@sentry/junior 0.119.0 → 0.120.0

package/dist/{agent-hooks-NZSV4QQR.js → agent-hooks-5DDPWRYO.js}

@@ -11,20 +11,20 @@ import {
   getPlugins,
   setPlugins,
   validatePlugins
-} from "./chunk-BLQZACHV.js";
-import "./chunk-D3N4BPSL.js";
+} from "./chunk-24B5R6OU.js";
+import "./chunk-M243JMZH.js";
 import "./chunk-GCGJGSQL.js";
-import "./chunk-VJTWKJWQ.js";
-import "./chunk-VLTWQQKH.js";
+import "./chunk-ALAKN7LR.js";
+import "./chunk-VURFJVFH.js";
 import "./chunk-VFUK3X5B.js";
 import "./chunk-HDFGNU5E.js";
 import "./chunk-HZF5P5UN.js";
-import "./chunk-ZJ6IVZVO.js";
+import "./chunk-ALYQOZG7.js";
 import "./chunk-OB42YVAE.js";
 import "./chunk-F3B2YJ76.js";
 import "./chunk-6GWA276C.js";
-import "./chunk-NUENIPQL.js";
-import "./chunk-JLJLZS2N.js";
+import "./chunk-DWOH57FW.js";
+import "./chunk-DMKHRBI6.js";
 import "./chunk-MLKGABMK.js";
 export {
   PluginHookDeniedError,

package/dist/api.js

@@ -29,7 +29,7 @@ import {
   formatSlackConversationRedactedLabel,
   readHealthReport,
   resolveSlackConversationContextFromThreadId
-} from "./chunk-6ZR455DC.js";
+} from "./chunk-Q3RL6A4E.js";
 import {
   buildSentryConversationUrl
 } from "./chunk-4CODA7P5.js";
@@ -42,7 +42,7 @@ import {
 } from "./chunk-PE44LDDQ.js";
 import {
   readStats
-} from "./chunk-JXRAOOXQ.js";
+} from "./chunk-6WX5SPI3.js";
 import {
   agentTurnUsageSchema,
   hasAgentTurnUsage
@@ -51,13 +51,14 @@ import "./chunk-PDO5BLNM.js";
 import {
   createPluginLogger,
   getPlugins,
-  listConversationAnnotations
-} from "./chunk-BLQZACHV.js";
+  listConversationAnnotations,
+  readViewerActors
+} from "./chunk-24B5R6OU.js";
 import {
   decodeStoredConversationEvent,
   getDb,
   getSqlExecutor
-} from "./chunk-D3N4BPSL.js";
+} from "./chunk-M243JMZH.js";
 import {
   juniorApiTokens,
   juniorConversationEvents,
@@ -65,8 +66,8 @@ import {
   juniorIdentities,
   juniorUsers
 } from "./chunk-GCGJGSQL.js";
-import "./chunk-VJTWKJWQ.js";
-import "./chunk-VLTWQQKH.js";
+import "./chunk-ALAKN7LR.js";
+import "./chunk-VURFJVFH.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";
@@ -75,14 +76,12 @@ import {
   parseSlackThreadId
 } from "./chunk-HDFGNU5E.js";
 import "./chunk-HZF5P5UN.js";
-import {
-  normalizeIdentityEmail
-} from "./chunk-ZJ6IVZVO.js";
+import "./chunk-ALYQOZG7.js";
 import "./chunk-OB42YVAE.js";
 import "./chunk-F3B2YJ76.js";
 import "./chunk-6GWA276C.js";
-import "./chunk-NUENIPQL.js";
-import "./chunk-JLJLZS2N.js";
+import "./chunk-DWOH57FW.js";
+import "./chunk-DMKHRBI6.js";
 import "./chunk-MLKGABMK.js";
 
 // src/api.ts
@@ -1741,7 +1740,7 @@ function readDescriptionText(home) {
   }
 }
 async function readSkillReports() {
-  const { discoverSkills } = await import("./skills-MANV5ZK6.js");
+  const { discoverSkills } = await import("./skills-JMXY7LIY.js");
   const skills = await discoverSkills();
   return skillReportsSchema.parse(
     skills.map((skill) => ({
@@ -1751,7 +1750,7 @@ async function readSkillReports() {
   );
 }
 async function readPlugins() {
-  const { pluginCatalogRuntime } = await import("./catalog-runtime-TAOYIZIZ.js");
+  const { pluginCatalogRuntime } = await import("./catalog-runtime-5KR5XBMJ.js");
   return pluginsSchema.parse(
     pluginCatalogRuntime.getProviders().map((plugin) => ({
       configKeys: plugin.manifest.configKeys ?? [],
@@ -1763,8 +1762,8 @@ async function readPlugins() {
 }
 async function readRuntimeInfoReport() {
   const [{ homeDir }, { pluginCatalogRuntime }, plugins, skills] = await Promise.all([
-    import("./discovery-RMHYSRL7.js"),
-    import("./catalog-runtime-TAOYIZIZ.js"),
+    import("./discovery-GUFTFBTL.js"),
+    import("./catalog-runtime-5KR5XBMJ.js"),
     readPlugins(),
     readSkillReports()
   ]);
@@ -1780,7 +1779,7 @@ async function readRuntimeInfoReport() {
 }
 async function readPluginOperationalReportFeed() {
   const nowMs = Date.now();
-  const { getPluginOperationalReports } = await import("./agent-hooks-NZSV4QQR.js");
+  const { getPluginOperationalReports } = await import("./agent-hooks-5DDPWRYO.js");
   return pluginOperationalReportFeedSchema.parse({
     source: "plugins",
     generatedAt: new Date(nowMs).toISOString(),
@@ -2854,6 +2853,7 @@ function createPersonalTokenRoutes() {
 import { Hono as Hono5 } from "hono";
 import {
   pluginUserPageContentSchema as pluginUserPageContentSchema2,
+  pluginUserPageInputSchema,
   pluginUserPageLinksSchema as pluginUserPageLinksSchema2
 } from "@sentry/junior-plugin-api";
 
@@ -2862,57 +2862,6 @@ import {
   pluginUserPageContentSchema,
   pluginUserPageLinksSchema
 } from "@sentry/junior-plugin-api";
-
-// src/chat/plugins/viewer-actors.ts
-import { and as and12, eq as eq13 } from "drizzle-orm";
-import {
-  actorSchema
-} from "@sentry/junior-plugin-api";
-async function readViewerActorsFromSql(db, email) {
-  const normalizedEmail = normalizeIdentityEmail(email);
-  if (!normalizedEmail) return [];
-  const rows = await db.select({
-    displayName: juniorIdentities.displayName,
-    email: juniorUsers.primaryEmail,
-    handle: juniorIdentities.handle,
-    provider: juniorIdentities.provider,
-    providerSubjectId: juniorIdentities.providerSubjectId,
-    providerTenantId: juniorIdentities.providerTenantId
-  }).from(juniorIdentities).innerJoin(juniorUsers, eq13(juniorUsers.id, juniorIdentities.userId)).where(
-    and12(
-      eq13(juniorUsers.primaryEmailNormalized, normalizedEmail),
-      eq13(juniorIdentities.kind, "user")
-    )
-  );
-  const actors = [];
-  for (const row of rows) {
-    const candidate = row.provider === "slack" ? {
-      platform: "slack",
-      teamId: row.providerTenantId,
-      userId: row.providerSubjectId,
-      email: row.email,
-      ...row.displayName ? { fullName: row.displayName } : {},
-      ...row.handle ? { userName: row.handle } : {}
-    } : row.provider === "local" ? {
-      platform: "local",
-      userId: row.providerSubjectId,
-      email: row.email,
-      ...row.displayName ? { fullName: row.displayName } : {},
-      ...row.handle ? { userName: row.handle } : {}
-    } : void 0;
-    if (!candidate) continue;
-    const parsed = actorSchema.safeParse(candidate);
-    if (parsed.success && parsed.data.platform !== "system") {
-      actors.push(parsed.data);
-    }
-  }
-  return actors;
-}
-async function readViewerActors(email) {
-  return await readViewerActorsFromSql(getDb(), email);
-}
-
-// src/chat/plugins/user-pages.ts
 function readPluginUserPageLinks() {
   return pluginUserPageLinksSchema.parse(
     getPlugins().flatMap(
@@ -2926,6 +2875,10 @@ function readPluginUserPageLinks() {
     )
   );
 }
+function actionBelongsToPlugin(href, pluginName) {
+  const parsed = new URL(href, "http://junior.local");
+  return parsed.origin === "http://junior.local" && parsed.pathname === href && parsed.pathname.startsWith(`/api/plugins/${pluginName}/`) && !parsed.search && !parsed.hash;
+}
 async function readPluginUserPage(input) {
   const plugin = getPlugins().find(
     (candidate) => candidate.manifest.name === input.pluginName
@@ -2934,17 +2887,30 @@ async function readPluginUserPage(input) {
     (candidate) => candidate.id === input.pageId
   );
   if (!plugin || !page) return void 0;
-  return pluginUserPageContentSchema.parse(
-    await page.read({
-      db: getDb(),
-      log: createPluginLogger(plugin.manifest.name),
-      plugin: { name: plugin.manifest.name },
-      viewer: {
-        actors: await readViewerActors(input.email),
-        email: input.email
-      }
-    })
+  const content = pluginUserPageContentSchema.parse(
+    await page.read(
+      {
+        db: getDb(),
+        log: createPluginLogger(plugin.manifest.name),
+        plugin: { name: plugin.manifest.name },
+        viewer: {
+          actors: await readViewerActors(input.email),
+          email: input.email
+        }
+      },
+      input.query
+    )
   );
+  if (content.records.some(
+    (record) => record.actions?.some(
+      (action) => !actionBelongsToPlugin(action.href, plugin.manifest.name)
+    )
+  )) {
+    throw new Error(
+      `Plugin user page "${plugin.manifest.name}/${page.id}" returned an action outside its API namespace.`
+    );
+  }
+  return content;
 }
 
 // src/api/user-pages/routes.ts
@@ -2963,10 +2929,23 @@ function createUserPageRoutes() {
         { status: 401 }
       );
     }
+    const pageInput = pluginUserPageInputSchema.safeParse({
+      cursor: context.req.query("cursor") || void 0,
+      limit: context.req.query("limit") ? Number(context.req.query("limit")) : 20,
+      query: context.req.query("q") || void 0
+    });
+    if (!pageInput.success) {
+      return jsonResponse(
+        apiErrorSchema,
+        { error: "Invalid user page query." },
+        { status: 400 }
+      );
+    }
     const page = await readPluginUserPage({
       email,
       pageId: context.req.param("pageId"),
-      pluginName: context.req.param("pluginName")
+      pluginName: context.req.param("pluginName"),
+      query: pageInput.data
     });
     return page ? jsonResponse(pluginUserPageContentSchema2, page) : jsonResponse(
       apiErrorSchema,

package/dist/app.js

@@ -50,7 +50,7 @@ import {
   startConversationWork,
   startSlackProcessingReaction,
   stripLeadingBotMention
-} from "./chunk-YLYJIQRX.js";
+} from "./chunk-QOQPPRFS.js";
 import "./chunk-FA6POGLH.js";
 import {
   ConversationTurnLifecycleService,
@@ -65,13 +65,13 @@ import {
   processPluginTask,
   requireTurnFailureEventId,
   scheduleSessionCompletedPluginTasks
-} from "./chunk-ZFX4M743.js";
+} from "./chunk-BHXW734F.js";
 import {
   GET,
   conversationVisibilityFromSlackChannelType,
   resolveSlackChannelTypeFromMessage,
   resolveSlackConversationContext
-} from "./chunk-6ZR455DC.js";
+} from "./chunk-Q3RL6A4E.js";
 import "./chunk-4CODA7P5.js";
 import "./chunk-PE44LDDQ.js";
 import {
@@ -90,7 +90,7 @@ import {
 import {
   validatePluginEgressCredentialHooks,
   validatePluginRegistrations
-} from "./chunk-TAGV4Z3J.js";
+} from "./chunk-YEAOUT5W.js";
 import {
   defineJuniorPlugins,
   pluginCatalogConfigFromEnv,
@@ -123,7 +123,7 @@ import {
   setConfigDefaults,
   shouldEmitDevAgentTrace,
   shouldPropagateSandboxEgressTrace
-} from "./chunk-TGIQN7QW.js";
+} from "./chunk-ERYVNWNE.js";
 import "./chunk-DIB4GX3G.js";
 import {
   RetryableDeliveryError,
@@ -134,7 +134,7 @@ import {
   formatProviderLabel,
   postSlackMessage,
   startOAuthFlow
-} from "./chunk-4UIUDOOV.js";
+} from "./chunk-TKUCRFNX.js";
 import {
   ConversationTurnBoundaryError,
   CooperativeTurnYieldError,
@@ -188,10 +188,10 @@ import {
   trimTrailingAssistantMessages,
   updateConversationStats,
   upsertConversationMessage
-} from "./chunk-BNJEPYTC.js";
+} from "./chunk-JQWP6V22.js";
 import "./chunk-HDSDCEPK.js";
-import "./chunk-GKFDU3ZI.js";
-import "./chunk-JXRAOOXQ.js";
+import "./chunk-DJDGDJDF.js";
+import "./chunk-6WX5SPI3.js";
 import "./chunk-MU6HHZEN.js";
 import "./chunk-PDO5BLNM.js";
 import "./chunk-UIE3R5XU.js";
@@ -216,7 +216,7 @@ import {
   validatePlugins,
   verifyScheduledTaskCredentialSubject,
   verifySlackDirectCredentialSubject
-} from "./chunk-BLQZACHV.js";
+} from "./chunk-24B5R6OU.js";
 import {
   contextProvenance,
   createSlackDestination,
@@ -227,7 +227,7 @@ import {
   instructionProvenanceFor,
   requireSlackDestination,
   withConversationEventLock
-} from "./chunk-D3N4BPSL.js";
+} from "./chunk-M243JMZH.js";
 import {
   juniorConversationEvents,
   juniorConversations
@@ -236,7 +236,7 @@ import {
   acquireActiveLock,
   getStateAdapter,
   sleep
-} from "./chunk-VJTWKJWQ.js";
+} from "./chunk-ALAKN7LR.js";
 import {
   STANDARD_MODEL_PROFILE,
   botConfig,
@@ -254,18 +254,18 @@ import {
   modelIdForProfile,
   setSlackReactionConfig,
   standardModelId
-} from "./chunk-VLTWQQKH.js";
+} from "./chunk-VURFJVFH.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";
 import {
   parseSlackThreadId
 } from "./chunk-HDFGNU5E.js";
-import "./chunk-QZ7XRJDB.js";
+import "./chunk-EIVE6GL4.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-JSTGI7TX.js";
-import "./chunk-R53UT2OI.js";
+} from "./chunk-GNNV3UTY.js";
+import "./chunk-XAI2HNAY.js";
 import {
   credentialSubjectSchema
 } from "./chunk-W3U3YQYI.js";
@@ -291,7 +291,7 @@ import {
   setTags,
   withContext,
   withSpan
-} from "./chunk-ZJ6IVZVO.js";
+} from "./chunk-ALYQOZG7.js";
 import {
   toOptionalString
 } from "./chunk-OB42YVAE.js";
@@ -302,14 +302,14 @@ import {
 import {
   continueTrace
 } from "./chunk-6GWA276C.js";
-import "./chunk-B3IT5END.js";
-import "./chunk-3V7OFJZC.js";
+import "./chunk-OOUNJNMR.js";
+import "./chunk-H4HBKISO.js";
 import {
   JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE
-} from "./chunk-NUENIPQL.js";
+} from "./chunk-DWOH57FW.js";
 import {
   JUNIOR_VERSION
-} from "./chunk-JLJLZS2N.js";
+} from "./chunk-DMKHRBI6.js";
 import "./chunk-MLKGABMK.js";
 
 // src/app.ts

package/dist/build/copy-build-content.d.ts

@@ -1,5 +1,5 @@
-/** Copy app and declared plugin package content into the server output. */
-export declare function copyAppAndPluginContent(cwd: string, serverRoot: string, packageNames?: unknown): void;
+/** Copy app, built-in skill, and declared plugin content into server output. */
+export declare function copyRuntimeContent(cwd: string, serverRoot: string, packageNames?: unknown): void;
 /** Copy dashboard browser assets when core dashboard routes are enabled. */
 export declare function copyDashboardAssets(cwd: string, serverRoot: string): void;
 /** Copy extra file patterns into server output for files the bundler cannot trace. */

package/dist/{catalog-runtime-TAOYIZIZ.js → catalog-runtime-5KR5XBMJ.js}

@@ -1,17 +1,17 @@
 import {
   pluginCatalogRuntime
-} from "./chunk-JSTGI7TX.js";
-import "./chunk-R53UT2OI.js";
+} from "./chunk-GNNV3UTY.js";
+import "./chunk-XAI2HNAY.js";
 import "./chunk-W3U3YQYI.js";
 import "./chunk-HZF5P5UN.js";
-import "./chunk-ZJ6IVZVO.js";
+import "./chunk-ALYQOZG7.js";
 import "./chunk-OB42YVAE.js";
 import "./chunk-F3B2YJ76.js";
 import "./chunk-6GWA276C.js";
-import "./chunk-B3IT5END.js";
-import "./chunk-3V7OFJZC.js";
-import "./chunk-NUENIPQL.js";
-import "./chunk-JLJLZS2N.js";
+import "./chunk-OOUNJNMR.js";
+import "./chunk-H4HBKISO.js";
+import "./chunk-DWOH57FW.js";
+import "./chunk-DMKHRBI6.js";
 import "./chunk-MLKGABMK.js";
 export {
   pluginCatalogRuntime

package/dist/chat/discovery.d.ts

@@ -19,6 +19,8 @@ export interface ResolveHomeDirOptions {
 }
 /** Resolve the app home directory by scoring candidate `app/` directories. */
 export declare function resolveHomeDir(cwd?: string, options?: ResolveHomeDirOptions): string;
+/** Return the built-in skills directory in source and packaged builds. */
+export declare function builtInSkillsDir(): string;
 /** Return the data directory (same as homeDir). */
 export declare function dataDir(): string;
 /** Return the path to the SOUL.md file. */

package/dist/chat/mcp/tool-manager.d.ts

@@ -8,7 +8,7 @@
  */
 import type { ImageContent, TextContent } from "@earendil-works/pi-ai";
 import type { OAuthClientProvider } from "@modelcontextprotocol/sdk/client/auth.js";
-import type { ToolAnnotations } from "@sentry/junior-plugin-api";
+import type { PluginMcpToolResult, ToolAnnotations } from "@sentry/junior-plugin-api";
 import type { ConversationPrivacy } from "@/chat/conversation-privacy";
 import type { SkillMetadata } from "@/chat/skills";
 import type { PluginDefinition } from "@/chat/plugins/types";
@@ -19,7 +19,15 @@ export interface McpToolManagerOptions {
     onAuthorizationRequired?: (provider: string, error: McpAuthorizationRequiredError) => Promise<boolean | void> | boolean | void;
 }
 export interface ManagedMcpToolResult {
+    /**
+     * Internal bridge for direct model calls, which need placeholder content
+     * while the wrapper boundary receives a content-free discriminated result.
+     */
+    authorizationPending?: boolean;
     content: Array<TextContent | ImageContent>;
+    /** Original provider content before model-visible result normalization. */
+    providerContent?: Array<TextContent | ImageContent>;
+    structuredContent?: unknown;
 }
 export interface ManagedMcpToolDescriptor {
     name: string;
@@ -62,6 +70,7 @@ export declare class McpToolManager {
         provider?: string;
     }): ManagedMcpToolDescriptor[];
     private filterListedTools;
+    private assertWrappedToolsAvailable;
     private getClient;
     private createClient;
     private toManagedTool;
@@ -70,6 +79,10 @@ export declare class McpToolManager {
     getResolvedActiveTools(options?: {
         provider?: string;
     }): ManagedMcpTool[];
+    /** Call one active provider tool declared for plugin-owned wrapping. */
+    callWrappedTool(provider: string, rawName: string, args: Record<string, unknown>, options?: {
+        toolCallId?: string;
+    }): Promise<PluginMcpToolResult>;
     private toToolDescriptor;
 }
 export {};

package/dist/chat/plugins/types.d.ts

@@ -1,6 +1,6 @@
-import type { PluginRuntimeDependency, PluginRuntimePostinstallCommand } from "@sentry/junior-plugin-api";
+import type { PluginMcpConfig, PluginRuntimeDependency, PluginRuntimePostinstallCommand } from "@sentry/junior-plugin-api";
 import type { UserTokenStore } from "@/chat/credentials/user-token-store";
-export type { PluginNpmRuntimeDependency, PluginRuntimeDependency, PluginRuntimePostinstallCommand, PluginSystemRuntimeDependency, PluginSystemRuntimeDependencyFromUrl, } from "@sentry/junior-plugin-api";
+export type { PluginNpmRuntimeDependency, PluginMcpConfig, PluginRuntimeDependency, PluginRuntimePostinstallCommand, PluginSystemRuntimeDependency, PluginSystemRuntimeDependencyFromUrl, } from "@sentry/junior-plugin-api";
 export interface PluginOAuthConfig {
     clientIdEnv: string;
     clientSecretEnv: string;
@@ -30,13 +30,6 @@ export interface OAuthBearerCredentials {
     authTokenPlaceholder?: string;
 }
 export type PluginCredentials = OAuthBearerCredentials;
-export interface PluginMcpHttpConfig {
-    transport: "http";
-    url: string;
-    headers?: Record<string, string>;
-    allowedTools?: string[];
-}
-export type PluginMcpConfig = PluginMcpHttpConfig;
 export interface PluginEnvVarDeclaration {
     default?: string;
     exposeToCommandEnv?: boolean;
@@ -103,6 +96,7 @@ export interface PluginManifestConfig {
         url?: string;
         headers?: Record<string, string | null> | null;
         allowedTools?: string[] | null;
+        wrappedTools?: string[] | null;
     } | null;
     oauth?: PluginOAuthConfigPatch | null;
     target?: {

package/dist/chat/plugins/user-pages.d.ts

@@ -4,7 +4,7 @@
  * This module joins registered readers with the authenticated viewer and
  * validates every plugin response before it reaches the dashboard.
  */
-import { type PluginUserPageContent, type PluginUserPageLink } from "@sentry/junior-plugin-api";
+import { type PluginUserPageContent, type PluginUserPageInput, type PluginUserPageLink } from "@sentry/junior-plugin-api";
 /** List safe navigation metadata for registered plugin user pages. */
 export declare function readPluginUserPageLinks(): PluginUserPageLink[];
 /** Read one registered plugin user page for the authenticated viewer. */
@@ -12,4 +12,5 @@ export declare function readPluginUserPage(input: {
     email: string;
     pageId: string;
     pluginName: string;
+    query: PluginUserPageInput;
 }): Promise<PluginUserPageContent | undefined>;