@sentry/junior-memory 0.127.0 → 0.128.1

package/dist/personal-store.d.ts

@@ -1,6 +1,6 @@
 import { z } from "zod";
+import type { ResolvedMemoryScope } from "./scope";
 import { type MemoryDb, type MemoryRecord } from "./store";
-import { type MemoryRuntimeContext } from "./types";
 declare const memoryVisibilitySchema: z.ZodEnum<{
     public: "public";
     private: "private";
@@ -68,9 +68,9 @@ export declare class PersonalMemoryNotFoundError extends Error {
 }
 /** Viewer-scoped memory operations shared by dashboard and REST. */
 export interface PersonalMemoryCollection {
-    /** Archive one exact personal memory owned by a linked actor. */
+    /** Archive one exact personal memory owned by a linked identity. */
     archive(id: string): Promise<MemoryRecord>;
-    /** Read one exact memory visible to a linked actor. */
+    /** Read one exact memory visible to a linked identity. */
     get(id: string): Promise<PersonalMemoryRecord>;
     /** List one stable page across every authorized viewer scope. */
     list(input: PersonalMemoryPageInput): Promise<PersonalMemoryPage>;
@@ -82,7 +82,10 @@ export interface PersonalMemoryCollection {
     }): Promise<PersonalMemoryDay[]>;
 }
 /** Build storage operations for every memory scope linked to one viewer. */
-export declare function createPersonalMemoryCollection(db: MemoryDb, runtimeContexts: MemoryRuntimeContext[], options?: {
+export declare function createPersonalMemoryCollection(db: MemoryDb, scopes: {
+    privateScopes: ResolvedMemoryScope[];
+    publicScopes: ResolvedMemoryScope[];
+}, options?: {
     now?: () => number;
 }): PersonalMemoryCollection;
 export {};

package/dist/personal.d.ts

@@ -1,4 +1,4 @@
-import type { PluginUserPageActor } from "@sentry/junior-plugin-api";
+import type { User } from "@sentry/junior-plugin-api";
 import { type MemoryVisibility, type PersonalMemoryRecord } from "./personal-store";
 import type { MemoryDb, MemoryRecord } from "./store";
 import type { MemoryKind } from "./types";
@@ -19,8 +19,8 @@ export declare class InvalidMemoryCursorError extends Error {
 }
 export { PersonalMemoryNotFoundError } from "./personal-store";
 export type { MemoryVisibility, PersonalMemoryRecord } from "./personal-store";
-/** Build viewer memory operations authorized by a viewer's linked actors. */
-export declare function createViewerMemories(db: MemoryDb, actors: PluginUserPageActor[]): {
+/** Build viewer memory operations authorized by a user's linked identities. */
+export declare function createViewerMemories(db: MemoryDb, user: User): {
     archive(id: string): Promise<MemoryRecord>;
     get(id: string): Promise<PersonalMemoryRecord>;
     list(input: ViewerMemoryPageInput): Promise<ViewerMemoryPage>;

package/dist/scope.d.ts

@@ -1,3 +1,4 @@
+import { type Identity } from "@sentry/junior-plugin-api";
 import type { MemoryRuntimeContext, MemoryScope, MemorySubjectType } from "./types";
 /** Runtime-derived visibility scope used for memory authorization checks. */
 export interface ResolvedMemoryScope {
@@ -9,6 +10,11 @@ export interface ResolvedMemorySubject {
     subjectKey?: string;
     subjectType: MemorySubjectType;
 }
+/** Derive viewer-visible memory scopes from canonical provider identities. */
+export declare function deriveViewerMemoryScopes(identities: Identity[]): {
+    privateScopes: ResolvedMemoryScope[];
+    publicScopes: ResolvedMemoryScope[];
+};
 /** Derive the authority-bearing key for a requested memory scope. */
 export declare function deriveMemoryScope(ctx: MemoryRuntimeContext, scope: MemoryScope): ResolvedMemoryScope;
 /** Derive the memory subject from the already-authorized write scope. */

package/dist/tools.d.ts

@@ -21,19 +21,7 @@ export declare function createMemoryCreateTool(context: MemoryCreateToolContext)
     expires_at?: string | undefined;
 }, {
     [x: string]: unknown;
-    ok: true;
-    status: "success";
     target: string;
-    data: {
-        created: boolean;
-        memory: {
-            id: string;
-            content: string;
-            createdAtMs: number;
-            observedAtMs: number;
-            expiresAtMs?: number | undefined;
-        };
-    };
     created: boolean;
     memory: {
         id: string;
@@ -47,26 +35,9 @@ export declare function createMemoryCreateTool(context: MemoryCreateToolContext)
         arguments: Record<string, unknown>;
         reason?: string | undefined;
     } | undefined;
-    error?: string | {
-        kind: string;
-        message: string;
-        retryable?: boolean | undefined;
-    } | undefined;
 }, {
     [x: string]: unknown;
-    ok: true;
-    status: "success";
     target: string;
-    data: {
-        created: boolean;
-        memory: {
-            id: string;
-            content: string;
-            createdAtMs: number;
-            observedAtMs: number;
-            expiresAtMs?: number | undefined;
-        };
-    };
     created: boolean;
     memory: {
         id: string;
@@ -80,29 +51,13 @@ export declare function createMemoryCreateTool(context: MemoryCreateToolContext)
         arguments: Record<string, unknown>;
         reason?: string | undefined;
     } | undefined;
-    error?: string | {
-        kind: string;
-        message: string;
-        retryable?: boolean | undefined;
-    } | undefined;
 }>;
 /** Create a tool that archives a visible memory in the active context. */
 export declare function createMemoryRemoveTool(context: MemoryToolContext): import("@sentry/junior-plugin-api").PluginToolDefinition<{
     id: string;
 }, {
     [x: string]: unknown;
-    ok: true;
-    status: "success";
     target: string;
-    data: {
-        memory: {
-            id: string;
-            content: string;
-            createdAtMs: number;
-            observedAtMs: number;
-            expiresAtMs?: number | undefined;
-        };
-    };
     memory: {
         id: string;
         content: string;
@@ -115,25 +70,9 @@ export declare function createMemoryRemoveTool(context: MemoryToolContext): impo
         arguments: Record<string, unknown>;
         reason?: string | undefined;
     } | undefined;
-    error?: string | {
-        kind: string;
-        message: string;
-        retryable?: boolean | undefined;
-    } | undefined;
 }, {
     [x: string]: unknown;
-    ok: true;
-    status: "success";
     target: string;
-    data: {
-        memory: {
-            id: string;
-            content: string;
-            createdAtMs: number;
-            observedAtMs: number;
-            expiresAtMs?: number | undefined;
-        };
-    };
     memory: {
         id: string;
         content: string;
@@ -146,29 +85,13 @@ export declare function createMemoryRemoveTool(context: MemoryToolContext): impo
         arguments: Record<string, unknown>;
         reason?: string | undefined;
     } | undefined;
-    error?: string | {
-        kind: string;
-        message: string;
-        retryable?: boolean | undefined;
-    } | undefined;
 }>;
 /** Create a tool that lists visible active memories in the active context. */
 export declare function createMemoryListTool(context: MemoryToolContext): import("@sentry/junior-plugin-api").PluginToolDefinition<{
     limit?: number | undefined;
 }, {
     [x: string]: unknown;
-    ok: true;
-    status: "success";
     target: string;
-    data: {
-        memories: {
-            id: string;
-            content: string;
-            createdAtMs: number;
-            observedAtMs: number;
-            expiresAtMs?: number | undefined;
-        }[];
-    };
     memories: {
         id: string;
         content: string;
@@ -181,25 +104,9 @@ export declare function createMemoryListTool(context: MemoryToolContext): import
         arguments: Record<string, unknown>;
         reason?: string | undefined;
     } | undefined;
-    error?: string | {
-        kind: string;
-        message: string;
-        retryable?: boolean | undefined;
-    } | undefined;
 }, {
     [x: string]: unknown;
-    ok: true;
-    status: "success";
     target: string;
-    data: {
-        memories: {
-            id: string;
-            content: string;
-            createdAtMs: number;
-            observedAtMs: number;
-            expiresAtMs?: number | undefined;
-        }[];
-    };
     memories: {
         id: string;
         content: string;
@@ -212,11 +119,6 @@ export declare function createMemoryListTool(context: MemoryToolContext): import
         arguments: Record<string, unknown>;
         reason?: string | undefined;
     } | undefined;
-    error?: string | {
-        kind: string;
-        message: string;
-        retryable?: boolean | undefined;
-    } | undefined;
 }>;
 /** Create a tool that searches visible active memories in the active context. */
 export declare function createMemorySearchTool(context: MemoryToolContext): import("@sentry/junior-plugin-api").PluginToolDefinition<{
@@ -224,18 +126,7 @@ export declare function createMemorySearchTool(context: MemoryToolContext): impo
     limit?: number | undefined;
 }, {
     [x: string]: unknown;
-    ok: true;
-    status: "success";
     target: string;
-    data: {
-        memories: {
-            id: string;
-            content: string;
-            createdAtMs: number;
-            observedAtMs: number;
-            expiresAtMs?: number | undefined;
-        }[];
-    };
     memories: {
         id: string;
         content: string;
@@ -248,25 +139,9 @@ export declare function createMemorySearchTool(context: MemoryToolContext): impo
         arguments: Record<string, unknown>;
         reason?: string | undefined;
     } | undefined;
-    error?: string | {
-        kind: string;
-        message: string;
-        retryable?: boolean | undefined;
-    } | undefined;
 }, {
     [x: string]: unknown;
-    ok: true;
-    status: "success";
     target: string;
-    data: {
-        memories: {
-            id: string;
-            content: string;
-            createdAtMs: number;
-            observedAtMs: number;
-            expiresAtMs?: number | undefined;
-        }[];
-    };
     memories: {
         id: string;
         content: string;
@@ -279,9 +154,4 @@ export declare function createMemorySearchTool(context: MemoryToolContext): impo
         arguments: Record<string, unknown>;
         reason?: string | undefined;
     } | undefined;
-    error?: string | {
-        kind: string;
-        message: string;
-        retryable?: boolean | undefined;
-    } | undefined;
 }>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sentry/junior-memory",
-  "version": "0.127.0",
+  "version": "0.128.1",
   "private": false,
   "publishConfig": {
     "access": "public"
@@ -27,7 +27,7 @@
     "commander": "^14.0.3",
     "drizzle-orm": "^0.45.2",
     "zod": "^4.4.3",
-    "@sentry/junior-plugin-api": "0.127.0"
+    "@sentry/junior-plugin-api": "0.128.1"
   },
   "devDependencies": {
     "@types/node": "^25.9.1",

package/src/api.ts

@@ -1,17 +1,15 @@
 /**
  * Authenticated REST resources for viewer-visible memories.
  *
- * HTTP identity is one verified viewer. Linked platform actors are resolved
- * behind the route boundary and used only to authorize personal and public
- * workspace scopes.
+ * HTTP identity is one verified user whose linked identities authorize
+ * personal and public workspace scopes.
  */
 import { z } from "zod";
 import {
   pluginApiRouteRequestContextSchema,
   type PluginConversationEventStats,
-  type PluginApiRouteRequestContext,
   type PluginRouteApp,
-  type PluginUserPageActor,
+  type User,
 } from "@sentry/junior-plugin-api";
 import type { MemoryDb } from "./store";
 import {
@@ -94,9 +92,11 @@ const memoryListQuerySchema = z
   .strict();
 
 interface MemoryApiOptions {
-  actors(email: string): Promise<PluginUserPageActor[]>;
   db: MemoryDb;
   eventStats: PluginConversationEventStats;
+  users: {
+    resolve(email: string): Promise<User | undefined>;
+  };
 }
 
 function json(body: unknown, status = 200): Response {
@@ -122,9 +122,7 @@ function apiMemory(
   };
 }
 
-function viewerEmail(
-  context: PluginApiRouteRequestContext | undefined,
-): string | undefined {
+function viewerEmail(context: unknown): string | undefined {
   const parsed = pluginApiRouteRequestContextSchema.safeParse(context);
   if (!parsed.success || parsed.data.auth.user.emailVerified !== true) {
     return undefined;
@@ -148,14 +146,17 @@ export function createMemoryApi(options: MemoryApiOptions): PluginRouteApp {
       if (!isCollection && !isDashboard && !memoryPath) {
         return json({ error: "Not found." }, 404);
       }
+      const isRead = request.method === "GET" || request.method === "HEAD";
+      if (!isRead && !(memoryPath && request.method === "DELETE")) {
+        return json({ error: "Method not allowed." }, 405);
+      }
+
+      const user = await options.users.resolve(email);
+      if (!user) return json({ error: "Authentication required." }, 401);
 
-      const actors = await options.actors(email);
-      const memories = createViewerMemories(options.db, actors);
+      const memories = createViewerMemories(options.db, user);
       try {
-        if (
-          isDashboard &&
-          (request.method === "GET" || request.method === "HEAD")
-        ) {
+        if (isDashboard && isRead) {
           const [stats, days, extractionDays, recallDays] = await Promise.all([
             memories.stats(),
             memories.timeline({ days: 90 }),
@@ -183,10 +184,7 @@ export function createMemoryApi(options: MemoryApiOptions): PluginRouteApp {
             : json(body);
         }
 
-        if (
-          isCollection &&
-          (request.method === "GET" || request.method === "HEAD")
-        ) {
+        if (isCollection && isRead) {
           const query = memoryListQuerySchema.parse({
             cursor: url.searchParams.get("cursor") ?? undefined,
             limit: url.searchParams.get("limit") ?? undefined,
@@ -209,10 +207,7 @@ export function createMemoryApi(options: MemoryApiOptions): PluginRouteApp {
             : json(body);
         }
 
-        if (
-          memoryPath &&
-          (request.method === "GET" || request.method === "HEAD")
-        ) {
+        if (memoryPath && isRead) {
           const memory = memoryApiSchema.parse(
             apiMemory(await memories.get(decodeURIComponent(memoryPath[1]!))),
           );

package/src/events.ts

@@ -3,8 +3,6 @@ import { z } from "zod";
 import { MEMORY_KINDS, MEMORY_SCOPES } from "./types";
 import type { MemoryRecord } from "./store";
 
-const MAX_EVENT_PREVIEW_CHARS = 500;
-
 const capturedMemorySchema = z
   .object({
     content: z.string().min(1),
@@ -15,12 +13,6 @@ const capturedMemorySchema = z
   })
   .strict();
 
-function eventPreview(content: string): string {
-  const trimmed = content.trim();
-  if (trimmed.length <= MAX_EVENT_PREVIEW_CHARS) return trimmed;
-  return `${trimmed.slice(0, MAX_EVENT_PREVIEW_CHARS - 3).trimEnd()}...`;
-}
-
 const capturedMemoriesSchema = z
   .object({
     memories: z.array(capturedMemorySchema).max(100),
@@ -42,11 +34,7 @@ function renderCapturedMemories(
   if (count === 0) return undefined;
   return {
     icon: "brain" as const,
-    title: count === 1 ? "Memory captured" : "Memories captured",
-    preview:
-      count === 1
-        ? eventPreview(event.memories[0]!.content)
-        : `${count} memories`,
+    title: `${count} ${count === 1 ? "memory" : "memories"} captured`,
     details: event.memories.map((memory) => ({
       title: memory.content,
       metadata: [memory.kind, memory.scope],

package/src/personal-store.ts

@@ -1,13 +1,13 @@
 /**
  * SQL operations over memories visible to one authenticated viewer.
  *
- * A viewer may resolve to several runtime actors. This store combines their
- * personal scopes with authorized public workspace conversation scopes.
+ * A user may have several linked identities. This store combines their
+ * identity-scoped personal memories with authorized public workspace scopes.
  */
 import { and, asc, desc, eq, gt, ilike, like, lt, or, sql } from "drizzle-orm";
 import { z } from "zod";
 import { juniorMemoryEmbeddings, juniorMemoryMemories } from "./db/schema";
-import { deriveMemoryScope, type ResolvedMemoryScope } from "./scope";
+import type { ResolvedMemoryScope } from "./scope";
 import {
   activeVisiblePredicate,
   archiveExpiredMemoryBatch,
@@ -15,7 +15,7 @@ import {
   type MemoryDb,
   type MemoryRecord,
 } from "./store";
-import { MEMORY_KINDS, type MemoryRuntimeContext } from "./types";
+import { MEMORY_KINDS } from "./types";
 
 const nonEmptyStringSchema = z.string().min(1);
 const memoryVisibilitySchema = z.enum(["private", "public"]);
@@ -93,9 +93,9 @@ export class PersonalMemoryNotFoundError extends Error {
 
 /** Viewer-scoped memory operations shared by dashboard and REST. */
 export interface PersonalMemoryCollection {
-  /** Archive one exact personal memory owned by a linked actor. */
+  /** Archive one exact personal memory owned by a linked identity. */
   archive(id: string): Promise<MemoryRecord>;
-  /** Read one exact memory visible to a linked actor. */
+  /** Read one exact memory visible to a linked identity. */
   get(id: string): Promise<PersonalMemoryRecord>;
   /** List one stable page across every authorized viewer scope. */
   list(input: PersonalMemoryPageInput): Promise<PersonalMemoryPage>;
@@ -105,42 +105,6 @@ export interface PersonalMemoryCollection {
   timeline(input: { days: number }): Promise<PersonalMemoryDay[]>;
 }
 
-function personalScopes(
-  runtimeContexts: MemoryRuntimeContext[],
-): ResolvedMemoryScope[] {
-  return [
-    ...new Map(
-      runtimeContexts.map((context) => {
-        const scope = deriveMemoryScope(context, "personal");
-        return [`${scope.scope}:${scope.scopeKey}`, scope] as const;
-      }),
-    ).values(),
-  ];
-}
-
-/** Public workspace conversation scopes authorized by the viewer's Slack teams. */
-function publicWorkspaceScopes(
-  runtimeContexts: MemoryRuntimeContext[],
-): ResolvedMemoryScope[] {
-  return [
-    ...new Map(
-      runtimeContexts.flatMap((context) => {
-        if (context.source.platform !== "slack" || !context.actor) {
-          return [];
-        }
-        if (context.actor.platform !== "slack") {
-          return [];
-        }
-        const scope: ResolvedMemoryScope = {
-          scope: "conversation",
-          scopeKey: `slack:${context.actor.teamId}`,
-        };
-        return [[`${scope.scope}:${scope.scopeKey}`, scope] as const];
-      }),
-    ).values(),
-  ];
-}
-
 function scopePredicate(scopes: ResolvedMemoryScope[]) {
   if (scopes.length === 0) return undefined;
   return or(
@@ -213,11 +177,13 @@ function emptyStats(): PersonalMemoryStats {
 /** Build storage operations for every memory scope linked to one viewer. */
 export function createPersonalMemoryCollection(
   db: MemoryDb,
-  runtimeContexts: MemoryRuntimeContext[],
+  scopes: {
+    privateScopes: ResolvedMemoryScope[];
+    publicScopes: ResolvedMemoryScope[];
+  },
   options: { now?: () => number } = {},
 ): PersonalMemoryCollection {
-  const privateScopes = personalScopes(runtimeContexts);
-  const publicScopes = publicWorkspaceScopes(runtimeContexts);
+  const { privateScopes, publicScopes } = scopes;
   const allScopes = [...privateScopes, ...publicScopes];
   const getNowMs = () => options.now?.() ?? Date.now();
 

package/src/personal.ts

@@ -1,19 +1,19 @@
 /**
  * Authenticated-viewer memory access shared by REST and dashboard projections.
  *
- * Viewer identity may resolve to multiple platform actors. This module keeps
- * that federation behind one viewer-memory collection spanning personal and
- * authorized public workspace scopes.
+ * One user may have multiple provider identities. This module adapts those
+ * identities to the existing personal and public workspace scopes.
  */
 import { z } from "zod";
-import type { PluginUserPageActor } from "@sentry/junior-plugin-api";
+import type { User } from "@sentry/junior-plugin-api";
 import {
   createPersonalMemoryCollection,
   type MemoryVisibility,
   type PersonalMemoryRecord,
 } from "./personal-store";
+import { deriveViewerMemoryScopes } from "./scope";
 import type { MemoryDb, MemoryRecord } from "./store";
-import type { MemoryKind, MemoryRuntimeContext } from "./types";
+import type { MemoryKind } from "./types";
 
 const cursorSchema = z
   .object({
@@ -51,28 +51,6 @@ export class InvalidMemoryCursorError extends Error {
 export { PersonalMemoryNotFoundError } from "./personal-store";
 export type { MemoryVisibility, PersonalMemoryRecord } from "./personal-store";
 
-function runtimeContext(actor: PluginUserPageActor): MemoryRuntimeContext {
-  if (actor.platform === "slack") {
-    return {
-      actor,
-      source: {
-        platform: "slack",
-        visibility: "private",
-        teamId: actor.teamId,
-        channelId: "DDASHBOARD",
-      },
-    };
-  }
-  return {
-    actor,
-    source: {
-      platform: "local",
-      visibility: "private",
-      conversationId: "local:dashboard:memories",
-    },
-  };
-}
-
 function decodeCursor(
   value: string | undefined,
   input: Pick<
@@ -119,14 +97,11 @@ function encodeCursor(
   ).toString("base64url");
 }
 
-/** Build viewer memory operations authorized by a viewer's linked actors. */
-export function createViewerMemories(
-  db: MemoryDb,
-  actors: PluginUserPageActor[],
-) {
+/** Build viewer memory operations authorized by a user's linked identities. */
+export function createViewerMemories(db: MemoryDb, user: User) {
   const collection = createPersonalMemoryCollection(
     db,
-    actors.map(runtimeContext),
+    deriveViewerMemoryScopes(user.identities),
   );
   return {
     async archive(id: string): Promise<MemoryRecord> {

package/src/plugin.ts

@@ -135,9 +135,9 @@ export function memoryPlugin(options: MemoryPluginOptions = {}) {
       },
       apiRoutes(ctx) {
         return createMemoryApi({
-          actors: ctx.viewer.actors,
           db: ctx.db as MemoryDb,
           eventStats: ctx.eventStats,
+          users: ctx.users,
         });
       },
       tools(ctx) {

package/src/scope.ts

@@ -1,4 +1,4 @@
-import { isPrivateSource } from "@sentry/junior-plugin-api";
+import { isPrivateSource, type Identity } from "@sentry/junior-plugin-api";
 import type {
   MemoryRuntimeContext,
   MemoryScope,
@@ -17,6 +17,54 @@ export interface ResolvedMemorySubject {
   subjectType: MemorySubjectType;
 }
 
+function uniqueScopes(scopes: ResolvedMemoryScope[]): ResolvedMemoryScope[] {
+  return [
+    ...new Map(
+      scopes.map((scope) => [`${scope.scope}:${scope.scopeKey}`, scope]),
+    ).values(),
+  ];
+}
+
+/** Derive viewer-visible memory scopes from canonical provider identities. */
+export function deriveViewerMemoryScopes(identities: Identity[]): {
+  privateScopes: ResolvedMemoryScope[];
+  publicScopes: ResolvedMemoryScope[];
+} {
+  const privateScopes = identities.flatMap((identity) => {
+    if (identity.provider === "local") {
+      return [
+        {
+          scope: "personal" as const,
+          scopeKey: `local:${identity.providerSubjectId}`,
+        },
+      ];
+    }
+    if (identity.provider === "slack" && identity.providerTenantId) {
+      return [
+        {
+          scope: "personal" as const,
+          scopeKey: `slack:${identity.providerTenantId}:${identity.providerSubjectId}`,
+        },
+      ];
+    }
+    return [];
+  });
+  const publicScopes = identities.flatMap((identity) =>
+    identity.provider === "slack" && identity.providerTenantId
+      ? [
+          {
+            scope: "conversation" as const,
+            scopeKey: `slack:${identity.providerTenantId}`,
+          },
+        ]
+      : [],
+  );
+  return {
+    privateScopes: uniqueScopes(privateScopes),
+    publicScopes: uniqueScopes(publicScopes),
+  };
+}
+
 function sourceConversationKey(ctx: MemoryRuntimeContext): string | undefined {
   if (ctx.source.platform === "local") {
     return ctx.source.conversationId;