@sentry/junior 0.74.0 → 0.75.0

package/dist/{chunk-HYHKTFG2.js → chunk-VNTLUFTY.js}

@@ -1,851 +1,41 @@
 import {
-  createNeonJuniorSqlExecutor,
   createSqlStore,
   createStateConversationStore
-} from "./chunk-JL2SLRAT.js";
+} from "./chunk-UJ7OTHPO.js";
 import {
-  isConversationChannel,
-  isConversationScopedChannel,
-  isDmChannel,
-  normalizeSlackConversationId,
   parseDestination
-} from "./chunk-YRDS7VKO.js";
+} from "./chunk-WBZ4M5N5.js";
+import {
+  createJuniorSqlExecutor
+} from "./chunk-D7NFH5GD.js";
 import {
   SANDBOX_DATA_ROOT,
   SANDBOX_WORKSPACE_ROOT,
   sandboxSkillDir
 } from "./chunk-G3E7SCME.js";
-import {
-  listReferenceFiles,
-  soulPathCandidates,
-  worldPathCandidates
-} from "./chunk-KVZL5NZS.js";
 import {
   getConnectedStateContext,
   getStateAdapter
-} from "./chunk-F6HWCPOC.js";
+} from "./chunk-ZNNTSPNF.js";
 import {
   TURN_CONTEXT_TAG,
   botConfig,
   getChatConfig
-} from "./chunk-GM7HTXYC.js";
+} from "./chunk-FCZO7LAR.js";
+import {
+  listReferenceFiles,
+  soulPathCandidates,
+  worldPathCandidates
+} from "./chunk-Q3XNY442.js";
 import {
-  isActorUserId,
-  parseActorUserId,
   parseStoredSlackRequester,
   storedSlackRequesterSchema
-} from "./chunk-CYUI7JU5.js";
+} from "./chunk-EIYL7I4S.js";
 import {
   isRecord,
-  logException,
   logInfo,
   logWarn
-} from "./chunk-3BYAPS6B.js";
-
-// src/chat/plugins/logging.ts
-function createAgentPluginLogger(plugin) {
-  return {
-    info(message, metadata) {
-      logInfo(
-        "agent_plugin_log_info",
-        {},
-        { "app.plugin.name": plugin, ...metadata },
-        message
-      );
-    },
-    warn(message, metadata) {
-      logWarn(
-        "agent_plugin_log_warn",
-        {},
-        { "app.plugin.name": plugin, ...metadata },
-        message
-      );
-    },
-    error(message, metadata) {
-      logException(
-        new Error(message),
-        "agent_plugin_log_error",
-        {},
-        { "app.plugin.name": plugin, ...metadata },
-        message
-      );
-    }
-  };
-}
-
-// src/chat/plugins/state.ts
-import { createHash } from "crypto";
-var MAX_PLUGIN_STATE_KEY_LENGTH = 512;
-function hashKeyPart(value) {
-  return createHash("sha256").update(value).digest("hex").slice(0, 32);
-}
-function pluginStateKey(plugin, key2) {
-  return `junior:plugin_state:${hashKeyPart(plugin)}:${hashKeyPart(key2)}`;
-}
-function validatePluginStateKey(key2) {
-  if (!key2.trim()) {
-    throw new Error("Plugin state key is required");
-  }
-  if (key2.length > MAX_PLUGIN_STATE_KEY_LENGTH) {
-    throw new Error("Plugin state key exceeds the maximum length");
-  }
-}
-function legacyStateKey(key2, options) {
-  for (const prefix of options?.legacyStatePrefixes ?? []) {
-    const trimmed = prefix.trim();
-    if (!trimmed) {
-      continue;
-    }
-    if (key2 === trimmed || key2.startsWith(`${trimmed}:`)) {
-      return key2;
-    }
-  }
-  return void 0;
-}
-function createPluginState(plugin, options) {
-  return {
-    async delete(key2) {
-      validatePluginStateKey(key2);
-      const state = getStateAdapter();
-      await state.connect();
-      await state.delete(pluginStateKey(plugin, key2));
-      const legacyKey = legacyStateKey(key2, options);
-      if (legacyKey) {
-        await state.delete(legacyKey);
-      }
-    },
-    async get(key2) {
-      validatePluginStateKey(key2);
-      const state = getStateAdapter();
-      await state.connect();
-      const value = await state.get(pluginStateKey(plugin, key2));
-      if (value !== null && value !== void 0) {
-        return value;
-      }
-      const legacyKey = legacyStateKey(key2, options);
-      return legacyKey ? await state.get(legacyKey) ?? void 0 : void 0;
-    },
-    async set(key2, value, ttlMs) {
-      validatePluginStateKey(key2);
-      const state = getStateAdapter();
-      await state.connect();
-      await state.set(pluginStateKey(plugin, key2), value, ttlMs);
-    },
-    async setIfNotExists(key2, value, ttlMs) {
-      validatePluginStateKey(key2);
-      const state = getStateAdapter();
-      await state.connect();
-      const legacyKey = legacyStateKey(key2, options);
-      if (legacyKey) {
-        const existing = await state.get(legacyKey);
-        if (existing !== null && existing !== void 0) {
-          return false;
-        }
-      }
-      return await state.setIfNotExists(
-        pluginStateKey(plugin, key2),
-        value,
-        ttlMs
-      );
-    },
-    async withLock(key2, ttlMs, callback) {
-      validatePluginStateKey(key2);
-      const state = getStateAdapter();
-      await state.connect();
-      const lockKey = legacyStateKey(key2, options) ?? pluginStateKey(plugin, key2);
-      const lock = await state.acquireLock(lockKey, ttlMs);
-      if (!lock) {
-        throw new Error(`Could not acquire plugin state lock for ${key2}`);
-      }
-      try {
-        return await callback();
-      } finally {
-        await state.releaseLock(lock);
-      }
-    }
-  };
-}
-
-// src/chat/tools/slack/context.ts
-function getSlackToolContext(context) {
-  if (context.source.platform !== "slack") {
-    return void 0;
-  }
-  return {
-    destination: context.destination?.platform === "slack" ? context.destination : void 0,
-    source: context.source,
-    requester: context.requester?.platform === "slack" ? context.requester : void 0,
-    destinationChannelId: context.destination?.platform === "slack" ? context.destination.channelId : void 0,
-    messageTs: context.source.messageTs,
-    sourceChannelId: context.source.channelId,
-    teamId: context.source.teamId,
-    threadTs: context.source.threadTs
-  };
-}
-
-// src/chat/credentials/subject.ts
-import { createHmac, timingSafeEqual } from "crypto";
-var CREDENTIAL_SUBJECT_HMAC_CONTEXT = "junior.credential_subject.v1";
-var CREDENTIAL_SUBJECT_SIGNATURE_VERSION = "v1";
-function getCredentialSubjectSecret() {
-  return process.env.JUNIOR_SECRET?.trim() || void 0;
-}
-function buildPayload(input) {
-  return [
-    CREDENTIAL_SUBJECT_HMAC_CONTEXT,
-    input.allowedWhen,
-    input.teamId,
-    input.channelId,
-    input.userId
-  ].join("\0");
-}
-function signPayload(secret, payload) {
-  const digest = createHmac("sha256", secret).update(payload).digest("hex");
-  return `${CREDENTIAL_SUBJECT_SIGNATURE_VERSION}=${digest}`;
-}
-function timingSafeMatch(expected, actual) {
-  const expectedBuffer = Buffer.from(expected);
-  const actualBuffer = Buffer.from(actual);
-  if (expectedBuffer.length !== actualBuffer.length) {
-    return false;
-  }
-  return timingSafeEqual(expectedBuffer, actualBuffer);
-}
-function createSlackDirectCredentialSubject(input) {
-  const channelId = normalizeSlackConversationId(input.channelId);
-  const teamId = input.teamId?.trim();
-  const userId = parseActorUserId(input.userId);
-  if (!channelId || !teamId || !userId || !isDmChannel(channelId)) {
-    return void 0;
-  }
-  return {
-    type: "user",
-    userId,
-    allowedWhen: "private-direct-conversation"
-  };
-}
-function bindSlackDirectCredentialSubject(input) {
-  const channelId = normalizeSlackConversationId(input.channelId);
-  const teamId = input.teamId.trim();
-  const secret = getCredentialSubjectSecret();
-  const { subject } = input;
-  const userId = parseActorUserId(subject.userId);
-  if (!channelId || !teamId || !secret || !isDmChannel(channelId) || subject.type !== "user" || !userId || subject.allowedWhen !== "private-direct-conversation") {
-    return void 0;
-  }
-  return {
-    type: "user",
-    userId,
-    allowedWhen: subject.allowedWhen,
-    binding: {
-      type: "slack-direct-conversation",
-      teamId,
-      channelId,
-      signature: signPayload(
-        secret,
-        buildPayload({
-          allowedWhen: subject.allowedWhen,
-          teamId,
-          channelId,
-          userId
-        })
-      )
-    }
-  };
-}
-function verifySlackDirectCredentialSubject(input) {
-  const channelId = normalizeSlackConversationId(input.channelId);
-  const secret = getCredentialSubjectSecret();
-  if (!channelId || !secret) {
-    return false;
-  }
-  const { subject } = input;
-  const binding = subject.binding;
-  if (subject.type !== "user" || !isActorUserId(subject.userId) || subject.allowedWhen !== "private-direct-conversation" || !binding || binding.type !== "slack-direct-conversation" || typeof binding.signature !== "string" || !binding.signature || binding.teamId !== input.teamId || binding.channelId !== channelId) {
-    return false;
-  }
-  const expected = signPayload(
-    secret,
-    buildPayload({
-      allowedWhen: subject.allowedWhen,
-      teamId: binding.teamId,
-      channelId: binding.channelId,
-      userId: subject.userId
-    })
-  );
-  return timingSafeMatch(expected, binding.signature);
-}
-
-// src/chat/tools/channel-capabilities.ts
-function resolveChannelCapabilities(channelId) {
-  return {
-    canCreateCanvas: isConversationScopedChannel(channelId),
-    canPostToChannel: isConversationChannel(channelId),
-    canAddReactions: isConversationScopedChannel(channelId)
-  };
-}
-
-// src/chat/plugins/agent-hooks.ts
-var AgentPluginHookDeniedError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "AgentPluginHookDeniedError";
-  }
-};
-var agentPlugins = [];
-var AGENT_PLUGIN_NAME_RE = /^[a-z][a-z0-9-]*$/;
-var AGENT_PLUGIN_TOOL_NAME_RE = /^[a-z][A-Za-z0-9]*$/;
-var OPERATIONAL_REPORT_MAX_METRICS = 8;
-var OPERATIONAL_REPORT_MAX_RECORD_SETS = 8;
-var OPERATIONAL_REPORT_MAX_FIELDS = 8;
-var OPERATIONAL_REPORT_MAX_RECORDS = 25;
-var OPERATIONAL_REPORT_MAX_LABEL_LENGTH = 80;
-var OPERATIONAL_REPORT_MAX_VALUE_LENGTH = 160;
-var AGENT_PLUGIN_ROUTE_METHODS = /* @__PURE__ */ new Set([
-  "GET",
-  "POST",
-  "PUT",
-  "PATCH",
-  "DELETE",
-  "HEAD",
-  "OPTIONS",
-  "ALL"
-]);
-function isRecord2(value) {
-  return Boolean(value && typeof value === "object" && !Array.isArray(value));
-}
-function validateLegacyStatePrefixes(plugin) {
-  const prefixes = plugin.legacyStatePrefixes;
-  if (prefixes === void 0) {
-    return;
-  }
-  if (!Array.isArray(prefixes)) {
-    throw new Error(
-      `Plugin "${plugin.name}" legacyStatePrefixes must be an array`
-    );
-  }
-  const allowedPrefix = `junior:${plugin.name}`;
-  for (const rawPrefix of prefixes) {
-    const prefix = typeof rawPrefix === "string" ? rawPrefix.trim() : "";
-    if (!prefix) {
-      throw new Error(
-        `Plugin "${plugin.name}" legacy state prefixes must be non-empty strings`
-      );
-    }
-    if (prefix !== allowedPrefix && !prefix.startsWith(`${allowedPrefix}:`)) {
-      throw new Error(
-        `Plugin "${plugin.name}" legacy state prefix "${prefix}" must stay under "${allowedPrefix}"`
-      );
-    }
-  }
-}
-function validateAgentPlugins(plugins) {
-  const seen = /* @__PURE__ */ new Set();
-  for (const plugin of plugins) {
-    if (!AGENT_PLUGIN_NAME_RE.test(plugin.name)) {
-      throw new Error(
-        `Plugin name "${plugin.name}" must be a lowercase plugin identifier`
-      );
-    }
-    if (seen.has(plugin.name)) {
-      throw new Error(`Duplicate plugin name "${plugin.name}"`);
-    }
-    seen.add(plugin.name);
-    validateLegacyStatePrefixes(plugin);
-  }
-}
-function setAgentPlugins(plugins) {
-  validateAgentPlugins(plugins);
-  const previous = agentPlugins;
-  agentPlugins = [...plugins].sort(
-    (left, right) => left.name.localeCompare(right.name)
-  );
-  return previous;
-}
-function getAgentPlugins() {
-  return [...agentPlugins];
-}
-function getAgentPluginTools(context) {
-  const tools = {};
-  for (const plugin of getAgentPlugins()) {
-    const hook = plugin.hooks?.tools;
-    if (!hook) {
-      continue;
-    }
-    const log = createAgentPluginLogger(plugin.name);
-    const destination = context.destination;
-    const slackToolContext = getSlackToolContext(context);
-    const credentialSubject = slackToolContext ? createSlackDirectCredentialSubject({
-      channelId: slackToolContext.sourceChannelId,
-      teamId: slackToolContext.teamId,
-      userId: slackToolContext.requester?.userId
-    }) : void 0;
-    const slackContext = slackToolContext ? {
-      channelCapabilities: resolveChannelCapabilities(
-        slackToolContext.sourceChannelId
-      ),
-      ...credentialSubject ? { credentialSubject } : {}
-    } : void 0;
-    const pluginContext = context.source.platform === "slack" ? {
-      plugin: { name: plugin.name },
-      log,
-      requester: context.requester?.platform === "slack" ? context.requester : void 0,
-      conversationId: context.conversationId,
-      destination: destination?.platform === "slack" ? destination : void 0,
-      slack: slackContext,
-      source: context.source,
-      userText: context.userText,
-      state: createPluginState(plugin.name, {
-        legacyStatePrefixes: plugin.legacyStatePrefixes
-      })
-    } : {
-      plugin: { name: plugin.name },
-      log,
-      requester: context.requester?.platform === "local" ? context.requester : void 0,
-      conversationId: context.conversationId,
-      destination: destination?.platform === "local" ? destination : void 0,
-      source: context.source,
-      userText: context.userText,
-      state: createPluginState(plugin.name, {
-        legacyStatePrefixes: plugin.legacyStatePrefixes
-      })
-    };
-    const pluginTools = hook(pluginContext);
-    for (const [name, tool] of Object.entries(pluginTools)) {
-      if (!AGENT_PLUGIN_TOOL_NAME_RE.test(name)) {
-        throw new Error(
-          `Plugin tool "${name}" from plugin "${plugin.name}" must be a camelCase identifier`
-        );
-      }
-      if (tools[name]) {
-        throw new Error(
-          `Duplicate plugin tool "${name}" from plugin "${plugin.name}"`
-        );
-      }
-      tools[name] = tool;
-    }
-  }
-  return tools;
-}
-function routeMethods(route, pluginName) {
-  const methods = Array.isArray(route.method) ? route.method : [route.method ?? "ALL"];
-  if (methods.length === 0) {
-    throw new Error(
-      `Plugin route "${route.path}" from plugin "${pluginName}" must declare at least one method`
-    );
-  }
-  for (const method of methods) {
-    if (!AGENT_PLUGIN_ROUTE_METHODS.has(method)) {
-      throw new Error(
-        `Plugin route "${route.path}" from plugin "${pluginName}" has invalid method "${String(method)}"`
-      );
-    }
-  }
-  if (methods.includes("ALL") && methods.length > 1) {
-    throw new Error(
-      `Plugin route "${route.path}" from plugin "${pluginName}" must not combine ALL with explicit methods`
-    );
-  }
-  return methods;
-}
-function getAgentPluginRoutes() {
-  const routes = [];
-  const seen = /* @__PURE__ */ new Set();
-  const methodsByPath = /* @__PURE__ */ new Map();
-  for (const plugin of getAgentPlugins()) {
-    const hook = plugin.hooks?.routes;
-    if (!hook) {
-      continue;
-    }
-    const log = createAgentPluginLogger(plugin.name);
-    const pluginRoutes = hook({
-      plugin: { name: plugin.name },
-      log
-    });
-    if (!Array.isArray(pluginRoutes)) {
-      throw new Error(
-        `Plugin routes hook from plugin "${plugin.name}" must return an array`
-      );
-    }
-    for (const route of pluginRoutes) {
-      if (!isRecord2(route)) {
-        throw new Error(
-          `Plugin route from plugin "${plugin.name}" must be an object`
-        );
-      }
-      if (typeof route.path !== "string" || !route.path.startsWith("/")) {
-        throw new Error(
-          `Plugin route "${route.path}" from plugin "${plugin.name}" must start with /`
-        );
-      }
-      if (typeof route.handler !== "function") {
-        throw new Error(
-          `Plugin route "${route.path}" from plugin "${plugin.name}" must provide a handler`
-        );
-      }
-      const methods = routeMethods(route, plugin.name);
-      const pathMethods = methodsByPath.get(route.path) ?? /* @__PURE__ */ new Set();
-      if (pathMethods.has("ALL") || methods.includes("ALL") && pathMethods.size > 0) {
-        throw new Error(
-          `Plugin route "${route.path}" conflicts with an ALL route for the same path`
-        );
-      }
-      for (const method of methods) {
-        const key2 = `${method}:${route.path}`;
-        if (seen.has(key2)) {
-          throw new Error(`Duplicate plugin route "${method} ${route.path}"`);
-        }
-        seen.add(key2);
-        pathMethods.add(method);
-      }
-      methodsByPath.set(route.path, pathMethods);
-      routes.push({
-        ...route,
-        pluginName: plugin.name
-      });
-    }
-  }
-  return routes;
-}
-function trustedSlackConversationUrl(pluginName, link) {
-  const url = typeof link?.url === "string" ? link.url.trim() : "";
-  if (!url) {
-    return void 0;
-  }
-  let parsed;
-  try {
-    parsed = new URL(url);
-  } catch (error) {
-    throw new Error(
-      `Plugin "${pluginName}" slackConversationLink must return an absolute http(s) URL`,
-      { cause: error }
-    );
-  }
-  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
-    throw new Error(
-      `Plugin "${pluginName}" slackConversationLink must return an absolute http(s) URL`
-    );
-  }
-  return parsed.toString();
-}
-function getAgentPluginSlackConversationLink(conversationId) {
-  for (const plugin of getAgentPlugins()) {
-    const hook = plugin.hooks?.slackConversationLink;
-    if (!hook) {
-      continue;
-    }
-    const log = createAgentPluginLogger(plugin.name);
-    const link = hook({
-      plugin: { name: plugin.name },
-      log,
-      conversationId
-    });
-    const url = trustedSlackConversationUrl(plugin.name, link);
-    if (url) {
-      return { url };
-    }
-  }
-  return void 0;
-}
-function pluginReadState(state) {
-  return {
-    get: state.get
-  };
-}
-function operationalReportText(value, maxLength) {
-  if (typeof value !== "string") {
-    return void 0;
-  }
-  const trimmed = value.trim();
-  if (!trimmed) {
-    return void 0;
-  }
-  return trimmed.length <= maxLength ? trimmed : `${trimmed.slice(0, Math.max(0, maxLength - 3))}...`;
-}
-function operationalReportTone(tone) {
-  return tone === "danger" || tone === "good" || tone === "neutral" || tone === "warning" ? tone : void 0;
-}
-function sanitizeOperationalReport(args) {
-  const metrics = args.report.metrics?.slice(0, OPERATIONAL_REPORT_MAX_METRICS).map((metric) => {
-    const label = operationalReportText(
-      metric.label,
-      OPERATIONAL_REPORT_MAX_LABEL_LENGTH
-    );
-    const value = operationalReportText(
-      metric.value,
-      OPERATIONAL_REPORT_MAX_VALUE_LENGTH
-    );
-    if (!label || !value) {
-      return void 0;
-    }
-    const sanitizedMetric = { label, value };
-    const tone = operationalReportTone(metric.tone);
-    if (tone) {
-      sanitizedMetric.tone = tone;
-    }
-    return sanitizedMetric;
-  }).filter((metric) => Boolean(metric));
-  const recordSets = args.report.recordSets?.slice(0, OPERATIONAL_REPORT_MAX_RECORD_SETS).map((recordSet, recordSetIndex) => {
-    const title2 = operationalReportText(
-      recordSet.title,
-      OPERATIONAL_REPORT_MAX_LABEL_LENGTH
-    );
-    if (!title2) {
-      return void 0;
-    }
-    const fields = recordSet.fields?.slice(0, OPERATIONAL_REPORT_MAX_FIELDS).map((field) => {
-      const key2 = operationalReportText(
-        field.key,
-        OPERATIONAL_REPORT_MAX_LABEL_LENGTH
-      );
-      const label = operationalReportText(
-        field.label,
-        OPERATIONAL_REPORT_MAX_LABEL_LENGTH
-      );
-      return key2 && label ? { key: key2, label } : void 0;
-    }).filter((field) => Boolean(field));
-    const records = recordSet.records?.slice(0, OPERATIONAL_REPORT_MAX_RECORDS).map((record, recordIndex) => {
-      const id = operationalReportText(
-        record.id,
-        OPERATIONAL_REPORT_MAX_LABEL_LENGTH
-      ) ?? `${recordSetIndex}:${recordIndex}`;
-      const values = Object.fromEntries(
-        (fields ?? []).map((field) => [
-          field.key,
-          operationalReportText(
-            record.values[field.key],
-            OPERATIONAL_REPORT_MAX_VALUE_LENGTH
-          ) ?? ""
-        ])
-      );
-      const sanitizedRecord = {
-        id,
-        values
-      };
-      const tone = operationalReportTone(record.tone);
-      if (tone) {
-        sanitizedRecord.tone = tone;
-      }
-      return sanitizedRecord;
-    });
-    const sanitizedRecordSet = { title: title2 };
-    if (fields?.length) {
-      sanitizedRecordSet.fields = fields;
-    }
-    const emptyText = operationalReportText(
-      recordSet.emptyText,
-      OPERATIONAL_REPORT_MAX_VALUE_LENGTH
-    );
-    if (emptyText) {
-      sanitizedRecordSet.emptyText = emptyText;
-    }
-    if (records?.length) {
-      sanitizedRecordSet.records = records;
-    }
-    return sanitizedRecordSet;
-  }).filter(
-    (recordSet) => Boolean(recordSet)
-  );
-  const sanitized = {
-    pluginName: args.pluginName
-  };
-  const generatedAt = operationalReportText(
-    args.report.generatedAt,
-    OPERATIONAL_REPORT_MAX_VALUE_LENGTH
-  );
-  if (generatedAt) {
-    sanitized.generatedAt = generatedAt;
-  }
-  if (recordSets?.length) {
-    sanitized.recordSets = recordSets;
-  }
-  if (metrics?.length) {
-    sanitized.metrics = metrics;
-  }
-  const title = operationalReportText(
-    args.report.title,
-    OPERATIONAL_REPORT_MAX_LABEL_LENGTH
-  );
-  if (title) {
-    sanitized.title = title;
-  }
-  return sanitized;
-}
-function failedOperationalReport(args) {
-  return {
-    generatedAt: new Date(args.nowMs).toISOString(),
-    pluginName: args.pluginName,
-    metrics: [{ label: "report", tone: "danger", value: "failed" }],
-    title: args.pluginName,
-    recordSets: [
-      {
-        emptyText: "This plugin report failed to load.",
-        title: "Error"
-      }
-    ]
-  };
-}
-async function getAgentPluginOperationalReports(nowMs, conversations) {
-  const reports = [];
-  for (const plugin of getAgentPlugins()) {
-    const hook = plugin.hooks?.operationalReport;
-    if (!hook) {
-      continue;
-    }
-    const log = createAgentPluginLogger(plugin.name);
-    try {
-      const state = createPluginState(plugin.name, {
-        legacyStatePrefixes: plugin.legacyStatePrefixes
-      });
-      const report = await hook({
-        plugin: { name: plugin.name },
-        log,
-        conversations,
-        nowMs,
-        state: pluginReadState(state)
-      });
-      if (!report) {
-        continue;
-      }
-      reports.push(
-        sanitizeOperationalReport({
-          pluginName: plugin.name,
-          report
-        })
-      );
-    } catch (error) {
-      log.error("Plugin operational report failed", {
-        error: error instanceof Error ? error.message : String(error)
-      });
-      reports.push(failedOperationalReport({ nowMs, pluginName: plugin.name }));
-    }
-  }
-  return reports;
-}
-function normalizeEnv(value) {
-  if (!isRecord2(value)) {
-    return {};
-  }
-  const env = {};
-  for (const [key2, rawValue] of Object.entries(value)) {
-    if (typeof rawValue === "string") {
-      env[key2] = rawValue;
-    }
-  }
-  return env;
-}
-function createSandboxCapability(sandbox) {
-  return {
-    root: SANDBOX_WORKSPACE_ROOT,
-    juniorRoot: `${SANDBOX_WORKSPACE_ROOT}/.junior`,
-    async readFile(filePath) {
-      return await sandbox.readFileToBuffer({ path: filePath }) ?? null;
-    },
-    async run(input) {
-      const result = await sandbox.runCommand(input);
-      const [stdout, stderr] = await Promise.all([
-        result.stdout(),
-        result.stderr()
-      ]);
-      return {
-        exitCode: result.exitCode,
-        stdout,
-        stderr
-      };
-    },
-    async writeFile(input) {
-      await sandbox.writeFiles([
-        {
-          path: input.path,
-          content: input.content,
-          ...input.mode !== void 0 ? { mode: input.mode } : {}
-        }
-      ]);
-    }
-  };
-}
-function createAgentPluginHookRunner(input = {}) {
-  const loaded = getAgentPlugins();
-  return {
-    async prepareSandbox(sandbox) {
-      const sandboxCapability = createSandboxCapability(sandbox);
-      for (const plugin of loaded) {
-        const hook = plugin.hooks?.sandboxPrepare;
-        if (!hook) {
-          continue;
-        }
-        logInfo(
-          "agent_plugin_hook_sandbox_prepare",
-          {},
-          { "app.plugin.name": plugin.name },
-          "Running agent plugin sandbox prepare hook"
-        );
-        await hook({
-          plugin: { name: plugin.name },
-          log: createAgentPluginLogger(plugin.name),
-          requester: input.requester,
-          sandbox: sandboxCapability
-        });
-      }
-    },
-    async beforeToolExecute(tool) {
-      let nextInput = { ...tool.input };
-      const env = normalizeEnv(nextInput.env);
-      for (const plugin of loaded) {
-        const hook = plugin.hooks?.beforeToolExecute;
-        if (!hook) {
-          continue;
-        }
-        let replacement;
-        let denied;
-        await hook({
-          plugin: { name: plugin.name },
-          log: createAgentPluginLogger(plugin.name),
-          requester: input.requester,
-          tool: {
-            name: tool.name,
-            input: nextInput
-          },
-          env: {
-            get(key2) {
-              return env[key2];
-            },
-            set(key2, value) {
-              env[key2] = value;
-            }
-          },
-          decision: {
-            deny(message) {
-              denied = message;
-            },
-            replaceInput(input2) {
-              replacement = input2;
-            }
-          }
-        });
-        if (denied) {
-          throw new AgentPluginHookDeniedError(denied);
-        }
-        if (replacement !== void 0) {
-          if (!isRecord2(replacement)) {
-            throw new Error(
-              `Plugin "${plugin.name}" replaced tool input with a non-object value`
-            );
-          }
-          nextInput = { ...replacement };
-          Object.assign(env, normalizeEnv(nextInput.env));
-        }
-      }
-      return {
-        input: {
-          ...nextInput,
-          ...Object.keys(env).length > 0 ? { env } : {}
-        },
-        env
-      };
-    }
-  };
-}
+} from "./chunk-OK4KKR7B.js";
 
 // src/chat/state/session-log.ts
 import { isDeepStrictEqual } from "util";
@@ -1297,15 +487,21 @@ async function commitMessages(args) {
 var configuredStore;
 function getConfiguredConversationStore() {
   const databaseUrl = getChatConfig().sql.databaseUrl;
+  const driver = getChatConfig().sql.driver;
   if (!databaseUrl) {
     return createStateConversationStore();
   }
-  if (configuredStore?.databaseUrl !== databaseUrl) {
+  if (configuredStore?.databaseUrl !== databaseUrl || configuredStore.driver !== driver) {
+    void configuredStore?.executor.close().catch(() => void 0);
+    const executor = createJuniorSqlExecutor({
+      connectionString: databaseUrl,
+      driver
+    });
     configuredStore = {
       databaseUrl,
-      store: createSqlStore(
-        createNeonJuniorSqlExecutor({ connectionString: databaseUrl })
-      )
+      driver,
+      executor,
+      store: createSqlStore(executor)
     };
   }
   return configuredStore.store;
@@ -1991,6 +1187,7 @@ var TOOL_POLICY_RULES = [
   `- Sandbox-backed file and shell tools operate in an isolated workspace rooted at ${SANDBOX_WORKSPACE_ROOT}; readFile/writeFile paths are sandbox-workspace paths, bash runs inside that workspace, and attachFile accepts absolute or workspace-relative sandbox paths.`,
   "- If a sandbox-backed tool reports that sandbox execution is unavailable, treat that as a blocker for local file/shell inspection; do not pretend host files were inspected.",
   "- For user-provided URLs, use `webFetch`; for discovery, use `webSearch` then fetch/read promising sources; for current time/date context, use `systemTime`.",
+  "- Run `jr-rpc config get|set|unset|list` for provider defaults and `jr-rpc plugins list` for installed plugin introspection as standalone bash commands; do not chain them with `cd`, `&&`, pipes, or provider commands.",
   "- If the first result is empty, stale, ambiguous, or incomplete, try a focused alternate query, path, command, or source before concluding the answer cannot be verified."
 ];
 var TOOL_CALL_STYLE_RULES = [
@@ -2101,6 +1298,55 @@ function buildRuntimeSection(params) {
   }
   return renderTagBlock("runtime", lines.join("\n"));
 }
+function formatSourceLines(source) {
+  if (source.platform === "local") {
+    return [
+      "- source.platform: local",
+      `- source.conversation_id: ${escapeXml(source.conversationId)}`
+    ];
+  }
+  return [
+    "- source.platform: slack",
+    `- source.team_id: ${escapeXml(source.teamId)}`,
+    `- source.channel_id: ${escapeXml(source.channelId)}`,
+    ...source.messageTs ? [`- source.message_ts: ${escapeXml(source.messageTs)}`] : [],
+    ...source.threadTs ? [`- source.thread_ts: ${escapeXml(source.threadTs)}`] : []
+  ];
+}
+function formatDestinationLines(destination) {
+  if (destination.platform === "local") {
+    return [
+      "- destination.platform: local",
+      `- destination.conversation_id: ${escapeXml(destination.conversationId)}`
+    ];
+  }
+  return [
+    "- destination.platform: slack",
+    `- destination.team_id: ${escapeXml(destination.teamId)}`,
+    `- destination.channel_id: ${escapeXml(destination.channelId)}`
+  ];
+}
+function buildDispatchSection(params) {
+  if (!params) {
+    return null;
+  }
+  const metadataLines = Object.entries(params.metadata ?? {}).sort(([left], [right]) => left.localeCompare(right)).map(
+    ([key2, value]) => `- dispatch.metadata.${escapeXml(key2)}: ${escapeXml(value)}`
+  );
+  return renderTag("dispatch", [
+    "- dispatch.execution: execute the dispatched input now",
+    "- dispatch.delivery: the runtime delivers the final answer to the destination",
+    "- dispatch.delivery_rule: do not request or require a separate posting tool just to deliver the final answer",
+    ...params.actor ? [
+      `- dispatch.actor.type: ${escapeXml(params.actor.type)}`,
+      `- dispatch.actor.id: ${escapeXml(params.actor.id)}`
+    ] : [],
+    ...params.plugin ? [`- dispatch.plugin: ${escapeXml(params.plugin)}`] : [],
+    ...formatSourceLines(params.source),
+    ...formatDestinationLines(params.destination),
+    ...metadataLines
+  ]);
+}
 function buildContextSection(params) {
   const blocks = [];
   const referenceLines = formatReferenceFilesLines();
@@ -2120,6 +1366,10 @@ function buildContextSection(params) {
   if (requesterLines) {
     blocks.push(requesterLines);
   }
+  const dispatchLines = buildDispatchSection(params.dispatch);
+  if (dispatchLines) {
+    blocks.push(dispatchLines);
+  }
   const artifactLines = formatArtifactsLines(params.artifactState);
   if (artifactLines) {
     blocks.push(renderTag("artifacts", artifactLines));
@@ -2128,7 +1378,7 @@ function buildContextSection(params) {
   if (configLines) {
     blocks.push(
       renderTag("configuration", [
-        "Ambient provider defaults; explicit targets win. Run `jr-rpc config get|set|unset|list` as standalone bash commands; do not chain with `cd`, `&&`, pipes, or provider commands.",
+        "Ambient provider defaults; explicit targets win.",
         ...configLines
       ])
     );
@@ -2204,6 +1454,7 @@ function buildTurnContextPrompt(params) {
       requester: params.requester,
       artifactState: params.artifactState,
       configuration: params.configuration,
+      dispatch: params.dispatch,
       invocation: params.invocation
     }),
     buildRuntimeSection(params.runtime ?? {})
@@ -2729,20 +1980,6 @@ export {
   JUNIOR_PERSONALITY,
   buildSystemPrompt,
   buildTurnContextPrompt,
-  createAgentPluginLogger,
-  createPluginState,
-  getSlackToolContext,
-  bindSlackDirectCredentialSubject,
-  verifySlackDirectCredentialSubject,
-  resolveChannelCapabilities,
-  validateAgentPlugins,
-  setAgentPlugins,
-  getAgentPlugins,
-  getAgentPluginTools,
-  getAgentPluginRoutes,
-  getAgentPluginSlackConversationLink,
-  getAgentPluginOperationalReports,
-  createAgentPluginHookRunner,
   loadProjection,
   loadConnectedMcpProviders,
   recordMcpProviderConnected,