@sentry/junior 0.258.0 → 0.259.0

package/dist/{agent-runner-DGsFQw72.js → agent-runner-CPSd7rKm.js}

@@ -1,30 +1,32 @@
-import { b as getGatewayApiKey, c as hasCompactedConversationContext, d as unwrapCurrentInstruction, f as escapeXml, g as getProviderErrorAttributes, h as findProviderError, i as completeText, l as isCompactionSummaryText, m as createProviderError, n as GEN_AI_SERVER_ADDRESS, o as resolveGatewayModel, p as ProviderError, r as completeObject, s as COMPACTION_SUMMARY_PREFIX, t as GEN_AI_PROVIDER_NAME, u as renderCurrentInstruction, v as isProviderRetryError, x as resolveGatewayCredential, y as MISSING_GATEWAY_CREDENTIALS_ERROR } from "./client-DbyHuMFU.js";
-import { R as normalizeIdentityEmail, S as summarizeMessageText, T as withSpan, V as toOptionalString, _ as serializeGenAiAttribute, a as extractGenAiUsageSummary, b as setSpanStatus, c as getLogContextAttributesForSpan, d as logError, f as logException, h as normalizeGenAiFinishReason, i as extractGenAiUsageAttributes, l as getTracePropagationHeaders, m as logWarn, p as logInfo, u as logAudit, w as withLogContext, x as setTags, y as setSpanAttributes, z as isRecord$4 } from "./logging-DsHONhVm.js";
+import { S as resolveGatewayCredential, _ as getProviderErrorAttributes, a as completeText, b as MISSING_GATEWAY_CREDENTIALS_ERROR, c as COMPACTION_SUMMARY_PREFIX, d as renderCurrentInstruction, f as unwrapCurrentInstruction, g as findProviderError, h as createProviderError, i as completeObject, l as hasCompactedConversationContext, m as ProviderError, n as GEN_AI_SERVER_ADDRESS, p as escapeXml, s as resolveGatewayModel, t as GEN_AI_PROVIDER_NAME, u as isCompactionSummaryText, x as getGatewayApiKey, y as isProviderRetryError } from "./client-BZdxgKyL.js";
+import { R as normalizeIdentityEmail, S as summarizeMessageText, T as withSpan, V as toOptionalString, _ as serializeGenAiAttribute, a as extractGenAiUsageSummary, b as setSpanStatus, c as getLogContextAttributesForSpan, d as logError, f as logException, h as normalizeGenAiFinishReason, i as extractGenAiUsageAttributes, l as getTracePropagationHeaders, m as logWarn, p as logInfo, u as logAudit, w as withLogContext, x as setTags, y as setSpanAttributes, z as isRecord$4 } from "./logging-BStXN56b.js";
 import { m as startInactiveSpan, v as withActiveSpan } from "./sentry-BBUlHih9.js";
-import { a as toCanonicalInputMessage, c as toGenAiPayloadMetadata, i as runWithConversationPrivacy, l as toGenAiPayloadTraceAttributes, o as toCanonicalOutputMessage, r as resolveConversationPrivacy, s as toGenAiMessagesTraceAttributes, t as canExposeConversationPayload } from "./conversation-privacy-DHP_xnVj.js";
-import { n as botConfig, v as normalizeSlackEmojiName } from "./config-_WO_AjCB.js";
+import { a as toCanonicalInputMessage, c as toGenAiPayloadMetadata, i as runWithConversationPrivacy, l as toGenAiPayloadTraceAttributes, o as toCanonicalOutputMessage, r as resolveConversationPrivacy, s as toGenAiMessagesTraceAttributes, t as canExposeConversationPayload } from "./conversation-privacy-CFhNKxp-.js";
+import { n as botConfig, v as normalizeSlackEmojiName } from "./config-Deqpfpg9.js";
 import { a as formatModelProfiles, c as profileConfig, i as formatModelProfile, l as TURN_REASONING_LEVELS, n as ModelProfileNotConfiguredError, o as modelIdForProfile, s as modelProfileSchema } from "./model-profile-Bg8EoCKD.js";
 import { a as isUserActor, d as parseSlackTeamId, f as parseSlackUserId, g as parseSlackMessageTs, l as parseSlackChannelId, u as parseSlackChannelReferenceId } from "./actor-tlxzqaRe.js";
-import { C as addAgentTurnUsage, D as hasAgentTurnUsage, R as parseDestination, c as getConversationEventStore, d as getDb, f as getSqlExecutor, l as getConversationMessageSearchStore, r as readActorIdentity, u as getConversationStore, w as agentTurnCostUsd } from "./viewer-CGvvRqKp.js";
+import { C as addAgentTurnUsage, D as hasAgentTurnUsage, R as parseDestination, c as getConversationEventStore, d as getDb, f as getSqlExecutor, l as getConversationMessageSearchStore, r as readActorIdentity, u as getConversationStore, w as agentTurnCostUsd } from "./viewer-B2_ABsYi.js";
 import { a as juniorAgentInvocations, c as juniorIdentities, d as juniorDestinations, i as juniorAgentBindings, n as AGENT_INVOCATION_PARENT_MAILBOX_STATUSES, s as juniorConversations, t as AGENT_INVOCATION_MAILBOX_STATUSES } from "./agent-invocations-Qfz7dWgU.js";
-import { _ as juniorConversationAnnotations, a as juniorAutomationRuns, b as juniorAttachments, c as juniorStats, f as juniorConversationBriefs, x as juniorArtifacts } from "./executor-RvG6kVe1.js";
+import { _ as juniorConversationAnnotations, a as juniorAutomationRuns, b as juniorAttachments, c as juniorStats, f as juniorConversationBriefs, x as juniorArtifacts } from "./executor-Bb3eQb8q.js";
 import { d as contextProvenance, f as instructionActors, m as sameActorIdentity, p as instructionProvenanceFor, t as KNOWN_CONVERSATION_EVENT_TYPES, u as agentInstructionProvenance } from "./history-AY8rs-FR.js";
 import { a as listReferenceFiles, c as soulPathCandidates, l as worldPathCandidates } from "./package-discovery-DJBompdd.js";
-import { _ as CredentialUnavailableError, a as resolveAuthTokenPlaceholder, c as fetchWithBoundedOAuthErrorBodies, d as actorLogContext, f as credentialContextForActor, g as credentialUserSubjectId, i as resolvePluginHeaderEnvRefs, l as getOAuthProviderErrorAttributes, o as resolvePluginCommandEnv, p as credentialContextSchema, s as OAuthProviderError } from "./registry-Du566MtJ.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-BN4DVxco.js";
-import { a as parseSkillInvocation, i as parseSkillFile, n as findSkillByName, r as loadSkillsByName, t as discoverSkills } from "./skills-DyQBLIrK.js";
-import { A as escapeSlackMrkdwnText, B as postSlackMessage, Ct as ToolInputError, Dt as loadConversationProjection, Et as loadConnectedMcpProviders, G as continuableMessages, H as uploadFilesToConversation, Ht as recordTurnRoute, I as addReactionToMessage, K as loadTurnCheckpoint, L as getSlackMessagePermalink, Lt as recordAuthorizationRequested, Mt as openConversationProjection, Nt as recordAgentsInstructionsUpdated, O as automationRevision, Ot as loadLastModelProfile, P as slackMention, Pt as recordAttachmentsDelivered, R as openSlackDirectMessage, Rt as recordGuardianActionReviewed, St as TURN_CONTEXT_TAG, Vt as recordToolExecutionStarted, Xt as fallbackShortTitle, Zt as resolveTaskTitle, _t as isToolResultMessage, a as saveScheduledAutomation, bt as stripRuntimeTurnContext, ct as extractAssistantText, d as createEventAutomation, dn as getAgentContextInputLimitTokens, dt as getUserMessageInstructionText, f as deleteEventAutomation, fn as historyItemFromPiMessage, ft as hasRuntimeTurnContext, g as listEventAutomationsForTeam, gt as isToolResultError, ht as isContinuablePiBoundary, i as readScheduledAutomation, it as TurnToolCallLimitExceededError, j as formatSlackLink, jt as loadTurnRoute, ln as estimateTextTokens, lt as getPiMessageRole, m as getEventAutomation, mt as isAssistantMessage, n as listScheduledAutomationsForTeam, nt as TurnBudgetExceededError, ot as createTurnLimitGate, pn as piMessageFromHistoryItem, q as saveTurnCheckpoint, rt as TurnSliceLimitExceededError, st as isTurnExecutionLimitExceededError, t as createScheduledAutomation, tt as TURN_LIMIT_DISABLED_REASON, un as getAgentContextCompactionTriggerTokens, ut as getTerminalAssistantMessages, v as saveEventAutomation, vt as normalizeToolNameFromResult, xt as trimTrailingAssistantMessages, y as setEventAutomationStatus, yt as retainRuntimeTurnContext, z as postSlackEphemeralMessage, zt as recordMcpProviderConnected } from "./tasks-CEXKTASS.js";
-import { A as getWorkspaceSnapshotBuilder, B as STOP_WATCHING_TOOL_NAME, Bt as getFilePermalink, C as WorkspaceValidationError, D as setWorkspaceSnapshotBuild, Dt as matchSlackAttachments, E as setWorkspaceSnapshot, F as isSlackMessageTurn, Ft as defaultTimezone, G as createWatch, Gt as normalizeSlackConversationId, H as cancelWatch, Ht as getSlackClient, I as slackMessageTurnDisabledReason, It as resolveUserTimezone, J as getWatch, K as deliverWatch, L as RESOURCE_SUBSCRIPTION_DEFAULT_TTL_MS, M as workspaceRepoCheckoutPath, Mt as createPluginAnnotations, N as resolveChannelCapabilities, O as SANDBOX_RUNTIME, P as getSlackToolContext, R as RESOURCE_SUBSCRIPTION_MAX_TTL_MS, Rt as SlackActionError, S as updateWorkspace, T as loadSnapshotsForProfile, Ut as isConversationScopedChannel, V as cancelSubscriptions, W as createTimerWatch, Wt as isDmChannel$1, Xt as JUNIOR_NATIVE_EVENT_NAMESPACE, Y as listWatches, _ as deleteWorkspace, at as getDashboardConversationLink, b as listWorkspaces, c as getPluginTools, en as conversationNoteEvent, ft as createPluginLogger, g as createWorkspace, j as tryWorkspaceRepoCheckoutPath, jt as saveObjectAnnotations, k as deleteWorkspaceSnapshotBuilders, l as getPluginUserPromptContributions, q as findMatchingWatches, qt as withSlackRetries, r as createPluginHookRunner, s as getPluginSystemPromptContributions, st as getDashboardTaskLink, u as getPlugins, v as getWorkspace, w as invalidateReadySnapshot, y as getWorkspaceByName, z as RESOURCE_WATCH_TOOL_SOURCE, zt as downloadPrivateSlackFile } from "./agent-hooks-BJ_5mlRH.js";
+import { _ as CredentialUnavailableError, a as resolveAuthTokenPlaceholder, c as fetchWithBoundedOAuthErrorBodies, d as actorLogContext, f as credentialContextForActor, g as credentialUserSubjectId, i as resolvePluginHeaderEnvRefs, l as getOAuthProviderErrorAttributes, o as resolvePluginCommandEnv, p as credentialContextSchema, s as OAuthProviderError } from "./registry-B_M_x_iS.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-B8SuFPGb.js";
+import { a as parseSkillInvocation, i as parseSkillFile, n as findSkillByName, r as loadSkillsByName, t as discoverSkills } from "./skills-CiWS5_Ub.js";
+import { A as escapeSlackMrkdwnText, B as postSlackMessage, Ct as ToolInputError, Dt as loadConversationProjection, Et as loadConnectedMcpProviders, G as continuableMessages, H as uploadFilesToConversation, Ht as recordTurnRoute, I as addReactionToMessage, K as loadTurnCheckpoint, L as getSlackMessagePermalink, Lt as recordAuthorizationRequested, Mt as openConversationProjection, Nt as recordAgentsInstructionsUpdated, O as automationRevision, Ot as loadLastModelProfile, P as slackMention, Pt as recordAttachmentsDelivered, R as openSlackDirectMessage, Rt as recordGuardianActionReviewed, St as TURN_CONTEXT_TAG, Vt as recordToolExecutionStarted, Xt as fallbackShortTitle, Zt as resolveTaskTitle, _t as isToolResultMessage, a as saveScheduledAutomation, bt as stripRuntimeTurnContext, ct as extractAssistantText, d as createEventAutomation, dn as getAgentContextInputLimitTokens, dt as getUserMessageInstructionText, f as deleteEventAutomation, fn as historyItemFromPiMessage, ft as hasRuntimeTurnContext, g as listEventAutomationsForTeam, gt as isToolResultError, ht as isContinuablePiBoundary, i as readScheduledAutomation, it as TurnToolCallLimitExceededError, j as formatSlackLink, jt as loadTurnRoute, ln as estimateTextTokens, lt as getPiMessageRole, m as getEventAutomation, mt as isAssistantMessage, n as listScheduledAutomationsForTeam, nt as TurnBudgetExceededError, ot as createTurnLimitGate, pn as piMessageFromHistoryItem, q as saveTurnCheckpoint, rt as TurnSliceLimitExceededError, st as isTurnExecutionLimitExceededError, t as createScheduledAutomation, tt as TURN_LIMIT_DISABLED_REASON, un as getAgentContextCompactionTriggerTokens, ut as getTerminalAssistantMessages, v as saveEventAutomation, vt as normalizeToolNameFromResult, xt as trimTrailingAssistantMessages, y as setEventAutomationStatus, yt as retainRuntimeTurnContext, z as postSlackEphemeralMessage, zt as recordMcpProviderConnected } from "./tasks-DieKX3d4.js";
+import { A as getWorkspaceSnapshotBuilder, B as STOP_WATCHING_TOOL_NAME, Bt as getFilePermalink, C as WorkspaceValidationError, D as setWorkspaceSnapshotBuild, Dt as matchSlackAttachments, E as setWorkspaceSnapshot, F as isSlackMessageTurn, Ft as defaultTimezone, G as createWatch, Gt as normalizeSlackConversationId, H as cancelWatch, Ht as getSlackClient, I as slackMessageTurnDisabledReason, It as resolveUserTimezone, J as getWatch, K as deliverWatch, L as RESOURCE_SUBSCRIPTION_DEFAULT_TTL_MS, M as workspaceRepoCheckoutPath, Mt as createPluginAnnotations, N as resolveChannelCapabilities, O as SANDBOX_RUNTIME, P as getSlackToolContext, R as RESOURCE_SUBSCRIPTION_MAX_TTL_MS, Rt as SlackActionError, S as updateWorkspace, T as loadSnapshotsForProfile, Ut as isConversationScopedChannel, V as cancelSubscriptions, W as createTimerWatch, Wt as isDmChannel$1, Xt as JUNIOR_NATIVE_EVENT_NAMESPACE, Y as listWatches, _ as deleteWorkspace, at as getDashboardConversationLink, b as listWorkspaces, c as getPluginTools, en as conversationNoteEvent, ft as createPluginLogger, g as createWorkspace, j as tryWorkspaceRepoCheckoutPath, jt as saveObjectAnnotations, k as deleteWorkspaceSnapshotBuilders, l as getPluginUserPromptContributions, q as findMatchingWatches, qt as withSlackRetries, r as createPluginHookRunner, s as getPluginSystemPromptContributions, st as getDashboardTaskLink, u as getPlugins, v as getWorkspace, w as invalidateReadySnapshot, y as getWorkspaceByName, z as RESOURCE_WATCH_TOOL_SOURCE, zt as downloadPrivateSlackFile } from "./agent-hooks-B00FaKdP.js";
 import { B as briefLinkSchema, H as conversationBriefSchema, J as removedCardSchema, L as detectImageMediaType, R as isVisionImageMediaType, V as briefOutcomeStatusSchema } from "./conversation-DjN3mlog.js";
-import { A as SANDBOX_DATA_ROOT, D as fenceLock, E as acquireActiveLock, F as sandboxSkillFile, I as sandboxSkillPathResolution, M as SANDBOX_SKILLS_ROOT, N as SANDBOX_WORKSPACE_ROOT, O as withLock, P as sandboxSkillDir, _ as workspaceSnapshotNotReadyUserMessage, a as isAbortError, b as buildNonInteractiveShellScript, c as isSandboxCommandStreamInterruptedError, d as isSnapshottingError, f as throwSandboxOperationError, g as isWorkspaceSnapshotNotReadyError, h as getWorkspaceSnapshotNotReadyError, i as ensureDockerDaemon, j as SANDBOX_REPOS_ROOT, k as sleep, l as isSandboxMissingError, m as WorkspaceSnapshotNotReadyError, n as hash, o as isAlreadyExistsError, p as wrapSandboxSetupError, r as isStale, s as isSandboxApiTransientError, t as create, u as isSandboxUnavailableError, v as getVercelSandboxCredentials, w as getStateAdapter, x as runNonInteractiveCommand, y as buildCommandScript } from "./profile-DpYjfKke.js";
-import { n as canReusePendingAuthLink, t as abandonReplacedPendingAuth } from "./pending-auth-D8J1uJUS.js";
+import { C as SANDBOX_DATA_ROOT, D as sandboxSkillDir, E as SANDBOX_WORKSPACE_ROOT, O as sandboxSkillFile, S as sleep, T as SANDBOX_SKILLS_ROOT, _ as workspaceSnapshotNotReadyUserMessage, a as isAbortError, b as buildNonInteractiveShellScript, c as isSandboxCommandStreamInterruptedError, d as isSnapshottingError, f as throwSandboxOperationError, g as isWorkspaceSnapshotNotReadyError, h as getWorkspaceSnapshotNotReadyError, i as ensureDockerDaemon, k as sandboxSkillPathResolution, l as isSandboxMissingError, m as WorkspaceSnapshotNotReadyError, n as hash, o as isAlreadyExistsError, p as wrapSandboxSetupError, r as isStale, s as isSandboxApiTransientError, t as create, u as isSandboxUnavailableError, v as getVercelSandboxCredentials, w as SANDBOX_REPOS_ROOT, x as runNonInteractiveCommand, y as buildCommandScript } from "./profile-qBM6B_-V.js";
+import { n as canReusePendingAuthLink, t as abandonReplacedPendingAuth } from "./pending-auth-rG5U_QS1.js";
 import { c as isTurnInputCommitLostError, i as TurnInputCommitLostError, r as CooperativeTurnYieldError, t as authorizationId } from "./oauth-authorization-djQn5Nhy.js";
-import { a as isNoReplyMarker, i as NO_REPLY_MARKER, n as getAssistantReplyText, r as sanitizeAssistantText, t as decideReply } from "./assistant-reply-H1M-91oF.js";
-import { C as pluginSupportsEvent, D as requireEventIdentifier, E as registeredResourceTypeSchema, L as readAutomationResult, N as FINISH_AUTOMATION_RUN_TOOL_NAME, O as requireSupportedEventMatch, P as automationResultSchema, R as remindMissingAutomationResult, S as hasEventCatalogEntries, T as registeredEventTypeSchema, _ as workspaceSnapshotFinishedEvent, d as requireSlackChannelMessageScope, g as WORKSPACE_SNAPSHOT_READY_EVENT, h as WORKSPACE_SNAPSHOT_FAILED_EVENT, l as getEventCatalog, n as markConversationsStopped, o as enqueueEventNotification, t as getConversationStoppedAtMs, v as workspaceSnapshotWatch, w as registeredEventMatchSchema, x as eventNamespaceSchema, y as automationEventCatalog } from "./session-stop-CIoFiwwe.js";
+import { a as isNoReplyMarker, i as NO_REPLY_MARKER, n as getAssistantReplyText, r as sanitizeAssistantText, t as decideReply } from "./assistant-reply-CqthTerd.js";
+import { C as pluginSupportsEvent, D as requireEventIdentifier, E as registeredResourceTypeSchema, L as readAutomationResult, N as FINISH_AUTOMATION_RUN_TOOL_NAME, O as requireSupportedEventMatch, P as automationResultSchema, R as remindMissingAutomationResult, S as hasEventCatalogEntries, T as registeredEventTypeSchema, _ as workspaceSnapshotFinishedEvent, d as requireSlackChannelMessageScope, g as WORKSPACE_SNAPSHOT_READY_EVENT, h as WORKSPACE_SNAPSHOT_FAILED_EVENT, l as getEventCatalog, n as markConversationsStopped, o as enqueueEventNotification, t as getConversationStoppedAtMs, v as workspaceSnapshotWatch, w as registeredEventMatchSchema, x as eventNamespaceSchema, y as automationEventCatalog } from "./session-stop-CV65ZlU3.js";
+import { a as acquireActiveLock, o as fenceLock, r as getStateAdapter, s as withLock } from "./adapter-Bn0gFVSF.js";
 import { i as isValidTimeZone, r as getZonedDateTimeParts } from "./cadence-R7Em4RjE.js";
-import { a as createSandboxSession, c as postinstall, d as getSandboxResources, i as bindSandboxFileSystem, l as setSnapshotSpanAttributes, n as isMissingError, o as stopSession, r as resolve$1, s as dependencies } from "./resolve-ClCIgh8E.js";
-import { a as getVercelConversationWorkQueue, f as getTurnRequestDeadline, n as sendNextWorkspaceSnapshotJob, r as sendWorkspaceSnapshotJob } from "./job-queue-DVe37it2.js";
-import { E as stopConversationWork } from "./store-DJLwq4x8.js";
+import { a as createSandboxSession, c as postinstall, d as getSandboxResources, i as bindSandboxFileSystem, l as setSnapshotSpanAttributes, n as isMissingError, o as stopSession, r as resolve$1, s as dependencies } from "./resolve-BzpuLh8c.js";
+import { a as getVercelConversationWorkQueue, f as getTurnRequestDeadline, n as sendNextWorkspaceSnapshotJob, r as sendWorkspaceSnapshotJob } from "./job-queue-vdGU-5ge.js";
+import { E as stopConversationWork } from "./store-B1GES4gC.js";
+import { _ as getMcpProviderErrorAttributes, a as serviceAccountOnly, c as createMcpServiceAccountClientProvider, d as PluginMcpClient, f as McpProviderError, g as getMcpAwareTelemetryMessage, h as getMcpAwareErrorType, i as serviceAccountAllows, l as getMcpServiceAccountCredentials, m as McpToolError, p as McpServiceAccountRequiredError, u as McpAuthorizationRequiredError, v as toMcpProviderError } from "./service-account-BzhW7kXu.js";
 import { F as taskOutcomeInputSchema, M as compileScheduleIntent, N as scheduleIntentSchema, O as automationInstructionToolSchema, T as SCHEDULED_AUTOMATION_SYSTEM_ACTOR, j as ScheduleIntentError, k as automationTitleSchema } from "./automation-DWBFBenG.js";
 import { r as isExperimentalFeatureEnabled } from "./experimental-BNK1l1jv.js";
 import { n as privateTraceResultAttributes } from "./private-trace-result-CE7_lEdq.js";
@@ -33,7 +35,6 @@ import { createGatewayProvider } from "@ai-sdk/gateway";
 import { generateText } from "ai";
 import path from "node:path";
 import { isDeepStrictEqual } from "node:util";
-import { AsyncLocalStorage } from "node:async_hooks";
 import { z } from "zod";
 import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { and, asc, count, countDistinct, desc, eq, gt, gte, inArray, isNotNull, isNull, lt, lte, ne, notExists, or, sql } from "drizzle-orm";
@@ -47,9 +48,7 @@ import { Kind } from "@sinclair/typebox";
 import { Sandbox } from "@vercel/sandbox";
 import { Bash, defineCommand } from "just-bash";
 import { structuredPatch } from "diff";
-import { Client } from "@modelcontextprotocol/sdk/client";
-import { UnauthorizedError } from "@modelcontextprotocol/sdk/client/auth.js";
-import { StreamableHTTPClientTransport, StreamableHTTPError } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
 import dns from "node:dns/promises";
 import http from "node:http";
 import https from "node:https";
@@ -6765,280 +6764,6 @@ function createAgentSandbox(options) {
 		}
 	};
 }
-// src/chat/mcp/errors.ts
-/** Safe failure at an MCP network or OAuth boundary. */
-var McpProviderError = class extends Error {
-	phase;
-	provider;
-	missingSession;
-	resourceHost;
-	status;
-	constructor(details) {
-		super(`MCP provider ${details.phase.replace("_", " ")} failed`);
-		this.name = "McpProviderError";
-		this.phase = details.phase;
-		this.provider = details.provider;
-		this.missingSession = details.missingSession;
-		this.resourceHost = details.resourceHost;
-		this.status = details.status;
-	}
-};
-function providerStatus(error) {
-	if (!error || typeof error !== "object") return;
-	const value = error;
-	const status = typeof value.status === "number" ? value.status : typeof value.code === "number" ? value.code : void 0;
-	return status !== void 0 && status >= 100 && status <= 599 ? status : void 0;
-}
-/** Replace an external MCP failure without retaining its provider-controlled cause. */
-function toMcpProviderError(error, details) {
-	if (error instanceof McpProviderError) return error;
-	return new McpProviderError({
-		...details,
-		status: details.status ?? providerStatus(error)
-	});
-}
-/** Return safe MCP provider fields for logs and spans. */
-function getMcpProviderErrorAttributes(error) {
-	if (!(error instanceof McpProviderError)) return {};
-	return {
-		"app.credential.provider": error.provider,
-		"app.mcp.error.phase": error.phase,
-		...error.status !== void 0 ? { "http.response.status_code": error.status } : void 0,
-		...error.resourceHost ? { "server.address": error.resourceHost } : void 0
-	};
-}
-/** Thrown when an MCP failure should be returned as a model-visible tool error. */
-var McpToolError = class extends Error {
-	constructor(message) {
-		super(message);
-		this.name = "McpToolError";
-	}
-};
-/** Return the OpenTelemetry error.type value for MCP-aware tool failures. */
-function getMcpAwareErrorType(error, fallback) {
-	if (error instanceof McpToolError) return "tool_error";
-	if (error instanceof McpProviderError) return "mcp_provider_error";
-	return error instanceof Error ? error.name : fallback;
-}
-/** Return the display-safe error message for MCP-aware tool failures. */
-function getMcpAwareErrorMessage(error) {
-	return error instanceof Error ? error.message : String(error);
-}
-/** Return an error message safe for logs and span attributes. */
-function getMcpAwareTelemetryMessage(error, _privacy) {
-	if (error instanceof McpToolError) return "MCP tool call failed";
-	if (error instanceof McpProviderError) return error.message;
-	return getMcpAwareErrorMessage(error);
-}
-// src/chat/mcp/client.ts
-const MCP_CLIENT_INFO = {
-	name: "junior-mcp-client",
-	version: "1.0.0"
-};
-const MCP_TOOLS_CALL_METHOD = "tools/call";
-function getDefaultPort(url) {
-	if (url.protocol === "https:") return 443;
-	if (url.protocol === "http:") return 80;
-}
-function getMcpNetworkAttributes(url) {
-	const port = url.port ? Number(url.port) : getDefaultPort(url);
-	return {
-		"server.address": url.hostname,
-		...port !== void 0 ? { "server.port": port } : void 0,
-		...url.protocol === "http:" || url.protocol === "https:" ? {
-			"network.protocol.name": "http",
-			"network.transport": "tcp"
-		} : void 0
-	};
-}
-var McpAuthorizationRequiredError = class extends Error {
-	provider;
-	constructor(provider, message) {
-		super(message);
-		this.name = "McpAuthorizationRequiredError";
-		this.provider = provider;
-	}
-};
-function isMissingSessionError(error) {
-	return error instanceof StreamableHTTPError && (error.code === 404 || /Session not found/i.test(error.message));
-}
-var PluginMcpClient = class {
-	client;
-	clientPromise;
-	lastAttemptedTransportSessionId;
-	providerStatusStore = new AsyncLocalStorage();
-	transport;
-	listedTools;
-	resourceHost;
-	plugin;
-	options;
-	constructor(plugin, options = {}) {
-		this.plugin = plugin;
-		this.options = options;
-		const url = plugin.manifest.mcp?.url;
-		this.resourceHost = url ? new URL(url).hostname : void 0;
-	}
-	async listTools() {
-		if (this.listedTools) return [...this.listedTools];
-		return await this.withSessionRecovery(async () => {
-			const client = await this.getClient();
-			const discovered = [];
-			const seen = /* @__PURE__ */ new Set();
-			let cursor;
-			do {
-				const result = await this.wrapAuth(() => client.listTools(cursor ? { cursor } : void 0), "list_tools");
-				await this.syncTransportSessionId();
-				for (const tool of result.tools) {
-					if (seen.has(tool.name)) continue;
-					seen.add(tool.name);
-					discovered.push(tool);
-				}
-				cursor = result.nextCursor;
-			} while (cursor);
-			this.listedTools = discovered.sort((left, right) => left.name.localeCompare(right.name));
-			return [...this.listedTools];
-		});
-	}
-	async callTool(name, args, signal) {
-		return await this.withSessionRecovery(async () => {
-			const client = await this.getClient();
-			const mcp = this.plugin.manifest.mcp;
-			if (mcp) {
-				const url = new URL(mcp.url);
-				setSpanAttributes({
-					"mcp.method.name": MCP_TOOLS_CALL_METHOD,
-					"gen_ai.operation.name": "execute_tool",
-					...this.transport?.sessionId ? { "mcp.session.id": this.transport.sessionId } : void 0,
-					...this.transport?.protocolVersion ? { "mcp.protocol.version": this.transport.protocolVersion } : void 0,
-					...getMcpNetworkAttributes(url)
-				});
-			}
-			const result = await this.wrapAuth(() => client.callTool({
-				name,
-				arguments: args ?? {}
-			}, void 0, signal ? { signal } : void 0), "call_tool");
-			await this.syncTransportSessionId();
-			return result;
-		});
-	}
-	async close() {
-		await this.disposeClient();
-	}
-	async withSessionRecovery(operation) {
-		try {
-			return await operation();
-		} catch (error) {
-			await this.syncTransportSessionId();
-			if (!await this.shouldResetMissingSession(error)) throw error;
-			await this.clearStoredTransportSessionId();
-			await this.cleanupClientAfterFailure();
-			return await operation();
-		}
-	}
-	async getClient() {
-		if (this.client) return this.client;
-		if (this.clientPromise) return await this.clientPromise;
-		const clientPromise = this.connectClient();
-		this.clientPromise = clientPromise;
-		try {
-			return await clientPromise;
-		} finally {
-			if (this.clientPromise === clientPromise) this.clientPromise = void 0;
-		}
-	}
-	async connectClient() {
-		const mcp = this.plugin.manifest.mcp;
-		if (!mcp) throw new Error(`Plugin "${this.plugin.manifest.name}" does not declare MCP config`);
-		const headers = mcp.headers ? resolvePluginHeaderEnvRefs(this.plugin.manifest.name, mcp.headers, "MCP header") : void 0;
-		const sessionId = await this.getStoredTransportSessionId();
-		this.lastAttemptedTransportSessionId = sessionId;
-		const transport = new StreamableHTTPClientTransport(new URL(mcp.url), {
-			...headers ? { requestInit: { headers } } : void 0,
-			fetch: fetchWithBoundedOAuthErrorBodies(this.options.fetch, (status) => {
-				const store = this.providerStatusStore.getStore();
-				if (store) store.status = status;
-			}),
-			...this.options.authProvider ? { authProvider: this.options.authProvider } : void 0,
-			...sessionId ? { sessionId } : void 0
-		});
-		const client = new Client(MCP_CLIENT_INFO, { capabilities: {} });
-		this.transport = transport;
-		try {
-			await this.wrapAuth(() => client.connect(transport), "connect");
-			this.client = client;
-			await this.syncTransportSessionId();
-			return client;
-		} catch (error) {
-			await this.syncTransportSessionId();
-			await this.cleanupClientAfterFailure();
-			throw error;
-		}
-	}
-	async wrapAuth(operation, phase) {
-		const store = {};
-		return await this.providerStatusStore.run(store, async () => {
-			try {
-				return await operation();
-			} catch (error) {
-				if (error instanceof McpAuthorizationRequiredError) throw error;
-				if (error instanceof UnauthorizedError) throw new McpAuthorizationRequiredError(this.plugin.manifest.name, `MCP authorization required for plugin "${this.plugin.manifest.name}"`);
-				throw toMcpProviderError(error, {
-					phase,
-					provider: this.plugin.manifest.name,
-					missingSession: isMissingSessionError(error) || void 0,
-					resourceHost: this.resourceHost,
-					status: store.status
-				});
-			}
-		});
-	}
-	async shouldResetMissingSession(error) {
-		if (!(error instanceof McpProviderError && error.missingSession || isMissingSessionError(error))) return false;
-		return Boolean(this.transport?.sessionId ?? this.lastAttemptedTransportSessionId ?? await this.getStoredTransportSessionId());
-	}
-	resetClientState() {
-		const transport = this.transport;
-		this.listedTools = void 0;
-		this.transport = void 0;
-		this.client = void 0;
-		this.clientPromise = void 0;
-		return transport;
-	}
-	async cleanupClientAfterFailure() {
-		const transport = this.resetClientState();
-		if (!transport) return;
-		try {
-			await transport.close();
-		} catch {}
-	}
-	async disposeClient() {
-		const transport = this.resetClientState();
-		if (transport) try {
-			await transport.close();
-		} catch (error) {
-			throw toMcpProviderError(error, {
-				phase: "close",
-				provider: this.plugin.manifest.name,
-				resourceHost: this.resourceHost
-			});
-		}
-	}
-	async getStoredTransportSessionId() {
-		return await this.options.authProvider?.getMcpServerSessionId?.();
-	}
-	async clearStoredTransportSessionId() {
-		const provider = this.options.authProvider;
-		this.lastAttemptedTransportSessionId = void 0;
-		await provider?.saveMcpServerSessionId?.(void 0);
-	}
-	async syncTransportSessionId() {
-		const provider = this.options.authProvider;
-		const sessionId = this.transport?.sessionId;
-		if (!provider?.saveMcpServerSessionId || !sessionId) return;
-		this.lastAttemptedTransportSessionId = sessionId;
-		await provider.saveMcpServerSessionId(sessionId);
-	}
-};
 // src/chat/mcp/tool-manager.ts
 const MAX_TOOL_RESULT_TOKENS = 1e4;
 const MAX_TOOL_RESULT_BYTES = 32768;
@@ -7175,6 +6900,9 @@ var McpToolManager = class {
 	activeProviders = /* @__PURE__ */ new Set();
 	authorizationPendingProviders = /* @__PURE__ */ new Set();
 	clientsByProvider = /* @__PURE__ */ new Map();
+	/** Actor clients for tools that a provider's service account may not call. */
+	actorClientsByProvider = /* @__PURE__ */ new Map();
+	serviceAccountProviders = /* @__PURE__ */ new Set();
 	clientPromisesByProvider = /* @__PURE__ */ new Map();
 	toolsByProvider = /* @__PURE__ */ new Map();
 	options;
@@ -7200,8 +6928,9 @@ var McpToolManager = class {
 		if (!plugin?.manifest.mcp) return false;
 		try {
 			const client = await this.getClient(plugin);
-			const tools = this.filterListedTools(plugin, await client.listTools());
-			this.assertWrappedToolsAvailable(plugin, tools);
+			const listedTools = this.filterListedTools(plugin, await client.listTools());
+			this.assertWrappedToolsAvailable(plugin, listedTools);
+			const tools = this.filterServiceAccountOnlyTools(plugin, listedTools);
 			this.toolsByProvider.set(provider, tools.map((tool) => this.toManagedTool(plugin, client, tool)));
 			this.activeProviders.add(provider);
 			return true;
@@ -7212,12 +6941,14 @@ var McpToolManager = class {
 	}
 	async close() {
 		let firstError;
-		for (const client of this.clientsByProvider.values()) try {
+		for (const client of [...this.clientsByProvider.values(), ...this.actorClientsByProvider.values()]) try {
 			await client.close();
 		} catch (error) {
 			firstError ??= error;
 		}
 		this.clientsByProvider.clear();
+		this.actorClientsByProvider.clear();
+		this.serviceAccountProviders.clear();
 		this.toolsByProvider.clear();
 		this.activeProviders.clear();
 		this.authorizationPendingProviders.clear();
@@ -7243,6 +6974,14 @@ var McpToolManager = class {
 		const missingTools = wrappedTools.filter((toolName) => !availableToolNames.has(toolName));
 		if (missingTools.length > 0) throw new Error(`Plugin ${plugin.manifest.name} MCP discovery missing wrapped tools: ${missingTools.join(", ")}`);
 	}
+	/**
+	* Hide tools that the service account does not list when no Actor
+	* connection exists to call them.
+	*/
+	filterServiceAccountOnlyTools(plugin, tools) {
+		if (!serviceAccountOnly(plugin.manifest)) return tools;
+		return tools.filter((tool) => serviceAccountAllows(plugin.manifest, { tool: tool.name }));
+	}
 	async getClient(plugin) {
 		const existing = this.clientsByProvider.get(plugin.manifest.name);
 		if (existing) return existing;
@@ -7257,13 +6996,30 @@ var McpToolManager = class {
 		}
 	}
 	async createClient(plugin) {
-		const authProvider = this.options.authProviderFactory ? await this.options.authProviderFactory(plugin) : void 0;
-		const client = new PluginMcpClient(plugin, {
+		const serviceAccount = await this.options.serviceAccountProviderFactory?.(plugin);
+		if (serviceAccount) this.serviceAccountProviders.add(plugin.manifest.name);
+		const client = await this.newClient(plugin, serviceAccount);
+		this.clientsByProvider.set(plugin.manifest.name, client);
+		return client;
+	}
+	async newClient(plugin, serviceAccount) {
+		if (!serviceAccount && serviceAccountOnly(plugin.manifest)) throw new McpServiceAccountRequiredError(plugin.manifest.name, plugin.manifest.displayName);
+		const authProvider = serviceAccount ?? await this.options.authProviderFactory?.(plugin);
+		return new PluginMcpClient(plugin, {
 			...authProvider ? { authProvider } : void 0,
 			...this.options.fetch ? { fetch: this.options.fetch } : void 0
 		});
-		this.clientsByProvider.set(plugin.manifest.name, client);
-		return client;
+	}
+	/** Pick the client for one call: the service account for its tools, else the actor. */
+	async clientForTool(plugin, client, toolName) {
+		const provider = plugin.manifest.name;
+		if (!this.serviceAccountProviders.has(provider) || serviceAccountAllows(plugin.manifest, { tool: toolName })) return client;
+		if (serviceAccountOnly(plugin.manifest)) throw new McpToolError(`${plugin.manifest.displayName} tool ${toolName} is not available: Junior's shared ${plugin.manifest.displayName} account cannot use it`);
+		const existing = this.actorClientsByProvider.get(provider);
+		if (existing) return existing;
+		const actorClient = await this.newClient(plugin);
+		this.actorClientsByProvider.set(provider, actorClient);
+		return actorClient;
 	}
 	toManagedTool(plugin, client, tool) {
 		const outputSchema = toOptionalRecord(tool.outputSchema);
@@ -7299,7 +7055,7 @@ var McpToolManager = class {
 				const argumentAttribute = serializeMcpPayload(resolvedArgs, conversationPrivacy, { privateMetadata: true });
 				return await withSpan(`execute_tool ${managedToolName}`, "gen_ai.execute_tool", {}, async () => {
 					try {
-						const result = await client.callTool(tool.name, resolvedArgs, options?.signal);
+						const result = await (await this.clientForTool(plugin, client, tool.name)).callTool(tool.name, resolvedArgs, options?.signal);
 						if ("isError" in result && result.isError) throw new McpToolError(extractMcpErrorMessage(result));
 						const resultAttribute = serializeMcpPayload(result, conversationPrivacy, { privateMetadata: true });
 						if (resultAttribute) setSpanAttributes({ "gen_ai.tool.call.result": resultAttribute });
@@ -7353,13 +7109,23 @@ var McpToolManager = class {
 		};
 	}
 	async handleAuthorizationRequired(provider, error, context) {
+		const plugin = this.pluginsByProvider.get(provider);
+		if (plugin && serviceAccountOnly(plugin.manifest)) {
+			this.forgetProvider(provider);
+			throw new McpServiceAccountRequiredError(provider, plugin.manifest.displayName);
+		}
 		if (!this.options.onAuthorizationRequired) return false;
 		if (!(await this.options.onAuthorizationRequired(provider, error, context) === true)) return false;
 		this.authorizationPendingProviders.add(provider);
+		this.forgetProvider(provider);
+		return true;
+	}
+	forgetProvider(provider) {
 		this.clientsByProvider.delete(provider);
+		this.actorClientsByProvider.delete(provider);
+		this.serviceAccountProviders.delete(provider);
 		this.toolsByProvider.delete(provider);
 		this.activeProviders.delete(provider);
-		return true;
 	}
 	/** Return all active ManagedMcpTool objects, optionally filtered by provider. */
 	getResolvedActiveTools(options = {}) {
@@ -16999,6 +16765,13 @@ function createMcpAuthOrchestration(input) {
 		authSessionIdsByProvider.set(plugin.manifest.name, provider.authSessionId);
 		return provider;
 	};
+	const serviceAccountProviderFactory = async (plugin) => {
+		const provider = plugin.manifest.name;
+		if (!plugin.manifest.accounts?.serviceAccount) return;
+		if (!serviceAccountOnly(plugin.manifest) && input.actorId && (await getMcpStoredOAuthCredentials(input.actorId, provider))?.tokens) return;
+		const credentials = await getMcpServiceAccountCredentials(provider);
+		return credentials ? createMcpServiceAccountClientProvider(provider, credentials) : void 0;
+	};
 	const onAuthorizationRequired = async (provider, context) => {
 		if (botAuthProviders.has(provider)) return false;
 		if (pendingPause) return true;
@@ -17079,6 +16852,7 @@ function createMcpAuthOrchestration(input) {
 	};
 	return {
 		authProviderFactory,
+		serviceAccountProviderFactory,
 		onAuthorizationRequired,
 		getPendingPause: () => pendingPause
 	};
@@ -18519,6 +18293,7 @@ async function wireAgentTools(args) {
 	});
 	const mcpToolManager = new McpToolManager(pluginCatalogRuntime.getMcpProviders(), {
 		authProviderFactory: mcpAuth.authProviderFactory,
+		serviceAccountProviderFactory: mcpAuth.serviceAccountProviderFactory,
 		onAuthorizationRequired: (provider, _error, context) => mcpAuth.onAuthorizationRequired(provider, context),
 		onToolSuccess: async (input) => {
 			return await pluginHooks.afterMcpTool({
@@ -18637,7 +18412,11 @@ async function wireAgentTools(args) {
 	const pendingMcpProvider = args.state.pendingAuth?.kind === "mcp" ? args.state.pendingAuth.provider : void 0;
 	if (credentialUserId) for (const provider of args.connectedMcpProviders) {
 		if (provider === pendingMcpProvider) continue;
-		if (await mcpToolManager.activateProvider(provider)) await args.recordConnectedMcpProvider(provider);
+		try {
+			if (await mcpToolManager.activateProvider(provider)) await args.recordConnectedMcpProvider(provider);
+		} catch (error) {
+			if (!(error instanceof McpServiceAccountRequiredError)) throw error;
+		}
 		if (mcpAuth.getPendingPause()) {
 			args.resume.captureHistoryBeforePrompt(args.preAgentPromptMessages());
 			throw mcpAuth.getPendingPause();
@@ -20551,7 +20330,7 @@ function createAgentRunner(execute, options) {
 			} } : void 0
 		};
 		if (run.instruction.storedAttachments?.length) {
-			const { loadInputImages } = await import("./images-C2J_bj2g.js").then((n) => n.n);
+			const { loadInputImages } = await import("./images-BbSdVHC6.js").then((n) => n.n);
 			const storage = nextRun.environment?.attachmentStorage;
 			if (!storage) throw new Error("Attachment storage is unavailable.");
 			nextRun.instruction = {
@@ -20566,4 +20345,4 @@ function createAgentRunner(execute, options) {
 		return await execute(nextRun, streamFn);
 	} };
 }
-export { getAgentInvocation as $, resolveSlackChannelIdFromMessage as A, consumeSandboxEgressPermissionDeniedSignal as At, effectiveTaskOutcomes as B, RetryableDeliveryError as Bt, renderBlockText as C, ingestEvent as Ct, storeAttachment as D, SANDBOX_EGRESS_PROXY_PATH as Dt, requestAttachmentDeletion as E, shouldPropagateSandboxEgressTrace as Et, logScheduledAutomationRunSkipped as F, resolveBaseUrl as Ft, recordSubagentStarted as G, shouldEmitDevAgentTrace as Gt, stopChildAgentsOf as H, toolInvocationDestination as Ht, scheduledAutomationRunAttributes as I, startOAuthFlow as It, createAgentInvocation as J, listChildAgents as K, getConfigDefaults as Kt, editEventAutomation as L, createUserTokenStore as Lt, getConversationInfo as M, sandboxEgressSignalsResponseSchema as Mt, listThreadReplies as N, formatProviderLabel as Nt, parseSlackThreadId as O, clearSandboxEgressSignals as Ot, editScheduledAutomation as P, parseOAuthStatePayload as Pt, getActiveAgentInvocationForConversation as Q, AutomationEditError as R, buildSteeringPiMessage as Rt, renderAttachmentText as S, processWorkspaceSnapshotJob as St, readLiveAttachment as T, normalizeSandboxEgressTracePropagationDomains as Tt, stopConversationSession as U, AuthorizationFlowDisabledError as Ut, resolveTaskOutcomes as V, actorFromRun as Vt, recordSubagentEnded as W, readBlockedReport as Wt, createAgentInvocationFromLatest as X, createAgentInvocationForMessage as Y, findChildAgentConversationId as Z, resolvePluginOAuthAccount as _, AgentMessageTargetError as _t, buildAuthPauseResponse as a, getAgentInvocationTurnId as at, unpublishedArtifactHeaders as b, conversationSubtreeColumns as bt, deleteMcpAuthSessionsForUserProvider as c, isTerminalAgentInvocation as ct, getMcpAuthSession as d, markAgentInvocationMailboxAppended as dt, getAgentInvocationIdForEvents as et, getMcpStoredOAuthCredentials as f, markAgentInvocationParentMailboxAppended as ft, readStats as g, reportReplacedAgentInvocation as gt, latestProgressStatus as h, markAgentInvocationSteered as ht, executeCredentialedEgressRequest as i, getAgentInvocationResultMessageId as it, resolveSlackChannelIdFromThreadId as j, parseSandboxEgressCredentialToken as jt, readSlackRawMessageContext as k, consumeSandboxEgressAuthRequiredSignal as kt, deleteMcpServerSessionId as l, listPendingAgentInvocationMailboxAppends as lt, PluginCredentialFailureError as m, markAgentInvocationRunning as mt, executeAgentRun as n, getAgentInvocationIdForResult as nt, finalizeMcpAuthorization as o, getChildAgentLabel as ot, putMcpStoredOAuthCredentials as p, markAgentInvocationPaused as pt, completeAgentInvocation as q, setConfigDefaults as qt, createContextCompactor as r, getAgentInvocationMessageId as rt, deleteMcpAuthSession as s, getLatestAgentInvocationForConversation as st, createAgentRunner as t, getAgentInvocationIdForMessage as tt, deleteMcpStoredOAuthCredentials as u, listPendingAgentInvocationResults as ut, publicArtifactHeaders as v, PARENT_AGENT_TARGET as vt, collectAttachmentGarbage as w, resolveSandboxEgressProviderForHost as wt, lookupSlackUserProfile as x, getMcpProviderErrorAttributes as xt, readPublicArtifact as y, conversationSubtree as yt, eventAutomationTriggerAvailable as z, withoutSavedSteeringMessages as zt };
+export { getAgentInvocation as $, resolveSlackChannelIdFromMessage as A, parseSandboxEgressCredentialToken as At, effectiveTaskOutcomes as B, actorFromRun as Bt, renderBlockText as C, resolveSandboxEgressProviderForHost as Ct, storeAttachment as D, clearSandboxEgressSignals as Dt, requestAttachmentDeletion as E, SANDBOX_EGRESS_PROXY_PATH as Et, logScheduledAutomationRunSkipped as F, startOAuthFlow as Ft, recordSubagentStarted as G, getConfigDefaults as Gt, stopChildAgentsOf as H, AuthorizationFlowDisabledError as Ht, scheduledAutomationRunAttributes as I, createUserTokenStore as It, createAgentInvocation as J, listChildAgents as K, setConfigDefaults as Kt, editEventAutomation as L, buildSteeringPiMessage as Lt, getConversationInfo as M, formatProviderLabel as Mt, listThreadReplies as N, parseOAuthStatePayload as Nt, parseSlackThreadId as O, consumeSandboxEgressAuthRequiredSignal as Ot, editScheduledAutomation as P, resolveBaseUrl as Pt, getActiveAgentInvocationForConversation as Q, AutomationEditError as R, withoutSavedSteeringMessages as Rt, renderAttachmentText as S, ingestEvent as St, readLiveAttachment as T, shouldPropagateSandboxEgressTrace as Tt, stopConversationSession as U, readBlockedReport as Ut, resolveTaskOutcomes as V, toolInvocationDestination as Vt, recordSubagentEnded as W, shouldEmitDevAgentTrace as Wt, createAgentInvocationFromLatest as X, createAgentInvocationForMessage as Y, findChildAgentConversationId as Z, resolvePluginOAuthAccount as _, AgentMessageTargetError as _t, buildAuthPauseResponse as a, getAgentInvocationTurnId as at, unpublishedArtifactHeaders as b, conversationSubtreeColumns as bt, deleteMcpAuthSessionsForUserProvider as c, isTerminalAgentInvocation as ct, getMcpAuthSession as d, markAgentInvocationMailboxAppended as dt, getAgentInvocationIdForEvents as et, getMcpStoredOAuthCredentials as f, markAgentInvocationParentMailboxAppended as ft, readStats as g, reportReplacedAgentInvocation as gt, latestProgressStatus as h, markAgentInvocationSteered as ht, executeCredentialedEgressRequest as i, getAgentInvocationResultMessageId as it, resolveSlackChannelIdFromThreadId as j, sandboxEgressSignalsResponseSchema as jt, readSlackRawMessageContext as k, consumeSandboxEgressPermissionDeniedSignal as kt, deleteMcpServerSessionId as l, listPendingAgentInvocationMailboxAppends as lt, PluginCredentialFailureError as m, markAgentInvocationRunning as mt, executeAgentRun as n, getAgentInvocationIdForResult as nt, finalizeMcpAuthorization as o, getChildAgentLabel as ot, putMcpStoredOAuthCredentials as p, markAgentInvocationPaused as pt, completeAgentInvocation as q, createContextCompactor as r, getAgentInvocationMessageId as rt, deleteMcpAuthSession as s, getLatestAgentInvocationForConversation as st, createAgentRunner as t, getAgentInvocationIdForMessage as tt, deleteMcpStoredOAuthCredentials as u, listPendingAgentInvocationResults as ut, publicArtifactHeaders as v, PARENT_AGENT_TARGET as vt, collectAttachmentGarbage as w, normalizeSandboxEgressTracePropagationDomains as wt, lookupSlackUserProfile as x, processWorkspaceSnapshotJob as xt, readPublicArtifact as y, conversationSubtree as yt, eventAutomationTriggerAvailable as z, RetryableDeliveryError as zt };

package/dist/api/schema.d.ts

@@ -3572,6 +3572,35 @@ export declare const startConnectionResponseSchema: z.ZodObject<{
 export declare const disconnectConnectionResponseSchema: z.ZodObject<{
   disconnected: z.ZodLiteral<true>;
 }, z.core.$strict>;
+export declare const serviceAccountSchema: z.ZodObject<{
+  provider: z.ZodString;
+  displayName: z.ZodString;
+  userOAuth: z.ZodBoolean;
+  tools: z.ZodArray<z.ZodString>;
+  connected: z.ZodBoolean;
+  connectedAt: z.ZodOptional<z.ZodString>;
+  connectedBy: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const serviceAccountListSchema: z.ZodObject<{
+  serviceAccounts: z.ZodArray<z.ZodObject<{
+    provider: z.ZodString;
+    displayName: z.ZodString;
+    userOAuth: z.ZodBoolean;
+    tools: z.ZodArray<z.ZodString>;
+    connected: z.ZodBoolean;
+    connectedAt: z.ZodOptional<z.ZodString>;
+    connectedBy: z.ZodOptional<z.ZodString>;
+  }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const serviceAccountParamsSchema: z.ZodObject<{
+  provider: z.ZodString;
+}, z.core.$strict>;
+export declare const startServiceAccountSignInResponseSchema: z.ZodObject<{
+  authorizationUrl: z.ZodString;
+}, z.core.$strict>;
+export declare const disconnectServiceAccountResponseSchema: z.ZodObject<{
+  disconnected: z.ZodLiteral<true>;
+}, z.core.$strict>;
 export declare const personalTokenMetadataSchema: z.ZodObject<{
   id: z.ZodString;
   name: z.ZodString;

package/dist/api/schema.js

@@ -2,5 +2,5 @@ import { a as conversationTurnFailureReasonSchema, i as conversationTurnFailureC
 import { A as forkConversationBodySchema, C as conversationReportEventSchema, E as conversationSummaryReportSchema, I as INPUT_IMAGE_TYPES, K as messageCardText, M as conversationChildAgentTotalsSchema, N as MAX_INPUT_IMAGES, O as createConversationBodySchema, P as MAX_INPUT_IMAGE_BYTES, S as conversationReportEventDataSchema, T as conversationStatsReportSchema, Y as resolveMessageCards, _ as conversationParamsSchema, a as cancelConversationPendingMessagesBodySchema, b as conversationPendingMessageSchema, d as conversationDetailReportSchema, f as conversationEventHistorySchema, g as conversationFeedSchema, h as conversationFeedQuerySchema, i as archiveConversationResponseSchema, j as forkConversationResponseSchema, k as createConversationMessageBodySchema, l as conversationAuxiliaryCostsSchema, m as conversationEventsQuerySchema, o as cancelConversationPendingMessagesResponseSchema, p as conversationEventPageSchema, r as archiveConversationBodySchema, s as conversationActivityPreviewSchema, t as acceptedConversationMessageSchema, u as conversationDetailQuerySchema, v as conversationPendingAuthorizationSchema, x as conversationPendingMessagesReportSchema, y as conversationPendingMessageDeliverySchema } from "../conversation-DjN3mlog.js";
 import { C as eventAutomationSummarySchema, S as automationVersionSchema, _ as automationSummarySchema, a as automationExecutionSchema, b as automationVersionListSchema, d as automationParamsSchema, f as automationRunListSchema, g as automationSchedulePreviewSchema, h as automationScheduleIntentSchema, i as automationExecutionListSchema, l as automationListQuerySchema, m as automationRunWindowsSchema, n as automationEditSchema, o as automationExecutionStatusDaySchema, p as automationRunSchema, r as automationEventCatalogSchema, s as automationExecutionStatusSchema, t as automationEditErrorSchema, u as automationListSchema, v as automationUpdateSchema, w as scheduledAutomationSummarySchema, x as automationVersionParamsSchema, y as automationVersionActivateSchema } from "../automation-DWBFBenG.js";
 import { C as skillReportsSchema, S as skillReportSchema, _ as pluginPackageContentItemReportSchema, b as pluginsSchema, g as pluginOperationalReportSchema, h as pluginOperationalReportFeedSchema, m as healthReportSchema, t as webMessageId, v as pluginPackageContentReportSchema, x as runtimeInfoReportSchema, y as pluginSchema } from "../web-message-id-CJSUiksE.js";
-import { A as connectionSchema, B as codeRepositorySummarySchema, C as locationParamsSchema, D as dailyConversationActivitySchema, F as codeChangeSummarySchema, H as conversationChildAgentsReportSchema, I as codeOverviewReportSchema, L as codePersonReportSchema, M as startConnectionResponseSchema, N as codeActivityDaySchema, O as connectionListSchema, P as codeChangeSummaryReportSchema, R as codeRepositoryParamsSchema, S as locationDirectoryReportSchema, U as stopConversationTurnResponseSchema, V as conversationChildAgentSchema, W as apiErrorSchema, _ as actorProfileReportSchema, a as workspaceBodySchema, b as locationActivityDayReportSchema, c as workspaceRepoSchema, d as createdPersonalTokenSchema, f as personalTokenListSchema, g as actorDirectoryReportSchema, h as revokePersonalTokenResponseSchema, i as deleteWorkspaceResponseSchema, j as disconnectConnectionResponseSchema, k as connectionParamsSchema, l as workspaceSchema, m as personalTokenParamsSchema, n as statsReportSchema, o as workspaceListSchema, p as personalTokenMetadataSchema, r as baselineSnapshotSchema, s as workspaceParamsSchema, t as statSchema, u as createPersonalTokenBodySchema, v as personParamsSchema, x as locationDetailReportSchema, y as personalSpendReportSchema, z as codeRepositoryReportSchema } from "../schema-DrMh3NtR.js";
-export { INPUT_IMAGE_TYPES, MAX_INPUT_IMAGES, MAX_INPUT_IMAGE_BYTES, acceptedConversationMessageSchema, actorDirectoryReportSchema, actorProfileReportSchema, apiErrorSchema, archiveConversationBodySchema, archiveConversationResponseSchema, automationEditErrorSchema, automationEditSchema, automationEventCatalogSchema, automationExecutionListSchema, automationExecutionSchema, automationExecutionStatusDaySchema, automationExecutionStatusSchema, automationListQuerySchema, automationListSchema, automationParamsSchema, automationRunListSchema, automationRunSchema, automationRunWindowsSchema, automationScheduleIntentSchema, automationSchedulePreviewSchema, automationSummarySchema, automationUpdateSchema, automationVersionActivateSchema, automationVersionListSchema, automationVersionParamsSchema, automationVersionSchema, baselineSnapshotSchema, cancelConversationPendingMessagesBodySchema, cancelConversationPendingMessagesResponseSchema, codeActivityDaySchema, codeChangeSummaryReportSchema, codeChangeSummarySchema, codeOverviewReportSchema, codePersonReportSchema, codeRepositoryParamsSchema, codeRepositoryReportSchema, codeRepositorySummarySchema, connectionListSchema, connectionParamsSchema, connectionSchema, conversationActivityPreviewSchema, conversationAuxiliaryCostsSchema, conversationChildAgentSchema, conversationChildAgentTotalsSchema, conversationChildAgentsReportSchema, conversationDetailQuerySchema, conversationDetailReportSchema, conversationEventHistorySchema, conversationEventPageSchema, conversationEventsQuerySchema, conversationFeedQuerySchema, conversationFeedSchema, conversationParamsSchema, conversationPendingAuthorizationSchema, conversationPendingMessageDeliverySchema, conversationPendingMessageSchema, conversationPendingMessagesReportSchema, conversationReportEventDataSchema, conversationReportEventSchema, conversationStatsReportSchema, conversationSummaryReportSchema, conversationTurnFailureCodeSchema, conversationTurnFailureReasonSchema, createConversationBodySchema, createConversationMessageBodySchema, createPersonalTokenBodySchema, createdPersonalTokenSchema, dailyConversationActivitySchema, deleteWorkspaceResponseSchema, disconnectConnectionResponseSchema, eventAutomationSummarySchema, forkConversationBodySchema, forkConversationResponseSchema, healthReportSchema, locationActivityDayReportSchema, locationDetailReportSchema, locationDirectoryReportSchema, locationParamsSchema, messageCardText, personParamsSchema, personalSpendReportSchema, personalTokenListSchema, personalTokenMetadataSchema, personalTokenParamsSchema, pluginOperationalReportFeedSchema, pluginOperationalReportSchema, pluginPackageContentItemReportSchema, pluginPackageContentReportSchema, pluginSchema, pluginsSchema, resolveMessageCards, revokePersonalTokenResponseSchema, runtimeInfoReportSchema, scheduledAutomationSummarySchema, skillReportSchema, skillReportsSchema, startConnectionResponseSchema, statSchema, statsReportSchema, stopConversationTurnResponseSchema, webMessageId, workspaceBodySchema, workspaceListSchema, workspaceParamsSchema, workspaceRepoSchema, workspaceSchema };
+import { B as codeChangeSummarySchema, C as personParamsSchema, D as locationDirectoryReportSchema, E as locationDetailReportSchema, F as connectionSchema, G as codeRepositorySummarySchema, H as codePersonReportSchema, I as disconnectConnectionResponseSchema, J as stopConversationTurnResponseSchema, K as conversationChildAgentSchema, L as startConnectionResponseSchema, M as dailyConversationActivitySchema, N as connectionListSchema, O as locationParamsSchema, P as connectionParamsSchema, R as codeActivityDaySchema, S as actorProfileReportSchema, T as locationActivityDayReportSchema, U as codeRepositoryParamsSchema, V as codeOverviewReportSchema, W as codeRepositoryReportSchema, Y as apiErrorSchema, _ as personalTokenListSchema, a as workspaceBodySchema, b as revokePersonalTokenResponseSchema, c as workspaceRepoSchema, d as serviceAccountListSchema, f as serviceAccountParamsSchema, g as createdPersonalTokenSchema, h as createPersonalTokenBodySchema, i as deleteWorkspaceResponseSchema, l as workspaceSchema, m as startServiceAccountSignInResponseSchema, n as statsReportSchema, o as workspaceListSchema, p as serviceAccountSchema, q as conversationChildAgentsReportSchema, r as baselineSnapshotSchema, s as workspaceParamsSchema, t as statSchema, u as disconnectServiceAccountResponseSchema, v as personalTokenMetadataSchema, w as personalSpendReportSchema, x as actorDirectoryReportSchema, y as personalTokenParamsSchema, z as codeChangeSummaryReportSchema } from "../schema-CF9HqNRY.js";
+export { INPUT_IMAGE_TYPES, MAX_INPUT_IMAGES, MAX_INPUT_IMAGE_BYTES, acceptedConversationMessageSchema, actorDirectoryReportSchema, actorProfileReportSchema, apiErrorSchema, archiveConversationBodySchema, archiveConversationResponseSchema, automationEditErrorSchema, automationEditSchema, automationEventCatalogSchema, automationExecutionListSchema, automationExecutionSchema, automationExecutionStatusDaySchema, automationExecutionStatusSchema, automationListQuerySchema, automationListSchema, automationParamsSchema, automationRunListSchema, automationRunSchema, automationRunWindowsSchema, automationScheduleIntentSchema, automationSchedulePreviewSchema, automationSummarySchema, automationUpdateSchema, automationVersionActivateSchema, automationVersionListSchema, automationVersionParamsSchema, automationVersionSchema, baselineSnapshotSchema, cancelConversationPendingMessagesBodySchema, cancelConversationPendingMessagesResponseSchema, codeActivityDaySchema, codeChangeSummaryReportSchema, codeChangeSummarySchema, codeOverviewReportSchema, codePersonReportSchema, codeRepositoryParamsSchema, codeRepositoryReportSchema, codeRepositorySummarySchema, connectionListSchema, connectionParamsSchema, connectionSchema, conversationActivityPreviewSchema, conversationAuxiliaryCostsSchema, conversationChildAgentSchema, conversationChildAgentTotalsSchema, conversationChildAgentsReportSchema, conversationDetailQuerySchema, conversationDetailReportSchema, conversationEventHistorySchema, conversationEventPageSchema, conversationEventsQuerySchema, conversationFeedQuerySchema, conversationFeedSchema, conversationParamsSchema, conversationPendingAuthorizationSchema, conversationPendingMessageDeliverySchema, conversationPendingMessageSchema, conversationPendingMessagesReportSchema, conversationReportEventDataSchema, conversationReportEventSchema, conversationStatsReportSchema, conversationSummaryReportSchema, conversationTurnFailureCodeSchema, conversationTurnFailureReasonSchema, createConversationBodySchema, createConversationMessageBodySchema, createPersonalTokenBodySchema, createdPersonalTokenSchema, dailyConversationActivitySchema, deleteWorkspaceResponseSchema, disconnectConnectionResponseSchema, disconnectServiceAccountResponseSchema, eventAutomationSummarySchema, forkConversationBodySchema, forkConversationResponseSchema, healthReportSchema, locationActivityDayReportSchema, locationDetailReportSchema, locationDirectoryReportSchema, locationParamsSchema, messageCardText, personParamsSchema, personalSpendReportSchema, personalTokenListSchema, personalTokenMetadataSchema, personalTokenParamsSchema, pluginOperationalReportFeedSchema, pluginOperationalReportSchema, pluginPackageContentItemReportSchema, pluginPackageContentReportSchema, pluginSchema, pluginsSchema, resolveMessageCards, revokePersonalTokenResponseSchema, runtimeInfoReportSchema, scheduledAutomationSummarySchema, serviceAccountListSchema, serviceAccountParamsSchema, serviceAccountSchema, skillReportSchema, skillReportsSchema, startConnectionResponseSchema, startServiceAccountSignInResponseSchema, statSchema, statsReportSchema, stopConversationTurnResponseSchema, webMessageId, workspaceBodySchema, workspaceListSchema, workspaceParamsSchema, workspaceRepoSchema, workspaceSchema };