@sentry/junior 0.136.1 → 0.138.0

package/dist/{chunk-CZZDCH3Q.js → chunk-A7WCHXZV.js}

@@ -1,19 +1,21 @@
 import {
   SANDBOX_WORKSPACE_ROOT,
-  getStateAdapter,
   sleep
-} from "./chunk-4YQ6I6VF.js";
+} from "./chunk-EM225ITJ.js";
+import {
+  getStateAdapter
+} from "./chunk-BOLJOV5T.js";
 import {
   toOptionalTrimmed
-} from "./chunk-XCZ6COFO.js";
+} from "./chunk-BYW4B4PR.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-3QNJOHKG.js";
+} from "./chunk-QS527AV5.js";
 import {
   setSpanAttributes,
   setSpanStatus,
   withSpan
-} from "./chunk-XWPA5KZF.js";
+} from "./chunk-JNNJZURV.js";
 
 // src/chat/sandbox/resources.ts
 var configuredResources;
@@ -50,12 +52,181 @@ function getSandboxResources() {
 // src/chat/sandbox/snapshot/profile.ts
 import { createHash } from "crypto";
 
+// src/chat/sandbox/noninteractive-command.ts
+var NON_INTERACTIVE_ENV = {
+  CI: "1",
+  TERM: "dumb",
+  NO_COLOR: "1",
+  PAGER: "cat",
+  GIT_PAGER: "cat",
+  GH_PROMPT_DISABLED: "1",
+  GH_NO_UPDATE_NOTIFIER: "1",
+  GH_NO_EXTENSION_UPDATE_NOTIFIER: "1",
+  GH_SPINNER_DISABLED: "1",
+  GIT_TERMINAL_PROMPT: "0",
+  GCM_INTERACTIVE: "never",
+  DEBIAN_FRONTEND: "noninteractive",
+  // Git credential isolation: prevent git from sending its own auth so the
+  // sandbox egress proxy's header transforms are the sole credential source.
+  GIT_ASKPASS: "/bin/true",
+  GIT_CONFIG_NOSYSTEM: "1",
+  GIT_CONFIG_COUNT: "2",
+  GIT_CONFIG_KEY_0: "credential.helper",
+  GIT_CONFIG_VALUE_0: "",
+  GIT_CONFIG_KEY_1: "http.emptyAuth",
+  GIT_CONFIG_VALUE_1: "true"
+};
+function shellQuote(value) {
+  return `'${value.replace(/'/g, "'\\''")}'`;
+}
+function buildEnvExports(options) {
+  const lines = [];
+  if (options.pathPrefix) {
+    lines.push(`export PATH="${options.pathPrefix}"`);
+  }
+  for (const [key, value] of Object.entries(NON_INTERACTIVE_ENV)) {
+    lines.push(`export ${key}=${shellQuote(value)}`);
+  }
+  for (const [key, value] of Object.entries(options.env ?? {})) {
+    lines.push(`export ${key}=${shellQuote(value)}`);
+  }
+  return lines;
+}
+function buildCommandScript(input) {
+  return [shellQuote(input.cmd), ...(input.args ?? []).map(shellQuote)].join(
+    " "
+  );
+}
+function buildNonInteractiveShellScript(script, options = {}) {
+  return [...buildEnvExports(options), "exec </dev/null", script].join(" && ");
+}
+function buildNonInteractiveCommand(input) {
+  return {
+    cmd: "bash",
+    args: [
+      input.login ? "-lc" : "-c",
+      buildNonInteractiveShellScript(buildCommandScript(input), {
+        env: input.env,
+        pathPrefix: input.pathPrefix
+      })
+    ]
+  };
+}
+async function runNonInteractiveCommand(sandbox, input) {
+  const command = {
+    ...buildNonInteractiveCommand(input),
+    ...input.cwd ? { cwd: input.cwd } : {},
+    ...input.signal ? { signal: input.signal } : {},
+    ...input.sudo !== void 0 ? { sudo: input.sudo } : {}
+  };
+  return await sandbox.runCommand(command);
+}
+
+// src/chat/sandbox/docker.ts
+var DOCKER_DAEMON_JSON = `{
+  "storage-driver": "overlay2",
+  "live-restore": false
+}
+`;
+var DOCKER_ENSURE_SCRIPT = `#!/bin/sh
+set -eu
+
+if [ "$(id -u)" -ne 0 ]; then
+  exec sudo -n "$0" "$@"
+fi
+
+SOCK=/var/run/docker.sock
+PIDFILE=/var/run/docker.pid
+LOG=/var/log/junior-dockerd.log
+
+is_ready() {
+  [ -S "$SOCK" ] && /usr/bin/docker info >/dev/null 2>&1
+}
+
+if is_ready; then
+  chmod 666 "$SOCK" 2>/dev/null || true
+  exit 0
+fi
+
+mkdir -p /etc/docker /var/lib/docker /var/run /var/log
+if [ ! -f /etc/docker/daemon.json ]; then
+  cat > /etc/docker/daemon.json <<'EOF'
+{
+  "storage-driver": "overlay2",
+  "live-restore": false
+}
+EOF
+fi
+
+if [ -f "$PIDFILE" ]; then
+  oldpid="$(cat "$PIDFILE" 2>/dev/null || true)"
+  if [ -n "\${oldpid:-}" ] && ! kill -0 "$oldpid" 2>/dev/null; then
+    rm -f "$PIDFILE"
+  fi
+fi
+
+if [ ! -f "$PIDFILE" ] || ! kill -0 "$(cat "$PIDFILE" 2>/dev/null)" 2>/dev/null; then
+  # dockerd must outlive this helper; nohup + background is intentional.
+  nohup dockerd --host="unix://$SOCK" --pidfile="$PIDFILE" >"$LOG" 2>&1 &
+fi
+
+i=0
+while [ "$i" -lt 50 ]; do
+  if is_ready; then
+    chmod 666 "$SOCK" 2>/dev/null || true
+    exit 0
+  fi
+  i=$((i + 1))
+  sleep 0.1
+done
+
+echo "junior-ensure-docker: dockerd failed to become ready" >&2
+if [ -f "$LOG" ]; then
+  tail -n 50 "$LOG" >&2 || true
+fi
+exit 1
+`;
+var DOCKER_CLI_WRAPPER_SCRIPT = `#!/bin/sh
+set -eu
+if command -v junior-ensure-docker >/dev/null 2>&1; then
+  junior-ensure-docker
+fi
+exec /usr/bin/docker "$@"
+`;
+var DOCKER_COMPOSE_CLI_WRAPPER_SCRIPT = `#!/bin/sh
+set -eu
+if command -v junior-ensure-docker >/dev/null 2>&1; then
+  junior-ensure-docker
+fi
+exec /usr/local/libexec/junior-docker-compose "$@"
+`;
+async function ensureDockerDaemon(sandbox, signal) {
+  await runNonInteractiveCommand(sandbox, {
+    cmd: "sh",
+    args: [
+      "-c",
+      "command -v junior-ensure-docker >/dev/null 2>&1 && junior-ensure-docker || true"
+    ],
+    signal
+  });
+}
+
 // src/chat/sandbox/runtime-dependencies.ts
 var GLOBAL_RUNTIME_DEPENDENCIES = [
   { type: "system", package: "docker" },
   { type: "system", package: "spal-release" },
   { type: "system", package: "ripgrep" }
 ];
+function writeFileCommand(path, contents, mode = "0644") {
+  const payload = Buffer.from(contents, "utf8").toString("base64");
+  return [
+    `printf '%s' '${payload}' | base64 -d > ${path}`,
+    `chmod ${mode} ${path}`
+  ].join("\n");
+}
+function writeExecutableCommand(path, contents) {
+  return writeFileCommand(path, contents, "0755");
+}
 var GLOBAL_RUNTIME_POSTINSTALL = [
   {
     cmd: "sh",
@@ -72,9 +243,35 @@ var GLOBAL_RUNTIME_POSTINSTALL = [
         `trap 'rm -f "$tmp"' EXIT`,
         'curl --fail --location --silent --show-error "https://github.com/docker/compose/releases/download/v2.39.4/docker-compose-linux-${asset}" --output "$tmp"',
         'echo "${sha256}  ${tmp}" | sha256sum --check --status',
-        'install -D -m 0755 "$tmp" /usr/local/bin/docker-compose',
-        "mkdir -p /usr/local/lib/docker/cli-plugins",
-        "ln -sf /usr/local/bin/docker-compose /usr/local/lib/docker/cli-plugins/docker-compose"
+        // Keep the real Compose binary off PATH; the wrapper below starts dockerd.
+        'install -D -m 0755 "$tmp" /usr/local/libexec/junior-docker-compose',
+        "mkdir -p /usr/local/lib/docker/cli-plugins /usr/local/libexec /etc/docker /usr/local/bin",
+        `mkdir -p ${SANDBOX_WORKSPACE_ROOT}/.junior/bin`,
+        writeFileCommand("/etc/docker/daemon.json", DOCKER_DAEMON_JSON),
+        writeExecutableCommand(
+          "/usr/local/bin/junior-ensure-docker",
+          DOCKER_ENSURE_SCRIPT
+        ),
+        // docker compose plugin delegates to the real Compose binary.
+        "ln -sfn /usr/local/libexec/junior-docker-compose /usr/local/lib/docker/cli-plugins/docker-compose",
+        // PATH wrappers auto-start dockerd for both CLI entrypoints.
+        writeExecutableCommand(
+          "/usr/local/bin/docker-compose",
+          DOCKER_COMPOSE_CLI_WRAPPER_SCRIPT
+        ),
+        writeExecutableCommand(
+          `${SANDBOX_WORKSPACE_ROOT}/.junior/bin/docker`,
+          DOCKER_CLI_WRAPPER_SCRIPT
+        ),
+        writeExecutableCommand(
+          `${SANDBOX_WORKSPACE_ROOT}/.junior/bin/docker-compose`,
+          DOCKER_COMPOSE_CLI_WRAPPER_SCRIPT
+        ),
+        // Prefer the wrapper over /usr/bin/docker for non-login shells too.
+        writeExecutableCommand(
+          "/usr/local/bin/docker",
+          DOCKER_CLI_WRAPPER_SCRIPT
+        )
       ].join("\n")
     ],
     sudo: true
@@ -176,76 +373,6 @@ function getVercelSandboxCredentials() {
   return void 0;
 }
 
-// src/chat/sandbox/noninteractive-command.ts
-var NON_INTERACTIVE_ENV = {
-  CI: "1",
-  TERM: "dumb",
-  NO_COLOR: "1",
-  PAGER: "cat",
-  GIT_PAGER: "cat",
-  GH_PROMPT_DISABLED: "1",
-  GH_NO_UPDATE_NOTIFIER: "1",
-  GH_NO_EXTENSION_UPDATE_NOTIFIER: "1",
-  GH_SPINNER_DISABLED: "1",
-  GIT_TERMINAL_PROMPT: "0",
-  GCM_INTERACTIVE: "never",
-  DEBIAN_FRONTEND: "noninteractive",
-  // Git credential isolation: prevent git from sending its own auth so the
-  // sandbox egress proxy's header transforms are the sole credential source.
-  GIT_ASKPASS: "/bin/true",
-  GIT_CONFIG_NOSYSTEM: "1",
-  GIT_CONFIG_COUNT: "2",
-  GIT_CONFIG_KEY_0: "credential.helper",
-  GIT_CONFIG_VALUE_0: "",
-  GIT_CONFIG_KEY_1: "http.emptyAuth",
-  GIT_CONFIG_VALUE_1: "true"
-};
-function shellQuote(value) {
-  return `'${value.replace(/'/g, "'\\''")}'`;
-}
-function buildEnvExports(options) {
-  const lines = [];
-  if (options.pathPrefix) {
-    lines.push(`export PATH="${options.pathPrefix}"`);
-  }
-  for (const [key, value] of Object.entries(NON_INTERACTIVE_ENV)) {
-    lines.push(`export ${key}=${shellQuote(value)}`);
-  }
-  for (const [key, value] of Object.entries(options.env ?? {})) {
-    lines.push(`export ${key}=${shellQuote(value)}`);
-  }
-  return lines;
-}
-function buildCommandScript(input) {
-  return [shellQuote(input.cmd), ...(input.args ?? []).map(shellQuote)].join(
-    " "
-  );
-}
-function buildNonInteractiveShellScript(script, options = {}) {
-  return [...buildEnvExports(options), "exec </dev/null", script].join(" && ");
-}
-function buildNonInteractiveCommand(input) {
-  return {
-    cmd: "bash",
-    args: [
-      input.login ? "-lc" : "-c",
-      buildNonInteractiveShellScript(buildCommandScript(input), {
-        env: input.env,
-        pathPrefix: input.pathPrefix
-      })
-    ]
-  };
-}
-async function runNonInteractiveCommand(sandbox, input) {
-  const command = {
-    ...buildNonInteractiveCommand(input),
-    ...input.cwd ? { cwd: input.cwd } : {},
-    ...input.signal ? { signal: input.signal } : {},
-    ...input.sudo !== void 0 ? { sudo: input.sudo } : {}
-  };
-  return await sandbox.runCommand(command);
-}
-
 // src/chat/sandbox/snapshot/span.ts
 async function trace(name, op, attributes, callback) {
   return await withSpan(name, op, {}, callback, attributes);
@@ -1076,6 +1203,7 @@ export {
   wrapSandboxSetupError,
   throwSandboxOperationError,
   getVercelSandboxCredentials,
+  ensureDockerDaemon,
   getSandboxResourceConfig,
   setSandboxResourceConfig,
   getSandboxResources,

package/dist/{chunk-4YQ6I6VF.js → chunk-BOLJOV5T.js}

@@ -1,31 +1,6 @@
 import {
   getChatConfig
-} from "./chunk-XCZ6COFO.js";
-
-// src/chat/sandbox/paths.ts
-function normalizeWorkspaceRoot(input) {
-  const candidate = (input ?? "").trim();
-  if (!candidate) {
-    return "/vercel/sandbox";
-  }
-  const normalized = candidate.replace(/\/+$/, "");
-  return normalized.startsWith("/") ? normalized : `/${normalized}`;
-}
-var SANDBOX_WORKSPACE_ROOT = normalizeWorkspaceRoot(
-  process.env.VERCEL_SANDBOX_WORKSPACE_DIR
-);
-var SANDBOX_SKILLS_ROOT = `${SANDBOX_WORKSPACE_ROOT}/skills`;
-var SANDBOX_DATA_ROOT = `${SANDBOX_WORKSPACE_ROOT}/data`;
-function sandboxSkillDir(skillName) {
-  return `${SANDBOX_SKILLS_ROOT}/${skillName}`;
-}
-function sandboxSkillFile(skillName) {
-  return `${sandboxSkillDir(skillName)}/SKILL.md`;
-}
-function sandboxSkillPathResolution(skillName) {
-  const skillDir = sandboxSkillDir(skillName);
-  return `Resolve relative paths in this skill against ${skillDir}. For bash commands from this skill, cd to ${skillDir} first or use absolute paths.`;
-}
+} from "./chunk-BYW4B4PR.js";
 
 // src/chat/state/adapter.ts
 import { createMemoryState } from "@chat-adapter/state-memory";
@@ -296,38 +271,9 @@ async function disconnectStateAdapter() {
   }
 }
 
-// src/chat/sleep.ts
-function sleep(ms, signal) {
-  if (!signal) {
-    return new Promise((resolve) => setTimeout(resolve, ms));
-  }
-  return new Promise((resolve, reject) => {
-    if (signal.aborted) {
-      reject(signal.reason);
-      return;
-    }
-    const timeoutId = setTimeout(() => {
-      signal.removeEventListener("abort", onAbort);
-      resolve();
-    }, ms);
-    const onAbort = () => {
-      clearTimeout(timeoutId);
-      reject(signal.reason);
-    };
-    signal.addEventListener("abort", onAbort, { once: true });
-  });
-}
-
 export {
-  SANDBOX_WORKSPACE_ROOT,
-  SANDBOX_SKILLS_ROOT,
-  SANDBOX_DATA_ROOT,
-  sandboxSkillDir,
-  sandboxSkillFile,
-  sandboxSkillPathResolution,
   acquireActiveLock,
   getDefaultRedisStateAdapterFor,
   getStateAdapter,
-  disconnectStateAdapter,
-  sleep
+  disconnectStateAdapter
 };

package/dist/{chunk-XCZ6COFO.js → chunk-BYW4B4PR.js}

@@ -3,7 +3,7 @@ import {
   toCanonicalInputMessage,
   toCanonicalOutputMessage,
   toGenAiMessagesTraceAttributes
-} from "./chunk-22Z6MGMK.js";
+} from "./chunk-VPZFVJND.js";
 import {
   extractGenAiUsageAttributes,
   logException,
@@ -11,42 +11,7 @@ import {
   normalizeGenAiFinishReason,
   serializeGenAiAttribute,
   withSpan
-} from "./chunk-XWPA5KZF.js";
-
-// src/chat/config.ts
-import { getModel as getModel2 } from "@earendil-works/pi-ai/compat";
-
-// src/chat/optional-string.ts
-function toOptionalTrimmed(value) {
-  if (!value) {
-    return void 0;
-  }
-  const trimmed = value.trim();
-  return trimmed.length > 0 ? trimmed : void 0;
-}
-
-// src/chat/pi/sdk.ts
-import {
-  calculateCost,
-  completeSimple,
-  getEnvApiKey,
-  getModel,
-  getModels,
-  isRetryableAssistantError,
-  registerApiProvider
-} from "@earendil-works/pi-ai/compat";
-import {
-  stream,
-  streamSimple
-} from "@earendil-works/pi-ai/api/anthropic-messages";
-
-// src/chat/pi/client.ts
-import { createGatewayProvider } from "@ai-sdk/gateway";
-import {
-  embedMany,
-  generateObject,
-  NoObjectGeneratedError
-} from "ai";
+} from "./chunk-JNNJZURV.js";
 
 // src/chat/services/provider-error.ts
 var ProviderError = class extends Error {
@@ -230,6 +195,64 @@ function getProviderErrorAttributes(error) {
   };
 }
 
+// src/chat/config.ts
+import { getModel as getModel2 } from "@earendil-works/pi-ai/compat";
+
+// src/chat/optional-string.ts
+function toOptionalTrimmed(value) {
+  if (!value) {
+    return void 0;
+  }
+  const trimmed = value.trim();
+  return trimmed.length > 0 ? trimmed : void 0;
+}
+
+// src/chat/pi/sdk.ts
+import {
+  calculateCost,
+  completeSimple,
+  getEnvApiKey,
+  getModel,
+  getModels,
+  isRetryableAssistantError,
+  registerApiProvider
+} from "@earendil-works/pi-ai/compat";
+import {
+  stream,
+  streamSimple
+} from "@earendil-works/pi-ai/api/anthropic-messages";
+
+// src/chat/pi/client.ts
+import { createGatewayProvider } from "@ai-sdk/gateway";
+
+// src/chat/pi/gateway-auth.ts
+import { getVercelOidcToken } from "@vercel/oidc";
+var MISSING_GATEWAY_CREDENTIALS_ERROR = "Missing AI gateway credentials (enable Vercel OIDC or set AI_GATEWAY_API_KEY)";
+async function resolveGatewayCredential() {
+  try {
+    const oidcToken = toOptionalTrimmed(await getVercelOidcToken());
+    if (oidcToken) {
+      return { mode: "oidc", token: oidcToken };
+    }
+  } catch {
+  }
+  const apiKey = toOptionalTrimmed(getEnvApiKey("vercel-ai-gateway"));
+  if (apiKey) {
+    return { mode: "api_key", token: apiKey };
+  }
+  return void 0;
+}
+async function getGatewayApiKey() {
+  return (await resolveGatewayCredential())?.token;
+}
+
+// src/chat/pi/client.ts
+import {
+  embedMany,
+  generateObject,
+  NoObjectGeneratedError
+} from "ai";
+
 // src/chat/xml.ts
 function escapeXml(value) {
   return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&apos;");
@@ -332,17 +355,10 @@ var EMBEDDING_INPUT_COST_USD_PER_MILLION_TOKENS = {
   "voyage/voyage-3.5": 0.06,
   "voyage/voyage-3.5-lite": 0.02
 };
-var MISSING_GATEWAY_CREDENTIALS_ERROR = "Missing AI gateway credentials (AI_GATEWAY_API_KEY or VERCEL_OIDC_TOKEN)";
 function embeddingCostUsd(modelId, inputTokens) {
   const costPerMillionTokens = EMBEDDING_INPUT_COST_USD_PER_MILLION_TOKENS[modelId];
   return costPerMillionTokens === void 0 ? void 0 : inputTokens * costPerMillionTokens / 1e6;
 }
-function getGatewayApiKey() {
-  return toOptionalTrimmed(getEnvApiKey("vercel-ai-gateway")) ?? toOptionalTrimmed(process.env.VERCEL_OIDC_TOKEN);
-}
-function getPiGatewayApiKey() {
-  return getGatewayApiKey();
-}
 function extractText(message) {
   return (message.content ?? []).filter((part) => part.type === "text" && typeof part.text === "string").map((part) => part.text ?? "").join("").trim();
 }
@@ -357,8 +373,9 @@ function resolveGatewayModel(modelId) {
 }
 async function completeText(params) {
   const model = resolveGatewayModel(params.modelId);
-  const apiKey = getPiGatewayApiKey();
-  const authMode = toOptionalTrimmed(process.env.AI_GATEWAY_API_KEY) ? "api_key" : toOptionalTrimmed(process.env.VERCEL_OIDC_TOKEN) ? "oidc" : "api_key";
+  const credential = await resolveGatewayCredential();
+  const apiKey = credential?.token;
+  const authMode = credential?.mode ?? "api_key";
   const effectivePrivacy = getCurrentConversationPrivacy() ?? "private";
   const messageAttributeMode = params.messageAttributeMode ?? (effectivePrivacy === "public" ? "content" : "metadata");
   const requestMessagesAttribute = messageAttributeMode === "content" ? serializeGenAiAttribute(params.messages.map(toCanonicalInputMessage)) : void 0;
@@ -490,8 +507,10 @@ function bestEffortObjectCompletionCost(modelId, usage) {
   }
 }
 async function completeObject(params) {
-  const apiKey = getGatewayApiKey();
-  const provider = createGatewayProvider(apiKey ? { apiKey } : {});
+  const credential = await resolveGatewayCredential();
+  const provider = createGatewayProvider(
+    credential ? { apiKey: credential.token } : {}
+  );
   let result;
   try {
     result = await withSpan(
@@ -528,6 +547,7 @@ async function completeObject(params) {
         "gen_ai.output.type": "json",
         "server.address": GEN_AI_SERVER_ADDRESS,
         "server.port": GEN_AI_SERVER_PORT,
+        "gen_ai.provider.auth_mode": credential?.mode ?? "api_key",
         ...params.thinkingLevel ? { "gen_ai.request.reasoning.level": params.thinkingLevel } : {},
         ...params.temperature !== void 0 ? { "gen_ai.request.temperature": params.temperature } : {},
         ...params.maxTokens !== void 0 ? { "gen_ai.request.max_tokens": params.maxTokens } : {}
@@ -551,8 +571,10 @@ async function embedTexts(params) {
   if (texts.length === 0 || texts.some((text) => text.length === 0)) {
     throw new Error("Embedding text is required.");
   }
-  const apiKey = getGatewayApiKey();
-  const provider = createGatewayProvider(apiKey ? { apiKey } : {});
+  const credential = await resolveGatewayCredential();
+  const provider = createGatewayProvider(
+    credential ? { apiKey: credential.token } : {}
+  );
   try {
     const result = await withSpan(
       `${GEN_AI_OPERATION_EMBEDDINGS} ${params.modelId}`,
@@ -591,7 +613,8 @@ async function embedTexts(params) {
         "gen_ai.operation.name": GEN_AI_OPERATION_EMBEDDINGS,
         "gen_ai.request.model": params.modelId,
         "server.address": GEN_AI_SERVER_ADDRESS,
-        "server.port": GEN_AI_SERVER_PORT
+        "server.port": GEN_AI_SERVER_PORT,
+        "gen_ai.provider.auth_mode": credential?.mode ?? "api_key"
       }
     );
     return {
@@ -756,6 +779,16 @@ function parseSlashCommand(rawValue) {
   }
   return command;
 }
+function parseConversationWorkEnabled(rawValue) {
+  const value = toOptionalTrimmed(rawValue)?.toLowerCase();
+  if (value === void 0 || value === "true") {
+    return true;
+  }
+  if (value === "false") {
+    return false;
+  }
+  throw new Error("JUNIOR_CONVERSATION_WORK_ENABLED must be true or false");
+}
 function parseCrossActorMidRunMode(rawValue) {
   const value = toOptionalTrimmed(rawValue) ?? "follow_up";
   if (value === "follow_up" || value === "steer") {
@@ -926,6 +959,9 @@ function readChatConfig(env = process.env, functionMaxDurationSeconds = DEFAULT_
   return {
     bot: readBotConfig(env, resolvedFunctionMaxDurationSeconds),
     functionMaxDurationSeconds: resolvedFunctionMaxDurationSeconds,
+    conversationWorkEnabled: parseConversationWorkEnabled(
+      env.JUNIOR_CONVERSATION_WORK_ENABLED
+    ),
     conversationWorkSoftYieldAfterMs: resolveConversationWorkSoftYieldAfterMs(
       resolvedFunctionMaxDurationSeconds
     ),
@@ -1008,6 +1044,9 @@ function setSlackReactionConfig(overrides) {
 
 export {
   toOptionalTrimmed,
+  MISSING_GATEWAY_CREDENTIALS_ERROR,
+  resolveGatewayCredential,
+  getGatewayApiKey,
   ProviderError,
   createProviderError,
   isProviderRetryError,
@@ -1025,9 +1064,6 @@ export {
   GEN_AI_PROVIDER_NAME,
   GEN_AI_SERVER_ADDRESS,
   GEN_AI_SERVER_PORT,
-  MISSING_GATEWAY_CREDENTIALS_ERROR,
-  getGatewayApiKey,
-  getPiGatewayApiKey,
   resolveGatewayModel,
   completeText,
   completeObject,

package/dist/{chunk-JQRTXJHD.js → chunk-C7ZVPO4Z.js}

@@ -1,7 +1,7 @@
 // package.json
 var package_default = {
   name: "@sentry/junior",
-  version: "0.136.1",
+  version: "0.138.0",
   private: false,
   publishConfig: {
     access: "public"
@@ -81,6 +81,7 @@ var package_default = {
     "@sinclair/typebox": "^0.34.49",
     "@slack/web-api": "^7.16.0",
     "@vercel/functions": "^3.6.0",
+    "@vercel/oidc": "^3.4.1",
     "@vercel/queue": "^0.2.0",
     "@vercel/sandbox": "2.8.0",
     ai: "^6.0.190",