@sentry/junior-memory 0.127.0 → 0.128.1

package/README.md

@@ -28,9 +28,9 @@ exported types, tools, and tests are authoritative.
 
 - Memory scope is derived from the active actor and source, never from
   model-supplied ownership fields.
-- Dashboard and REST requests authorize one verified viewer, then resolve every
-  linked platform actor internally so one arbitrary actor is never treated as
-  the viewer's canonical identity.
+- Dashboard and REST requests authorize one verified viewer, then derive access
+  from every linked provider identity so no arbitrary identity is treated as
+  the canonical user.
 - Private conversations and local sources remain private by default.
 - Recall filters candidates by actor, source, visibility, status, and relevance
   before content reaches the model.

package/dist/api.d.ts

@@ -1,12 +1,11 @@
 /**
  * Authenticated REST resources for viewer-visible memories.
  *
- * HTTP identity is one verified viewer. Linked platform actors are resolved
- * behind the route boundary and used only to authorize personal and public
- * workspace scopes.
+ * HTTP identity is one verified user whose linked identities authorize
+ * personal and public workspace scopes.
  */
 import { z } from "zod";
-import { type PluginConversationEventStats, type PluginRouteApp, type PluginUserPageActor } from "@sentry/junior-plugin-api";
+import { type PluginConversationEventStats, type PluginRouteApp, type User } from "@sentry/junior-plugin-api";
 import type { MemoryDb } from "./store";
 export declare const memoryApiSchema: z.ZodObject<{
     content: z.ZodString;
@@ -77,9 +76,11 @@ export type MemoryApi = z.output<typeof memoryApiSchema>;
 export type MemoryDashboardResponse = z.output<typeof memoryDashboardResponseSchema>;
 export type MemoryListResponse = z.output<typeof memoryListResponseSchema>;
 interface MemoryApiOptions {
-    actors(email: string): Promise<PluginUserPageActor[]>;
     db: MemoryDb;
     eventStats: PluginConversationEventStats;
+    users: {
+        resolve(email: string): Promise<User | undefined>;
+    };
 }
 /** Create the authenticated viewer-memory REST app. */
 export declare function createMemoryApi(options: MemoryApiOptions): PluginRouteApp;

package/dist/index.js

@@ -228,6 +228,46 @@ function rankMemoryMatches(matches, options) {
 
 // src/scope.ts
 import { isPrivateSource } from "@sentry/junior-plugin-api";
+function uniqueScopes(scopes) {
+  return [
+    ...new Map(
+      scopes.map((scope) => [`${scope.scope}:${scope.scopeKey}`, scope])
+    ).values()
+  ];
+}
+function deriveViewerMemoryScopes(identities) {
+  const privateScopes = identities.flatMap((identity) => {
+    if (identity.provider === "local") {
+      return [
+        {
+          scope: "personal",
+          scopeKey: `local:${identity.providerSubjectId}`
+        }
+      ];
+    }
+    if (identity.provider === "slack" && identity.providerTenantId) {
+      return [
+        {
+          scope: "personal",
+          scopeKey: `slack:${identity.providerTenantId}:${identity.providerSubjectId}`
+        }
+      ];
+    }
+    return [];
+  });
+  const publicScopes = identities.flatMap(
+    (identity) => identity.provider === "slack" && identity.providerTenantId ? [
+      {
+        scope: "conversation",
+        scopeKey: `slack:${identity.providerTenantId}`
+      }
+    ] : []
+  );
+  return {
+    privateScopes: uniqueScopes(privateScopes),
+    publicScopes: uniqueScopes(publicScopes)
+  };
+}
 function sourceConversationKey(ctx) {
   if (ctx.source.platform === "local") {
     return ctx.source.conversationId;
@@ -964,7 +1004,7 @@ async function searchVisibleVectorMemories(args) {
   });
 }
 function createMemoryStore(db, context, options = {}) {
-  const runtimeContext2 = memoryRuntimeContextSchema.parse(context);
+  const runtimeContext = memoryRuntimeContextSchema.parse(context);
   const parsedOptions = memoryStoreOptionsSchema.parse({ now: options.now });
   const embedder = options.embedder;
   const maxVectorDistance = options.maxVectorDistance;
@@ -976,14 +1016,14 @@ function createMemoryStore(db, context, options = {}) {
       db,
       limit: input.limit,
       nowMs,
-      scopes: deriveVisibleMemoryScopes(runtimeContext2)
+      scopes: deriveVisibleMemoryScopes(runtimeContext)
     });
   }
   async function reuseDuplicateMemory(args) {
     await rememberDuplicateIdempotency({
       ...args,
       db,
-      runtimeContext: runtimeContext2
+      runtimeContext
     });
     await storeEmbedding({
       content: args.duplicate.content,
@@ -998,8 +1038,8 @@ function createMemoryStore(db, context, options = {}) {
     const input = createMemoryInputSchema.parse(rawInput);
     const nowMs = getNowMs();
     const content = normalizeContent(input.content);
-    const scope = deriveMemoryScope(runtimeContext2, scopeKind);
-    const subject = deriveMemorySubject(runtimeContext2, scope);
+    const scope = deriveMemoryScope(runtimeContext, scopeKind);
+    const subject = deriveMemorySubject(runtimeContext, scope);
     if (content.length > MAX_MEMORY_CONTENT_CHARS) {
       throw new Error("Memory content exceeds the maximum length.");
     }
@@ -1072,7 +1112,7 @@ function createMemoryStore(db, context, options = {}) {
         candidates: preferenceCandidates,
         content,
         decider: supersessionDecider,
-        runtimeContext: runtimeContext2
+        runtimeContext
       });
       if (adjudication.decision === "duplicate") {
         return await reuseDuplicateMemory({
@@ -1099,8 +1139,8 @@ function createMemoryStore(db, context, options = {}) {
         observedAtMs: nowMs,
         scope: scope.scope,
         scopeKey: scope.scopeKey,
-        sourceKey: sourceKey(runtimeContext2),
-        sourcePlatform: runtimeContext2.source.platform,
+        sourceKey: sourceKey(runtimeContext),
+        sourcePlatform: runtimeContext.source.platform,
         subjectKey: subject.subjectKey,
         subjectType: subject.subjectType,
         kind: input.kind
@@ -1173,7 +1213,7 @@ function createMemoryStore(db, context, options = {}) {
   async function retrieveVisibleMemories(rawInput, vectorMaxDistance) {
     const input = searchMemoriesInputSchema.parse(rawInput);
     const nowMs = getNowMs();
-    const scopes = deriveVisibleMemoryScopes(runtimeContext2);
+    const scopes = deriveVisibleMemoryScopes(runtimeContext);
     await archiveExpiredMemoryBatch({
       db,
       nowMs,
@@ -1199,7 +1239,7 @@ function createMemoryStore(db, context, options = {}) {
         scopes
       })
     ]);
-    const channelPrefix = sourceChannelPrefix(runtimeContext2);
+    const channelPrefix = sourceChannelPrefix(runtimeContext);
     return rankMemoryMatches([...vectorMatches, ...lexicalMatches], {
       nowMs,
       ...channelPrefix ? { channelPrefix } : {}
@@ -1218,7 +1258,7 @@ function createMemoryStore(db, context, options = {}) {
     async listMemories(input) {
       input = listMemoriesInputSchema.parse(input);
       const nowMs = getNowMs();
-      const scopes = deriveVisibleMemoryScopes(runtimeContext2);
+      const scopes = deriveVisibleMemoryScopes(runtimeContext);
       await archiveExpiredMemoryBatch({
         db,
         nowMs,
@@ -1234,7 +1274,7 @@ function createMemoryStore(db, context, options = {}) {
     async listPersonalMemories(input) {
       input = listMemoriesInputSchema.parse(input);
       const nowMs = getNowMs();
-      const scopes = [deriveMemoryScope(runtimeContext2, "personal")];
+      const scopes = [deriveMemoryScope(runtimeContext, "personal")];
       await archiveExpiredMemoryBatch({
         db,
         nowMs,
@@ -1256,7 +1296,7 @@ function createMemoryStore(db, context, options = {}) {
     async archiveMemory(input) {
       input = archiveMemoryInputSchema.parse(input);
       const nowMs = getNowMs();
-      const scopes = deriveVisibleMemoryScopes(runtimeContext2);
+      const scopes = deriveVisibleMemoryScopes(runtimeContext);
       const predicate = activeVisiblePredicate({ nowMs, scopes });
       const idPrefix = input.id.trim();
       if (!idPrefix) {
@@ -1795,35 +1835,6 @@ var PersonalMemoryNotFoundError = class extends Error {
     this.name = "PersonalMemoryNotFoundError";
   }
 };
-function personalScopes(runtimeContexts) {
-  return [
-    ...new Map(
-      runtimeContexts.map((context) => {
-        const scope = deriveMemoryScope(context, "personal");
-        return [`${scope.scope}:${scope.scopeKey}`, scope];
-      })
-    ).values()
-  ];
-}
-function publicWorkspaceScopes(runtimeContexts) {
-  return [
-    ...new Map(
-      runtimeContexts.flatMap((context) => {
-        if (context.source.platform !== "slack" || !context.actor) {
-          return [];
-        }
-        if (context.actor.platform !== "slack") {
-          return [];
-        }
-        const scope = {
-          scope: "conversation",
-          scopeKey: `slack:${context.actor.teamId}`
-        };
-        return [[`${scope.scope}:${scope.scopeKey}`, scope]];
-      })
-    ).values()
-  ];
-}
 function scopePredicate(scopes) {
   if (scopes.length === 0) return void 0;
   return or2(
@@ -1876,9 +1887,8 @@ function emptyStats() {
     public: 0
   };
 }
-function createPersonalMemoryCollection(db, runtimeContexts, options = {}) {
-  const privateScopes = personalScopes(runtimeContexts);
-  const publicScopes = publicWorkspaceScopes(runtimeContexts);
+function createPersonalMemoryCollection(db, scopes, options = {}) {
+  const { privateScopes, publicScopes } = scopes;
   const allScopes = [...privateScopes, ...publicScopes];
   const getNowMs = () => options.now?.() ?? Date.now();
   function scopesForVisibility(visibility) {
@@ -1923,9 +1933,9 @@ function createPersonalMemoryCollection(db, runtimeContexts, options = {}) {
     async list(input) {
       input = personalMemoryPageInputSchema.parse(input);
       const nowMs = getNowMs();
-      const scopes = scopesForVisibility(input.visibility);
-      await archiveExpiredMemoryBatch({ db, nowMs, scopes });
-      const active = activeVisiblePredicate({ nowMs, scopes });
+      const scopes2 = scopesForVisibility(input.visibility);
+      await archiveExpiredMemoryBatch({ db, nowMs, scopes: scopes2 });
+      const active = activeVisiblePredicate({ nowMs, scopes: scopes2 });
       if (!active) {
         return { memories: [] };
       }
@@ -2071,27 +2081,6 @@ var InvalidMemoryCursorError = class extends Error {
     this.name = "InvalidMemoryCursorError";
   }
 };
-function runtimeContext(actor) {
-  if (actor.platform === "slack") {
-    return {
-      actor,
-      source: {
-        platform: "slack",
-        visibility: "private",
-        teamId: actor.teamId,
-        channelId: "DDASHBOARD"
-      }
-    };
-  }
-  return {
-    actor,
-    source: {
-      platform: "local",
-      visibility: "private",
-      conversationId: "local:dashboard:memories"
-    }
-  };
-}
 function decodeCursor(value, input) {
   if (!value) return void 0;
   try {
@@ -2119,10 +2108,10 @@ function encodeCursor(cursor, input) {
     "utf8"
   ).toString("base64url");
 }
-function createViewerMemories(db, actors) {
+function createViewerMemories(db, user) {
   const collection = createPersonalMemoryCollection(
     db,
-    actors.map(runtimeContext)
+    deriveViewerMemoryScopes(user.identities)
   );
   return {
     async archive(id) {
@@ -2243,10 +2232,15 @@ function createMemoryApi(options) {
       if (!isCollection && !isDashboard && !memoryPath) {
         return json({ error: "Not found." }, 404);
       }
-      const actors = await options.actors(email);
-      const memories = createViewerMemories(options.db, actors);
+      const isRead = request.method === "GET" || request.method === "HEAD";
+      if (!isRead && !(memoryPath && request.method === "DELETE")) {
+        return json({ error: "Method not allowed." }, 405);
+      }
+      const user = await options.users.resolve(email);
+      if (!user) return json({ error: "Authentication required." }, 401);
+      const memories = createViewerMemories(options.db, user);
       try {
-        if (isDashboard && (request.method === "GET" || request.method === "HEAD")) {
+        if (isDashboard && isRead) {
           const [stats, days, extractionDays, recallDays] = await Promise.all([
             memories.stats(),
             memories.timeline({ days: 90 }),
@@ -2271,7 +2265,7 @@ function createMemoryApi(options) {
             status: 200
           }) : json(body);
         }
-        if (isCollection && (request.method === "GET" || request.method === "HEAD")) {
+        if (isCollection && isRead) {
           const query = memoryListQuerySchema.parse({
             cursor: url.searchParams.get("cursor") ?? void 0,
             limit: url.searchParams.get("limit") ?? void 0,
@@ -2291,7 +2285,7 @@ function createMemoryApi(options) {
             status: 200
           }) : json(body);
         }
-        if (memoryPath && (request.method === "GET" || request.method === "HEAD")) {
+        if (memoryPath && isRead) {
           const memory = memoryApiSchema.parse(
             apiMemory(await memories.get(decodeURIComponent(memoryPath[1])))
           );
@@ -2457,7 +2451,7 @@ import {
   definePluginTool,
   getSourceKey,
   PluginToolInputError,
-  pluginToolResultSchema
+  pluginToolOutputSchema
 } from "@sentry/junior-plugin-api";
 import { z as z7 } from "zod";
 var MAX_TOOL_CONTENT_CHARS = 4e3;
@@ -2621,36 +2615,17 @@ var memoryProjectionOutputSchema = z7.object({
   observedAtMs: z7.number(),
   expiresAtMs: z7.number().optional()
 });
-var memoryCreateDataOutputSchema = z7.object({
-  created: z7.boolean(),
-  memory: memoryProjectionOutputSchema
-});
-var memorySingleDataOutputSchema = z7.object({
-  memory: memoryProjectionOutputSchema
-});
-var memoryManyDataOutputSchema = z7.object({
-  memories: z7.array(memoryProjectionOutputSchema)
-});
-var memoryCreateOutputSchema = pluginToolResultSchema.extend({
-  ok: z7.literal(true),
-  status: z7.literal("success"),
+var memoryCreateOutputSchema = pluginToolOutputSchema.extend({
   target: z7.string(),
-  data: memoryCreateDataOutputSchema,
   created: z7.boolean(),
   memory: memoryProjectionOutputSchema
 });
-var memorySingleOutputSchema = pluginToolResultSchema.extend({
-  ok: z7.literal(true),
-  status: z7.literal("success"),
+var memorySingleOutputSchema = pluginToolOutputSchema.extend({
   target: z7.string(),
-  data: memorySingleDataOutputSchema,
   memory: memoryProjectionOutputSchema
 });
-var memoryManyOutputSchema = pluginToolResultSchema.extend({
-  ok: z7.literal(true),
-  status: z7.literal("success"),
+var memoryManyOutputSchema = pluginToolOutputSchema.extend({
   target: z7.string(),
-  data: memoryManyDataOutputSchema,
   memories: z7.array(memoryProjectionOutputSchema)
 });
 function parseMemoryToolInput(schema, input) {
@@ -2694,10 +2669,7 @@ function compactMemory(memory) {
 }
 function memoryToolResult(target, data) {
   return {
-    ok: true,
-    status: "success",
     target,
-    data,
     ...data
   };
 }
@@ -2718,7 +2690,7 @@ function createMemoryCreateTool(context) {
       const parsedInput = parseMemoryToolInput(createMemoryInputSchema2, input);
       const toolCallId = requireToolCallId(options.toolCallId);
       const requestedExpiresAtMs = parseExpiresAt(parsedInput.expires_at);
-      const runtimeContext2 = memoryRuntimeContext(context);
+      const runtimeContext = memoryRuntimeContext(context);
       const store = memoryStore(context, {
         supersessionDecider: context.supersessionDecider
       });
@@ -2729,7 +2701,7 @@ function createMemoryCreateTool(context) {
               parseCreateMemoryRequest({
                 content: requireMemoryContent(parsedInput.content),
                 ...requestedExpiresAtMs !== void 0 ? { expiresAtMs: requestedExpiresAtMs } : {},
-                runtimeContext: runtimeContext2,
+                runtimeContext,
                 ...context.userText?.trim() ? {
                   sourceContext: {
                     currentUserText: context.userText.trim()
@@ -2870,7 +2842,6 @@ import { z as z9 } from "zod";
 // src/events.ts
 import { defineConversationEvent } from "@sentry/junior-plugin-api";
 import { z as z8 } from "zod";
-var MAX_EVENT_PREVIEW_CHARS = 500;
 var capturedMemorySchema = z8.object({
   content: z8.string().min(1),
   id: z8.string().min(1),
@@ -2878,11 +2849,6 @@ var capturedMemorySchema = z8.object({
   observedAtMs: z8.number().finite(),
   scope: z8.enum(MEMORY_SCOPES)
 }).strict();
-function eventPreview(content) {
-  const trimmed = content.trim();
-  if (trimmed.length <= MAX_EVENT_PREVIEW_CHARS) return trimmed;
-  return `${trimmed.slice(0, MAX_EVENT_PREVIEW_CHARS - 3).trimEnd()}...`;
-}
 var capturedMemoriesSchema = z8.object({
   memories: z8.array(capturedMemorySchema).max(100),
   costUsd: z8.number().finite().nonnegative().optional()
@@ -2896,8 +2862,7 @@ function renderCapturedMemories(event) {
   if (count === 0) return void 0;
   return {
     icon: "brain",
-    title: count === 1 ? "Memory captured" : "Memories captured",
-    preview: count === 1 ? eventPreview(event.memories[0].content) : `${count} memories`,
+    title: `${count} ${count === 1 ? "memory" : "memories"} captured`,
     details: event.memories.map((memory) => ({
       title: memory.content,
       metadata: [memory.kind, memory.scope]
@@ -3056,13 +3021,13 @@ async function processMemorySession(context) {
   if (!evidenceText) {
     return;
   }
-  const runtimeContext2 = memoryRuntimeContextSchema.parse({
+  const runtimeContext = memoryRuntimeContextSchema.parse({
     conversationId: run.conversationId,
     ...run.actor ? { actor: run.actor } : {},
     source: run.source
   });
   const agent = createMemoryAgent(context.model);
-  const store = createMemoryStore(context.db, runtimeContext2, {
+  const store = createMemoryStore(context.db, runtimeContext, {
     embedder: context.embedder,
     supersessionDecider: agent
   });
@@ -3078,7 +3043,7 @@ async function processMemorySession(context) {
       })),
       actors: run.actors,
       transcript,
-      runtimeContext: runtimeContext2
+      runtimeContext
     });
   });
   const captured = [];
@@ -3188,7 +3153,7 @@ async function createMemoryPromptContributions(context) {
   if (!context.text.trim()) {
     return void 0;
   }
-  const runtimeContext2 = memoryRuntimeContextSchema.parse({
+  const runtimeContext = memoryRuntimeContextSchema.parse({
     ...context.conversationId ? { conversationId: context.conversationId } : {},
     ...context.actor ? { actor: context.actor } : {},
     source: context.source
@@ -3202,7 +3167,7 @@ async function createMemoryPromptContributions(context) {
       return result;
     }
   } : void 0;
-  const candidates = await createMemoryStore(context.db, runtimeContext2, {
+  const candidates = await createMemoryStore(context.db, runtimeContext, {
     ...embedder ? { embedder } : {},
     ...context.maxVectorDistance !== void 0 ? { maxVectorDistance: context.maxVectorDistance } : {}
   }).recallMemories({
@@ -3469,10 +3434,7 @@ function createMemoryUserPage() {
     navigation: "primary",
     description: "Personal and public memories Junior can use across conversations.",
     async read(ctx, input) {
-      const memories = createViewerMemories(
-        ctx.db,
-        ctx.viewer.actors
-      );
+      const memories = createViewerMemories(ctx.db, ctx.viewer);
       const page = await memories.list({
         cursor: input.cursor,
         ...pageFilter(input.filter),
@@ -3599,9 +3561,9 @@ function memoryPlugin(options = {}) {
       },
       apiRoutes(ctx) {
         return createMemoryApi({
-          actors: ctx.viewer.actors,
           db: ctx.db,
-          eventStats: ctx.eventStats
+          eventStats: ctx.eventStats,
+          users: ctx.users
         });
       },
       tools(ctx) {