@sentry/junior 0.166.0 → 0.168.0

package/dist/{chunk-Q2IPCX7J.js → chunk-2IMUHQWT.js}

@@ -1,7 +1,3 @@
-import {
-  create,
-  isStale
-} from "./chunk-4DARCEZH.js";
 import {
   SANDBOX_WORKSPACE_ROOT,
   runNonInteractiveCommand,
@@ -9,15 +5,18 @@ import {
 } from "./chunk-BVREIWBD.js";
 import {
   getStateAdapter
-} from "./chunk-EKBVHDZO.js";
+} from "./chunk-HFCY2MP6.js";
 import {
   toOptionalTrimmed
-} from "./chunk-AEKBVJMV.js";
+} from "./chunk-RQTHGAPN.js";
+import {
+  pluginCatalogRuntime
+} from "./chunk-2AZWPCBL.js";
 import {
   setSpanAttributes,
   setSpanStatus,
   withSpan
-} from "./chunk-JUFZR2LD.js";
+} from "./chunk-36ANNINB.js";
 
 // src/chat/sandbox/resources.ts
 var configuredResources;
@@ -51,6 +50,266 @@ function getSandboxResources() {
   return configuredResources ?? resourcesFromEnv();
 }
 
+// src/chat/sandbox/snapshot/profile.ts
+import { createHash } from "crypto";
+
+// src/chat/sandbox/docker.ts
+var DOCKER_DAEMON_JSON = `{
+  "storage-driver": "overlay2",
+  "live-restore": false
+}
+`;
+var DOCKER_ENSURE_SCRIPT = `#!/bin/sh
+set -eu
+
+if [ "$(id -u)" -ne 0 ]; then
+  exec sudo -n "$0" "$@"
+fi
+
+SOCK=/var/run/docker.sock
+PIDFILE=/var/run/docker.pid
+LOG=/var/log/junior-dockerd.log
+
+is_ready() {
+  [ -S "$SOCK" ] && /usr/bin/docker info >/dev/null 2>&1
+}
+
+if is_ready; then
+  chmod 666 "$SOCK" 2>/dev/null || true
+  exit 0
+fi
+
+mkdir -p /etc/docker /var/lib/docker /var/run /var/log
+if [ ! -f /etc/docker/daemon.json ]; then
+  cat > /etc/docker/daemon.json <<'EOF'
+{
+  "storage-driver": "overlay2",
+  "live-restore": false
+}
+EOF
+fi
+
+if [ -f "$PIDFILE" ]; then
+  oldpid="$(cat "$PIDFILE" 2>/dev/null || true)"
+  if [ -n "\${oldpid:-}" ] && ! kill -0 "$oldpid" 2>/dev/null; then
+    rm -f "$PIDFILE"
+  fi
+fi
+
+if [ ! -f "$PIDFILE" ] || ! kill -0 "$(cat "$PIDFILE" 2>/dev/null)" 2>/dev/null; then
+  # dockerd must outlive this helper; nohup + background is intentional.
+  nohup dockerd --host="unix://$SOCK" --pidfile="$PIDFILE" >"$LOG" 2>&1 &
+fi
+
+i=0
+while [ "$i" -lt 50 ]; do
+  if is_ready; then
+    chmod 666 "$SOCK" 2>/dev/null || true
+    exit 0
+  fi
+  i=$((i + 1))
+  sleep 0.1
+done
+
+echo "junior-ensure-docker: dockerd failed to become ready" >&2
+if [ -f "$LOG" ]; then
+  tail -n 50 "$LOG" >&2 || true
+fi
+exit 1
+`;
+var DOCKER_CLI_WRAPPER_SCRIPT = `#!/bin/sh
+set -eu
+if command -v junior-ensure-docker >/dev/null 2>&1; then
+  junior-ensure-docker
+fi
+exec /usr/bin/docker "$@"
+`;
+var DOCKER_COMPOSE_CLI_WRAPPER_SCRIPT = `#!/bin/sh
+set -eu
+if command -v junior-ensure-docker >/dev/null 2>&1; then
+  junior-ensure-docker
+fi
+exec /usr/local/libexec/junior-docker-compose "$@"
+`;
+async function ensureDockerDaemon(sandbox, signal) {
+  await runNonInteractiveCommand(sandbox, {
+    cmd: "sh",
+    args: [
+      "-c",
+      "command -v junior-ensure-docker >/dev/null 2>&1 && junior-ensure-docker || true"
+    ],
+    signal
+  });
+}
+
+// src/chat/sandbox/runtime-dependencies.ts
+var GLOBAL_RUNTIME_DEPENDENCIES = [
+  { type: "system", package: "docker" },
+  { type: "system", package: "spal-release" },
+  { type: "system", package: "ripgrep" }
+];
+function writeFileCommand(path, contents, mode = "0644") {
+  const payload = Buffer.from(contents, "utf8").toString("base64");
+  return [
+    `printf '%s' '${payload}' | base64 -d > ${path}`,
+    `chmod ${mode} ${path}`
+  ].join("\n");
+}
+function writeExecutableCommand(path, contents) {
+  return writeFileCommand(path, contents, "0755");
+}
+var GLOBAL_RUNTIME_POSTINSTALL = [
+  {
+    cmd: "sh",
+    args: [
+      "-c",
+      [
+        "set -eu",
+        'case "$(uname -m)" in',
+        '  x86_64) asset="x86_64"; sha256="7af95166a730b87e172d4fc9aefea8725d3c6c7327d59149267b452114ddb7d4" ;;',
+        '  aarch64) asset="aarch64"; sha256="49082844b87f03cdcd5f5bbef1ba8c9c897b7a2dfb80cea18d61ec8ca6117e0c" ;;',
+        '  *) echo "unsupported Docker Compose architecture: $(uname -m)" >&2; exit 1 ;;',
+        "esac",
+        'tmp="$(mktemp)"',
+        `trap 'rm -f "$tmp"' EXIT`,
+        'curl --fail --location --silent --show-error "https://github.com/docker/compose/releases/download/v2.39.4/docker-compose-linux-${asset}" --output "$tmp"',
+        'echo "${sha256}  ${tmp}" | sha256sum --check --status',
+        // Keep the real Compose binary off PATH; the wrapper below starts dockerd.
+        'install -D -m 0755 "$tmp" /usr/local/libexec/junior-docker-compose',
+        "mkdir -p /usr/local/lib/docker/cli-plugins /usr/local/libexec /etc/docker /usr/local/bin",
+        `mkdir -p ${SANDBOX_WORKSPACE_ROOT}/.junior/bin`,
+        writeFileCommand("/etc/docker/daemon.json", DOCKER_DAEMON_JSON),
+        writeExecutableCommand(
+          "/usr/local/bin/junior-ensure-docker",
+          DOCKER_ENSURE_SCRIPT
+        ),
+        // docker compose plugin delegates to the real Compose binary.
+        "ln -sfn /usr/local/libexec/junior-docker-compose /usr/local/lib/docker/cli-plugins/docker-compose",
+        // PATH wrappers auto-start dockerd for both CLI entrypoints.
+        writeExecutableCommand(
+          "/usr/local/bin/docker-compose",
+          DOCKER_COMPOSE_CLI_WRAPPER_SCRIPT
+        ),
+        writeExecutableCommand(
+          `${SANDBOX_WORKSPACE_ROOT}/.junior/bin/docker`,
+          DOCKER_CLI_WRAPPER_SCRIPT
+        ),
+        writeExecutableCommand(
+          `${SANDBOX_WORKSPACE_ROOT}/.junior/bin/docker-compose`,
+          DOCKER_COMPOSE_CLI_WRAPPER_SCRIPT
+        ),
+        // Prefer the wrapper over /usr/bin/docker for non-login shells too.
+        writeExecutableCommand(
+          "/usr/local/bin/docker",
+          DOCKER_CLI_WRAPPER_SCRIPT
+        )
+      ].join("\n")
+    ],
+    sudo: true
+  }
+];
+
+// src/chat/sandbox/snapshot/profile.ts
+var VERSION = 1;
+var DEFAULT_FLOATING_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1e3;
+function isExactNpmVersion(version) {
+  return /^\d+\.\d+\.\d+(?:[-+][a-z0-9.]+)?$/i.test(version.trim());
+}
+function isFloating(dep) {
+  return dep.type === "npm" && !isExactNpmVersion(dep.version);
+}
+function mergeDependencies(dependencies2) {
+  const seen = /* @__PURE__ */ new Set();
+  const npmVersions = /* @__PURE__ */ new Map();
+  const merged = [];
+  for (const dependency of dependencies2) {
+    const key = dependency.type === "npm" ? `${dependency.type}:${dependency.package}:${dependency.version}` : "package" in dependency ? `${dependency.type}:package:${dependency.package}` : `${dependency.type}:url:${dependency.url}:${dependency.sha256}`;
+    if (seen.has(key)) {
+      continue;
+    }
+    seen.add(key);
+    if (dependency.type === "npm") {
+      const version = npmVersions.get(dependency.package);
+      if (version !== void 0 && version !== dependency.version) {
+        throw new Error(
+          `Conflicting runtime dependency versions for ${dependency.package}: ${version} and ${dependency.version}`
+        );
+      }
+      npmVersions.set(dependency.package, dependency.version);
+    }
+    merged.push(dependency);
+  }
+  return merged;
+}
+function floatingMaxAgeMs() {
+  const raw = process.env.SANDBOX_SNAPSHOT_FLOATING_MAX_AGE_MS;
+  if (!raw?.trim()) {
+    return DEFAULT_FLOATING_MAX_AGE_MS;
+  }
+  const parsed = Number.parseInt(raw, 10);
+  return Number.isFinite(parsed) && parsed >= 0 ? parsed : DEFAULT_FLOATING_MAX_AGE_MS;
+}
+function compareCodePoints(left, right) {
+  if (left < right) return -1;
+  if (left > right) return 1;
+  return 0;
+}
+function workspaceRecipe(workspace) {
+  const repos = [...workspace.repos].map(({ provider, repo }) => ({
+    provider,
+    repo
+  })).sort((left, right) => {
+    const provider = compareCodePoints(left.provider, right.provider);
+    if (provider !== 0) return provider;
+    return compareCodePoints(left.repo, right.repo);
+  });
+  return {
+    id: workspace.id,
+    repos,
+    setupScript: workspace.setupScript
+  };
+}
+function create(runtime, workspace) {
+  const dependencies2 = mergeDependencies([
+    ...GLOBAL_RUNTIME_DEPENDENCIES,
+    ...pluginCatalogRuntime.getRuntimeDependencies()
+  ]);
+  const pluginPostinstall = pluginCatalogRuntime.getRuntimePostinstall();
+  const postinstall2 = [...GLOBAL_RUNTIME_POSTINSTALL, ...pluginPostinstall];
+  if (dependencies2.length === 0 && postinstall2.length === 0 && !workspace) {
+    return null;
+  }
+  const rebuildEpoch = process.env.SANDBOX_SNAPSHOT_REBUILD_EPOCH?.trim() ?? "";
+  const floating = dependencies2.some((dependency) => isFloating(dependency)) || pluginPostinstall.length > 0 || Boolean(workspace);
+  const hash2 = createHash("sha256").update(
+    JSON.stringify({
+      version: VERSION,
+      runtime,
+      rebuildEpoch,
+      dependencies: dependencies2,
+      postinstall: postinstall2,
+      ...workspace ? { workspace: workspaceRecipe(workspace) } : {}
+    })
+  ).digest("hex");
+  return {
+    hash: hash2,
+    dependencyCount: dependencies2.length,
+    floating,
+    dependencies: dependencies2,
+    postinstall: postinstall2
+  };
+}
+function hash(runtime, workspace) {
+  return create(runtime, workspace)?.hash;
+}
+function isStale(profile, createdAtMs) {
+  if (!profile.floating) {
+    return false;
+  }
+  const maxAgeMs = floatingMaxAgeMs();
+  return maxAgeMs === 0 || Date.now() - createdAtMs > maxAgeMs;
+}
+
 // src/chat/sandbox/snapshot/resolve.ts
 import { Sandbox } from "@vercel/sandbox";
 import { z } from "zod";
@@ -927,12 +1186,16 @@ export {
   wrapSandboxSetupError,
   throwSandboxOperationError,
   getVercelSandboxCredentials,
+  ensureDockerDaemon,
   getSandboxResourceConfig,
   setSandboxResourceConfig,
   getSandboxResources,
+  create,
+  hash,
   bindSandboxFileSystem,
   createSandboxSession,
   stopSession,
+  getCachedSnapshot,
   resolve,
   isMissingError
 };

package/dist/{chunk-JUFZR2LD.js → chunk-36ANNINB.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-6GWA276C.js";
 import {
   getDeploymentTelemetryAttributes
-} from "./chunk-BKP3PVKR.js";
+} from "./chunk-24LYO2C5.js";
 
 // src/chat/logging.ts
 import path from "path";

package/dist/{chunk-JDTCQDRU.js → chunk-6MG6K3YZ.js}

@@ -7,12 +7,12 @@ import {
   juniorConversations,
   juniorIdentities,
   juniorUsers
-} from "./chunk-65SNO3WK.js";
+} from "./chunk-JW5SNARN.js";
 import {
   TURN_REASONING_LEVELS,
   getChatConfig,
   modelProfileSchema
-} from "./chunk-AEKBVJMV.js";
+} from "./chunk-RQTHGAPN.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";
@@ -23,7 +23,7 @@ import {
 } from "./chunk-V7YE4WCP.js";
 import {
   normalizeIdentityEmail
-} from "./chunk-JUFZR2LD.js";
+} from "./chunk-36ANNINB.js";
 
 // src/chat/conversations/sql/store.ts
 import { randomUUID as randomUUID2 } from "crypto";

package/dist/{chunk-CDBTQQQ4.js → chunk-76TU3ROD.js}

@@ -1,7 +1,7 @@
 import {
   FUNCTION_TIMEOUT_BUFFER_SECONDS,
   getChatConfig
-} from "./chunk-AEKBVJMV.js";
+} from "./chunk-RQTHGAPN.js";
 
 // src/chat/runtime/request-deadline.ts
 import { AsyncLocalStorage } from "async_hooks";

package/dist/{chunk-2KV4BAAN.js → chunk-7GXMR4MF.js}

@@ -1,10 +1,10 @@
 import {
   createWebAuthorization,
   deleteWebAuthorization
-} from "./chunk-OCOGPNHA.js";
+} from "./chunk-KX2QWO3Z.js";
 import {
   appendAndEnqueueInboundMessage
-} from "./chunk-ZKJO4K6M.js";
+} from "./chunk-IC2R5ZYK.js";
 import {
   buildDeliveredTurnStatePatch,
   completeAuthPauseTurn,
@@ -12,20 +12,20 @@ import {
   getTurnUserMessage,
   processPluginTask,
   scheduleSessionCompletedPluginTasks
-} from "./chunk-3EZ5V7XQ.js";
+} from "./chunk-I654GTNX.js";
 import {
   ConversationTurnLifecycleService,
   coerceThreadConversationState,
   getPersistedSandboxState,
   getPersistedThreadState,
   persistThreadStateById
-} from "./chunk-DTQAMME2.js";
+} from "./chunk-DL4L7BBJ.js";
 import {
   healthReportSchema
 } from "./chunk-UTL3MHPC.js";
 import {
   parseSlackThreadId
-} from "./chunk-ABNRESX6.js";
+} from "./chunk-GFAFJWSD.js";
 import {
   TurnInputCommitLostError,
   abandonTurnRecord,
@@ -49,31 +49,31 @@ import {
   saveTurnCheckpoint,
   startActiveTurn,
   upsertConversationMessage
-} from "./chunk-22RO7IDD.js";
+} from "./chunk-YPLOMUS4.js";
 import {
   normalizeSlackConversationId
-} from "./chunk-WX42YNDQ.js";
+} from "./chunk-KXC3RX7T.js";
 import {
   getConversationEventStore,
   getConversationStore,
   getDb
-} from "./chunk-JDTCQDRU.js";
+} from "./chunk-6MG6K3YZ.js";
 import {
   juniorApiTokens,
   juniorConversationParticipants,
   juniorConversations,
   juniorIdentities,
   juniorUsers
-} from "./chunk-65SNO3WK.js";
+} from "./chunk-JW5SNARN.js";
 import {
   getSlackBotToken
-} from "./chunk-AEKBVJMV.js";
+} from "./chunk-RQTHGAPN.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";
 import {
   canExposeConversationPayload
-} from "./chunk-KQ5YZGDV.js";
+} from "./chunk-O6KWHWGM.js";
 import {
   credentialContextForActor
 } from "./chunk-BDUENQD3.js";
@@ -82,7 +82,7 @@ import {
   logWarn,
   setTags,
   withLogContext
-} from "./chunk-JUFZR2LD.js";
+} from "./chunk-36ANNINB.js";
 
 // src/handlers/health.ts
 function readHealthReport() {

package/dist/{chunk-P6UQMGM2.js → chunk-7JMIQWSP.js}

@@ -5,7 +5,7 @@ import {
   logInfo,
   logWarn,
   setSpanAttributes
-} from "./chunk-JUFZR2LD.js";
+} from "./chunk-36ANNINB.js";
 import {
   discoverInstalledPluginPackageContent,
   normalizePluginPackageNames

package/dist/{chunk-FFE3BMAT.js → chunk-AE7IUAXH.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-RF6J3DIO.js";
 import {
   resolveBaseUrl
-} from "./chunk-OYN45QUQ.js";
+} from "./chunk-CHYKJIKV.js";
 import {
   isExperimentalFeatureEnabled
 } from "./chunk-VRS6WDK5.js";
@@ -12,27 +12,27 @@ import {
   getPlugins,
   getSlackClient,
   withSlackRetries
-} from "./chunk-WX42YNDQ.js";
+} from "./chunk-KXC3RX7T.js";
 import {
   getDb,
   parseDestination
-} from "./chunk-JDTCQDRU.js";
+} from "./chunk-6MG6K3YZ.js";
 import {
   sleep
 } from "./chunk-BVREIWBD.js";
 import {
   acquireActiveLock,
   getStateAdapter
-} from "./chunk-EKBVHDZO.js";
+} from "./chunk-HFCY2MP6.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-VNPG55CU.js";
+} from "./chunk-2AZWPCBL.js";
 import {
   fetchWithBoundedOAuthErrorBodies
-} from "./chunk-P6UQMGM2.js";
+} from "./chunk-7JMIQWSP.js";
 import {
   isRecord
-} from "./chunk-JUFZR2LD.js";
+} from "./chunk-36ANNINB.js";
 
 // src/chat/capabilities/router.ts
 var ProviderCredentialRouter = class {

package/dist/{chunk-U2UCDSDF.js → chunk-AGVNNQCS.js}

@@ -1,6 +1,6 @@
 import {
   getTurnRequestDeadline
-} from "./chunk-CDBTQQQ4.js";
+} from "./chunk-76TU3ROD.js";
 import {
   CONVERSATION_WORK_CHECK_IN_INTERVAL_MS,
   CONVERSATION_WORK_MAX_RETRIES,
@@ -21,20 +21,20 @@ import {
   releaseConversationWork,
   requestAnotherSlice,
   startConversationWork
-} from "./chunk-ZKJO4K6M.js";
+} from "./chunk-IC2R5ZYK.js";
 import {
   ConversationQueueMessageRejectedError
 } from "./chunk-JAL3CH4G.js";
 import {
   getChatConfig,
   isProviderRetryError
-} from "./chunk-AEKBVJMV.js";
+} from "./chunk-RQTHGAPN.js";
 import {
   logException,
   logInfo,
   logWarn,
   withLogContext
-} from "./chunk-JUFZR2LD.js";
+} from "./chunk-36ANNINB.js";
 
 // src/chat/task-execution/worker.ts
 var CONVERSATION_WORK_DEFER_DELAY_MS = 15e3;

package/dist/{chunk-FEYQVP64.js → chunk-B547UCF7.js}

@@ -4,7 +4,7 @@ import {
 import {
   formatProviderLabel,
   startOAuthFlow
-} from "./chunk-OYN45QUQ.js";
+} from "./chunk-CHYKJIKV.js";
 import {
   parseSandboxEgressAuthRequiredSignal
 } from "./chunk-7MA4HV4W.js";
@@ -12,16 +12,16 @@ import {
   abandonReplacedPendingAuth,
   canReusePendingAuthLink,
   recordAuthorizationRequested
-} from "./chunk-22RO7IDD.js";
+} from "./chunk-YPLOMUS4.js";
 import {
   AGENT_INVOCATION_MAILBOX_STATUSES
-} from "./chunk-65SNO3WK.js";
+} from "./chunk-JW5SNARN.js";
 import {
   TURN_REASONING_LEVELS
-} from "./chunk-AEKBVJMV.js";
+} from "./chunk-RQTHGAPN.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-VNPG55CU.js";
+} from "./chunk-2AZWPCBL.js";
 import {
   credentialContextSchema
 } from "./chunk-BDUENQD3.js";

package/dist/{chunk-OYN45QUQ.js → chunk-CHYKJIKV.js}

@@ -5,19 +5,19 @@ import {
   isDmChannel,
   normalizeSlackConversationId,
   withSlackRetries
-} from "./chunk-WX42YNDQ.js";
+} from "./chunk-KXC3RX7T.js";
 import {
   parseDestination
-} from "./chunk-JDTCQDRU.js";
+} from "./chunk-6MG6K3YZ.js";
 import {
   getStateAdapter
-} from "./chunk-EKBVHDZO.js";
+} from "./chunk-HFCY2MP6.js";
 import {
   normalizeSlackEmojiName
-} from "./chunk-AEKBVJMV.js";
+} from "./chunk-RQTHGAPN.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-VNPG55CU.js";
+} from "./chunk-2AZWPCBL.js";
 import {
   parseSlackMessageTs,
   parseSlackUserId
@@ -26,7 +26,7 @@ import {
   isRecord,
   logInfo,
   logWarn
-} from "./chunk-JUFZR2LD.js";
+} from "./chunk-36ANNINB.js";
 
 // src/chat/slack/outbound.ts
 var MAX_SLACK_MESSAGE_TEXT_CHARS = 4e4;

package/dist/{chunk-DTQAMME2.js → chunk-DL4L7BBJ.js}

@@ -1,18 +1,18 @@
 import {
   persistConversationMessages
-} from "./chunk-22RO7IDD.js";
+} from "./chunk-YPLOMUS4.js";
 import {
   JUNIOR_THREAD_STATE_TTL_MS
 } from "./chunk-3Y47VMHV.js";
 import {
   getDb
-} from "./chunk-JDTCQDRU.js";
+} from "./chunk-6MG6K3YZ.js";
 import {
   juniorLocationConfigurations
-} from "./chunk-65SNO3WK.js";
+} from "./chunk-JW5SNARN.js";
 import {
   getStateAdapter
-} from "./chunk-EKBVHDZO.js";
+} from "./chunk-HFCY2MP6.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";
@@ -20,7 +20,7 @@ import {
   isRecord,
   toOptionalNumber,
   toOptionalString
-} from "./chunk-JUFZR2LD.js";
+} from "./chunk-36ANNINB.js";
 
 // src/chat/conversations/turn-lifecycle.ts
 var ConversationTurnLifecycleService = class {