@sentry/junior 0.165.0 → 0.167.0

package/dist/{catalog-runtime-4ERDVI7V.js → catalog-runtime-7QFMBU2Q.js}

@@ -1,15 +1,15 @@
 import {
   pluginCatalogRuntime
-} from "./chunk-7S2JVUWS.js";
-import "./chunk-N2BRRIQZ.js";
+} from "./chunk-L63FA77C.js";
+import "./chunk-EWAG7BNE.js";
 import "./chunk-BDUENQD3.js";
 import "./chunk-V7YE4WCP.js";
-import "./chunk-32CCG4WP.js";
+import "./chunk-V7GGA4LW.js";
 import "./chunk-6GWA276C.js";
 import "./chunk-OOUNJNMR.js";
 import "./chunk-H4HBKISO.js";
-import "./chunk-5T6WPPEI.js";
-import "./chunk-6OWVPXNO.js";
+import "./chunk-UFTE42ZF.js";
+import "./chunk-GIGUXRMY.js";
 import "./chunk-MLKGABMK.js";
 export {
   pluginCatalogRuntime

package/dist/chat/pi/transcript.d.ts

@@ -34,16 +34,16 @@ export declare function retainRuntimeTurnContext(messages: PiMessage[]): PiMessa
 /**
  * Reduce a runtime user-turn prompt to only the current turn's instruction.
  *
- * Live user prompts embed prior-thread context blocks (`<thread-transcript>`,
- * `<recent-thread-messages>`, `<thread-compactions>`, `<thread-background>`) in
- * the same message that carries the `<current-instruction>` block. Those blocks
- * hold other participants' verbatim messages, so completed-run projections
- * consumed by plugins must expose only the instruction authored by this turn's
- * actor — otherwise per-entry provenance can be defeated by reading another
- * user's text out of an instruction-authority entry. Prior thread context is
- * projected separately as per-author context-authority entries, so dropping it
- * here is non-lossy for plugins. This is projection-only; it never touches what
- * the model sees during a live run.
+ * Live user prompts embed prior-thread context as `<thread-context
+ * authority="evidence-only">` (or legacy transcript/background blocks) beside
+ * the `<current-instruction>` block. Those blocks hold other participants'
+ * verbatim messages, so completed-run projections consumed by plugins must
+ * expose only the instruction authored by this turn's actor — otherwise
+ * per-entry provenance can be defeated by reading another user's text out of an
+ * instruction-authority entry. Prior thread context is projected separately as
+ * per-author context-authority entries, so dropping it here is non-lossy for
+ * plugins. This is projection-only; it never touches what the model sees during
+ * a live run.
  */
 export declare function instructionTextForProjection(text: string): string;
 /** Return the projected instruction text carried by one user message. */

package/dist/chat/sandbox/snapshot/resolve.d.ts

@@ -7,6 +7,7 @@ declare const cachedSnapshotSchema: z.ZodObject<{
     runtime: z.ZodString;
     createdAtMs: z.ZodNumber;
     dependencyCount: z.ZodNumber;
+    buildDurationMs: z.ZodNumber;
 }, z.core.$strict>;
 type CachedSnapshot = z.output<typeof cachedSnapshotSchema>;
 export type ResolveOutcome = "no_profile" | "cache_hit" | "cache_hit_after_lock_wait" | "rebuilt" | "forced_rebuild";
@@ -19,6 +20,9 @@ export interface Snapshot {
     cacheHit: boolean;
     resolveOutcome: ResolveOutcome;
     rebuildReason?: RebuildReason;
+    /** Present when the Redis registry has a concrete snapshot entry. */
+    createdAtMs?: number;
+    buildDurationMs?: number;
 }
 export type ProgressPhase = "resolve_start" | "cache_hit" | "waiting_for_lock" | "building_snapshot" | "build_complete";
 /** Read one cached snapshot pointer; only a missing key is a cache miss. */

package/dist/chat/services/conversation-memory.d.ts

@@ -37,6 +37,13 @@ export declare function markConversationMessage(conversation: ThreadConversation
 export declare function buildConversationContext(conversation: ThreadConversationState, options?: {
     excludeMessageId?: string;
 }): string | undefined;
+/**
+ * Keep ambient history as one evidence-only block.
+ *
+ * When durable context already ends a thread-context envelope, append message
+ * lines inside that envelope. Otherwise wrap the new messages in one envelope.
+ */
+export declare function appendThreadContextMessages(baseContext: string | undefined, messageLines: string[]): string | undefined;
 /** Return the earliest human-authored message known for a thread. */
 export declare function getThreadTitleSourceMessage(conversation: ThreadConversationState): ConversationMessage | undefined;
 /** Build the service that owns durable conversation memory compaction. */

package/dist/chat/workspaces/store.d.ts

@@ -1,5 +1,5 @@
 import type { JuniorDatabase } from "@/db/db";
-import type { Workspace } from "./types";
+import type { Workspace, WorkspaceSnapshot } from "./types";
 import { WorkspaceValidationError } from "./validation";
 /** List Workspace recipes by stable name. */
 export declare function listWorkspaces(db: JuniorDatabase): Promise<Workspace[]>;
@@ -32,4 +32,13 @@ export declare function updateWorkspace(id: string, input: {
 }): Promise<Workspace | undefined>;
 /** Delete one install-wide Workspace recipe. */
 export declare function deleteWorkspace(id: string): Promise<boolean>;
+/** Record the current Sandbox snapshot after a successful Workspace prepare. */
+export declare function setWorkspaceSnapshot(workspaceId: string, snapshot: WorkspaceSnapshot): Promise<void>;
+/** Persist dashboard snapshot facts when resolve returned a concrete entry. */
+export declare function recordResolvedWorkspaceSnapshot(workspaceId: string, snapshot: {
+    snapshotId?: string;
+    profileHash?: string;
+    createdAtMs?: number;
+    buildDurationMs?: number;
+}): Promise<void>;
 export { WorkspaceValidationError };

package/dist/chat/workspaces/types.d.ts

@@ -3,10 +3,18 @@ export interface WorkspaceRepo {
     provider: string;
     repo: string;
 }
+/** Last successful Sandbox snapshot recorded for one Workspace recipe. */
+export interface WorkspaceSnapshot {
+    id: string;
+    generatedAt: Date;
+    buildDurationMs: number;
+    profileHash: string;
+}
 /** Named recipe used to prepare reusable sandbox contents. */
 export interface Workspace {
     id: string;
     name: string;
     setupScript: string;
     repos: WorkspaceRepo[];
+    snapshot: WorkspaceSnapshot | null;
 }

package/dist/{chunk-AEBF6AO2.js → chunk-2MPO25ZZ.js}

@@ -1,6 +1,6 @@
 import {
   getStateAdapter
-} from "./chunk-65B3PDY7.js";
+} from "./chunk-W72TSO24.js";
 import {
   getClient
 } from "./chunk-6GWA276C.js";

package/dist/{chunk-VDNNVTX2.js → chunk-2RSPCWAV.js}

@@ -1,18 +1,18 @@
 import {
   persistConversationMessages
-} from "./chunk-EA4UL5H2.js";
+} from "./chunk-KSQIE2R4.js";
 import {
   JUNIOR_THREAD_STATE_TTL_MS
 } from "./chunk-3Y47VMHV.js";
 import {
   getDb
-} from "./chunk-RQQTOF3H.js";
+} from "./chunk-PMULUKHL.js";
 import {
   juniorLocationConfigurations
-} from "./chunk-IZHR2OES.js";
+} from "./chunk-YVW44V5Y.js";
 import {
   getStateAdapter
-} from "./chunk-65B3PDY7.js";
+} from "./chunk-W72TSO24.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";
@@ -20,7 +20,7 @@ import {
   isRecord,
   toOptionalNumber,
   toOptionalString
-} from "./chunk-32CCG4WP.js";
+} from "./chunk-V7GGA4LW.js";
 
 // src/chat/conversations/turn-lifecycle.ts
 var ConversationTurnLifecycleService = class {

package/dist/{chunk-5WDDWMQ7.js → chunk-4KRDL4ZD.js}

@@ -2,7 +2,7 @@ import {
   getConversationEventStore,
   getDb,
   getSqlExecutor
-} from "./chunk-RQQTOF3H.js";
+} from "./chunk-PMULUKHL.js";
 import {
   juniorConversationAnnotations,
   juniorConversationEvents,
@@ -10,7 +10,7 @@ import {
   juniorUsers,
   juniorWorkspaceRepos,
   juniorWorkspaces
-} from "./chunk-IZHR2OES.js";
+} from "./chunk-YVW44V5Y.js";
 import {
   SANDBOX_WORKSPACE_ROOT,
   runNonInteractiveCommand,
@@ -18,14 +18,14 @@ import {
 } from "./chunk-BVREIWBD.js";
 import {
   getStateAdapter
-} from "./chunk-65B3PDY7.js";
+} from "./chunk-W72TSO24.js";
 import {
   botConfig,
   completeObject,
   embedTexts,
   getSlackBotToken,
   standardModelId
-} from "./chunk-FMOFCEAA.js";
+} from "./chunk-MKDIEH3C.js";
 import {
   isActorUserId,
   parseActorUserId,
@@ -41,7 +41,7 @@ import {
   setSpanAttributes,
   setSpanStatus,
   withSpan
-} from "./chunk-32CCG4WP.js";
+} from "./chunk-V7GGA4LW.js";
 
 // src/chat/plugins/agent-hooks.ts
 import {
@@ -1305,6 +1305,17 @@ function normalizeWorkspaceRecipe(input) {
 }
 
 // src/chat/workspaces/store.ts
+function snapshotFromRow(row) {
+  if (!row.snapshotId || !row.snapshotGeneratedAt || row.snapshotBuildDurationMs == null || !row.snapshotProfileHash) {
+    return null;
+  }
+  return {
+    id: row.snapshotId,
+    generatedAt: row.snapshotGeneratedAt,
+    buildDurationMs: row.snapshotBuildDurationMs,
+    profileHash: row.snapshotProfileHash
+  };
+}
 function workspaceFromRows(row, repos) {
   return {
     id: row.id,
@@ -1313,7 +1324,8 @@ function workspaceFromRows(row, repos) {
     repos: repos.map((repo) => ({
       provider: repo.provider,
       repo: repo.repo
-    }))
+    })),
+    snapshot: snapshotFromRow(row)
   };
 }
 async function loadWorkspaceRepos(db, workspaceId) {
@@ -1333,6 +1345,13 @@ async function replaceWorkspaceRepos(db, workspaceId, repos) {
     }))
   );
 }
+function sameWorkspaceRepos(current, next) {
+  if (current.length !== next.length) return false;
+  const identity = (repo) => `${repo.provider}:${repo.repo.toLowerCase()}`;
+  const currentIds = current.map(identity).sort();
+  const nextIds = next.map(identity).sort();
+  return currentIds.every((value, index) => value === nextIds[index]);
+}
 function isUniqueViolation(error) {
   let current = error;
   for (let depth = 0; current && depth < 6; depth += 1) {
@@ -1426,12 +1445,22 @@ async function updateWorkspace(id, input) {
   try {
     const updated = await executor.transaction(async () => {
       const db = executor.db();
+      const existingRows = await db.select().from(juniorWorkspaces).where(eq4(juniorWorkspaces.id, id)).limit(1);
+      const existing = existingRows[0];
+      if (!existing) return void 0;
+      const existingRepos = await loadWorkspaceRepos(db, id);
+      const snapshotChanged = existing.setupScript !== recipe.setupScript || !sameWorkspaceRepos(existingRepos, recipe.repos);
       const rows = await db.update(juniorWorkspaces).set({
         name: recipe.name,
         setupScript: recipe.setupScript,
+        ...snapshotChanged ? {
+          snapshotId: null,
+          snapshotGeneratedAt: null,
+          snapshotBuildDurationMs: null,
+          snapshotProfileHash: null
+        } : {},
         updatedAt: now
       }).where(eq4(juniorWorkspaces.id, id)).returning();
-      if (!rows[0]) return void 0;
       await replaceWorkspaceRepos(db, id, recipe.repos);
       return rows[0];
     });
@@ -1453,6 +1482,33 @@ async function deleteWorkspace(id) {
     return rows.length > 0;
   });
 }
+async function setWorkspaceSnapshot(workspaceId, snapshot) {
+  const executor = getSqlExecutor();
+  await executor.db().update(juniorWorkspaces).set({
+    snapshotId: snapshot.id,
+    snapshotGeneratedAt: snapshot.generatedAt,
+    snapshotBuildDurationMs: snapshot.buildDurationMs,
+    snapshotProfileHash: snapshot.profileHash,
+    updatedAt: /* @__PURE__ */ new Date()
+  }).where(eq4(juniorWorkspaces.id, workspaceId));
+}
+async function recordResolvedWorkspaceSnapshot(workspaceId, snapshot) {
+  if (!snapshot.snapshotId || !snapshot.profileHash || snapshot.createdAtMs == null || snapshot.buildDurationMs == null) {
+    return;
+  }
+  try {
+    await setWorkspaceSnapshot(workspaceId, {
+      id: snapshot.snapshotId,
+      generatedAt: new Date(snapshot.createdAtMs),
+      buildDurationMs: snapshot.buildDurationMs,
+      profileHash: snapshot.profileHash
+    });
+  } catch (error) {
+    logException(error, "sandbox.workspace_snapshot.persist.failed", {
+      "app.workspace.id": workspaceId
+    });
+  }
+}
 
 // src/chat/plugins/agent-hooks.ts
 var PluginHookDeniedError = class extends Error {
@@ -2685,6 +2741,7 @@ export {
   createWorkspace,
   updateWorkspace,
   deleteWorkspace,
+  recordResolvedWorkspaceSnapshot,
   PluginHookDeniedError,
   validatePlugins,
   setPlugins,

package/dist/{chunk-NPW6LM2X.js → chunk-5IR2ABRO.js}

@@ -1,10 +1,10 @@
 import {
   createWebAuthorization,
   deleteWebAuthorization
-} from "./chunk-AEBF6AO2.js";
+} from "./chunk-2MPO25ZZ.js";
 import {
   appendAndEnqueueInboundMessage
-} from "./chunk-6YXCG2XL.js";
+} from "./chunk-KE5ETKIR.js";
 import {
   buildDeliveredTurnStatePatch,
   completeAuthPauseTurn,
@@ -12,20 +12,20 @@ import {
   getTurnUserMessage,
   processPluginTask,
   scheduleSessionCompletedPluginTasks
-} from "./chunk-AQEBOQUC.js";
+} from "./chunk-O5J556I2.js";
 import {
   ConversationTurnLifecycleService,
   coerceThreadConversationState,
   getPersistedSandboxState,
   getPersistedThreadState,
   persistThreadStateById
-} from "./chunk-VDNNVTX2.js";
+} from "./chunk-2RSPCWAV.js";
 import {
   healthReportSchema
 } from "./chunk-UTL3MHPC.js";
 import {
   parseSlackThreadId
-} from "./chunk-3V2EIQLT.js";
+} from "./chunk-TZHLY42G.js";
 import {
   TurnInputCommitLostError,
   abandonTurnRecord,
@@ -49,31 +49,31 @@ import {
   saveTurnCheckpoint,
   startActiveTurn,
   upsertConversationMessage
-} from "./chunk-EA4UL5H2.js";
+} from "./chunk-KSQIE2R4.js";
 import {
   normalizeSlackConversationId
-} from "./chunk-5WDDWMQ7.js";
+} from "./chunk-4KRDL4ZD.js";
 import {
   getConversationEventStore,
   getConversationStore,
   getDb
-} from "./chunk-RQQTOF3H.js";
+} from "./chunk-PMULUKHL.js";
 import {
   juniorApiTokens,
   juniorConversationParticipants,
   juniorConversations,
   juniorIdentities,
   juniorUsers
-} from "./chunk-IZHR2OES.js";
+} from "./chunk-YVW44V5Y.js";
 import {
   getSlackBotToken
-} from "./chunk-FMOFCEAA.js";
+} from "./chunk-MKDIEH3C.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";
 import {
   canExposeConversationPayload
-} from "./chunk-ZUKU2Y3J.js";
+} from "./chunk-WZGOP5BZ.js";
 import {
   credentialContextForActor
 } from "./chunk-BDUENQD3.js";
@@ -82,7 +82,7 @@ import {
   logWarn,
   setTags,
   withLogContext
-} from "./chunk-32CCG4WP.js";
+} from "./chunk-V7GGA4LW.js";
 
 // src/handlers/health.ts
 function readHealthReport() {

package/dist/{chunk-BEHPIDVZ.js → chunk-5LZVDKQJ.js}

@@ -5,18 +5,18 @@ import {
 } from "./chunk-BVREIWBD.js";
 import {
   getStateAdapter
-} from "./chunk-65B3PDY7.js";
+} from "./chunk-W72TSO24.js";
 import {
   toOptionalTrimmed
-} from "./chunk-FMOFCEAA.js";
+} from "./chunk-MKDIEH3C.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-7S2JVUWS.js";
+} from "./chunk-L63FA77C.js";
 import {
   setSpanAttributes,
   setSpanStatus,
   withSpan
-} from "./chunk-32CCG4WP.js";
+} from "./chunk-V7GGA4LW.js";
 
 // src/chat/sandbox/resources.ts
 var configuredResources;
@@ -882,7 +882,7 @@ async function stopSession(session) {
 }
 
 // src/chat/sandbox/snapshot/resolve.ts
-var SNAPSHOT_CACHE_PREFIX = "junior:sandbox_snapshot_profile";
+var SNAPSHOT_CACHE_PREFIX = "junior:sandbox_snapshot_profile:v2";
 var SNAPSHOT_LOCK_PREFIX = "junior:sandbox_snapshot_lock";
 var SNAPSHOT_CACHE_TTL_MS = 30 * 24 * 60 * 60 * 1e3;
 var SNAPSHOT_BUILD_LOCK_BUFFER_MS = 30 * 1e3;
@@ -892,7 +892,8 @@ var cachedSnapshotSchema = z.object({
   snapshotId: z.string(),
   runtime: z.string(),
   createdAtMs: z.number(),
-  dependencyCount: z.number()
+  dependencyCount: z.number(),
+  buildDurationMs: z.number().int().nonnegative()
 }).strict();
 function profileCacheKey(profileHash) {
   return `${SNAPSHOT_CACHE_PREFIX}:${profileHash}`;
@@ -937,6 +938,7 @@ async function build(value, runtime, timeoutMs, signal, prepare) {
       "app.sandbox.snapshot.dependency_count": value.dependencyCount
     },
     async () => {
+      const startedAtMs = Date.now();
       const sandboxCredentials = getVercelSandboxCredentials();
       const resources = getSandboxResources();
       const sandbox = createSandboxSession(
@@ -952,7 +954,7 @@ async function build(value, runtime, timeoutMs, signal, prepare) {
         await dependencies(sandbox, value.dependencies, signal);
         await postinstall(sandbox, value.postinstall, signal);
         await prepare?.(sandbox);
-        return await trace(
+        const snapshotId = await trace(
           "sandbox.snapshot.capture",
           "sandbox.snapshot.capture",
           {
@@ -963,6 +965,10 @@ async function build(value, runtime, timeoutMs, signal, prepare) {
             return snapshot.snapshotId;
           }
         );
+        return {
+          snapshotId,
+          buildDurationMs: Math.max(0, Date.now() - startedAtMs)
+        };
       } finally {
         try {
           await sandbox.stop();
@@ -1002,7 +1008,9 @@ async function withBuildLock(profileHash, timeoutMs, callback, canUseCachedSnaps
         if (cached2?.snapshotId && canUseCachedSnapshot(cached2)) {
           return {
             snapshotId: cached2.snapshotId,
-            source: "cache_hit_after_lock_wait"
+            source: "cache_hit_after_lock_wait",
+            createdAtMs: cached2.createdAtMs,
+            buildDurationMs: cached2.buildDurationMs
           };
         }
         lock = await tryAcquireLock();
@@ -1011,7 +1019,9 @@ async function withBuildLock(profileHash, timeoutMs, callback, canUseCachedSnaps
             const result = await callback();
             return {
               snapshotId: result.snapshotId,
-              source: result.source === "built" ? "built" : "cache_hit_after_lock_wait"
+              source: result.source === "built" ? "built" : "cache_hit_after_lock_wait",
+              createdAtMs: result.createdAtMs,
+              buildDurationMs: result.buildDurationMs
             };
           } finally {
             await state.releaseLock(lock);
@@ -1024,7 +1034,9 @@ async function withBuildLock(profileHash, timeoutMs, callback, canUseCachedSnaps
       if (cached?.snapshotId && canUseCachedSnapshot(cached)) {
         return {
           snapshotId: cached.snapshotId,
-          source: "cache_hit_after_lock_wait"
+          source: "cache_hit_after_lock_wait",
+          createdAtMs: cached.createdAtMs,
+          buildDurationMs: cached.buildDurationMs
         };
       }
       throw new Error("Timed out waiting for snapshot build lock");
@@ -1079,7 +1091,9 @@ async function resolve(params) {
           profileHash: currentProfile.hash,
           dependencyCount: currentProfile.dependencyCount,
           cacheHit: true,
-          resolveOutcome: "cache_hit"
+          resolveOutcome: "cache_hit",
+          createdAtMs: cached.createdAtMs,
+          buildDurationMs: cached.buildDurationMs
         };
       }
       const rebuildReason = getRebuildReason({
@@ -1106,26 +1120,35 @@ async function resolve(params) {
             await params.onProgress?.("cache_hit");
             return {
               snapshotId: latest.snapshotId,
-              source: "cache_hit"
+              source: "cache_hit",
+              createdAtMs: latest.createdAtMs,
+              buildDurationMs: latest.buildDurationMs
             };
           }
           await params.onProgress?.("building_snapshot");
-          const nextSnapshotId = await build(
+          const built = await build(
             currentProfile,
             params.runtime,
             params.timeoutMs,
             params.signal,
             params.prepareWorkspace
           );
+          const createdAtMs = Date.now();
           await setCachedSnapshot({
             profileHash: currentProfile.hash,
-            snapshotId: nextSnapshotId,
+            snapshotId: built.snapshotId,
             runtime: params.runtime,
-            createdAtMs: Date.now(),
-            dependencyCount: currentProfile.dependencyCount
+            createdAtMs,
+            dependencyCount: currentProfile.dependencyCount,
+            buildDurationMs: built.buildDurationMs
           });
           await params.onProgress?.("build_complete");
-          return { snapshotId: nextSnapshotId, source: "built" };
+          return {
+            snapshotId: built.snapshotId,
+            source: "built",
+            createdAtMs,
+            buildDurationMs: built.buildDurationMs
+          };
         },
         canUseCachedSnapshot,
         async () => {
@@ -1142,6 +1165,8 @@ async function resolve(params) {
           Boolean(params.forceRebuild),
           lockResult.source
         ),
+        createdAtMs: lockResult.createdAtMs,
+        buildDurationMs: lockResult.buildDurationMs,
         ...rebuildReason ? { rebuildReason } : {}
       };
     }

package/dist/{chunk-DKO4RRGJ.js → chunk-6SJN7JZ3.js}

@@ -1,7 +1,7 @@
 import {
   FUNCTION_TIMEOUT_BUFFER_SECONDS,
   getChatConfig
-} from "./chunk-FMOFCEAA.js";
+} from "./chunk-MKDIEH3C.js";
 
 // src/chat/runtime/request-deadline.ts
 import { AsyncLocalStorage } from "async_hooks";

package/dist/{chunk-6RZ6MMEK.js → chunk-BGRLZPMI.js}

@@ -1,6 +1,6 @@
 import {
   createAndEnqueueAgentInvocation
-} from "./chunk-SA5FVUWJ.js";
+} from "./chunk-IHSPBOWG.js";
 import {
   actorFromRun,
   toolInvocationDestination