@sentry/junior 0.91.0 → 0.92.1

package/dist/{catalog-runtime-DXE6NXHT.js → catalog-runtime-NZHMSMYC.js}

@@ -1,7 +1,7 @@
 import {
   pluginCatalogRuntime
-} from "./chunk-XP7F4LYB.js";
-import "./chunk-ZUK7BL63.js";
+} from "./chunk-BTH37NCU.js";
+import "./chunk-S6QKIGRM.js";
 import "./chunk-OB42YVAE.js";
 import "./chunk-3DA7X2U3.js";
 import "./chunk-6APU57E6.js";

package/dist/chat/actor.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Canonical actor identity.
+ *
+ * Runtime actors are platform-scoped actors. Stored Slack actor parsing
+ * remains explicit so durable conversation metadata is not repaired on read.
+ */
+import { z } from "zod";
+export declare const storedSlackActorSchema: z.ZodObject<{
+    email: z.ZodOptional<z.ZodString>;
+    fullName: z.ZodOptional<z.ZodString>;
+    platform: z.ZodOptional<z.ZodLiteral<"slack">>;
+    slackUserId: z.ZodOptional<z.ZodString>;
+    slackUserName: z.ZodOptional<z.ZodString>;
+    teamId: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+interface BaseActor {
+    email?: string;
+    fullName?: string;
+    userId: string;
+    userName?: string;
+}
+export interface SlackActor extends BaseActor {
+    platform: "slack";
+    teamId: string;
+}
+export interface LocalActor extends BaseActor {
+    platform: "local";
+}
+export interface SystemActor {
+    platform: "system";
+    name: string;
+}
+export type UserActor = SlackActor | LocalActor;
+export type Actor = UserActor | SystemActor;
+export interface SlackActorProfile {
+    email?: string;
+    fullName?: string;
+    userName?: string;
+}
+export type StoredSlackActor = z.output<typeof storedSlackActorSchema>;
+/** Parse a serialized runtime actor that crossed a durable boundary. */
+export declare function parseActor(value: unknown): Actor | undefined;
+/** Return whether an actor is a platform-scoped user actor. */
+export declare function isUserActor(actor: Actor | undefined): actor is UserActor;
+interface ActorInput {
+    email?: string;
+    fullName?: string;
+    platform?: UserActor["platform"];
+    teamId?: string;
+    userId?: string;
+    userName?: string;
+}
+/** Keep actor ids exact at platform boundaries before they enter owned state. */
+export declare function parseActorUserId(value: unknown): string | undefined;
+/** Assert persisted actor ids without read-side repair. */
+export declare function isActorUserId(value: string | undefined): value is string;
+/** Build Junior's canonical platform actor from exact actor ids and profile data. */
+export declare function createActor(input: ActorInput | undefined, context: {
+    platform?: UserActor["platform"];
+    teamId?: string;
+    userId?: string;
+}): UserActor | undefined;
+/** Build Junior's canonical actor from Slack profile data. */
+export declare function createSlackActor(teamId: string, userId: string, profile: SlackActorProfile | null | undefined): SlackActor;
+/** Parse a serialized Slack actor that crossed a runtime boundary. */
+export declare function parseStoredSlackActor(value: unknown): StoredSlackActor | undefined;
+/** Convert a runtime Slack actor into its durable session shape. */
+export declare function toStoredSlackActor(actor: SlackActor): StoredSlackActor;
+/** Resolve a Slack resume actor from stored profile data and the active actor. */
+export declare function createSlackResumeActor(args: {
+    actor?: UserActor;
+    teamId: string;
+    userId: string;
+}): SlackActor;
+export {};

package/dist/chat/agent/prompt.d.ts

@@ -5,7 +5,7 @@ import type { SkillInvocation, SkillMetadata } from "@/chat/skills";
 import type { ActiveMcpCatalogSummary } from "@/chat/tool-support/skill/mcp-tool-summary";
 import type { ToolRuntimeContext } from "@/chat/tools/types";
 import type { AnyToolDefinition } from "@/chat/tools/definition";
-import type { Requester } from "@/chat/requester";
+import { type Actor } from "@/chat/actor";
 import type { ThreadArtifactsState } from "@/chat/state/artifacts";
 import type { AgentRunInput, AgentRunInstructionActor, AgentRunRouting, AgentRunSteeringMessage } from "@/chat/agent/request";
 export type UserContentPart = {
@@ -56,7 +56,7 @@ export declare function buildSteeringPiMessage(message: AgentRunSteeringMessage)
 /** Assemble prompt history, instructions, and telemetry input for one slice. */
 export declare function assemblePrompt(args: {
     activeMcpCatalogs: ActiveMcpCatalogSummary[];
-    actorRequester?: Requester;
+    currentActor?: Actor;
     artifactState?: ThreadArtifactsState;
     availableSkills: SkillMetadata[];
     configurationValues: Record<string, unknown>;

package/dist/chat/agent/request.d.ts

@@ -2,16 +2,16 @@
  * Agent run request contract.
  *
  * Groups the per-slice run request by the runtime role each field serves and
- * owns interpretation of the routing group: requester derivation, surface
+ * owns interpretation of the routing group: actor derivation, surface
  * inference, destination consistency checks, and session identifiers. Run
  * phases consume these groups directly; callers build them at runtime
  * boundaries.
  */
-import type { Destination, Source } from "@sentry/junior-plugin-api";
+import type { Destination, Source, SystemActor } from "@sentry/junior-plugin-api";
 import type { ChannelConfigurationService } from "@/chat/configuration/types";
 import type { CredentialContext } from "@/chat/credentials/context";
 import type { PiMessage } from "@/chat/pi/messages";
-import { type Requester } from "@/chat/requester";
+import { type Actor } from "@/chat/actor";
 import type { SandboxAcquiredState } from "@/chat/sandbox/sandbox";
 import type { SandboxEgressTracePropagationConfig } from "@/chat/sandbox/egress/tracing";
 import type { AuthorizationFlowMode } from "@/chat/services/auth-pause";
@@ -19,6 +19,7 @@ import type { AssistantStatusSpec } from "@/chat/slack/assistant-thread/status";
 import type { SlackConversationContext } from "@/chat/slack/conversation-context";
 import type { ThreadArtifactsState } from "@/chat/state/artifacts";
 import type { ConversationPendingAuthState } from "@/chat/state/conversation";
+import type { PiMessageProvenance } from "@/chat/state/session-log";
 import type { AgentTurnSurface } from "@/chat/state/turn-session";
 import type { ToolExecutionReport } from "@/chat/tool-support/tool-execution-report";
 import type { ImageGenerateToolDeps, WebFetchToolDeps, WebSearchToolDeps } from "@/chat/tools/types";
@@ -35,6 +36,8 @@ export interface AgentRunInstructionActor {
 }
 export interface AgentRunSteeringMessage {
     actor?: AgentRunInstructionActor;
+    /** Provenance of this queued/steered message, carrying its original author. */
+    provenance: PiMessageProvenance;
     omittedImageAttachmentCount?: number;
     text: string;
     timestampMs?: number;
@@ -55,16 +58,13 @@ export interface AgentRunInput {
 /** Carries identity and addressing needed to route tools, auth, and delivery. */
 export interface AgentRunRouting {
     credentialContext?: CredentialContext;
-    requester?: Requester;
+    actor?: Actor;
     source: Source;
     slackConversation?: SlackConversationContext;
     destination: Destination;
     surface?: AgentTurnSurface;
     dispatch?: {
-        actor?: {
-            id: string;
-            type: string;
-        };
+        actor?: SystemActor;
         metadata?: Record<string, string>;
         plugin?: string;
     };
@@ -78,7 +78,7 @@ export interface AgentRunRouting {
         teamId?: string;
         messageTs?: string;
         threadTs?: string;
-        requesterId?: string;
+        actorId?: string;
     };
     toolChannelId?: string;
 }
@@ -146,10 +146,10 @@ export declare function getSessionIdentifiers(routing: AgentRunRouting): {
     conversationId?: string;
     sessionId?: string;
 };
-/** Derive the acting requester, filling platform and team from the destination. */
-export declare function requesterFromRouting(routing: AgentRunRouting): Requester | undefined;
-/** Reject requester identities that do not belong to the active destination. */
-export declare function assertRequesterDestinationMatch(routing: AgentRunRouting): void;
+/** Derive the acting actor, filling platform and team from the destination. */
+export declare function actorFromRouting(routing: AgentRunRouting): Actor | undefined;
+/** Reject actor identities that do not belong to the active destination. */
+export declare function assertActorDestinationMatch(routing: AgentRunRouting): void;
 /** Reject legacy Slack correlation fields that conflict with the destination. */
 export declare function assertCorrelationDestinationMatch(routing: AgentRunRouting): void;
 /** Route tool side effects to the tool channel when one overrides the destination. */

package/dist/chat/agent/resume.d.ts

@@ -9,10 +9,11 @@
  */
 import type { Destination, Source } from "@sentry/junior-plugin-api";
 import type { PiMessage } from "@/chat/pi/messages";
+import type { PiMessageProvenance } from "@/chat/state/session-log";
 import { CooperativeTurnYieldError } from "@/chat/runtime/turn";
 import type { AgentRunOutcome } from "@/chat/runtime/agent-run-outcome";
 import type { AgentTurnSurface } from "@/chat/state/turn-session";
-import type { Requester } from "@/chat/requester";
+import type { Actor } from "@/chat/actor";
 import { loadTurnSessionRecord, persistRunningSessionRecord } from "@/chat/services/turn-session-record";
 import { type AgentTurnUsage } from "@/chat/usage";
 import type { AgentRunDurability } from "@/chat/agent/request";
@@ -25,7 +26,7 @@ interface ResumeStateArgs {
     getLoadedSkillNames: () => string[];
     logContext: SessionRecordLogContext;
     recordActiveMcpProviders: () => Promise<void>;
-    requester?: Requester;
+    actor?: Actor;
     runSource: Source;
     sessionConversationId?: string;
     sessionId?: string;
@@ -48,8 +49,8 @@ export declare function createResumeState(args: ResumeStateArgs): {
     getResumeSnapshot(currentMessages: PiMessage[]): PiMessage[];
     markTimedOut(): void;
     commitInput(): Promise<void>;
-    persistSafeBoundary(messages: PiMessage[]): Promise<boolean>;
-    requireDurableInputCheckpoint(messages: PiMessage[]): Promise<boolean>;
+    persistSafeBoundary(messages: PiMessage[], trailingMessageProvenance?: PiMessageProvenance[]): Promise<boolean>;
+    requireDurableInputCheckpoint(messages: PiMessage[], trailingMessageProvenance?: PiMessageProvenance[]): Promise<boolean>;
     yieldAtSafeBoundaryIfDue(currentMessages: PiMessage[]): void;
     /**
      * Persist the continuation for an expected run ending and translate it

package/dist/chat/agent/tools.d.ts

@@ -20,7 +20,7 @@ import { type SandboxExecutor } from "@/chat/sandbox/sandbox";
 import type { PiMessage } from "@/chat/pi/messages";
 import type { LogContext } from "@/chat/logging";
 import type { ConversationPrivacy } from "@/chat/conversation-privacy";
-import type { Requester } from "@/chat/requester";
+import { type Actor } from "@/chat/actor";
 import type { ThreadArtifactsState } from "@/chat/state/artifacts";
 import type { AuthorizationPauseError } from "@/chat/services/auth-pause";
 import type { AgentTurnSurface } from "@/chat/state/turn-session";
@@ -29,7 +29,9 @@ import type { ResumeState } from "@/chat/agent/resume";
 interface ToolWiringArgs {
     abortAgent: () => void;
     activeSkills: Skill[];
-    actorRequester?: Requester;
+    currentActor?: Actor;
+    /** Live projection of the run's committed instruction-authority actors so far. */
+    currentActors?: () => Actor[];
     artifactStatePatch: Partial<ThreadArtifactsState>;
     availableSkills: SkillMetadata[];
     configurationValues: Record<string, unknown>;

package/dist/chat/capabilities/jr-rpc-command.d.ts

@@ -3,7 +3,7 @@ import type { Skill } from "@/chat/skills";
 type JrRpcDeps = {
     activeSkill: Skill | null;
     channelConfiguration?: ChannelConfigurationService;
-    requesterId?: string;
+    actorId?: string;
     onConfigurationValueChanged?: (key: string, value: unknown | undefined) => void;
 };
 export declare function maybeExecuteJrRpcCustomCommand(command: string, deps: JrRpcDeps): Promise<{

package/dist/chat/conversation-privacy.d.ts

@@ -1,3 +1,4 @@
+import type { AssistantMessage, Message } from "@earendil-works/pi-ai";
 export type ConversationPrivacy = "public" | "private";
 type TraceAttributeValue = string | number | boolean | string[];
 /**
@@ -32,6 +33,16 @@ export declare function toGenAiTextMetadata(text: string): Record<string, unknow
 export declare function toGenAiPayloadMetadata(payload: unknown): Record<string, unknown>;
 /** Convert an arbitrary payload into safe flattened trace attributes. */
 export declare function toGenAiPayloadTraceAttributes(prefix: string, payload: unknown): Record<string, TraceAttributeValue>;
+/**
+ * Map a pi-ai AssistantMessage to the canonical gen_ai.output.messages shape:
+ * `{ role, parts: [...], finish_reason }` — drops provider noise fields.
+ */
+export declare function toCanonicalOutputMessage(message: AssistantMessage): Record<string, unknown>;
+/**
+ * Map a pi-ai Message (user/assistant/toolResult) to the canonical
+ * gen_ai.input.messages shape: `{ role, parts: [...] }`.
+ */
+export declare function toCanonicalInputMessage(message: Message): Record<string, unknown>;
 /** Summarize a message list without exposing raw message content. */
 export declare function toGenAiMessagesTraceAttributes(prefix: string, messages: unknown[]): Record<string, TraceAttributeValue>;
 export {};

package/dist/chat/conversations/sql/migrations.d.ts

@@ -5,7 +5,7 @@ export interface Migration {
     id: string;
     statements: readonly string[];
 }
-export declare const migrations: readonly [Migration, Migration, Migration];
+export declare const migrations: readonly [Migration, Migration, Migration, Migration];
 export { schema };
 /** Apply pending SQL schema migrations for queryable conversation records. */
 export declare function migrateSchema(executor: JuniorSqlMigrationExecutor, migrationList?: readonly Migration[]): Promise<void>;

package/dist/chat/conversations/sql/schema/conversations.d.ts

@@ -174,23 +174,6 @@ export declare const juniorConversations: import("drizzle-orm/pg-core").PgTableW
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
-        requesterIdentityId: import("drizzle-orm/pg-core").PgColumn<{
-            name: "requester_identity_id";
-            tableName: "junior_conversations";
-            dataType: "string";
-            columnType: "PgText";
-            data: string;
-            driverParam: string;
-            notNull: false;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
         creatorIdentityId: import("drizzle-orm/pg-core").PgColumn<{
             name: "creator_identity_id";
             tableName: "junior_conversations";
@@ -225,8 +208,8 @@ export declare const juniorConversations: import("drizzle-orm/pg-core").PgTableW
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
-        requester: import("drizzle-orm/pg-core").PgColumn<{
-            name: "requester_json";
+        actor: import("drizzle-orm/pg-core").PgColumn<{
+            name: "actor_json";
             tableName: "junior_conversations";
             dataType: "json";
             columnType: "PgJsonb";

package/dist/chat/conversations/sql/schema.d.ts

@@ -180,23 +180,6 @@ export declare const schema: {
                 identity: undefined;
                 generated: undefined;
             }, {}, {}>;
-            requesterIdentityId: import("drizzle-orm/pg-core").PgColumn<{
-                name: "requester_identity_id";
-                tableName: "junior_conversations";
-                dataType: "string";
-                columnType: "PgText";
-                data: string;
-                driverParam: string;
-                notNull: false;
-                hasDefault: false;
-                isPrimaryKey: false;
-                isAutoincrement: false;
-                hasRuntimeDefault: false;
-                enumValues: [string, ...string[]];
-                baseColumn: never;
-                identity: undefined;
-                generated: undefined;
-            }, {}, {}>;
             creatorIdentityId: import("drizzle-orm/pg-core").PgColumn<{
                 name: "creator_identity_id";
                 tableName: "junior_conversations";
@@ -231,8 +214,8 @@ export declare const schema: {
                 identity: undefined;
                 generated: undefined;
             }, {}, {}>;
-            requester: import("drizzle-orm/pg-core").PgColumn<{
-                name: "requester_json";
+            actor: import("drizzle-orm/pg-core").PgColumn<{
+                name: "actor_json";
                 tableName: "junior_conversations";
                 dataType: "json";
                 columnType: "PgJsonb";

package/dist/chat/conversations/sql/store.d.ts

@@ -1,6 +1,6 @@
 import type { Destination } from "@sentry/junior-plugin-api";
 import type { ConversationPrivacy } from "@/chat/conversation-privacy";
-import { type StoredSlackRequester } from "@/chat/requester";
+import { type StoredSlackActor } from "@/chat/actor";
 import type { JuniorSqlDatabase, JuniorSqlMigrationExecutor } from "@/chat/sql/db";
 import type { Conversation, ConversationExecution, ConversationSource, ConversationStore } from "../store";
 export declare class SqlStore implements ConversationStore {
@@ -19,7 +19,7 @@ export declare class SqlStore implements ConversationStore {
         conversationId: string;
         destination?: Destination;
         nowMs?: number;
-        requester?: StoredSlackRequester;
+        actor?: StoredSlackActor;
         source?: ConversationSource;
         title?: string;
         visibility?: ConversationPrivacy;
@@ -31,7 +31,7 @@ export declare class SqlStore implements ConversationStore {
         destination?: Destination;
         execution: ConversationExecution;
         lastActivityAtMs: number;
-        requester?: StoredSlackRequester;
+        actor?: StoredSlackActor;
         source?: ConversationSource;
         title?: string;
         updatedAtMs: number;

package/dist/chat/conversations/store.d.ts

@@ -1,6 +1,6 @@
 import type { Destination } from "@sentry/junior-plugin-api";
 import type { ConversationPrivacy } from "@/chat/conversation-privacy";
-import type { StoredSlackRequester } from "@/chat/requester";
+import type { StoredSlackActor } from "@/chat/actor";
 export type ConversationSource = "api" | "internal" | "local" | "plugin" | "resource_event" | "scheduler" | "slack";
 export type ConversationStatus = "awaiting_resume" | "failed" | "idle" | "pending" | "running";
 export interface ConversationExecution {
@@ -17,7 +17,7 @@ export interface Conversation {
     destination?: Destination;
     execution: ConversationExecution;
     lastActivityAtMs: number;
-    requester?: StoredSlackRequester;
+    actor?: StoredSlackActor;
     schemaVersion: 1;
     source?: ConversationSource;
     title?: string;
@@ -42,7 +42,7 @@ export interface ConversationStore {
         conversationId: string;
         destination?: Destination;
         nowMs?: number;
-        requester?: StoredSlackRequester;
+        actor?: StoredSlackActor;
         source?: ConversationSource;
         title?: string;
         /** Source-confirmed visibility from the current event's signal only. */
@@ -56,7 +56,7 @@ export interface ConversationStore {
         destination?: Destination;
         execution: ConversationExecution;
         lastActivityAtMs: number;
-        requester?: StoredSlackRequester;
+        actor?: StoredSlackActor;
         source?: ConversationSource;
         title?: string;
         updatedAtMs: number;

package/dist/chat/credentials/context.d.ts

@@ -6,8 +6,8 @@ declare const credentialSubjectBindingSchema: z.ZodObject<{
     signature: z.ZodString;
 }, z.core.$strict>;
 declare const credentialSystemActorSchema: z.ZodObject<{
-    type: z.ZodLiteral<"system">;
-    id: z.ZodString;
+    platform: z.ZodLiteral<"system">;
+    name: z.ZodString;
 }, z.core.$strict>;
 export declare const credentialSubjectSchema: z.ZodObject<{
     type: z.ZodLiteral<"user">;
@@ -27,8 +27,8 @@ export declare const credentialContextSchema: z.ZodUnion<readonly [z.ZodObject<{
     }, z.core.$strict>;
 }, z.core.$strict>, z.ZodObject<{
     actor: z.ZodObject<{
-        type: z.ZodLiteral<"system">;
-        id: z.ZodString;
+        platform: z.ZodLiteral<"system">;
+        name: z.ZodString;
     }, z.core.$strict>;
     subject: z.ZodOptional<z.ZodObject<{
         type: z.ZodLiteral<"user">;

package/dist/chat/logging.d.ts

@@ -58,7 +58,7 @@ export declare function createLogContextFromRequest(request: Request, context?:
 export declare function toSpanAttributes(context: LogContext): Record<string, string>;
 /** Attach filterable non-user context tags to Sentry. */
 export declare function setSentryTagsFromContext(context: LogContext): void;
-/** Bind requester identity to Sentry's native user fields. */
+/** Bind actor identity to Sentry's native user fields. */
 export declare function setSentryUser(identity: SentryUserIdentity | undefined): void;
 /** Attach scoped Sentry context for isolated exception capture. */
 export declare function setSentryScopeContext(scope: Sentry.Scope, context: LogContext): void;
@@ -103,5 +103,5 @@ export declare function serializeGenAiAttribute(value: unknown, maxChars?: numbe
  */
 export declare function extractGenAiUsageSummary(...sources: unknown[]): AgentTurnUsage;
 /** Extract GenAI token usage attributes from AI provider usage metadata for tracing. */
-export declare function extractGenAiUsageAttributes(...sources: unknown[]): Partial<Record<"gen_ai.usage.input_tokens" | "gen_ai.usage.output_tokens" | "gen_ai.usage.cache_read.input_tokens" | "gen_ai.usage.cache_creation.input_tokens", number>>;
+export declare function extractGenAiUsageAttributes(...sources: unknown[]): Partial<Record<"gen_ai.usage.input_tokens" | "gen_ai.usage.output_tokens" | "gen_ai.usage.input_tokens.cached" | "gen_ai.usage.input_tokens.cache_write" | "gen_ai.usage.total_tokens", number>>;
 export {};

package/dist/chat/no-reply.d.ts

@@ -1,5 +1,5 @@
 export declare const NO_REPLY_MARKER = "[[NO_REPLY]]";
-/** Detect the reserved marker so Slack side effects can intentionally complete without thread text. */
+/** Detect the reserved marker for intentionally completing without thread text. */
 export declare function isNoReplyMarker(text: string): boolean;
 /** Detect marker leaks before publication strips or rejects them. */
 export declare function containsNoReplyMarker(text: string): boolean;

package/dist/chat/oauth-flow.d.ts

@@ -15,7 +15,7 @@ export type OAuthStatePayload = {
     scope?: string;
 };
 type OAuthFlowInput = {
-    requesterId: string;
+    actorId: string;
     channelId?: string;
     destination?: Destination;
     source?: Source;

package/dist/chat/pi/messages.d.ts

@@ -2,7 +2,7 @@ import { z } from "zod";
 /** Permissive schema for durable Pi SDK messages whose content shape may evolve. */
 export declare const piMessageSchema: z.ZodPipe<z.ZodObject<{
     role: z.ZodString;
-}, z.core.$loose>, z.ZodTransform<import("@earendil-works/pi-ai").UserMessage | import("@earendil-works/pi-ai").AssistantMessage | import("@earendil-works/pi-ai").ToolResultMessage<any> | import("@earendil-works/pi-agent-core").CustomMessage<unknown> | import("@earendil-works/pi-agent-core").BashExecutionMessage | import("@earendil-works/pi-agent-core").BranchSummaryMessage | import("@earendil-works/pi-agent-core").CompactionSummaryMessage, {
+}, z.core.$loose>, z.ZodTransform<import("@earendil-works/pi-ai").AssistantMessage | import("@earendil-works/pi-ai").UserMessage | import("@earendil-works/pi-ai").ToolResultMessage<any> | import("@earendil-works/pi-agent-core").CustomMessage<unknown> | import("@earendil-works/pi-agent-core").BashExecutionMessage | import("@earendil-works/pi-agent-core").BranchSummaryMessage | import("@earendil-works/pi-agent-core").CompactionSummaryMessage, {
     [x: string]: unknown;
     role: string;
 }>>;
@@ -12,7 +12,7 @@ export type PiMessage = z.output<typeof piMessageSchema>;
 export declare const piContentMessageSchema: z.ZodPipe<z.ZodObject<{
     content: z.ZodArray<z.ZodUnknown>;
     role: z.ZodString;
-}, z.core.$loose>, z.ZodTransform<import("@earendil-works/pi-ai").UserMessage | import("@earendil-works/pi-ai").AssistantMessage | import("@earendil-works/pi-ai").ToolResultMessage<any> | import("@earendil-works/pi-agent-core").CustomMessage<unknown> | import("@earendil-works/pi-agent-core").BashExecutionMessage | import("@earendil-works/pi-agent-core").BranchSummaryMessage | import("@earendil-works/pi-agent-core").CompactionSummaryMessage, {
+}, z.core.$loose>, z.ZodTransform<import("@earendil-works/pi-ai").AssistantMessage | import("@earendil-works/pi-ai").UserMessage | import("@earendil-works/pi-ai").ToolResultMessage<any> | import("@earendil-works/pi-agent-core").CustomMessage<unknown> | import("@earendil-works/pi-agent-core").BashExecutionMessage | import("@earendil-works/pi-agent-core").BranchSummaryMessage | import("@earendil-works/pi-agent-core").CompactionSummaryMessage, {
     [x: string]: unknown;
     content: unknown[];
     role: string;

package/dist/chat/pi/transcript.d.ts

@@ -27,5 +27,20 @@ export declare function getTerminalAssistantMessages(messages: readonly unknown[
 export declare function trimTrailingAssistantMessages(messages: PiMessage[]): PiMessage[];
 /** Return whether Pi history already carries session bootstrap context. */
 export declare function hasRuntimeTurnContext(messages: PiMessage[]): boolean;
+/**
+ * Reduce a runtime user-turn prompt to only the current turn's instruction.
+ *
+ * Live user prompts embed prior-thread context blocks (`<thread-transcript>`,
+ * `<recent-thread-messages>`, `<thread-compactions>`, `<thread-background>`) in
+ * the same message that carries the `<current-instruction>` block. Those blocks
+ * hold other participants' verbatim messages, so completed-run projections
+ * consumed by plugins must expose only the instruction authored by this turn's
+ * actor — otherwise per-entry provenance can be defeated by reading another
+ * user's text out of an instruction-authority entry. Prior thread context is
+ * projected separately as per-author context-authority entries, so dropping it
+ * here is non-lossy for plugins. This is projection-only; it never touches what
+ * the model sees during a live run.
+ */
+export declare function instructionTextForProjection(text: string): string;
 /** Remove volatile runtime context before reusing messages as history. */
 export declare function stripRuntimeTurnContext(messages: PiMessage[]): PiMessage[];

package/dist/chat/plugins/agent-hooks.d.ts

@@ -3,7 +3,7 @@ import type { PluginPromptContributionContext } from "@/chat/plugins/prompt";
 import type { AnyToolDefinition } from "@/chat/tools/definition";
 import type { ToolRuntimeContext } from "@/chat/tools/types";
 import type { SandboxInstance } from "@/chat/sandbox/workspace";
-import type { Requester } from "@/chat/requester";
+import type { Actor } from "@/chat/actor";
 /** Signal that a plugin intentionally denied a tool execution. */
 export declare class PluginHookDeniedError extends Error {
     constructor(message: string);
@@ -37,7 +37,7 @@ export declare function getPlugins(): PluginRegistration[];
 export declare function getPluginSystemPromptContributions(source: ToolRuntimeContext["source"]): Promise<PluginPromptContributionContext[]>;
 /** Collect request-scoped plugin prompt contributions. */
 export declare function getPluginUserPromptContributions(args: {
-    context: Pick<ToolRuntimeContext, "conversationId" | "destination" | "requester" | "source" | "userText">;
+    context: Pick<ToolRuntimeContext, "conversationId" | "destination" | "actor" | "source" | "userText">;
 }): Promise<PluginPromptContributionContext[]>;
 /** Collect turn-scoped tools exposed by plugins. */
 export declare function getPluginTools(context: ToolRuntimeContext): Record<string, AnyToolDefinition>;
@@ -51,5 +51,7 @@ export declare function getPluginSlackConversationLink(conversationId: string):
 export declare function getPluginOperationalReports(nowMs: number, conversations: PluginConversations): Promise<PluginOperationalReport[]>;
 /** Create one runner over runtime hook plugins registered by the app. */
 export declare function createPluginHookRunner(input?: {
-    requester?: Requester;
+    actor?: Actor;
+    /** Live getter for the run's committed instruction actors; see `multi-actor-runs.md`. */
+    actors?: () => Actor[];
 }): PluginHookRunner;

package/dist/chat/plugins/credential-hooks.d.ts

@@ -1,4 +1,4 @@
-import { type PluginCredentialResult, type PluginGrant, type PluginProviderAccount } from "@sentry/junior-plugin-api";
+import { type PluginCredentialActor, type PluginCredentialResult, type PluginGrant, type PluginProviderAccount } from "@sentry/junior-plugin-api";
 import type { StoredTokens, UserTokenStore } from "@/chat/credentials/user-token-store";
 export interface EgressGrantInput {
     bodyText?: string;
@@ -31,13 +31,7 @@ export declare function onPluginEgressResponse(input: EgressResponseInput): Prom
 /** Return whether a plugin owns credential issuance for egress. */
 export declare function hasEgressCredentialHooks(provider: string): boolean;
 export interface IssueCredentialInput {
-    actor: {
-        type: "system";
-        id: string;
-    } | {
-        type: "user";
-        userId: string;
-    };
+    actor: PluginCredentialActor;
     credentialSubject?: {
         type: "user";
         userId: string;

package/dist/chat/prompt.d.ts

@@ -3,7 +3,7 @@ import type { ThreadArtifactsState } from "@/chat/state/artifacts";
 import type { SkillMetadata, SkillInvocation } from "@/chat/skills";
 import type { ActiveMcpCatalogSummary } from "@/chat/tool-support/skill/mcp-tool-summary";
 import type { PluginPromptContributionContext } from "@/chat/plugins/prompt";
-import type { Destination, Source } from "@sentry/junior-plugin-api";
+import type { Destination, Source, SystemActor } from "@sentry/junior-plugin-api";
 export declare const JUNIOR_PERSONALITY: string;
 export declare const JUNIOR_WORLD: string | null;
 interface ToolPromptContext {
@@ -24,17 +24,14 @@ type TurnContextPromptInput = {
         slackConversation?: SlackConversationContext;
     };
     dispatch?: {
-        actor?: {
-            id: string;
-            type: string;
-        };
+        actor?: SystemActor;
         destination: Destination;
         metadata?: Record<string, string>;
         plugin?: string;
         source: Source;
     };
     invocation: SkillInvocation | null;
-    requester?: {
+    actor?: {
         userName?: string;
         fullName?: string;
         userId?: string;

package/dist/chat/runtime/reply-executor.d.ts

@@ -27,7 +27,7 @@ interface ReplyExecutorDeps {
     getSlackAdapter: () => SlackAdapter;
     resolveUserAttachments: (attachments: Message["attachments"] | undefined, context: {
         threadId?: string;
-        requesterId?: string;
+        actorId?: string;
         channelId?: string;
         runId?: string;
         conversation?: PreparedTurnState["conversation"];

package/dist/chat/runtime/turn-input.d.ts

@@ -1,7 +1,7 @@
 import type { Message, Thread } from "chat";
 export interface TurnContext {
     channelId?: string;
-    requesterId?: string;
+    actorId?: string;
     threadId?: string;
     runId?: string;
 }

package/dist/chat/sandbox/egress/schemas.d.ts

@@ -13,8 +13,8 @@ export declare const sandboxEgressCredentialContextSchema: z.ZodObject<{
         }, z.core.$strict>;
     }, z.core.$strict>, z.ZodObject<{
         actor: z.ZodObject<{
-            type: z.ZodLiteral<"system">;
-            id: z.ZodString;
+            platform: z.ZodLiteral<"system">;
+            name: z.ZodString;
         }, z.core.$strict>;
         subject: z.ZodOptional<z.ZodObject<{
             type: z.ZodLiteral<"user">;

package/dist/chat/sandbox/egress/session.d.ts

@@ -5,7 +5,7 @@ export type { SandboxEgressAuthRequiredSignal, SandboxEgressCredentialContext, S
 /**
  * Create the signed Junior credential context embedded in the proxy URL.
  *
- * The token binds requester credentials to a specific sandbox egress id and a
+ * The token binds actor credentials to a specific sandbox egress id and a
  * short expiry. Vercel OIDC proves which VM sent a request; this token proves
  * which Junior actor and credential context that VM is allowed to use.
  */