@sentry/junior 0.258.0 → 0.260.0

package/dist/{profile-DpYjfKke.js → profile-ByWkAY7L.js}

@@ -1,11 +1,7 @@
-import { S as toOptionalTrimmed } from "./client-DbyHuMFU.js";
-import { b as setSpanStatus, y as setSpanAttributes } from "./logging-DsHONhVm.js";
-import { i as getChatConfig } from "./config-_WO_AjCB.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-BN4DVxco.js";
+import { C as toOptionalTrimmed } from "./client-JeyzRwsT.js";
+import { b as setSpanStatus, y as setSpanAttributes } from "./logging-DSMmkHXG.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-Bpcs2b2L.js";
 import { createHash } from "node:crypto";
-import { createMemoryState } from "@chat-adapter/state-memory";
-import { createRedisState } from "@chat-adapter/state-redis";
-import { setTimeout as setTimeout$1 } from "node:timers/promises";
 // src/chat/sandbox/paths.ts
 function normalizeWorkspaceRoot(input) {
 	const candidate = (input ?? "").trim();
@@ -28,291 +24,6 @@ function sandboxSkillPathResolution(skillName) {
 	const skillDir = sandboxSkillDir(skillName);
 	return `Resolve relative paths in this skill against ${skillDir}. For bash commands from this skill, cd to ${skillDir} first or use absolute paths.`;
 }
-// src/chat/sleep.ts
-/** Wait for a duration, rejecting with the owning signal reason when cancelled. */
-function sleep(ms, signal) {
-	if (!signal) return new Promise((resolve) => setTimeout(resolve, ms));
-	return new Promise((resolve, reject) => {
-		if (signal.aborted) {
-			reject(signal.reason);
-			return;
-		}
-		const timeoutId = setTimeout(() => {
-			signal.removeEventListener("abort", onAbort);
-			resolve();
-		}, ms);
-		const onAbort = () => {
-			clearTimeout(timeoutId);
-			reject(signal.reason);
-		};
-		signal.addEventListener("abort", onAbort, { once: true });
-	});
-}
-// src/chat/state/locks.ts
-const ACTIVE_LOCK_TTL_MS = 9e4;
-const MUTATION_LOCK_TTL_MS = 1e4;
-/**
-* Acquire a lock for long-running work that the queued state adapter should
-* keep alive while the owning invocation is still making progress.
-*/
-async function acquireActiveLock(state, threadId) {
-	return await state.acquireLock(threadId, ACTIVE_LOCK_TTL_MS);
-}
-/**
-* Run work under one lock, optionally waiting for the current owner.
-* `keepAlive` is for multi-store mutations that must retain ownership until all
-* side effects finish; callers should still fence each blind write.
-*/
-async function withLock(state, key, run, options = {}) {
-	const startedAtMs = Date.now();
-	let lock;
-	while (true) {
-		lock = await state.acquireLock(key, options.ttlMs ?? 9e4);
-		if (lock) break;
-		if (Date.now() - startedAtMs >= (options.waitMs ?? 0)) return { acquired: false };
-		await setTimeout$1(options.retryMs ?? 25, void 0, { ref: false });
-	}
-	const ttlMs = options.ttlMs ?? 9e4;
-	const heartbeat = options.keepAlive ? setInterval(() => {
-		state.extendLock(lock, ttlMs);
-	}, Math.max(1, Math.floor(ttlMs / 3))) : void 0;
-	heartbeat?.unref();
-	try {
-		return {
-			acquired: true,
-			value: await run(lock)
-		};
-	} finally {
-		if (heartbeat) clearInterval(heartbeat);
-		await state.releaseLock(lock);
-	}
-}
-/**
-* Prove lock ownership immediately before a blind write.
-*
-* Whole-record mutations must stop if their lock expired rather than overwrite
-* state committed by a newer owner.
-*/
-async function fenceLock(state, lock, ttlMs = MUTATION_LOCK_TTL_MS) {
-	if (!await state.extendLock(lock, ttlMs)) throw new Error(`Lock ownership was lost before write for ${lock.threadId}`);
-}
-// src/chat/state/adapter.ts
-const ACTIVE_LOCK_HEARTBEAT_MS = 3e4;
-let stateAdapter;
-let redisStateAdapter;
-/** Lazily connect state operations, including queued-adapter lock heartbeats. */
-function createConnectingStateAdapter(base) {
-	const connected = async (operation) => {
-		await base.connect();
-		return await operation();
-	};
-	return {
-		appendToList: (key, value, options) => connected(() => base.appendToList(key, value, options)),
-		connect: () => base.connect(),
-		disconnect: () => base.disconnect(),
-		subscribe: (threadId) => connected(() => base.subscribe(threadId)),
-		unsubscribe: (threadId) => connected(() => base.unsubscribe(threadId)),
-		isSubscribed: (threadId) => connected(() => base.isSubscribed(threadId)),
-		acquireLock: (threadId, ttlMs) => connected(() => base.acquireLock(threadId, ttlMs)),
-		releaseLock: (lock) => connected(() => base.releaseLock(lock)),
-		extendLock: (lock, ttlMs) => connected(() => base.extendLock(lock, ttlMs)),
-		forceReleaseLock: (threadId) => connected(() => base.forceReleaseLock(threadId)),
-		enqueue: (threadId, entry, maxSize) => connected(() => base.enqueue(threadId, entry, maxSize)),
-		dequeue: (threadId) => connected(() => base.dequeue(threadId)),
-		queueDepth: (threadId) => connected(() => base.queueDepth(threadId)),
-		get: (key) => connected(() => base.get(key)),
-		getList: (key) => connected(() => base.getList(key)),
-		set: (key, value, ttlMs) => connected(() => base.set(key, value, ttlMs)),
-		setIfNotExists: (key, value, ttlMs) => connected(() => base.setIfNotExists(key, value, ttlMs)),
-		delete: (key) => connected(() => base.delete(key))
-	};
-}
-function createPrefixedStateAdapter(base, prefix) {
-	const prefixed = (value) => `${prefix}:${value}`;
-	const unprefixed = (value) => value.startsWith(`${prefix}:`) ? value.slice(prefix.length + 1) : value;
-	const prefixLock = (lock) => ({
-		...lock,
-		threadId: prefixed(lock.threadId)
-	});
-	const unprefixLock = (lock) => ({
-		...lock,
-		threadId: unprefixed(lock.threadId)
-	});
-	return {
-		appendToList: (key, value, options) => base.appendToList(prefixed(key), value, options),
-		connect: () => base.connect(),
-		disconnect: () => base.disconnect(),
-		subscribe: (threadId) => base.subscribe(prefixed(threadId)),
-		unsubscribe: (threadId) => base.unsubscribe(prefixed(threadId)),
-		isSubscribed: (threadId) => base.isSubscribed(prefixed(threadId)),
-		acquireLock: async (threadId, ttlMs) => {
-			const lock = await base.acquireLock(prefixed(threadId), ttlMs);
-			return lock ? unprefixLock(lock) : null;
-		},
-		releaseLock: (lock) => base.releaseLock(prefixLock(lock)),
-		extendLock: async (lock, ttlMs) => {
-			const prefixedLock = prefixLock(lock);
-			const extended = await base.extendLock(prefixedLock, ttlMs);
-			if (extended) lock.expiresAt = prefixedLock.expiresAt;
-			return extended;
-		},
-		forceReleaseLock: (threadId) => base.forceReleaseLock(prefixed(threadId)),
-		enqueue: (threadId, entry, maxSize) => base.enqueue(prefixed(threadId), entry, maxSize),
-		dequeue: (threadId) => base.dequeue(prefixed(threadId)),
-		queueDepth: (threadId) => base.queueDepth(prefixed(threadId)),
-		get: (key) => base.get(prefixed(key)),
-		getList: (key) => base.getList(prefixed(key)),
-		set: (key, value, ttlMs) => base.set(prefixed(key), value, ttlMs),
-		setIfNotExists: (key, value, ttlMs) => base.setIfNotExists(prefixed(key), value, ttlMs),
-		delete: (key) => base.delete(prefixed(key))
-	};
-}
-function createQueuedStateAdapter(base, options) {
-	const heartbeats = /* @__PURE__ */ new Map();
-	const shouldHeartbeatLock = (ttlMs) => ttlMs === ACTIVE_LOCK_TTL_MS;
-	const heartbeatKey = (lock) => `${lock.threadId}:${lock.token}`;
-	const stopHeartbeatByKey = (key) => {
-		const heartbeat = heartbeats.get(key);
-		if (!heartbeat) return;
-		clearInterval(heartbeat.timer);
-		heartbeats.delete(key);
-	};
-	const stopHeartbeat = (lock) => {
-		stopHeartbeatByKey(heartbeatKey(lock));
-	};
-	const stopHeartbeatsForThread = (threadId) => {
-		for (const [key, heartbeat] of heartbeats) if (heartbeat.lock.threadId === threadId) stopHeartbeatByKey(key);
-	};
-	const stopAllHeartbeats = () => {
-		for (const key of heartbeats.keys()) stopHeartbeatByKey(key);
-	};
-	const runHeartbeat = async (key) => {
-		const heartbeat = heartbeats.get(key);
-		if (!heartbeat || heartbeat.inFlight) return;
-		heartbeat.inFlight = true;
-		try {
-			if (Date.now() - heartbeat.startedAtMs >= options.activeLockMaxAgeMs) {
-				stopHeartbeatByKey(key);
-				return;
-			}
-			if (!await base.extendLock(heartbeat.lock, heartbeat.ttlMs)) {
-				stopHeartbeatByKey(key);
-				return;
-			}
-			heartbeat.lock.expiresAt = Date.now() + heartbeat.ttlMs;
-		} catch {} finally {
-			const current = heartbeats.get(key);
-			if (current === heartbeat) current.inFlight = false;
-		}
-	};
-	const startOrUpdateHeartbeat = (lock, ttlMs) => {
-		const key = heartbeatKey(lock);
-		const existing = heartbeats.get(key);
-		if (existing) {
-			existing.ttlMs = ttlMs;
-			return;
-		}
-		const timer = setInterval(() => {
-			runHeartbeat(key);
-		}, ACTIVE_LOCK_HEARTBEAT_MS);
-		timer.unref?.();
-		heartbeats.set(key, {
-			inFlight: false,
-			lock,
-			startedAtMs: Date.now(),
-			timer,
-			ttlMs
-		});
-	};
-	const acquireLock = async (threadId, ttlMs) => {
-		const lock = await base.acquireLock(threadId, ttlMs);
-		if (lock && shouldHeartbeatLock(ttlMs)) startOrUpdateHeartbeat(lock, ttlMs);
-		return lock;
-	};
-	return {
-		appendToList: (key, value, options) => base.appendToList(key, value, options),
-		connect: () => base.connect(),
-		disconnect: async () => {
-			stopAllHeartbeats();
-			await base.disconnect();
-		},
-		subscribe: (threadId) => base.subscribe(threadId),
-		unsubscribe: (threadId) => base.unsubscribe(threadId),
-		isSubscribed: (threadId) => base.isSubscribed(threadId),
-		acquireLock,
-		releaseLock: async (lock) => {
-			stopHeartbeat(lock);
-			await base.releaseLock(lock);
-		},
-		extendLock: async (lock, ttlMs) => {
-			const extended = await base.extendLock(lock, ttlMs);
-			if (extended) {
-				lock.expiresAt = Date.now() + ttlMs;
-				if (shouldHeartbeatLock(ttlMs)) startOrUpdateHeartbeat(lock, ttlMs);
-				else stopHeartbeat(lock);
-			} else stopHeartbeat(lock);
-			return extended;
-		},
-		forceReleaseLock: async (threadId) => {
-			stopHeartbeatsForThread(threadId);
-			await base.forceReleaseLock(threadId);
-		},
-		enqueue: (threadId, entry, maxSize) => base.enqueue(threadId, entry, maxSize),
-		dequeue: (threadId) => base.dequeue(threadId),
-		queueDepth: (threadId) => base.queueDepth(threadId),
-		get: (key) => base.get(key),
-		getList: (key) => base.getList(key),
-		set: (key, value, ttlMs) => base.set(key, value, ttlMs),
-		setIfNotExists: (key, value, ttlMs) => base.setIfNotExists(key, value, ttlMs),
-		delete: (key) => base.delete(key)
-	};
-}
-function withOptionalPrefix(base, prefix) {
-	return prefix ? createPrefixedStateAdapter(base, prefix) : base;
-}
-function createStateAdapter() {
-	const config = getChatConfig();
-	const activeLockMaxAgeMs = config.bot.turnTimeoutMs + ACTIVE_LOCK_TTL_MS;
-	if (config.state.adapter === "memory") {
-		redisStateAdapter = void 0;
-		return createQueuedStateAdapter(createConnectingStateAdapter(withOptionalPrefix(createMemoryState(), config.state.keyPrefix)), { activeLockMaxAgeMs });
-	}
-	if (!config.state.redisUrl) throw new Error("REDIS_URL is required for durable Slack thread state");
-	const redisState = createRedisState({ url: config.state.redisUrl });
-	redisStateAdapter = redisState;
-	return createQueuedStateAdapter(createConnectingStateAdapter(withOptionalPrefix(redisState, config.state.keyPrefix)), { activeLockMaxAgeMs });
-}
-function getOptionalRedisStateAdapter() {
-	getStateAdapter();
-	return redisStateAdapter;
-}
-async function getConnectedStateContext() {
-	const adapter = getStateAdapter();
-	await adapter.connect();
-	return {
-		redisStateAdapter: getOptionalRedisStateAdapter(),
-		stateAdapter: adapter
-	};
-}
-/** Return the Redis adapter only when the caller is using the default state adapter. */
-async function getDefaultRedisStateAdapterFor(adapter) {
-	if (adapter !== stateAdapter) return;
-	const context = await getConnectedStateContext();
-	return context.stateAdapter === adapter ? context.redisStateAdapter : void 0;
-}
-function getStateAdapter() {
-	if (!stateAdapter) stateAdapter = createStateAdapter();
-	return stateAdapter;
-}
-async function disconnectStateAdapter() {
-	if (!stateAdapter) return;
-	try {
-		await stateAdapter.disconnect();
-	} finally {
-		stateAdapter = void 0;
-		redisStateAdapter = void 0;
-	}
-}
 // src/chat/sandbox/noninteractive-command.ts
 const NON_INTERACTIVE_ENV = {
 	CI: "1",
@@ -378,6 +89,26 @@ async function runNonInteractiveCommand(sandbox, input) {
 	};
 	return await sandbox.runCommand(command);
 }
+// src/chat/sleep.ts
+/** Wait for a duration, rejecting with the owning signal reason when cancelled. */
+function sleep(ms, signal) {
+	if (!signal) return new Promise((resolve) => setTimeout(resolve, ms));
+	return new Promise((resolve, reject) => {
+		if (signal.aborted) {
+			reject(signal.reason);
+			return;
+		}
+		const timeoutId = setTimeout(() => {
+			signal.removeEventListener("abort", onAbort);
+			resolve();
+		}, ms);
+		const onAbort = () => {
+			clearTimeout(timeoutId);
+			reject(signal.reason);
+		};
+		signal.addEventListener("abort", onAbort, { once: true });
+	});
+}
 // src/chat/sandbox/credentials.ts
 /**
 * Resolve explicit Vercel Sandbox credentials, or return undefined to let
@@ -841,4 +572,4 @@ function isStale(profile, createdAtMs) {
 	const maxAgeMs = floatingMaxAgeMs();
 	return maxAgeMs === 0 || Date.now() - createdAtMs > maxAgeMs;
 }
-export { SANDBOX_DATA_ROOT as A, getDefaultRedisStateAdapterFor as C, fenceLock as D, acquireActiveLock as E, sandboxSkillFile as F, sandboxSkillPathResolution as I, SANDBOX_SKILLS_ROOT as M, SANDBOX_WORKSPACE_ROOT as N, withLock as O, sandboxSkillDir as P, disconnectStateAdapter as S, MUTATION_LOCK_TTL_MS as T, workspaceSnapshotNotReadyUserMessage as _, isAbortError as a, buildNonInteractiveShellScript as b, isSandboxCommandStreamInterruptedError as c, isSnapshottingError as d, throwSandboxOperationError as f, isWorkspaceSnapshotNotReadyError as g, getWorkspaceSnapshotNotReadyError as h, ensureDockerDaemon as i, SANDBOX_REPOS_ROOT as j, sleep as k, isSandboxMissingError as l, WorkspaceSnapshotNotReadyError as m, hash as n, isAlreadyExistsError as o, wrapSandboxSetupError as p, isStale as r, isSandboxApiTransientError as s, create as t, isSandboxUnavailableError as u, getVercelSandboxCredentials as v, getStateAdapter as w, runNonInteractiveCommand as x, buildCommandScript as y };
+export { SANDBOX_DATA_ROOT as C, sandboxSkillDir as D, SANDBOX_WORKSPACE_ROOT as E, sandboxSkillFile as O, runNonInteractiveCommand as S, SANDBOX_SKILLS_ROOT as T, workspaceSnapshotNotReadyUserMessage as _, isAbortError as a, buildCommandScript as b, isSandboxCommandStreamInterruptedError as c, isSnapshottingError as d, throwSandboxOperationError as f, isWorkspaceSnapshotNotReadyError as g, getWorkspaceSnapshotNotReadyError as h, ensureDockerDaemon as i, sandboxSkillPathResolution as k, isSandboxMissingError as l, WorkspaceSnapshotNotReadyError as m, hash as n, isAlreadyExistsError as o, wrapSandboxSetupError as p, isStale as r, isSandboxApiTransientError as s, create as t, isSandboxUnavailableError as u, getVercelSandboxCredentials as v, SANDBOX_REPOS_ROOT as w, buildNonInteractiveShellScript as x, sleep as y };

package/dist/{prompt-xgpyMtg7.js → prompt-DeVax2qO.js}

@@ -1,4 +1,4 @@
-import { H as conversationBriefSchema, U as parseBriefInput, V as briefOutcomeStatusSchema } from "./conversation-DjN3mlog.js";
+import { J as parseBriefInput, K as briefOutcomeStatusSchema, q as conversationBriefSchema } from "./conversation-CvuKJ3tA.js";
 import { z } from "zod";
 // src/chat/briefs/generate.ts
 const MAX_INPUT_CHARS = 6e4;

package/dist/{registry-Du566MtJ.js → registry-BL-osYWN.js}

@@ -1,4 +1,4 @@
-import { m as logWarn, p as logInfo, y as setSpanAttributes } from "./logging-DsHONhVm.js";
+import { m as logWarn, p as logInfo, y as setSpanAttributes } from "./logging-DSMmkHXG.js";
 import { a as isUserActor, o as parseActorUserId } from "./actor-tlxzqaRe.js";
 import { n as normalizePluginPackageNames, o as pluginRoots, t as discoverInstalledPluginPackageContent } from "./package-discovery-DJBompdd.js";
 import path from "node:path";
@@ -49,6 +49,13 @@ function mcpOauthClientSource(oauthClient) {
 	setDefined$1(result, "authorize-params", oauthClient.authorizeParams);
 	return result;
 }
+/** Convert a camelCase `accounts` block to its plugin.yaml source keys. */
+function accountsSource(accounts) {
+	const result = {};
+	setDefined$1(result, "user-oauth", accounts.userOAuth);
+	setDefined$1(result, "service-account", accounts.serviceAccount);
+	return result;
+}
 function inlineMcpSource(mcp) {
 	if (mcp === void 0 || !isRecord(mcp)) return mcp;
 	const result = {};
@@ -99,6 +106,7 @@ function inlineManifestSource(manifest) {
 	setDefined$1(result, "runtime-postinstall", manifest.runtimePostinstall);
 	setDefined$1(result, "mcp", inlineMcpSource(manifest.mcp));
 	setDefined$1(result, "oauth", inlineOauthSource(manifest.oauth));
+	setDefined$1(result, "accounts", manifest.accounts && accountsSource(manifest.accounts));
 	setDefined$1(result, "target", inlineTargetSource(manifest.name, manifest.target));
 	return result;
 }
@@ -249,6 +257,10 @@ const mcpOauthClientSourceSchema = z.object({
 	scope: nonEmptyTrimmedString.optional(),
 	"authorize-params": stringMapSchema.optional()
 }).passthrough();
+const accountsSourceSchema = z.object({
+	"user-oauth": z.boolean().optional(),
+	"service-account": z.object({ tools: nonEmptyStringArraySchema("tools") }).strict().optional()
+}).strict();
 const mcpSourceSchema = z.object({
 	transport: nonEmptyTrimmedString.refine((value) => value === "http", { error: "must be \"http\"" }).optional(),
 	url: httpsUrlString,
@@ -277,6 +289,7 @@ const manifestSourceSchema = z.object({
 	"env-vars": z.record(z.string(), z.unknown(), { error: "must be an object" }).optional(),
 	mcp: z.record(z.string(), z.unknown(), { error: "must be an object" }).optional(),
 	oauth: z.record(z.string(), z.unknown(), { error: "must be an object" }).optional(),
+	accounts: z.record(z.string(), z.unknown(), { error: "must be an object" }).optional(),
 	target: z.record(z.string(), z.unknown(), { error: "must be an object" }).optional()
 }).passthrough();
 function setDefined(target, key, value) {
@@ -335,6 +348,7 @@ function manifestConfigPatch(config) {
 			result.oauth = oauth;
 		}
 	}
+	if (config.accounts !== void 0) result.accounts = config.accounts && accountsSource(config.accounts);
 	if (config.target !== void 0) {
 		if (!config.target) result.target = null;
 		else {
@@ -620,6 +634,28 @@ function normalizeMcp(data, envVars, name) {
 		...result.data["wrapped-tools"] ? { wrappedTools: result.data["wrapped-tools"] } : void 0
 	};
 }
+/**
+* Validate which accounts the plugin may use against the surfaces that
+* support them. Today only MCP OAuth stores a service account.
+*/
+function normalizeAccounts(data, mcp, name) {
+	const result = accountsSourceSchema.safeParse(data);
+	if (!result.success) throw new Error(issueMessage(result.error, `Plugin ${name} accounts`));
+	const userOAuth = result.data["user-oauth"];
+	const serviceAccount = result.data["service-account"];
+	if (userOAuth === false && !serviceAccount) throw new Error(`Plugin ${name} accounts.user-oauth false requires accounts.service-account`);
+	if (!serviceAccount) return;
+	if (!mcp || mcp.auth || mcp.oauthClient) throw new Error(`Plugin ${name} accounts.service-account requires mcp without auth or oauth-client`);
+	if (mcp.allowedTools) {
+		const loadedTools = /* @__PURE__ */ new Set([...mcp.allowedTools, ...mcp.wrappedTools ?? []]);
+		const unknownTools = serviceAccount.tools.filter((tool) => !loadedTools.has(tool));
+		if (unknownTools.length > 0) throw new Error(`Plugin ${name} accounts.service-account.tools must be listed in mcp.allowed-tools or mcp.wrapped-tools: ${unknownTools.join(", ")}`);
+	}
+	return {
+		...userOAuth === false ? { userOAuth } : void 0,
+		serviceAccount: { tools: serviceAccount.tools }
+	};
+}
 function parseManifestSource(parsedSource, dir, config, options) {
 	const source = applyManifestConfig(parsedSource, config);
 	const sourceResult = manifestSourceSchema.safeParse(source);
@@ -638,6 +674,7 @@ function parseManifestSource(parsedSource, dir, config, options) {
 		if (path === "env-vars") throw new Error(`Plugin ${String(parsedSource.name ?? "unknown")} env-vars must be an object`);
 		if (path === "mcp") throw new Error(`Plugin ${String(parsedSource.name ?? "unknown")} mcp must be an object`);
 		if (path === "oauth") throw new Error(`Plugin ${String(parsedSource.name ?? "unknown")} oauth must be an object`);
+		if (path === "accounts") throw new Error(`Plugin ${String(parsedSource.name ?? "unknown")} accounts must be an object`);
 		if (path === "target") throw new Error(`Plugin ${String(parsedSource.name ?? "unknown")} target must be an object`);
 		throw new Error(issue?.message ?? `Invalid plugin manifest in ${dir}`);
 	}
@@ -656,6 +693,7 @@ function parseManifestSource(parsedSource, dir, config, options) {
 	const runtimeDependencies = data["runtime-dependencies"] ? normalizeRuntimeDependencies(data["runtime-dependencies"], data.name) : void 0;
 	const runtimePostinstall = data["runtime-postinstall"] ? normalizeRuntimePostinstall(data["runtime-postinstall"], data.name) : void 0;
 	const mcp = data.mcp ? normalizeMcp(data.mcp, envVars, data.name) : void 0;
+	const accounts = data.accounts ? normalizeAccounts(data.accounts, mcp, data.name) : void 0;
 	const manifest = {
 		name: data.name,
 		displayName: data["display-name"],
@@ -668,7 +706,8 @@ function parseManifestSource(parsedSource, dir, config, options) {
 		...credentials ? { credentials } : void 0,
 		...runtimeDependencies ? { runtimeDependencies } : void 0,
 		...runtimePostinstall ? { runtimePostinstall } : void 0,
-		...mcp ? { mcp } : void 0
+		...mcp ? { mcp } : void 0,
+		...accounts ? { accounts } : void 0
 	};
 	if (data.oauth) {
 		if (!credentials && options?.allowHookManagedEgress !== true) throw new Error(`Plugin ${data.name} oauth requires credentials`);

package/dist/{resolve-ClCIgh8E.js → resolve-HuPG2VMB.js}

@@ -1,5 +1,6 @@
-import { T as withSpan, y as setSpanAttributes } from "./logging-DsHONhVm.js";
-import { N as SANDBOX_WORKSPACE_ROOT, k as sleep, r as isStale, t as create, u as isSandboxUnavailableError, v as getVercelSandboxCredentials, w as getStateAdapter, x as runNonInteractiveCommand } from "./profile-DpYjfKke.js";
+import { T as withSpan, y as setSpanAttributes } from "./logging-DSMmkHXG.js";
+import { r as getStateAdapter } from "./adapter-Dj5BTJRd.js";
+import { E as SANDBOX_WORKSPACE_ROOT, S as runNonInteractiveCommand, r as isStale, t as create, u as isSandboxUnavailableError, v as getVercelSandboxCredentials, y as sleep } from "./profile-ByWkAY7L.js";
 import { z } from "zod";
 import { FileSystem, Sandbox } from "@vercel/sandbox";
 // src/chat/sandbox/resources.ts
@@ -26,8 +27,12 @@ function setSandboxResourceConfig(config) {
 	configuredResources = { vcpus: config.vcpus };
 	return previous;
 }
-/** Resolve app-level sandbox sizing, falling back to the legacy environment setting. */
-function getSandboxResources() {
+/**
+* Resolve sandbox sizing. A Workspace vCPU setting wins over the app setting,
+* which wins over the legacy environment setting.
+*/
+function getSandboxResources(workspace) {
+	if (workspace?.vcpus) return { vcpus: workspace.vcpus };
 	return configuredResources ?? resourcesFromEnv();
 }
 // src/chat/sandbox/snapshot/span.ts

package/dist/{result-BBbKA61B.js → result-DS7V4a3-.js}

@@ -1,19 +1,14 @@
 import { t as __exportAll } from "./rolldown-runtime-nwUcYXjP.js";
-import { $ as getAgentInvocation, X as createAgentInvocationFromLatest, ct as isTerminalAgentInvocation, et as getAgentInvocationIdForEvents, ft as markAgentInvocationParentMailboxAppended, it as getAgentInvocationResultMessageId, nt as getAgentInvocationIdForResult, st as getLatestAgentInvocationForConversation, tt as getAgentInvocationIdForMessage } from "./agent-runner-DGsFQw72.js";
+import { Ft as listTurnSummaries, Pt as getTurnRecord } from "./tasks-CjrS098O.js";
 import { t as createActor } from "./actor-tlxzqaRe.js";
-import { f as credentialContextForActor } from "./registry-Du566MtJ.js";
-import { Q as listTurnSummaries, Z as getTurnRecord } from "./tasks-CEXKTASS.js";
-import { a as EVENT_WAIT_MS, c as timerWatchCredentialSubject, s as isEventMailboxMetadata } from "./session-stop-CIoFiwwe.js";
-import { a as EVENT_SYSTEM_ACTOR, i as EVENT_MESSAGE_AUTHOR, o as isEventConversationMessage } from "./prompt-xgpyMtg7.js";
-import { r as appendAndEnqueueInboundMessage } from "./store-DJLwq4x8.js";
-import { r as enqueueAgentInvocation } from "./work-DRcsJ3hV.js";
+import { f as credentialContextForActor } from "./registry-BL-osYWN.js";
+import { $ as getAgentInvocationIdForResult, Q as getAgentInvocationIdForMessage, X as getAgentInvocation, Z as getAgentInvocationIdForEvents, at as isTerminalAgentInvocation, it as getLatestAgentInvocationForConversation, lt as markAgentInvocationParentMailboxAppended, q as createAgentInvocationFromLatest, tt as getAgentInvocationResultMessageId } from "./agent-runner-DvTUyGTY.js";
+import { a as EVENT_SYSTEM_ACTOR, i as EVENT_MESSAGE_AUTHOR, o as isEventConversationMessage } from "./prompt-DeVax2qO.js";
+import { a as EVENT_WAIT_MS, c as isEventMailboxMetadata, l as renderEventBatchText, u as timerWatchCredentialSubject } from "./session-stop-HfKx-pky.js";
+import { r as appendAndEnqueueInboundMessage } from "./store-DzRbd5VT.js";
+import { r as enqueueAgentInvocation } from "./work-D829Ue7k.js";
 import { z } from "zod";
 import { createEventSource, createLocalSource, createWebSource } from "@sentry/junior-plugin-api";
-// src/chat/task-execution/mailbox-input.ts
-/** Join non-empty mailbox Message text for one Turn. */
-function joinMailboxText(messages) {
-	return messages.map((message) => message.input.text.trim()).filter(Boolean).join("\n\n");
-}
 // src/chat/conversations/web-mailbox.ts
 /** Parse web mailbox metadata written before Source and Actor were complete. */
 const legacyWebMailboxMetadataSchema = z.object({
@@ -405,7 +400,7 @@ async function startAgentInvocationsForChildInput(context, options) {
 		};
 		const { actor, source } = events[0];
 		const invocation = await createAgentInvocationFromLatest({
-			input: joinMailboxText(messages),
+			input: renderEventBatchText(messages),
 			invocationId: getAgentInvocationIdForEvents(messages[0].inboundMessageId),
 			latest,
 			runAs: {
@@ -456,4 +451,4 @@ async function withAgentInvocationResultActors(work) {
 		}))
 	};
 }
-export { withAgentInvocationResultActors as a, resolveMailboxTurnWork as c, legacyWebMailboxMetadataSchema as d, joinMailboxText as f, startAgentInvocationsForChildInput as i, sourceFromTurnInput as l, enqueueAgentMessageToParent as n, getAuthPausedConversationTurnId as o, result_exports as r, getEventBatchDelayMs as s, enqueueAgentInvocationResult as t, turnInputFactsFromConversationMessage as u };
+export { withAgentInvocationResultActors as a, resolveMailboxTurnWork as c, legacyWebMailboxMetadataSchema as d, startAgentInvocationsForChildInput as i, sourceFromTurnInput as l, enqueueAgentMessageToParent as n, getAuthPausedConversationTurnId as o, result_exports as r, getEventBatchDelayMs as s, enqueueAgentInvocationResult as t, turnInputFactsFromConversationMessage as u };

package/dist/{runner-CCuqFSqx.js → runner-Cba_OfGl.js}

@@ -1,14 +1,14 @@
-import { f as logException, w as withLogContext, x as setTags } from "./logging-DsHONhVm.js";
-import { c as getConversationEventStore, u as getConversationStore } from "./viewer-CGvvRqKp.js";
-import { f as credentialContextForActor } from "./registry-Du566MtJ.js";
-import { $t as buildConversationContext, Gt as persistConversationMessages, It as recordAuthorizationCompleted, Wt as hydrateConversationMessages, an as normalizeConversationText, cn as upsertConversationMessage, et as persistWithRetry, in as markConversationMessage, kt as loadProjection, on as recordDeliveredAssistantMessage, q as saveTurnCheckpoint, wt as commitAcceptedReply } from "./tasks-CEXKTASS.js";
-import { K as messageCardText } from "./conversation-DjN3mlog.js";
-import { f as markTurnFailed, p as startActiveTurn, t as authorizationId } from "./oauth-authorization-djQn5Nhy.js";
-import { n as getAssistantReplyText } from "./assistant-reply-H1M-91oF.js";
-import { n as scheduleSessionCompletedPluginTasks, t as processPluginTask } from "./task-runner-D3qJh4fK.js";
-import { t as ConversationTurnLifecycleService } from "./turn-lifecycle-C9JFst7-.js";
-import { n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-W3f6kAtz.js";
-import { d as loadPendingMessageCards, i as completeAuthPauseTurn, l as buildDeliveredTurnStatePatch, t as finalizeFailedTurnReplyWithEvent } from "./turn-failure-response-CWx7aNIh.js";
+import { At as saveTurnCheckpoint, I as loadProjection, Q as persistConversationMessages, U as recordAuthorizationCompleted, Wt as persistWithRetry, Z as hydrateConversationMessages, dt as markConversationMessage, ft as normalizeConversationText, ht as upsertConversationMessage, j as commitAcceptedReply, ot as buildConversationContext, pt as recordDeliveredAssistantMessage, yt as authorizationId } from "./tasks-CjrS098O.js";
+import { f as logException, w as withLogContext, x as setTags } from "./logging-DSMmkHXG.js";
+import { c as getConversationEventStore, u as getConversationStore } from "./viewer-C-J0ewlH.js";
+import { f as credentialContextForActor } from "./registry-BL-osYWN.js";
+import { It as markTurnFailed, Lt as startActiveTurn } from "./agent-runner-DvTUyGTY.js";
+import { P as messageCardText } from "./conversation-CvuKJ3tA.js";
+import { n as getAssistantReplyText } from "./assistant-reply-CEOMzsWy.js";
+import { n as scheduleSessionCompletedPluginTasks, t as processPluginTask } from "./task-runner-DGnd_B5X.js";
+import { t as ConversationTurnLifecycleService } from "./turn-lifecycle-DYv8IV6w.js";
+import { n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-CqkYowEz.js";
+import { d as loadPendingMessageCards, i as completeAuthPauseTurn, l as buildDeliveredTurnStatePatch, t as finalizeFailedTurnReplyWithEvent } from "./turn-failure-response-BkKmGqFt.js";
 import { randomUUID } from "node:crypto";
 import { createLocalSource, localDestinationSchema } from "@sentry/junior-plugin-api";
 // src/chat/local/runner.ts

package/dist/{sandbox-egress-signals-DY1mbKF4.js → sandbox-egress-signals-C7NcPzea.js}

@@ -1,4 +1,4 @@
-import { Mt as sandboxEgressSignalsResponseSchema } from "./agent-runner-DGsFQw72.js";
+import { Mn as sandboxEgressSignalsResponseSchema } from "./tasks-CjrS098O.js";
 // src/chat/local/sandbox-egress-signals.ts
 const SANDBOX_EGRESS_SIGNALS_PATH = "/api/internal/sandbox-egress/signals";
 const LOCAL_DEV_SERVER_TIMEOUT_MS = 1e3;