@sentry/junior-google 0.0.0-stage → 0.238.0

package/dist/oauth.d.ts

@@ -0,0 +1,47 @@
+import { type GoogleConfig } from "./config";
+import { type GoogleDb } from "./store";
+/** A sign-in attempt failed in a way that is safe to show to the admin. */
+export declare class GoogleConnectError extends Error {
+    name: string;
+}
+/** One pending sign-in: the state and PKCE verifier the callback must match. */
+export interface GoogleSignInRequest {
+    codeVerifier: string;
+    state: string;
+}
+/** Create the random state and PKCE verifier for one sign-in attempt. */
+export declare function createGoogleSignInRequest(): GoogleSignInRequest;
+/** Build the Google consent URL for the configured Junior account. */
+export declare function googleAuthorizationUrl(input: {
+    config: GoogleConfig;
+    redirectUri: string;
+    request: GoogleSignInRequest;
+}): string;
+/**
+ * Exchange an authorization code, verify the account and scopes, and store the
+ * refresh token. A grant that fails a check is revoked and never stored.
+ */
+export declare function connectGoogleAccount(input: {
+    code: string;
+    codeVerifier: string;
+    config: GoogleConfig;
+    connectedBy: string;
+    db: GoogleDb;
+    redirectUri: string;
+}): Promise<{
+    accountEmail: string;
+    scope: string;
+}>;
+/**
+ * Exchange the stored refresh token for a short-lived access token.
+ *
+ * Returns undefined when Google rejects the refresh token (`invalid_grant`),
+ * which means an admin must reconnect the account.
+ */
+export declare function refreshGoogleAccessToken(input: {
+    config: GoogleConfig;
+    refreshToken: string;
+}): Promise<{
+    accessToken: string;
+    expiresAtMs: number;
+} | undefined>;

package/dist/setup-routes.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Admin-only setup for the Google account that Junior acts as.
+ *
+ * The dashboard Admin page lists `createGoogleSetupPage()` for Junior admins.
+ * Its Connect link opens the sign-in routes below, which mount under Junior's
+ * authenticated plugin namespace, `/api/plugins/google`. Every route checks
+ * the Junior admin role on the server. Google consent must come from the
+ * configured account itself.
+ */
+import type { PluginRouteApp, PluginUserPageDefinition } from "@sentry/junior-plugin-api";
+import { type GoogleConfig } from "./config";
+import { type GoogleDb } from "./store";
+export declare const GOOGLE_PLUGIN_ROUTE_PREFIX = "/api/plugins/google";
+/** Public URL of this plugin's OAuth callback. */
+export declare function googleCallbackUrl(request: Request): string;
+/** Create the admin-only Google sign-in routes. */
+export declare function createGoogleSetupRoutes(input: {
+    config: GoogleConfig;
+    db: GoogleDb;
+}): PluginRouteApp;
+/**
+ * Admin page that shows whether the Google account is connected and links to
+ * Google sign-in. Junior lists and serves it only to Junior admins.
+ */
+export declare function createGoogleSetupPage(): PluginUserPageDefinition;

package/dist/store.d.ts

@@ -0,0 +1,22 @@
+import type { PgDatabase, PgQueryResultHKT } from "drizzle-orm/pg-core";
+import * as googleSqlSchema from "./db/schema";
+import { juniorGoogleAccounts } from "./db/schema";
+export type GoogleDb = PgDatabase<PgQueryResultHKT, typeof googleSqlSchema>;
+export type GoogleAccountRecord = typeof juniorGoogleAccounts.$inferSelect;
+/** Read the stored connection for one account email. */
+export declare function getGoogleAccount(db: GoogleDb, accountEmail: string): Promise<GoogleAccountRecord | undefined>;
+/** Create or replace the stored connection for one account email. */
+export declare function saveGoogleAccount(db: GoogleDb, record: GoogleAccountRecord): Promise<void>;
+/**
+ * Remove a connection after Google rejects its refresh token.
+ *
+ * The token match keeps a concurrent reconnect from being deleted.
+ */
+export declare function deleteRejectedGoogleAccount(db: GoogleDb, record: Pick<GoogleAccountRecord, "accountEmail" | "refreshToken">): Promise<void>;
+/** Project a stored connection into admin-safe fields. Never includes tokens. */
+export declare function googleAccountStatus(record: GoogleAccountRecord): {
+    accountEmail: string;
+    connectedAt: string;
+    connectedBy: string;
+    scope: string;
+};

package/dist/tools/create-event.d.ts

@@ -0,0 +1,142 @@
+import { type GoogleToolContext } from "./shared";
+/**
+ * Derive a stable Calendar event id from the tool call.
+ *
+ * Google accepts client ids in base32hex (`a-v`, `0-9`). Hex is a subset, so a
+ * retried tool call maps to the same event instead of a duplicate invite.
+ */
+export declare function calendarEventId(toolCallId: string | undefined): string;
+/** Create an event on Junior's own calendar and invite the attendees. */
+export declare function createCreateCalendarEventTool(ctx: GoogleToolContext): import("@sentry/junior-plugin-api").PluginToolDefinition<{
+    title: string;
+    start: string;
+    end: string;
+    timeZone: string;
+    attendees: string[];
+    addVideoCall: boolean;
+    description?: string | undefined;
+}, {
+    [x: string]: unknown;
+    attendees: string[];
+    end: string;
+    eventId: string;
+    label: string;
+    start: string;
+    target: "createCalendarEvent";
+    created: boolean;
+    objectAnnotations?: {
+        kind: "object";
+        key: string;
+        label: string;
+        objectType: "code_change" | "task" | "deployment" | "automation" | "item";
+        title: string;
+        url: string | null;
+        description?: string | undefined;
+        status?: string | undefined;
+        trigger?: string | undefined;
+        warning?: string | undefined;
+        displayType?: string | undefined;
+        sourceUpdatedAt?: string | undefined;
+        facts?: {
+            type: "code_change";
+            author?: string | undefined;
+            sourceBranch?: string | undefined;
+            targetBranch?: string | undefined;
+            reviewers?: string[] | undefined;
+            review?: "required" | "approved" | "changes_requested" | undefined;
+            checks?: {
+                passed: number;
+                failed: number;
+                pending: number;
+            } | undefined;
+            mergeable?: boolean | undefined;
+            changedFiles?: number | undefined;
+            additions?: number | undefined;
+            deletions?: number | undefined;
+        } | {
+            type: "task";
+            assignees?: string[] | undefined;
+            priority?: string | undefined;
+            project?: string | undefined;
+            cycle?: string | undefined;
+            dueDate?: string | undefined;
+            labels?: string[] | undefined;
+        } | {
+            type: "deployment";
+            project?: string | undefined;
+            environment?: string | undefined;
+            revision?: string | undefined;
+            branch?: string | undefined;
+        } | undefined;
+    }[] | undefined;
+    truncated?: boolean | undefined;
+    continuation?: {
+        arguments: Record<string, unknown>;
+        reason?: string | undefined;
+    } | undefined;
+    title?: string | undefined;
+    url?: string | undefined;
+    videoCallUrl?: string | undefined;
+}, {
+    [x: string]: unknown;
+    attendees: string[];
+    end: string;
+    eventId: string;
+    label: string;
+    start: string;
+    target: "createCalendarEvent";
+    created: boolean;
+    objectAnnotations?: {
+        kind: "object";
+        key: string;
+        label: string;
+        objectType: "code_change" | "task" | "deployment" | "automation" | "item";
+        title: string;
+        url: string | null;
+        description?: string | undefined;
+        status?: string | undefined;
+        trigger?: string | undefined;
+        warning?: string | undefined;
+        displayType?: string | undefined;
+        sourceUpdatedAt?: string | undefined;
+        facts?: {
+            type: "code_change";
+            author?: string | undefined;
+            sourceBranch?: string | undefined;
+            targetBranch?: string | undefined;
+            reviewers?: string[] | undefined;
+            review?: "required" | "approved" | "changes_requested" | undefined;
+            checks?: {
+                passed: number;
+                failed: number;
+                pending: number;
+            } | undefined;
+            mergeable?: boolean | undefined;
+            changedFiles?: number | undefined;
+            additions?: number | undefined;
+            deletions?: number | undefined;
+        } | {
+            type: "task";
+            assignees?: string[] | undefined;
+            priority?: string | undefined;
+            project?: string | undefined;
+            cycle?: string | undefined;
+            dueDate?: string | undefined;
+            labels?: string[] | undefined;
+        } | {
+            type: "deployment";
+            project?: string | undefined;
+            environment?: string | undefined;
+            revision?: string | undefined;
+            branch?: string | undefined;
+        } | undefined;
+    }[] | undefined;
+    truncated?: boolean | undefined;
+    continuation?: {
+        arguments: Record<string, unknown>;
+        reason?: string | undefined;
+    } | undefined;
+    title?: string | undefined;
+    url?: string | undefined;
+    videoCallUrl?: string | undefined;
+}>;

package/dist/tools/find-meeting-times.d.ts

@@ -0,0 +1,162 @@
+import { type GoogleToolContext } from "./shared";
+/**
+ * Find shared free slots on weekdays inside local working hours.
+ *
+ * Exported for tests. Busy intervals come from Google free/busy only, so
+ * Junior never sees event titles or details.
+ */
+export declare function findFreeSlots(input: {
+    busy: Array<{
+        endMs: number;
+        startMs: number;
+    }>;
+    durationMinutes: number;
+    maxResults: number;
+    timeMaxMs: number;
+    timeMinMs: number;
+    timeZone: string;
+    workdayEnd: string;
+    workdayStart: string;
+}): Array<{
+    endMs: number;
+    startMs: number;
+}>;
+/** Find times when everyone is free, using free/busy data only. */
+export declare function createFindMeetingTimesTool(ctx: GoogleToolContext): import("@sentry/junior-plugin-api").PluginToolDefinition<{
+    attendees: string[];
+    durationMinutes: number;
+    timeMin: string;
+    timeMax: string;
+    timeZone: string;
+    workdayStart: string;
+    workdayEnd: string;
+    maxResults: number;
+}, {
+    [x: string]: unknown;
+    target: "findMeetingTimes";
+    checked: string[];
+    slots: {
+        end: string;
+        label: string;
+        start: string;
+    }[];
+    timeZone: string;
+    unavailable: {
+        email: string;
+        reason: string;
+    }[];
+    objectAnnotations?: {
+        kind: "object";
+        key: string;
+        label: string;
+        objectType: "code_change" | "task" | "deployment" | "automation" | "item";
+        title: string;
+        url: string | null;
+        description?: string | undefined;
+        status?: string | undefined;
+        trigger?: string | undefined;
+        warning?: string | undefined;
+        displayType?: string | undefined;
+        sourceUpdatedAt?: string | undefined;
+        facts?: {
+            type: "code_change";
+            author?: string | undefined;
+            sourceBranch?: string | undefined;
+            targetBranch?: string | undefined;
+            reviewers?: string[] | undefined;
+            review?: "required" | "approved" | "changes_requested" | undefined;
+            checks?: {
+                passed: number;
+                failed: number;
+                pending: number;
+            } | undefined;
+            mergeable?: boolean | undefined;
+            changedFiles?: number | undefined;
+            additions?: number | undefined;
+            deletions?: number | undefined;
+        } | {
+            type: "task";
+            assignees?: string[] | undefined;
+            priority?: string | undefined;
+            project?: string | undefined;
+            cycle?: string | undefined;
+            dueDate?: string | undefined;
+            labels?: string[] | undefined;
+        } | {
+            type: "deployment";
+            project?: string | undefined;
+            environment?: string | undefined;
+            revision?: string | undefined;
+            branch?: string | undefined;
+        } | undefined;
+    }[] | undefined;
+    truncated?: boolean | undefined;
+    continuation?: {
+        arguments: Record<string, unknown>;
+        reason?: string | undefined;
+    } | undefined;
+}, {
+    [x: string]: unknown;
+    target: "findMeetingTimes";
+    checked: string[];
+    slots: {
+        end: string;
+        label: string;
+        start: string;
+    }[];
+    timeZone: string;
+    unavailable: {
+        email: string;
+        reason: string;
+    }[];
+    objectAnnotations?: {
+        kind: "object";
+        key: string;
+        label: string;
+        objectType: "code_change" | "task" | "deployment" | "automation" | "item";
+        title: string;
+        url: string | null;
+        description?: string | undefined;
+        status?: string | undefined;
+        trigger?: string | undefined;
+        warning?: string | undefined;
+        displayType?: string | undefined;
+        sourceUpdatedAt?: string | undefined;
+        facts?: {
+            type: "code_change";
+            author?: string | undefined;
+            sourceBranch?: string | undefined;
+            targetBranch?: string | undefined;
+            reviewers?: string[] | undefined;
+            review?: "required" | "approved" | "changes_requested" | undefined;
+            checks?: {
+                passed: number;
+                failed: number;
+                pending: number;
+            } | undefined;
+            mergeable?: boolean | undefined;
+            changedFiles?: number | undefined;
+            additions?: number | undefined;
+            deletions?: number | undefined;
+        } | {
+            type: "task";
+            assignees?: string[] | undefined;
+            priority?: string | undefined;
+            project?: string | undefined;
+            cycle?: string | undefined;
+            dueDate?: string | undefined;
+            labels?: string[] | undefined;
+        } | {
+            type: "deployment";
+            project?: string | undefined;
+            environment?: string | undefined;
+            revision?: string | undefined;
+            branch?: string | undefined;
+        } | undefined;
+    }[] | undefined;
+    truncated?: boolean | undefined;
+    continuation?: {
+        arguments: Record<string, unknown>;
+        reason?: string | undefined;
+    } | undefined;
+}>;

package/dist/tools/list-events.d.ts

@@ -0,0 +1,151 @@
+import { type GoogleToolContext } from "./shared";
+/**
+ * Read the events Junior's account can see on one person's calendar.
+ *
+ * Google sharing settings decide what Junior sees. A calendar shared as
+ * free/busy only returns busy blocks without titles. Descriptions are never
+ * returned, because they often hold links and notes meant only for attendees.
+ */
+export declare function createListCalendarEventsTool(ctx: GoogleToolContext): import("@sentry/junior-plugin-api").PluginToolDefinition<{
+    calendar: string;
+    timeMin: string;
+    timeMax: string;
+    timeZone: string;
+    maxResults: number;
+}, {
+    [x: string]: unknown;
+    target: "listCalendarEvents";
+    calendar: string;
+    events: {
+        end: string;
+        eventId: string;
+        label: string;
+        start: string;
+        attendees?: string[] | undefined;
+        location?: string | undefined;
+        organizer?: string | undefined;
+        title?: string | undefined;
+        url?: string | undefined;
+        videoCallUrl?: string | undefined;
+    }[];
+    timeZone: string;
+    truncated: boolean;
+    visible: boolean;
+    objectAnnotations?: {
+        kind: "object";
+        key: string;
+        label: string;
+        objectType: "code_change" | "task" | "deployment" | "automation" | "item";
+        title: string;
+        url: string | null;
+        description?: string | undefined;
+        status?: string | undefined;
+        trigger?: string | undefined;
+        warning?: string | undefined;
+        displayType?: string | undefined;
+        sourceUpdatedAt?: string | undefined;
+        facts?: {
+            type: "code_change";
+            author?: string | undefined;
+            sourceBranch?: string | undefined;
+            targetBranch?: string | undefined;
+            reviewers?: string[] | undefined;
+            review?: "required" | "approved" | "changes_requested" | undefined;
+            checks?: {
+                passed: number;
+                failed: number;
+                pending: number;
+            } | undefined;
+            mergeable?: boolean | undefined;
+            changedFiles?: number | undefined;
+            additions?: number | undefined;
+            deletions?: number | undefined;
+        } | {
+            type: "task";
+            assignees?: string[] | undefined;
+            priority?: string | undefined;
+            project?: string | undefined;
+            cycle?: string | undefined;
+            dueDate?: string | undefined;
+            labels?: string[] | undefined;
+        } | {
+            type: "deployment";
+            project?: string | undefined;
+            environment?: string | undefined;
+            revision?: string | undefined;
+            branch?: string | undefined;
+        } | undefined;
+    }[] | undefined;
+    continuation?: {
+        arguments: Record<string, unknown>;
+        reason?: string | undefined;
+    } | undefined;
+}, {
+    [x: string]: unknown;
+    target: "listCalendarEvents";
+    calendar: string;
+    events: {
+        end: string;
+        eventId: string;
+        label: string;
+        start: string;
+        attendees?: string[] | undefined;
+        location?: string | undefined;
+        organizer?: string | undefined;
+        title?: string | undefined;
+        url?: string | undefined;
+        videoCallUrl?: string | undefined;
+    }[];
+    timeZone: string;
+    truncated: boolean;
+    visible: boolean;
+    objectAnnotations?: {
+        kind: "object";
+        key: string;
+        label: string;
+        objectType: "code_change" | "task" | "deployment" | "automation" | "item";
+        title: string;
+        url: string | null;
+        description?: string | undefined;
+        status?: string | undefined;
+        trigger?: string | undefined;
+        warning?: string | undefined;
+        displayType?: string | undefined;
+        sourceUpdatedAt?: string | undefined;
+        facts?: {
+            type: "code_change";
+            author?: string | undefined;
+            sourceBranch?: string | undefined;
+            targetBranch?: string | undefined;
+            reviewers?: string[] | undefined;
+            review?: "required" | "approved" | "changes_requested" | undefined;
+            checks?: {
+                passed: number;
+                failed: number;
+                pending: number;
+            } | undefined;
+            mergeable?: boolean | undefined;
+            changedFiles?: number | undefined;
+            additions?: number | undefined;
+            deletions?: number | undefined;
+        } | {
+            type: "task";
+            assignees?: string[] | undefined;
+            priority?: string | undefined;
+            project?: string | undefined;
+            cycle?: string | undefined;
+            dueDate?: string | undefined;
+            labels?: string[] | undefined;
+        } | {
+            type: "deployment";
+            project?: string | undefined;
+            environment?: string | undefined;
+            revision?: string | undefined;
+            branch?: string | undefined;
+        } | undefined;
+    }[] | undefined;
+    continuation?: {
+        arguments: Record<string, unknown>;
+        reason?: string | undefined;
+    } | undefined;
+}>;

package/dist/tools/shared.d.ts

@@ -0,0 +1,85 @@
+import { type PluginEgress, type User } from "@sentry/junior-plugin-api";
+import { z } from "zod";
+import { type GoogleOperation } from "../credentials";
+/** Runtime capabilities the Calendar tools use. */
+export interface GoogleToolContext {
+    allowedDomains: string[];
+    egress: PluginEgress;
+    users: {
+        resolveActor(): Promise<{
+            user?: User;
+        } | undefined>;
+    };
+}
+export declare const emailListSchema: (max: number) => z.ZodArray<z.ZodPipe<z.ZodString, z.ZodEmail>>;
+export declare const timeZoneSchema: z.ZodString;
+/** Reject people outside the domains Junior may look up or invite. */
+export declare function requireAllowedEmails(emails: string[], allowedDomains: string[]): void;
+/** Return the requester's email in lowercase, when Junior knows it. */
+export declare function requesterEmail(ctx: GoogleToolContext): Promise<string | undefined>;
+/**
+ * Add the requester's email when Junior knows it and it is in an allowed
+ * domain. People rarely type their own address.
+ */
+export declare function withRequester(ctx: GoogleToolContext, emails: string[]): Promise<string[]>;
+/** Call one Google Calendar API operation through host-owned egress. */
+export declare function googleApiRequest(ctx: GoogleToolContext, input: {
+    body?: unknown;
+    operation: GoogleOperation;
+    path: string;
+    query?: Record<string, string>;
+}): Promise<{
+    body: unknown;
+    status: number;
+}>;
+/** Turn a failed Google response into a tool error. */
+export declare function googleApiError(operation: GoogleOperation, response: {
+    body: unknown;
+    status: number;
+}): Error;
+/** Format one interval for people, in the requested time zone. */
+export declare function formatInterval(startMs: number, endMs: number, timeZone: string): string;
+/** Longest event Junior may create or move an event to. */
+export declare const MAX_EVENT_MS: number;
+/** Event fields that Junior reads back from its own calendar. */
+export declare const ownEventSchema: z.ZodObject<{
+    attendees: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        email: z.ZodString;
+        responseStatus: z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>>>;
+    end: z.ZodObject<{
+        dateTime: z.ZodString;
+    }, z.core.$strip>;
+    hangoutLink: z.ZodOptional<z.ZodString>;
+    htmlLink: z.ZodOptional<z.ZodString>;
+    id: z.ZodString;
+    organizer: z.ZodOptional<z.ZodObject<{
+        self: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    start: z.ZodObject<{
+        dateTime: z.ZodString;
+    }, z.core.$strip>;
+    summary: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** Shape one event on Junior's calendar for a tool result. */
+export declare function ownEventResult(event: z.infer<typeof ownEventSchema>, timeZone: string): {
+    videoCallUrl?: string | undefined;
+    url?: string | undefined;
+    title?: string | undefined;
+    attendees: string[];
+    end: string;
+    eventId: string;
+    label: string;
+    start: string;
+};
+/** Output fields shared by the tools that create or change Junior's events. */
+export declare const ownEventOutputFields: {
+    attendees: z.ZodArray<z.ZodString>;
+    end: z.ZodString;
+    eventId: z.ZodString;
+    label: z.ZodString;
+    start: z.ZodString;
+    title: z.ZodOptional<z.ZodString>;
+    url: z.ZodOptional<z.ZodString>;
+    videoCallUrl: z.ZodOptional<z.ZodString>;
+};