@sentry/junior 0.257.0 → 0.259.0

package/dist/api.js

@@ -1,27 +1,30 @@
-import { K as listChildAgents, L as editEventAutomation, O as parseSlackThreadId, P as editScheduledAutomation, R as AutomationEditError, Rt as createUserTokenStore, T as readLiveAttachment, V as resolveTaskOutcomes, bt as conversationSubtreeColumns, g as readStats, ot as getChildAgentLabel, yt as conversationSubtree, z as eventAutomationTriggerAvailable } from "./agent-runner-D7OboVb3.js";
-import { f as logException, m as logWarn, p as logInfo } from "./logging-CWxiIuCF.js";
-import { d as parseSlackTeamId, g as parseSlackMessageTs, l as parseSlackChannelId } from "./actor-BTtLaeWy.js";
-import { C as parseSessionSource, D as agentTurnUsageSchema, O as hasAgentTurnUsage, a as resolveViewerUser, d as getConversationStore, f as getDb, g as loadConversationSlackTenantId, h as withConversationEventLock, k as resolveRootConversationId, l as getConversationEventStore, p as getSqlExecutor, s as updateViewerDisplayName, t as findUserByEmail, w as addAgentTurnUsage, y as locationFromRow } from "./viewer-DSZXygMU.js";
-import { c as juniorIdentities, d as juniorDestinations, l as juniorUsers, o as conversationReadColumns, s as juniorConversations } from "./agent-invocations-Bdu3ROfo.js";
-import { f as juniorConversationBriefs, g as juniorApiTokens, h as juniorConversationEvents, m as juniorConversationMetrics, u as juniorConversationParticipants, v as juniorCodeChanges, y as juniorCodeRepositories } from "./executor-Do0THDRR.js";
-import { d as contextProvenance } from "./history-9pO1Zd4Y.js";
-import { At as loadTurnProjection, D as AutomationConflictError, E as sameDefinitionValue, O as automationRevision, S as automationDefinition, T as readAutomationVersion, a as saveScheduledAutomation, k as requireAutomationRevision, pn as piMessageFromHistoryItem, v as saveEventAutomation, y as setEventAutomationStatus } from "./tasks-D_WIJtvO.js";
-import { C as WorkspaceValidationError, Ct as readLatestConversationBrief, Ht as getSlackClient, Lt as lookupSlackUser, M as workspaceRepoCheckoutPath, Nt as listConversationAnnotations, O as SANDBOX_RUNTIME, Pt as listConversationAnnotationsById, S as updateWorkspace, Tt as buildSentryConversationUrl, _ as deleteWorkspace, _t as conversationHasParticipantEmail, b as listWorkspaces, bt as conversationNotArchivedForUser, ft as createPluginLogger, g as createWorkspace, gt as conversationArchivedForUser, ht as conversationArchivedForEmail, mt as conversationArchiveTimes, pt as readConversationAccessFromSql, qt as withSlackRetries, u as getPlugins, v as getWorkspace, vt as conversationHasParticipantUser, wt as readConversationEventPage, x as listWorkspacesByRepository, xt as viewerConversationMembership, yt as conversationNotArchivedForEmail } from "./agent-hooks-BjtTzvru.js";
-import { A as forkConversationBodySchema, F as readMessageAttachments, I as INPUT_IMAGE_TYPES, O as createConversationBodySchema, T as conversationStatsReportSchema, _ as conversationParamsSchema, a as cancelConversationPendingMessagesBodySchema, c as conversationAttachmentParamsSchema, d as conversationDetailReportSchema, g as conversationFeedSchema, h as conversationFeedQuerySchema, i as archiveConversationResponseSchema, j as forkConversationResponseSchema, k as createConversationMessageBodySchema, m as conversationEventsQuerySchema, o as cancelConversationPendingMessagesResponseSchema, p as conversationEventPageSchema, r as archiveConversationBodySchema, t as acceptedConversationMessageSchema, u as conversationDetailQuerySchema, x as conversationPendingMessagesReportSchema } from "./conversation-CKNLYBJt.js";
-import { n as hash, t as create } from "./profile-h-72wM78.js";
-import { l as getEventCatalog, y as automationEventCatalog } from "./session-stop-CQjKd4a2.js";
-import { t as getFirstRunAtMs } from "./cadence-D00SCzT1.js";
-import { t as getCachedSnapshot } from "./resolve-ncQPZROQ.js";
-import { a as getVercelConversationWorkQueue } from "./job-queue-B6SV9uVa.js";
-import { a as cancelHumanFacingPendingMessages, h as getConversation } from "./store-DXFIQy-G.js";
-import { M as compileScheduleIntent, P as weekdaySchema, _ as automationSummarySchema, b as automationVersionListSchema, c as automationLifecycleSchema, d as automationParamsSchema, f as automationRunListSchema, g as automationSchedulePreviewSchema, h as automationScheduleIntentSchema, i as automationExecutionListSchema, j as ScheduleIntentError, l as automationListQuerySchema, n as automationEditSchema, r as automationEventCatalogSchema, t as automationEditErrorSchema, u as automationListSchema, v as automationUpdateSchema, x as automationVersionParamsSchema, y as automationVersionActivateSchema } from "./automation-CHdlHVZP.js";
-import { C as skillReportsSchema, a as fillUtcHours, b as pluginsSchema, c as sumUtcHoursIntoSixHours, d as trailingUtcSixHourWindow, f as utcDayKey, h as pluginOperationalReportFeedSchema, i as fillUtcDays, l as trailingUtcDayWindow, m as healthReportSchema, n as DAY_MS$1, o as fillUtcSixHours, p as utcHourKey, r as HOUR_MS$1, s as startOfUtcHour, u as trailingUtcHourWindow, x as runtimeInfoReportSchema } from "./web-message-id-xPI_EFSC.js";
-import { B as readHealthReport, I as createVercelAttachmentStorage, _ as readViewerAutomationRuns, a as recordWebConversationActivity, b as readViewerAutomations, d as resolveSlackConversationContextFromThreadId, g as readViewerAutomationExecutions, h as readConversationSourceTask, i as createConversationId, k as stopConversationTurn, l as getProductionSlackAdapter, m as deleteViewerTask, o as webActorFromEmail, p as ViewerTaskNotFoundError, r as createAndEnqueueConversation, t as appendAndEnqueueWebMessage, u as formatSlackConversationRedactedLabel, v as readViewerAutomationSummary, w as clearSlackPendingReactions, x as resolveViewerTaskCandidate, y as readViewerAutomationVersions } from "./web-input-B9Bv0_lR.js";
-import { F as conversationRangeColumns, N as conversationActiveDaysColumn, P as conversationAggregateColumns, j as readAutomationTitlesByConversationId } from "./task-runner-DUjvzYXj.js";
-import { d as legacyWebMailboxMetadataSchema } from "./result-C883vngT.js";
-import { a as startConnection, l as getWebAuthorization, n as isConnectableProvider, r as listConnections, t as disconnectConnection } from "./connections-ClYrKzpX.js";
-import { t as decodeInputImages } from "./images-BN_BiBXF.js";
-import { C as locationParamsSchema, E as activitySixHours$1, H as conversationChildAgentsReportSchema, I as codeOverviewReportSchema, L as codePersonReportSchema, M as startConnectionResponseSchema, O as connectionListSchema, R as codeRepositoryParamsSchema, S as locationDirectoryReportSchema, T as activityHours$1, U as stopConversationTurnResponseSchema, W as apiErrorSchema, _ as actorProfileReportSchema, a as workspaceBodySchema, d as createdPersonalTokenSchema, f as personalTokenListSchema, g as actorDirectoryReportSchema, h as revokePersonalTokenResponseSchema, i as deleteWorkspaceResponseSchema, j as disconnectConnectionResponseSchema, k as connectionParamsSchema, l as workspaceSchema, m as personalTokenParamsSchema, n as statsReportSchema, o as workspaceListSchema, s as workspaceParamsSchema, u as createPersonalTokenBodySchema, v as personParamsSchema, w as activityDays$1, x as locationDetailReportSchema, y as personalSpendReportSchema, z as codeRepositoryReportSchema } from "./schema-Dy69D4Ge.js";
+import { It as createUserTokenStore, K as listChildAgents, L as editEventAutomation, O as parseSlackThreadId, P as editScheduledAutomation, R as AutomationEditError, T as readLiveAttachment, V as resolveTaskOutcomes, bt as conversationSubtreeColumns, g as readStats, ot as getChildAgentLabel, yt as conversationSubtree, z as eventAutomationTriggerAvailable } from "./agent-runner-CPSd7rKm.js";
+import { p as escapeXml } from "./client-BZdxgKyL.js";
+import { f as logException, m as logWarn, p as logInfo } from "./logging-BStXN56b.js";
+import { d as parseSlackTeamId, g as parseSlackMessageTs, l as parseSlackChannelId } from "./actor-tlxzqaRe.js";
+import { C as addAgentTurnUsage, D as hasAgentTurnUsage, E as agentTurnUsageSchema, O as resolveRootConversationId, S as parseSessionSource, c as getConversationEventStore, d as getDb, f as getSqlExecutor, h as loadConversationSlackTenantId, i as resolveViewerUser, m as withConversationEventLock, o as updateViewerDisplayName, t as findUserByEmail, u as getConversationStore, v as locationFromRow } from "./viewer-B2_ABsYi.js";
+import { c as juniorIdentities, d as juniorDestinations, l as juniorUsers, o as conversationReadColumns, s as juniorConversations } from "./agent-invocations-Qfz7dWgU.js";
+import { f as juniorConversationBriefs, g as juniorApiTokens, h as juniorConversationEvents, m as juniorConversationMetrics, u as juniorConversationParticipants, v as juniorCodeChanges, y as juniorCodeRepositories } from "./executor-Bb3eQb8q.js";
+import { d as contextProvenance } from "./history-AY8rs-FR.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-B8SuFPGb.js";
+import { At as loadTurnProjection, D as AutomationConflictError, E as sameDefinitionValue, O as automationRevision, S as automationDefinition, T as readAutomationVersion, a as saveScheduledAutomation, k as requireAutomationRevision, pn as piMessageFromHistoryItem, v as saveEventAutomation, y as setEventAutomationStatus } from "./tasks-DieKX3d4.js";
+import { C as WorkspaceValidationError, Ct as readLatestConversationBrief, Ht as getSlackClient, Lt as lookupSlackUser, M as workspaceRepoCheckoutPath, Nt as listConversationAnnotations, O as SANDBOX_RUNTIME, Pt as listConversationAnnotationsById, S as updateWorkspace, Tt as buildSentryConversationUrl, _ as deleteWorkspace, _t as conversationHasParticipantEmail, b as listWorkspaces, bt as conversationNotArchivedForUser, ft as createPluginLogger, g as createWorkspace, gt as conversationArchivedForUser, ht as conversationArchivedForEmail, mt as conversationArchiveTimes, pt as readConversationAccessFromSql, qt as withSlackRetries, u as getPlugins, v as getWorkspace, vt as conversationHasParticipantUser, wt as readConversationEventPage, x as listWorkspacesByRepository, xt as viewerConversationMembership, yt as conversationNotArchivedForEmail } from "./agent-hooks-B00FaKdP.js";
+import { A as forkConversationBodySchema, F as readMessageAttachments, I as INPUT_IMAGE_TYPES, O as createConversationBodySchema, T as conversationStatsReportSchema, _ as conversationParamsSchema, a as cancelConversationPendingMessagesBodySchema, c as conversationAttachmentParamsSchema, d as conversationDetailReportSchema, g as conversationFeedSchema, h as conversationFeedQuerySchema, i as archiveConversationResponseSchema, j as forkConversationResponseSchema, k as createConversationMessageBodySchema, m as conversationEventsQuerySchema, o as cancelConversationPendingMessagesResponseSchema, p as conversationEventPageSchema, r as archiveConversationBodySchema, t as acceptedConversationMessageSchema, u as conversationDetailQuerySchema, x as conversationPendingMessagesReportSchema } from "./conversation-DjN3mlog.js";
+import { n as hash, t as create } from "./profile-qBM6B_-V.js";
+import { l as getEventCatalog, y as automationEventCatalog } from "./session-stop-CV65ZlU3.js";
+import { t as getFirstRunAtMs } from "./cadence-R7Em4RjE.js";
+import { t as getCachedSnapshot } from "./resolve-BzpuLh8c.js";
+import { a as getVercelConversationWorkQueue } from "./job-queue-vdGU-5ge.js";
+import { a as cancelHumanFacingPendingMessages, h as getConversation } from "./store-B1GES4gC.js";
+import { n as finishServiceAccountSignIn, o as serviceAccountPlugins, r as getServiceAccountStatus, s as startServiceAccountSignIn, t as disconnectServiceAccount } from "./service-account-BzhW7kXu.js";
+import { M as compileScheduleIntent, P as weekdaySchema, _ as automationSummarySchema, b as automationVersionListSchema, c as automationLifecycleSchema, d as automationParamsSchema, f as automationRunListSchema, g as automationSchedulePreviewSchema, h as automationScheduleIntentSchema, i as automationExecutionListSchema, j as ScheduleIntentError, l as automationListQuerySchema, n as automationEditSchema, r as automationEventCatalogSchema, t as automationEditErrorSchema, u as automationListSchema, v as automationUpdateSchema, x as automationVersionParamsSchema, y as automationVersionActivateSchema } from "./automation-DWBFBenG.js";
+import { C as skillReportsSchema, a as fillUtcHours, b as pluginsSchema, c as sumUtcHoursIntoSixHours, d as trailingUtcSixHourWindow, f as utcDayKey, h as pluginOperationalReportFeedSchema, i as fillUtcDays, l as trailingUtcDayWindow, m as healthReportSchema, n as DAY_MS$1, o as fillUtcSixHours, p as utcHourKey, r as HOUR_MS$1, s as startOfUtcHour, u as trailingUtcHourWindow, x as runtimeInfoReportSchema } from "./web-message-id-CJSUiksE.js";
+import { B as readHealthReport, I as createVercelAttachmentStorage, _ as readViewerAutomationRuns, a as recordWebConversationActivity, b as readViewerAutomations, d as resolveSlackConversationContextFromThreadId, g as readViewerAutomationExecutions, h as readConversationSourceTask, i as createConversationId, k as stopConversationTurn, l as getProductionSlackAdapter, m as deleteViewerTask, o as webActorFromEmail, p as ViewerTaskNotFoundError, r as createAndEnqueueConversation, t as appendAndEnqueueWebMessage, u as formatSlackConversationRedactedLabel, v as readViewerAutomationSummary, w as clearSlackPendingReactions, x as resolveViewerTaskCandidate, y as readViewerAutomationVersions } from "./web-input-BZDyxpzR.js";
+import { F as conversationAggregateColumns, I as conversationRangeColumns, M as readAutomationTitlesByConversationId, P as conversationActiveDaysColumn } from "./task-runner-BlGhcQPi.js";
+import { d as legacyWebMailboxMetadataSchema } from "./result-DEZH_AnZ.js";
+import { a as startConnection, l as getWebAuthorization, n as isConnectableProvider, r as listConnections, t as disconnectConnection, u as htmlCallbackResponse } from "./connections-9gJkfS85.js";
+import { t as decodeInputImages } from "./images-BbSdVHC6.js";
+import { A as activityHours$1, C as personParamsSchema, D as locationDirectoryReportSchema, E as locationDetailReportSchema, H as codePersonReportSchema, I as disconnectConnectionResponseSchema, J as stopConversationTurnResponseSchema, L as startConnectionResponseSchema, N as connectionListSchema, O as locationParamsSchema, P as connectionParamsSchema, S as actorProfileReportSchema, U as codeRepositoryParamsSchema, V as codeOverviewReportSchema, W as codeRepositoryReportSchema, Y as apiErrorSchema, _ as personalTokenListSchema, a as workspaceBodySchema, b as revokePersonalTokenResponseSchema, d as serviceAccountListSchema, f as serviceAccountParamsSchema, g as createdPersonalTokenSchema, h as createPersonalTokenBodySchema, i as deleteWorkspaceResponseSchema, j as activitySixHours$1, k as activityDays$1, l as workspaceSchema, m as startServiceAccountSignInResponseSchema, n as statsReportSchema, o as workspaceListSchema, q as conversationChildAgentsReportSchema, s as workspaceParamsSchema, u as disconnectServiceAccountResponseSchema, w as personalSpendReportSchema, x as actorDirectoryReportSchema, y as personalTokenParamsSchema } from "./schema-CF9HqNRY.js";
 import { Hono } from "hono";
 import path from "node:path";
 import { z } from "zod";
@@ -34,7 +37,7 @@ import { HTTPException } from "hono/http-exception";
 import { bodyLimit } from "hono/body-limit";
 import { zValidator } from "@hono/zod-validator";
 import { createMiddleware } from "hono/factory";
-//#region src/api/http.ts
+// src/api/http.ts
 const NO_STORE_HEADERS = { "cache-control": "no-store" };
 /** Build response init that keeps personalized API payloads out of shared caches. */
 function noStoreInit(init) {
@@ -62,23 +65,27 @@ function throwApiError(status, message, cause) {
 		res: jsonResponse(apiErrorSchema, { error: message }, { status })
 	});
 }
-//#endregion
-//#region src/api/validation.ts
+// src/api/validation.ts
 /** Validate one request input and use Junior's stable JSON error contract. */
 function validateRequest(target, schema, message) {
 	return zValidator(target, schema, (result) => {
 		if (!result.success) throwApiError(400, message, result.error);
 	});
 }
-//#endregion
-//#region src/api/viewer.ts
+// src/api/viewer.ts
 /** Require a viewer and refine later Hono handlers to authenticated context. */
 const requireViewer = createMiddleware(async (context, next) => {
 	if (!context.get("viewer")) throwApiError(401, "Authentication required.");
 	await next();
 });
-//#endregion
-//#region src/api/conversations/archive.ts
+/** Require a Junior admin viewer. */
+const requireAdmin = createMiddleware(async (context, next) => {
+	const viewer = context.get("viewer");
+	if (!viewer) throwApiError(401, "Authentication required.");
+	if (viewer.isAdmin !== true) throwApiError(403, "Only Junior admins can do this.");
+	await next();
+});
+// src/api/conversations/archive.ts
 async function setViewerArchive(args) {
 	const executor = getSqlExecutor();
 	return await executor.transaction(async () => {
@@ -133,8 +140,7 @@ async function archiveConversation(viewer, conversationId, body) {
 	if (result.status === "missing") throwApiError(404, "Conversation not found.");
 	throwApiError(409, "Conversation received new activity.");
 }
-//#endregion
-//#region src/chat/conversations/fork.ts
+// src/chat/conversations/fork.ts
 /** Event key of the agent note that follows the copied events in a fork. */
 const FORK_NOTE_KEY = "fork:note";
 const forkNote = alias(juniorConversationEvents, "fork_note");
@@ -283,8 +289,7 @@ function hasUnfinishedToolCalls(messages) {
 	} else if (message.role === "toolResult") pending.delete(message.toolCallId);
 	return pending.size > 0;
 }
-//#endregion
-//#region src/api/conversations/auxiliary-costs.ts
+// src/api/conversations/auxiliary-costs.ts
 function eventCost() {
 	return sql`CASE
     WHEN ${juniorConversationEvents.type} = 'structured_event'
@@ -344,8 +349,7 @@ async function readConversationAuxiliaryCostsFromSql(db, conversationIds) {
 	}
 	return result;
 }
-//#endregion
-//#region src/api/conversations/usage.ts
+// src/api/conversations/usage.ts
 const usage$1 = juniorConversations.usage;
 const componentFields = [
 	"inputTokens",
@@ -455,8 +459,7 @@ function childAgentTotalsReport(metrics, auxiliaryCosts) {
 		...childAgents.usage ? { cumulativeUsage: childAgents.usage } : void 0
 	};
 }
-//#endregion
-//#region src/api/conversations/child-agents.ts
+// src/api/conversations/child-agents.ts
 /**
 * Load the direct child agents of one Conversation, or throw a standard API
 * not-found error. Viewers who cannot see private content get only the status,
@@ -494,8 +497,7 @@ async function requireConversationChildAgents(conversationId, options = {}) {
 		conversationId
 	});
 }
-//#endregion
-//#region src/api/conversations/attachments.ts
+// src/api/conversations/attachments.ts
 function contentDisposition(filename, contentType) {
 	return `${INPUT_IMAGE_TYPES.some((type) => type === contentType) ? "inline" : "attachment"}; filename="${filename.replace(/[^\x20-\x7e]|["\\]/g, "_")}"; filename*=UTF-8''${encodeURIComponent(filename)}`;
 }
@@ -536,8 +538,7 @@ async function requireConversationAttachment(args) {
 	if (!opened) throwApiError(404, "Attachment not found.");
 	return opened;
 }
-//#endregion
-//#region src/api/conversations/create.ts
+// src/api/conversations/create.ts
 /** Turn image validation failures into request errors before accepting work. */
 function parseImages(images) {
 	try {
@@ -596,8 +597,7 @@ async function appendConversationMessageForViewer(viewer, conversationId, body,
 		throwApiError(500, "Unable to append message.", error);
 	}
 }
-//#endregion
-//#region src/chat/plugins/conversation-sidebar.ts
+// src/chat/plugins/conversation-sidebar.ts
 /** Show native objects by default and let plugins select compact sidebar labels. */
 async function listConversationSidebarAnnotations(conversationIds, annotationsByConversation) {
 	const candidates = new Set(conversationIds);
@@ -646,8 +646,7 @@ async function listConversationSidebarAnnotations(conversationIds, annotationsBy
 	}
 	return selected;
 }
-//#endregion
-//#region src/chat/slack/location-url.ts
+// src/chat/slack/location-url.ts
 /** Parse a Slack workspace subdomain used in `https://{domain}.slack.com` URLs. */
 function parseSlackTeamDomain(value) {
 	if (typeof value !== "string") return void 0;
@@ -674,8 +673,7 @@ function buildSlackLocationUrl(args) {
 	url.searchParams.set("cid", channelId);
 	return url.toString();
 }
-//#endregion
-//#region src/chat/slack/team-domain.ts
+// src/chat/slack/team-domain.ts
 const TEAM_DOMAIN_CACHE_TTL_MS = 864e5;
 const TEAM_DOMAIN_NEGATIVE_CACHE_TTL_MS = 6e4;
 const teamDomainCache = /* @__PURE__ */ new Map();
@@ -746,8 +744,7 @@ async function resolveSlackTeamDomains(teamIds) {
 	}));
 	return new Map(resolved.filter((entry) => entry !== void 0));
 }
-//#endregion
-//#region src/chat/pi/sql-model-usage.ts
+// src/chat/pi/sql-model-usage.ts
 /** SQL reporting adapter for usage stored on assistant history events. */
 const message = sql`${juniorConversationEvents.payload}`;
 const usage = sql`${message}->'usage'`;
@@ -851,8 +848,7 @@ async function readConversationModelUsageFromSql(executor, options) {
 		}] : [];
 	});
 }
-//#endregion
-//#region src/api/conversations/cursor.ts
+// src/api/conversations/cursor.ts
 const CURSOR_CONTEXT = "junior-conversation-report-cursor";
 const conversationCursorPayloadSchema = z.object({
 	conversationId: z.string().min(1),
@@ -891,8 +887,7 @@ function decodeConversationCursor(args) {
 		return;
 	}
 }
-//#endregion
-//#region src/api/conversations/message-mentions.ts
+// src/api/conversations/message-mentions.ts
 const SLACK_USER_MENTION_RE = /<@([UW][A-Z0-9]+)(?:\|[^<>]*)?>/g;
 function mentionedSlackUserIds(text) {
 	if (!text) return [];
@@ -968,8 +963,7 @@ async function attachMessageMentions(executor, conversationId, events) {
 		} : event;
 	});
 }
-//#endregion
-//#region src/api/conversations/shared.ts
+// src/api/conversations/shared.ts
 /** Format a Slack destination without exposing private channel names. */
 function slackStatsLocationLabel(input) {
 	const channelId = input.channel;
@@ -991,8 +985,7 @@ function surfaceFallbackLabel(surface) {
 	if (surface === "internal") return "Internal";
 	return "Conversation";
 }
-//#endregion
-//#region src/api/conversations/projection.ts
+// src/api/conversations/projection.ts
 const PRIVATE_CONVERSATION_LABEL = "Private Conversation";
 function privateConversationLabel(slackConversation) {
 	if (!slackConversation) return PRIVATE_CONVERSATION_LABEL;
@@ -1122,8 +1115,7 @@ function conversationSummaryFromStoredConversation(args) {
 		...args.locationId && !channelNameRedacted ? { locationId: args.locationId } : void 0
 	};
 }
-//#endregion
-//#region src/chat/plugins/unfinished-work.ts
+// src/chat/plugins/unfinished-work.ts
 /**
 * Return assigned and unfinished plugin work for the candidate conversations.
 * Feed Priority combines these signals with conversation activity on the host.
@@ -1177,8 +1169,7 @@ async function listConversationWork(conversationIds) {
 		unfinishedIds: conversationIds.filter((conversationId) => unfinished.has(conversationId))
 	};
 }
-//#endregion
-//#region src/api/conversations/priority.ts
+// src/api/conversations/priority.ts
 /** Conversations with no known work leave Priority after this idle window. */
 const UNASSIGNED_PRIORITY_WINDOW_MS = 108e5;
 /** Unfinished work leaves Priority after this idle window. */
@@ -1204,8 +1195,7 @@ function isConversationPriority(conversation, nowMs) {
 	}
 	return nowMs - lastSeenAt <= UNASSIGNED_PRIORITY_WINDOW_MS;
 }
-//#endregion
-//#region src/api/conversations/user-message-activity.ts
+// src/api/conversations/user-message-activity.ts
 /** Read the latest true user message time for each selected conversation. */
 async function readLastUserMessageAtByConversation(db, conversationIds) {
 	if (conversationIds.length === 0) return /* @__PURE__ */ new Map();
@@ -1218,8 +1208,7 @@ async function readLastUserMessageAtByConversation(db, conversationIds) {
 	}).from(juniorConversationEvents).where(and(inArray(juniorConversationEvents.conversationId, conversationIds), or(and(eq(juniorConversationEvents.type, "user_message"), eq(authority, "instruction"), sql`${actorPlatform} in ('slack', 'local', 'web')`), and(eq(juniorConversationEvents.type, "message"), eq(role, "user"), isNotNull(juniorConversationEvents.actorIdentityId))))).groupBy(juniorConversationEvents.conversationId);
 	return new Map(rows.map((row) => [row.conversationId, new Date(row.lastUserMessageAt).toISOString()]));
 }
-//#endregion
-//#region src/api/conversations/activity-preview.ts
+// src/api/conversations/activity-preview.ts
 /** Read one recent assistant message, or the latest user message, for each conversation. */
 async function readConversationActivityPreviews(db, conversationIds) {
 	if (conversationIds.length === 0) return /* @__PURE__ */ new Map();
@@ -1238,8 +1227,7 @@ async function readConversationActivityPreviews(db, conversationIds) {
 		text: row.text
 	}]));
 }
-//#endregion
-//#region src/api/conversations/participants.ts
+// src/api/conversations/participants.ts
 const identityColumns = {
 	displayName: juniorIdentities.displayName,
 	email: juniorIdentities.email,
@@ -1293,8 +1281,7 @@ async function readConversationParticipants(db, conversationIds) {
 	for (const row of eventRows.sort((left, right) => left.seq - right.seq)) add(row.conversationId, row);
 	return new Map([...ordered].map(([conversationId, group]) => [conversationId, group.identities]));
 }
-//#endregion
-//#region src/api/conversations/list.ts
+// src/api/conversations/list.ts
 const CONVERSATION_FEED_LIMIT = 50;
 function conversationFeedMembershipFilter(status, filter) {
 	if (!filter) return status === "archived" ? sql`false` : void 0;
@@ -1506,8 +1493,7 @@ async function readConversationFeedFromSql(options = {}) {
 async function readConversationFeed(options = {}) {
 	return conversationFeedSchema.parse(await readConversationFeedFromSql(options));
 }
-//#endregion
-//#region src/api/conversations/fork.ts
+// src/api/conversations/fork.ts
 /** Fork a Conversation that the viewer can read into a new root they own. */
 async function forkConversationForViewer(viewer, sourceConversationId, body) {
 	if (!(await readConversationAccessFromSql(getDb(), [sourceConversationId], viewer)).get(sourceConversationId)?.canViewPrivateContent) throwApiError(403, "You do not have access to this conversation.");
@@ -1559,8 +1545,7 @@ async function readConversationForks(conversationId, viewer) {
 	}
 	return result;
 }
-//#endregion
-//#region src/api/conversations/agent-tree.ts
+// src/api/conversations/agent-tree.ts
 /** Bound the parent chain that one agent tree reads. */
 const MAX_AGENT_TREE_DEPTH = 16;
 const CHILD_LABEL = "Subagent";
@@ -1606,8 +1591,7 @@ async function readConversationAgentTree(conversationId, viewer) {
 		};
 	}));
 }
-//#endregion
-//#region src/api/conversations/detail.ts
+// src/api/conversations/detail.ts
 /** Project stored metadata and a bounded event page into a signed history cursor. */
 function projectConversationDetail(args) {
 	const { conversation } = args;
@@ -1717,8 +1701,7 @@ async function readConversationDetail(conversationId, options = {}) {
 		...agentTree ? { agentTree } : void 0
 	});
 }
-//#endregion
-//#region src/api/conversations/event-list.ts
+// src/api/conversations/event-list.ts
 /** Read one bounded page of reporting events before a signed cursor. */
 async function readConversationEvents(conversationId, beforeValue, options = {}) {
 	const record = await readConversationRecordFromSql(conversationId);
@@ -1749,8 +1732,7 @@ async function readConversationEvents(conversationId, beforeValue, options = {})
 		generatedAt: (/* @__PURE__ */ new Date()).toISOString()
 	});
 }
-//#endregion
-//#region src/api/conversations/cancel-pending-messages.ts
+// src/api/conversations/cancel-pending-messages.ts
 /** Cancel accepted human-facing mailbox rows for one conversation participant. */
 async function cancelConversationPendingMessagesForViewer(viewer, conversationId, body = {}) {
 	if (!await getConversationStore().get({ conversationId })) throwApiError(404, "Conversation not found.");
@@ -1775,8 +1757,7 @@ async function cancelConversationPendingMessagesForViewer(viewer, conversationId
 		throwApiError(500, "Unable to cancel queued messages.", error);
 	}
 }
-//#endregion
-//#region src/api/conversations/pending-messages.ts
+// src/api/conversations/pending-messages.ts
 const slackMailboxAuthorSchema = z.object({
 	userId: z.string(),
 	userName: z.string().optional(),
@@ -1902,8 +1883,7 @@ async function requireConversationPendingMessages(conversationId, options = {})
 	if (!report) throwApiError(404, "Conversation not found.");
 	return report;
 }
-//#endregion
-//#region src/api/conversations/metric-buckets.ts
+// src/api/conversations/metric-buckets.ts
 /** Sum all Conversation metrics into UTC day or hour buckets. */
 async function readConversationMetricBuckets(db, options) {
 	const date = options.bucket === "day" ? sql`to_char(${juniorConversationMetrics.occurredAt} at time zone 'UTC', 'YYYY-MM-DD')` : sql`to_char(${juniorConversationMetrics.occurredAt} at time zone 'UTC', 'YYYY-MM-DD"T"HH24')`;
@@ -1913,8 +1893,7 @@ async function readConversationMetricBuckets(db, options) {
 		value: sql`sum(${juniorConversationMetrics.value})::double precision`
 	}).from(juniorConversationMetrics).where(and(gte(juniorConversationMetrics.occurredAt, options.start), lte(juniorConversationMetrics.occurredAt, options.end))).groupBy(date, juniorConversationMetrics.metric).orderBy(asc(date), asc(juniorConversationMetrics.metric));
 }
-//#endregion
-//#region src/api/conversations/stats.query.ts
+// src/api/conversations/stats.query.ts
 const treeConversation$1 = alias(juniorConversations, "stats_tree_conversation");
 const treeAggregateColumns$1 = conversationAggregateColumns({
 	metrics: treeConversation$1,
@@ -2253,14 +2232,12 @@ async function readConversationStatsFromSql() {
 		windowStart: start.toISOString()
 	};
 }
-//#endregion
-//#region src/api/conversations/stats.ts
+// src/api/conversations/stats.ts
 /** Load aggregate conversation stats directly from durable SQL records. */
 async function readConversationStats() {
 	return conversationStatsReportSchema.parse(await readConversationStatsFromSql());
 }
-//#endregion
-//#region src/api/conversations/stop.ts
+// src/api/conversations/stop.ts
 /**
 * Stop the active Turn for one conversation participant.
 *
@@ -2312,8 +2289,7 @@ function viewerWebMessages(messages, viewer) {
 		}] : [];
 	});
 }
-//#endregion
-//#region src/api/conversations/routes.ts
+// src/api/conversations/routes.ts
 /** Create the HTTP routes owned by the conversations API. */
 function createConversationRoutes(options) {
 	const app = new Hono();
@@ -2413,8 +2389,7 @@ function createConversationRoutes(options) {
 	});
 	return app;
 }
-//#endregion
-//#region src/api/code/overview.ts
+// src/api/code/overview.ts
 const DAY_MS = 864e5;
 const WINDOW_DAYS = 30;
 /**
@@ -2833,8 +2808,7 @@ async function readPersonCodeOverview(args) {
 		windowStart: windows.windowStart.toISOString()
 	});
 }
-//#endregion
-//#region src/api/code/repository.ts
+// src/api/code/repository.ts
 /** Most recent code changes listed on one repository page. */
 const REPOSITORY_CHANGE_LIMIT = 100;
 /**
@@ -2877,8 +2851,7 @@ async function readCodeRepository(repositoryId, nowMs = Date.now()) {
 		workspaces
 	});
 }
-//#endregion
-//#region src/api/code/routes.ts
+// src/api/code/routes.ts
 /** Create the code analytics API. */
 function createCodeRoutes() {
 	const app = new Hono();
@@ -2891,8 +2864,7 @@ function createCodeRoutes() {
 	});
 	return app;
 }
-//#endregion
-//#region src/api/connections/routes.ts
+// src/api/connections/routes.ts
 /**
 * Create authenticated routes that list, connect, and disconnect the viewer's
 * plugin accounts. Connections belong to the viewer's web actor, which is the
@@ -2923,8 +2895,7 @@ function createConnectionRoutes() {
 	});
 	return app;
 }
-//#endregion
-//#region src/api/conversations/reporting.ts
+// src/api/conversations/reporting.ts
 /** Return the dashboard label for a conversation surface. */
 function surfaceLabel(surface) {
 	if (surface === "scheduler") return "Scheduler";
@@ -2981,8 +2952,7 @@ function summaryFromRow(row, options = {}) {
 		usage: options.metrics?.usage ?? row.usage ?? void 0
 	});
 }
-//#endregion
-//#region src/api/locations/query.ts
+// src/api/locations/query.ts
 const RECENT_LIMIT$1 = 25;
 const ACTIVITY_DAYS$1 = 90;
 const treeConversation = alias(juniorConversations, "location_tree_conversation");
@@ -3299,21 +3269,18 @@ async function readLocationDetailFromSql(locationId, options = {}) {
 		windowStart: activity[0] ? `${activity[0].date}T00:00:00.000Z` : end.toISOString()
 	};
 }
-//#endregion
-//#region src/api/locations/detail.ts
+// src/api/locations/detail.ts
 /** Expose operational detail for one persisted public conversation location. */
 async function readLocationDetail(locationId, options = {}) {
 	const report = await readLocationDetailFromSql(locationId, options);
 	return report ? locationDetailReportSchema.parse(report) : void 0;
 }
-//#endregion
-//#region src/api/locations/list.ts
+// src/api/locations/list.ts
 /** Expose public conversation destinations as the dashboard's location index. */
 async function readLocationDirectory() {
 	return locationDirectoryReportSchema.parse(await readLocationDirectoryFromSql());
 }
-//#endregion
-//#region src/api/locations/routes.ts
+// src/api/locations/routes.ts
 /** Create the HTTP routes owned by the locations API. */
 function createLocationRoutes() {
 	const app = new Hono();
@@ -3327,8 +3294,7 @@ function createLocationRoutes() {
 	});
 	return app;
 }
-//#endregion
-//#region src/api/people/code.ts
+// src/api/people/code.ts
 /** Read person-scoped native code activity for one People profile. */
 async function readPeopleCode(email) {
 	const subject = await findUserByEmail(email);
@@ -3454,8 +3420,7 @@ async function recentActorRows(email) {
 		usage: juniorConversations.usage
 	}).from(juniorConversations).innerJoin(juniorIdentities, eq(juniorIdentities.id, juniorConversations.actorIdentityId)).innerJoin(juniorUsers, eq(juniorUsers.id, juniorIdentities.userId)).leftJoin(juniorDestinations, eq(juniorDestinations.id, juniorConversations.destinationId)).where(verifiedActorWhere(email)).orderBy(desc(juniorConversations.lastActivityAt), asc(juniorConversations.conversationId)).limit(25);
 }
-//#endregion
-//#region src/api/people/list.query.ts
+// src/api/people/list.query.ts
 const DIRECTORY_ACTIVITY_DAYS = 90;
 /** Day ranges need the prior equal period too (90d + prior 90d). */
 const DAY_METRIC_LOOKBACK = 180;
@@ -3663,14 +3628,12 @@ async function readPeopleListFromSql() {
 		windowStart: start.toISOString()
 	};
 }
-//#endregion
-//#region src/api/people/list.ts
+// src/api/people/list.ts
 /** Load the people list from verified user identities in SQL. */
 async function readPeopleList() {
 	return actorDirectoryReportSchema.parse(await readPeopleListFromSql());
 }
-//#endregion
-//#region src/api/people/plugin-reports.ts
+// src/api/people/plugin-reports.ts
 /** Read sanitized person-scoped plugin reports for one profile subject. */
 async function readPeoplePluginReports(args) {
 	const nowMs = Date.now();
@@ -3680,7 +3643,7 @@ async function readPeoplePluginReports(args) {
 		reports: [],
 		source: "plugins"
 	});
-	const { getPluginProfileReports } = await import("./agent-hooks-BjtTzvru.js").then((n) => n.t);
+	const { getPluginProfileReports } = await import("./agent-hooks-B00FaKdP.js").then((n) => n.t);
 	return pluginOperationalReportFeedSchema.parse({
 		generatedAt: new Date(nowMs).toISOString(),
 		reports: await getPluginProfileReports({
@@ -3691,8 +3654,7 @@ async function readPeoplePluginReports(args) {
 		source: "plugins"
 	});
 }
-//#endregion
-//#region src/api/people/profile.query.ts
+// src/api/people/profile.query.ts
 function emptyProfile(email, nowMs) {
 	const end = new Date(nowMs);
 	end.setUTCHours(0, 0, 0, 0);
@@ -3862,14 +3824,12 @@ async function readPeopleProfileFromSql(email, options = {}) {
 		windowStart: start.toISOString()
 	};
 }
-//#endregion
-//#region src/api/people/profile.ts
+// src/api/people/profile.ts
 /** Load one person profile from verified user identities in SQL. */
 async function readPeopleProfile(email, options = {}) {
 	return actorProfileReportSchema.parse(await readPeopleProfileFromSql(email, options));
 }
-//#endregion
-//#region src/api/people/spend.query.ts
+// src/api/people/spend.query.ts
 const SEVEN_DAY_OFFSET = 6;
 const THIRTY_DAY_OFFSET = 29;
 function addUsd(current, next) {
@@ -3919,8 +3879,7 @@ async function readPersonalSpendFromSql(email, nowMs = Date.now()) {
 		windowStart: thirtyDayStart.toISOString()
 	};
 }
-//#endregion
-//#region src/api/people/spend.ts
+// src/api/people/spend.ts
 const PERSONAL_SPEND_CACHE_TTL_MS = 3e5;
 /** Create an app-scoped personal-spend reader with a five-minute cache. */
 function createPersonalSpendReader() {
@@ -3945,8 +3904,7 @@ function createPersonalSpendReader() {
 		}
 	};
 }
-//#endregion
-//#region src/api/people/routes.ts
+// src/api/people/routes.ts
 /** Create the HTTP routes owned by the People API. */
 function createPeopleRoutes() {
 	const app = new Hono();
@@ -3975,8 +3933,7 @@ function createPeopleRoutes() {
 	});
 	return app;
 }
-//#endregion
-//#region src/personal-tokens/store.ts
+// src/personal-tokens/store.ts
 const TOKEN_PREFIX = "jr_pat_";
 const DEFAULT_TOKEN_LIFETIME_MS = 7776e6;
 function normalizeEmail(email) {
@@ -4037,8 +3994,7 @@ async function authenticatePersonalToken(token, now = /* @__PURE__ */ new Date()
 	await getDb().update(juniorApiTokens).set({ lastUsedAt: now }).where(eq(juniorApiTokens.id, match.id));
 	return match.ownerEmailNormalized;
 }
-//#endregion
-//#region src/api/personal-tokens/routes.ts
+// src/api/personal-tokens/routes.ts
 /** Create authenticated native personal-token list and action routes. */
 function createPersonalTokenRoutes() {
 	const app = new Hono();
@@ -4065,8 +4021,67 @@ function createPersonalTokenRoutes() {
 	});
 	return app;
 }
-//#endregion
-//#region src/chat/plugins/user-pages.ts
+// src/api/service-accounts/routes.ts
+/**
+* Public URL of the OAuth callback for one plugin's service account.
+*
+* It uses the request origin unless `JUNIOR_BASE_URL` is set, so the
+* provider sends the Admin back to the dashboard session that started it.
+*/
+function callbackUrl(request, provider) {
+	const base = process.env.JUNIOR_BASE_URL?.trim() || new URL(request.url).origin;
+	return new URL(`api/service-accounts/${encodeURIComponent(provider)}/callback`, base.endsWith("/") ? base : `${base}/`).toString();
+}
+function requirePlugin(provider) {
+	const plugin = pluginCatalogRuntime.getDefinition(provider);
+	if (!plugin?.manifest.accounts?.serviceAccount) throwApiError(404, "Service account not found.");
+	return plugin;
+}
+function callbackPage(title, message, status) {
+	return htmlCallbackResponse(escapeXml(title), escapeXml(message), status, { footerMessage: "You can close this tab and return to the dashboard." });
+}
+/**
+* Create admin-only routes that list, connect, and disconnect plugin service
+* accounts.
+*
+* Whoever signs in decides which account everyone falls back to, so every
+* route, including the OAuth callback, requires a Junior admin. The callback
+* also accepts only a sign-in that the same Admin started.
+*/
+function createServiceAccountRoutes() {
+	const app = new Hono();
+	app.get("/", requireAdmin, async () => jsonResponse(serviceAccountListSchema, { serviceAccounts: await Promise.all(serviceAccountPlugins(pluginCatalogRuntime.getProviders()).map(getServiceAccountStatus)) }));
+	app.post("/:provider", requireAdmin, validateRequest("param", serviceAccountParamsSchema, "Invalid provider."), async (context) => {
+		const { provider } = context.req.valid("param");
+		const { authorizationUrl } = await startServiceAccountSignIn({
+			plugin: requirePlugin(provider),
+			redirectUrl: callbackUrl(context.req.raw, provider),
+			startedBy: context.get("viewer").email
+		});
+		return jsonResponse(startServiceAccountSignInResponseSchema, { authorizationUrl: authorizationUrl.toString() });
+	});
+	app.get("/:provider/callback", requireAdmin, validateRequest("param", serviceAccountParamsSchema, "Invalid provider."), async (context) => {
+		const { provider } = context.req.valid("param");
+		const plugin = requirePlugin(provider);
+		const viewer = context.get("viewer");
+		const result = await finishServiceAccountSignIn({
+			callback: new URL(context.req.url).searchParams,
+			connectedBy: viewer.email,
+			plugin
+		});
+		if (!result.ok) return callbackPage("Connection failed", result.message, 400);
+		logInfo("dashboard.service_account.connected", { "app.credential.provider": provider });
+		return callbackPage(`${plugin.manifest.displayName} service account connected`, `People who have not connected ${plugin.manifest.displayName} now use this account for what its policy allows.`, 200);
+	});
+	app.delete("/:provider", requireAdmin, validateRequest("param", serviceAccountParamsSchema, "Invalid provider."), async (context) => {
+		const { provider } = context.req.valid("param");
+		await disconnectServiceAccount(requirePlugin(provider));
+		logInfo("dashboard.service_account.disconnected", { "app.credential.provider": provider });
+		return jsonResponse(disconnectServiceAccountResponseSchema, { disconnected: true });
+	});
+	return app;
+}
+// src/chat/plugins/user-pages.ts
 /**
 * Runtime ownership for plugin user pages.
 *
@@ -4109,8 +4124,7 @@ async function readPluginUserPage(input) {
 	if (content.records.some((record) => record.actions?.some((action) => !actionBelongsToPlugin(action.href, plugin.manifest.name)))) throw new Error(`Plugin user page "${plugin.manifest.name}/${page.id}" returned an action outside its API namespace.`);
 	return content;
 }
-//#endregion
-//#region src/api/user-pages/routes.ts
+// src/api/user-pages/routes.ts
 const userPageQuerySchema = z.object({
 	cursor: z.preprocess((value) => value || void 0, pluginUserPageCursorSchema),
 	filter: z.preprocess((value) => value || void 0, pluginUserPageFilterSchema),
@@ -4137,8 +4151,7 @@ function createUserPageRoutes() {
 	});
 	return app;
 }
-//#endregion
-//#region src/chat/automations/edit.ts
+// src/chat/automations/edit.ts
 /**
 * Web edits. Owners and public Destination readers can edit. Creator-only
 * rules still apply, and lifecycle actions stay creator-only.
@@ -4366,8 +4379,7 @@ async function changeViewerAutomationLifecycle(user, id, input) {
 		task: await saveScheduledAutomation(getDb(), next, input.revision)
 	}, true);
 }
-//#endregion
-//#region src/chat/automations/editor.ts
+// src/chat/automations/editor.ts
 /** Read-only editor support. Core owns schedules; plugins own Event choices. */
 /** Return only Event types that can start a durable Automation. */
 function readAutomationEventCatalog() {
@@ -4392,8 +4404,7 @@ async function previewAutomationSchedule(user, id, intent) {
 		throw error;
 	}
 }
-//#endregion
-//#region src/api/automations/routes.ts
+// src/api/automations/routes.ts
 /** Translate expected edit failures; unexpected failures stay at the API boundary. */
 function editErrorResponse(error) {
 	if (error instanceof ViewerTaskNotFoundError) return jsonResponse(automationEditErrorSchema, {
@@ -4518,8 +4529,7 @@ function createAutomationRoutes() {
 	});
 	return app;
 }
-//#endregion
-//#region src/api/workspaces/routes.ts
+// src/api/workspaces/routes.ts
 function snapshotView(workspace) {
 	const recorded = workspace.snapshot;
 	if (!recorded) return null;
@@ -4615,8 +4625,7 @@ function createWorkspaceRoutes() {
 	});
 	return app;
 }
-//#endregion
-//#region src/api/stats.ts
+// src/api/stats.ts
 /** Read the last 90 days of named daily counters. */
 async function readStatsReport() {
 	const now = /* @__PURE__ */ new Date();
@@ -4632,8 +4641,7 @@ async function readStatsReport() {
 		windowStart: start
 	});
 }
-//#endregion
-//#region src/reporting.ts
+// src/reporting.ts
 function readDescriptionText(home) {
 	try {
 		return readFileSync(path.join(home, "DESCRIPTION.md"), "utf8").trim() || void 0;
@@ -4643,7 +4651,7 @@ function readDescriptionText(home) {
 }
 /** Read discovered skill names for authenticated runtime diagnostics. */
 async function readSkillReports() {
-	const { discoverSkills } = await import("./skills-C22SLruK.js").then((n) => n.o);
+	const { discoverSkills } = await import("./skills-CiWS5_Ub.js").then((n) => n.o);
 	const skills = await discoverSkills();
 	return skillReportsSchema.parse(skills.map((skill) => ({
 		name: skill.name,
@@ -4652,7 +4660,7 @@ async function readSkillReports() {
 }
 /** Read safe configured plugin metadata for authenticated runtime diagnostics. */
 async function readPlugins() {
-	const { pluginCatalogRuntime } = await import("./catalog-runtime-CZzhGQ7F.js").then((n) => n.t);
+	const { pluginCatalogRuntime } = await import("./catalog-runtime-B8SuFPGb.js").then((n) => n.t);
 	return pluginsSchema.parse(pluginCatalogRuntime.getProviders().map((plugin) => ({
 		configKeys: plugin.manifest.configKeys ?? [],
 		description: plugin.manifest.description,
@@ -4663,8 +4671,8 @@ async function readPlugins() {
 /** Read authenticated runtime discovery data. */
 async function readRuntimeInfoReport() {
 	const [{ homeDir }, { pluginCatalogRuntime }, plugins, skills] = await Promise.all([
-		import("./package-discovery-BVvSnQBB.js").then((n) => n.r),
-		import("./catalog-runtime-CZzhGQ7F.js").then((n) => n.t),
+		import("./package-discovery-DJBompdd.js").then((n) => n.r),
+		import("./catalog-runtime-B8SuFPGb.js").then((n) => n.t),
 		readPlugins(),
 		readSkillReports()
 	]);
@@ -4681,15 +4689,14 @@ async function readRuntimeInfoReport() {
 /** Read sanitized operational summaries contributed by plugins. */
 async function readPluginOperationalReportFeed() {
 	const nowMs = Date.now();
-	const { getPluginOperationalReports } = await import("./agent-hooks-BjtTzvru.js").then((n) => n.t);
+	const { getPluginOperationalReports } = await import("./agent-hooks-B00FaKdP.js").then((n) => n.t);
 	return pluginOperationalReportFeedSchema.parse({
 		source: "plugins",
 		generatedAt: new Date(nowMs).toISOString(),
 		reports: await getPluginOperationalReports(nowMs)
 	});
 }
-//#endregion
-//#region src/api.ts
+// src/api.ts
 /** Create Junior's production REST API for authenticated dashboard consumers. */
 function createJuniorApi(options = {}) {
 	const app = new Hono();
@@ -4706,6 +4713,7 @@ function createJuniorApi(options = {}) {
 	app.route("/api/code", createCodeRoutes());
 	app.route("/api/connections", createConnectionRoutes());
 	app.route("/api/personal-tokens", createPersonalTokenRoutes());
+	app.route("/api/service-accounts", createServiceAccountRoutes());
 	app.route("/api/people", createPeopleRoutes());
 	app.route("/api/locations", createLocationRoutes());
 	app.route("/api/user-pages", createUserPageRoutes());
@@ -4722,5 +4730,4 @@ function createJuniorApi(options = {}) {
 	});
 	return app;
 }
-//#endregion
 export { authenticatePersonalToken, createJuniorApi, jsonResponse, resolveViewerUser, updateViewerDisplayName };