@sentry/junior 0.146.0 → 0.147.0

package/dist/{chunk-47OSH2ZO.js → chunk-Q4R73I43.js}

@@ -1,30 +1,34 @@
 import {
   resolveBaseUrl
-} from "./chunk-ZDGHGY74.js";
+} from "./chunk-7UQIVT6G.js";
 import {
   createPluginLogger,
   getPlugins
-} from "./chunk-SCGVWUZX.js";
+} from "./chunk-YHDERDRO.js";
+import {
+  getSlackClient,
+  withSlackRetries
+} from "./chunk-SGZO7UWH.js";
 import {
   getDb,
   parseDestination
-} from "./chunk-37EVZP66.js";
+} from "./chunk-YSB2N563.js";
 import {
   sleep
 } from "./chunk-EM225ITJ.js";
 import {
   acquireActiveLock,
   getStateAdapter
-} from "./chunk-GYEKOX7N.js";
+} from "./chunk-ORO3PWKQ.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-PB222GIA.js";
+} from "./chunk-JUUKWRBE.js";
 import {
   fetchWithBoundedOAuthErrorBodies
-} from "./chunk-37JJDS4H.js";
+} from "./chunk-GGB4WL5A.js";
 import {
   isRecord
-} from "./chunk-B63BF443.js";
+} from "./chunk-4LJO56OJ.js";
 
 // src/chat/capabilities/router.ts
 var ProviderCredentialRouter = class {
@@ -209,6 +213,349 @@ function getMcpAwareTelemetryMessage(error, _privacy) {
   return getMcpAwareErrorMessage(error);
 }
 
+// src/chat/slack/users.ts
+function normalizeUser(raw) {
+  const rawFields = raw.profile?.fields;
+  const profileFields = [];
+  if (rawFields && typeof rawFields === "object") {
+    for (const [id, field] of Object.entries(rawFields)) {
+      if (!field) continue;
+      profileFields.push({
+        id,
+        label: field.label || void 0,
+        value: field.value || void 0,
+        alt: field.alt || void 0
+      });
+    }
+  }
+  return {
+    id: raw.id ?? "",
+    team_id: raw.team_id || void 0,
+    name: raw.name || void 0,
+    real_name: raw.real_name || raw.profile?.real_name || void 0,
+    display_name: raw.profile?.display_name || void 0,
+    title: raw.profile?.title || void 0,
+    email: raw.profile?.email || void 0,
+    status_text: raw.profile?.status_text ?? void 0,
+    status_emoji: raw.profile?.status_emoji ?? void 0,
+    is_bot: raw.is_bot ?? false,
+    is_deleted: raw.deleted ?? false,
+    timezone: raw.tz || void 0,
+    ...profileFields.length > 0 ? { profile_fields: profileFields } : {}
+  };
+}
+async function lookupSlackUserProfile(userId) {
+  const client = getSlackClient();
+  const result = await withSlackRetries(
+    () => client.users.info({ user: userId }),
+    3,
+    { action: "users.info" }
+  );
+  const user = result.user;
+  if (!user) {
+    throw new Error(`Slack users.info returned no user for ${userId}`);
+  }
+  return normalizeUser(user);
+}
+async function lookupSlackUserByEmail(email) {
+  const client = getSlackClient();
+  let result;
+  try {
+    result = await withSlackRetries(
+      () => client.users.lookupByEmail({ email }),
+      3,
+      { action: "users.lookupByEmail" }
+    );
+  } catch (error) {
+    const apiError = error.apiError;
+    if (apiError === "users_not_found") {
+      return null;
+    }
+    throw error;
+  }
+  const user = result.user;
+  if (!user) {
+    return null;
+  }
+  return normalizeUser(user);
+}
+function scoreMatch(user, queryLower) {
+  const name = (user.name ?? "").toLowerCase();
+  const realName = (user.real_name ?? user.profile?.real_name ?? "").toLowerCase();
+  const displayName = (user.profile?.display_name ?? "").toLowerCase();
+  if (name === queryLower || displayName === queryLower) return 100;
+  if (realName === queryLower) return 90;
+  if (name.startsWith(queryLower) || displayName.startsWith(queryLower))
+    return 70;
+  if (realName.startsWith(queryLower)) return 60;
+  const realNameWords = realName.split(/\s+/);
+  if (realNameWords.some((w) => w === queryLower)) return 55;
+  if (realNameWords.some((w) => w.startsWith(queryLower))) return 50;
+  if (name.includes(queryLower) || displayName.includes(queryLower)) return 30;
+  if (realName.includes(queryLower)) return 20;
+  return 0;
+}
+async function listWorkspaceUsers(options) {
+  const client = getSlackClient();
+  const matches = [];
+  let cursor;
+  let pages = 0;
+  let totalScanned = 0;
+  while (pages < options.maxPages) {
+    pages++;
+    const result = await withSlackRetries(
+      () => client.users.list({
+        limit: 200,
+        ...cursor ? { cursor } : {}
+      }),
+      3,
+      { action: "users.list" }
+    );
+    const members = result.members ?? [];
+    totalScanned += members.length;
+    for (const member of members) {
+      if (!options.includeDeleted && member.deleted) continue;
+      if (!options.includeBots && member.is_bot) continue;
+      if (member.id === "USLACKBOT") continue;
+      const score = options.score(member);
+      if (score <= 0) continue;
+      matches.push({ user: member, score });
+    }
+    const nextCursor = result.response_metadata?.next_cursor;
+    if (!nextCursor) {
+      cursor = void 0;
+      break;
+    }
+    cursor = nextCursor;
+  }
+  return {
+    matches,
+    searched_pages: pages,
+    searched_user_count: totalScanned,
+    // True only when we hit the page cap with more data remaining.
+    truncated: pages >= options.maxPages && Boolean(cursor)
+  };
+}
+async function searchSlackUsers(options) {
+  const {
+    query,
+    limit = 10,
+    maxPages = 3,
+    includeDeleted = false,
+    includeBots = false
+  } = options;
+  const queryLower = query.toLowerCase().trim();
+  const listed = await listWorkspaceUsers({
+    maxPages,
+    includeDeleted,
+    includeBots,
+    score: (member) => scoreMatch(member, queryLower)
+  });
+  listed.matches.sort((a, b) => {
+    if (b.score !== a.score) return b.score - a.score;
+    return (a.user.name ?? "").localeCompare(b.user.name ?? "");
+  });
+  return {
+    users: listed.matches.slice(0, limit).map((m) => normalizeUser(m.user)),
+    searched_pages: listed.searched_pages,
+    searched_user_count: listed.searched_user_count,
+    truncated: listed.truncated
+  };
+}
+
+// src/chat/plugins/credential-hooks.ts
+import {
+  pluginAuthorizationSchema,
+  pluginCredentialResultSchema,
+  pluginGrantSchema,
+  pluginProviderAccountSchema
+} from "@sentry/junior-plugin-api";
+function parseSchema(schema, value, message) {
+  const result = schema.safeParse(value);
+  if (!result.success) {
+    throw new Error(message);
+  }
+  return result.data;
+}
+function parseAuthorization(value, pluginName) {
+  if (value === void 0) {
+    return void 0;
+  }
+  const authorization = parseSchema(
+    pluginAuthorizationSchema,
+    value,
+    `Plugin "${pluginName}" grant authorization is invalid`
+  );
+  if (authorization.provider !== pluginName) {
+    throw new Error(
+      `Plugin "${pluginName}" grant authorization provider must match the issuing plugin`
+    );
+  }
+  return authorization;
+}
+function parseGrant(value, pluginName) {
+  return parseSchema(
+    pluginGrantSchema,
+    value,
+    `Plugin "${pluginName}" grantForEgress returned an invalid grant`
+  );
+}
+function pluginFor(provider) {
+  return getPlugins().find((candidate) => candidate.manifest.name === provider);
+}
+function basePluginContext(plugin) {
+  const pluginName = plugin.manifest.name;
+  return {
+    plugin: { name: pluginName },
+    log: createPluginLogger(pluginName),
+    db: getDb()
+  };
+}
+function parseCredentialResult(value, pluginName) {
+  const result = parseSchema(
+    pluginCredentialResultSchema,
+    value,
+    `Plugin "${pluginName}" issueCredential result is invalid`
+  );
+  if (result.type === "lease") {
+    parseAuthorization(result.lease.authorization, pluginName);
+    return result;
+  }
+  if (result.type === "unavailable") {
+    return result;
+  }
+  parseAuthorization(result.authorization, pluginName);
+  return result;
+}
+async function selectPluginGrant(input) {
+  const plugin = pluginFor(input.provider);
+  const hook = plugin?.hooks?.grantForEgress;
+  if (!plugin || !hook) {
+    return void 0;
+  }
+  const result = await hook({
+    ...basePluginContext(plugin),
+    request: {
+      ...input.bodyText !== void 0 ? { bodyText: input.bodyText } : {},
+      method: input.method,
+      ...input.operation ? { operation: input.operation } : {},
+      url: input.upstreamUrl.toString()
+    }
+  });
+  return result === void 0 ? void 0 : parseGrant(result, plugin.manifest.name);
+}
+async function onPluginEgressResponse(input) {
+  const plugin = pluginFor(input.provider);
+  const hook = plugin?.hooks?.onEgressResponse;
+  if (!plugin || !hook) {
+    return {};
+  }
+  let permissionDenied;
+  await hook({
+    ...basePluginContext(plugin),
+    grant: input.grant,
+    permissionDenied(message) {
+      const trimmed = message.trim();
+      if (!trimmed) {
+        throw new Error(
+          `Plugin "${plugin.manifest.name}" onEgressResponse permissionDenied message is empty`
+        );
+      }
+      permissionDenied = { message: trimmed };
+    },
+    request: {
+      method: input.method,
+      ...input.operation ? { operation: input.operation } : {},
+      url: input.upstreamUrl.toString()
+    },
+    response: input.response
+  });
+  return permissionDenied ? { permissionDenied } : {};
+}
+function hasEgressCredentialHooks(provider) {
+  const hooks = pluginFor(provider)?.hooks;
+  return Boolean(hooks?.grantForEgress || hooks?.issueCredential);
+}
+function getOAuthAccountProviders() {
+  return getPlugins().filter((plugin) => Boolean(plugin.hooks?.resolveOAuthAccount)).map((plugin) => plugin.manifest.name);
+}
+async function resolvePluginOAuthAccount(input) {
+  const plugin = pluginFor(input.provider);
+  const hook = plugin?.hooks?.resolveOAuthAccount;
+  if (!plugin || !hook) {
+    return void 0;
+  }
+  const account = await hook({
+    ...basePluginContext(plugin),
+    tokens: input.tokens
+  });
+  return account === void 0 ? void 0 : parseSchema(
+    pluginProviderAccountSchema,
+    account,
+    `Plugin "${plugin.manifest.name}" resolveOAuthAccount returned an invalid account`
+  );
+}
+async function issuePluginCredential(input) {
+  const plugin = pluginFor(input.provider);
+  const hook = plugin?.hooks?.issueCredential;
+  if (!plugin || !hook) {
+    throw new Error(`Plugin "${input.provider}" has no issueCredential hook`);
+  }
+  const currentUserId = "type" in input.actor ? input.actor.userId : void 0;
+  const credentialSubjectUserId = input.credentialSubject?.userId;
+  const result = await hook({
+    ...basePluginContext(plugin),
+    actor: input.actor,
+    grant: input.grant,
+    ...input.credentialSubject ? { credentialSubject: input.credentialSubject } : {},
+    tokens: {
+      ...currentUserId ? {
+        currentUser: {
+          userId: currentUserId,
+          get: async () => await input.userTokenStore.get(
+            currentUserId,
+            plugin.manifest.name
+          ),
+          set: async (tokens) => {
+            await input.userTokenStore.set(
+              currentUserId,
+              plugin.manifest.name,
+              tokens
+            );
+          },
+          withRefresh: async (callback) => await input.userTokenStore.withRefresh(
+            currentUserId,
+            plugin.manifest.name,
+            callback
+          )
+        }
+      } : {},
+      ...credentialSubjectUserId ? {
+        credentialSubject: {
+          userId: credentialSubjectUserId,
+          get: async () => await input.userTokenStore.get(
+            credentialSubjectUserId,
+            plugin.manifest.name
+          ),
+          set: async (tokens) => {
+            await input.userTokenStore.set(
+              credentialSubjectUserId,
+              plugin.manifest.name,
+              tokens
+            );
+          },
+          withRefresh: async (callback) => await input.userTokenStore.withRefresh(
+            credentialSubjectUserId,
+            plugin.manifest.name,
+            callback
+          )
+        }
+      } : {}
+    }
+  });
+  return parseCredentialResult(result, plugin.manifest.name);
+}
+
 // src/chat/mcp/auth-store.ts
 import {
   sourceSchema
@@ -284,7 +631,6 @@ function parseMcpAuthSession(value) {
       ...typeof parsed.threadTs === "string" ? { threadTs: parsed.threadTs } : {},
       ...typeof parsed.toolChannelId === "string" ? { toolChannelId: parsed.toolChannelId } : {},
       ...isRecord(parsed.configuration) ? { configuration: parsed.configuration } : {},
-      ...isRecord(parsed.artifactState) ? { artifactState: parsed.artifactState } : {},
       ...typeof parsed.authorizationUrl === "string" ? { authorizationUrl: parsed.authorizationUrl } : {},
       ...typeof parsed.codeVerifier === "string" ? { codeVerifier: parsed.codeVerifier } : {}
     };
@@ -683,8 +1029,7 @@ async function createMcpOAuthClientProvider(input) {
       ...input.channelId ? { channelId: input.channelId } : {},
       ...input.threadTs ? { threadTs: input.threadTs } : {},
       ...input.toolChannelId ? { toolChannelId: input.toolChannelId } : {},
-      ...input.configuration ? { configuration: input.configuration } : {},
-      ...input.artifactState ? { artifactState: input.artifactState } : {}
+      ...input.configuration ? { configuration: input.configuration } : {}
     }
   );
 }
@@ -758,196 +1103,6 @@ async function finalizeMcpAuthorization(provider, authSessionId, authorizationCo
   return nextSession;
 }
 
-// src/chat/plugins/credential-hooks.ts
-import {
-  pluginAuthorizationSchema,
-  pluginCredentialResultSchema,
-  pluginGrantSchema,
-  pluginProviderAccountSchema
-} from "@sentry/junior-plugin-api";
-function parseSchema(schema, value, message) {
-  const result = schema.safeParse(value);
-  if (!result.success) {
-    throw new Error(message);
-  }
-  return result.data;
-}
-function parseAuthorization(value, pluginName) {
-  if (value === void 0) {
-    return void 0;
-  }
-  const authorization = parseSchema(
-    pluginAuthorizationSchema,
-    value,
-    `Plugin "${pluginName}" grant authorization is invalid`
-  );
-  if (authorization.provider !== pluginName) {
-    throw new Error(
-      `Plugin "${pluginName}" grant authorization provider must match the issuing plugin`
-    );
-  }
-  return authorization;
-}
-function parseGrant(value, pluginName) {
-  return parseSchema(
-    pluginGrantSchema,
-    value,
-    `Plugin "${pluginName}" grantForEgress returned an invalid grant`
-  );
-}
-function pluginFor(provider) {
-  return getPlugins().find((candidate) => candidate.manifest.name === provider);
-}
-function basePluginContext(plugin) {
-  const pluginName = plugin.manifest.name;
-  return {
-    plugin: { name: pluginName },
-    log: createPluginLogger(pluginName),
-    db: getDb()
-  };
-}
-function parseCredentialResult(value, pluginName) {
-  const result = parseSchema(
-    pluginCredentialResultSchema,
-    value,
-    `Plugin "${pluginName}" issueCredential result is invalid`
-  );
-  if (result.type === "lease") {
-    parseAuthorization(result.lease.authorization, pluginName);
-    return result;
-  }
-  if (result.type === "unavailable") {
-    return result;
-  }
-  parseAuthorization(result.authorization, pluginName);
-  return result;
-}
-async function selectPluginGrant(input) {
-  const plugin = pluginFor(input.provider);
-  const hook = plugin?.hooks?.grantForEgress;
-  if (!plugin || !hook) {
-    return void 0;
-  }
-  const result = await hook({
-    ...basePluginContext(plugin),
-    request: {
-      ...input.bodyText !== void 0 ? { bodyText: input.bodyText } : {},
-      method: input.method,
-      ...input.operation ? { operation: input.operation } : {},
-      url: input.upstreamUrl.toString()
-    }
-  });
-  return result === void 0 ? void 0 : parseGrant(result, plugin.manifest.name);
-}
-async function onPluginEgressResponse(input) {
-  const plugin = pluginFor(input.provider);
-  const hook = plugin?.hooks?.onEgressResponse;
-  if (!plugin || !hook) {
-    return {};
-  }
-  let permissionDenied;
-  await hook({
-    ...basePluginContext(plugin),
-    grant: input.grant,
-    permissionDenied(message) {
-      const trimmed = message.trim();
-      if (!trimmed) {
-        throw new Error(
-          `Plugin "${plugin.manifest.name}" onEgressResponse permissionDenied message is empty`
-        );
-      }
-      permissionDenied = { message: trimmed };
-    },
-    request: {
-      method: input.method,
-      ...input.operation ? { operation: input.operation } : {},
-      url: input.upstreamUrl.toString()
-    },
-    response: input.response
-  });
-  return permissionDenied ? { permissionDenied } : {};
-}
-function hasEgressCredentialHooks(provider) {
-  const hooks = pluginFor(provider)?.hooks;
-  return Boolean(hooks?.grantForEgress || hooks?.issueCredential);
-}
-async function resolvePluginOAuthAccount(input) {
-  const plugin = pluginFor(input.provider);
-  const hook = plugin?.hooks?.resolveOAuthAccount;
-  if (!plugin || !hook) {
-    return void 0;
-  }
-  const account = await hook({
-    ...basePluginContext(plugin),
-    tokens: input.tokens
-  });
-  return account === void 0 ? void 0 : parseSchema(
-    pluginProviderAccountSchema,
-    account,
-    `Plugin "${plugin.manifest.name}" resolveOAuthAccount returned an invalid account`
-  );
-}
-async function issuePluginCredential(input) {
-  const plugin = pluginFor(input.provider);
-  const hook = plugin?.hooks?.issueCredential;
-  if (!plugin || !hook) {
-    throw new Error(`Plugin "${input.provider}" has no issueCredential hook`);
-  }
-  const currentUserId = "type" in input.actor ? input.actor.userId : void 0;
-  const credentialSubjectUserId = input.credentialSubject?.userId;
-  const result = await hook({
-    ...basePluginContext(plugin),
-    actor: input.actor,
-    grant: input.grant,
-    ...input.credentialSubject ? { credentialSubject: input.credentialSubject } : {},
-    tokens: {
-      ...currentUserId ? {
-        currentUser: {
-          userId: currentUserId,
-          get: async () => await input.userTokenStore.get(
-            currentUserId,
-            plugin.manifest.name
-          ),
-          set: async (tokens) => {
-            await input.userTokenStore.set(
-              currentUserId,
-              plugin.manifest.name,
-              tokens
-            );
-          },
-          withRefresh: async (callback) => await input.userTokenStore.withRefresh(
-            currentUserId,
-            plugin.manifest.name,
-            callback
-          )
-        }
-      } : {},
-      ...credentialSubjectUserId ? {
-        credentialSubject: {
-          userId: credentialSubjectUserId,
-          get: async () => await input.userTokenStore.get(
-            credentialSubjectUserId,
-            plugin.manifest.name
-          ),
-          set: async (tokens) => {
-            await input.userTokenStore.set(
-              credentialSubjectUserId,
-              plugin.manifest.name,
-              tokens
-            );
-          },
-          withRefresh: async (callback) => await input.userTokenStore.withRefresh(
-            credentialSubjectUserId,
-            plugin.manifest.name,
-            callback
-          )
-        }
-      } : {}
-    }
-  });
-  return parseCredentialResult(result, plugin.manifest.name);
-}
-
 export {
   createUserTokenStore,
   issueProviderCredentialLease,
@@ -957,6 +1112,15 @@ export {
   McpToolError,
   getMcpAwareErrorType,
   getMcpAwareTelemetryMessage,
+  lookupSlackUserProfile,
+  lookupSlackUserByEmail,
+  searchSlackUsers,
+  selectPluginGrant,
+  onPluginEgressResponse,
+  hasEgressCredentialHooks,
+  getOAuthAccountProviders,
+  resolvePluginOAuthAccount,
+  issuePluginCredential,
   getMcpAuthSession,
   patchMcpAuthSession,
   deleteMcpAuthSession,
@@ -965,10 +1129,5 @@ export {
   deleteMcpStoredOAuthCredentials,
   deleteMcpServerSessionId,
   createMcpOAuthClientProvider,
-  finalizeMcpAuthorization,
-  selectPluginGrant,
-  onPluginEgressResponse,
-  hasEgressCredentialHooks,
-  resolvePluginOAuthAccount,
-  issuePluginCredential
+  finalizeMcpAuthorization
 };

package/dist/{chunk-QG7OOKIN.js → chunk-RXBVB2JM.js}

@@ -1,6 +1,6 @@
 import {
   logWarn
-} from "./chunk-B63BF443.js";
+} from "./chunk-4LJO56OJ.js";
 
 // src/chat/conversation-privacy.ts
 import { AsyncLocalStorage } from "async_hooks";

package/dist/{chunk-V6SRLKUB.js → chunk-SGZO7UWH.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-EM225ITJ.js";
 import {
   getSlackBotToken
-} from "./chunk-MKRIZ4VG.js";
+} from "./chunk-7NVJVJID.js";
 import {
   parseSlackChannelReferenceId
 } from "./chunk-F3B2YJ76.js";
@@ -12,7 +12,7 @@ import {
   setSpanAttributes,
   setSpanStatus,
   withSpan
-} from "./chunk-B63BF443.js";
+} from "./chunk-4LJO56OJ.js";
 
 // src/chat/slack/client.ts
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "async_hooks";

package/dist/{chunk-JLMVCNXL.js → chunk-SVHUEHUL.js}

@@ -242,6 +242,7 @@ var conversationReportTurnRoutedEventDataSchema = z2.object({
   turnId: z2.string().min(1),
   modelProfile: z2.string().min(1),
   modelId: z2.string().min(1),
+  costUsd: z2.number().finite().nonnegative().optional(),
   reasoningLevel: z2.string().min(1),
   confidence: z2.number().min(0).max(1).optional(),
   source: z2.enum(["configured", "inherited", "router"])

package/dist/{chunk-FEKQHPVA.js → chunk-X5UY34KT.js}

@@ -4,24 +4,24 @@ import {
 import {
   formatProviderLabel,
   startOAuthFlow
-} from "./chunk-ZDGHGY74.js";
+} from "./chunk-7UQIVT6G.js";
 import {
   abandonReplacedPendingAuth,
   canReusePendingAuthLink,
   recordAuthorizationRequested
-} from "./chunk-GDQEU4I7.js";
+} from "./chunk-AIOK6LAG.js";
 import {
   parseSandboxEgressAuthRequiredSignal
 } from "./chunk-HUO3UTAQ.js";
 import {
   AGENT_INVOCATION_MAILBOX_STATUSES
-} from "./chunk-MCFIXAV5.js";
+} from "./chunk-DU74WPIC.js";
 import {
   TURN_REASONING_LEVELS
-} from "./chunk-MKRIZ4VG.js";
+} from "./chunk-7NVJVJID.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-PB222GIA.js";
+} from "./chunk-JUUKWRBE.js";
 import {
   credentialContextSchema
 } from "./chunk-RUIXF3YQ.js";
@@ -128,6 +128,7 @@ function createPluginAuthOrchestration(input) {
     if (!reusingPendingLink) {
       const oauthResult = await startOAuthFlow(provider, {
         actorId: input.actorId,
+        ...input.actor ? { actor: input.actor } : {},
         channelId: input.channelId,
         destination: input.destination,
         source: input.source,