@keystrokehq/sentry 0.0.11 → 0.0.12

package/dist/events-api.d.mts

@@ -15,7 +15,7 @@ declare const fetchIssueEventById: _keystrokehq_core0.Operation<z.ZodObject<{
   message: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   platform: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   type: z.ZodOptional<z.ZodString>;
-}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"keystroke:sentry", z.ZodObject<{
+}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
   SENTRY_ACCESS_TOKEN: z.ZodString;
   SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
   SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
@@ -36,7 +36,7 @@ declare const retrieveProjectEventById: _keystrokehq_core0.Operation<z.ZodObject
   message: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   platform: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   type: z.ZodOptional<z.ZodString>;
-}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"keystroke:sentry", z.ZodObject<{
+}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
   SENTRY_ACCESS_TOKEN: z.ZodString;
   SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
   SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
@@ -61,7 +61,7 @@ declare const getProjectEvents: _keystrokehq_core0.Operation<z.ZodObject<{
   message: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   platform: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   type: z.ZodOptional<z.ZodString>;
-}, z.core.$loose>>, readonly [_keystrokehq_core0.CredentialSet<"keystroke:sentry", z.ZodObject<{
+}, z.core.$loose>>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
   SENTRY_ACCESS_TOKEN: z.ZodString;
   SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
   SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
@@ -82,7 +82,7 @@ declare const getProjectEventStats: _keystrokehq_core0.Operation<z.ZodObject<{
   since: z.ZodOptional<z.ZodString>;
   until: z.ZodOptional<z.ZodString>;
   resolution: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, z.ZodArray<z.ZodUnknown>, readonly [_keystrokehq_core0.CredentialSet<"keystroke:sentry", z.ZodObject<{
+}, z.core.$strip>, z.ZodArray<z.ZodUnknown>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
   SENTRY_ACCESS_TOKEN: z.ZodString;
   SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
   SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
@@ -110,7 +110,7 @@ declare const retrieveOrganizationEvents: _keystrokehq_core0.Operation<z.ZodObje
     issuePlatform: "issuePlatform";
   }>>;
   orderby: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, z.ZodRecord<z.ZodString, z.ZodUnknown>, readonly [_keystrokehq_core0.CredentialSet<"keystroke:sentry", z.ZodObject<{
+}, z.core.$strip>, z.ZodRecord<z.ZodString, z.ZodUnknown>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
   SENTRY_ACCESS_TOKEN: z.ZodString;
   SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
   SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
@@ -130,7 +130,7 @@ declare const retrieveEventIdForOrganization: _keystrokehq_core0.Operation<z.Zod
   message: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   platform: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   type: z.ZodOptional<z.ZodString>;
-}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"keystroke:sentry", z.ZodObject<{
+}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
   SENTRY_ACCESS_TOKEN: z.ZodString;
   SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
   SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
@@ -145,7 +145,7 @@ declare const retrieveSourceMapDebugEvent: _keystrokehq_core0.Operation<z.ZodObj
   event_id: z.ZodString;
   frame_idx: z.ZodOptional<z.ZodNumber>;
   exception_idx: z.ZodOptional<z.ZodNumber>;
-}, z.core.$strip>, z.ZodRecord<z.ZodString, z.ZodUnknown>, readonly [_keystrokehq_core0.CredentialSet<"keystroke:sentry", z.ZodObject<{
+}, z.core.$strip>, z.ZodRecord<z.ZodString, z.ZodUnknown>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
   SENTRY_ACCESS_TOKEN: z.ZodString;
   SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
   SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
@@ -167,7 +167,7 @@ declare const sentryEventOperations: {
     message: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     platform: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     type: z.ZodOptional<z.ZodString>;
-  }, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"keystroke:sentry", z.ZodObject<{
+  }, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
     SENTRY_ACCESS_TOKEN: z.ZodString;
     SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
     SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
@@ -188,7 +188,7 @@ declare const sentryEventOperations: {
     message: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     platform: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     type: z.ZodOptional<z.ZodString>;
-  }, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"keystroke:sentry", z.ZodObject<{
+  }, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
     SENTRY_ACCESS_TOKEN: z.ZodString;
     SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
     SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
@@ -213,7 +213,7 @@ declare const sentryEventOperations: {
     message: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     platform: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     type: z.ZodOptional<z.ZodString>;
-  }, z.core.$loose>>, readonly [_keystrokehq_core0.CredentialSet<"keystroke:sentry", z.ZodObject<{
+  }, z.core.$loose>>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
     SENTRY_ACCESS_TOKEN: z.ZodString;
     SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
     SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
@@ -234,7 +234,7 @@ declare const sentryEventOperations: {
     since: z.ZodOptional<z.ZodString>;
     until: z.ZodOptional<z.ZodString>;
     resolution: z.ZodOptional<z.ZodString>;
-  }, z.core.$strip>, z.ZodArray<z.ZodUnknown>, readonly [_keystrokehq_core0.CredentialSet<"keystroke:sentry", z.ZodObject<{
+  }, z.core.$strip>, z.ZodArray<z.ZodUnknown>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
     SENTRY_ACCESS_TOKEN: z.ZodString;
     SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
     SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
@@ -262,7 +262,7 @@ declare const sentryEventOperations: {
       issuePlatform: "issuePlatform";
     }>>;
     orderby: z.ZodOptional<z.ZodString>;
-  }, z.core.$strip>, z.ZodRecord<z.ZodString, z.ZodUnknown>, readonly [_keystrokehq_core0.CredentialSet<"keystroke:sentry", z.ZodObject<{
+  }, z.core.$strip>, z.ZodRecord<z.ZodString, z.ZodUnknown>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
     SENTRY_ACCESS_TOKEN: z.ZodString;
     SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
     SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
@@ -282,7 +282,7 @@ declare const sentryEventOperations: {
     message: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     platform: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     type: z.ZodOptional<z.ZodString>;
-  }, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"keystroke:sentry", z.ZodObject<{
+  }, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
     SENTRY_ACCESS_TOKEN: z.ZodString;
     SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
     SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
@@ -297,7 +297,7 @@ declare const sentryEventOperations: {
     event_id: z.ZodString;
     frame_idx: z.ZodOptional<z.ZodNumber>;
     exception_idx: z.ZodOptional<z.ZodNumber>;
-  }, z.core.$strip>, z.ZodRecord<z.ZodString, z.ZodUnknown>, readonly [_keystrokehq_core0.CredentialSet<"keystroke:sentry", z.ZodObject<{
+  }, z.core.$strip>, z.ZodRecord<z.ZodString, z.ZodUnknown>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
     SENTRY_ACCESS_TOKEN: z.ZodString;
     SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
     SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;

package/dist/events-api.mjs

@@ -1,5 +1,5 @@
 import { orgIssueScopeInputSchema, orgProjectScopeInputSchema, orgScopeInputSchema, sentryEventSchema, sentryIdSchema, sentryJsonArraySchema, sentryJsonObjectSchema, sentryListInputSchema } from "./schemas.mjs";
-import { t as defineSentryEndpoint } from "./endpoint-factory-Cizk4imV.mjs";
+import { t as defineSentryEndpoint } from "./endpoint-factory-C0WIFmtK.mjs";
 import { t as SENTRY_SCOPE } from "./scopes-RRU0vt-a.mjs";
 import { z } from "zod";
 

package/dist/feedback.d.mts

@@ -16,7 +16,7 @@ declare const retrieveUserFeedbackForProject: _keystrokehq_core0.Operation<z.Zod
   email: z.ZodOptional<z.ZodString>;
   comments: z.ZodOptional<z.ZodString>;
   dateCreated: z.ZodOptional<z.ZodISODateTime>;
-}, z.core.$loose>>, readonly [_keystrokehq_core0.CredentialSet<"keystroke:sentry", z.ZodObject<{
+}, z.core.$loose>>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
   SENTRY_ACCESS_TOKEN: z.ZodString;
   SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
   SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
@@ -39,7 +39,7 @@ declare const submitProjectUserFeedback: _keystrokehq_core0.Operation<z.ZodObjec
   email: z.ZodOptional<z.ZodString>;
   comments: z.ZodOptional<z.ZodString>;
   dateCreated: z.ZodOptional<z.ZodISODateTime>;
-}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"keystroke:sentry", z.ZodObject<{
+}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
   SENTRY_ACCESS_TOKEN: z.ZodString;
   SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
   SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
@@ -62,7 +62,7 @@ declare const sentryFeedbackOperations: {
     email: z.ZodOptional<z.ZodString>;
     comments: z.ZodOptional<z.ZodString>;
     dateCreated: z.ZodOptional<z.ZodISODateTime>;
-  }, z.core.$loose>>, readonly [_keystrokehq_core0.CredentialSet<"keystroke:sentry", z.ZodObject<{
+  }, z.core.$loose>>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
     SENTRY_ACCESS_TOKEN: z.ZodString;
     SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
     SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
@@ -85,7 +85,7 @@ declare const sentryFeedbackOperations: {
     email: z.ZodOptional<z.ZodString>;
     comments: z.ZodOptional<z.ZodString>;
     dateCreated: z.ZodOptional<z.ZodISODateTime>;
-  }, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"keystroke:sentry", z.ZodObject<{
+  }, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
     SENTRY_ACCESS_TOKEN: z.ZodString;
     SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
     SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;

package/dist/feedback.mjs

@@ -1,5 +1,5 @@
 import { orgProjectScopeInputSchema, sentryFeedbackSchema, sentryIdSchema, sentryListInputSchema } from "./schemas.mjs";
-import { t as defineSentryEndpoint } from "./endpoint-factory-Cizk4imV.mjs";
+import { t as defineSentryEndpoint } from "./endpoint-factory-C0WIFmtK.mjs";
 import { t as SENTRY_SCOPE } from "./scopes-RRU0vt-a.mjs";
 import { z } from "zod";
 

package/dist/integration-DCNn_9vz.mjs

@@ -0,0 +1,356 @@
+import { SENTRY_DEFAULT_BASE_URL } from "./client.mjs";
+import { CredentialSet, Operation } from "@keystrokehq/core";
+import { z } from "zod";
+
+//#region ../../packages/integration-authoring/dist/official/runtime.mjs
+const REGISTRY_KEY = "__ks_official_integration_metadata_registry";
+function getRegistry() {
+	const globalStore = globalThis;
+	if (!globalStore[REGISTRY_KEY]) globalStore[REGISTRY_KEY] = /* @__PURE__ */ new WeakMap();
+	return globalStore[REGISTRY_KEY];
+}
+function registerOfficialOperation(operation, metadata) {
+	getRegistry().set(operation, Object.freeze({ ...metadata }));
+}
+
+//#endregion
+//#region ../../packages/integration-authoring/dist/official/index.mjs
+const OFFICIAL_CREDENTIAL_SET_ID_PREFIX = "keystroke:";
+function officialCredentialSetId(id) {
+	return `${OFFICIAL_CREDENTIAL_SET_ID_PREFIX}${id}`;
+}
+function stripOfficialCredentialSetIdPrefix(id) {
+	return id.startsWith(OFFICIAL_CREDENTIAL_SET_ID_PREFIX) ? id.slice(10) : id;
+}
+/**
+* Creates a factory for Keystroke-official integration operations.
+*
+* It keeps the same flat `run(input, credentials)` ergonomics as the generic
+* operation factory, while registering official metadata for builder/runtime
+* operation metadata.
+*/
+function createOfficialOperationFactory(credentialSet) {
+	const integrationId = stripOfficialCredentialSetIdPrefix(credentialSet.id);
+	return (config) => {
+		const wrappedRun = async (input, ctx) => {
+			const creds = ctx.credentials[credentialSet.id];
+			return config.run(input, creds);
+		};
+		const operation = new Operation({
+			id: config.id,
+			name: config.name,
+			description: config.description,
+			input: config.input,
+			output: config.output,
+			credentialSets: [credentialSet],
+			...config.tags !== void 0 ? { tags: config.tags } : {},
+			...config.needsApproval !== void 0 ? { needsApproval: config.needsApproval } : {},
+			...config.requiredOAuthScopes !== void 0 ? { requiredOAuthScopes: config.requiredOAuthScopes } : {},
+			...config.retries !== void 0 ? { retries: config.retries } : {},
+			...config.timeout !== void 0 ? { timeout: config.timeout } : {},
+			...config.maxDurationMs !== void 0 ? { maxDurationMs: config.maxDurationMs } : {},
+			run: wrappedRun
+		});
+		registerOfficialOperation(operation, { integrationId });
+		return operation;
+	};
+}
+/**
+* Creates an official integration bundle from a single config object.
+*
+* - Creates the public `CredentialSet` internally.
+* - Accepts optional `internal` fields for Keystroke-owned platform credentials.
+*/
+function defineOfficialIntegration(config) {
+	const internalCredentialSets = config.internal ?? {};
+	const allInternalCredentialSets = [
+		...internalCredentialSets.providerApp ? [internalCredentialSets.providerApp] : [],
+		...internalCredentialSets.providerAppVariants ?? [],
+		...internalCredentialSets.webhookVerification ? [internalCredentialSets.webhookVerification] : [],
+		...internalCredentialSets.other ?? []
+	];
+	const credentialSet = new CredentialSet({
+		id: config.id,
+		name: config.name,
+		description: config.description,
+		auth: config.auth,
+		...config.connections ? { connections: config.connections } : {},
+		...config.proxy ? { proxy: config.proxy } : {},
+		...config.needsRawSecret === true ? { needsRawSecret: true } : {}
+	});
+	return Object.freeze({
+		integration: {
+			id: config.id,
+			name: config.name,
+			...config.description !== void 0 ? { description: config.description } : {},
+			auth: config.auth,
+			...config.proxy ? { proxy: config.proxy } : {},
+			...config.needsRawSecret === true ? { needsRawSecret: true } : {},
+			...config.connections ? { connections: config.connections } : {}
+		},
+		credentialSet,
+		internalCredentialSets,
+		allInternalCredentialSets
+	});
+}
+
+//#endregion
+//#region src/_official/provider-app.ts
+/**
+* Internal Keystroke-owned Sentry app credentials.
+*
+* For Sentry, `clientSecret` doubles as the webhook signing secret per
+* <https://docs.sentry.io/organization/integrations/integration-platform/webhooks/>,
+* so `webhookSecret` is kept as a discrete field for symmetry with other
+* integrations even though in practice platforms will populate both from the
+* same Sentry-issued value.
+*/
+const sentryAppCredentialSet = new CredentialSet({
+	id: officialCredentialSetId("sentry-app"),
+	exposure: "platform-only",
+	name: "Sentry App",
+	auth: z.object({
+		clientId: z.string(),
+		clientSecret: z.string(),
+		webhookSecret: z.string()
+	})
+});
+const sentryOfficialProviderSeed = {
+	provider: "sentry",
+	appRef: "sentry-official",
+	displayName: "Sentry Platform",
+	credentialSetName: "Keystroke Sentry Platform App",
+	envShape: {
+		KEYSTROKE_OFFICIAL_SENTRY_CLIENT_ID: z.string().optional(),
+		KEYSTROKE_OFFICIAL_SENTRY_CLIENT_SECRET: z.string().optional(),
+		KEYSTROKE_OFFICIAL_SENTRY_WEBHOOK_SECRET: z.string().optional()
+	},
+	requiredEnvKeys: [
+		"KEYSTROKE_OFFICIAL_SENTRY_CLIENT_ID",
+		"KEYSTROKE_OFFICIAL_SENTRY_CLIENT_SECRET",
+		"KEYSTROKE_OFFICIAL_SENTRY_WEBHOOK_SECRET"
+	],
+	externalAppIdEnvKey: "KEYSTROKE_OFFICIAL_SENTRY_CLIENT_ID",
+	buildCredentials: (env) => ({
+		clientId: env.KEYSTROKE_OFFICIAL_SENTRY_CLIENT_ID,
+		clientSecret: env.KEYSTROKE_OFFICIAL_SENTRY_CLIENT_SECRET,
+		webhookSecret: env.KEYSTROKE_OFFICIAL_SENTRY_WEBHOOK_SECRET
+	})
+};
+
+//#endregion
+//#region ../../packages/credential-connection/dist/defaults-YE9AvLIc.mjs
+/**
+* Shared OAuth 2.0 token-response plumbing.
+*
+* `parseOAuthTokenResponse` handles the two common wire formats (JSON and
+* form-urlencoded, the latter used by GitHub unless you explicitly ask for
+* JSON). `normalizeOAuthTokens` pulls the standard fields out of the parsed
+* body in both the flat form and Slack's nested `authed_user.access_token`
+* form. These helpers are exposed so integration authors overriding
+* `exchangeCode` / `refreshToken` do not have to re-implement them.
+*/
+var TokenExchangeError = class extends Error {
+	httpStatus;
+	constructor(httpStatus) {
+		super(`Token exchange failed: HTTP ${httpStatus}`);
+		this.name = "TokenExchangeError";
+		this.httpStatus = httpStatus;
+	}
+};
+async function parseOAuthTokenResponse(response) {
+	const contentType = response.headers.get("content-type")?.toLowerCase() ?? "";
+	if (contentType.includes("application/json")) return await response.json();
+	const text = await response.text();
+	if (!text.trim()) return {};
+	if (contentType.includes("application/x-www-form-urlencoded") || text.includes("=")) {
+		const params = new URLSearchParams(text);
+		return Object.fromEntries(params.entries());
+	}
+	throw new Error(`Unsupported OAuth token response content type: ${contentType || "unknown"}`);
+}
+function normalizeOAuthTokens(tokenData) {
+	const authedUser = tokenData.authed_user;
+	const rawAccessToken = tokenData.access_token ?? authedUser?.access_token;
+	const rawRefreshToken = tokenData.refresh_token;
+	const rawExpiresIn = tokenData.expires_in;
+	const rawInstanceUrl = tokenData.instance_url;
+	return {
+		accessToken: typeof rawAccessToken === "string" ? rawAccessToken : void 0,
+		refreshToken: typeof rawRefreshToken === "string" ? rawRefreshToken : void 0,
+		expiresIn: typeof rawExpiresIn === "number" ? rawExpiresIn : typeof rawExpiresIn === "string" ? Number(rawExpiresIn) || void 0 : void 0,
+		instanceUrl: typeof rawInstanceUrl === "string" ? rawInstanceUrl : void 0
+	};
+}
+function buildAuthUrl(ctx) {
+	const { oauthClient, redirectUri, state, connection } = ctx;
+	const scopes = ctx.requestedScopes ?? connection.scopes;
+	const url = new URL(connection.authUrl);
+	url.searchParams.set("client_id", oauthClient.clientId);
+	url.searchParams.set("scope", scopes.join(" "));
+	url.searchParams.set("redirect_uri", redirectUri);
+	url.searchParams.set("state", state);
+	url.searchParams.set("response_type", "code");
+	return url.toString();
+}
+async function exchangeToken(params) {
+	const response = await fetch(params.tokenUrl, {
+		method: "POST",
+		headers: {
+			Accept: "application/json",
+			"Content-Type": "application/x-www-form-urlencoded"
+		},
+		body: params.body
+	});
+	if (!response.ok) throw new TokenExchangeError(response.status);
+	const raw = await parseOAuthTokenResponse(response);
+	const { accessToken, refreshToken, expiresIn, instanceUrl } = normalizeOAuthTokens(raw);
+	if (!accessToken) throw new Error("No access token in response");
+	return {
+		accessToken,
+		refreshToken,
+		expiresIn,
+		instanceUrl,
+		raw
+	};
+}
+async function exchangeCode(ctx) {
+	const { oauthClient, code, redirectUri, connection } = ctx;
+	if (!code) throw new Error("Missing authorization code");
+	return exchangeToken({
+		tokenUrl: connection.tokenUrl,
+		body: new URLSearchParams({
+			code,
+			client_id: oauthClient.clientId,
+			client_secret: oauthClient.clientSecret,
+			redirect_uri: redirectUri,
+			grant_type: "authorization_code"
+		})
+	});
+}
+async function refreshToken(ctx) {
+	const { oauthClient, refreshToken, connection } = ctx;
+	return exchangeToken({
+		tokenUrl: connection.tokenUrl,
+		body: new URLSearchParams({
+			grant_type: "refresh_token",
+			refresh_token: refreshToken,
+			client_id: oauthClient.clientId,
+			client_secret: oauthClient.clientSecret
+		})
+	});
+}
+const oauthDefaults = {
+	buildAuthUrl,
+	exchangeCode,
+	exchangeToken,
+	refreshToken
+};
+
+//#endregion
+//#region src/oauth-connection.ts
+const SENTRY_OAUTH_SCOPES = [
+	"org:read",
+	"project:read",
+	"project:write",
+	"project:admin",
+	"team:read",
+	"team:write",
+	"team:admin",
+	"member:read",
+	"member:write",
+	"event:read",
+	"event:admin",
+	"alerts:read",
+	"alerts:write",
+	"release:admin"
+];
+const sentryOAuthConnection = {
+	kind: "oauth",
+	tokenType: "refreshable",
+	authUrl: "https://sentry.io/oauth/authorize/",
+	tokenUrl: "https://sentry.io/oauth/token/",
+	revokeUrl: null,
+	scopes: [...SENTRY_OAUTH_SCOPES],
+	vault: { accessToken: "SENTRY_ACCESS_TOKEN" },
+	async exchangeCode(ctx) {
+		const result = await oauthDefaults.exchangeCode(ctx);
+		const orgResponse = await fetch(`${SENTRY_DEFAULT_BASE_URL}/api/0/organizations/`, {
+			method: "GET",
+			headers: {
+				Authorization: `Bearer ${result.accessToken}`,
+				Accept: "application/json"
+			}
+		});
+		let firstOrg = null;
+		if (orgResponse.ok) {
+			const orgs = await orgResponse.json();
+			if (Array.isArray(orgs) && orgs.length > 0 && isOrganizationProbe(orgs[0])) firstOrg = orgs[0];
+		}
+		result.raw._sentryOrganization = firstOrg;
+		result.raw._sentryUser = pickUser(result.raw);
+		result.raw._sentryScopes = typeof result.raw.scope === "string" ? result.raw.scope : void 0;
+		return result;
+	},
+	extractInstallationInfo({ tokenResult }) {
+		const org = tokenResult.raw._sentryOrganization;
+		const user = tokenResult.raw._sentryUser;
+		const metadata = {};
+		if (org?.name) metadata.organizationName = org.name;
+		if (org?.slug) metadata.organizationSlug = org.slug;
+		const regionUrl = org?.links?.regionUrl;
+		if (regionUrl) metadata.regionUrl = regionUrl;
+		if (user?.name) metadata.userName = user.name;
+		if (user?.email) metadata.userEmail = user.email;
+		return {
+			externalInstallationId: org?.slug,
+			externalWorkspaceId: org?.id,
+			externalBotUserId: user?.id,
+			metadata
+		};
+	}
+};
+function isOrganizationProbe(value) {
+	return typeof value === "object" && value !== null;
+}
+function pickUser(raw) {
+	const user = raw.user;
+	if (user == null || typeof user !== "object") return null;
+	const u = user;
+	return {
+		id: typeof u.id === "string" ? u.id : void 0,
+		name: typeof u.name === "string" ? u.name : void 0,
+		email: typeof u.email === "string" ? u.email : void 0
+	};
+}
+
+//#endregion
+//#region src/integration.ts
+const sentryAuthSchema = z.object({
+	SENTRY_ACCESS_TOKEN: z.string().min(1),
+	SENTRY_REGION_URL: z.string().url().optional(),
+	SENTRY_ORG_SLUG: z.string().min(1).optional()
+});
+const sentryOfficialIntegration = {
+	id: "sentry",
+	name: "Sentry",
+	description: "Sentry — issue lifecycle, release tracking, alerts, monitors, replays, feedback, and integration-platform webhook triggers",
+	auth: sentryAuthSchema,
+	proxy: { hosts: [
+		"sentry.io",
+		"us.sentry.io",
+		"de.sentry.io"
+	] },
+	connections: [{
+		id: "oauth",
+		...sentryOAuthConnection
+	}]
+};
+const sentryBundle = defineOfficialIntegration({
+	...sentryOfficialIntegration,
+	internal: { providerApp: sentryAppCredentialSet }
+});
+const sentry = sentryBundle.credentialSet;
+
+//#endregion
+export { sentryOfficialProviderSeed as a, sentryAppCredentialSet as i, sentryBundle as n, createOfficialOperationFactory as o, sentryOfficialIntegration as r, sentry as t };

package/dist/{integration-BaLZqIqf.d.mts → integration-rmp485nJ.d.mts}

@@ -1,5 +1,4 @@
 import * as _keystrokehq_core0 from "@keystrokehq/core";
-import * as _keystrokehq_integration_authoring_official0 from "@keystrokehq/integration-authoring/official";
 import { z } from "zod";
 import * as _keystrokehq_core_credential_set0 from "@keystrokehq/core/credential-set";
 import { InferCredentialSetAuth } from "@keystrokehq/core/credential-set";
@@ -39,12 +38,12 @@ declare const sentryOfficialIntegration: {
     id: string;
   }[];
 };
-declare const sentryBundle: _keystrokehq_integration_authoring_official0.OfficialIntegrationBundle<"sentry", z.ZodObject<{
+declare const sentryBundle: undefined<"sentry", z.ZodObject<{
   SENTRY_ACCESS_TOKEN: z.ZodString;
   SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
   SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>>;
-declare const sentry: _keystrokehq_core0.CredentialSet<"keystroke:sentry", z.ZodObject<{
+declare const sentry: _keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
   SENTRY_ACCESS_TOKEN: z.ZodString;
   SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
   SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;