@geminixiang/mama 0.2.0-beta.2 → 0.2.0-beta.20

package/dist/sandbox/index.d.ts

@@ -1,20 +1,22 @@
 import { ContainerExecutor } from "./container.js";
 import { FirecrackerExecutor } from "./firecracker.js";
+import { CloudflareSandboxExecutor } from "./cloudflare.js";
 import { HostExecutor } from "./host.js";
 import type { Executor, SandboxAdapter, SandboxConfig } from "./types.js";
-export type { ContainerSandboxConfig, ExecOptions, ExecResult, Executor, FirecrackerSandboxConfig, HostSandboxConfig, ImageSandboxConfig, SandboxAdapter, SandboxConfig, } from "./types.js";
-export { ContainerExecutor, FirecrackerExecutor, HostExecutor };
+export type { ContainerSandboxConfig, CloudflareSandboxConfig, ExecOptions, ExecResult, Executor, FirecrackerSandboxConfig, HostSandboxConfig, ImageSandboxConfig, RuntimePathContext, SandboxAdapter, SandboxConfig, } from "./types.js";
+export { CloudflareSandboxExecutor, ContainerExecutor, FirecrackerExecutor, HostExecutor };
 export { SandboxError } from "./errors.js";
 export { buildContainerExecCommand, containerSandboxAdapter, parseContainerSandboxArg, validateContainerSandbox, } from "./container.js";
 export { firecrackerSandboxAdapter, parseFirecrackerSandboxArg, validateFirecrackerSandbox, } from "./firecracker.js";
+export { cloudflareSandboxAdapter, parseCloudflareSandboxArg, validateCloudflareSandbox, } from "./cloudflare.js";
 export { hostSandboxAdapter, parseHostSandboxArg, validateHostSandbox } from "./host.js";
 export { imageSandboxAdapter, parseImageSandboxArg, validateImageSandbox } from "./image.js";
-declare const sandboxAdapters: readonly [SandboxAdapter<import("./types.js").HostSandboxConfig>, SandboxAdapter<import("./types.js").ContainerSandboxConfig>, SandboxAdapter<import("./types.js").ImageSandboxConfig>, SandboxAdapter<import("./types.js").FirecrackerSandboxConfig>];
+declare const sandboxAdapters: readonly [SandboxAdapter<import("./types.js").HostSandboxConfig>, SandboxAdapter<import("./types.js").ContainerSandboxConfig>, SandboxAdapter<import("./types.js").ImageSandboxConfig>, SandboxAdapter<import("./types.js").FirecrackerSandboxConfig>, SandboxAdapter<import("./types.js").CloudflareSandboxConfig>];
 export declare function getSandboxAdapters(): readonly [...typeof sandboxAdapters];
 export declare function parseSandboxArg(value: string): SandboxConfig;
 export declare function validateSandbox(config: SandboxConfig): Promise<void>;
 /**
- * Create an executor that runs commands on host, in a Docker container, or in a Firecracker VM.
+ * Create an executor that runs commands on host, in Docker, in a Firecracker VM, or through a Cloudflare sandbox bridge.
  */
 export declare function createExecutor(config: SandboxConfig, env?: Record<string, string>, ensureReady?: () => Promise<void>): Executor;
 //# sourceMappingURL=index.d.ts.map

package/dist/sandbox/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EAIlB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EAIpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,YAAY,EAIb,MAAM,WAAW,CAAC;AAGnB,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE1E,YAAY,EACV,sBAAsB,EACtB,WAAW,EACX,UAAU,EACV,QAAQ,EACR,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,YAAY,EAAE,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE7F,QAAA,MAAM,eAAe,wPAKX,CAAC;AAKX,wBAAgB,kBAAkB,IAAI,SAAS,CAAC,GAAG,OAAO,eAAe,CAAC,CAEzE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CAiB5D;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAO1E;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,aAAa,EACrB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAChC,QAAQ,CAMV","sourcesContent":["import {\n  ContainerExecutor,\n  containerSandboxAdapter,\n  parseContainerSandboxArg,\n  validateContainerSandbox,\n} from \"./container.js\";\nimport {\n  FirecrackerExecutor,\n  firecrackerSandboxAdapter,\n  parseFirecrackerSandboxArg,\n  validateFirecrackerSandbox,\n} from \"./firecracker.js\";\nimport {\n  HostExecutor,\n  hostSandboxAdapter,\n  parseHostSandboxArg,\n  validateHostSandbox,\n} from \"./host.js\";\nimport { imageSandboxAdapter, parseImageSandboxArg, validateImageSandbox } from \"./image.js\";\nimport { SandboxError } from \"./errors.js\";\nimport type { Executor, SandboxAdapter, SandboxConfig } from \"./types.js\";\n\nexport type {\n  ContainerSandboxConfig,\n  ExecOptions,\n  ExecResult,\n  Executor,\n  FirecrackerSandboxConfig,\n  HostSandboxConfig,\n  ImageSandboxConfig,\n  SandboxAdapter,\n  SandboxConfig,\n} from \"./types.js\";\nexport { ContainerExecutor, FirecrackerExecutor, HostExecutor };\nexport { SandboxError } from \"./errors.js\";\nexport {\n  buildContainerExecCommand,\n  containerSandboxAdapter,\n  parseContainerSandboxArg,\n  validateContainerSandbox,\n} from \"./container.js\";\nexport {\n  firecrackerSandboxAdapter,\n  parseFirecrackerSandboxArg,\n  validateFirecrackerSandbox,\n} from \"./firecracker.js\";\nexport { hostSandboxAdapter, parseHostSandboxArg, validateHostSandbox } from \"./host.js\";\nexport { imageSandboxAdapter, parseImageSandboxArg, validateImageSandbox } from \"./image.js\";\n\nconst sandboxAdapters = [\n  hostSandboxAdapter,\n  containerSandboxAdapter,\n  imageSandboxAdapter,\n  firecrackerSandboxAdapter,\n] as const;\nconst sandboxAdapterByType = new Map(\n  sandboxAdapters.map((adapter) => [adapter.type, adapter]),\n) as Map<SandboxConfig[\"type\"], SandboxAdapter>;\n\nexport function getSandboxAdapters(): readonly [...typeof sandboxAdapters] {\n  return sandboxAdapters;\n}\n\nexport function parseSandboxArg(value: string): SandboxConfig {\n  for (const adapter of sandboxAdapters) {\n    const config = adapter.parse(value);\n    if (config) {\n      return config;\n    }\n  }\n\n  if (value.startsWith(\"docker:\")) {\n    throw new SandboxError(\n      `Error: '${value}' is not supported. Use 'container:<container-name>' for the shared-container mode or 'image:<image-name>' for mama-managed per-user containers.`,\n    );\n  }\n\n  throw new SandboxError(\n    `Error: Invalid sandbox type '${value}'. Use 'host', 'container:<container-name>', 'image:<image-name>', or 'firecracker:<vm-id>:<host-path>'`,\n  );\n}\n\nexport async function validateSandbox(config: SandboxConfig): Promise<void> {\n  const adapter = sandboxAdapterByType.get(config.type);\n  if (!adapter) {\n    throw new SandboxError(`Error: Unsupported sandbox type '${config.type}'`);\n  }\n\n  await adapter.validate(config);\n}\n\n/**\n * Create an executor that runs commands on host, in a Docker container, or in a Firecracker VM.\n */\nexport function createExecutor(\n  config: SandboxConfig,\n  env?: Record<string, string>,\n  ensureReady?: () => Promise<void>,\n): Executor {\n  const adapter = sandboxAdapterByType.get(config.type);\n  if (!adapter) {\n    throw new SandboxError(`Error: Unsupported sandbox type '${config.type}'`);\n  }\n  return adapter.createExecutor(config, env, ensureReady);\n}\n"]}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAA2B,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAA6B,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,yBAAyB,EAA4B,MAAM,iBAAiB,CAAC;AACtF,OAAO,EAAE,YAAY,EAAsB,MAAM,WAAW,CAAC;AAG7D,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE1E,YAAY,EACV,sBAAsB,EACtB,uBAAuB,EACvB,WAAW,EACX,UAAU,EACV,QAAQ,EACR,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,YAAY,EAAE,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE7F,QAAA,MAAM,eAAe,sTAMX,CAAC;AAKX,wBAAgB,kBAAkB,IAAI,SAAS,CAAC,GAAG,OAAO,eAAe,CAAC,CAEzE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CAiB5D;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAO1E;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,aAAa,EACrB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAChC,QAAQ,CAMV","sourcesContent":["import { ContainerExecutor, containerSandboxAdapter } from \"./container.js\";\nimport { FirecrackerExecutor, firecrackerSandboxAdapter } from \"./firecracker.js\";\nimport { CloudflareSandboxExecutor, cloudflareSandboxAdapter } from \"./cloudflare.js\";\nimport { HostExecutor, hostSandboxAdapter } from \"./host.js\";\nimport { imageSandboxAdapter } from \"./image.js\";\nimport { SandboxError } from \"./errors.js\";\nimport type { Executor, SandboxAdapter, SandboxConfig } from \"./types.js\";\n\nexport type {\n  ContainerSandboxConfig,\n  CloudflareSandboxConfig,\n  ExecOptions,\n  ExecResult,\n  Executor,\n  FirecrackerSandboxConfig,\n  HostSandboxConfig,\n  ImageSandboxConfig,\n  RuntimePathContext,\n  SandboxAdapter,\n  SandboxConfig,\n} from \"./types.js\";\nexport { CloudflareSandboxExecutor, ContainerExecutor, FirecrackerExecutor, HostExecutor };\nexport { SandboxError } from \"./errors.js\";\nexport {\n  buildContainerExecCommand,\n  containerSandboxAdapter,\n  parseContainerSandboxArg,\n  validateContainerSandbox,\n} from \"./container.js\";\nexport {\n  firecrackerSandboxAdapter,\n  parseFirecrackerSandboxArg,\n  validateFirecrackerSandbox,\n} from \"./firecracker.js\";\nexport {\n  cloudflareSandboxAdapter,\n  parseCloudflareSandboxArg,\n  validateCloudflareSandbox,\n} from \"./cloudflare.js\";\nexport { hostSandboxAdapter, parseHostSandboxArg, validateHostSandbox } from \"./host.js\";\nexport { imageSandboxAdapter, parseImageSandboxArg, validateImageSandbox } from \"./image.js\";\n\nconst sandboxAdapters = [\n  hostSandboxAdapter,\n  containerSandboxAdapter,\n  imageSandboxAdapter,\n  firecrackerSandboxAdapter,\n  cloudflareSandboxAdapter,\n] as const;\nconst sandboxAdapterByType = new Map(\n  sandboxAdapters.map((adapter) => [adapter.type, adapter]),\n) as Map<SandboxConfig[\"type\"], SandboxAdapter>;\n\nexport function getSandboxAdapters(): readonly [...typeof sandboxAdapters] {\n  return sandboxAdapters;\n}\n\nexport function parseSandboxArg(value: string): SandboxConfig {\n  for (const adapter of sandboxAdapters) {\n    const config = adapter.parse(value);\n    if (config) {\n      return config;\n    }\n  }\n\n  if (value.startsWith(\"docker:\")) {\n    throw new SandboxError(\n      `Error: '${value}' is not supported. Use 'container:<container-name>' for the shared-container mode or 'image:<image-name>' for mama-managed per-user containers.`,\n    );\n  }\n\n  throw new SandboxError(\n    `Error: Invalid sandbox type '${value}'. Use 'host', 'container:<container-name>', 'image:<image-name>', 'firecracker:<vm-id>:<host-path>', or 'cloudflare:<sandbox-id>'`,\n  );\n}\n\nexport async function validateSandbox(config: SandboxConfig): Promise<void> {\n  const adapter = sandboxAdapterByType.get(config.type);\n  if (!adapter) {\n    throw new SandboxError(`Error: Unsupported sandbox type '${config.type}'`);\n  }\n\n  await adapter.validate(config);\n}\n\n/**\n * Create an executor that runs commands on host, in Docker, in a Firecracker VM, or through a Cloudflare sandbox bridge.\n */\nexport function createExecutor(\n  config: SandboxConfig,\n  env?: Record<string, string>,\n  ensureReady?: () => Promise<void>,\n): Executor {\n  const adapter = sandboxAdapterByType.get(config.type);\n  if (!adapter) {\n    throw new SandboxError(`Error: Unsupported sandbox type '${config.type}'`);\n  }\n  return adapter.createExecutor(config, env, ensureReady);\n}\n"]}

package/dist/sandbox/index.js

@@ -1,12 +1,14 @@
-import { ContainerExecutor, containerSandboxAdapter, } from "./container.js";
-import { FirecrackerExecutor, firecrackerSandboxAdapter, } from "./firecracker.js";
-import { HostExecutor, hostSandboxAdapter, } from "./host.js";
+import { ContainerExecutor, containerSandboxAdapter } from "./container.js";
+import { FirecrackerExecutor, firecrackerSandboxAdapter } from "./firecracker.js";
+import { CloudflareSandboxExecutor, cloudflareSandboxAdapter } from "./cloudflare.js";
+import { HostExecutor, hostSandboxAdapter } from "./host.js";
 import { imageSandboxAdapter } from "./image.js";
 import { SandboxError } from "./errors.js";
-export { ContainerExecutor, FirecrackerExecutor, HostExecutor };
+export { CloudflareSandboxExecutor, ContainerExecutor, FirecrackerExecutor, HostExecutor };
 export { SandboxError } from "./errors.js";
 export { buildContainerExecCommand, containerSandboxAdapter, parseContainerSandboxArg, validateContainerSandbox, } from "./container.js";
 export { firecrackerSandboxAdapter, parseFirecrackerSandboxArg, validateFirecrackerSandbox, } from "./firecracker.js";
+export { cloudflareSandboxAdapter, parseCloudflareSandboxArg, validateCloudflareSandbox, } from "./cloudflare.js";
 export { hostSandboxAdapter, parseHostSandboxArg, validateHostSandbox } from "./host.js";
 export { imageSandboxAdapter, parseImageSandboxArg, validateImageSandbox } from "./image.js";
 const sandboxAdapters = [
@@ -14,6 +16,7 @@ const sandboxAdapters = [
     containerSandboxAdapter,
     imageSandboxAdapter,
     firecrackerSandboxAdapter,
+    cloudflareSandboxAdapter,
 ];
 const sandboxAdapterByType = new Map(sandboxAdapters.map((adapter) => [adapter.type, adapter]));
 export function getSandboxAdapters() {
@@ -29,7 +32,7 @@ export function parseSandboxArg(value) {
     if (value.startsWith("docker:")) {
         throw new SandboxError(`Error: '${value}' is not supported. Use 'container:<container-name>' for the shared-container mode or 'image:<image-name>' for mama-managed per-user containers.`);
     }
-    throw new SandboxError(`Error: Invalid sandbox type '${value}'. Use 'host', 'container:<container-name>', 'image:<image-name>', or 'firecracker:<vm-id>:<host-path>'`);
+    throw new SandboxError(`Error: Invalid sandbox type '${value}'. Use 'host', 'container:<container-name>', 'image:<image-name>', 'firecracker:<vm-id>:<host-path>', or 'cloudflare:<sandbox-id>'`);
 }
 export async function validateSandbox(config) {
     const adapter = sandboxAdapterByType.get(config.type);
@@ -39,7 +42,7 @@ export async function validateSandbox(config) {
     await adapter.validate(config);
 }
 /**
- * Create an executor that runs commands on host, in a Docker container, or in a Firecracker VM.
+ * Create an executor that runs commands on host, in Docker, in a Firecracker VM, or through a Cloudflare sandbox bridge.
  */
 export function createExecutor(config, env, ensureReady) {
     const adapter = sandboxAdapterByType.get(config.type);

package/dist/sandbox/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,uBAAuB,GAGxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,yBAAyB,GAG1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,YAAY,EACZ,kBAAkB,GAGnB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,mBAAmB,EAA8C,MAAM,YAAY,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAc3C,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,YAAY,EAAE,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE7F,MAAM,eAAe,GAAG;IACtB,kBAAkB;IAClB,uBAAuB;IACvB,mBAAmB;IACnB,yBAAyB;CACjB,CAAC;AACX,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAClC,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CACZ,CAAC;AAEhD,MAAM,UAAU,kBAAkB;IAChC,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,YAAY,CACpB,WAAW,KAAK,kJAAkJ,CACnK,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,YAAY,CACpB,gCAAgC,KAAK,yGAAyG,CAC/I,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAqB;IACzD,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,YAAY,CAAC,oCAAoC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAqB,EACrB,GAA4B,EAC5B,WAAiC;IAEjC,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,YAAY,CAAC,oCAAoC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;AAC1D,CAAC","sourcesContent":["import {\n  ContainerExecutor,\n  containerSandboxAdapter,\n  parseContainerSandboxArg,\n  validateContainerSandbox,\n} from \"./container.js\";\nimport {\n  FirecrackerExecutor,\n  firecrackerSandboxAdapter,\n  parseFirecrackerSandboxArg,\n  validateFirecrackerSandbox,\n} from \"./firecracker.js\";\nimport {\n  HostExecutor,\n  hostSandboxAdapter,\n  parseHostSandboxArg,\n  validateHostSandbox,\n} from \"./host.js\";\nimport { imageSandboxAdapter, parseImageSandboxArg, validateImageSandbox } from \"./image.js\";\nimport { SandboxError } from \"./errors.js\";\nimport type { Executor, SandboxAdapter, SandboxConfig } from \"./types.js\";\n\nexport type {\n  ContainerSandboxConfig,\n  ExecOptions,\n  ExecResult,\n  Executor,\n  FirecrackerSandboxConfig,\n  HostSandboxConfig,\n  ImageSandboxConfig,\n  SandboxAdapter,\n  SandboxConfig,\n} from \"./types.js\";\nexport { ContainerExecutor, FirecrackerExecutor, HostExecutor };\nexport { SandboxError } from \"./errors.js\";\nexport {\n  buildContainerExecCommand,\n  containerSandboxAdapter,\n  parseContainerSandboxArg,\n  validateContainerSandbox,\n} from \"./container.js\";\nexport {\n  firecrackerSandboxAdapter,\n  parseFirecrackerSandboxArg,\n  validateFirecrackerSandbox,\n} from \"./firecracker.js\";\nexport { hostSandboxAdapter, parseHostSandboxArg, validateHostSandbox } from \"./host.js\";\nexport { imageSandboxAdapter, parseImageSandboxArg, validateImageSandbox } from \"./image.js\";\n\nconst sandboxAdapters = [\n  hostSandboxAdapter,\n  containerSandboxAdapter,\n  imageSandboxAdapter,\n  firecrackerSandboxAdapter,\n] as const;\nconst sandboxAdapterByType = new Map(\n  sandboxAdapters.map((adapter) => [adapter.type, adapter]),\n) as Map<SandboxConfig[\"type\"], SandboxAdapter>;\n\nexport function getSandboxAdapters(): readonly [...typeof sandboxAdapters] {\n  return sandboxAdapters;\n}\n\nexport function parseSandboxArg(value: string): SandboxConfig {\n  for (const adapter of sandboxAdapters) {\n    const config = adapter.parse(value);\n    if (config) {\n      return config;\n    }\n  }\n\n  if (value.startsWith(\"docker:\")) {\n    throw new SandboxError(\n      `Error: '${value}' is not supported. Use 'container:<container-name>' for the shared-container mode or 'image:<image-name>' for mama-managed per-user containers.`,\n    );\n  }\n\n  throw new SandboxError(\n    `Error: Invalid sandbox type '${value}'. Use 'host', 'container:<container-name>', 'image:<image-name>', or 'firecracker:<vm-id>:<host-path>'`,\n  );\n}\n\nexport async function validateSandbox(config: SandboxConfig): Promise<void> {\n  const adapter = sandboxAdapterByType.get(config.type);\n  if (!adapter) {\n    throw new SandboxError(`Error: Unsupported sandbox type '${config.type}'`);\n  }\n\n  await adapter.validate(config);\n}\n\n/**\n * Create an executor that runs commands on host, in a Docker container, or in a Firecracker VM.\n */\nexport function createExecutor(\n  config: SandboxConfig,\n  env?: Record<string, string>,\n  ensureReady?: () => Promise<void>,\n): Executor {\n  const adapter = sandboxAdapterByType.get(config.type);\n  if (!adapter) {\n    throw new SandboxError(`Error: Unsupported sandbox type '${config.type}'`);\n  }\n  return adapter.createExecutor(config, env, ensureReady);\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAgB3C,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,YAAY,EAAE,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE7F,MAAM,eAAe,GAAG;IACtB,kBAAkB;IAClB,uBAAuB;IACvB,mBAAmB;IACnB,yBAAyB;IACzB,wBAAwB;CAChB,CAAC;AACX,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAClC,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CACZ,CAAC;AAEhD,MAAM,UAAU,kBAAkB;IAChC,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,YAAY,CACpB,WAAW,KAAK,kJAAkJ,CACnK,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,YAAY,CACpB,gCAAgC,KAAK,oIAAoI,CAC1K,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAqB;IACzD,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,YAAY,CAAC,oCAAoC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAqB,EACrB,GAA4B,EAC5B,WAAiC;IAEjC,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,YAAY,CAAC,oCAAoC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;AAC1D,CAAC","sourcesContent":["import { ContainerExecutor, containerSandboxAdapter } from \"./container.js\";\nimport { FirecrackerExecutor, firecrackerSandboxAdapter } from \"./firecracker.js\";\nimport { CloudflareSandboxExecutor, cloudflareSandboxAdapter } from \"./cloudflare.js\";\nimport { HostExecutor, hostSandboxAdapter } from \"./host.js\";\nimport { imageSandboxAdapter } from \"./image.js\";\nimport { SandboxError } from \"./errors.js\";\nimport type { Executor, SandboxAdapter, SandboxConfig } from \"./types.js\";\n\nexport type {\n  ContainerSandboxConfig,\n  CloudflareSandboxConfig,\n  ExecOptions,\n  ExecResult,\n  Executor,\n  FirecrackerSandboxConfig,\n  HostSandboxConfig,\n  ImageSandboxConfig,\n  RuntimePathContext,\n  SandboxAdapter,\n  SandboxConfig,\n} from \"./types.js\";\nexport { CloudflareSandboxExecutor, ContainerExecutor, FirecrackerExecutor, HostExecutor };\nexport { SandboxError } from \"./errors.js\";\nexport {\n  buildContainerExecCommand,\n  containerSandboxAdapter,\n  parseContainerSandboxArg,\n  validateContainerSandbox,\n} from \"./container.js\";\nexport {\n  firecrackerSandboxAdapter,\n  parseFirecrackerSandboxArg,\n  validateFirecrackerSandbox,\n} from \"./firecracker.js\";\nexport {\n  cloudflareSandboxAdapter,\n  parseCloudflareSandboxArg,\n  validateCloudflareSandbox,\n} from \"./cloudflare.js\";\nexport { hostSandboxAdapter, parseHostSandboxArg, validateHostSandbox } from \"./host.js\";\nexport { imageSandboxAdapter, parseImageSandboxArg, validateImageSandbox } from \"./image.js\";\n\nconst sandboxAdapters = [\n  hostSandboxAdapter,\n  containerSandboxAdapter,\n  imageSandboxAdapter,\n  firecrackerSandboxAdapter,\n  cloudflareSandboxAdapter,\n] as const;\nconst sandboxAdapterByType = new Map(\n  sandboxAdapters.map((adapter) => [adapter.type, adapter]),\n) as Map<SandboxConfig[\"type\"], SandboxAdapter>;\n\nexport function getSandboxAdapters(): readonly [...typeof sandboxAdapters] {\n  return sandboxAdapters;\n}\n\nexport function parseSandboxArg(value: string): SandboxConfig {\n  for (const adapter of sandboxAdapters) {\n    const config = adapter.parse(value);\n    if (config) {\n      return config;\n    }\n  }\n\n  if (value.startsWith(\"docker:\")) {\n    throw new SandboxError(\n      `Error: '${value}' is not supported. Use 'container:<container-name>' for the shared-container mode or 'image:<image-name>' for mama-managed per-user containers.`,\n    );\n  }\n\n  throw new SandboxError(\n    `Error: Invalid sandbox type '${value}'. Use 'host', 'container:<container-name>', 'image:<image-name>', 'firecracker:<vm-id>:<host-path>', or 'cloudflare:<sandbox-id>'`,\n  );\n}\n\nexport async function validateSandbox(config: SandboxConfig): Promise<void> {\n  const adapter = sandboxAdapterByType.get(config.type);\n  if (!adapter) {\n    throw new SandboxError(`Error: Unsupported sandbox type '${config.type}'`);\n  }\n\n  await adapter.validate(config);\n}\n\n/**\n * Create an executor that runs commands on host, in Docker, in a Firecracker VM, or through a Cloudflare sandbox bridge.\n */\nexport function createExecutor(\n  config: SandboxConfig,\n  env?: Record<string, string>,\n  ensureReady?: () => Promise<void>,\n): Executor {\n  const adapter = sandboxAdapterByType.get(config.type);\n  if (!adapter) {\n    throw new SandboxError(`Error: Unsupported sandbox type '${config.type}'`);\n  }\n  return adapter.createExecutor(config, env, ensureReady);\n}\n"]}

package/dist/sandbox/path-context.d.ts

@@ -0,0 +1,4 @@
+import type { RuntimePathContext } from "./types.js";
+export declare function createMountedRuntimePathContext(hostWorkspaceRoot: string, runtimeWorkspaceRoot: string): RuntimePathContext;
+export declare function translateMountedRuntimePathToHost(runtimePath: string, runtimeWorkspaceRoot: string, hostWorkspaceRoot: string): string;
+//# sourceMappingURL=path-context.d.ts.map

package/dist/sandbox/path-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-context.d.ts","sourceRoot":"","sources":["../../src/sandbox/path-context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,wBAAgB,+BAA+B,CAC7C,iBAAiB,EAAE,MAAM,EACzB,oBAAoB,EAAE,MAAM,GAC3B,kBAAkB,CAOpB;AAED,wBAAgB,iCAAiC,CAC/C,WAAW,EAAE,MAAM,EACnB,oBAAoB,EAAE,MAAM,EAC5B,iBAAiB,EAAE,MAAM,GACxB,MAAM,CAYR","sourcesContent":["import { join } from \"node:path\";\nimport type { RuntimePathContext } from \"./types.js\";\n\nexport function createMountedRuntimePathContext(\n  hostWorkspaceRoot: string,\n  runtimeWorkspaceRoot: string,\n): RuntimePathContext {\n  return {\n    hostWorkspaceRoot,\n    runtimeWorkspaceRoot,\n    runtimeToHostPath: (runtimePath) =>\n      translateMountedRuntimePathToHost(runtimePath, runtimeWorkspaceRoot, hostWorkspaceRoot),\n  };\n}\n\nexport function translateMountedRuntimePathToHost(\n  runtimePath: string,\n  runtimeWorkspaceRoot: string,\n  hostWorkspaceRoot: string,\n): string {\n  const runtimeRoot = runtimeWorkspaceRoot.replace(/\\/+$/, \"\");\n  if (runtimePath === runtimeRoot) {\n    return hostWorkspaceRoot;\n  }\n\n  const workspacePrefix = `${runtimeRoot}/`;\n  if (runtimePath.startsWith(workspacePrefix)) {\n    return join(hostWorkspaceRoot, runtimePath.slice(workspacePrefix.length));\n  }\n\n  return runtimePath;\n}\n"]}

package/dist/sandbox/path-context.js

@@ -0,0 +1,20 @@
+import { join } from "node:path";
+export function createMountedRuntimePathContext(hostWorkspaceRoot, runtimeWorkspaceRoot) {
+    return {
+        hostWorkspaceRoot,
+        runtimeWorkspaceRoot,
+        runtimeToHostPath: (runtimePath) => translateMountedRuntimePathToHost(runtimePath, runtimeWorkspaceRoot, hostWorkspaceRoot),
+    };
+}
+export function translateMountedRuntimePathToHost(runtimePath, runtimeWorkspaceRoot, hostWorkspaceRoot) {
+    const runtimeRoot = runtimeWorkspaceRoot.replace(/\/+$/, "");
+    if (runtimePath === runtimeRoot) {
+        return hostWorkspaceRoot;
+    }
+    const workspacePrefix = `${runtimeRoot}/`;
+    if (runtimePath.startsWith(workspacePrefix)) {
+        return join(hostWorkspaceRoot, runtimePath.slice(workspacePrefix.length));
+    }
+    return runtimePath;
+}
+//# sourceMappingURL=path-context.js.map

package/dist/sandbox/path-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-context.js","sourceRoot":"","sources":["../../src/sandbox/path-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,UAAU,+BAA+B,CAC7C,iBAAyB,EACzB,oBAA4B;IAE5B,OAAO;QACL,iBAAiB;QACjB,oBAAoB;QACpB,iBAAiB,EAAE,CAAC,WAAW,EAAE,EAAE,CACjC,iCAAiC,CAAC,WAAW,EAAE,oBAAoB,EAAE,iBAAiB,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,WAAmB,EACnB,oBAA4B,EAC5B,iBAAyB;IAEzB,MAAM,WAAW,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7D,IAAI,WAAW,KAAK,WAAW,EAAE,CAAC;QAChC,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,MAAM,eAAe,GAAG,GAAG,WAAW,GAAG,CAAC;IAC1C,IAAI,WAAW,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC","sourcesContent":["import { join } from \"node:path\";\nimport type { RuntimePathContext } from \"./types.js\";\n\nexport function createMountedRuntimePathContext(\n  hostWorkspaceRoot: string,\n  runtimeWorkspaceRoot: string,\n): RuntimePathContext {\n  return {\n    hostWorkspaceRoot,\n    runtimeWorkspaceRoot,\n    runtimeToHostPath: (runtimePath) =>\n      translateMountedRuntimePathToHost(runtimePath, runtimeWorkspaceRoot, hostWorkspaceRoot),\n  };\n}\n\nexport function translateMountedRuntimePathToHost(\n  runtimePath: string,\n  runtimeWorkspaceRoot: string,\n  hostWorkspaceRoot: string,\n): string {\n  const runtimeRoot = runtimeWorkspaceRoot.replace(/\\/+$/, \"\");\n  if (runtimePath === runtimeRoot) {\n    return hostWorkspaceRoot;\n  }\n\n  const workspacePrefix = `${runtimeRoot}/`;\n  if (runtimePath.startsWith(workspacePrefix)) {\n    return join(hostWorkspaceRoot, runtimePath.slice(workspacePrefix.length));\n  }\n\n  return runtimePath;\n}\n"]}

package/dist/sandbox/types.d.ts

@@ -1,4 +1,4 @@
-export type SandboxConfig = HostSandboxConfig | ContainerSandboxConfig | ImageSandboxConfig | FirecrackerSandboxConfig;
+export type SandboxConfig = HostSandboxConfig | ContainerSandboxConfig | ImageSandboxConfig | FirecrackerSandboxConfig | CloudflareSandboxConfig;
 export interface HostSandboxConfig {
     type: "host";
 }
@@ -17,6 +17,10 @@ export interface FirecrackerSandboxConfig {
     sshUser?: string;
     sshPort?: number;
 }
+export interface CloudflareSandboxConfig {
+    type: "cloudflare";
+    sandboxId: string;
+}
 export interface Executor {
     /**
      * Execute a bash command.
@@ -28,11 +32,23 @@ export interface Executor {
      * Container/Firecracker: returns /workspace.
      */
     getWorkspacePath(hostPath: string): string;
+    /**
+     * Return explicit host/control-plane/runtime path semantics for this executor.
+     */
+    getPathContext(hostWorkspaceRoot: string): RuntimePathContext;
     /**
      * Get the current sandbox config used by this executor.
      */
     getSandboxConfig(): SandboxConfig;
 }
+export interface RuntimePathContext {
+    /** Host-side workspace root used by mama's control plane. */
+    hostWorkspaceRoot: string;
+    /** Workspace root as seen by bash/read/write/edit inside the runtime. */
+    runtimeWorkspaceRoot: string;
+    /** Translate a runtime path back to a host path when the runtime is host-backed. */
+    runtimeToHostPath?: (runtimePath: string) => string;
+}
 export interface ExecOptions {
     timeout?: number;
     signal?: AbortSignal;

package/dist/sandbox/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/sandbox/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GACrB,iBAAiB,GACjB,sBAAsB,GACtB,kBAAkB,GAClB,wBAAwB,CAAC;AAE7B,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB;;OAEG;IACH,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAElE;;;;OAIG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAE3C;;OAEG;IACH,gBAAgB,IAAI,aAAa,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc,CAAC,OAAO,SAAS,aAAa,GAAG,aAAa;IAC3E,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACtB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,cAAc,CACZ,MAAM,EAAE,OAAO,EACf,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAChC,QAAQ,CAAC;CACb","sourcesContent":["export type SandboxConfig =\n  | HostSandboxConfig\n  | ContainerSandboxConfig\n  | ImageSandboxConfig\n  | FirecrackerSandboxConfig;\n\nexport interface HostSandboxConfig {\n  type: \"host\";\n}\n\nexport interface ContainerSandboxConfig {\n  type: \"container\";\n  container: string;\n}\n\nexport interface ImageSandboxConfig {\n  type: \"image\";\n  image: string;\n}\n\nexport interface FirecrackerSandboxConfig {\n  type: \"firecracker\";\n  vmId: string;\n  hostPath: string;\n  sshUser?: string;\n  sshPort?: number;\n}\n\nexport interface Executor {\n  /**\n   * Execute a bash command.\n   */\n  exec(command: string, options?: ExecOptions): Promise<ExecResult>;\n\n  /**\n   * Get the workspace path prefix for this executor.\n   * Host: returns the actual path.\n   * Container/Firecracker: returns /workspace.\n   */\n  getWorkspacePath(hostPath: string): string;\n\n  /**\n   * Get the current sandbox config used by this executor.\n   */\n  getSandboxConfig(): SandboxConfig;\n}\n\nexport interface ExecOptions {\n  timeout?: number;\n  signal?: AbortSignal;\n}\n\nexport interface ExecResult {\n  stdout: string;\n  stderr: string;\n  code: number;\n}\n\nexport interface SandboxAdapter<TConfig extends SandboxConfig = SandboxConfig> {\n  type: TConfig[\"type\"];\n  parse(value: string): TConfig | undefined;\n  validate(config: TConfig): Promise<void>;\n  createExecutor(\n    config: TConfig,\n    env?: Record<string, string>,\n    ensureReady?: () => Promise<void>,\n  ): Executor;\n}\n"]}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/sandbox/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GACrB,iBAAiB,GACjB,sBAAsB,GACtB,kBAAkB,GAClB,wBAAwB,GACxB,uBAAuB,CAAC;AAE5B,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,YAAY,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,QAAQ;IACvB;;OAEG;IACH,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAElE;;;;OAIG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAE3C;;OAEG;IACH,cAAc,CAAC,iBAAiB,EAAE,MAAM,GAAG,kBAAkB,CAAC;IAE9D;;OAEG;IACH,gBAAgB,IAAI,aAAa,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,6DAA6D;IAC7D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,yEAAyE;IACzE,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oFAAoF;IACpF,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,CAAC;CACrD;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc,CAAC,OAAO,SAAS,aAAa,GAAG,aAAa;IAC3E,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACtB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,cAAc,CACZ,MAAM,EAAE,OAAO,EACf,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAChC,QAAQ,CAAC;CACb","sourcesContent":["export type SandboxConfig =\n  | HostSandboxConfig\n  | ContainerSandboxConfig\n  | ImageSandboxConfig\n  | FirecrackerSandboxConfig\n  | CloudflareSandboxConfig;\n\nexport interface HostSandboxConfig {\n  type: \"host\";\n}\n\nexport interface ContainerSandboxConfig {\n  type: \"container\";\n  container: string;\n}\n\nexport interface ImageSandboxConfig {\n  type: \"image\";\n  image: string;\n}\n\nexport interface FirecrackerSandboxConfig {\n  type: \"firecracker\";\n  vmId: string;\n  hostPath: string;\n  sshUser?: string;\n  sshPort?: number;\n}\n\nexport interface CloudflareSandboxConfig {\n  type: \"cloudflare\";\n  sandboxId: string;\n}\n\nexport interface Executor {\n  /**\n   * Execute a bash command.\n   */\n  exec(command: string, options?: ExecOptions): Promise<ExecResult>;\n\n  /**\n   * Get the workspace path prefix for this executor.\n   * Host: returns the actual path.\n   * Container/Firecracker: returns /workspace.\n   */\n  getWorkspacePath(hostPath: string): string;\n\n  /**\n   * Return explicit host/control-plane/runtime path semantics for this executor.\n   */\n  getPathContext(hostWorkspaceRoot: string): RuntimePathContext;\n\n  /**\n   * Get the current sandbox config used by this executor.\n   */\n  getSandboxConfig(): SandboxConfig;\n}\n\nexport interface RuntimePathContext {\n  /** Host-side workspace root used by mama's control plane. */\n  hostWorkspaceRoot: string;\n  /** Workspace root as seen by bash/read/write/edit inside the runtime. */\n  runtimeWorkspaceRoot: string;\n  /** Translate a runtime path back to a host path when the runtime is host-backed. */\n  runtimeToHostPath?: (runtimePath: string) => string;\n}\n\nexport interface ExecOptions {\n  timeout?: number;\n  signal?: AbortSignal;\n}\n\nexport interface ExecResult {\n  stdout: string;\n  stderr: string;\n  code: number;\n}\n\nexport interface SandboxAdapter<TConfig extends SandboxConfig = SandboxConfig> {\n  type: TConfig[\"type\"];\n  parse(value: string): TConfig | undefined;\n  validate(config: TConfig): Promise<void>;\n  createExecutor(\n    config: TConfig,\n    env?: Record<string, string>,\n    ensureReady?: () => Promise<void>,\n  ): Executor;\n}\n"]}

package/dist/sandbox/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/sandbox/types.ts"],"names":[],"mappings":"","sourcesContent":["export type SandboxConfig =\n  | HostSandboxConfig\n  | ContainerSandboxConfig\n  | ImageSandboxConfig\n  | FirecrackerSandboxConfig;\n\nexport interface HostSandboxConfig {\n  type: \"host\";\n}\n\nexport interface ContainerSandboxConfig {\n  type: \"container\";\n  container: string;\n}\n\nexport interface ImageSandboxConfig {\n  type: \"image\";\n  image: string;\n}\n\nexport interface FirecrackerSandboxConfig {\n  type: \"firecracker\";\n  vmId: string;\n  hostPath: string;\n  sshUser?: string;\n  sshPort?: number;\n}\n\nexport interface Executor {\n  /**\n   * Execute a bash command.\n   */\n  exec(command: string, options?: ExecOptions): Promise<ExecResult>;\n\n  /**\n   * Get the workspace path prefix for this executor.\n   * Host: returns the actual path.\n   * Container/Firecracker: returns /workspace.\n   */\n  getWorkspacePath(hostPath: string): string;\n\n  /**\n   * Get the current sandbox config used by this executor.\n   */\n  getSandboxConfig(): SandboxConfig;\n}\n\nexport interface ExecOptions {\n  timeout?: number;\n  signal?: AbortSignal;\n}\n\nexport interface ExecResult {\n  stdout: string;\n  stderr: string;\n  code: number;\n}\n\nexport interface SandboxAdapter<TConfig extends SandboxConfig = SandboxConfig> {\n  type: TConfig[\"type\"];\n  parse(value: string): TConfig | undefined;\n  validate(config: TConfig): Promise<void>;\n  createExecutor(\n    config: TConfig,\n    env?: Record<string, string>,\n    ensureReady?: () => Promise<void>,\n  ): Executor;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/sandbox/types.ts"],"names":[],"mappings":"","sourcesContent":["export type SandboxConfig =\n  | HostSandboxConfig\n  | ContainerSandboxConfig\n  | ImageSandboxConfig\n  | FirecrackerSandboxConfig\n  | CloudflareSandboxConfig;\n\nexport interface HostSandboxConfig {\n  type: \"host\";\n}\n\nexport interface ContainerSandboxConfig {\n  type: \"container\";\n  container: string;\n}\n\nexport interface ImageSandboxConfig {\n  type: \"image\";\n  image: string;\n}\n\nexport interface FirecrackerSandboxConfig {\n  type: \"firecracker\";\n  vmId: string;\n  hostPath: string;\n  sshUser?: string;\n  sshPort?: number;\n}\n\nexport interface CloudflareSandboxConfig {\n  type: \"cloudflare\";\n  sandboxId: string;\n}\n\nexport interface Executor {\n  /**\n   * Execute a bash command.\n   */\n  exec(command: string, options?: ExecOptions): Promise<ExecResult>;\n\n  /**\n   * Get the workspace path prefix for this executor.\n   * Host: returns the actual path.\n   * Container/Firecracker: returns /workspace.\n   */\n  getWorkspacePath(hostPath: string): string;\n\n  /**\n   * Return explicit host/control-plane/runtime path semantics for this executor.\n   */\n  getPathContext(hostWorkspaceRoot: string): RuntimePathContext;\n\n  /**\n   * Get the current sandbox config used by this executor.\n   */\n  getSandboxConfig(): SandboxConfig;\n}\n\nexport interface RuntimePathContext {\n  /** Host-side workspace root used by mama's control plane. */\n  hostWorkspaceRoot: string;\n  /** Workspace root as seen by bash/read/write/edit inside the runtime. */\n  runtimeWorkspaceRoot: string;\n  /** Translate a runtime path back to a host path when the runtime is host-backed. */\n  runtimeToHostPath?: (runtimePath: string) => string;\n}\n\nexport interface ExecOptions {\n  timeout?: number;\n  signal?: AbortSignal;\n}\n\nexport interface ExecResult {\n  stdout: string;\n  stderr: string;\n  code: number;\n}\n\nexport interface SandboxAdapter<TConfig extends SandboxConfig = SandboxConfig> {\n  type: TConfig[\"type\"];\n  parse(value: string): TConfig | undefined;\n  validate(config: TConfig): Promise<void>;\n  createExecutor(\n    config: TConfig,\n    env?: Record<string, string>,\n    ensureReady?: () => Promise<void>,\n  ): Executor;\n}\n"]}

package/dist/sentry.d.ts

@@ -1,4 +1,5 @@
 import type { Breadcrumb, ErrorEvent, Event, EventHint, Scope } from "@sentry/node";
+type SentryPrimitive = string | number | boolean;
 export interface SentryRunScopeContext {
     conversationId: string;
     sessionKey: string;
@@ -9,7 +10,23 @@ export interface SentryRunScopeContext {
     threadTs?: string;
     provider?: string;
     model?: string;
-    isEvent?: boolean;
+}
+export type UserFacingErrorDomain = "llm" | "chat_platform" | "mama" | "sandbox" | "login" | "events" | "session_view";
+export type UserFacingErrorSeverity = "warning" | "error" | "fatal";
+export interface ReportUserFacingErrorOptions {
+    domain: UserFacingErrorDomain;
+    surface: string;
+    operation: string;
+    severity?: UserFacingErrorSeverity;
+    platform?: string;
+    provider?: string;
+    model?: string;
+    toolName?: string;
+    stopReason?: string;
+    expected?: boolean;
+    fingerprint?: string[];
+    tags?: Record<string, SentryPrimitive | undefined>;
+    context?: Record<string, unknown>;
 }
 export declare function createSentryInitOptions(dsn?: string): {
     dsn: string | undefined;
@@ -22,10 +39,12 @@ export declare function createSentryInitOptions(dsn?: string): {
     beforeSend(event: ErrorEvent, hint: EventHint): ErrorEvent | null;
     beforeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null;
 };
+export declare function reportUserFacingError(error: unknown, options: ReportUserFacingErrorOptions): string | undefined;
 export declare function applyRunScope(scope: Scope, context: SentryRunScopeContext): void;
 export declare function metricAttributes(attributes: Record<string, string | number | boolean | undefined>): Record<string, string | number | boolean>;
 export declare function addLifecycleBreadcrumb(message: string, data?: Record<string, string | number | boolean | undefined>): void;
 export declare function sanitizeEvent<T extends Event>(event: T, _hint?: EventHint): T | null;
 export declare function sanitizeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null;
 export declare function sanitizeValue(value: unknown, key?: string, depth?: number): unknown;
+export {};
 //# sourceMappingURL=sentry.d.ts.map

package/dist/sentry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sentry.d.ts","sourceRoot":"","sources":["../src/sentry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AA6CpF,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,uBAAuB,CAAC,GAAG,CAAC,EAAE,MAAM;;;;;;;;sBAS9B,UAAU,QAAQ,SAAS,GAAG,UAAU,GAAG,IAAI;iCAGpC,UAAU,GAAG,UAAU,GAAG,IAAI;EAI9D;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAyBhF;AAED,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,GAChE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAO3C;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,GAC3D,IAAI,CAON;AAED,wBAAgB,aAAa,CAAC,CAAC,SAAS,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,SAAS,GAAG,CAAC,GAAG,IAAI,CA2CpF;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAU5E;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,OAAO,CAwB9E","sourcesContent":["import type { Breadcrumb, ErrorEvent, Event, EventHint, Scope } from \"@sentry/node\";\nimport * as Sentry from \"@sentry/node\";\n\nconst REDACTED = \"[REDACTED]\";\nconst REDACTED_PATH = \"[REDACTED_PATH]\";\nconst MAX_STRING_LENGTH = 256;\nconst MAX_DEPTH = 4;\n\nconst SENSITIVE_KEYS = new Set([\n  \"args\",\n  \"attachment\",\n  \"attachments\",\n  \"authorization\",\n  \"body\",\n  \"content\",\n  \"contents\",\n  \"cookie\",\n  \"cookies\",\n  \"filePath\",\n  \"headers\",\n  \"image\",\n  \"imageAttachments\",\n  \"images\",\n  \"localPath\",\n  \"messages\",\n  \"newUserMessage\",\n  \"path\",\n  \"paths\",\n  \"prompt\",\n  \"response\",\n  \"result\",\n  \"systemPrompt\",\n  \"text\",\n  \"thinking\",\n]);\n\nconst ABSOLUTE_PATH_PATTERN =\n  /(?:\\/Users\\/[^\\s\"'`]+|\\/workspace\\/[^\\s\"'`]+|\\/tmp\\/[^\\s\"'`]+|\\/var\\/folders\\/[^\\s\"'`]+|[A-Za-z]:\\\\[^\\s\"'`]+)/;\nconst TOKEN_PATTERNS = [\n  /\\bsk-[A-Za-z0-9_-]{12,}\\b/,\n  /\\bxox[a-z]-[A-Za-z0-9-]{10,}\\b/,\n  /\\bAIza[0-9A-Za-z_-]{20,}\\b/,\n  /\\bgh[pousr]_[A-Za-z0-9]{20,}\\b/,\n];\n\nexport interface SentryRunScopeContext {\n  conversationId: string;\n  sessionKey: string;\n  messageId: string;\n  platform: string;\n  userId: string;\n  userName?: string;\n  threadTs?: string;\n  provider?: string;\n  model?: string;\n  isEvent?: boolean;\n}\n\nexport function createSentryInitOptions(dsn?: string) {\n  return {\n    dsn,\n    environment: process.env.SENTRY_ENVIRONMENT ?? \"production\",\n    enabled: Boolean(dsn) && process.env.SENTRY_ENABLED !== \"false\",\n    sendDefaultPii: false,\n    tracesSampleRate: process.env.NODE_ENV === \"development\" ? 1.0 : 1.0,\n    includeLocalVariables: false,\n    enableLogs: true,\n    beforeSend(event: ErrorEvent, hint: EventHint): ErrorEvent | null {\n      return sanitizeEvent(event, hint);\n    },\n    beforeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null {\n      return sanitizeBreadcrumb(breadcrumb);\n    },\n  };\n}\n\nexport function applyRunScope(scope: Scope, context: SentryRunScopeContext): void {\n  scope.setTag(\"conversation_id\", context.conversationId);\n  scope.setTag(\"channel_id\", context.conversationId);\n  scope.setTag(\"session_key\", context.sessionKey);\n  scope.setTag(\"platform\", context.platform);\n  scope.setTag(\"is_event\", String(Boolean(context.isEvent)));\n  if (context.threadTs) scope.setTag(\"thread_ts\", context.threadTs);\n  if (context.provider) scope.setTag(\"provider\", context.provider);\n  if (context.model) scope.setTag(\"model\", context.model);\n\n  scope.setUser({\n    id: context.userId,\n    username: context.userName,\n  });\n  scope.setContext(\"agent_run\", {\n    conversationId: context.conversationId,\n    channelId: context.conversationId,\n    sessionKey: context.sessionKey,\n    messageId: context.messageId,\n    threadTs: context.threadTs,\n    platform: context.platform,\n    provider: context.provider,\n    model: context.model,\n    isEvent: Boolean(context.isEvent),\n  });\n}\n\nexport function metricAttributes(\n  attributes: Record<string, string | number | boolean | undefined>,\n): Record<string, string | number | boolean> {\n  return Object.fromEntries(\n    Object.entries(attributes).filter((entry): entry is [string, string | number | boolean] => {\n      const [, value] = entry;\n      return value !== undefined;\n    }),\n  );\n}\n\nexport function addLifecycleBreadcrumb(\n  message: string,\n  data?: Record<string, string | number | boolean | undefined>,\n): void {\n  Sentry.addBreadcrumb({\n    category: \"agent.lifecycle\",\n    message,\n    level: \"info\",\n    data: data ? metricAttributes(data) : undefined,\n  });\n}\n\nexport function sanitizeEvent<T extends Event>(event: T, _hint?: EventHint): T | null {\n  const sanitized: T = {\n    ...event,\n    breadcrumbs: event.breadcrumbs\n      ?.map((breadcrumb) => sanitizeBreadcrumb(breadcrumb))\n      .filter((breadcrumb): breadcrumb is Breadcrumb => breadcrumb !== null),\n    extra: sanitizeValue(event.extra) as T[\"extra\"],\n    contexts: sanitizeValue(event.contexts) as T[\"contexts\"],\n    request: sanitizeRequest(event.request),\n    user: undefined,\n    server_name: undefined,\n  };\n\n  if (sanitized.message) {\n    sanitized.message = sanitizeString(sanitized.message);\n  }\n\n  if (sanitized.logentry) {\n    sanitized.logentry = {\n      ...sanitized.logentry,\n      message: sanitized.logentry.message ? sanitizeString(sanitized.logentry.message) : undefined,\n    };\n  }\n\n  if (sanitized.exception?.values) {\n    sanitized.exception.values = sanitized.exception.values.map((value) => ({\n      ...value,\n      value: value.value ? sanitizeString(value.value) : value.value,\n      stacktrace: value.stacktrace\n        ? {\n            ...value.stacktrace,\n            frames: value.stacktrace.frames?.map((frame) => ({\n              ...frame,\n              filename: frame.filename ? sanitizeString(frame.filename) : frame.filename,\n              abs_path: frame.abs_path ? sanitizeString(frame.abs_path) : frame.abs_path,\n              vars: undefined,\n            })),\n          }\n        : value.stacktrace,\n    }));\n  }\n\n  return sanitized;\n}\n\nexport function sanitizeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null {\n  if (breadcrumb.category === \"console\") {\n    return null;\n  }\n\n  return {\n    ...breadcrumb,\n    message: breadcrumb.message ? sanitizeString(breadcrumb.message) : breadcrumb.message,\n    data: sanitizeValue(breadcrumb.data) as Breadcrumb[\"data\"],\n  };\n}\n\nexport function sanitizeValue(value: unknown, key?: string, depth = 0): unknown {\n  if (value == null) return value;\n  if (depth > MAX_DEPTH) return \"[Truncated]\";\n\n  if (isSensitiveKey(key)) {\n    return summarizeValue(value, key);\n  }\n\n  if (typeof value === \"string\") {\n    return sanitizeString(value);\n  }\n\n  if (Array.isArray(value)) {\n    return value.slice(0, 20).map((entry) => sanitizeValue(entry, key, depth + 1));\n  }\n\n  if (typeof value === \"object\") {\n    const entries = Object.entries(value as Record<string, unknown>).map(\n      ([entryKey, entryValue]) => [entryKey, sanitizeValue(entryValue, entryKey, depth + 1)],\n    );\n    return Object.fromEntries(entries);\n  }\n\n  return value;\n}\n\nfunction sanitizeRequest(request: Event[\"request\"]): Event[\"request\"] {\n  if (!request) return request;\n\n  return {\n    ...request,\n    data: request.data ? summarizeValue(request.data, \"body\") : undefined,\n    headers: undefined,\n    cookies: undefined,\n  };\n}\n\nfunction isSensitiveKey(key?: string): boolean {\n  if (!key) return false;\n  return SENSITIVE_KEYS.has(key);\n}\n\nfunction summarizeValue(value: unknown, key?: string): string {\n  const label = key ?? \"field\";\n  if (typeof value === \"string\") {\n    return `[Redacted ${label}; length=${value.length}]`;\n  }\n  if (Array.isArray(value)) {\n    return `[Redacted ${label}; items=${value.length}]`;\n  }\n  if (value && typeof value === \"object\") {\n    return `[Redacted ${label}; keys=${Object.keys(value as Record<string, unknown>).length}]`;\n  }\n  return `[Redacted ${label}]`;\n}\n\nfunction sanitizeString(value: string): string {\n  let sanitized = value.replace(new RegExp(ABSOLUTE_PATH_PATTERN, \"g\"), REDACTED_PATH);\n  for (const pattern of TOKEN_PATTERNS) {\n    sanitized = sanitized.replace(new RegExp(pattern, \"g\"), REDACTED);\n  }\n  if (sanitized.length > MAX_STRING_LENGTH) {\n    return `${sanitized.slice(0, MAX_STRING_LENGTH)}… [truncated ${sanitized.length - MAX_STRING_LENGTH} chars]`;\n  }\n  return sanitized;\n}\n"]}
+{"version":3,"file":"sentry.d.ts","sourceRoot":"","sources":["../src/sentry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAQpF,KAAK,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAkDjD,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,qBAAqB,GAC7B,KAAK,GACL,eAAe,GACf,MAAM,GACN,SAAS,GACT,OAAO,GACP,QAAQ,GACR,cAAc,CAAC;AAEnB,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;AAEpE,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,qBAAqB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,CAAC,CAAC;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,wBAAgB,uBAAuB,CAAC,GAAG,CAAC,EAAE,MAAM;;;;;;;;sBAS9B,UAAU,QAAQ,SAAS,GAAG,UAAU,GAAG,IAAI;iCAGpC,UAAU,GAAG,UAAU,GAAG,IAAI;EAI9D;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,4BAA4B,GACpC,MAAM,GAAG,SAAS,CAkCpB;AAMD,wBAAgB,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAuBhF;AAED,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,GAChE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAO3C;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,GAC3D,IAAI,CAON;AAED,wBAAgB,aAAa,CAAC,CAAC,SAAS,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,SAAS,GAAG,CAAC,GAAG,IAAI,CA2CpF;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAU5E;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,OAAO,CAwB9E","sourcesContent":["import type { Breadcrumb, ErrorEvent, Event, EventHint, Scope } from \"@sentry/node\";\nimport * as Sentry from \"@sentry/node\";\n\nconst REDACTED = \"[REDACTED]\";\nconst REDACTED_PATH = \"[REDACTED_PATH]\";\nconst MAX_STRING_LENGTH = 256;\nconst MAX_DEPTH = 4;\n\ntype SentryPrimitive = string | number | boolean;\n\nconst SENSITIVE_KEYS = new Set([\n  \"accesstoken\",\n  \"apikey\",\n  \"args\",\n  \"attachment\",\n  \"attachments\",\n  \"authorization\",\n  \"body\",\n  \"code\",\n  \"content\",\n  \"contents\",\n  \"cookie\",\n  \"cookies\",\n  \"credential\",\n  \"filepath\",\n  \"headers\",\n  \"image\",\n  \"imageattachments\",\n  \"images\",\n  \"localpath\",\n  \"messages\",\n  \"newusermessage\",\n  \"password\",\n  \"path\",\n  \"paths\",\n  \"prompt\",\n  \"refreshtoken\",\n  \"response\",\n  \"result\",\n  \"secret\",\n  \"systemprompt\",\n  \"text\",\n  \"thinking\",\n  \"token\",\n  \"url\",\n  \"uri\",\n  \"workspacepath\",\n]);\n\nconst ABSOLUTE_PATH_PATTERN =\n  /(?:\\/Users\\/[^\\s\"'`]+|\\/workspace\\/[^\\s\"'`]+|\\/tmp\\/[^\\s\"'`]+|\\/var\\/folders\\/[^\\s\"'`]+|[A-Za-z]:\\\\[^\\s\"'`]+)/;\nconst TOKEN_PATTERNS = [\n  /\\bsk-[A-Za-z0-9_-]{12,}\\b/,\n  /\\bxox[a-z]-[A-Za-z0-9-]{10,}\\b/,\n  /\\bAIza[0-9A-Za-z_-]{20,}\\b/,\n  /\\bgh[pousr]_[A-Za-z0-9]{20,}\\b/,\n];\n\nexport interface SentryRunScopeContext {\n  conversationId: string;\n  sessionKey: string;\n  messageId: string;\n  platform: string;\n  userId: string;\n  userName?: string;\n  threadTs?: string;\n  provider?: string;\n  model?: string;\n}\n\nexport type UserFacingErrorDomain =\n  | \"llm\"\n  | \"chat_platform\"\n  | \"mama\"\n  | \"sandbox\"\n  | \"login\"\n  | \"events\"\n  | \"session_view\";\n\nexport type UserFacingErrorSeverity = \"warning\" | \"error\" | \"fatal\";\n\nexport interface ReportUserFacingErrorOptions {\n  domain: UserFacingErrorDomain;\n  surface: string;\n  operation: string;\n  severity?: UserFacingErrorSeverity;\n  platform?: string;\n  provider?: string;\n  model?: string;\n  toolName?: string;\n  stopReason?: string;\n  expected?: boolean;\n  fingerprint?: string[];\n  tags?: Record<string, SentryPrimitive | undefined>;\n  context?: Record<string, unknown>;\n}\n\nexport function createSentryInitOptions(dsn?: string) {\n  return {\n    dsn,\n    environment: process.env.SENTRY_ENVIRONMENT ?? \"production\",\n    enabled: Boolean(dsn) && process.env.SENTRY_ENABLED !== \"false\",\n    sendDefaultPii: false,\n    tracesSampleRate: process.env.NODE_ENV === \"development\" ? 1.0 : 1.0,\n    includeLocalVariables: false,\n    enableLogs: true,\n    beforeSend(event: ErrorEvent, hint: EventHint): ErrorEvent | null {\n      return sanitizeEvent(event, hint);\n    },\n    beforeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null {\n      return sanitizeBreadcrumb(breadcrumb);\n    },\n  };\n}\n\nexport function reportUserFacingError(\n  error: unknown,\n  options: ReportUserFacingErrorOptions,\n): string | undefined {\n  if (options.expected) return undefined;\n\n  const exception = error instanceof Error ? error : new Error(String(error));\n  return Sentry.withScope((scope) => {\n    scope.setLevel(options.severity ?? \"error\");\n    scope.setTag(\"user_facing\", \"true\");\n    scope.setTag(\"expected\", \"false\");\n    scope.setTag(\"error_domain\", options.domain);\n    scope.setTag(\"error_surface\", options.surface);\n    scope.setTag(\"operation\", options.operation);\n    setOptionalTag(scope, \"platform\", options.platform);\n    setOptionalTag(scope, \"provider\", options.provider);\n    setOptionalTag(scope, \"model\", options.model);\n    setOptionalTag(scope, \"tool\", options.toolName);\n    setOptionalTag(scope, \"stop_reason\", options.stopReason);\n    for (const [key, value] of Object.entries(options.tags ?? {})) {\n      if (value !== undefined) scope.setTag(key, String(value));\n    }\n    if (options.fingerprint) scope.setFingerprint(options.fingerprint);\n    scope.setContext(\"user_facing_error\", {\n      domain: options.domain,\n      surface: options.surface,\n      operation: options.operation,\n      severity: options.severity ?? \"error\",\n      platform: options.platform,\n      provider: options.provider,\n      model: options.model,\n      toolName: options.toolName,\n      stopReason: options.stopReason,\n      ...(sanitizeValue(options.context ?? {}) as Record<string, unknown>),\n    });\n    return Sentry.captureException(exception);\n  });\n}\n\nfunction setOptionalTag(scope: Scope, key: string, value: string | undefined): void {\n  if (value !== undefined) scope.setTag(key, value);\n}\n\nexport function applyRunScope(scope: Scope, context: SentryRunScopeContext): void {\n  scope.setTag(\"conversation_id\", context.conversationId);\n  scope.setTag(\"channel_id\", context.conversationId);\n  scope.setTag(\"session_key\", context.sessionKey);\n  scope.setTag(\"platform\", context.platform);\n  if (context.threadTs) scope.setTag(\"thread_ts\", context.threadTs);\n  if (context.provider) scope.setTag(\"provider\", context.provider);\n  if (context.model) scope.setTag(\"model\", context.model);\n\n  scope.setUser({\n    id: context.userId,\n    username: context.userName,\n  });\n  scope.setContext(\"agent_run\", {\n    conversationId: context.conversationId,\n    channelId: context.conversationId,\n    sessionKey: context.sessionKey,\n    messageId: context.messageId,\n    threadTs: context.threadTs,\n    platform: context.platform,\n    provider: context.provider,\n    model: context.model,\n  });\n}\n\nexport function metricAttributes(\n  attributes: Record<string, string | number | boolean | undefined>,\n): Record<string, string | number | boolean> {\n  return Object.fromEntries(\n    Object.entries(attributes).filter((entry): entry is [string, string | number | boolean] => {\n      const [, value] = entry;\n      return value !== undefined;\n    }),\n  );\n}\n\nexport function addLifecycleBreadcrumb(\n  message: string,\n  data?: Record<string, string | number | boolean | undefined>,\n): void {\n  Sentry.addBreadcrumb({\n    category: \"agent.lifecycle\",\n    message,\n    level: \"info\",\n    data: data ? metricAttributes(data) : undefined,\n  });\n}\n\nexport function sanitizeEvent<T extends Event>(event: T, _hint?: EventHint): T | null {\n  const sanitized: T = {\n    ...event,\n    breadcrumbs: event.breadcrumbs\n      ?.map((breadcrumb) => sanitizeBreadcrumb(breadcrumb))\n      .filter((breadcrumb): breadcrumb is Breadcrumb => breadcrumb !== null),\n    extra: sanitizeValue(event.extra) as T[\"extra\"],\n    contexts: sanitizeValue(event.contexts) as T[\"contexts\"],\n    request: sanitizeRequest(event.request),\n    user: undefined,\n    server_name: undefined,\n  };\n\n  if (sanitized.message) {\n    sanitized.message = sanitizeString(sanitized.message);\n  }\n\n  if (sanitized.logentry) {\n    sanitized.logentry = {\n      ...sanitized.logentry,\n      message: sanitized.logentry.message ? sanitizeString(sanitized.logentry.message) : undefined,\n    };\n  }\n\n  if (sanitized.exception?.values) {\n    sanitized.exception.values = sanitized.exception.values.map((value) => ({\n      ...value,\n      value: value.value ? sanitizeString(value.value) : value.value,\n      stacktrace: value.stacktrace\n        ? {\n            ...value.stacktrace,\n            frames: value.stacktrace.frames?.map((frame) => ({\n              ...frame,\n              filename: frame.filename ? sanitizeString(frame.filename) : frame.filename,\n              abs_path: frame.abs_path ? sanitizeString(frame.abs_path) : frame.abs_path,\n              vars: undefined,\n            })),\n          }\n        : value.stacktrace,\n    }));\n  }\n\n  return sanitized;\n}\n\nexport function sanitizeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null {\n  if (breadcrumb.category === \"console\") {\n    return null;\n  }\n\n  return {\n    ...breadcrumb,\n    message: breadcrumb.message ? sanitizeString(breadcrumb.message) : breadcrumb.message,\n    data: sanitizeValue(breadcrumb.data) as Breadcrumb[\"data\"],\n  };\n}\n\nexport function sanitizeValue(value: unknown, key?: string, depth = 0): unknown {\n  if (value == null) return value;\n  if (depth > MAX_DEPTH) return \"[Truncated]\";\n\n  if (isSensitiveKey(key)) {\n    return summarizeValue(value, key);\n  }\n\n  if (typeof value === \"string\") {\n    return sanitizeString(value);\n  }\n\n  if (Array.isArray(value)) {\n    return value.slice(0, 20).map((entry) => sanitizeValue(entry, key, depth + 1));\n  }\n\n  if (typeof value === \"object\") {\n    const entries = Object.entries(value as Record<string, unknown>).map(\n      ([entryKey, entryValue]) => [entryKey, sanitizeValue(entryValue, entryKey, depth + 1)],\n    );\n    return Object.fromEntries(entries);\n  }\n\n  return value;\n}\n\nfunction sanitizeRequest(request: Event[\"request\"]): Event[\"request\"] {\n  if (!request) return request;\n\n  return {\n    ...request,\n    data: request.data ? summarizeValue(request.data, \"body\") : undefined,\n    headers: undefined,\n    cookies: undefined,\n  };\n}\n\nfunction isSensitiveKey(key?: string): boolean {\n  if (!key) return false;\n  return SENSITIVE_KEYS.has(key.toLowerCase());\n}\n\nfunction summarizeValue(value: unknown, key?: string): string {\n  const label = key ?? \"field\";\n  if (typeof value === \"string\") {\n    return `[Redacted ${label}; length=${value.length}]`;\n  }\n  if (Array.isArray(value)) {\n    return `[Redacted ${label}; items=${value.length}]`;\n  }\n  if (value && typeof value === \"object\") {\n    return `[Redacted ${label}; keys=${Object.keys(value as Record<string, unknown>).length}]`;\n  }\n  return `[Redacted ${label}]`;\n}\n\nfunction sanitizeString(value: string): string {\n  let sanitized = value.replace(new RegExp(ABSOLUTE_PATH_PATTERN, \"g\"), REDACTED_PATH);\n  for (const pattern of TOKEN_PATTERNS) {\n    sanitized = sanitized.replace(new RegExp(pattern, \"g\"), REDACTED);\n  }\n  if (sanitized.length > MAX_STRING_LENGTH) {\n    return `${sanitized.slice(0, MAX_STRING_LENGTH)}… [truncated ${sanitized.length - MAX_STRING_LENGTH} chars]`;\n  }\n  return sanitized;\n}\n"]}

package/dist/sentry.js

@@ -4,31 +4,42 @@ const REDACTED_PATH = "[REDACTED_PATH]";
 const MAX_STRING_LENGTH = 256;
 const MAX_DEPTH = 4;
 const SENSITIVE_KEYS = new Set([
+    "accesstoken",
+    "apikey",
     "args",
     "attachment",
     "attachments",
     "authorization",
     "body",
+    "code",
     "content",
     "contents",
     "cookie",
     "cookies",
-    "filePath",
+    "credential",
+    "filepath",
     "headers",
     "image",
-    "imageAttachments",
+    "imageattachments",
     "images",
-    "localPath",
+    "localpath",
     "messages",
-    "newUserMessage",
+    "newusermessage",
+    "password",
     "path",
     "paths",
     "prompt",
+    "refreshtoken",
     "response",
     "result",
-    "systemPrompt",
+    "secret",
+    "systemprompt",
     "text",
     "thinking",
+    "token",
+    "url",
+    "uri",
+    "workspacepath",
 ]);
 const ABSOLUTE_PATH_PATTERN = /(?:\/Users\/[^\s"'`]+|\/workspace\/[^\s"'`]+|\/tmp\/[^\s"'`]+|\/var\/folders\/[^\s"'`]+|[A-Za-z]:\\[^\s"'`]+)/;
 const TOKEN_PATTERNS = [
@@ -54,12 +65,52 @@ export function createSentryInitOptions(dsn) {
         },
     };
 }
+export function reportUserFacingError(error, options) {
+    if (options.expected)
+        return undefined;
+    const exception = error instanceof Error ? error : new Error(String(error));
+    return Sentry.withScope((scope) => {
+        scope.setLevel(options.severity ?? "error");
+        scope.setTag("user_facing", "true");
+        scope.setTag("expected", "false");
+        scope.setTag("error_domain", options.domain);
+        scope.setTag("error_surface", options.surface);
+        scope.setTag("operation", options.operation);
+        setOptionalTag(scope, "platform", options.platform);
+        setOptionalTag(scope, "provider", options.provider);
+        setOptionalTag(scope, "model", options.model);
+        setOptionalTag(scope, "tool", options.toolName);
+        setOptionalTag(scope, "stop_reason", options.stopReason);
+        for (const [key, value] of Object.entries(options.tags ?? {})) {
+            if (value !== undefined)
+                scope.setTag(key, String(value));
+        }
+        if (options.fingerprint)
+            scope.setFingerprint(options.fingerprint);
+        scope.setContext("user_facing_error", {
+            domain: options.domain,
+            surface: options.surface,
+            operation: options.operation,
+            severity: options.severity ?? "error",
+            platform: options.platform,
+            provider: options.provider,
+            model: options.model,
+            toolName: options.toolName,
+            stopReason: options.stopReason,
+            ...sanitizeValue(options.context ?? {}),
+        });
+        return Sentry.captureException(exception);
+    });
+}
+function setOptionalTag(scope, key, value) {
+    if (value !== undefined)
+        scope.setTag(key, value);
+}
 export function applyRunScope(scope, context) {
     scope.setTag("conversation_id", context.conversationId);
     scope.setTag("channel_id", context.conversationId);
     scope.setTag("session_key", context.sessionKey);
     scope.setTag("platform", context.platform);
-    scope.setTag("is_event", String(Boolean(context.isEvent)));
     if (context.threadTs)
         scope.setTag("thread_ts", context.threadTs);
     if (context.provider)
@@ -79,7 +130,6 @@ export function applyRunScope(scope, context) {
         platform: context.platform,
         provider: context.provider,
         model: context.model,
-        isEvent: Boolean(context.isEvent),
     });
 }
 export function metricAttributes(attributes) {
@@ -179,7 +229,7 @@ function sanitizeRequest(request) {
 function isSensitiveKey(key) {
     if (!key)
         return false;
-    return SENSITIVE_KEYS.has(key);
+    return SENSITIVE_KEYS.has(key.toLowerCase());
 }
 function summarizeValue(value, key) {
     const label = key ?? "field";

package/dist/sentry.js.map

@@ -1 +1 @@
-{"version":3,"file":"sentry.js","sourceRoot":"","sources":["../src/sentry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AAEvC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,aAAa,GAAG,iBAAiB,CAAC;AACxC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,MAAM;IACN,YAAY;IACZ,aAAa;IACb,eAAe;IACf,MAAM;IACN,SAAS;IACT,UAAU;IACV,QAAQ;IACR,SAAS;IACT,UAAU;IACV,SAAS;IACT,OAAO;IACP,kBAAkB;IAClB,QAAQ;IACR,WAAW;IACX,UAAU;IACV,gBAAgB;IAChB,MAAM;IACN,OAAO;IACP,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,cAAc;IACd,MAAM;IACN,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,qBAAqB,GACzB,+GAA+G,CAAC;AAClH,MAAM,cAAc,GAAG;IACrB,2BAA2B;IAC3B,gCAAgC;IAChC,4BAA4B;IAC5B,gCAAgC;CACjC,CAAC;AAeF,MAAM,UAAU,uBAAuB,CAAC,GAAY;IAClD,OAAO;QACL,GAAG;QACH,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,YAAY;QAC3D,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,OAAO;QAC/D,cAAc,EAAE,KAAK;QACrB,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QACpE,qBAAqB,EAAE,KAAK;QAC5B,UAAU,EAAE,IAAI;QAChB,UAAU,CAAC,KAAiB,EAAE,IAAe;YAC3C,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,gBAAgB,CAAC,UAAsB;YACrC,OAAO,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAY,EAAE,OAA8B;IACxE,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACxD,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACnD,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,QAAQ;QAAE,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,QAAQ;QAAE,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,KAAK;QAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAExD,KAAK,CAAC,OAAO,CAAC;QACZ,EAAE,EAAE,OAAO,CAAC,MAAM;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IACH,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE;QAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,SAAS,EAAE,OAAO,CAAC,cAAc;QACjC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,UAAiE;IAEjE,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAgD,EAAE;QACxF,MAAM,CAAC,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC;QACxB,OAAO,KAAK,KAAK,SAAS,CAAC;IAC7B,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAe,EACf,IAA4D;IAE5D,MAAM,CAAC,aAAa,CAAC;QACnB,QAAQ,EAAE,iBAAiB;QAC3B,OAAO;QACP,KAAK,EAAE,MAAM;QACb,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAChD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAkB,KAAQ,EAAE,KAAiB;IACxE,MAAM,SAAS,GAAM;QACnB,GAAG,KAAK;QACR,WAAW,EAAE,KAAK,CAAC,WAAW;YAC5B,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;aACpD,MAAM,CAAC,CAAC,UAAU,EAA4B,EAAE,CAAC,UAAU,KAAK,IAAI,CAAC;QACxE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAe;QAC/C,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAkB;QACxD,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC;QACvC,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,SAAS;KACvB,CAAC;IAEF,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACtB,SAAS,CAAC,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QACvB,SAAS,CAAC,QAAQ,GAAG;YACnB,GAAG,SAAS,CAAC,QAAQ;YACrB,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7F,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QAChC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACtE,GAAG,KAAK;YACR,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK;YAC9D,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC1B,CAAC,CAAC;oBACE,GAAG,KAAK,CAAC,UAAU;oBACnB,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBAC/C,GAAG,KAAK;wBACR,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ;wBAC1E,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ;wBAC1E,IAAI,EAAE,SAAS;qBAChB,CAAC,CAAC;iBACJ;gBACH,CAAC,CAAC,KAAK,CAAC,UAAU;SACrB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAsB;IACvD,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,GAAG,UAAU;QACb,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO;QACrF,IAAI,EAAE,aAAa,CAAC,UAAU,CAAC,IAAI,CAAuB;KAC3D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,GAAY,EAAE,KAAK,GAAG,CAAC;IACnE,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,aAAa,CAAC;IAE5C,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAClE,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CACvF,CAAC;QACF,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,OAAyB;IAChD,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAE7B,OAAO;QACL,GAAG,OAAO;QACV,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QACrE,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,SAAS;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,OAAO,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,GAAY;IAClD,MAAM,KAAK,GAAG,GAAG,IAAI,OAAO,CAAC;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,aAAa,KAAK,YAAY,KAAK,CAAC,MAAM,GAAG,CAAC;IACvD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,aAAa,KAAK,WAAW,KAAK,CAAC,MAAM,GAAG,CAAC;IACtD,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,aAAa,KAAK,UAAU,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,MAAM,GAAG,CAAC;IAC7F,CAAC;IACD,OAAO,aAAa,KAAK,GAAG,CAAC;AAC/B,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,qBAAqB,EAAE,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC;IACrF,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACzC,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,gBAAgB,SAAS,CAAC,MAAM,GAAG,iBAAiB,SAAS,CAAC;IAC/G,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["import type { Breadcrumb, ErrorEvent, Event, EventHint, Scope } from \"@sentry/node\";\nimport * as Sentry from \"@sentry/node\";\n\nconst REDACTED = \"[REDACTED]\";\nconst REDACTED_PATH = \"[REDACTED_PATH]\";\nconst MAX_STRING_LENGTH = 256;\nconst MAX_DEPTH = 4;\n\nconst SENSITIVE_KEYS = new Set([\n  \"args\",\n  \"attachment\",\n  \"attachments\",\n  \"authorization\",\n  \"body\",\n  \"content\",\n  \"contents\",\n  \"cookie\",\n  \"cookies\",\n  \"filePath\",\n  \"headers\",\n  \"image\",\n  \"imageAttachments\",\n  \"images\",\n  \"localPath\",\n  \"messages\",\n  \"newUserMessage\",\n  \"path\",\n  \"paths\",\n  \"prompt\",\n  \"response\",\n  \"result\",\n  \"systemPrompt\",\n  \"text\",\n  \"thinking\",\n]);\n\nconst ABSOLUTE_PATH_PATTERN =\n  /(?:\\/Users\\/[^\\s\"'`]+|\\/workspace\\/[^\\s\"'`]+|\\/tmp\\/[^\\s\"'`]+|\\/var\\/folders\\/[^\\s\"'`]+|[A-Za-z]:\\\\[^\\s\"'`]+)/;\nconst TOKEN_PATTERNS = [\n  /\\bsk-[A-Za-z0-9_-]{12,}\\b/,\n  /\\bxox[a-z]-[A-Za-z0-9-]{10,}\\b/,\n  /\\bAIza[0-9A-Za-z_-]{20,}\\b/,\n  /\\bgh[pousr]_[A-Za-z0-9]{20,}\\b/,\n];\n\nexport interface SentryRunScopeContext {\n  conversationId: string;\n  sessionKey: string;\n  messageId: string;\n  platform: string;\n  userId: string;\n  userName?: string;\n  threadTs?: string;\n  provider?: string;\n  model?: string;\n  isEvent?: boolean;\n}\n\nexport function createSentryInitOptions(dsn?: string) {\n  return {\n    dsn,\n    environment: process.env.SENTRY_ENVIRONMENT ?? \"production\",\n    enabled: Boolean(dsn) && process.env.SENTRY_ENABLED !== \"false\",\n    sendDefaultPii: false,\n    tracesSampleRate: process.env.NODE_ENV === \"development\" ? 1.0 : 1.0,\n    includeLocalVariables: false,\n    enableLogs: true,\n    beforeSend(event: ErrorEvent, hint: EventHint): ErrorEvent | null {\n      return sanitizeEvent(event, hint);\n    },\n    beforeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null {\n      return sanitizeBreadcrumb(breadcrumb);\n    },\n  };\n}\n\nexport function applyRunScope(scope: Scope, context: SentryRunScopeContext): void {\n  scope.setTag(\"conversation_id\", context.conversationId);\n  scope.setTag(\"channel_id\", context.conversationId);\n  scope.setTag(\"session_key\", context.sessionKey);\n  scope.setTag(\"platform\", context.platform);\n  scope.setTag(\"is_event\", String(Boolean(context.isEvent)));\n  if (context.threadTs) scope.setTag(\"thread_ts\", context.threadTs);\n  if (context.provider) scope.setTag(\"provider\", context.provider);\n  if (context.model) scope.setTag(\"model\", context.model);\n\n  scope.setUser({\n    id: context.userId,\n    username: context.userName,\n  });\n  scope.setContext(\"agent_run\", {\n    conversationId: context.conversationId,\n    channelId: context.conversationId,\n    sessionKey: context.sessionKey,\n    messageId: context.messageId,\n    threadTs: context.threadTs,\n    platform: context.platform,\n    provider: context.provider,\n    model: context.model,\n    isEvent: Boolean(context.isEvent),\n  });\n}\n\nexport function metricAttributes(\n  attributes: Record<string, string | number | boolean | undefined>,\n): Record<string, string | number | boolean> {\n  return Object.fromEntries(\n    Object.entries(attributes).filter((entry): entry is [string, string | number | boolean] => {\n      const [, value] = entry;\n      return value !== undefined;\n    }),\n  );\n}\n\nexport function addLifecycleBreadcrumb(\n  message: string,\n  data?: Record<string, string | number | boolean | undefined>,\n): void {\n  Sentry.addBreadcrumb({\n    category: \"agent.lifecycle\",\n    message,\n    level: \"info\",\n    data: data ? metricAttributes(data) : undefined,\n  });\n}\n\nexport function sanitizeEvent<T extends Event>(event: T, _hint?: EventHint): T | null {\n  const sanitized: T = {\n    ...event,\n    breadcrumbs: event.breadcrumbs\n      ?.map((breadcrumb) => sanitizeBreadcrumb(breadcrumb))\n      .filter((breadcrumb): breadcrumb is Breadcrumb => breadcrumb !== null),\n    extra: sanitizeValue(event.extra) as T[\"extra\"],\n    contexts: sanitizeValue(event.contexts) as T[\"contexts\"],\n    request: sanitizeRequest(event.request),\n    user: undefined,\n    server_name: undefined,\n  };\n\n  if (sanitized.message) {\n    sanitized.message = sanitizeString(sanitized.message);\n  }\n\n  if (sanitized.logentry) {\n    sanitized.logentry = {\n      ...sanitized.logentry,\n      message: sanitized.logentry.message ? sanitizeString(sanitized.logentry.message) : undefined,\n    };\n  }\n\n  if (sanitized.exception?.values) {\n    sanitized.exception.values = sanitized.exception.values.map((value) => ({\n      ...value,\n      value: value.value ? sanitizeString(value.value) : value.value,\n      stacktrace: value.stacktrace\n        ? {\n            ...value.stacktrace,\n            frames: value.stacktrace.frames?.map((frame) => ({\n              ...frame,\n              filename: frame.filename ? sanitizeString(frame.filename) : frame.filename,\n              abs_path: frame.abs_path ? sanitizeString(frame.abs_path) : frame.abs_path,\n              vars: undefined,\n            })),\n          }\n        : value.stacktrace,\n    }));\n  }\n\n  return sanitized;\n}\n\nexport function sanitizeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null {\n  if (breadcrumb.category === \"console\") {\n    return null;\n  }\n\n  return {\n    ...breadcrumb,\n    message: breadcrumb.message ? sanitizeString(breadcrumb.message) : breadcrumb.message,\n    data: sanitizeValue(breadcrumb.data) as Breadcrumb[\"data\"],\n  };\n}\n\nexport function sanitizeValue(value: unknown, key?: string, depth = 0): unknown {\n  if (value == null) return value;\n  if (depth > MAX_DEPTH) return \"[Truncated]\";\n\n  if (isSensitiveKey(key)) {\n    return summarizeValue(value, key);\n  }\n\n  if (typeof value === \"string\") {\n    return sanitizeString(value);\n  }\n\n  if (Array.isArray(value)) {\n    return value.slice(0, 20).map((entry) => sanitizeValue(entry, key, depth + 1));\n  }\n\n  if (typeof value === \"object\") {\n    const entries = Object.entries(value as Record<string, unknown>).map(\n      ([entryKey, entryValue]) => [entryKey, sanitizeValue(entryValue, entryKey, depth + 1)],\n    );\n    return Object.fromEntries(entries);\n  }\n\n  return value;\n}\n\nfunction sanitizeRequest(request: Event[\"request\"]): Event[\"request\"] {\n  if (!request) return request;\n\n  return {\n    ...request,\n    data: request.data ? summarizeValue(request.data, \"body\") : undefined,\n    headers: undefined,\n    cookies: undefined,\n  };\n}\n\nfunction isSensitiveKey(key?: string): boolean {\n  if (!key) return false;\n  return SENSITIVE_KEYS.has(key);\n}\n\nfunction summarizeValue(value: unknown, key?: string): string {\n  const label = key ?? \"field\";\n  if (typeof value === \"string\") {\n    return `[Redacted ${label}; length=${value.length}]`;\n  }\n  if (Array.isArray(value)) {\n    return `[Redacted ${label}; items=${value.length}]`;\n  }\n  if (value && typeof value === \"object\") {\n    return `[Redacted ${label}; keys=${Object.keys(value as Record<string, unknown>).length}]`;\n  }\n  return `[Redacted ${label}]`;\n}\n\nfunction sanitizeString(value: string): string {\n  let sanitized = value.replace(new RegExp(ABSOLUTE_PATH_PATTERN, \"g\"), REDACTED_PATH);\n  for (const pattern of TOKEN_PATTERNS) {\n    sanitized = sanitized.replace(new RegExp(pattern, \"g\"), REDACTED);\n  }\n  if (sanitized.length > MAX_STRING_LENGTH) {\n    return `${sanitized.slice(0, MAX_STRING_LENGTH)}… [truncated ${sanitized.length - MAX_STRING_LENGTH} chars]`;\n  }\n  return sanitized;\n}\n"]}
+{"version":3,"file":"sentry.js","sourceRoot":"","sources":["../src/sentry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AAEvC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,aAAa,GAAG,iBAAiB,CAAC;AACxC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,SAAS,GAAG,CAAC,CAAC;AAIpB,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,aAAa;IACb,QAAQ;IACR,MAAM;IACN,YAAY;IACZ,aAAa;IACb,eAAe;IACf,MAAM;IACN,MAAM;IACN,SAAS;IACT,UAAU;IACV,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,UAAU;IACV,SAAS;IACT,OAAO;IACP,kBAAkB;IAClB,QAAQ;IACR,WAAW;IACX,UAAU;IACV,gBAAgB;IAChB,UAAU;IACV,MAAM;IACN,OAAO;IACP,QAAQ;IACR,cAAc;IACd,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,cAAc;IACd,MAAM;IACN,UAAU;IACV,OAAO;IACP,KAAK;IACL,KAAK;IACL,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,qBAAqB,GACzB,+GAA+G,CAAC;AAClH,MAAM,cAAc,GAAG;IACrB,2BAA2B;IAC3B,gCAAgC;IAChC,4BAA4B;IAC5B,gCAAgC;CACjC,CAAC;AAyCF,MAAM,UAAU,uBAAuB,CAAC,GAAY;IAClD,OAAO;QACL,GAAG;QACH,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,YAAY;QAC3D,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,OAAO;QAC/D,cAAc,EAAE,KAAK;QACrB,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QACpE,qBAAqB,EAAE,KAAK;QAC5B,UAAU,EAAE,IAAI;QAChB,UAAU,CAAC,KAAiB,EAAE,IAAe;YAC3C,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,gBAAgB,CAAC,UAAsB;YACrC,OAAO,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAc,EACd,OAAqC;IAErC,IAAI,OAAO,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAEvC,MAAM,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;QAChC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC;QAC5C,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACpC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/C,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7C,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpD,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpD,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9C,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChD,cAAc,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACzD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YAC9D,IAAI,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,OAAO,CAAC,WAAW;YAAE,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACnE,KAAK,CAAC,UAAU,CAAC,mBAAmB,EAAE;YACpC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO;YACrC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,GAAI,aAAa,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAA6B;SACrE,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,KAAY,EAAE,GAAW,EAAE,KAAyB;IAC1E,IAAI,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAY,EAAE,OAA8B;IACxE,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACxD,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACnD,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,QAAQ;QAAE,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,QAAQ;QAAE,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,KAAK;QAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAExD,KAAK,CAAC,OAAO,CAAC;QACZ,EAAE,EAAE,OAAO,CAAC,MAAM;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IACH,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE;QAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,SAAS,EAAE,OAAO,CAAC,cAAc;QACjC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,UAAiE;IAEjE,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAgD,EAAE;QACxF,MAAM,CAAC,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC;QACxB,OAAO,KAAK,KAAK,SAAS,CAAC;IAC7B,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAe,EACf,IAA4D;IAE5D,MAAM,CAAC,aAAa,CAAC;QACnB,QAAQ,EAAE,iBAAiB;QAC3B,OAAO;QACP,KAAK,EAAE,MAAM;QACb,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAChD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAkB,KAAQ,EAAE,KAAiB;IACxE,MAAM,SAAS,GAAM;QACnB,GAAG,KAAK;QACR,WAAW,EAAE,KAAK,CAAC,WAAW;YAC5B,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;aACpD,MAAM,CAAC,CAAC,UAAU,EAA4B,EAAE,CAAC,UAAU,KAAK,IAAI,CAAC;QACxE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAe;QAC/C,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAkB;QACxD,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC;QACvC,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,SAAS;KACvB,CAAC;IAEF,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACtB,SAAS,CAAC,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QACvB,SAAS,CAAC,QAAQ,GAAG;YACnB,GAAG,SAAS,CAAC,QAAQ;YACrB,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7F,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QAChC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACtE,GAAG,KAAK;YACR,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK;YAC9D,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC1B,CAAC,CAAC;oBACE,GAAG,KAAK,CAAC,UAAU;oBACnB,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBAC/C,GAAG,KAAK;wBACR,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ;wBAC1E,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ;wBAC1E,IAAI,EAAE,SAAS;qBAChB,CAAC,CAAC;iBACJ;gBACH,CAAC,CAAC,KAAK,CAAC,UAAU;SACrB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAsB;IACvD,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,GAAG,UAAU;QACb,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO;QACrF,IAAI,EAAE,aAAa,CAAC,UAAU,CAAC,IAAI,CAAuB;KAC3D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,GAAY,EAAE,KAAK,GAAG,CAAC;IACnE,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,aAAa,CAAC;IAE5C,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAClE,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CACvF,CAAC;QACF,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,OAAyB;IAChD,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAE7B,OAAO;QACL,GAAG,OAAO;QACV,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QACrE,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,SAAS;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,OAAO,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,GAAY;IAClD,MAAM,KAAK,GAAG,GAAG,IAAI,OAAO,CAAC;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,aAAa,KAAK,YAAY,KAAK,CAAC,MAAM,GAAG,CAAC;IACvD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,aAAa,KAAK,WAAW,KAAK,CAAC,MAAM,GAAG,CAAC;IACtD,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,aAAa,KAAK,UAAU,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,MAAM,GAAG,CAAC;IAC7F,CAAC;IACD,OAAO,aAAa,KAAK,GAAG,CAAC;AAC/B,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,qBAAqB,EAAE,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC;IACrF,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACzC,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,gBAAgB,SAAS,CAAC,MAAM,GAAG,iBAAiB,SAAS,CAAC;IAC/G,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["import type { Breadcrumb, ErrorEvent, Event, EventHint, Scope } from \"@sentry/node\";\nimport * as Sentry from \"@sentry/node\";\n\nconst REDACTED = \"[REDACTED]\";\nconst REDACTED_PATH = \"[REDACTED_PATH]\";\nconst MAX_STRING_LENGTH = 256;\nconst MAX_DEPTH = 4;\n\ntype SentryPrimitive = string | number | boolean;\n\nconst SENSITIVE_KEYS = new Set([\n  \"accesstoken\",\n  \"apikey\",\n  \"args\",\n  \"attachment\",\n  \"attachments\",\n  \"authorization\",\n  \"body\",\n  \"code\",\n  \"content\",\n  \"contents\",\n  \"cookie\",\n  \"cookies\",\n  \"credential\",\n  \"filepath\",\n  \"headers\",\n  \"image\",\n  \"imageattachments\",\n  \"images\",\n  \"localpath\",\n  \"messages\",\n  \"newusermessage\",\n  \"password\",\n  \"path\",\n  \"paths\",\n  \"prompt\",\n  \"refreshtoken\",\n  \"response\",\n  \"result\",\n  \"secret\",\n  \"systemprompt\",\n  \"text\",\n  \"thinking\",\n  \"token\",\n  \"url\",\n  \"uri\",\n  \"workspacepath\",\n]);\n\nconst ABSOLUTE_PATH_PATTERN =\n  /(?:\\/Users\\/[^\\s\"'`]+|\\/workspace\\/[^\\s\"'`]+|\\/tmp\\/[^\\s\"'`]+|\\/var\\/folders\\/[^\\s\"'`]+|[A-Za-z]:\\\\[^\\s\"'`]+)/;\nconst TOKEN_PATTERNS = [\n  /\\bsk-[A-Za-z0-9_-]{12,}\\b/,\n  /\\bxox[a-z]-[A-Za-z0-9-]{10,}\\b/,\n  /\\bAIza[0-9A-Za-z_-]{20,}\\b/,\n  /\\bgh[pousr]_[A-Za-z0-9]{20,}\\b/,\n];\n\nexport interface SentryRunScopeContext {\n  conversationId: string;\n  sessionKey: string;\n  messageId: string;\n  platform: string;\n  userId: string;\n  userName?: string;\n  threadTs?: string;\n  provider?: string;\n  model?: string;\n}\n\nexport type UserFacingErrorDomain =\n  | \"llm\"\n  | \"chat_platform\"\n  | \"mama\"\n  | \"sandbox\"\n  | \"login\"\n  | \"events\"\n  | \"session_view\";\n\nexport type UserFacingErrorSeverity = \"warning\" | \"error\" | \"fatal\";\n\nexport interface ReportUserFacingErrorOptions {\n  domain: UserFacingErrorDomain;\n  surface: string;\n  operation: string;\n  severity?: UserFacingErrorSeverity;\n  platform?: string;\n  provider?: string;\n  model?: string;\n  toolName?: string;\n  stopReason?: string;\n  expected?: boolean;\n  fingerprint?: string[];\n  tags?: Record<string, SentryPrimitive | undefined>;\n  context?: Record<string, unknown>;\n}\n\nexport function createSentryInitOptions(dsn?: string) {\n  return {\n    dsn,\n    environment: process.env.SENTRY_ENVIRONMENT ?? \"production\",\n    enabled: Boolean(dsn) && process.env.SENTRY_ENABLED !== \"false\",\n    sendDefaultPii: false,\n    tracesSampleRate: process.env.NODE_ENV === \"development\" ? 1.0 : 1.0,\n    includeLocalVariables: false,\n    enableLogs: true,\n    beforeSend(event: ErrorEvent, hint: EventHint): ErrorEvent | null {\n      return sanitizeEvent(event, hint);\n    },\n    beforeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null {\n      return sanitizeBreadcrumb(breadcrumb);\n    },\n  };\n}\n\nexport function reportUserFacingError(\n  error: unknown,\n  options: ReportUserFacingErrorOptions,\n): string | undefined {\n  if (options.expected) return undefined;\n\n  const exception = error instanceof Error ? error : new Error(String(error));\n  return Sentry.withScope((scope) => {\n    scope.setLevel(options.severity ?? \"error\");\n    scope.setTag(\"user_facing\", \"true\");\n    scope.setTag(\"expected\", \"false\");\n    scope.setTag(\"error_domain\", options.domain);\n    scope.setTag(\"error_surface\", options.surface);\n    scope.setTag(\"operation\", options.operation);\n    setOptionalTag(scope, \"platform\", options.platform);\n    setOptionalTag(scope, \"provider\", options.provider);\n    setOptionalTag(scope, \"model\", options.model);\n    setOptionalTag(scope, \"tool\", options.toolName);\n    setOptionalTag(scope, \"stop_reason\", options.stopReason);\n    for (const [key, value] of Object.entries(options.tags ?? {})) {\n      if (value !== undefined) scope.setTag(key, String(value));\n    }\n    if (options.fingerprint) scope.setFingerprint(options.fingerprint);\n    scope.setContext(\"user_facing_error\", {\n      domain: options.domain,\n      surface: options.surface,\n      operation: options.operation,\n      severity: options.severity ?? \"error\",\n      platform: options.platform,\n      provider: options.provider,\n      model: options.model,\n      toolName: options.toolName,\n      stopReason: options.stopReason,\n      ...(sanitizeValue(options.context ?? {}) as Record<string, unknown>),\n    });\n    return Sentry.captureException(exception);\n  });\n}\n\nfunction setOptionalTag(scope: Scope, key: string, value: string | undefined): void {\n  if (value !== undefined) scope.setTag(key, value);\n}\n\nexport function applyRunScope(scope: Scope, context: SentryRunScopeContext): void {\n  scope.setTag(\"conversation_id\", context.conversationId);\n  scope.setTag(\"channel_id\", context.conversationId);\n  scope.setTag(\"session_key\", context.sessionKey);\n  scope.setTag(\"platform\", context.platform);\n  if (context.threadTs) scope.setTag(\"thread_ts\", context.threadTs);\n  if (context.provider) scope.setTag(\"provider\", context.provider);\n  if (context.model) scope.setTag(\"model\", context.model);\n\n  scope.setUser({\n    id: context.userId,\n    username: context.userName,\n  });\n  scope.setContext(\"agent_run\", {\n    conversationId: context.conversationId,\n    channelId: context.conversationId,\n    sessionKey: context.sessionKey,\n    messageId: context.messageId,\n    threadTs: context.threadTs,\n    platform: context.platform,\n    provider: context.provider,\n    model: context.model,\n  });\n}\n\nexport function metricAttributes(\n  attributes: Record<string, string | number | boolean | undefined>,\n): Record<string, string | number | boolean> {\n  return Object.fromEntries(\n    Object.entries(attributes).filter((entry): entry is [string, string | number | boolean] => {\n      const [, value] = entry;\n      return value !== undefined;\n    }),\n  );\n}\n\nexport function addLifecycleBreadcrumb(\n  message: string,\n  data?: Record<string, string | number | boolean | undefined>,\n): void {\n  Sentry.addBreadcrumb({\n    category: \"agent.lifecycle\",\n    message,\n    level: \"info\",\n    data: data ? metricAttributes(data) : undefined,\n  });\n}\n\nexport function sanitizeEvent<T extends Event>(event: T, _hint?: EventHint): T | null {\n  const sanitized: T = {\n    ...event,\n    breadcrumbs: event.breadcrumbs\n      ?.map((breadcrumb) => sanitizeBreadcrumb(breadcrumb))\n      .filter((breadcrumb): breadcrumb is Breadcrumb => breadcrumb !== null),\n    extra: sanitizeValue(event.extra) as T[\"extra\"],\n    contexts: sanitizeValue(event.contexts) as T[\"contexts\"],\n    request: sanitizeRequest(event.request),\n    user: undefined,\n    server_name: undefined,\n  };\n\n  if (sanitized.message) {\n    sanitized.message = sanitizeString(sanitized.message);\n  }\n\n  if (sanitized.logentry) {\n    sanitized.logentry = {\n      ...sanitized.logentry,\n      message: sanitized.logentry.message ? sanitizeString(sanitized.logentry.message) : undefined,\n    };\n  }\n\n  if (sanitized.exception?.values) {\n    sanitized.exception.values = sanitized.exception.values.map((value) => ({\n      ...value,\n      value: value.value ? sanitizeString(value.value) : value.value,\n      stacktrace: value.stacktrace\n        ? {\n            ...value.stacktrace,\n            frames: value.stacktrace.frames?.map((frame) => ({\n              ...frame,\n              filename: frame.filename ? sanitizeString(frame.filename) : frame.filename,\n              abs_path: frame.abs_path ? sanitizeString(frame.abs_path) : frame.abs_path,\n              vars: undefined,\n            })),\n          }\n        : value.stacktrace,\n    }));\n  }\n\n  return sanitized;\n}\n\nexport function sanitizeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null {\n  if (breadcrumb.category === \"console\") {\n    return null;\n  }\n\n  return {\n    ...breadcrumb,\n    message: breadcrumb.message ? sanitizeString(breadcrumb.message) : breadcrumb.message,\n    data: sanitizeValue(breadcrumb.data) as Breadcrumb[\"data\"],\n  };\n}\n\nexport function sanitizeValue(value: unknown, key?: string, depth = 0): unknown {\n  if (value == null) return value;\n  if (depth > MAX_DEPTH) return \"[Truncated]\";\n\n  if (isSensitiveKey(key)) {\n    return summarizeValue(value, key);\n  }\n\n  if (typeof value === \"string\") {\n    return sanitizeString(value);\n  }\n\n  if (Array.isArray(value)) {\n    return value.slice(0, 20).map((entry) => sanitizeValue(entry, key, depth + 1));\n  }\n\n  if (typeof value === \"object\") {\n    const entries = Object.entries(value as Record<string, unknown>).map(\n      ([entryKey, entryValue]) => [entryKey, sanitizeValue(entryValue, entryKey, depth + 1)],\n    );\n    return Object.fromEntries(entries);\n  }\n\n  return value;\n}\n\nfunction sanitizeRequest(request: Event[\"request\"]): Event[\"request\"] {\n  if (!request) return request;\n\n  return {\n    ...request,\n    data: request.data ? summarizeValue(request.data, \"body\") : undefined,\n    headers: undefined,\n    cookies: undefined,\n  };\n}\n\nfunction isSensitiveKey(key?: string): boolean {\n  if (!key) return false;\n  return SENSITIVE_KEYS.has(key.toLowerCase());\n}\n\nfunction summarizeValue(value: unknown, key?: string): string {\n  const label = key ?? \"field\";\n  if (typeof value === \"string\") {\n    return `[Redacted ${label}; length=${value.length}]`;\n  }\n  if (Array.isArray(value)) {\n    return `[Redacted ${label}; items=${value.length}]`;\n  }\n  if (value && typeof value === \"object\") {\n    return `[Redacted ${label}; keys=${Object.keys(value as Record<string, unknown>).length}]`;\n  }\n  return `[Redacted ${label}]`;\n}\n\nfunction sanitizeString(value: string): string {\n  let sanitized = value.replace(new RegExp(ABSOLUTE_PATH_PATTERN, \"g\"), REDACTED_PATH);\n  for (const pattern of TOKEN_PATTERNS) {\n    sanitized = sanitized.replace(new RegExp(pattern, \"g\"), REDACTED);\n  }\n  if (sanitized.length > MAX_STRING_LENGTH) {\n    return `${sanitized.slice(0, MAX_STRING_LENGTH)}… [truncated ${sanitized.length - MAX_STRING_LENGTH} chars]`;\n  }\n  return sanitized;\n}\n"]}

package/dist/session-policy.d.ts

@@ -0,0 +1,13 @@
+import type { ConversationKind } from "./adapter.js";
+export type ChatPlatform = "slack" | "telegram" | "discord" | string;
+export interface ResolveSessionKeyOptions {
+    conversationId: string;
+    conversationKind: ConversationKind;
+    messageId: string;
+    threadTs?: string;
+    persistentTopLevel?: boolean;
+    scopeDirectThreads?: boolean;
+}
+export declare function resolveChatSessionKey(options: ResolveSessionKeyOptions): string;
+export declare function inferConversationKind(platform: ChatPlatform, conversationId: string): ConversationKind;
+//# sourceMappingURL=session-policy.d.ts.map

package/dist/session-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-policy.d.ts","sourceRoot":"","sources":["../src/session-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;AAErE,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,wBAAwB,GAAG,MAAM,CAgB/E;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,YAAY,EACtB,cAAc,EAAE,MAAM,GACrB,gBAAgB,CAclB","sourcesContent":["import type { ConversationKind } from \"./adapter.js\";\n\nexport type ChatPlatform = \"slack\" | \"telegram\" | \"discord\" | string;\n\nexport interface ResolveSessionKeyOptions {\n  conversationId: string;\n  conversationKind: ConversationKind;\n  messageId: string;\n  threadTs?: string;\n  persistentTopLevel?: boolean;\n  scopeDirectThreads?: boolean;\n}\n\nexport function resolveChatSessionKey(options: ResolveSessionKeyOptions): string {\n  const {\n    conversationId,\n    conversationKind,\n    messageId,\n    persistentTopLevel,\n    scopeDirectThreads,\n    threadTs,\n  } = options;\n  if (conversationKind === \"direct\" && (!threadTs || !scopeDirectThreads)) {\n    return conversationId;\n  }\n  if (!threadTs && persistentTopLevel) {\n    return conversationId;\n  }\n  return `${conversationId}:${threadTs || messageId}`;\n}\n\nexport function inferConversationKind(\n  platform: ChatPlatform,\n  conversationId: string,\n): ConversationKind {\n  if (platform === \"slack\") {\n    return conversationId.startsWith(\"D\") ? \"direct\" : \"shared\";\n  }\n\n  if (platform === \"telegram\") {\n    return conversationId.startsWith(\"-\") ? \"shared\" : \"direct\";\n  }\n\n  if (platform === \"discord\") {\n    return conversationId.startsWith(\"DM\") ? \"direct\" : \"shared\";\n  }\n\n  return \"shared\";\n}\n"]}

package/dist/session-policy.js

@@ -0,0 +1,23 @@
+export function resolveChatSessionKey(options) {
+    const { conversationId, conversationKind, messageId, persistentTopLevel, scopeDirectThreads, threadTs, } = options;
+    if (conversationKind === "direct" && (!threadTs || !scopeDirectThreads)) {
+        return conversationId;
+    }
+    if (!threadTs && persistentTopLevel) {
+        return conversationId;
+    }
+    return `${conversationId}:${threadTs || messageId}`;
+}
+export function inferConversationKind(platform, conversationId) {
+    if (platform === "slack") {
+        return conversationId.startsWith("D") ? "direct" : "shared";
+    }
+    if (platform === "telegram") {
+        return conversationId.startsWith("-") ? "shared" : "direct";
+    }
+    if (platform === "discord") {
+        return conversationId.startsWith("DM") ? "direct" : "shared";
+    }
+    return "shared";
+}
+//# sourceMappingURL=session-policy.js.map

package/dist/session-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-policy.js","sourceRoot":"","sources":["../src/session-policy.ts"],"names":[],"mappings":"AAaA,MAAM,UAAU,qBAAqB,CAAC,OAAiC;IACrE,MAAM,EACJ,cAAc,EACd,gBAAgB,EAChB,SAAS,EACT,kBAAkB,EAClB,kBAAkB,EAClB,QAAQ,GACT,GAAG,OAAO,CAAC;IACZ,IAAI,gBAAgB,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxE,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,kBAAkB,EAAE,CAAC;QACpC,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,cAAc,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAsB,EACtB,cAAsB;IAEtB,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9D,CAAC;IAED,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC5B,OAAO,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9D,CAAC;IAED,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC/D,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC","sourcesContent":["import type { ConversationKind } from \"./adapter.js\";\n\nexport type ChatPlatform = \"slack\" | \"telegram\" | \"discord\" | string;\n\nexport interface ResolveSessionKeyOptions {\n  conversationId: string;\n  conversationKind: ConversationKind;\n  messageId: string;\n  threadTs?: string;\n  persistentTopLevel?: boolean;\n  scopeDirectThreads?: boolean;\n}\n\nexport function resolveChatSessionKey(options: ResolveSessionKeyOptions): string {\n  const {\n    conversationId,\n    conversationKind,\n    messageId,\n    persistentTopLevel,\n    scopeDirectThreads,\n    threadTs,\n  } = options;\n  if (conversationKind === \"direct\" && (!threadTs || !scopeDirectThreads)) {\n    return conversationId;\n  }\n  if (!threadTs && persistentTopLevel) {\n    return conversationId;\n  }\n  return `${conversationId}:${threadTs || messageId}`;\n}\n\nexport function inferConversationKind(\n  platform: ChatPlatform,\n  conversationId: string,\n): ConversationKind {\n  if (platform === \"slack\") {\n    return conversationId.startsWith(\"D\") ? \"direct\" : \"shared\";\n  }\n\n  if (platform === \"telegram\") {\n    return conversationId.startsWith(\"-\") ? \"shared\" : \"direct\";\n  }\n\n  if (platform === \"discord\") {\n    return conversationId.startsWith(\"DM\") ? \"direct\" : \"shared\";\n  }\n\n  return \"shared\";\n}\n"]}