@sentry/junior 0.165.0 → 0.166.0

package/dist/chunk-4DARCEZH.js

@@ -0,0 +1,274 @@
+import {
+  SANDBOX_WORKSPACE_ROOT,
+  runNonInteractiveCommand
+} from "./chunk-BVREIWBD.js";
+import {
+  pluginCatalogRuntime
+} from "./chunk-VNPG55CU.js";
+
+// src/chat/sandbox/snapshot/profile.ts
+import { createHash } from "crypto";
+
+// src/chat/sandbox/docker.ts
+var DOCKER_DAEMON_JSON = `{
+  "storage-driver": "overlay2",
+  "live-restore": false
+}
+`;
+var DOCKER_ENSURE_SCRIPT = `#!/bin/sh
+set -eu
+
+if [ "$(id -u)" -ne 0 ]; then
+  exec sudo -n "$0" "$@"
+fi
+
+SOCK=/var/run/docker.sock
+PIDFILE=/var/run/docker.pid
+LOG=/var/log/junior-dockerd.log
+
+is_ready() {
+  [ -S "$SOCK" ] && /usr/bin/docker info >/dev/null 2>&1
+}
+
+if is_ready; then
+  chmod 666 "$SOCK" 2>/dev/null || true
+  exit 0
+fi
+
+mkdir -p /etc/docker /var/lib/docker /var/run /var/log
+if [ ! -f /etc/docker/daemon.json ]; then
+  cat > /etc/docker/daemon.json <<'EOF'
+{
+  "storage-driver": "overlay2",
+  "live-restore": false
+}
+EOF
+fi
+
+if [ -f "$PIDFILE" ]; then
+  oldpid="$(cat "$PIDFILE" 2>/dev/null || true)"
+  if [ -n "\${oldpid:-}" ] && ! kill -0 "$oldpid" 2>/dev/null; then
+    rm -f "$PIDFILE"
+  fi
+fi
+
+if [ ! -f "$PIDFILE" ] || ! kill -0 "$(cat "$PIDFILE" 2>/dev/null)" 2>/dev/null; then
+  # dockerd must outlive this helper; nohup + background is intentional.
+  nohup dockerd --host="unix://$SOCK" --pidfile="$PIDFILE" >"$LOG" 2>&1 &
+fi
+
+i=0
+while [ "$i" -lt 50 ]; do
+  if is_ready; then
+    chmod 666 "$SOCK" 2>/dev/null || true
+    exit 0
+  fi
+  i=$((i + 1))
+  sleep 0.1
+done
+
+echo "junior-ensure-docker: dockerd failed to become ready" >&2
+if [ -f "$LOG" ]; then
+  tail -n 50 "$LOG" >&2 || true
+fi
+exit 1
+`;
+var DOCKER_CLI_WRAPPER_SCRIPT = `#!/bin/sh
+set -eu
+if command -v junior-ensure-docker >/dev/null 2>&1; then
+  junior-ensure-docker
+fi
+exec /usr/bin/docker "$@"
+`;
+var DOCKER_COMPOSE_CLI_WRAPPER_SCRIPT = `#!/bin/sh
+set -eu
+if command -v junior-ensure-docker >/dev/null 2>&1; then
+  junior-ensure-docker
+fi
+exec /usr/local/libexec/junior-docker-compose "$@"
+`;
+async function ensureDockerDaemon(sandbox, signal) {
+  await runNonInteractiveCommand(sandbox, {
+    cmd: "sh",
+    args: [
+      "-c",
+      "command -v junior-ensure-docker >/dev/null 2>&1 && junior-ensure-docker || true"
+    ],
+    signal
+  });
+}
+
+// src/chat/sandbox/runtime-dependencies.ts
+var GLOBAL_RUNTIME_DEPENDENCIES = [
+  { type: "system", package: "docker" },
+  { type: "system", package: "spal-release" },
+  { type: "system", package: "ripgrep" }
+];
+function writeFileCommand(path, contents, mode = "0644") {
+  const payload = Buffer.from(contents, "utf8").toString("base64");
+  return [
+    `printf '%s' '${payload}' | base64 -d > ${path}`,
+    `chmod ${mode} ${path}`
+  ].join("\n");
+}
+function writeExecutableCommand(path, contents) {
+  return writeFileCommand(path, contents, "0755");
+}
+var GLOBAL_RUNTIME_POSTINSTALL = [
+  {
+    cmd: "sh",
+    args: [
+      "-c",
+      [
+        "set -eu",
+        'case "$(uname -m)" in',
+        '  x86_64) asset="x86_64"; sha256="7af95166a730b87e172d4fc9aefea8725d3c6c7327d59149267b452114ddb7d4" ;;',
+        '  aarch64) asset="aarch64"; sha256="49082844b87f03cdcd5f5bbef1ba8c9c897b7a2dfb80cea18d61ec8ca6117e0c" ;;',
+        '  *) echo "unsupported Docker Compose architecture: $(uname -m)" >&2; exit 1 ;;',
+        "esac",
+        'tmp="$(mktemp)"',
+        `trap 'rm -f "$tmp"' EXIT`,
+        'curl --fail --location --silent --show-error "https://github.com/docker/compose/releases/download/v2.39.4/docker-compose-linux-${asset}" --output "$tmp"',
+        'echo "${sha256}  ${tmp}" | sha256sum --check --status',
+        // Keep the real Compose binary off PATH; the wrapper below starts dockerd.
+        'install -D -m 0755 "$tmp" /usr/local/libexec/junior-docker-compose',
+        "mkdir -p /usr/local/lib/docker/cli-plugins /usr/local/libexec /etc/docker /usr/local/bin",
+        `mkdir -p ${SANDBOX_WORKSPACE_ROOT}/.junior/bin`,
+        writeFileCommand("/etc/docker/daemon.json", DOCKER_DAEMON_JSON),
+        writeExecutableCommand(
+          "/usr/local/bin/junior-ensure-docker",
+          DOCKER_ENSURE_SCRIPT
+        ),
+        // docker compose plugin delegates to the real Compose binary.
+        "ln -sfn /usr/local/libexec/junior-docker-compose /usr/local/lib/docker/cli-plugins/docker-compose",
+        // PATH wrappers auto-start dockerd for both CLI entrypoints.
+        writeExecutableCommand(
+          "/usr/local/bin/docker-compose",
+          DOCKER_COMPOSE_CLI_WRAPPER_SCRIPT
+        ),
+        writeExecutableCommand(
+          `${SANDBOX_WORKSPACE_ROOT}/.junior/bin/docker`,
+          DOCKER_CLI_WRAPPER_SCRIPT
+        ),
+        writeExecutableCommand(
+          `${SANDBOX_WORKSPACE_ROOT}/.junior/bin/docker-compose`,
+          DOCKER_COMPOSE_CLI_WRAPPER_SCRIPT
+        ),
+        // Prefer the wrapper over /usr/bin/docker for non-login shells too.
+        writeExecutableCommand(
+          "/usr/local/bin/docker",
+          DOCKER_CLI_WRAPPER_SCRIPT
+        )
+      ].join("\n")
+    ],
+    sudo: true
+  }
+];
+
+// src/chat/sandbox/snapshot/profile.ts
+var VERSION = 1;
+var DEFAULT_FLOATING_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1e3;
+function isExactNpmVersion(version) {
+  return /^\d+\.\d+\.\d+(?:[-+][a-z0-9.]+)?$/i.test(version.trim());
+}
+function isFloating(dep) {
+  return dep.type === "npm" && !isExactNpmVersion(dep.version);
+}
+function mergeDependencies(dependencies) {
+  const seen = /* @__PURE__ */ new Set();
+  const npmVersions = /* @__PURE__ */ new Map();
+  const merged = [];
+  for (const dependency of dependencies) {
+    const key = dependency.type === "npm" ? `${dependency.type}:${dependency.package}:${dependency.version}` : "package" in dependency ? `${dependency.type}:package:${dependency.package}` : `${dependency.type}:url:${dependency.url}:${dependency.sha256}`;
+    if (seen.has(key)) {
+      continue;
+    }
+    seen.add(key);
+    if (dependency.type === "npm") {
+      const version = npmVersions.get(dependency.package);
+      if (version !== void 0 && version !== dependency.version) {
+        throw new Error(
+          `Conflicting runtime dependency versions for ${dependency.package}: ${version} and ${dependency.version}`
+        );
+      }
+      npmVersions.set(dependency.package, dependency.version);
+    }
+    merged.push(dependency);
+  }
+  return merged;
+}
+function floatingMaxAgeMs() {
+  const raw = process.env.SANDBOX_SNAPSHOT_FLOATING_MAX_AGE_MS;
+  if (!raw?.trim()) {
+    return DEFAULT_FLOATING_MAX_AGE_MS;
+  }
+  const parsed = Number.parseInt(raw, 10);
+  return Number.isFinite(parsed) && parsed >= 0 ? parsed : DEFAULT_FLOATING_MAX_AGE_MS;
+}
+function compareCodePoints(left, right) {
+  if (left < right) return -1;
+  if (left > right) return 1;
+  return 0;
+}
+function workspaceRecipe(workspace) {
+  const repos = [...workspace.repos].map(({ provider, repo }) => ({
+    provider,
+    repo
+  })).sort((left, right) => {
+    const provider = compareCodePoints(left.provider, right.provider);
+    if (provider !== 0) return provider;
+    return compareCodePoints(left.repo, right.repo);
+  });
+  return {
+    id: workspace.id,
+    repos,
+    setupScript: workspace.setupScript
+  };
+}
+function create(runtime, workspace) {
+  const dependencies = mergeDependencies([
+    ...GLOBAL_RUNTIME_DEPENDENCIES,
+    ...pluginCatalogRuntime.getRuntimeDependencies()
+  ]);
+  const pluginPostinstall = pluginCatalogRuntime.getRuntimePostinstall();
+  const postinstall = [...GLOBAL_RUNTIME_POSTINSTALL, ...pluginPostinstall];
+  if (dependencies.length === 0 && postinstall.length === 0 && !workspace) {
+    return null;
+  }
+  const rebuildEpoch = process.env.SANDBOX_SNAPSHOT_REBUILD_EPOCH?.trim() ?? "";
+  const floating = dependencies.some((dependency) => isFloating(dependency)) || pluginPostinstall.length > 0 || Boolean(workspace);
+  const hash2 = createHash("sha256").update(
+    JSON.stringify({
+      version: VERSION,
+      runtime,
+      rebuildEpoch,
+      dependencies,
+      postinstall,
+      ...workspace ? { workspace: workspaceRecipe(workspace) } : {}
+    })
+  ).digest("hex");
+  return {
+    hash: hash2,
+    dependencyCount: dependencies.length,
+    floating,
+    dependencies,
+    postinstall
+  };
+}
+function hash(runtime, workspace) {
+  return create(runtime, workspace)?.hash;
+}
+function isStale(profile, createdAtMs) {
+  if (!profile.floating) {
+    return false;
+  }
+  const maxAgeMs = floatingMaxAgeMs();
+  return maxAgeMs === 0 || Date.now() - createdAtMs > maxAgeMs;
+}
+
+export {
+  ensureDockerDaemon,
+  create,
+  hash,
+  isStale
+};

package/dist/{chunk-HZDLOFO4.js → chunk-4MDEQNSW.js}

@@ -1,13 +1,13 @@
 import {
   ToolInputError
-} from "./chunk-EA4UL5H2.js";
+} from "./chunk-22RO7IDD.js";
 import {
   canRouteResourceEvents,
   getPlugins
-} from "./chunk-5WDDWMQ7.js";
+} from "./chunk-WX42YNDQ.js";
 import {
   getDb
-} from "./chunk-RQQTOF3H.js";
+} from "./chunk-JDTCQDRU.js";
 import {
   juniorAttachments,
   juniorConversations,
@@ -15,13 +15,13 @@ import {
   juniorSchedulerRuns,
   juniorSchedulerTasks,
   juniorStats
-} from "./chunk-IZHR2OES.js";
+} from "./chunk-65SNO3WK.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";
 import {
   logInfo
-} from "./chunk-32CCG4WP.js";
+} from "./chunk-JUFZR2LD.js";
 
 // src/chat/sandbox/snapshot/runtime.ts
 var SANDBOX_RUNTIME = "node22";

package/dist/{chunk-IZHR2OES.js → chunk-65SNO3WK.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_SQL_STATEMENT_TIMEOUT_MS
-} from "./chunk-FMOFCEAA.js";
+} from "./chunk-AEKBVJMV.js";
 import {
   juniorDestinations,
   timestamptz
@@ -646,13 +646,24 @@ var juniorSchedulerRuns = pgTable16(
 );
 
 // src/db/schema/workspaces.ts
-import { pgTable as pgTable17, primaryKey as primaryKey9, text as text17, uniqueIndex as uniqueIndex7 } from "drizzle-orm/pg-core";
+import {
+  integer as integer6,
+  pgTable as pgTable17,
+  primaryKey as primaryKey9,
+  text as text17,
+  uniqueIndex as uniqueIndex7
+} from "drizzle-orm/pg-core";
 var juniorWorkspaces = pgTable17(
   "junior_workspaces",
   {
     id: text17("id").primaryKey(),
     name: text17("name").notNull(),
     setupScript: text17("setup_script").notNull().default(""),
+    // Last successful Workspace snapshot for the dashboard. Resolve still uses Redis.
+    snapshotId: text17("snapshot_id"),
+    snapshotGeneratedAt: timestamptz("snapshot_generated_at"),
+    snapshotBuildDurationMs: integer6("snapshot_build_duration_ms"),
+    snapshotProfileHash: text17("snapshot_profile_hash"),
     createdAt: timestamptz("created_at").notNull(),
     updatedAt: timestamptz("updated_at").notNull()
   },

package/dist/{chunk-3V2EIQLT.js → chunk-ABNRESX6.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-V7YE4WCP.js";
 import {
   toOptionalString
-} from "./chunk-32CCG4WP.js";
+} from "./chunk-JUFZR2LD.js";
 
 // src/chat/slack/context.ts
 import { z } from "zod";

package/dist/{chunk-FMOFCEAA.js → chunk-AEKBVJMV.js}

@@ -3,7 +3,7 @@ import {
   toCanonicalInputMessage,
   toCanonicalOutputMessage,
   toGenAiMessagesTraceAttributes
-} from "./chunk-ZUKU2Y3J.js";
+} from "./chunk-KQ5YZGDV.js";
 import {
   extractGenAiUsageAttributes,
   logException,
@@ -11,7 +11,7 @@ import {
   normalizeGenAiFinishReason,
   serializeGenAiAttribute,
   withSpan
-} from "./chunk-32CCG4WP.js";
+} from "./chunk-JUFZR2LD.js";
 
 // src/chat/services/provider-error.ts
 var ProviderError = class extends Error {

package/dist/{chunk-5T6WPPEI.js → chunk-BKP3PVKR.js}

@@ -1,6 +1,6 @@
 import {
   JUNIOR_VERSION
-} from "./chunk-6OWVPXNO.js";
+} from "./chunk-YTIKGCPC.js";
 
 // src/deployment.ts
 var JUNIOR_HEARTBEAT_ROUTE = "/api/internal/heartbeat";

package/dist/{chunk-6RZ6MMEK.js → chunk-C3USHSIJ.js}

@@ -1,6 +1,6 @@
 import {
   createAndEnqueueAgentInvocation
-} from "./chunk-SA5FVUWJ.js";
+} from "./chunk-2ZKFLHVP.js";
 import {
   actorFromRun,
   toolInvocationDestination

package/dist/{chunk-DKO4RRGJ.js → chunk-CDBTQQQ4.js}

@@ -1,7 +1,7 @@
 import {
   FUNCTION_TIMEOUT_BUFFER_SECONDS,
   getChatConfig
-} from "./chunk-FMOFCEAA.js";
+} from "./chunk-AEKBVJMV.js";
 
 // src/chat/runtime/request-deadline.ts
 import { AsyncLocalStorage } from "async_hooks";

package/dist/{chunk-VDNNVTX2.js → chunk-DTQAMME2.js}

@@ -1,18 +1,18 @@
 import {
   persistConversationMessages
-} from "./chunk-EA4UL5H2.js";
+} from "./chunk-22RO7IDD.js";
 import {
   JUNIOR_THREAD_STATE_TTL_MS
 } from "./chunk-3Y47VMHV.js";
 import {
   getDb
-} from "./chunk-RQQTOF3H.js";
+} from "./chunk-JDTCQDRU.js";
 import {
   juniorLocationConfigurations
-} from "./chunk-IZHR2OES.js";
+} from "./chunk-65SNO3WK.js";
 import {
   getStateAdapter
-} from "./chunk-65B3PDY7.js";
+} from "./chunk-EKBVHDZO.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";
@@ -20,7 +20,7 @@ import {
   isRecord,
   toOptionalNumber,
   toOptionalString
-} from "./chunk-32CCG4WP.js";
+} from "./chunk-JUFZR2LD.js";
 
 // src/chat/conversations/turn-lifecycle.ts
 var ConversationTurnLifecycleService = class {

package/dist/{chunk-65B3PDY7.js → chunk-EKBVHDZO.js}

@@ -1,6 +1,6 @@
 import {
   getChatConfig
-} from "./chunk-FMOFCEAA.js";
+} from "./chunk-AEKBVJMV.js";
 
 // src/chat/state/adapter.ts
 import { createMemoryState } from "@chat-adapter/state-memory";

package/dist/{chunk-7J26TW64.js → chunk-FEYQVP64.js}

@@ -4,7 +4,7 @@ import {
 import {
   formatProviderLabel,
   startOAuthFlow
-} from "./chunk-FXX4NHOM.js";
+} from "./chunk-OYN45QUQ.js";
 import {
   parseSandboxEgressAuthRequiredSignal
 } from "./chunk-7MA4HV4W.js";
@@ -12,16 +12,16 @@ import {
   abandonReplacedPendingAuth,
   canReusePendingAuthLink,
   recordAuthorizationRequested
-} from "./chunk-EA4UL5H2.js";
+} from "./chunk-22RO7IDD.js";
 import {
   AGENT_INVOCATION_MAILBOX_STATUSES
-} from "./chunk-IZHR2OES.js";
+} from "./chunk-65SNO3WK.js";
 import {
   TURN_REASONING_LEVELS
-} from "./chunk-FMOFCEAA.js";
+} from "./chunk-AEKBVJMV.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-7S2JVUWS.js";
+} from "./chunk-VNPG55CU.js";
 import {
   credentialContextSchema
 } from "./chunk-BDUENQD3.js";

package/dist/{chunk-XOINKFDJ.js → chunk-FFE3BMAT.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-RF6J3DIO.js";
 import {
   resolveBaseUrl
-} from "./chunk-FXX4NHOM.js";
+} from "./chunk-OYN45QUQ.js";
 import {
   isExperimentalFeatureEnabled
 } from "./chunk-VRS6WDK5.js";
@@ -12,27 +12,27 @@ import {
   getPlugins,
   getSlackClient,
   withSlackRetries
-} from "./chunk-5WDDWMQ7.js";
+} from "./chunk-WX42YNDQ.js";
 import {
   getDb,
   parseDestination
-} from "./chunk-RQQTOF3H.js";
+} from "./chunk-JDTCQDRU.js";
 import {
   sleep
 } from "./chunk-BVREIWBD.js";
 import {
   acquireActiveLock,
   getStateAdapter
-} from "./chunk-65B3PDY7.js";
+} from "./chunk-EKBVHDZO.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-7S2JVUWS.js";
+} from "./chunk-VNPG55CU.js";
 import {
   fetchWithBoundedOAuthErrorBodies
-} from "./chunk-N2BRRIQZ.js";
+} from "./chunk-P6UQMGM2.js";
 import {
   isRecord
-} from "./chunk-32CCG4WP.js";
+} from "./chunk-JUFZR2LD.js";
 
 // src/chat/capabilities/router.ts
 var ProviderCredentialRouter = class {

package/dist/{chunk-RQQTOF3H.js → chunk-JDTCQDRU.js}

@@ -7,12 +7,12 @@ import {
   juniorConversations,
   juniorIdentities,
   juniorUsers
-} from "./chunk-IZHR2OES.js";
+} from "./chunk-65SNO3WK.js";
 import {
   TURN_REASONING_LEVELS,
   getChatConfig,
   modelProfileSchema
-} from "./chunk-FMOFCEAA.js";
+} from "./chunk-AEKBVJMV.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";
@@ -23,7 +23,7 @@ import {
 } from "./chunk-V7YE4WCP.js";
 import {
   normalizeIdentityEmail
-} from "./chunk-32CCG4WP.js";
+} from "./chunk-JUFZR2LD.js";
 
 // src/chat/conversations/sql/store.ts
 import { randomUUID as randomUUID2 } from "crypto";

package/dist/{chunk-32CCG4WP.js → chunk-JUFZR2LD.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-6GWA276C.js";
 import {
   getDeploymentTelemetryAttributes
-} from "./chunk-5T6WPPEI.js";
+} from "./chunk-BKP3PVKR.js";
 
 // src/chat/logging.ts
 import path from "path";

package/dist/{chunk-ZUKU2Y3J.js → chunk-KQ5YZGDV.js}

@@ -1,6 +1,6 @@
 import {
   logWarn
-} from "./chunk-32CCG4WP.js";
+} from "./chunk-JUFZR2LD.js";
 
 // src/chat/conversation-privacy.ts
 import { AsyncLocalStorage } from "async_hooks";

package/dist/{chunk-G72LBEMZ.js → chunk-LGSGPWYH.js}

@@ -1,6 +1,6 @@
 import {
   pluginCatalogRuntime
-} from "./chunk-7S2JVUWS.js";
+} from "./chunk-VNPG55CU.js";
 
 // src/chat/plugins/validation.ts
 import { isDeepStrictEqual } from "util";

package/dist/{chunk-TCWPG5VL.js → chunk-MDW5YPXW.js}

@@ -1,9 +1,9 @@
 import {
   pluginCatalogRuntime
-} from "./chunk-7S2JVUWS.js";
+} from "./chunk-VNPG55CU.js";
 import {
   logWarn
-} from "./chunk-32CCG4WP.js";
+} from "./chunk-JUFZR2LD.js";
 import {
   skillRoots
 } from "./chunk-H4HBKISO.js";

package/dist/{chunk-AEBF6AO2.js → chunk-OCOGPNHA.js}

@@ -1,6 +1,6 @@
 import {
   getStateAdapter
-} from "./chunk-65B3PDY7.js";
+} from "./chunk-EKBVHDZO.js";
 import {
   getClient
 } from "./chunk-6GWA276C.js";

package/dist/{chunk-FXX4NHOM.js → chunk-OYN45QUQ.js}

@@ -5,19 +5,19 @@ import {
   isDmChannel,
   normalizeSlackConversationId,
   withSlackRetries
-} from "./chunk-5WDDWMQ7.js";
+} from "./chunk-WX42YNDQ.js";
 import {
   parseDestination
-} from "./chunk-RQQTOF3H.js";
+} from "./chunk-JDTCQDRU.js";
 import {
   getStateAdapter
-} from "./chunk-65B3PDY7.js";
+} from "./chunk-EKBVHDZO.js";
 import {
   normalizeSlackEmojiName
-} from "./chunk-FMOFCEAA.js";
+} from "./chunk-AEKBVJMV.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-7S2JVUWS.js";
+} from "./chunk-VNPG55CU.js";
 import {
   parseSlackMessageTs,
   parseSlackUserId
@@ -26,7 +26,7 @@ import {
   isRecord,
   logInfo,
   logWarn
-} from "./chunk-32CCG4WP.js";
+} from "./chunk-JUFZR2LD.js";
 
 // src/chat/slack/outbound.ts
 var MAX_SLACK_MESSAGE_TEXT_CHARS = 4e4;

package/dist/{chunk-N2BRRIQZ.js → chunk-P6UQMGM2.js}

@@ -5,7 +5,7 @@ import {
   logInfo,
   logWarn,
   setSpanAttributes
-} from "./chunk-32CCG4WP.js";
+} from "./chunk-JUFZR2LD.js";
 import {
   discoverInstalledPluginPackageContent,
   normalizePluginPackageNames