@sentry/junior-scheduler 0.67.0 → 0.67.1

package/dist/identity.d.ts

@@ -0,0 +1,5 @@
+import type { ScheduledTaskPrincipal } from "./types";
+/** Keep scheduler creator metadata from promoting Slack IDs into display names. */
+export declare function sanitizeScheduledTaskPrincipal(principal: ScheduledTaskPrincipal): ScheduledTaskPrincipal;
+/** Render scheduler creator metadata without inventing human profile fields. */
+export declare function scheduledTaskPrincipalLabel(principal: ScheduledTaskPrincipal): string;

package/dist/index.js

@@ -9,6 +9,50 @@ var SCHEDULED_TASK_SYSTEM_ACTOR = Object.freeze({
   id: "scheduled-task"
 });
 
+// src/identity.ts
+var SLACK_USER_ID_PATTERN = /^[UW][A-Z0-9]{5,}$/;
+function clean(value) {
+  const normalized = value?.trim();
+  return normalized ? normalized : void 0;
+}
+function cleanSlackUserId(value) {
+  const normalized = clean(value);
+  return normalized && normalized.toLowerCase() !== "unknown" ? normalized : void 0;
+}
+function cleanDisplay(value, slackUserId) {
+  const normalized = clean(value);
+  if (!normalized || normalized.toLowerCase() === "unknown" || normalized === slackUserId) {
+    return void 0;
+  }
+  return SLACK_USER_ID_PATTERN.test(normalized) ? void 0 : normalized;
+}
+function sanitizeScheduledTaskPrincipal(principal) {
+  const slackUserId = cleanSlackUserId(principal.slackUserId);
+  if (!slackUserId) {
+    throw new Error("Scheduled task principal requires a Slack user id");
+  }
+  const fullName = cleanDisplay(principal.fullName, slackUserId);
+  const userName = cleanDisplay(principal.userName, slackUserId);
+  return {
+    slackUserId,
+    ...fullName ? { fullName } : {},
+    ...userName ? { userName } : {}
+  };
+}
+function scheduledTaskPrincipalLabel(principal) {
+  const author = sanitizeScheduledTaskPrincipal(principal);
+  if (author.fullName && author.userName) {
+    return `${author.fullName} (@${author.userName})`;
+  }
+  if (author.fullName) {
+    return author.fullName;
+  }
+  if (author.userName) {
+    return `@${author.userName}`;
+  }
+  return `Slack User ${author.slackUserId}`;
+}
+
 // src/prompt.ts
 function escapeXml(value) {
   return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&apos;");
@@ -28,7 +72,7 @@ function renderOptionalLine(name, value) {
 function buildScheduledTaskRunPrompt(args) {
   const { run, task } = args;
   const destination = task.destination;
-  const creator = task.createdBy;
+  const creator = sanitizeScheduledTaskPrincipal(task.createdBy);
   const executionActor = task.executionActor ?? SCHEDULED_TASK_SYSTEM_ACTOR;
   if (!task.task.text?.trim()) {
     throw new Error("Scheduled task text is required");
@@ -997,15 +1041,15 @@ function requireActiveDestination(context) {
   };
 }
 function requireRequester(context) {
-  const userId = context.requester?.userId;
-  if (!userId) {
+  const userId = context.requester?.userId?.trim();
+  if (!userId || userId.toLowerCase() === "unknown") {
     throwToolInputError("No active Slack requester context is available.");
   }
-  return {
+  return sanitizeScheduledTaskPrincipal({
     slackUserId: userId,
     ...context.requester?.userName ? { userName: context.requester.userName } : {},
     ...context.requester?.fullName ? { fullName: context.requester.fullName } : {}
-  };
+  });
 }
 function tool(definition) {
   return definition;
@@ -1578,17 +1622,12 @@ function destinationLabel(destination) {
   }
   return destination.channelId;
 }
-function authorLabel(author) {
-  if (author.fullName && author.userName) {
-    return `${author.fullName} (@${author.userName})`;
-  }
-  if (author.fullName) {
-    return author.fullName;
-  }
-  if (author.userName) {
-    return `@${author.userName}`;
+function operationalAuthorLabel(author) {
+  try {
+    return scheduledTaskPrincipalLabel(author);
+  } catch {
+    return "Invalid Slack creator metadata";
   }
-  return `Slack User ${author.slackUserId}`;
 }
 function cadenceLabel(task) {
   if (task.schedule.kind === "one_off") {
@@ -1660,7 +1699,7 @@ async function buildSchedulerOperationalReport(args) {
           id: task.id,
           values: {
             task: task.id,
-            author: authorLabel(task.createdBy),
+            author: operationalAuthorLabel(task.createdBy),
             destination: destinationLabel(task.destination),
             nextRun: formatTimestamp(task.nextRunAtMs),
             cadence: cadenceLabel(task)
@@ -1681,7 +1720,7 @@ async function buildSchedulerOperationalReport(args) {
           tone: "danger",
           values: {
             task: task.id,
-            author: authorLabel(task.createdBy),
+            author: operationalAuthorLabel(task.createdBy),
             destination: destinationLabel(task.destination),
             updated: formatTimestamp(task.updatedAtMs)
           }
@@ -1705,7 +1744,7 @@ async function buildSchedulerOperationalReport(args) {
             values: {
               run: run.id,
               task: run.taskId,
-              author: task ? authorLabel(task.createdBy) : "unknown",
+              author: task ? operationalAuthorLabel(task.createdBy) : "Missing scheduled task",
               scheduledFor: formatTimestamp(run.scheduledForMs),
               status: run.status
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sentry/junior-scheduler",
-  "version": "0.67.0",
+  "version": "0.67.1",
   "private": false,
   "publishConfig": {
     "access": "public"
@@ -23,7 +23,7 @@
   ],
   "dependencies": {
     "@sinclair/typebox": "^0.34.49",
-    "@sentry/junior-plugin-api": "0.67.0"
+    "@sentry/junior-plugin-api": "0.67.1"
   },
   "devDependencies": {
     "@types/node": "^25.9.1",

package/src/identity.ts

@@ -0,0 +1,64 @@
+import type { ScheduledTaskPrincipal } from "./types";
+
+const SLACK_USER_ID_PATTERN = /^[UW][A-Z0-9]{5,}$/;
+
+function clean(value: string | undefined): string | undefined {
+  const normalized = value?.trim();
+  return normalized ? normalized : undefined;
+}
+
+function cleanSlackUserId(value: string | undefined): string | undefined {
+  const normalized = clean(value);
+  return normalized && normalized.toLowerCase() !== "unknown"
+    ? normalized
+    : undefined;
+}
+
+function cleanDisplay(
+  value: string | undefined,
+  slackUserId: string,
+): string | undefined {
+  const normalized = clean(value);
+  if (
+    !normalized ||
+    normalized.toLowerCase() === "unknown" ||
+    normalized === slackUserId
+  ) {
+    return undefined;
+  }
+  return SLACK_USER_ID_PATTERN.test(normalized) ? undefined : normalized;
+}
+
+/** Keep scheduler creator metadata from promoting Slack IDs into display names. */
+export function sanitizeScheduledTaskPrincipal(
+  principal: ScheduledTaskPrincipal,
+): ScheduledTaskPrincipal {
+  const slackUserId = cleanSlackUserId(principal.slackUserId);
+  if (!slackUserId) {
+    throw new Error("Scheduled task principal requires a Slack user id");
+  }
+  const fullName = cleanDisplay(principal.fullName, slackUserId);
+  const userName = cleanDisplay(principal.userName, slackUserId);
+  return {
+    slackUserId,
+    ...(fullName ? { fullName } : {}),
+    ...(userName ? { userName } : {}),
+  };
+}
+
+/** Render scheduler creator metadata without inventing human profile fields. */
+export function scheduledTaskPrincipalLabel(
+  principal: ScheduledTaskPrincipal,
+): string {
+  const author = sanitizeScheduledTaskPrincipal(principal);
+  if (author.fullName && author.userName) {
+    return `${author.fullName} (@${author.userName})`;
+  }
+  if (author.fullName) {
+    return author.fullName;
+  }
+  if (author.userName) {
+    return `@${author.userName}`;
+  }
+  return `Slack User ${author.slackUserId}`;
+}

package/src/plugin.ts

@@ -12,7 +12,12 @@ import {
   type SchedulerOperationalStore,
   type SchedulerStore,
 } from "./store";
-import type { ScheduledRun, ScheduledTask } from "./types";
+import { scheduledTaskPrincipalLabel } from "./identity";
+import type {
+  ScheduledRun,
+  ScheduledTask,
+  ScheduledTaskPrincipal,
+} from "./types";
 import {
   createSlackScheduleCreateTaskTool,
   createSlackScheduleDeleteTaskTool,
@@ -197,17 +202,12 @@ function destinationLabel(destination: ScheduledTask["destination"]): string {
   return destination.channelId;
 }
 
-function authorLabel(author: ScheduledTask["createdBy"]): string {
-  if (author.fullName && author.userName) {
-    return `${author.fullName} (@${author.userName})`;
+function operationalAuthorLabel(author: ScheduledTaskPrincipal): string {
+  try {
+    return scheduledTaskPrincipalLabel(author);
+  } catch {
+    return "Invalid Slack creator metadata";
   }
-  if (author.fullName) {
-    return author.fullName;
-  }
-  if (author.userName) {
-    return `@${author.userName}`;
-  }
-  return `Slack User ${author.slackUserId}`;
 }
 
 function cadenceLabel(task: ScheduledTask): string {
@@ -301,7 +301,7 @@ async function buildSchedulerOperationalReport(args: {
           id: task.id,
           values: {
             task: task.id,
-            author: authorLabel(task.createdBy),
+            author: operationalAuthorLabel(task.createdBy),
             destination: destinationLabel(task.destination),
             nextRun: formatTimestamp(task.nextRunAtMs),
             cadence: cadenceLabel(task),
@@ -322,7 +322,7 @@ async function buildSchedulerOperationalReport(args: {
           tone: "danger",
           values: {
             task: task.id,
-            author: authorLabel(task.createdBy),
+            author: operationalAuthorLabel(task.createdBy),
             destination: destinationLabel(task.destination),
             updated: formatTimestamp(task.updatedAtMs),
           },
@@ -346,7 +346,9 @@ async function buildSchedulerOperationalReport(args: {
             values: {
               run: run.id,
               task: run.taskId,
-              author: task ? authorLabel(task.createdBy) : "unknown",
+              author: task
+                ? operationalAuthorLabel(task.createdBy)
+                : "Missing scheduled task",
               scheduledFor: formatTimestamp(run.scheduledForMs),
               status: run.status,
             },

package/src/prompt.ts

@@ -3,6 +3,7 @@ import {
   type ScheduledRun,
   type ScheduledTask,
 } from "./types";
+import { sanitizeScheduledTaskPrincipal } from "./identity";
 
 function escapeXml(value: string): string {
   return value
@@ -35,7 +36,7 @@ export function buildScheduledTaskRunPrompt(args: {
 }): string {
   const { run, task } = args;
   const destination = task.destination;
-  const creator = task.createdBy;
+  const creator = sanitizeScheduledTaskPrincipal(task.createdBy);
   const executionActor = task.executionActor ?? SCHEDULED_TASK_SYSTEM_ACTOR;
   if (!task.task.text?.trim()) {
     throw new Error("Scheduled task text is required");

package/src/schedule-tools.ts

@@ -7,6 +7,7 @@ import {
   type AgentPluginToolDefinition,
 } from "@sentry/junior-plugin-api";
 import { buildCalendarRecurrence, parseScheduleTimestamp } from "./cadence";
+import { sanitizeScheduledTaskPrincipal } from "./identity";
 import { createSchedulerStore } from "./store";
 import { SCHEDULED_TASK_SYSTEM_ACTOR } from "./types";
 import type {
@@ -68,12 +69,12 @@ function requireActiveDestination(
 function requireRequester(
   context: SchedulerToolContext,
 ): ScheduledTaskPrincipal {
-  const userId = context.requester?.userId;
-  if (!userId) {
+  const userId = context.requester?.userId?.trim();
+  if (!userId || userId.toLowerCase() === "unknown") {
     throwToolInputError("No active Slack requester context is available.");
   }
 
-  return {
+  return sanitizeScheduledTaskPrincipal({
     slackUserId: userId,
     ...(context.requester?.userName
       ? { userName: context.requester.userName }
@@ -81,7 +82,7 @@ function requireRequester(
     ...(context.requester?.fullName
       ? { fullName: context.requester.fullName }
       : {}),
-  };
+  });
 }
 
 function tool<TInput = any>(