@sentry/junior 0.136.0 → 0.137.0

package/dist/{catalog-runtime-VXL5EO2X.js → catalog-runtime-MD66YLFV.js}

@@ -1,16 +1,16 @@
 import {
   pluginCatalogRuntime
-} from "./chunk-IUSO5QUB.js";
-import "./chunk-4VDQGQHY.js";
+} from "./chunk-36EG34YI.js";
+import "./chunk-BZAMASJP.js";
 import "./chunk-77VDLF3Z.js";
 import "./chunk-HZF5P5UN.js";
 import "./chunk-F3B2YJ76.js";
-import "./chunk-BECYUPSQ.js";
+import "./chunk-T6Z5S6PQ.js";
 import "./chunk-6GWA276C.js";
 import "./chunk-OOUNJNMR.js";
 import "./chunk-H4HBKISO.js";
-import "./chunk-ZIYDJIWQ.js";
-import "./chunk-DO37VD6O.js";
+import "./chunk-5PNJMOY5.js";
+import "./chunk-XZ7NPXAB.js";
 import "./chunk-MLKGABMK.js";
 export {
   pluginCatalogRuntime

package/dist/chat/configuration/defaults.d.ts

@@ -1,4 +1,4 @@
-/** Store install-wide config defaults; keys must be registered plugin config keys. */
+/** Store install-wide configuration defaults. */
 export declare function setConfigDefaults(defaults: Record<string, unknown> | undefined): void;
 /** Return the install-wide configuration defaults (empty object when none set). */
 export declare function getConfigDefaults(): Record<string, unknown>;

package/dist/chat/conversations/store.d.ts

@@ -32,7 +32,8 @@ export interface Conversation {
     source?: ConversationSource;
     /**
      * Structured inbound Source locator for this conversation session.
-     * Session-stable (Slack thread anchor, not per-message ts). Set-once.
+     * Session-stable (threaded Slack keeps threadTs; channel-level turns omit
+     * it; never stores per-message ts). Set-once.
      */
     sessionSource?: SessionSource;
     title?: string;

package/dist/chat/pi/client.d.ts

@@ -1,16 +1,9 @@
 import { type Message, type Model, type ThinkingLevel } from "@/chat/pi/sdk";
+export { getGatewayApiKey, MISSING_GATEWAY_CREDENTIALS_ERROR, resolveGatewayCredential, type GatewayCredential, } from "@/chat/pi/gateway-auth";
 import type { ZodTypeAny, z } from "zod";
 export declare const GEN_AI_PROVIDER_NAME: "vercel-ai-gateway";
 export declare const GEN_AI_SERVER_ADDRESS = "ai-gateway.vercel.sh";
 export declare const GEN_AI_SERVER_PORT = 443;
-export declare const MISSING_GATEWAY_CREDENTIALS_ERROR = "Missing AI gateway credentials (AI_GATEWAY_API_KEY or VERCEL_OIDC_TOKEN)";
-/**
- * Resolve the documented AI Gateway env credentials for the paths that need
- * the bearer token string directly.
- */
-export declare function getGatewayApiKey(): string | undefined;
-/** Return the Gateway credential shape expected by Pi Agent getApiKey hooks. */
-export declare function getPiGatewayApiKey(): string | undefined;
 /**
  * Look up a gateway model by id. Throws `Unknown AI Gateway model id: …` if
  * the id is not in pi-ai's registry — callers at the config boundary can use

package/dist/chat/pi/gateway-auth.d.ts

@@ -0,0 +1,16 @@
+export type GatewayCredential = {
+    mode: "oidc" | "api_key";
+    token: string;
+};
+export declare const MISSING_GATEWAY_CREDENTIALS_ERROR = "Missing AI gateway credentials (enable Vercel OIDC or set AI_GATEWAY_API_KEY)";
+/**
+ * Resolve the preferred AI Gateway bearer credential.
+ *
+ * Order:
+ * 1. Vercel OIDC via `@vercel/oidc` (request header `x-vercel-oidc-token`,
+ *    then `VERCEL_OIDC_TOKEN`, with local refresh when needed)
+ * 2. Explicit `AI_GATEWAY_API_KEY` / pi-ai env mapping for vercel-ai-gateway
+ */
+export declare function resolveGatewayCredential(): Promise<GatewayCredential | undefined>;
+/** Resolve the bearer token string for Authorization headers and Pi getApiKey. */
+export declare function getGatewayApiKey(): Promise<string | undefined>;

package/dist/chat/sandbox/docker.d.ts

@@ -0,0 +1,17 @@
+import type { SandboxWorkspace } from "@/chat/sandbox/workspace";
+/** Docker daemon config for Vercel sandbox guests (nested containers). */
+export declare const DOCKER_DAEMON_JSON = "{\n  \"storage-driver\": \"overlay2\",\n  \"live-restore\": false\n}\n";
+/**
+ * Start dockerd when the socket is missing and wait until `docker info` works.
+ * Re-execs through sudo so the sandbox user can call it without root.
+ */
+export declare const DOCKER_ENSURE_SCRIPT = "#!/bin/sh\nset -eu\n\nif [ \"$(id -u)\" -ne 0 ]; then\n  exec sudo -n \"$0\" \"$@\"\nfi\n\nSOCK=/var/run/docker.sock\nPIDFILE=/var/run/docker.pid\nLOG=/var/log/junior-dockerd.log\n\nis_ready() {\n  [ -S \"$SOCK\" ] && /usr/bin/docker info >/dev/null 2>&1\n}\n\nif is_ready; then\n  chmod 666 \"$SOCK\" 2>/dev/null || true\n  exit 0\nfi\n\nmkdir -p /etc/docker /var/lib/docker /var/run /var/log\nif [ ! -f /etc/docker/daemon.json ]; then\n  cat > /etc/docker/daemon.json <<'EOF'\n{\n  \"storage-driver\": \"overlay2\",\n  \"live-restore\": false\n}\nEOF\nfi\n\nif [ -f \"$PIDFILE\" ]; then\n  oldpid=\"$(cat \"$PIDFILE\" 2>/dev/null || true)\"\n  if [ -n \"${oldpid:-}\" ] && ! kill -0 \"$oldpid\" 2>/dev/null; then\n    rm -f \"$PIDFILE\"\n  fi\nfi\n\nif [ ! -f \"$PIDFILE\" ] || ! kill -0 \"$(cat \"$PIDFILE\" 2>/dev/null)\" 2>/dev/null; then\n  # dockerd must outlive this helper; nohup + background is intentional.\n  nohup dockerd --host=\"unix://$SOCK\" --pidfile=\"$PIDFILE\" >\"$LOG\" 2>&1 &\nfi\n\ni=0\nwhile [ \"$i\" -lt 50 ]; do\n  if is_ready; then\n    chmod 666 \"$SOCK\" 2>/dev/null || true\n    exit 0\n  fi\n  i=$((i + 1))\n  sleep 0.1\ndone\n\necho \"junior-ensure-docker: dockerd failed to become ready\" >&2\nif [ -f \"$LOG\" ]; then\n  tail -n 50 \"$LOG\" >&2 || true\nfi\nexit 1\n";
+/** PATH wrapper so plain `docker` starts the daemon on first use. */
+export declare const DOCKER_CLI_WRAPPER_SCRIPT = "#!/bin/sh\nset -eu\nif command -v junior-ensure-docker >/dev/null 2>&1; then\n  junior-ensure-docker\nfi\nexec /usr/bin/docker \"$@\"\n";
+/** PATH wrapper so plain `docker-compose` starts the daemon on first use. */
+export declare const DOCKER_COMPOSE_CLI_WRAPPER_SCRIPT = "#!/bin/sh\nset -eu\nif command -v junior-ensure-docker >/dev/null 2>&1; then\n  junior-ensure-docker\nfi\nexec /usr/local/libexec/junior-docker-compose \"$@\"\n";
+/**
+ * Best-effort dockerd start during sandbox prepare.
+ * Missing helper is a no-op so tests and base sandboxes stay green.
+ */
+export declare function ensureDockerDaemon(sandbox: Pick<SandboxWorkspace, "runCommand">, signal?: AbortSignal): Promise<void>;

package/dist/chat/services/agent-continue.d.ts

@@ -6,6 +6,7 @@
  */
 import type { StateAdapter } from "chat";
 import type { Destination } from "@sentry/junior-plugin-api";
+import type { ConversationStore } from "@/chat/conversations/store";
 import type { ConversationWorkQueue } from "@/chat/task-execution/queue";
 export interface AgentContinueRequest {
     conversationId: string;
@@ -21,6 +22,7 @@ export interface ScheduleAgentContinueOptions {
 /** Build the queue request for an awaiting automatic agent continuation. */
 export declare function getAwaitingAgentContinueRequest(args: {
     conversationId: string;
+    conversationStore?: ConversationStore;
     sessionId: string;
 }): Promise<AgentContinueRequest | undefined>;
 /** Schedule durable conversation work to continue a paused agent run. */

package/dist/chat/services/subscribed-reply-router-policy.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Passive subscribed-thread reply router policy.
+ *
+ * Modeled after Junior's Guardian action-review policy shape and the open-source
+ * Codex Guardian evidence/prompt pattern:
+ * https://github.com/openai/codex/tree/main/codex-rs/core/src/guardian
+ *
+ * Guardian judges one planned tool action from bounded transcript evidence.
+ * This router judges one inbound Slack message from bounded visible
+ * user/assistant thread evidence and decides whether Junior should reply.
+ */
+export declare function buildSubscribedReplyRouterPolicy(assistantName: string): string;

package/dist/chat/services/turn-session-routing.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Load turn-session routing from durable conversation metadata.
+ *
+ * SQL owns destination and session source. Resume paths query those columns
+ * directly — no redis fallback and no derived rebuild of missing fields.
+ */
+import type { Destination, Source } from "@sentry/junior-plugin-api";
+import type { ConversationStore } from "@/chat/conversations/store";
+export interface TurnSessionRouting {
+    destination: Destination;
+    source: Source;
+}
+/** Require conversation destination and session source from SQL. */
+export declare function resolveTurnSessionRouting(args: {
+    conversationId: string;
+    conversationStore?: ConversationStore;
+}): Promise<TurnSessionRouting>;

package/dist/chat/slack/message.d.ts

@@ -1,7 +1,12 @@
-import type { Message } from "chat";
+import { type Message } from "chat";
 import { type SlackMessageTs } from "@/chat/slack/timestamp";
 /**
  * Preserve the native Slack message timestamp when a synthetic message ID is
  * used for routing or deduplication.
  */
 export declare function getSlackMessageTs(message: Pick<Message, "id" | "raw">): SlackMessageTs | undefined;
+/**
+ * Return the Chat SDK's canonical formatted representation by default.
+ * Fall back to plain text only when the message has no formatted content.
+ */
+export declare function getSlackMessageText(message: Pick<Message, "formatted" | "text">): string;

package/dist/chat/slack/source-link.d.ts

@@ -1,5 +1,11 @@
-/** Build Slack's browser-safe redirect to a conversation when its IDs are valid. */
+/** Parse a Slack workspace subdomain used in `https://{domain}.slack.com` URLs. */
+export declare function parseSlackTeamDomain(value: unknown): string | undefined;
+/**
+ * Build a direct Slack archive URL for a thread when the workspace domain is
+ * known. Omits a link rather than falling back to `app_redirect`.
+ */
 export declare function buildSlackSourceUrl(args: {
     channelId: string;
-    teamId: string;
+    teamDomain: string;
+    threadTs: string;
 }): string | undefined;

package/dist/chat/slack/team-domain.d.ts

@@ -0,0 +1,4 @@
+/** Resolve a workspace subdomain via `team.info`, cached by team id. */
+export declare function resolveSlackTeamDomain(teamId: string): Promise<string | undefined>;
+/** Resolve workspace subdomains for the distinct team ids in one API response. */
+export declare function resolveSlackTeamDomains(teamIds: Iterable<string>): Promise<ReadonlyMap<string, string>>;

package/dist/chat/source.d.ts

@@ -2,14 +2,14 @@ import { type Source } from "@sentry/junior-plugin-api";
 /** Source coordinates reduced to the stable locator for one conversation. */
 export type SessionSource = Extract<Source, {
     platform: "local";
-}> | (Omit<Extract<Source, {
+}> | Omit<Extract<Source, {
     platform: "slack";
-}>, "messageTs" | "threadTs"> & {
-    threadTs: string;
-});
+}>, "messageTs">;
 /**
  * Normalize a turn Source into the session-stable locator persisted on a
- * conversation. Drops per-message timestamps; requires a Slack thread anchor.
+ * conversation. Drops per-message timestamps. Threaded Slack turns keep their
+ * thread anchor; channel-level turns (scheduled/event dispatch) keep the
+ * channel locator without inventing a threadTs.
  */
 export declare function normalizeSessionSource(value: Source | undefined): SessionSource | undefined;
 /** Parse a serialized Source into the stable locator stored on a conversation. */

package/dist/{chunk-IUSO5QUB.js → chunk-36EG34YI.js}

@@ -1,6 +1,6 @@
 import {
   createPluginCatalogRuntime
-} from "./chunk-4VDQGQHY.js";
+} from "./chunk-BZAMASJP.js";
 
 // src/chat/plugins/catalog-runtime.ts
 var pluginCatalogRuntime = createPluginCatalogRuntime();

package/dist/{chunk-QCX3TRIM.js → chunk-3Q342EJJ.js}

@@ -1,9 +1,9 @@
 import {
   pluginCatalogRuntime
-} from "./chunk-IUSO5QUB.js";
+} from "./chunk-36EG34YI.js";
 import {
   logWarn
-} from "./chunk-BECYUPSQ.js";
+} from "./chunk-T6Z5S6PQ.js";
 import {
   skillRoots
 } from "./chunk-H4HBKISO.js";

package/dist/{chunk-5I3MXBNV.js → chunk-5G34IEK2.js}

@@ -1,6 +1,6 @@
 import {
   getChatConfig
-} from "./chunk-QE4DN7JQ.js";
+} from "./chunk-UG6ZYPBI.js";
 
 // src/chat/sandbox/paths.ts
 function normalizeWorkspaceRoot(input) {

package/dist/{chunk-ZIYDJIWQ.js → chunk-5PNJMOY5.js}

@@ -1,6 +1,6 @@
 import {
   JUNIOR_VERSION
-} from "./chunk-DO37VD6O.js";
+} from "./chunk-XZ7NPXAB.js";
 
 // src/deployment.ts
 var JUNIOR_HEARTBEAT_ROUTE = "/api/internal/heartbeat";

package/dist/{chunk-6ABWAONM.js → chunk-6QW2RRQT.js}

@@ -3,19 +3,19 @@ import {
 } from "./chunk-UTL3MHPC.js";
 import {
   parseSlackThreadId
-} from "./chunk-3UUDZPO5.js";
+} from "./chunk-YRPC6MJY.js";
 import {
   normalizeSlackConversationId
-} from "./chunk-76Y5A57F.js";
+} from "./chunk-WPPXIAFB.js";
 import {
   getDb
-} from "./chunk-4ULSYOL6.js";
+} from "./chunk-ZFS67WIR.js";
 import {
   juniorTaskExecutions
-} from "./chunk-BTBTQEXF.js";
+} from "./chunk-RB4NJKEX.js";
 import {
   logWarn
-} from "./chunk-BECYUPSQ.js";
+} from "./chunk-T6Z5S6PQ.js";
 
 // src/handlers/health.ts
 function readHealthReport() {

package/dist/{chunk-4VDQGQHY.js → chunk-BZAMASJP.js}

@@ -5,7 +5,7 @@ import {
   logInfo,
   logWarn,
   setSpanAttributes
-} from "./chunk-BECYUPSQ.js";
+} from "./chunk-T6Z5S6PQ.js";
 import {
   discoverInstalledPluginPackageContent,
   normalizePluginPackageNames

package/dist/{chunk-XRC4TXJ4.js → chunk-DQXAAVTR.js}

@@ -12,8 +12,9 @@ import {
   getTurnUserSlackMessageTs,
   persistAuthPauseTurnState,
   requireTurnFailureEventId,
+  resolveTurnSessionRouting,
   scheduleSessionCompletedPluginTasks
-} from "./chunk-UIAZI7UJ.js";
+} from "./chunk-SYCX4DOK.js";
 import {
   buildSentryConversationUrl
 } from "./chunk-4CODA7P5.js";
@@ -40,7 +41,7 @@ import {
   resolveBaseUrl,
   resolvePluginOAuthAccount,
   truncateStatusText
-} from "./chunk-HEGTNY2S.js";
+} from "./chunk-EWDSB24B.js";
 import {
   JUNIOR_THREAD_STATE_TTL_MS,
   TurnSliceLimitExceededError,
@@ -72,13 +73,13 @@ import {
   recordDeliveredAssistantMessage,
   turnHasReply,
   updateConversationStats
-} from "./chunk-3TOCJOYJ.js";
+} from "./chunk-POBSY47Q.js";
 import {
   parseSlackThreadId,
   readSlackRawMessageContext,
   resolveSlackChannelIdFromMessage,
   resolveSlackChannelIdFromThreadId
-} from "./chunk-3UUDZPO5.js";
+} from "./chunk-YRPC6MJY.js";
 import {
   SlackActionError,
   getDashboardConversationLink,
@@ -87,19 +88,19 @@ import {
   getSlackClient,
   isDmChannel,
   normalizeSlackConversationId
-} from "./chunk-76Y5A57F.js";
+} from "./chunk-WPPXIAFB.js";
 import {
   getConversationEventStore,
   getConversationStore,
   parseDestination,
   requireSlackDestination,
   sameDestination
-} from "./chunk-4ULSYOL6.js";
+} from "./chunk-ZFS67WIR.js";
 import {
   acquireActiveLock,
   getDefaultRedisStateAdapterFor,
   getStateAdapter
-} from "./chunk-5I3MXBNV.js";
+} from "./chunk-5G34IEK2.js";
 import {
   FUNCTION_TIMEOUT_BUFFER_SECONDS,
   botConfig,
@@ -108,18 +109,18 @@ import {
   getRuntimeMetadata,
   normalizeSlackEmojiName,
   standardModelId
-} from "./chunk-QE4DN7JQ.js";
+} from "./chunk-UG6ZYPBI.js";
 import {
   discoverSkills
-} from "./chunk-QCX3TRIM.js";
+} from "./chunk-3Q342EJJ.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-IUSO5QUB.js";
+} from "./chunk-36EG34YI.js";
 import {
   buildOAuthTokenRequest,
   hasRequiredOAuthScope,
   parseOAuthTokenResponse
-} from "./chunk-4VDQGQHY.js";
+} from "./chunk-BZAMASJP.js";
 import {
   createSlackResumeActor,
   isUserActor,
@@ -138,7 +139,7 @@ import {
   toOptionalNumber,
   toOptionalString,
   withLogContext
-} from "./chunk-BECYUPSQ.js";
+} from "./chunk-T6Z5S6PQ.js";
 import {
   homeDir
 } from "./chunk-H4HBKISO.js";
@@ -3152,12 +3153,24 @@ async function getAwaitingAgentContinueRequest(args) {
   if (!sessionRecord || sessionRecord.state !== "awaiting_resume" || sessionRecord.resumeReason !== "timeout" && sessionRecord.resumeReason !== "yield" && sessionRecord.resumeReason !== "retry" || sessionRecord.resumeReason === "timeout" && sessionRecord.sliceId < 2) {
     return void 0;
   }
-  if (!sessionRecord.destination) {
+  let routing;
+  try {
+    routing = await resolveTurnSessionRouting({
+      conversationId: args.conversationId,
+      conversationStore: args.conversationStore
+    });
+  } catch (error) {
+    await failAgentTurnSessionRecord({
+      conversationId: args.conversationId,
+      expectedVersion: sessionRecord.version,
+      sessionId: args.sessionId,
+      errorMessage: error instanceof Error ? error.message : String(error)
+    });
     return void 0;
   }
   return {
     conversationId: args.conversationId,
-    destination: sessionRecord.destination,
+    destination: routing.destination,
     sessionId: args.sessionId,
     expectedVersion: sessionRecord.version
   };
@@ -3444,12 +3457,17 @@ async function resumeAuthorizedMcpTurn(args) {
         });
         return false;
       }
-      if (!lockedSessionRecord.source) {
+      let routing;
+      try {
+        routing = await resolveTurnSessionRouting({
+          conversationId: authSession.conversationId
+        });
+      } catch (error) {
         await failAgentTurnSessionRecord({
           conversationId: authSession.conversationId,
           expectedVersion: lockedSessionRecord.version,
           sessionId: lockedSessionId,
-          errorMessage: "Stored Slack source missing for MCP OAuth resume"
+          errorMessage: error instanceof Error ? error.message : String(error)
         });
         return false;
       }
@@ -3483,7 +3501,7 @@ async function resumeAuthorizedMcpTurn(args) {
             },
             actor,
             destination,
-            source: lockedSessionRecord.source,
+            source: routing.source,
             toolChannelId: authSession.toolChannelId ?? lockedArtifacts.assistantContextChannelId ?? authSession.channelId
           },
           policy: {
@@ -4073,12 +4091,17 @@ async function resumeOAuthSessionRecordTurn(stored, options) {
         });
         return false;
       }
-      if (!lockedSessionRecord.source) {
+      let routing;
+      try {
+        routing = await resolveTurnSessionRouting({
+          conversationId: stored.resumeConversationId
+        });
+      } catch (error) {
         await failAgentTurnSessionRecord({
           conversationId: stored.resumeConversationId,
           expectedVersion: lockedSessionRecord.version,
           sessionId: lockedSessionId,
-          errorMessage: "Stored Slack source missing for OAuth resume"
+          errorMessage: error instanceof Error ? error.message : String(error)
         });
         return false;
       }
@@ -4117,7 +4140,7 @@ async function resumeOAuthSessionRecordTurn(stored, options) {
             },
             actor,
             destination,
-            source: lockedSessionRecord.source,
+            source: routing.source,
             toolChannelId: lockedArtifacts.assistantContextChannelId ?? stored.channelId
           },
           policy: {

package/dist/{chunk-HEGTNY2S.js → chunk-EWDSB24B.js}

@@ -6,25 +6,25 @@ import {
   isDmChannel,
   normalizeSlackConversationId,
   withSlackRetries
-} from "./chunk-76Y5A57F.js";
+} from "./chunk-WPPXIAFB.js";
 import {
   getDb,
   parseDestination
-} from "./chunk-4ULSYOL6.js";
+} from "./chunk-ZFS67WIR.js";
 import {
   acquireActiveLock,
   getStateAdapter,
   sleep
-} from "./chunk-5I3MXBNV.js";
+} from "./chunk-5G34IEK2.js";
 import {
   normalizeSlackEmojiName
-} from "./chunk-QE4DN7JQ.js";
+} from "./chunk-UG6ZYPBI.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-IUSO5QUB.js";
+} from "./chunk-36EG34YI.js";
 import {
   fetchWithBoundedOAuthErrorBodies
-} from "./chunk-4VDQGQHY.js";
+} from "./chunk-BZAMASJP.js";
 import {
   parseSlackMessageTs,
   parseSlackUserId
@@ -33,7 +33,7 @@ import {
   isRecord,
   logInfo,
   logWarn
-} from "./chunk-BECYUPSQ.js";
+} from "./chunk-T6Z5S6PQ.js";
 
 // src/chat/capabilities/router.ts
 var ProviderCredentialRouter = class {

package/dist/{chunk-TRZSM67C.js → chunk-HCIVH3JS.js}

@@ -433,6 +433,7 @@ var conversationStatsItemSchema = z2.object({
   tokens: z2.number().optional()
 }).strict();
 var conversationMetricDaySchema = z2.object({
+  conversations: z2.number(),
   costUsd: z2.number().optional(),
   date: z2.string(),
   durationMs: z2.number(),

package/dist/{chunk-CGZ6O74P.js → chunk-K2NCQJKH.js}

@@ -4,16 +4,16 @@ import {
 import {
   canRouteResourceEvents,
   getPlugins
-} from "./chunk-76Y5A57F.js";
+} from "./chunk-WPPXIAFB.js";
 import {
   getDb
-} from "./chunk-4ULSYOL6.js";
+} from "./chunk-ZFS67WIR.js";
 import {
   juniorEventTasks,
   juniorSchedulerRuns,
   juniorSchedulerTasks,
   juniorStats
-} from "./chunk-BTBTQEXF.js";
+} from "./chunk-RB4NJKEX.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";