@sentry/junior 0.113.0 → 0.115.0

package/dist/cli/chat.js

@@ -1,35 +1,40 @@
 import {
   createAgentRunner,
   executeAgentRun
-} from "../chunk-H5ON7XTE.js";
-import "../chunk-DXRPHBOU.js";
-import "../chunk-4VKFQPCW.js";
+} from "../chunk-43RYMWJ2.js";
+import "../chunk-DIB4GX3G.js";
+import "../chunk-LYA2AB5G.js";
+import "../chunk-CEYOL62C.js";
+import "../chunk-HDSDCEPK.js";
+import "../chunk-PVZHG2XZ.js";
 import "../chunk-MU6HHZEN.js";
 import "../chunk-PDO5BLNM.js";
 import "../chunk-UIE3R5XU.js";
 import {
   loadAppPluginSet
 } from "../chunk-Y2CM7HXH.js";
-import "../chunk-YJ44UT7D.js";
-import "../chunk-HMRVILWZ.js";
-import "../chunk-QTS66GMR.js";
-import "../chunk-LLKDNPYV.js";
+import "../chunk-RAVKCKXA.js";
+import "../chunk-67CVNDJ7.js";
+import "../chunk-CWEZEPD4.js";
+import "../chunk-HWCQRGLL.js";
 import "../chunk-JQFJO5WH.js";
 import "../chunk-4ZNGQH7C.js";
-import "../chunk-RCBUZGIT.js";
+import "../chunk-SYJT7AKB.js";
 import "../chunk-VFUK3X5B.js";
-import "../chunk-6Y5L4BOM.js";
-import "../chunk-4WZ7YKDF.js";
-import "../chunk-LR2SKL5Y.js";
-import "../chunk-OXE5ZUTS.js";
-import "../chunk-C4MZ3GP5.js";
-import "../chunk-36UJA3OD.js";
-import "../chunk-42WRQLJ6.js";
+import "../chunk-FXOYURO4.js";
+import "../chunk-2QG4MZQ7.js";
+import "../chunk-6FKLPVF3.js";
+import "../chunk-EW5MLKT5.js";
+import "../chunk-W3U3YQYI.js";
+import "../chunk-HZF5P5UN.js";
+import "../chunk-NVUQSFWX.js";
+import "../chunk-OB42YVAE.js";
+import "../chunk-F3B2YJ76.js";
 import "../chunk-6GWA276C.js";
 import "../chunk-B3IT5END.js";
 import "../chunk-3V7OFJZC.js";
-import "../chunk-NP7TYFYR.js";
-import "../chunk-ZRSUCJGA.js";
+import "../chunk-TVE25LPW.js";
+import "../chunk-FHC4JUSF.js";
 import "../chunk-MLKGABMK.js";
 
 // src/cli/chat.ts
@@ -152,10 +157,10 @@ async function configureLocalChatPlugins(pluginSet) {
     databaseModule
   ] = await Promise.all([
     import("../plugins-PZMDS7AT.js"),
-    import("../agent-hooks-BKEMWR3Z.js"),
-    import("../catalog-runtime-6XYOUVRZ.js"),
-    import("../validation-GY7AJBLC.js"),
-    import("../db-2ASK6MV6.js")
+    import("../agent-hooks-4EUUXP2F.js"),
+    import("../catalog-runtime-Y32UEQLB.js"),
+    import("../validation-MZ47PZP5.js"),
+    import("../db-KBSJHAZU.js")
   ]);
   const resolvedPluginSet = pluginSet === void 0 ? await loadLocalPluginSet() : pluginSet ?? void 0;
   const plugins = pluginsModule.pluginRuntimeRegistrationsFromPluginSet(resolvedPluginSet);
@@ -213,12 +218,35 @@ function newRunConversationId() {
   }
   return conversationId;
 }
+function localDevServerUrl() {
+  return `http://127.0.0.1:${process.env.PORT?.trim() || "3000"}`;
+}
 async function prepareLocalChatRun(io, pluginSet) {
   defaultStateAdapterForLocalChat();
   await configureLocalChatPlugins(pluginSet);
-  const { runLocalAgentTurn } = await import("../runner-L363K62Z.js");
+  const { runLocalAgentTurn } = await import("../runner-RQGZ5Z2S.js");
+  const { startLocalOAuthCallbackServer } = await import("../oauth-callback-server-EYRMJTCS.js");
+  const { createLocalOAuthState } = await import("../oauth-relay-3ZU72UGL.js");
+  const { createLocalSandboxEgressSignalTransport } = await import("../sandbox-egress-signals-CDFAP67O.js");
+  const agentRunner = createAgentRunner(executeAgentRun);
+  const oauthCallback = await startLocalOAuthCallbackServer(agentRunner);
   const deps = {
-    agentRunner: createAgentRunner(executeAgentRun),
+    agentRunner,
+    authorization: {
+      cancel: oauthCallback.cancelAuthorization,
+      createState: async () => await createLocalOAuthState(oauthCallback.port),
+      deliver: async (request) => {
+        oauthCallback.beginAuthorization(request.authorizationUrl);
+        await reportStatus(
+          io,
+          `${request.label}:
+${request.authorizationUrl}
+${request.completionText}`
+        );
+      },
+      wait: oauthCallback.waitForAuthorization
+    },
+    sandboxEgressSignals: createLocalSandboxEgressSignalTransport(localDevServerUrl()),
     deliverReply: async (reply) => {
       await deliverReply(io, reply);
     },
@@ -229,27 +257,30 @@ async function prepareLocalChatRun(io, pluginSet) {
       await reportToolResult(io, result);
     }
   };
-  return { conversationId: newRunConversationId(), runLocalAgentTurn, deps };
+  return {
+    close: oauthCallback.close,
+    conversationId: newRunConversationId(),
+    runLocalAgentTurn,
+    deps
+  };
 }
 async function runPrompt(options, io, pluginSet) {
-  const { conversationId, runLocalAgentTurn, deps } = await prepareLocalChatRun(
-    io,
-    pluginSet
-  );
-  const result = await runLocalAgentTurn(
-    {
-      conversationId,
-      message: options.message
-    },
-    deps
-  );
-  return result.outcome === "success" ? 0 : 1;
+  const { close, conversationId, runLocalAgentTurn, deps } = await prepareLocalChatRun(io, pluginSet);
+  try {
+    const result = await runLocalAgentTurn(
+      {
+        conversationId,
+        message: options.message
+      },
+      deps
+    );
+    return result.outcome === "success" ? 0 : 1;
+  } finally {
+    await close();
+  }
 }
 async function runInteractive(io, pluginSet) {
-  const { conversationId, runLocalAgentTurn, deps } = await prepareLocalChatRun(
-    io,
-    pluginSet
-  );
+  const { close, conversationId, runLocalAgentTurn, deps } = await prepareLocalChatRun(io, pluginSet);
   const rl = readline.createInterface({
     input: io.input,
     output: io.output,
@@ -281,6 +312,7 @@ async function runInteractive(io, pluginSet) {
     }
   } finally {
     rl.close();
+    await close();
   }
 }
 async function runChat(argv, io = DEFAULT_IO, deps = {}) {

package/dist/cli/check.js

@@ -1,14 +1,16 @@
 import {
   parseSkillFile
-} from "../chunk-4WZ7YKDF.js";
-import "../chunk-LR2SKL5Y.js";
+} from "../chunk-2QG4MZQ7.js";
+import "../chunk-6FKLPVF3.js";
 import {
   parseInlinePluginManifest,
   parsePluginManifest
-} from "../chunk-OXE5ZUTS.js";
-import "../chunk-C4MZ3GP5.js";
-import "../chunk-36UJA3OD.js";
-import "../chunk-42WRQLJ6.js";
+} from "../chunk-EW5MLKT5.js";
+import "../chunk-W3U3YQYI.js";
+import "../chunk-HZF5P5UN.js";
+import "../chunk-NVUQSFWX.js";
+import "../chunk-OB42YVAE.js";
+import "../chunk-F3B2YJ76.js";
 import "../chunk-6GWA276C.js";
 import "../chunk-B3IT5END.js";
 import "../chunk-3V7OFJZC.js";
@@ -16,8 +18,8 @@ import {
   JUNIOR_CONVERSATION_WORK_CALLBACK_ROUTE,
   JUNIOR_HEARTBEAT_ROUTE,
   LEGACY_JUNIOR_CONVERSATION_WORK_FUNCTION
-} from "../chunk-NP7TYFYR.js";
-import "../chunk-ZRSUCJGA.js";
+} from "../chunk-TVE25LPW.js";
+import "../chunk-FHC4JUSF.js";
 import "../chunk-MLKGABMK.js";
 
 // src/cli/check.ts

package/dist/cli/init.js

@@ -208,6 +208,7 @@ SLACK_SIGNING_SECRET=
 JUNIOR_SECRET=
 JUNIOR_BOT_NAME=
 JUNIOR_SLASH_COMMAND=
+JUNIOR_CROSS_ACTOR_MID_RUN_MODE=
 AI_MODEL=
 AI_FAST_MODEL=
 AI_HANDOFF_MODEL=

package/dist/cli/plugins.js

@@ -1,7 +1,7 @@
 import {
   validatePluginEgressCredentialHooks,
   validatePluginRegistrations
-} from "../chunk-3CTIAKSS.js";
+} from "../chunk-6V762AB4.js";
 import {
   pluginCatalogConfigFromPluginSet,
   pluginCliRegistrationsFromPluginSet,
@@ -14,29 +14,31 @@ import {
   createPluginLogger,
   setPlugins,
   validatePlugins
-} from "../chunk-YJ44UT7D.js";
-import "../chunk-HMRVILWZ.js";
-import "../chunk-QTS66GMR.js";
+} from "../chunk-RAVKCKXA.js";
+import "../chunk-67CVNDJ7.js";
+import "../chunk-CWEZEPD4.js";
 import {
   getDb
-} from "../chunk-LLKDNPYV.js";
+} from "../chunk-HWCQRGLL.js";
 import "../chunk-JQFJO5WH.js";
 import "../chunk-4ZNGQH7C.js";
-import "../chunk-RCBUZGIT.js";
+import "../chunk-SYJT7AKB.js";
 import "../chunk-VFUK3X5B.js";
-import "../chunk-6Y5L4BOM.js";
+import "../chunk-FXOYURO4.js";
 import {
   pluginCatalogRuntime
-} from "../chunk-LR2SKL5Y.js";
-import "../chunk-OXE5ZUTS.js";
-import "../chunk-C4MZ3GP5.js";
-import "../chunk-36UJA3OD.js";
-import "../chunk-42WRQLJ6.js";
+} from "../chunk-6FKLPVF3.js";
+import "../chunk-EW5MLKT5.js";
+import "../chunk-W3U3YQYI.js";
+import "../chunk-HZF5P5UN.js";
+import "../chunk-NVUQSFWX.js";
+import "../chunk-OB42YVAE.js";
+import "../chunk-F3B2YJ76.js";
 import "../chunk-6GWA276C.js";
 import "../chunk-B3IT5END.js";
 import "../chunk-3V7OFJZC.js";
-import "../chunk-NP7TYFYR.js";
-import "../chunk-ZRSUCJGA.js";
+import "../chunk-TVE25LPW.js";
+import "../chunk-FHC4JUSF.js";
 import "../chunk-MLKGABMK.js";
 
 // src/cli/plugins.ts

package/dist/cli/snapshot-warmup.js

@@ -1,25 +1,27 @@
 import {
   GLOBAL_RUNTIME_DEPENDENCIES,
   resolveRuntimeDependencySnapshot
-} from "../chunk-4VKFQPCW.js";
+} from "../chunk-PVZHG2XZ.js";
 import {
   disconnectStateAdapter
-} from "../chunk-HMRVILWZ.js";
+} from "../chunk-67CVNDJ7.js";
 import "../chunk-4ZNGQH7C.js";
-import "../chunk-RCBUZGIT.js";
-import "../chunk-6Y5L4BOM.js";
+import "../chunk-SYJT7AKB.js";
+import "../chunk-FXOYURO4.js";
 import {
   pluginCatalogRuntime
-} from "../chunk-LR2SKL5Y.js";
-import "../chunk-OXE5ZUTS.js";
-import "../chunk-C4MZ3GP5.js";
-import "../chunk-36UJA3OD.js";
-import "../chunk-42WRQLJ6.js";
+} from "../chunk-6FKLPVF3.js";
+import "../chunk-EW5MLKT5.js";
+import "../chunk-W3U3YQYI.js";
+import "../chunk-HZF5P5UN.js";
+import "../chunk-NVUQSFWX.js";
+import "../chunk-OB42YVAE.js";
+import "../chunk-F3B2YJ76.js";
 import "../chunk-6GWA276C.js";
 import "../chunk-B3IT5END.js";
 import "../chunk-3V7OFJZC.js";
-import "../chunk-NP7TYFYR.js";
-import "../chunk-ZRSUCJGA.js";
+import "../chunk-TVE25LPW.js";
+import "../chunk-FHC4JUSF.js";
 import "../chunk-MLKGABMK.js";
 
 // src/cli/snapshot-warmup.ts

package/dist/cli/upgrade.js

@@ -11,20 +11,22 @@ import {
 } from "../chunk-JQFJO5WH.js";
 import {
   getChatConfig
-} from "../chunk-RCBUZGIT.js";
+} from "../chunk-SYJT7AKB.js";
 import "../chunk-VFUK3X5B.js";
-import "../chunk-6Y5L4BOM.js";
+import "../chunk-FXOYURO4.js";
 import {
   createPluginCatalogRuntime
-} from "../chunk-OXE5ZUTS.js";
-import "../chunk-C4MZ3GP5.js";
-import "../chunk-36UJA3OD.js";
-import "../chunk-42WRQLJ6.js";
+} from "../chunk-EW5MLKT5.js";
+import "../chunk-W3U3YQYI.js";
+import "../chunk-HZF5P5UN.js";
+import "../chunk-NVUQSFWX.js";
+import "../chunk-OB42YVAE.js";
+import "../chunk-F3B2YJ76.js";
 import "../chunk-6GWA276C.js";
 import "../chunk-B3IT5END.js";
 import "../chunk-3V7OFJZC.js";
-import "../chunk-NP7TYFYR.js";
-import "../chunk-ZRSUCJGA.js";
+import "../chunk-TVE25LPW.js";
+import "../chunk-FHC4JUSF.js";
 import "../chunk-MLKGABMK.js";
 
 // src/chat/conversations/sql/migrations.ts

package/dist/{db-2ASK6MV6.js → db-KBSJHAZU.js}

@@ -5,16 +5,17 @@ import {
   getConversationStore,
   getDb,
   getSqlExecutor
-} from "./chunk-LLKDNPYV.js";
+} from "./chunk-HWCQRGLL.js";
 import "./chunk-JQFJO5WH.js";
-import "./chunk-RCBUZGIT.js";
+import "./chunk-SYJT7AKB.js";
 import "./chunk-VFUK3X5B.js";
-import "./chunk-6Y5L4BOM.js";
-import "./chunk-36UJA3OD.js";
-import "./chunk-42WRQLJ6.js";
+import "./chunk-FXOYURO4.js";
+import "./chunk-NVUQSFWX.js";
+import "./chunk-OB42YVAE.js";
+import "./chunk-F3B2YJ76.js";
 import "./chunk-6GWA276C.js";
-import "./chunk-NP7TYFYR.js";
-import "./chunk-ZRSUCJGA.js";
+import "./chunk-TVE25LPW.js";
+import "./chunk-FHC4JUSF.js";
 import "./chunk-MLKGABMK.js";
 export {
   closeDb,

package/dist/handlers/sandbox-egress-signals.d.ts

@@ -0,0 +1,4 @@
+/** Clear command-scoped sandbox egress signals through the loopback dev server. */
+export declare function DELETE(request: Request): Promise<Response>;
+/** Consume command-scoped sandbox egress signals through the loopback dev server. */
+export declare function GET(request: Request): Promise<Response>;

package/dist/instrumentation.js

@@ -3,8 +3,9 @@ import {
 } from "./chunk-UIE3R5XU.js";
 import {
   getCurrentConversationPrivacy
-} from "./chunk-6Y5L4BOM.js";
-import "./chunk-42WRQLJ6.js";
+} from "./chunk-FXOYURO4.js";
+import "./chunk-OB42YVAE.js";
+import "./chunk-F3B2YJ76.js";
 import {
   getClient,
   getGlobalScope,
@@ -15,8 +16,8 @@ import {
 import {
   getDeploymentServiceVersion,
   getDeploymentTelemetryAttributes
-} from "./chunk-NP7TYFYR.js";
-import "./chunk-ZRSUCJGA.js";
+} from "./chunk-TVE25LPW.js";
+import "./chunk-FHC4JUSF.js";
 import "./chunk-MLKGABMK.js";
 
 // src/chat/sentry-payload-filter.ts
@@ -29,6 +30,69 @@ var PAYLOAD_ATTRIBUTE_KEYS = /* @__PURE__ */ new Set([
   "gen_ai.tool.call.arguments",
   "gen_ai.tool.call.result"
 ]);
+var URL_ATTRIBUTE_KEYS = /* @__PURE__ */ new Set([
+  "http.target",
+  "http.url",
+  "url.full",
+  "url.path"
+]);
+var OAUTH_CALLBACK_PATH = "/api/oauth/callback/";
+var LOCAL_CREDENTIAL_PATH = "/api/internal/local-oauth-credentials";
+var SECRET_HEADER_NAMES = /* @__PURE__ */ new Set([
+  "x-junior-local-credential-signature",
+  "x-junior-sandbox-egress-token"
+]);
+function stripQuery(value) {
+  const queryIndex = value.indexOf("?");
+  return queryIndex >= 0 ? value.slice(0, queryIndex) : value;
+}
+function isSecretHeaderAttribute(key) {
+  const normalized = key.toLowerCase().replace(/[^a-z0-9]/g, "");
+  return normalized.endsWith("xjuniorlocalcredentialsignature") || normalized.endsWith("xjuniorsandboxegresstoken");
+}
+function scrubSensitiveUrlAttributes(attributes) {
+  if (!attributes) {
+    return;
+  }
+  delete attributes["url.query"];
+  const hasLocalCredentialUrl = [...URL_ATTRIBUTE_KEYS].some((key) => {
+    const value = attributes[key];
+    return typeof value === "string" && value.includes(LOCAL_CREDENTIAL_PATH);
+  });
+  for (const key of Object.keys(attributes)) {
+    if (isSecretHeaderAttribute(key) || hasLocalCredentialUrl && key === "http.request.body.data") {
+      delete attributes[key];
+    }
+  }
+  for (const key of URL_ATTRIBUTE_KEYS) {
+    const value = attributes[key];
+    if (typeof value !== "string" || !value.includes(OAUTH_CALLBACK_PATH)) {
+      continue;
+    }
+    attributes[key] = stripQuery(value);
+  }
+}
+function scrubSensitiveRequest(request) {
+  if (!request) {
+    return;
+  }
+  const url = request.url;
+  if (url?.includes(OAUTH_CALLBACK_PATH)) {
+    request.url = stripQuery(url);
+    delete request.query_string;
+  }
+  if (url?.includes(LOCAL_CREDENTIAL_PATH)) {
+    delete request.data;
+  }
+  if (!request.headers) {
+    return;
+  }
+  for (const key of Object.keys(request.headers)) {
+    if (SECRET_HEADER_NAMES.has(key.toLowerCase())) {
+      delete request.headers[key];
+    }
+  }
+}
 function hasPayloadAttributes(attributes) {
   return Object.keys(attributes).some((key) => PAYLOAD_ATTRIBUTE_KEYS.has(key));
 }
@@ -66,10 +130,13 @@ function scrubContainer(container) {
   }
   scrubPayloadAttributes(container.data);
   scrubPayloadAttributes(container.attributes);
+  scrubSensitiveUrlAttributes(container.data);
+  scrubSensitiveUrlAttributes(container.attributes);
 }
 function scrubPrivateSentryEvent(event) {
   const eventRecord = event;
   scrubContainer(eventRecord);
+  scrubSensitiveRequest(event.request);
   scrubContainer(event.contexts?.trace);
   for (const breadcrumb of event.breadcrumbs ?? []) {
     scrubContainer(breadcrumb);
@@ -79,6 +146,7 @@ function scrubPrivateSentryEvent(event) {
 function scrubPrivateSentryTransaction(event) {
   const eventRecord = event;
   scrubContainer(eventRecord);
+  scrubSensitiveRequest(event.request);
   scrubContainer(event.contexts?.trace);
   for (const span of event.spans ?? []) {
     scrubContainer(span);

package/dist/nitro.js

@@ -25,8 +25,8 @@ import {
   JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE,
   JUNIOR_RETENTION_CRON_SCHEDULE,
   JUNIOR_RETENTION_ROUTE
-} from "./chunk-NP7TYFYR.js";
-import "./chunk-ZRSUCJGA.js";
+} from "./chunk-TVE25LPW.js";
+import "./chunk-FHC4JUSF.js";
 import "./chunk-MLKGABMK.js";
 
 // src/nitro.ts