI9.js";
+import { B as toOptionalNumber, V as toOptionalString, z as isRecord } from "./logging-CWxiIuCF.js";
+import { i as getChatConfig } from "./config-CJRnWK9H.js";
 import { s as parseStoredSlackActor } from "./actor-BTtLaeWy.js";
-import { F as sameDestination, N as parseDestination, u as getConversationStore } from "./viewer-Rnim7alE.js";
-import { it as JUNIOR_THREAD_STATE_TTL_MS } from "./agent-hooks-CDVx26Uu.js";
-import { C as getDefaultRedisStateAdapterFor, w as getStateAdapter } from "./profile-DnkX3e2S.js";
-import "./job-queue-BaCL36FY.js";
+import { U as sameDestination, V as parseDestination, d as getConversationStore } from "./viewer-DSZXygMU.js";
+import { it as JUNIOR_THREAD_STATE_TTL_MS } from "./agent-hooks-BjtTzvru.js";
+import { C as getDefaultRedisStateAdapterFor, w as getStateAdapter } from "./profile-h-72wM78.js";
+import "./job-queue-B6SV9uVa.js";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { destinationSchema } from "@sentry/junior-plugin-api";

package/dist/{task-queue-VvIKqlQ4.js → task-queue-B17vV0La.js}

@@ -1,5 +1,5 @@
-import { p as logWarn } from "./logging-D3aYP0aG.js";
-import { c as QUEUE_SIGNATURE_MAX_AGE_MS, d as createVercelQueueClient, l as signQueueMessage, p as runWithTurnRequestDeadline, u as verifyQueueMessage } from "./job-queue-BaCL36FY.js";
+import { m as logWarn } from "./logging-CWxiIuCF.js";
+import { c as QUEUE_SIGNATURE_MAX_AGE_MS, d as createVercelQueueClient, l as signQueueMessage, p as runWithTurnRequestDeadline, u as verifyQueueMessage } from "./job-queue-B6SV9uVa.js";
 import { z } from "zod";
 import { createHash } from "node:crypto";
 import { handleCallback, registerDevConsumer } from "@vercel/queue";
@@ -115,7 +115,7 @@ function pluginTaskCallback() {
 		maxDeliveries: PLUGIN_TASK_MAX_DELIVERIES,
 		onRejected: logPluginTaskQueueMessageRejected,
 		run: async (message) => {
-			const { processPluginTask } = await import("./task-runner-D2CpD6GN.js").then((n) => n.r);
+			const { processPluginTask } = await import("./task-runner-DUjvzYXj.js").then((n) => n.r);
 			await processPluginTask(message);
 		},
 		topic: PLUGIN_TASK_QUEUE_TOPIC,

package/dist/{task-runner-D2CpD6GN.js → task-runner-DUjvzYXj.js}

@@ -1,17 +1,17 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { h as runBestEffort, p as logWarn } from "./logging-D3aYP0aG.js";
+import { g as runBestEffort, m as logWarn } from "./logging-CWxiIuCF.js";
 import { g as parseSlackMessageTs } from "./actor-BTtLaeWy.js";
-import { C as agentTurnTotalTokens, S as agentTurnCostUsd, d as getDb, r as readActorIdentity, u as getConversationStore } from "./viewer-Rnim7alE.js";
-import { s as juniorConversations } from "./agent-invocations-BY60iNw-.js";
-import { o as juniorAutomationRuns, s as juniorAutomations } from "./executor-Dh4Ofsnx.js";
+import { E as agentTurnTotalTokens, T as agentTurnCostUsd, d as getConversationStore, f as getDb, i as readActorIdentity } from "./viewer-DSZXygMU.js";
+import { s as juniorConversations } from "./agent-invocations-Bdu3ROfo.js";
+import { a as juniorAutomationRuns, s as juniorAutomations } from "./executor-Do0THDRR.js";
 import { m as sameActorIdentity } from "./history-9pO1Zd4Y.js";
-import { p as credentialSubjectSchema } from "./registry-CmKmKHpp.js";
-import { A as formatSlackLink, L as openSlackDirectMessage, Ut as hydrateConversationMessages, X as getTurnRecord, Yt as fallbackShortTitle, _t as normalizeToolNameFromResult, ct as getPiMessageRole, ft as instructionTextForProjection, gt as isToolResultMessage, ht as isToolResultError, i as readScheduledAutomation, k as escapeSlackMrkdwnText, l as blockEventAutomation, m as getEventAutomation, yt as stripRuntimeTurnContext, z as postSlackMessage } from "./tasks-dJooqiip.js";
-import { St as createPluginConversationEvents, dt as createPluginModel, ft as createPluginLogger, it as JUNIOR_THREAD_STATE_TTL_MS, lt as createPluginState, p as coreTaskRegistrations, st as getDashboardTaskLink, u as getPlugins, ut as createPluginEmbedder } from "./agent-hooks-CDVx26Uu.js";
-import { w as getStateAdapter } from "./profile-DnkX3e2S.js";
-import { r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-CsMC-ob0.js";
-import { t as resolveConversationRouting } from "./turn-session-routing-BAh_qsBJ.js";
-import { i as pluginTaskParamsSchema, o as sendVercelPluginTask, r as pluginTaskId } from "./task-queue-VvIKqlQ4.js";
+import { h as credentialSubjectSchema } from "./registry-sLTr-sV9.js";
+import { A as escapeSlackMrkdwnText, B as postSlackMessage, R as openSlackDirectMessage, Wt as hydrateConversationMessages, Xt as fallbackShortTitle, Z as getTurnRecord, _t as isToolResultMessage, bt as stripRuntimeTurnContext, gt as isToolResultError, i as readScheduledAutomation, j as formatSlackLink, l as blockEventAutomation, lt as getPiMessageRole, m as getEventAutomation, pt as instructionTextForProjection, vt as normalizeToolNameFromResult } from "./tasks-D_WIJtvO.js";
+import { St as createPluginConversationEvents, dt as createPluginModel, ft as createPluginLogger, it as JUNIOR_THREAD_STATE_TTL_MS, lt as createPluginState, p as coreTaskRegistrations, st as getDashboardTaskLink, u as getPlugins, ut as createPluginEmbedder } from "./agent-hooks-BjtTzvru.js";
+import { w as getStateAdapter } from "./profile-h-72wM78.js";
+import { r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-Ch4yuCqG.js";
+import { t as resolveConversationRouting } from "./turn-session-routing-B3LWooK5.js";
+import { i as pluginTaskParamsSchema, o as sendVercelPluginTask, r as pluginTaskId } from "./task-queue-B17vV0La.js";
 import { z } from "zod";
 import { createHash } from "node:crypto";
 import { and, asc, count, desc, eq, gte, inArray, isNotNull, lte, max, sql } from "drizzle-orm";