@sentry/junior 0.170.0 → 0.171.0

package/dist/{chunk-B53NR3XY.js → chunk-2AYWP7PZ.js}

@@ -1,22 +1,21 @@
 import {
   SANDBOX_WORKSPACE_ROOT,
+  create,
+  isStale,
   runNonInteractiveCommand,
   sleep
-} from "./chunk-BVREIWBD.js";
+} from "./chunk-CVHKLS7B.js";
 import {
   getStateAdapter
-} from "./chunk-74XMBKRI.js";
+} from "./chunk-YURMXTZF.js";
 import {
   toOptionalTrimmed
-} from "./chunk-E7HKIHI5.js";
-import {
-  pluginCatalogRuntime
-} from "./chunk-6E4WQV75.js";
+} from "./chunk-UC35XHGT.js";
 import {
   setSpanAttributes,
   setSpanStatus,
   withSpan
-} from "./chunk-5EPG7PYS.js";
+} from "./chunk-6RRTVWAD.js";
 
 // src/chat/sandbox/resources.ts
 var configuredResources;
@@ -50,266 +49,6 @@ function getSandboxResources() {
   return configuredResources ?? resourcesFromEnv();
 }
 
-// src/chat/sandbox/snapshot/profile.ts
-import { createHash } from "crypto";
-
-// src/chat/sandbox/docker.ts
-var DOCKER_DAEMON_JSON = `{
-  "storage-driver": "overlay2",
-  "live-restore": false
-}
-`;
-var DOCKER_ENSURE_SCRIPT = `#!/bin/sh
-set -eu
-
-if [ "$(id -u)" -ne 0 ]; then
-  exec sudo -n "$0" "$@"
-fi
-
-SOCK=/var/run/docker.sock
-PIDFILE=/var/run/docker.pid
-LOG=/var/log/junior-dockerd.log
-
-is_ready() {
-  [ -S "$SOCK" ] && /usr/bin/docker info >/dev/null 2>&1
-}
-
-if is_ready; then
-  chmod 666 "$SOCK" 2>/dev/null || true
-  exit 0
-fi
-
-mkdir -p /etc/docker /var/lib/docker /var/run /var/log
-if [ ! -f /etc/docker/daemon.json ]; then
-  cat > /etc/docker/daemon.json <<'EOF'
-{
-  "storage-driver": "overlay2",
-  "live-restore": false
-}
-EOF
-fi
-
-if [ -f "$PIDFILE" ]; then
-  oldpid="$(cat "$PIDFILE" 2>/dev/null || true)"
-  if [ -n "\${oldpid:-}" ] && ! kill -0 "$oldpid" 2>/dev/null; then
-    rm -f "$PIDFILE"
-  fi
-fi
-
-if [ ! -f "$PIDFILE" ] || ! kill -0 "$(cat "$PIDFILE" 2>/dev/null)" 2>/dev/null; then
-  # dockerd must outlive this helper; nohup + background is intentional.
-  nohup dockerd --host="unix://$SOCK" --pidfile="$PIDFILE" >"$LOG" 2>&1 &
-fi
-
-i=0
-while [ "$i" -lt 50 ]; do
-  if is_ready; then
-    chmod 666 "$SOCK" 2>/dev/null || true
-    exit 0
-  fi
-  i=$((i + 1))
-  sleep 0.1
-done
-
-echo "junior-ensure-docker: dockerd failed to become ready" >&2
-if [ -f "$LOG" ]; then
-  tail -n 50 "$LOG" >&2 || true
-fi
-exit 1
-`;
-var DOCKER_CLI_WRAPPER_SCRIPT = `#!/bin/sh
-set -eu
-if command -v junior-ensure-docker >/dev/null 2>&1; then
-  junior-ensure-docker
-fi
-exec /usr/bin/docker "$@"
-`;
-var DOCKER_COMPOSE_CLI_WRAPPER_SCRIPT = `#!/bin/sh
-set -eu
-if command -v junior-ensure-docker >/dev/null 2>&1; then
-  junior-ensure-docker
-fi
-exec /usr/local/libexec/junior-docker-compose "$@"
-`;
-async function ensureDockerDaemon(sandbox, signal) {
-  await runNonInteractiveCommand(sandbox, {
-    cmd: "sh",
-    args: [
-      "-c",
-      "command -v junior-ensure-docker >/dev/null 2>&1 && junior-ensure-docker || true"
-    ],
-    signal
-  });
-}
-
-// src/chat/sandbox/runtime-dependencies.ts
-var GLOBAL_RUNTIME_DEPENDENCIES = [
-  { type: "system", package: "docker" },
-  { type: "system", package: "spal-release" },
-  { type: "system", package: "ripgrep" }
-];
-function writeFileCommand(path, contents, mode = "0644") {
-  const payload = Buffer.from(contents, "utf8").toString("base64");
-  return [
-    `printf '%s' '${payload}' | base64 -d > ${path}`,
-    `chmod ${mode} ${path}`
-  ].join("\n");
-}
-function writeExecutableCommand(path, contents) {
-  return writeFileCommand(path, contents, "0755");
-}
-var GLOBAL_RUNTIME_POSTINSTALL = [
-  {
-    cmd: "sh",
-    args: [
-      "-c",
-      [
-        "set -eu",
-        'case "$(uname -m)" in',
-        '  x86_64) asset="x86_64"; sha256="7af95166a730b87e172d4fc9aefea8725d3c6c7327d59149267b452114ddb7d4" ;;',
-        '  aarch64) asset="aarch64"; sha256="49082844b87f03cdcd5f5bbef1ba8c9c897b7a2dfb80cea18d61ec8ca6117e0c" ;;',
-        '  *) echo "unsupported Docker Compose architecture: $(uname -m)" >&2; exit 1 ;;',
-        "esac",
-        'tmp="$(mktemp)"',
-        `trap 'rm -f "$tmp"' EXIT`,
-        'curl --fail --location --silent --show-error "https://github.com/docker/compose/releases/download/v2.39.4/docker-compose-linux-${asset}" --output "$tmp"',
-        'echo "${sha256}  ${tmp}" | sha256sum --check --status',
-        // Keep the real Compose binary off PATH; the wrapper below starts dockerd.
-        'install -D -m 0755 "$tmp" /usr/local/libexec/junior-docker-compose',
-        "mkdir -p /usr/local/lib/docker/cli-plugins /usr/local/libexec /etc/docker /usr/local/bin",
-        `mkdir -p ${SANDBOX_WORKSPACE_ROOT}/.junior/bin`,
-        writeFileCommand("/etc/docker/daemon.json", DOCKER_DAEMON_JSON),
-        writeExecutableCommand(
-          "/usr/local/bin/junior-ensure-docker",
-          DOCKER_ENSURE_SCRIPT
-        ),
-        // docker compose plugin delegates to the real Compose binary.
-        "ln -sfn /usr/local/libexec/junior-docker-compose /usr/local/lib/docker/cli-plugins/docker-compose",
-        // PATH wrappers auto-start dockerd for both CLI entrypoints.
-        writeExecutableCommand(
-          "/usr/local/bin/docker-compose",
-          DOCKER_COMPOSE_CLI_WRAPPER_SCRIPT
-        ),
-        writeExecutableCommand(
-          `${SANDBOX_WORKSPACE_ROOT}/.junior/bin/docker`,
-          DOCKER_CLI_WRAPPER_SCRIPT
-        ),
-        writeExecutableCommand(
-          `${SANDBOX_WORKSPACE_ROOT}/.junior/bin/docker-compose`,
-          DOCKER_COMPOSE_CLI_WRAPPER_SCRIPT
-        ),
-        // Prefer the wrapper over /usr/bin/docker for non-login shells too.
-        writeExecutableCommand(
-          "/usr/local/bin/docker",
-          DOCKER_CLI_WRAPPER_SCRIPT
-        )
-      ].join("\n")
-    ],
-    sudo: true
-  }
-];
-
-// src/chat/sandbox/snapshot/profile.ts
-var VERSION = 1;
-var DEFAULT_FLOATING_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1e3;
-function isExactNpmVersion(version) {
-  return /^\d+\.\d+\.\d+(?:[-+][a-z0-9.]+)?$/i.test(version.trim());
-}
-function isFloating(dep) {
-  return dep.type === "npm" && !isExactNpmVersion(dep.version);
-}
-function mergeDependencies(dependencies2) {
-  const seen = /* @__PURE__ */ new Set();
-  const npmVersions = /* @__PURE__ */ new Map();
-  const merged = [];
-  for (const dependency of dependencies2) {
-    const key = dependency.type === "npm" ? `${dependency.type}:${dependency.package}:${dependency.version}` : "package" in dependency ? `${dependency.type}:package:${dependency.package}` : `${dependency.type}:url:${dependency.url}:${dependency.sha256}`;
-    if (seen.has(key)) {
-      continue;
-    }
-    seen.add(key);
-    if (dependency.type === "npm") {
-      const version = npmVersions.get(dependency.package);
-      if (version !== void 0 && version !== dependency.version) {
-        throw new Error(
-          `Conflicting runtime dependency versions for ${dependency.package}: ${version} and ${dependency.version}`
-        );
-      }
-      npmVersions.set(dependency.package, dependency.version);
-    }
-    merged.push(dependency);
-  }
-  return merged;
-}
-function floatingMaxAgeMs() {
-  const raw = process.env.SANDBOX_SNAPSHOT_FLOATING_MAX_AGE_MS;
-  if (!raw?.trim()) {
-    return DEFAULT_FLOATING_MAX_AGE_MS;
-  }
-  const parsed = Number.parseInt(raw, 10);
-  return Number.isFinite(parsed) && parsed >= 0 ? parsed : DEFAULT_FLOATING_MAX_AGE_MS;
-}
-function compareCodePoints(left, right) {
-  if (left < right) return -1;
-  if (left > right) return 1;
-  return 0;
-}
-function workspaceRecipe(workspace) {
-  const repos = [...workspace.repos].map(({ provider, repo }) => ({
-    provider,
-    repo
-  })).sort((left, right) => {
-    const provider = compareCodePoints(left.provider, right.provider);
-    if (provider !== 0) return provider;
-    return compareCodePoints(left.repo, right.repo);
-  });
-  return {
-    id: workspace.id,
-    repos,
-    setupScript: workspace.setupScript
-  };
-}
-function create(runtime, workspace) {
-  const dependencies2 = mergeDependencies([
-    ...GLOBAL_RUNTIME_DEPENDENCIES,
-    ...pluginCatalogRuntime.getRuntimeDependencies()
-  ]);
-  const pluginPostinstall = pluginCatalogRuntime.getRuntimePostinstall();
-  const postinstall2 = [...GLOBAL_RUNTIME_POSTINSTALL, ...pluginPostinstall];
-  if (dependencies2.length === 0 && postinstall2.length === 0 && !workspace) {
-    return null;
-  }
-  const rebuildEpoch = process.env.SANDBOX_SNAPSHOT_REBUILD_EPOCH?.trim() ?? "";
-  const floating = dependencies2.some((dependency) => isFloating(dependency)) || pluginPostinstall.length > 0 || Boolean(workspace);
-  const hash2 = createHash("sha256").update(
-    JSON.stringify({
-      version: VERSION,
-      runtime,
-      rebuildEpoch,
-      dependencies: dependencies2,
-      postinstall: postinstall2,
-      ...workspace ? { workspace: workspaceRecipe(workspace) } : {}
-    })
-  ).digest("hex");
-  return {
-    hash: hash2,
-    dependencyCount: dependencies2.length,
-    floating,
-    dependencies: dependencies2,
-    postinstall: postinstall2
-  };
-}
-function hash(runtime, workspace) {
-  return create(runtime, workspace)?.hash;
-}
-function isStale(profile, createdAtMs) {
-  if (!profile.floating) {
-    return false;
-  }
-  const maxAgeMs = floatingMaxAgeMs();
-  return maxAgeMs === 0 || Date.now() - createdAtMs > maxAgeMs;
-}
-
 // src/chat/sandbox/snapshot/resolve.ts
 import { Sandbox } from "@vercel/sandbox";
 import { z } from "zod";
@@ -1186,12 +925,9 @@ export {
   wrapSandboxSetupError,
   throwSandboxOperationError,
   getVercelSandboxCredentials,
-  ensureDockerDaemon,
   getSandboxResourceConfig,
   setSandboxResourceConfig,
   getSandboxResources,
-  create,
-  hash,
   bindSandboxFileSystem,
   createSandboxSession,
   stopSession,

package/dist/{chunk-3SFZJVX5.js → chunk-3AX2WCFV.js}

@@ -1,9 +1,9 @@
 import {
   pluginCatalogRuntime
-} from "./chunk-6E4WQV75.js";
+} from "./chunk-SIOO3CCL.js";
 import {
   logWarn
-} from "./chunk-5EPG7PYS.js";
+} from "./chunk-6RRTVWAD.js";
 import {
   skillRoots
 } from "./chunk-H4HBKISO.js";

package/dist/{chunk-T4SEUU7A.js → chunk-4TKPTFSO.js}

@@ -1,7 +1,7 @@
 import {
   FUNCTION_TIMEOUT_BUFFER_SECONDS,
   getChatConfig
-} from "./chunk-E7HKIHI5.js";
+} from "./chunk-UC35XHGT.js";
 
 // src/chat/runtime/request-deadline.ts
 import { AsyncLocalStorage } from "async_hooks";

package/dist/{chunk-6W2UIZSA.js → chunk-5GF7HQOP.js}

@@ -1,6 +1,6 @@
 import {
   DEFAULT_SQL_STATEMENT_TIMEOUT_MS
-} from "./chunk-E7HKIHI5.js";
+} from "./chunk-UC35XHGT.js";
 import {
   juniorDestinations,
   timestamptz
@@ -645,25 +645,25 @@ var juniorSchedulerRuns = pgTable16(
   ]
 );
 
-// src/db/schema/workspaces.ts
+// src/db/schema/snapshots.ts
+import { sql as sql6 } from "drizzle-orm";
 import {
+  check as check2,
+  index as index13,
   integer as integer6,
-  pgTable as pgTable17,
-  primaryKey as primaryKey9,
-  text as text17,
-  uniqueIndex as uniqueIndex7
+  pgTable as pgTable18,
+  text as text18,
+  uniqueIndex as uniqueIndex8
 } from "drizzle-orm/pg-core";
+
+// src/db/schema/workspaces.ts
+import { pgTable as pgTable17, primaryKey as primaryKey9, text as text17, uniqueIndex as uniqueIndex7 } from "drizzle-orm/pg-core";
 var juniorWorkspaces = pgTable17(
   "junior_workspaces",
   {
     id: text17("id").primaryKey(),
     name: text17("name").notNull(),
     setupScript: text17("setup_script").notNull().default(""),
-    // Last successful Workspace snapshot for the dashboard. Resolve still uses Redis.
-    snapshotId: text17("snapshot_id"),
-    snapshotGeneratedAt: timestamptz("snapshot_generated_at"),
-    snapshotBuildDurationMs: integer6("snapshot_build_duration_ms"),
-    snapshotProfileHash: text17("snapshot_profile_hash"),
     createdAt: timestamptz("created_at").notNull(),
     updatedAt: timestamptz("updated_at").notNull()
   },
@@ -681,6 +681,63 @@ var juniorWorkspaceRepos = pgTable17(
   ]
 );
 
+// src/db/schema/snapshots.ts
+var juniorSnapshots = pgTable18(
+  "junior_snapshots",
+  {
+    id: text18("id").primaryKey(),
+    workspaceId: text18("workspace_id").notNull().references(() => juniorWorkspaces.id, { onDelete: "cascade" }),
+    profileHash: text18("profile_hash").notNull(),
+    status: text18("status").$type().notNull(),
+    // Ready artifact facts.
+    snapshotId: text18("snapshot_id"),
+    buildDurationMs: integer6("build_duration_ms"),
+    generatedAt: timestamptz("generated_at"),
+    // In-flight builder references for check-in across execution slices.
+    buildStartedAt: timestamptz("build_started_at"),
+    buildPhase: text18("build_phase").$type(),
+    buildSandboxName: text18("build_sandbox_name"),
+    buildCommandId: text18("build_command_id"),
+    buildError: text18("build_error"),
+    createdAt: timestamptz("created_at").notNull(),
+    updatedAt: timestamptz("updated_at").notNull()
+  },
+  (table) => [
+    check2(
+      "junior_snapshots_status_check",
+      sql6`${table.status} in ('building', 'failed', 'ready')`
+    ),
+    check2(
+      "junior_snapshots_build_phase_check",
+      sql6`${table.buildPhase} is null or ${table.buildPhase} in ('created', 'dependencies_installed', 'repositories_prepared')`
+    ),
+    check2(
+      "junior_snapshots_ready_fields_check",
+      sql6`${table.status} <> 'ready' or (${table.snapshotId} is not null and ${table.buildDurationMs} is not null and ${table.generatedAt} is not null)`
+    ),
+    check2(
+      "junior_snapshots_build_fields_check",
+      sql6`${table.status} = 'ready' or (${table.buildStartedAt} is not null and ${table.buildPhase} is not null)`
+    ),
+    check2(
+      "junior_snapshots_build_duration_check",
+      sql6`${table.buildDurationMs} is null or ${table.buildDurationMs} >= 0`
+    ),
+    // Provider snapshot ids are unique. Nulls stay allowed for in-flight rows.
+    uniqueIndex8("junior_snapshots_snapshot_id_uidx").on(table.snapshotId),
+    index13("junior_snapshots_workspace_idx").on(table.workspaceId),
+    index13("junior_snapshots_workspace_profile_status_idx").on(
+      table.workspaceId,
+      table.profileHash,
+      table.status
+    ),
+    index13("junior_snapshots_workspace_status_idx").on(
+      table.workspaceId,
+      table.status
+    )
+  ]
+);
+
 // src/db/schema.ts
 var juniorSqlSchema = {
   juniorArtifacts,
@@ -697,6 +754,7 @@ var juniorSqlSchema = {
   juniorDestinations,
   juniorEventTasks,
   juniorIdentities,
+  juniorSnapshots,
   juniorStats,
   juniorTaskExecutions,
   juniorSchedulerRuns,
@@ -977,5 +1035,6 @@ export {
   juniorSchedulerRuns,
   juniorWorkspaces,
   juniorWorkspaceRepos,
+  juniorSnapshots,
   createJuniorSqlExecutor
 };

package/dist/{chunk-KQCHIOME.js → chunk-5ML752HJ.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-RF6J3DIO.js";
 import {
   resolveBaseUrl
-} from "./chunk-6GOKKLWF.js";
+} from "./chunk-CWTWZKWH.js";
 import {
   isExperimentalFeatureEnabled
 } from "./chunk-VRS6WDK5.js";
@@ -12,27 +12,27 @@ import {
   getPlugins,
   getSlackClient,
   withSlackRetries
-} from "./chunk-F3I6YFB4.js";
+} from "./chunk-62WK6FLT.js";
 import {
   getDb,
   parseDestination
-} from "./chunk-IX7VHMIJ.js";
+} from "./chunk-HKWEMKK4.js";
 import {
   sleep
-} from "./chunk-BVREIWBD.js";
+} from "./chunk-CVHKLS7B.js";
 import {
   acquireActiveLock,
   getStateAdapter
-} from "./chunk-74XMBKRI.js";
+} from "./chunk-YURMXTZF.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-6E4WQV75.js";
+} from "./chunk-SIOO3CCL.js";
 import {
   fetchWithBoundedOAuthErrorBodies
-} from "./chunk-A22DGDXT.js";
+} from "./chunk-KUYIW4BD.js";
 import {
   isRecord
-} from "./chunk-5EPG7PYS.js";
+} from "./chunk-6RRTVWAD.js";
 
 // src/chat/capabilities/router.ts
 var ProviderCredentialRouter = class {

package/dist/{chunk-UD4BNNM2.js → chunk-5TZ2DKVU.js}

@@ -1,6 +1,6 @@
 import {
   createAndEnqueueAgentInvocation
-} from "./chunk-IF3OK4XO.js";
+} from "./chunk-POF7HORW.js";
 import {
   actorFromRun,
   toolInvocationDestination