@sentry/junior-plugin-api 0.80.1 → 0.82.0

package/dist/credentials.d.ts

@@ -101,6 +101,12 @@ export declare class EgressAuthRequired extends Error {
         cause?: unknown;
     });
 }
+/** Deny provider egress before Junior issues credentials for a disallowed operation. */
+export declare class EgressPolicyDenied extends Error {
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
+}
 /** Provider account identity resolved by a plugin OAuth hook. */
 export type PluginProviderAccount = z.output<typeof pluginProviderAccountSchema>;
 /** Plugin-defined grant required before Junior can forward one outbound request. */
@@ -110,6 +116,8 @@ export interface PluginEgressRequest {
     /** Capped request body text when the host exposes it for provider-specific grant classification. */
     bodyText?: string;
     method: string;
+    /** Plugin-declared operation this request performs, used for grant classification and diagnostics. */
+    operation?: string;
     url: string;
 }
 export interface EgressHookContext extends PluginContext {

package/dist/index.js

@@ -262,6 +262,12 @@ var EgressAuthRequired = class extends Error {
     this.authorization = options?.authorization;
   }
 };
+var EgressPolicyDenied = class extends Error {
+  constructor(message, options) {
+    super(message, { cause: options?.cause });
+    this.name = "EgressPolicyDenied";
+  }
+};
 
 // src/registration.ts
 var PLUGIN_NAME_RE = /^[a-z][a-z0-9-]*$/;
@@ -305,6 +311,7 @@ function defineJuniorPlugin(plugin) {
 }
 export {
   EgressAuthRequired,
+  EgressPolicyDenied,
   PluginToolInputError,
   createLocalSource,
   createSlackSource,

package/dist/tools.d.ts

@@ -36,6 +36,20 @@ export interface PluginSandbox {
         path: string;
     }): Promise<void>;
 }
+export interface PluginEgress {
+    /**
+     * Fetch a provider URL with host-owned credentials.
+     *
+     * The runtime selects and injects credentials for `provider`; plugin code
+     * owns the request shape and response handling. `operation` names the
+     * provider action for grant selection and diagnostics.
+     */
+    fetch(input: {
+        operation: string;
+        provider: string;
+        request: Request;
+    }): Promise<Response>;
+}
 export interface SandboxPrepareHookContext extends PluginContext {
     requester?: Requester;
     sandbox: PluginSandbox;
@@ -102,6 +116,7 @@ interface BaseToolRegistrationHookContext extends PluginContext {
      */
     conversationId?: string;
     embedder: PluginEmbedder;
+    egress: PluginEgress;
     model: PluginModel;
     state: PluginState;
     userText?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sentry/junior-plugin-api",
-  "version": "0.80.1",
+  "version": "0.82.0",
   "private": false,
   "publishConfig": {
     "access": "public"

package/src/credentials.ts

@@ -118,6 +118,14 @@ export class EgressAuthRequired extends Error {
   }
 }
 
+/** Deny provider egress before Junior issues credentials for a disallowed operation. */
+export class EgressPolicyDenied extends Error {
+  constructor(message: string, options?: { cause?: unknown }) {
+    super(message, { cause: options?.cause });
+    this.name = "EgressPolicyDenied";
+  }
+}
+
 /** Provider account identity resolved by a plugin OAuth hook. */
 export type PluginProviderAccount = z.output<
   typeof pluginProviderAccountSchema
@@ -131,6 +139,8 @@ export interface PluginEgressRequest {
   /** Capped request body text when the host exposes it for provider-specific grant classification. */
   bodyText?: string;
   method: string;
+  /** Plugin-declared operation this request performs, used for grant classification and diagnostics. */
+  operation?: string;
   url: string;
 }
 

package/src/tools.ts

@@ -49,6 +49,21 @@ export interface PluginSandbox {
   }): Promise<void>;
 }
 
+export interface PluginEgress {
+  /**
+   * Fetch a provider URL with host-owned credentials.
+   *
+   * The runtime selects and injects credentials for `provider`; plugin code
+   * owns the request shape and response handling. `operation` names the
+   * provider action for grant selection and diagnostics.
+   */
+  fetch(input: {
+    operation: string;
+    provider: string;
+    request: Request;
+  }): Promise<Response>;
+}
+
 export interface SandboxPrepareHookContext extends PluginContext {
   requester?: Requester;
   sandbox: PluginSandbox;
@@ -124,6 +139,7 @@ interface BaseToolRegistrationHookContext extends PluginContext {
    */
   conversationId?: string;
   embedder: PluginEmbedder;
+  egress: PluginEgress;
   model: PluginModel;
   state: PluginState;
   userText?: string;