@sentry/junior 0.116.1 → 0.118.0

package/dist/chat/sandbox/snapshot/resolve.d.ts

@@ -0,0 +1,22 @@
+export type ResolveOutcome = "no_profile" | "cache_hit" | "cache_hit_after_lock_wait" | "rebuilt" | "forced_rebuild";
+export type RebuildReason = "cache_miss" | "floating_stale" | "force_rebuild" | "snapshot_missing";
+/** Result of resolving the reusable snapshot for one dependency profile. */
+export interface Snapshot {
+    snapshotId?: string;
+    profileHash?: string;
+    dependencyCount: number;
+    cacheHit: boolean;
+    resolveOutcome: ResolveOutcome;
+    rebuildReason?: RebuildReason;
+}
+export type ProgressPhase = "resolve_start" | "cache_hit" | "waiting_for_lock" | "building_snapshot" | "build_complete";
+/** Resolve or build the reusable snapshot for the current dependency profile. */
+export declare function resolve(params: {
+    runtime: string;
+    timeoutMs: number;
+    forceRebuild?: boolean;
+    staleSnapshotId?: string;
+    onProgress?: (phase: ProgressPhase) => void | Promise<void>;
+}): Promise<Snapshot>;
+/** Identify provider errors that mean a referenced snapshot no longer exists. */
+export declare function isMissingError(error: unknown): boolean;

package/dist/chat/sandbox/snapshot/span.d.ts

@@ -0,0 +1,2 @@
+/** Record one stage of dependency snapshot resolution or creation. */
+export declare function trace<T>(name: string, op: string, attributes: Record<string, unknown>, callback: () => Promise<T>): Promise<T>;

package/dist/chat/sandbox/workspace.d.ts

@@ -11,6 +11,7 @@ export interface SandboxCommandInput {
     env?: Record<string, string>;
     signal?: AbortSignal;
     sudo?: boolean;
+    timeoutMs?: number;
 }
 export interface SandboxFileStat {
     isDirectory(): boolean;

package/dist/chat/services/context-compaction-marker.d.ts

@@ -1,5 +1,6 @@
 import type { PiMessage } from "@/chat/pi/messages";
 export declare const COMPACTION_SUMMARY_PREFIX = "Context compaction summary for future Junior turns:";
+export declare const ACTIVE_TURN_COMPACTION_SUMMARY_PREFIX = "Active-turn context checkpoint. If no newer user instruction follows this checkpoint, continue the same unfinished task now using the authoritative instructions above and this summary as internal continuation state. If a newer user instruction follows, treat this checkpoint as prior context and follow that newer instruction. Do not reply with a plan or summary solely because this checkpoint appeared:";
 export declare const MODEL_HANDOFF_SUMMARY_PREFIX = "Model handoff checkpoint. Continue the outstanding request now using this summary as the complete prior context:";
 /** Return whether text is one of Junior's durable compacted-context markers. */
 export declare function isCompactionSummaryText(text: string): boolean;

package/dist/chat/services/turn-session-record.d.ts

@@ -4,6 +4,7 @@ import type { Destination, Actor, Source } from "@sentry/junior-plugin-api";
 import type { PiMessage } from "@/chat/pi/messages";
 import type { ConversationMessageProvenance } from "@/chat/conversations/provenance";
 import { type AgentTurnUsage } from "@/chat/usage";
+import type { PluginTurnContext } from "@/chat/plugins/prompt";
 export interface TurnSessionContext {
     conversationId: string;
     sessionId: string;
@@ -40,6 +41,7 @@ export declare function persistRunningSessionRecord(args: {
     actor?: Actor;
     reasoningLevel?: string;
     surface?: AgentTurnSurface;
+    turnContexts?: PluginTurnContext[];
     turnStartMessageIndex?: number;
 }): Promise<boolean>;
 /**

package/dist/chat/skills.d.ts

@@ -31,7 +31,6 @@ export interface Skill extends SkillMetadata {
 }
 export interface SkillInvocation {
     skillName: string;
-    args: string;
 }
 export interface DiscoverSkillsOptions {
     additionalRoots?: string[];
@@ -40,7 +39,7 @@ export interface DiscoverSkillsOptions {
 export declare function resetSkillDiscoveryCache(): void;
 /** Scan all configured skill roots and return discovered skill metadata, using a cache when roots match. */
 export declare function discoverSkills(options?: DiscoverSkillsOptions): Promise<SkillMetadata[]>;
-/** Extract a skill invocation (name + args) from a user message, or return null if none matches. */
+/** Extract an explicit skill invocation from a user message. */
 export declare function parseSkillInvocation(messageText: string, availableSkills: SkillMetadata[]): SkillInvocation | null;
 /** Look up a skill by name from the available set. */
 export declare function findSkillByName(skillName: string, available: SkillMetadata[]): SkillMetadata | null;

package/dist/chat/state/turn-session.d.ts

@@ -12,6 +12,7 @@ import { type Destination, type Source } from "@sentry/junior-plugin-api";
 import { type PiMessage } from "@/chat/pi/messages";
 import { type Actor } from "@/chat/actor";
 import { type ConversationMessageProvenance } from "@/chat/conversations/provenance";
+import type { PluginTurnContext } from "@/chat/plugins/prompt";
 import { type AgentTurnUsage } from "@/chat/usage";
 import type { ConversationPrivacy } from "@/chat/conversation-privacy";
 import type { ConversationStore } from "@/chat/conversations/store";
@@ -95,6 +96,7 @@ export declare function upsertAgentTurnSessionRecord(args: {
     errorMessage?: string;
     resumedFromSliceId?: number;
     traceId?: string;
+    turnContexts?: PluginTurnContext[];
     turnStartMessageIndex?: number;
     ttlMs?: number;
 }): Promise<AgentTurnSessionRecord>;

package/dist/chat/tools/index.d.ts

@@ -2,5 +2,8 @@ import type { SkillMetadata } from "@/chat/skills";
 import type { ToolRegistry } from "@/chat/tools/definition";
 import type { ToolHooks, ToolRuntimeContext } from "@/chat/tools/types";
 export type { ToolHooks, ToolRuntimeContext };
+export interface CreateToolsOptions {
+    includeLoadSkill?: boolean;
+}
 /** Build the model-facing tool registry from runtime-owned context and capabilities. */
-export declare function createTools(availableSkills: SkillMetadata[], hooks: ToolHooks | undefined, context: ToolRuntimeContext): ToolRegistry;
+export declare function createTools(availableSkills: SkillMetadata[], hooks: ToolHooks | undefined, context: ToolRuntimeContext, options?: CreateToolsOptions): ToolRegistry;

package/dist/chat/tools/query-conversation-events.d.ts

@@ -9,7 +9,7 @@ export declare function createQueryConversationEventsTool(context: ToolRuntimeCo
         after_seq?: number | null | undefined;
         before_seq?: number | null | undefined;
         limit?: number | null | undefined;
-        types?: ("message" | "handoff" | "user_message" | "assistant_message" | "tool_result" | "compaction" | "mcp_provider_connected" | "authorization_requested" | "authorization_completed" | "tool_execution_started" | "message_updated" | "message_handled" | "messages_summarized" | "turn_started" | "turn_routed" | "turn_completed" | "turn_failed" | "subagent_started" | "subagent_ended")[] | null | undefined;
+        types?: ("message" | "handoff" | "user_message" | "assistant_message" | "tool_result" | "compaction" | "mcp_provider_connected" | "authorization_requested" | "authorization_completed" | "tool_execution_started" | "message_updated" | "message_handled" | "messages_summarized" | "turn_started" | "turn_routed" | "turn_context" | "turn_completed" | "turn_failed" | "subagent_started" | "subagent_ended")[] | null | undefined;
     };
     execute?: ((input: unknown, options: import("./definition").ToolExecuteOptions) => {
         [x: string]: unknown;

package/dist/chat/tools/sandbox/file-utils.d.ts

@@ -1,8 +1,19 @@
 import type { SandboxCommandInput, SandboxCommandResult, SandboxFileSystem } from "@/chat/sandbox/workspace";
 export type { SandboxFileSystem };
 export type SandboxCommandRunner = (input: SandboxCommandInput) => Promise<SandboxCommandResult>;
+/** Safe measurements produced by one sandbox-backed search operation. */
+export interface SandboxSearchTelemetry {
+    emittedLineCount: number;
+    limit: number;
+    limitReached: boolean;
+    parsedRecordCount: number;
+    rawOutputBytes: number;
+    resultCount: number;
+    resultBytes: number;
+}
 export declare const MAX_TEXT_CHARS = 60000;
 export declare const RIPGREP_EXCLUDED_GLOBS: readonly ["!**/.git/**", "!**/node_modules/**"];
+export declare const DEFAULT_SEARCH_COMMAND_TIMEOUT_MS = 30000;
 export type TextSearchResultDetails = {
     ok: true;
     status?: "success";

package/dist/chat/tools/sandbox/find-files.d.ts

@@ -1,4 +1,4 @@
-import { type SandboxCommandRunner, type SandboxFileSystem, type TextSearchResultDetails, type TextSearchToolResult } from "@/chat/tools/sandbox/file-utils";
+import { type SandboxCommandRunner, type SandboxFileSystem, type SandboxSearchTelemetry, type TextSearchResultDetails, type TextSearchToolResult } from "@/chat/tools/sandbox/file-utils";
 import { type JuniorToolResultEnvelope } from "@/chat/tool-support/structured-result";
 interface FindFilesSuccessResult {
     content: JuniorToolResultEnvelope["content"];
@@ -17,6 +17,7 @@ type FindFilesResult = FindFilesSuccessResult | TextSearchToolResult;
 export declare function findFiles(params: {
     fs: SandboxFileSystem;
     limit?: unknown;
+    onTelemetry?: (telemetry: SandboxSearchTelemetry) => void;
     path?: string;
     pattern: string;
     runCommand?: SandboxCommandRunner;

package/dist/chat/tools/sandbox/grep.d.ts

@@ -1,4 +1,4 @@
-import { type SandboxCommandRunner, type SandboxFileSystem, type TextSearchResultDetails, type TextSearchToolResult } from "@/chat/tools/sandbox/file-utils";
+import { type SandboxCommandRunner, type SandboxFileSystem, type SandboxSearchTelemetry, type TextSearchResultDetails, type TextSearchToolResult } from "@/chat/tools/sandbox/file-utils";
 interface GrepResultData {
     context: number;
     glob?: string;
@@ -31,6 +31,7 @@ export declare function grepFiles(params: {
     ignoreCase?: boolean;
     limit?: unknown;
     literal?: boolean;
+    onTelemetry?: (telemetry: SandboxSearchTelemetry) => void;
     path?: string;
     pattern: string;
     runCommand?: SandboxCommandRunner;

package/dist/chat/tools/sandbox/view-image.d.ts

@@ -0,0 +1,11 @@
+import type { SandboxWorkspace } from "@/chat/sandbox/workspace";
+import type { ViewImageToolDeps } from "@/chat/tools/types";
+/** Create a tool that loads a sandbox image into the active model context. */
+export declare function createViewImageTool(sandbox: SandboxWorkspace, supportsImageInput: () => boolean, deps?: ViewImageToolDeps): Omit<import("../definition").AnyToolDefinition, "inputSchema" | "outputSchema" | "prepareArguments" | "execute"> & {
+    inputSchema: import("../definition").JsonSchemaObject;
+    outputSchema?: undefined;
+    prepareArguments(args: unknown): {
+        path: string;
+    };
+    execute?: (input: unknown, options: import("../definition").ToolExecuteOptions) => Promise<import("@/chat/tool-support/zod-tool").ContentOnlyToolResult> | import("@/chat/tool-support/zod-tool").ContentOnlyToolResult;
+};

package/dist/chat/tools/types.d.ts

@@ -34,6 +34,10 @@ export interface WebSearchToolDeps {
         max_results?: number;
     }) => Promise<JuniorToolResult> | JuniorToolResult;
 }
+/** Optional host image reader for deterministic tool execution without sandbox I/O. */
+export interface ViewImageToolDeps {
+    readFile?: (path: string) => Promise<Buffer | null | undefined>;
+}
 export interface ToolHooks {
     /**
      * Materialize generated files and return sandbox paths that exist before the
@@ -44,6 +48,7 @@ export interface ToolHooks {
     onSkillLoaded?: (skill: Skill) => void | LoadSkillMetadata | Promise<void | LoadSkillMetadata>;
     toolOverrides?: {
         imageGenerate?: ImageGenerateToolDeps;
+        viewImage?: ViewImageToolDeps;
         webFetch?: WebFetchToolDeps;
         webSearch?: WebSearchToolDeps;
     };
@@ -70,6 +75,8 @@ interface BaseToolRuntimeContext {
     egress: PluginEgress;
     mcpToolManager?: McpToolManager;
     workspace: SandboxWorkspace;
+    /** Report whether the model currently executing the turn accepts images. */
+    supportsImageInput?: () => boolean;
 }
 interface SlackToolRuntimeContext extends BaseToolRuntimeContext {
     destination: SlackDestination;

package/dist/{chunk-XA3VLFPK.js → chunk-3LGCVRBQ.js}

@@ -5,7 +5,7 @@ import {
   logInfo,
   logWarn,
   setSpanAttributes
-} from "./chunk-F3SWGSPG.js";
+} from "./chunk-MLZFK4KP.js";
 import {
   discoverInstalledPluginPackageContent,
   normalizePluginPackageNames
@@ -1097,6 +1097,115 @@ function hasRequiredOAuthScope(storedScope, requiredScope) {
   return required.every((scope) => stored.has(scope));
 }
 
+// src/chat/oauth-response.ts
+var MAX_OAUTH_ERROR_BODY_BYTES = 16 * 1024;
+var MAX_OAUTH_ERROR_BODY_READS = MAX_OAUTH_ERROR_BODY_BYTES;
+var MAX_OAUTH_ERROR_BODY_READ_MS = 5e3;
+var OAUTH_ERROR_BODY_READ_TIMEOUT = /* @__PURE__ */ Symbol("oauth-error-body-read-timeout");
+async function readOAuthErrorBodyChunk(reader) {
+  let timeout;
+  const timeoutResult = new Promise(
+    (resolve) => {
+      timeout = setTimeout(
+        resolve,
+        MAX_OAUTH_ERROR_BODY_READ_MS,
+        OAUTH_ERROR_BODY_READ_TIMEOUT
+      );
+    }
+  );
+  try {
+    const result = await Promise.race([reader.read(), timeoutResult]);
+    if (result === OAUTH_ERROR_BODY_READ_TIMEOUT) {
+      await reader.cancel();
+      throw new Error("OAuth error body read timed out");
+    }
+    return result;
+  } finally {
+    if (timeout) {
+      clearTimeout(timeout);
+    }
+  }
+}
+var OAuthProviderError = class extends Error {
+  phase;
+  provider;
+  resourceHost;
+  status;
+  constructor(details) {
+    super(`OAuth provider ${details.phase.replace("_", " ")} failed`);
+    this.name = "OAuthProviderError";
+    this.phase = details.phase;
+    this.provider = details.provider;
+    this.resourceHost = details.resourceHost;
+    this.status = details.status;
+  }
+};
+function getOAuthProviderErrorAttributes(error) {
+  if (!(error instanceof OAuthProviderError)) {
+    return {};
+  }
+  return {
+    "app.credential.provider": error.provider,
+    "app.oauth.error.phase": error.phase,
+    "server.address": error.resourceHost,
+    ...error.status !== void 0 ? { "http.response.status_code": error.status } : {}
+  };
+}
+async function readBoundedOAuthErrorBody(response) {
+  if (!response.body) {
+    return "";
+  }
+  const reader = response.body.getReader();
+  const decoder = new TextDecoder();
+  let bytesRead = 0;
+  let reads = 0;
+  let text = "";
+  try {
+    while (bytesRead < MAX_OAUTH_ERROR_BODY_BYTES && reads < MAX_OAUTH_ERROR_BODY_READS) {
+      reads += 1;
+      const { done, value } = await readOAuthErrorBodyChunk(reader);
+      if (done) {
+        return text + decoder.decode();
+      }
+      const remaining = MAX_OAUTH_ERROR_BODY_BYTES - bytesRead;
+      const chunk = value.subarray(0, remaining);
+      bytesRead += chunk.byteLength;
+      text += decoder.decode(chunk, { stream: true });
+      if (chunk.byteLength < value.byteLength) {
+        await reader.cancel();
+        return text + decoder.decode();
+      }
+    }
+    await reader.cancel();
+    return text + decoder.decode();
+  } finally {
+    reader.releaseLock();
+  }
+}
+function fetchWithBoundedOAuthErrorBodies(fetchFn = globalThis.fetch, onErrorResponseStatus) {
+  return (async (input, init) => {
+    const response = await fetchFn(input, init);
+    if (response.ok) {
+      return response;
+    }
+    onErrorResponseStatus?.(response.status);
+    if (!response.body) {
+      return response;
+    }
+    let body = "";
+    try {
+      body = await readBoundedOAuthErrorBody(response);
+    } catch {
+      await response.body.cancel().catch(() => void 0);
+    }
+    return new Response(body, {
+      headers: response.headers,
+      status: response.status,
+      statusText: response.statusText
+    });
+  });
+}
+
 // src/chat/plugins/command-env.ts
 var ENV_PLACEHOLDER_RE2 = /\$\{([A-Z_][A-Z0-9_]*)\}/g;
 function resolveValue(manifest, value) {
@@ -1320,7 +1429,7 @@ function parseRefreshError(text) {
     return void 0;
   }
 }
-async function refreshAccessToken(refreshToken, oauth, requestedScope) {
+async function refreshAccessToken(provider, refreshToken, oauth, requestedScope) {
   const clientId = process.env[oauth.clientIdEnv]?.trim();
   const clientSecret = process.env[oauth.clientSecretEnv]?.trim();
   if (!clientId || !clientSecret) {
@@ -1338,28 +1447,49 @@ async function refreshAccessToken(refreshToken, oauth, requestedScope) {
     tokenAuthMethod: oauth.tokenAuthMethod,
     tokenExtraHeaders: oauth.tokenExtraHeaders
   });
-  const response = await fetch(oauth.tokenEndpoint, {
-    method: "POST",
-    headers: request.headers,
-    body: request.body,
-    signal: AbortSignal.timeout(TOKEN_REFRESH_TIMEOUT_MS)
-  });
+  const errorDetails = {
+    phase: "token_refresh",
+    provider,
+    resourceHost: new URL(oauth.tokenEndpoint).hostname
+  };
+  let response;
+  try {
+    response = await fetch(oauth.tokenEndpoint, {
+      method: "POST",
+      headers: request.headers,
+      body: request.body,
+      signal: AbortSignal.timeout(TOKEN_REFRESH_TIMEOUT_MS)
+    });
+  } catch {
+    throw new OAuthProviderError(errorDetails);
+  }
   if (!response.ok) {
-    const errorCode = parseRefreshError(await response.text());
+    let errorCode;
+    try {
+      errorCode = parseRefreshError(await readBoundedOAuthErrorBody(response));
+    } catch {
+      throw new OAuthProviderError({
+        ...errorDetails,
+        status: response.status
+      });
+    }
     if (errorCode === "invalid_grant" || errorCode === "bad_refresh_token") {
-      throw new OAuthRefreshRejectedError(
-        `Token refresh rejected: ${errorCode}`
-      );
+      throw new OAuthRefreshRejectedError("Token refresh was rejected");
     }
-    throw new Error(
-      `Token refresh failed: ${response.status}${errorCode ? ` ${errorCode}` : ""}`
-    );
+    throw new OAuthProviderError({
+      ...errorDetails,
+      status: response.status
+    });
+  }
+  try {
+    const data = await response.json();
+    return parseOAuthTokenResponse(data, requestedScope, {
+      treatEmptyScopeAsUnreported: oauth.treatEmptyScopeAsUnreported,
+      refreshToken
+    });
+  } catch {
+    throw new OAuthProviderError(errorDetails);
   }
-  const data = await response.json();
-  return parseOAuthTokenResponse(data, requestedScope, {
-    treatEmptyScopeAsUnreported: oauth.treatEmptyScopeAsUnreported,
-    refreshToken
-  });
 }
 function getLeaseExpiry(expiresAt) {
   return expiresAt ? Math.min(expiresAt, Date.now() + MAX_LEASE_MS2) : Date.now() + MAX_LEASE_MS2;
@@ -1447,6 +1577,7 @@ function createOAuthBearerBroker(manifest, credentials, deps) {
                     );
                   }
                   const refreshed = await refreshAccessToken(
+                    provider,
                     latest.refreshToken,
                     oauth,
                     latest.scope ?? oauth.scope
@@ -1955,6 +2086,9 @@ export {
   parseInlinePluginManifest,
   CredentialUnavailableError,
   hasRequiredOAuthScope,
+  OAuthProviderError,
+  getOAuthProviderErrorAttributes,
+  fetchWithBoundedOAuthErrorBodies,
   resolvePluginCommandEnv,
   resolveAuthTokenPlaceholder,
   buildOAuthTokenRequest,