@keystrokehq/sentry 0.0.12 → 0.0.15

package/dist/integration-DCNn_9vz.mjs

@@ -1,356 +0,0 @@
-import { SENTRY_DEFAULT_BASE_URL } from "./client.mjs";
-import { CredentialSet, Operation } from "@keystrokehq/core";
-import { z } from "zod";
-
-//#region ../../packages/integration-authoring/dist/official/runtime.mjs
-const REGISTRY_KEY = "__ks_official_integration_metadata_registry";
-function getRegistry() {
-	const globalStore = globalThis;
-	if (!globalStore[REGISTRY_KEY]) globalStore[REGISTRY_KEY] = /* @__PURE__ */ new WeakMap();
-	return globalStore[REGISTRY_KEY];
-}
-function registerOfficialOperation(operation, metadata) {
-	getRegistry().set(operation, Object.freeze({ ...metadata }));
-}
-
-//#endregion
-//#region ../../packages/integration-authoring/dist/official/index.mjs
-const OFFICIAL_CREDENTIAL_SET_ID_PREFIX = "keystroke:";
-function officialCredentialSetId(id) {
-	return `${OFFICIAL_CREDENTIAL_SET_ID_PREFIX}${id}`;
-}
-function stripOfficialCredentialSetIdPrefix(id) {
-	return id.startsWith(OFFICIAL_CREDENTIAL_SET_ID_PREFIX) ? id.slice(10) : id;
-}
-/**
-* Creates a factory for Keystroke-official integration operations.
-*
-* It keeps the same flat `run(input, credentials)` ergonomics as the generic
-* operation factory, while registering official metadata for builder/runtime
-* operation metadata.
-*/
-function createOfficialOperationFactory(credentialSet) {
-	const integrationId = stripOfficialCredentialSetIdPrefix(credentialSet.id);
-	return (config) => {
-		const wrappedRun = async (input, ctx) => {
-			const creds = ctx.credentials[credentialSet.id];
-			return config.run(input, creds);
-		};
-		const operation = new Operation({
-			id: config.id,
-			name: config.name,
-			description: config.description,
-			input: config.input,
-			output: config.output,
-			credentialSets: [credentialSet],
-			...config.tags !== void 0 ? { tags: config.tags } : {},
-			...config.needsApproval !== void 0 ? { needsApproval: config.needsApproval } : {},
-			...config.requiredOAuthScopes !== void 0 ? { requiredOAuthScopes: config.requiredOAuthScopes } : {},
-			...config.retries !== void 0 ? { retries: config.retries } : {},
-			...config.timeout !== void 0 ? { timeout: config.timeout } : {},
-			...config.maxDurationMs !== void 0 ? { maxDurationMs: config.maxDurationMs } : {},
-			run: wrappedRun
-		});
-		registerOfficialOperation(operation, { integrationId });
-		return operation;
-	};
-}
-/**
-* Creates an official integration bundle from a single config object.
-*
-* - Creates the public `CredentialSet` internally.
-* - Accepts optional `internal` fields for Keystroke-owned platform credentials.
-*/
-function defineOfficialIntegration(config) {
-	const internalCredentialSets = config.internal ?? {};
-	const allInternalCredentialSets = [
-		...internalCredentialSets.providerApp ? [internalCredentialSets.providerApp] : [],
-		...internalCredentialSets.providerAppVariants ?? [],
-		...internalCredentialSets.webhookVerification ? [internalCredentialSets.webhookVerification] : [],
-		...internalCredentialSets.other ?? []
-	];
-	const credentialSet = new CredentialSet({
-		id: config.id,
-		name: config.name,
-		description: config.description,
-		auth: config.auth,
-		...config.connections ? { connections: config.connections } : {},
-		...config.proxy ? { proxy: config.proxy } : {},
-		...config.needsRawSecret === true ? { needsRawSecret: true } : {}
-	});
-	return Object.freeze({
-		integration: {
-			id: config.id,
-			name: config.name,
-			...config.description !== void 0 ? { description: config.description } : {},
-			auth: config.auth,
-			...config.proxy ? { proxy: config.proxy } : {},
-			...config.needsRawSecret === true ? { needsRawSecret: true } : {},
-			...config.connections ? { connections: config.connections } : {}
-		},
-		credentialSet,
-		internalCredentialSets,
-		allInternalCredentialSets
-	});
-}
-
-//#endregion
-//#region src/_official/provider-app.ts
-/**
-* Internal Keystroke-owned Sentry app credentials.
-*
-* For Sentry, `clientSecret` doubles as the webhook signing secret per
-* <https://docs.sentry.io/organization/integrations/integration-platform/webhooks/>,
-* so `webhookSecret` is kept as a discrete field for symmetry with other
-* integrations even though in practice platforms will populate both from the
-* same Sentry-issued value.
-*/
-const sentryAppCredentialSet = new CredentialSet({
-	id: officialCredentialSetId("sentry-app"),
-	exposure: "platform-only",
-	name: "Sentry App",
-	auth: z.object({
-		clientId: z.string(),
-		clientSecret: z.string(),
-		webhookSecret: z.string()
-	})
-});
-const sentryOfficialProviderSeed = {
-	provider: "sentry",
-	appRef: "sentry-official",
-	displayName: "Sentry Platform",
-	credentialSetName: "Keystroke Sentry Platform App",
-	envShape: {
-		KEYSTROKE_OFFICIAL_SENTRY_CLIENT_ID: z.string().optional(),
-		KEYSTROKE_OFFICIAL_SENTRY_CLIENT_SECRET: z.string().optional(),
-		KEYSTROKE_OFFICIAL_SENTRY_WEBHOOK_SECRET: z.string().optional()
-	},
-	requiredEnvKeys: [
-		"KEYSTROKE_OFFICIAL_SENTRY_CLIENT_ID",
-		"KEYSTROKE_OFFICIAL_SENTRY_CLIENT_SECRET",
-		"KEYSTROKE_OFFICIAL_SENTRY_WEBHOOK_SECRET"
-	],
-	externalAppIdEnvKey: "KEYSTROKE_OFFICIAL_SENTRY_CLIENT_ID",
-	buildCredentials: (env) => ({
-		clientId: env.KEYSTROKE_OFFICIAL_SENTRY_CLIENT_ID,
-		clientSecret: env.KEYSTROKE_OFFICIAL_SENTRY_CLIENT_SECRET,
-		webhookSecret: env.KEYSTROKE_OFFICIAL_SENTRY_WEBHOOK_SECRET
-	})
-};
-
-//#endregion
-//#region ../../packages/credential-connection/dist/defaults-YE9AvLIc.mjs
-/**
-* Shared OAuth 2.0 token-response plumbing.
-*
-* `parseOAuthTokenResponse` handles the two common wire formats (JSON and
-* form-urlencoded, the latter used by GitHub unless you explicitly ask for
-* JSON). `normalizeOAuthTokens` pulls the standard fields out of the parsed
-* body in both the flat form and Slack's nested `authed_user.access_token`
-* form. These helpers are exposed so integration authors overriding
-* `exchangeCode` / `refreshToken` do not have to re-implement them.
-*/
-var TokenExchangeError = class extends Error {
-	httpStatus;
-	constructor(httpStatus) {
-		super(`Token exchange failed: HTTP ${httpStatus}`);
-		this.name = "TokenExchangeError";
-		this.httpStatus = httpStatus;
-	}
-};
-async function parseOAuthTokenResponse(response) {
-	const contentType = response.headers.get("content-type")?.toLowerCase() ?? "";
-	if (contentType.includes("application/json")) return await response.json();
-	const text = await response.text();
-	if (!text.trim()) return {};
-	if (contentType.includes("application/x-www-form-urlencoded") || text.includes("=")) {
-		const params = new URLSearchParams(text);
-		return Object.fromEntries(params.entries());
-	}
-	throw new Error(`Unsupported OAuth token response content type: ${contentType || "unknown"}`);
-}
-function normalizeOAuthTokens(tokenData) {
-	const authedUser = tokenData.authed_user;
-	const rawAccessToken = tokenData.access_token ?? authedUser?.access_token;
-	const rawRefreshToken = tokenData.refresh_token;
-	const rawExpiresIn = tokenData.expires_in;
-	const rawInstanceUrl = tokenData.instance_url;
-	return {
-		accessToken: typeof rawAccessToken === "string" ? rawAccessToken : void 0,
-		refreshToken: typeof rawRefreshToken === "string" ? rawRefreshToken : void 0,
-		expiresIn: typeof rawExpiresIn === "number" ? rawExpiresIn : typeof rawExpiresIn === "string" ? Number(rawExpiresIn) || void 0 : void 0,
-		instanceUrl: typeof rawInstanceUrl === "string" ? rawInstanceUrl : void 0
-	};
-}
-function buildAuthUrl(ctx) {
-	const { oauthClient, redirectUri, state, connection } = ctx;
-	const scopes = ctx.requestedScopes ?? connection.scopes;
-	const url = new URL(connection.authUrl);
-	url.searchParams.set("client_id", oauthClient.clientId);
-	url.searchParams.set("scope", scopes.join(" "));
-	url.searchParams.set("redirect_uri", redirectUri);
-	url.searchParams.set("state", state);
-	url.searchParams.set("response_type", "code");
-	return url.toString();
-}
-async function exchangeToken(params) {
-	const response = await fetch(params.tokenUrl, {
-		method: "POST",
-		headers: {
-			Accept: "application/json",
-			"Content-Type": "application/x-www-form-urlencoded"
-		},
-		body: params.body
-	});
-	if (!response.ok) throw new TokenExchangeError(response.status);
-	const raw = await parseOAuthTokenResponse(response);
-	const { accessToken, refreshToken, expiresIn, instanceUrl } = normalizeOAuthTokens(raw);
-	if (!accessToken) throw new Error("No access token in response");
-	return {
-		accessToken,
-		refreshToken,
-		expiresIn,
-		instanceUrl,
-		raw
-	};
-}
-async function exchangeCode(ctx) {
-	const { oauthClient, code, redirectUri, connection } = ctx;
-	if (!code) throw new Error("Missing authorization code");
-	return exchangeToken({
-		tokenUrl: connection.tokenUrl,
-		body: new URLSearchParams({
-			code,
-			client_id: oauthClient.clientId,
-			client_secret: oauthClient.clientSecret,
-			redirect_uri: redirectUri,
-			grant_type: "authorization_code"
-		})
-	});
-}
-async function refreshToken(ctx) {
-	const { oauthClient, refreshToken, connection } = ctx;
-	return exchangeToken({
-		tokenUrl: connection.tokenUrl,
-		body: new URLSearchParams({
-			grant_type: "refresh_token",
-			refresh_token: refreshToken,
-			client_id: oauthClient.clientId,
-			client_secret: oauthClient.clientSecret
-		})
-	});
-}
-const oauthDefaults = {
-	buildAuthUrl,
-	exchangeCode,
-	exchangeToken,
-	refreshToken
-};
-
-//#endregion
-//#region src/oauth-connection.ts
-const SENTRY_OAUTH_SCOPES = [
-	"org:read",
-	"project:read",
-	"project:write",
-	"project:admin",
-	"team:read",
-	"team:write",
-	"team:admin",
-	"member:read",
-	"member:write",
-	"event:read",
-	"event:admin",
-	"alerts:read",
-	"alerts:write",
-	"release:admin"
-];
-const sentryOAuthConnection = {
-	kind: "oauth",
-	tokenType: "refreshable",
-	authUrl: "https://sentry.io/oauth/authorize/",
-	tokenUrl: "https://sentry.io/oauth/token/",
-	revokeUrl: null,
-	scopes: [...SENTRY_OAUTH_SCOPES],
-	vault: { accessToken: "SENTRY_ACCESS_TOKEN" },
-	async exchangeCode(ctx) {
-		const result = await oauthDefaults.exchangeCode(ctx);
-		const orgResponse = await fetch(`${SENTRY_DEFAULT_BASE_URL}/api/0/organizations/`, {
-			method: "GET",
-			headers: {
-				Authorization: `Bearer ${result.accessToken}`,
-				Accept: "application/json"
-			}
-		});
-		let firstOrg = null;
-		if (orgResponse.ok) {
-			const orgs = await orgResponse.json();
-			if (Array.isArray(orgs) && orgs.length > 0 && isOrganizationProbe(orgs[0])) firstOrg = orgs[0];
-		}
-		result.raw._sentryOrganization = firstOrg;
-		result.raw._sentryUser = pickUser(result.raw);
-		result.raw._sentryScopes = typeof result.raw.scope === "string" ? result.raw.scope : void 0;
-		return result;
-	},
-	extractInstallationInfo({ tokenResult }) {
-		const org = tokenResult.raw._sentryOrganization;
-		const user = tokenResult.raw._sentryUser;
-		const metadata = {};
-		if (org?.name) metadata.organizationName = org.name;
-		if (org?.slug) metadata.organizationSlug = org.slug;
-		const regionUrl = org?.links?.regionUrl;
-		if (regionUrl) metadata.regionUrl = regionUrl;
-		if (user?.name) metadata.userName = user.name;
-		if (user?.email) metadata.userEmail = user.email;
-		return {
-			externalInstallationId: org?.slug,
-			externalWorkspaceId: org?.id,
-			externalBotUserId: user?.id,
-			metadata
-		};
-	}
-};
-function isOrganizationProbe(value) {
-	return typeof value === "object" && value !== null;
-}
-function pickUser(raw) {
-	const user = raw.user;
-	if (user == null || typeof user !== "object") return null;
-	const u = user;
-	return {
-		id: typeof u.id === "string" ? u.id : void 0,
-		name: typeof u.name === "string" ? u.name : void 0,
-		email: typeof u.email === "string" ? u.email : void 0
-	};
-}
-
-//#endregion
-//#region src/integration.ts
-const sentryAuthSchema = z.object({
-	SENTRY_ACCESS_TOKEN: z.string().min(1),
-	SENTRY_REGION_URL: z.string().url().optional(),
-	SENTRY_ORG_SLUG: z.string().min(1).optional()
-});
-const sentryOfficialIntegration = {
-	id: "sentry",
-	name: "Sentry",
-	description: "Sentry — issue lifecycle, release tracking, alerts, monitors, replays, feedback, and integration-platform webhook triggers",
-	auth: sentryAuthSchema,
-	proxy: { hosts: [
-		"sentry.io",
-		"us.sentry.io",
-		"de.sentry.io"
-	] },
-	connections: [{
-		id: "oauth",
-		...sentryOAuthConnection
-	}]
-};
-const sentryBundle = defineOfficialIntegration({
-	...sentryOfficialIntegration,
-	internal: { providerApp: sentryAppCredentialSet }
-});
-const sentry = sentryBundle.credentialSet;
-
-//#endregion
-export { sentryOfficialProviderSeed as a, sentryAppCredentialSet as i, sentryBundle as n, createOfficialOperationFactory as o, sentryOfficialIntegration as r, sentry as t };

package/dist/integration-rmp485nJ.d.mts

@@ -1,57 +0,0 @@
-import * as _keystrokehq_core0 from "@keystrokehq/core";
-import { z } from "zod";
-import * as _keystrokehq_core_credential_set0 from "@keystrokehq/core/credential-set";
-import { InferCredentialSetAuth } from "@keystrokehq/core/credential-set";
-
-//#region src/integration.d.ts
-declare const sentryOfficialIntegration: {
-  id: "sentry";
-  name: string;
-  description: string;
-  auth: z.ZodObject<{
-    SENTRY_ACCESS_TOKEN: z.ZodString;
-    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-  }, z.core.$strip>;
-  proxy: {
-    hosts: string[];
-  };
-  connections: {
-    kind: "oauth";
-    tokenType: "refreshable";
-    authUrl: "https://sentry.io/oauth/authorize/";
-    tokenUrl: "https://sentry.io/oauth/token/";
-    revokeUrl: null;
-    scopes: readonly ["org:read", "project:read", "project:write", "project:admin", "team:read", "team:write", "team:admin", "member:read", "member:write", "event:read", "event:admin", "alerts:read", "alerts:write", "release:admin"];
-    vault: {
-      readonly accessToken: "SENTRY_ACCESS_TOKEN";
-    };
-    exchangeCode: (ctx: _keystrokehq_core_credential_set0.ExchangeCodeContext) => Promise<_keystrokehq_core_credential_set0.TokenResult>;
-    extractInstallationInfo: ({
-      tokenResult
-    }: _keystrokehq_core_credential_set0.ExtractInstallationContext) => {
-      externalInstallationId: string | undefined;
-      externalWorkspaceId: string | undefined;
-      externalBotUserId: string | undefined;
-      metadata: Record<string, string>;
-    };
-    id: string;
-  }[];
-};
-declare const sentryBundle: undefined<"sentry", z.ZodObject<{
-  SENTRY_ACCESS_TOKEN: z.ZodString;
-  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>>;
-declare const sentry: _keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
-  SENTRY_ACCESS_TOKEN: z.ZodString;
-  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
-  SENTRY_ACCESS_TOKEN: z.ZodString;
-  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>>[] | undefined>;
-type SentryIntegrationCredentials = InferCredentialSetAuth<typeof sentry>;
-//#endregion
-export { sentryOfficialIntegration as i, sentry as n, sentryBundle as r, SentryIntegrationCredentials as t };