@sentry/junior 0.151.0 → 0.153.0

package/dist/{chunk-QVQBWWXQ.js → chunk-2J4VCHRX.js}

@@ -4,30 +4,30 @@ import {
   isConversationScopedChannel,
   isDmChannel,
   normalizeSlackConversationId
-} from "./chunk-AGSUPAD5.js";
+} from "./chunk-JAJVUQV7.js";
 import {
   getConversationEventStore,
   getDb
-} from "./chunk-K3QXMZDU.js";
+} from "./chunk-XAYXN4EG.js";
 import {
   juniorConversationAnnotations,
   juniorConversationEvents,
   juniorIdentities,
   juniorUsers
-} from "./chunk-5N3XLYBW.js";
+} from "./chunk-ET54Q4TD.js";
 import {
   SANDBOX_WORKSPACE_ROOT
 } from "./chunk-EM225ITJ.js";
 import {
   getStateAdapter
-} from "./chunk-YN4W5SRJ.js";
+} from "./chunk-XQPKMLRI.js";
 import {
   botConfig,
   completeObject,
   embedTexts,
   getSlackBotToken,
   standardModelId
-} from "./chunk-D22FO4LW.js";
+} from "./chunk-PGJBNO3I.js";
 import {
   isActorUserId,
   parseActorUserId
@@ -42,7 +42,7 @@ import {
   logInfo,
   logWarn,
   normalizeIdentityEmail
-} from "./chunk-OAPPJ3TM.js";
+} from "./chunk-HMU2QP5M.js";
 
 // src/chat/plugins/agent-hooks.ts
 import {

package/dist/{chunk-J5LAA2LI.js → chunk-2NS3ACHB.js}

@@ -1,7 +1,8 @@
 import {
   coerceThreadConversationState,
-  getPersistedThreadState
-} from "./chunk-EMB4VY7H.js";
+  getPersistedThreadState,
+  persistThreadStateById
+} from "./chunk-ISEROVYZ.js";
 import {
   pluginTaskId,
   pluginTaskParamsSchema,
@@ -17,10 +18,11 @@ import {
   isToolResultError,
   isToolResultMessage,
   markConversationMessage,
+  markTurnClosed,
   markTurnCompleted,
   normalizeToolNameFromResult,
   stripRuntimeTurnContext
-} from "./chunk-JIJOPRD4.js";
+} from "./chunk-5QBK3QHJ.js";
 import {
   JUNIOR_THREAD_STATE_TTL_MS
 } from "./chunk-3Y47VMHV.js";
@@ -31,25 +33,25 @@ import {
   createPluginModel,
   createPluginState,
   getPlugins
-} from "./chunk-QVQBWWXQ.js";
+} from "./chunk-2J4VCHRX.js";
 import {
   getConversationStore,
   getDb,
   sameActorIdentity
-} from "./chunk-K3QXMZDU.js";
+} from "./chunk-XAYXN4EG.js";
 import {
   juniorConversations,
   juniorTaskExecutions
-} from "./chunk-5N3XLYBW.js";
+} from "./chunk-ET54Q4TD.js";
 import {
   getStateAdapter
-} from "./chunk-YN4W5SRJ.js";
+} from "./chunk-XQPKMLRI.js";
 import {
   ProviderError,
   findProviderError,
   getProviderErrorAttributes,
   getProviderErrorUserMessage
-} from "./chunk-D22FO4LW.js";
+} from "./chunk-PGJBNO3I.js";
 import {
   credentialSubjectSchema
 } from "./chunk-RUIXF3YQ.js";
@@ -59,7 +61,7 @@ import {
 import {
   buildTurnFailureResponse,
   logWarn
-} from "./chunk-OAPPJ3TM.js";
+} from "./chunk-HMU2QP5M.js";
 
 // src/chat/runtime/delivered-turn-state.ts
 function buildDeliveredTurnStatePatch(args) {
@@ -85,7 +87,7 @@ import { pluginRunContextSchema } from "@sentry/junior-plugin-api";
 
 // src/chat/services/turn-session-routing.ts
 async function resolveTurnSessionRouting(args) {
-  const conversationStore = args.conversationStore ?? (await import("./db-ALCBI4JZ.js")).getConversationStore();
+  const conversationStore = args.conversationStore ?? (await import("./db-QNQM5YRR.js")).getConversationStore();
   const conversation = await conversationStore.get({
     conversationId: args.conversationId
   });
@@ -1183,6 +1185,36 @@ function getTurnUserReplyAttachmentContext(message) {
   };
 }
 
+// src/chat/runtime/auth-pause-state.ts
+function completeAuthPauseTurn(args) {
+  markConversationMessage(
+    args.conversation,
+    getTurnUserMessageId(args.conversation, args.sessionId),
+    {
+      replied: true,
+      skippedReason: void 0
+    }
+  );
+  markTurnClosed({
+    conversation: args.conversation,
+    nowMs: Date.now(),
+    sessionId: args.sessionId
+  });
+}
+async function persistAuthPauseTurnState(args) {
+  const currentState = await getPersistedThreadState(args.threadStateId);
+  const conversation = coerceThreadConversationState(currentState);
+  await hydrateConversationMessages({
+    conversation,
+    conversationId: args.threadStateId
+  });
+  completeAuthPauseTurn({
+    conversation,
+    sessionId: args.sessionId
+  });
+  await persistThreadStateById(args.threadStateId, { conversation });
+}
+
 export {
   recordTaskExecution,
   readTaskExecutionSummaries,
@@ -1218,5 +1250,7 @@ export {
   getInterruptionMarker,
   requireTurnFailureEventId,
   getAgentTurnDiagnosticsAttributes,
-  finalizeFailedTurnReplyWithEvent
+  finalizeFailedTurnReplyWithEvent,
+  completeAuthPauseTurn,
+  persistAuthPauseTurnState
 };

package/dist/chunk-37LMRT7G.js

@@ -0,0 +1,89 @@
+import {
+  getStateAdapter
+} from "./chunk-XQPKMLRI.js";
+import {
+  getClient
+} from "./chunk-6GWA276C.js";
+
+// src/chat/api-turns/authorization.ts
+import { randomUUID } from "crypto";
+var WEB_AUTHORIZATION_PREFIX = "junior:web_authorization:v1";
+var WEB_AUTHORIZATION_TTL_MS = 24 * 60 * 60 * 1e3;
+function authorizationKey(conversationId, actorId) {
+  return `${WEB_AUTHORIZATION_PREFIX}:${conversationId}:${actorId}`;
+}
+function createWebAuthorization(args) {
+  return {
+    createState: async () => randomUUID(),
+    deliver: async (request) => {
+      await getStateAdapter().set(
+        authorizationKey(args.conversationId, args.actorId),
+        JSON.stringify({ ...request, ...args }),
+        WEB_AUTHORIZATION_TTL_MS
+      );
+    }
+  };
+}
+async function getWebAuthorization(args) {
+  const value = await getStateAdapter().get(
+    authorizationKey(args.conversationId, args.actorId)
+  );
+  if (typeof value !== "string") return void 0;
+  try {
+    const parsed = JSON.parse(value);
+    if (parsed.actorId !== args.actorId || parsed.conversationId !== args.conversationId || typeof parsed.authorizationUrl !== "string" || typeof parsed.label !== "string" || typeof parsed.completionText !== "string") {
+      return void 0;
+    }
+    return parsed;
+  } catch {
+    return void 0;
+  }
+}
+async function deleteWebAuthorization(args) {
+  await getStateAdapter().delete(
+    authorizationKey(args.conversationId, args.actorId)
+  );
+}
+
+// src/chat/sentry-links.ts
+function getSentryOrgSlug() {
+  const slug = process.env.SENTRY_ORG_SLUG?.trim();
+  return slug || void 0;
+}
+function isSentrySaasDsnHost(host) {
+  return host === "sentry.io" || host.endsWith(".sentry.io");
+}
+function buildSentryWebBaseUrl(dsn) {
+  if (isSentrySaasDsnHost(dsn.host)) {
+    return "https://sentry.io";
+  }
+  const port = dsn.port ? `:${dsn.port}` : "";
+  const path = dsn.path ? `/${dsn.path}` : "";
+  return `${dsn.protocol}://${dsn.host}${port}${path}`;
+}
+function buildSentryConversationUrl(conversationId) {
+  const client = getClient();
+  const dsn = client?.getDsn();
+  if (!dsn?.host || !dsn.projectId) {
+    return void 0;
+  }
+  const orgSlug = getSentryOrgSlug();
+  if (!orgSlug) {
+    return void 0;
+  }
+  const encodedId = encodeURIComponent(conversationId);
+  const params = new URLSearchParams();
+  params.set("project", dsn.projectId);
+  const path = `explore/conversations/${encodedId}/?${params.toString()}`;
+  if (isSentrySaasDsnHost(dsn.host)) {
+    return `https://${orgSlug}.sentry.io/${path}`;
+  }
+  return `${buildSentryWebBaseUrl(dsn)}/organizations/${orgSlug}/${path}`;
+}
+
+export {
+  buildSentryConversationUrl,
+  createWebAuthorization,
+  getWebAuthorization,
+  deleteWebAuthorization
+};

package/dist/{chunk-JSKTDBSS.js → chunk-4TWLKHOM.js}

@@ -4,18 +4,18 @@ import {
 } from "./chunk-EM225ITJ.js";
 import {
   getStateAdapter
-} from "./chunk-YN4W5SRJ.js";
+} from "./chunk-XQPKMLRI.js";
 import {
   toOptionalTrimmed
-} from "./chunk-D22FO4LW.js";
+} from "./chunk-PGJBNO3I.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-6DLWRSGV.js";
+} from "./chunk-EPOA52SD.js";
 import {
   setSpanAttributes,
   setSpanStatus,
   withSpan
-} from "./chunk-OAPPJ3TM.js";
+} from "./chunk-HMU2QP5M.js";
 
 // src/chat/sandbox/resources.ts
 var configuredResources;

package/dist/{chunk-ZGSL5ARH.js → chunk-5DMPHA4V.js}

@@ -3,17 +3,15 @@ import {
 } from "./chunk-FA6POGLH.js";
 import {
   getTurnRequestDeadline
-} from "./chunk-H7ZMEHAN.js";
+} from "./chunk-HOK7MEWG.js";
 import {
-  persistAuthPauseTurnState
-} from "./chunk-4ABTAQYC.js";
-import {
-  buildSentryConversationUrl
-} from "./chunk-4CODA7P5.js";
+  buildSentryConversationUrl,
+  deleteWebAuthorization
+} from "./chunk-37LMRT7G.js";
 import {
   ensureConversationWake,
   requestConversationWork
-} from "./chunk-6A46QL4O.js";
+} from "./chunk-A5SROS6H.js";
 import {
   buildDeliveredTurnStatePatch,
   finalizeFailedTurnReplyWithEvent,
@@ -22,10 +20,11 @@ import {
   getTurnUserMessageId,
   getTurnUserReplyAttachmentContext,
   getTurnUserSlackMessageTs,
+  persistAuthPauseTurnState,
   requireTurnFailureEventId,
   resolveTurnSessionRouting,
   scheduleSessionCompletedPluginTasks
-} from "./chunk-J5LAA2LI.js";
+} from "./chunk-2NS3ACHB.js";
 import {
   ConversationTurnLifecycleService,
   coerceThreadConversationState,
@@ -34,7 +33,7 @@ import {
   getPersistedSandboxState,
   getPersistedThreadState,
   persistThreadStateById
-} from "./chunk-EMB4VY7H.js";
+} from "./chunk-ISEROVYZ.js";
 import {
   getVercelConversationWorkQueue
 } from "./chunk-WR76IVA5.js";
@@ -47,7 +46,7 @@ import {
   getMcpStoredOAuthCredentials,
   lookupSlackUserProfile,
   resolvePluginOAuthAccount
-} from "./chunk-OFRJXFTH.js";
+} from "./chunk-O2YXWWPM.js";
 import {
   RetryableDeliveryError
 } from "./chunk-RF6J3DIO.js";
@@ -63,13 +62,13 @@ import {
   removeReactionFromMessage,
   resolveBaseUrl,
   truncateStatusText
-} from "./chunk-M6KRPBXC.js";
+} from "./chunk-FLEY546A.js";
 import {
   parseSlackThreadId,
   readSlackRawMessageContext,
   resolveSlackChannelIdFromMessage,
   resolveSlackChannelIdFromThreadId
-} from "./chunk-UDDCHQN2.js";
+} from "./chunk-TIV3PX5H.js";
 import {
   CooperativeTurnYieldError,
   TurnSliceLimitExceededError,
@@ -96,29 +95,29 @@ import {
   recordTurnSummary,
   saveTurnCheckpoint,
   turnHasReply
-} from "./chunk-JIJOPRD4.js";
+} from "./chunk-5QBK3QHJ.js";
 import {
   getDashboardConversationLink,
   getPluginSlackConversationLink
-} from "./chunk-QVQBWWXQ.js";
+} from "./chunk-2J4VCHRX.js";
 import {
   SlackActionError,
   getHeaderString,
   getSlackClient,
   isDmChannel,
   normalizeSlackConversationId
-} from "./chunk-AGSUPAD5.js";
+} from "./chunk-JAJVUQV7.js";
 import {
   getConversationEventStore,
   getSqlExecutor,
   requireSlackDestination,
   upsertIdentity,
   upsertLinkedIdentity
-} from "./chunk-K3QXMZDU.js";
+} from "./chunk-XAYXN4EG.js";
 import {
   acquireActiveLock,
   getStateAdapter
-} from "./chunk-YN4W5SRJ.js";
+} from "./chunk-XQPKMLRI.js";
 import {
   botConfig,
   escapeXml,
@@ -126,18 +125,18 @@ import {
   getRuntimeMetadata,
   normalizeSlackEmojiName,
   standardModelId
-} from "./chunk-D22FO4LW.js";
+} from "./chunk-PGJBNO3I.js";
 import {
   discoverSkills
-} from "./chunk-PQUV3NA5.js";
+} from "./chunk-YECBSG77.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-6DLWRSGV.js";
+} from "./chunk-EPOA52SD.js";
 import {
   buildOAuthTokenRequest,
   hasRequiredOAuthScope,
   parseOAuthTokenResponse
-} from "./chunk-2MGJ64SL.js";
+} from "./chunk-JY2HJYJT.js";
 import {
   createSlackResumeActor,
   isUserActor
@@ -155,7 +154,7 @@ import {
   setTags,
   toOptionalString,
   withLogContext
-} from "./chunk-OAPPJ3TM.js";
+} from "./chunk-HMU2QP5M.js";
 import {
   homeDir
 } from "./chunk-H4HBKISO.js";
@@ -1814,7 +1813,7 @@ async function wakePausedTurn(request, options = {}) {
 
 // src/handlers/oauth-html.ts
 function htmlCallbackResponse(title, message, status, options = {}) {
-  const footerMessage = options.footerMessage ?? "You can close this tab and return to Junior.";
+  const footerMessage = options.footerMessage ?? `You can close this tab and return to ${botConfig.userName}.`;
   const html = `<!DOCTYPE html>
 <html>
 <head><title>${title}</title></head>
@@ -1839,38 +1838,40 @@ function htmlCallbackResponse(title, message, status, options = {}) {
 }
 
 // src/handlers/mcp-oauth-callback.ts
-var CALLBACK_PAGES = {
-  missing_state: {
-    title: "Authorization failed",
-    message: "Missing state parameter.",
-    status: 400
-  },
-  provider_error: {
-    title: "Authorization failed",
-    message: "The provider returned an authorization error.",
-    status: 400
-  },
-  missing_code: {
-    title: "Authorization failed",
-    message: "Missing code parameter.",
-    status: 400
-  },
-  expired: {
-    title: "Authorization expired",
-    message: "This authorization link is no longer active. Return to Junior and retry the original request.",
-    status: 400
-  },
-  success: {
-    title: "Authorization complete",
-    message: "Your MCP access is connected. Junior will continue the paused request in Slack.",
-    status: 200
-  },
-  failure: {
-    title: "Authorization failed",
-    message: "Junior could not finish the authorization callback. Return to Junior and retry the original request.",
-    status: 500
-  }
-};
+function callbackPages(botName) {
+  return {
+    missing_state: {
+      title: "Authorization failed",
+      message: "Missing state parameter.",
+      status: 400
+    },
+    provider_error: {
+      title: "Authorization failed",
+      message: "The provider returned an authorization error.",
+      status: 400
+    },
+    missing_code: {
+      title: "Authorization failed",
+      message: "Missing code parameter.",
+      status: 400
+    },
+    expired: {
+      title: "Authorization expired",
+      message: `This authorization link is no longer active. Return to ${botName} and retry the original request.`,
+      status: 400
+    },
+    success: {
+      title: "Authorization complete",
+      message: `Your MCP access is connected. ${botName} will continue the paused request.`,
+      status: 200
+    },
+    failure: {
+      title: "Authorization failed",
+      message: `${botName} could not finish the authorization callback. Return to ${botName} and retry the original request.`,
+      status: 500
+    }
+  };
+}
 var McpOAuthAttemptExpiredError = class extends Error {
   constructor() {
     super("MCP OAuth authorization attempt is no longer current");
@@ -1881,11 +1882,13 @@ function mcpAuthorizationId(args) {
   return `${args.sessionId}:mcp:${args.provider}`;
 }
 function htmlResponse(kind, options) {
+  const botName = botConfig.userName;
+  const pages = callbackPages(botName);
   const page = kind === "success" && options?.local ? {
-    ...CALLBACK_PAGES.success,
-    message: "Your MCP access is connected. Junior will continue the paused request in the local client."
-  } : CALLBACK_PAGES[kind];
-  const footerMessage = kind === "success" && !options?.local ? "You can close this tab and return to Slack." : void 0;
+    ...pages.success,
+    message: `Your MCP access is connected. ${botName} will continue the paused request in the local client.`
+  } : pages[kind];
+  const footerMessage = kind === "success" && !options?.local ? `You can close this tab and return to ${botName}.` : void 0;
   return htmlCallbackResponse(page.title, page.message, page.status, {
     footerMessage
   });
@@ -2195,7 +2198,7 @@ async function isCurrentMcpAuthorizationAttempt(authSession, provider) {
   return pendingAuth?.authSessionId === authSession.authSessionId && pendingAuth.sessionId === authSession.sessionId;
 }
 function mcpConversationId(authSession) {
-  if (authSession.destination?.platform === "local") {
+  if (authSession.destination?.platform === "local" || authSession.source?.platform === "web") {
     return authSession.conversationId;
   }
   if (authSession.channelId && authSession.threadTs) {
@@ -2291,7 +2294,40 @@ async function GET(request, provider, waitUntil, options) {
         "app.credential.provider": provider
       });
     }
-    if (authSession.destination?.platform !== "local") {
+    if (authSession.source?.platform === "web" && authSession.destination) {
+      waitUntil(async () => {
+        const turn = await getTurnRecord(
+          authSession.conversationId,
+          authSession.sessionId
+        );
+        await deleteWebAuthorization({
+          actorId: authSession.userId,
+          conversationId: authSession.conversationId
+        });
+        if (!turn || turn.state !== "paused" || turn.resumeReason !== "auth") {
+          return;
+        }
+        await recordAuthorizationCompleted({
+          conversationId: authSession.conversationId,
+          kind: "mcp",
+          provider,
+          actorId: authSession.userId,
+          authorizationId: mcpAuthorizationId({
+            provider,
+            sessionId: authSession.sessionId
+          })
+        });
+        await wakePausedTurn(
+          {
+            conversationId: authSession.conversationId,
+            destination: authSession.destination,
+            turnId: authSession.sessionId,
+            expectedVersion: turn.version
+          },
+          options.conversationWorkQueue ? { queue: options.conversationWorkQueue } : void 0
+        );
+      });
+    } else if (authSession.destination?.platform !== "local") {
       waitUntil(
         () => resumeAuthorizedMcpTurn({
           authSession,
@@ -2301,7 +2337,9 @@ async function GET(request, provider, waitUntil, options) {
       );
     }
     return htmlResponse("success", {
-      local: authSession.destination?.platform === "local"
+      // Web roots keep a local destination for conversation-only delivery.
+      // Only the CLI path should get the local-client success copy.
+      local: authSession.destination?.platform === "local" && authSession.source?.platform !== "web"
     });
   } catch (callbackError) {
     if (callbackError instanceof McpOAuthAttemptExpiredError) {
@@ -3026,7 +3064,7 @@ async function GET2(request, provider, waitUntil, options) {
       { "app.credential.provider": provider }
     );
   }
-  if (stored.destination?.platform !== "local") {
+  if (stored.destination?.platform !== "local" && stored.source?.platform !== "web") {
     waitUntil(async () => {
       try {
         await publishAppHomeView(
@@ -3038,10 +3076,46 @@ async function GET2(request, provider, waitUntil, options) {
       }
     });
   }
+  const resumesWebTurn = Boolean(
+    stored.source?.platform === "web" && stored.destination && stored.resumeConversationId && stored.resumeSessionId
+  );
   const resumesAgentTurn = Boolean(
     stored.destination?.platform !== "local" && stored.resumeConversationId && stored.resumeSessionId
   );
-  if (resumesAgentTurn) {
+  if (resumesWebTurn) {
+    waitUntil(async () => {
+      const turn = await getTurnRecord(
+        stored.resumeConversationId,
+        stored.resumeSessionId
+      );
+      await deleteWebAuthorization({
+        actorId: stored.userId,
+        conversationId: stored.resumeConversationId
+      });
+      if (!turn || turn.state !== "paused" || turn.resumeReason !== "auth") {
+        return;
+      }
+      await recordAuthorizationCompleted({
+        conversationId: stored.resumeConversationId,
+        kind: "plugin",
+        provider: stored.provider,
+        actorId: stored.userId,
+        authorizationId: pluginAuthorizationId({
+          provider: stored.provider,
+          sessionId: stored.resumeSessionId
+        })
+      });
+      await wakePausedTurn(
+        {
+          conversationId: stored.resumeConversationId,
+          destination: stored.destination,
+          turnId: stored.resumeSessionId,
+          expectedVersion: turn.version
+        },
+        options.conversationWorkQueue ? { queue: options.conversationWorkQueue } : void 0
+      );
+    });
+  } else if (resumesAgentTurn) {
     waitUntil(
       () => withLogContext(
         { conversationId: stored.resumeConversationId },
@@ -3073,8 +3147,9 @@ async function GET2(request, provider, waitUntil, options) {
       })
     );
   }
-  const statusMessage = stored.destination?.platform === "local" ? "Your request is continuing in the local Junior client." : resumesAgentTurn ? "Your request is being processed in Slack." : `Your ${providerLabel} account is connected.`;
-  const footerMessage = stored.destination?.platform === "local" ? "You can close this tab and return to Junior." : "You can close this tab and return to Slack.";
+  const botName = botConfig.userName;
+  const statusMessage = stored.destination?.platform === "local" && !resumesWebTurn ? `Your request is continuing in the local ${botName} client.` : resumesWebTurn ? `Your request is continuing in ${botName}.` : resumesAgentTurn ? "Your request is being processed in Slack." : `Your ${providerLabel} account is connected.`;
+  const footerMessage = stored.destination?.platform === "local" || resumesWebTurn ? `You can close this tab and return to ${botName}.` : "You can close this tab and return to Slack.";
   return htmlCallbackResponse(
     escapeXml(`${providerLabel} account connected`),
     escapeXml(statusMessage),

package/dist/{chunk-JIJOPRD4.js → chunk-5QBK3QHJ.js}

@@ -13,7 +13,7 @@ import {
   instructionProvenanceFor,
   sanitizePostgresJson,
   withConversationEventLock
-} from "./chunk-K3QXMZDU.js";
+} from "./chunk-XAYXN4EG.js";
 import {
   SANDBOX_WORKSPACE_ROOT,
   sleep
@@ -23,14 +23,14 @@ import {
   fenceLock,
   getStateAdapter,
   withLock
-} from "./chunk-YN4W5SRJ.js";
+} from "./chunk-XQPKMLRI.js";
 import {
   botConfig,
   completeText,
   escapeXml,
   resolveGatewayModel,
   unwrapCurrentInstruction
-} from "./chunk-D22FO4LW.js";
+} from "./chunk-PGJBNO3I.js";
 import {
   toStoredSlackActor
 } from "./chunk-HZF5P5UN.js";
@@ -42,7 +42,7 @@ import {
   logException,
   logWarn,
   setSpanAttributes
-} from "./chunk-OAPPJ3TM.js";
+} from "./chunk-HMU2QP5M.js";
 
 // src/chat/turn-context-tag.ts
 var TURN_CONTEXT_TAG = "runtime-turn-context";