@sentry/junior 0.170.0 → 0.172.0

package/dist/{chunk-B53NR3XY.js → chunk-QBHPQCEQ.js}

@@ -1,22 +1,21 @@
 import {
   SANDBOX_WORKSPACE_ROOT,
+  create,
+  isStale,
   runNonInteractiveCommand,
   sleep
-} from "./chunk-BVREIWBD.js";
+} from "./chunk-IFSKN5VH.js";
 import {
   getStateAdapter
-} from "./chunk-74XMBKRI.js";
+} from "./chunk-FUYKKSDV.js";
 import {
   toOptionalTrimmed
-} from "./chunk-E7HKIHI5.js";
-import {
-  pluginCatalogRuntime
-} from "./chunk-6E4WQV75.js";
+} from "./chunk-CBPREIWS.js";
 import {
   setSpanAttributes,
   setSpanStatus,
   withSpan
-} from "./chunk-5EPG7PYS.js";
+} from "./chunk-IAOQPDO6.js";
 
 // src/chat/sandbox/resources.ts
 var configuredResources;
@@ -50,266 +49,6 @@ function getSandboxResources() {
   return configuredResources ?? resourcesFromEnv();
 }
 
-// src/chat/sandbox/snapshot/profile.ts
-import { createHash } from "crypto";
-
-// src/chat/sandbox/docker.ts
-var DOCKER_DAEMON_JSON = `{
-  "storage-driver": "overlay2",
-  "live-restore": false
-}
-`;
-var DOCKER_ENSURE_SCRIPT = `#!/bin/sh
-set -eu
-
-if [ "$(id -u)" -ne 0 ]; then
-  exec sudo -n "$0" "$@"
-fi
-
-SOCK=/var/run/docker.sock
-PIDFILE=/var/run/docker.pid
-LOG=/var/log/junior-dockerd.log
-
-is_ready() {
-  [ -S "$SOCK" ] && /usr/bin/docker info >/dev/null 2>&1
-}
-
-if is_ready; then
-  chmod 666 "$SOCK" 2>/dev/null || true
-  exit 0
-fi
-
-mkdir -p /etc/docker /var/lib/docker /var/run /var/log
-if [ ! -f /etc/docker/daemon.json ]; then
-  cat > /etc/docker/daemon.json <<'EOF'
-{
-  "storage-driver": "overlay2",
-  "live-restore": false
-}
-EOF
-fi
-
-if [ -f "$PIDFILE" ]; then
-  oldpid="$(cat "$PIDFILE" 2>/dev/null || true)"
-  if [ -n "\${oldpid:-}" ] && ! kill -0 "$oldpid" 2>/dev/null; then
-    rm -f "$PIDFILE"
-  fi
-fi
-
-if [ ! -f "$PIDFILE" ] || ! kill -0 "$(cat "$PIDFILE" 2>/dev/null)" 2>/dev/null; then
-  # dockerd must outlive this helper; nohup + background is intentional.
-  nohup dockerd --host="unix://$SOCK" --pidfile="$PIDFILE" >"$LOG" 2>&1 &
-fi
-
-i=0
-while [ "$i" -lt 50 ]; do
-  if is_ready; then
-    chmod 666 "$SOCK" 2>/dev/null || true
-    exit 0
-  fi
-  i=$((i + 1))
-  sleep 0.1
-done
-
-echo "junior-ensure-docker: dockerd failed to become ready" >&2
-if [ -f "$LOG" ]; then
-  tail -n 50 "$LOG" >&2 || true
-fi
-exit 1
-`;
-var DOCKER_CLI_WRAPPER_SCRIPT = `#!/bin/sh
-set -eu
-if command -v junior-ensure-docker >/dev/null 2>&1; then
-  junior-ensure-docker
-fi
-exec /usr/bin/docker "$@"
-`;
-var DOCKER_COMPOSE_CLI_WRAPPER_SCRIPT = `#!/bin/sh
-set -eu
-if command -v junior-ensure-docker >/dev/null 2>&1; then
-  junior-ensure-docker
-fi
-exec /usr/local/libexec/junior-docker-compose "$@"
-`;
-async function ensureDockerDaemon(sandbox, signal) {
-  await runNonInteractiveCommand(sandbox, {
-    cmd: "sh",
-    args: [
-      "-c",
-      "command -v junior-ensure-docker >/dev/null 2>&1 && junior-ensure-docker || true"
-    ],
-    signal
-  });
-}
-
-// src/chat/sandbox/runtime-dependencies.ts
-var GLOBAL_RUNTIME_DEPENDENCIES = [
-  { type: "system", package: "docker" },
-  { type: "system", package: "spal-release" },
-  { type: "system", package: "ripgrep" }
-];
-function writeFileCommand(path, contents, mode = "0644") {
-  const payload = Buffer.from(contents, "utf8").toString("base64");
-  return [
-    `printf '%s' '${payload}' | base64 -d > ${path}`,
-    `chmod ${mode} ${path}`
-  ].join("\n");
-}
-function writeExecutableCommand(path, contents) {
-  return writeFileCommand(path, contents, "0755");
-}
-var GLOBAL_RUNTIME_POSTINSTALL = [
-  {
-    cmd: "sh",
-    args: [
-      "-c",
-      [
-        "set -eu",
-        'case "$(uname -m)" in',
-        '  x86_64) asset="x86_64"; sha256="7af95166a730b87e172d4fc9aefea8725d3c6c7327d59149267b452114ddb7d4" ;;',
-        '  aarch64) asset="aarch64"; sha256="49082844b87f03cdcd5f5bbef1ba8c9c897b7a2dfb80cea18d61ec8ca6117e0c" ;;',
-        '  *) echo "unsupported Docker Compose architecture: $(uname -m)" >&2; exit 1 ;;',
-        "esac",
-        'tmp="$(mktemp)"',
-        `trap 'rm -f "$tmp"' EXIT`,
-        'curl --fail --location --silent --show-error "https://github.com/docker/compose/releases/download/v2.39.4/docker-compose-linux-${asset}" --output "$tmp"',
-        'echo "${sha256}  ${tmp}" | sha256sum --check --status',
-        // Keep the real Compose binary off PATH; the wrapper below starts dockerd.
-        'install -D -m 0755 "$tmp" /usr/local/libexec/junior-docker-compose',
-        "mkdir -p /usr/local/lib/docker/cli-plugins /usr/local/libexec /etc/docker /usr/local/bin",
-        `mkdir -p ${SANDBOX_WORKSPACE_ROOT}/.junior/bin`,
-        writeFileCommand("/etc/docker/daemon.json", DOCKER_DAEMON_JSON),
-        writeExecutableCommand(
-          "/usr/local/bin/junior-ensure-docker",
-          DOCKER_ENSURE_SCRIPT
-        ),
-        // docker compose plugin delegates to the real Compose binary.
-        "ln -sfn /usr/local/libexec/junior-docker-compose /usr/local/lib/docker/cli-plugins/docker-compose",
-        // PATH wrappers auto-start dockerd for both CLI entrypoints.
-        writeExecutableCommand(
-          "/usr/local/bin/docker-compose",
-          DOCKER_COMPOSE_CLI_WRAPPER_SCRIPT
-        ),
-        writeExecutableCommand(
-          `${SANDBOX_WORKSPACE_ROOT}/.junior/bin/docker`,
-          DOCKER_CLI_WRAPPER_SCRIPT
-        ),
-        writeExecutableCommand(
-          `${SANDBOX_WORKSPACE_ROOT}/.junior/bin/docker-compose`,
-          DOCKER_COMPOSE_CLI_WRAPPER_SCRIPT
-        ),
-        // Prefer the wrapper over /usr/bin/docker for non-login shells too.
-        writeExecutableCommand(
-          "/usr/local/bin/docker",
-          DOCKER_CLI_WRAPPER_SCRIPT
-        )
-      ].join("\n")
-    ],
-    sudo: true
-  }
-];
-
-// src/chat/sandbox/snapshot/profile.ts
-var VERSION = 1;
-var DEFAULT_FLOATING_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1e3;
-function isExactNpmVersion(version) {
-  return /^\d+\.\d+\.\d+(?:[-+][a-z0-9.]+)?$/i.test(version.trim());
-}
-function isFloating(dep) {
-  return dep.type === "npm" && !isExactNpmVersion(dep.version);
-}
-function mergeDependencies(dependencies2) {
-  const seen = /* @__PURE__ */ new Set();
-  const npmVersions = /* @__PURE__ */ new Map();
-  const merged = [];
-  for (const dependency of dependencies2) {
-    const key = dependency.type === "npm" ? `${dependency.type}:${dependency.package}:${dependency.version}` : "package" in dependency ? `${dependency.type}:package:${dependency.package}` : `${dependency.type}:url:${dependency.url}:${dependency.sha256}`;
-    if (seen.has(key)) {
-      continue;
-    }
-    seen.add(key);
-    if (dependency.type === "npm") {
-      const version = npmVersions.get(dependency.package);
-      if (version !== void 0 && version !== dependency.version) {
-        throw new Error(
-          `Conflicting runtime dependency versions for ${dependency.package}: ${version} and ${dependency.version}`
-        );
-      }
-      npmVersions.set(dependency.package, dependency.version);
-    }
-    merged.push(dependency);
-  }
-  return merged;
-}
-function floatingMaxAgeMs() {
-  const raw = process.env.SANDBOX_SNAPSHOT_FLOATING_MAX_AGE_MS;
-  if (!raw?.trim()) {
-    return DEFAULT_FLOATING_MAX_AGE_MS;
-  }
-  const parsed = Number.parseInt(raw, 10);
-  return Number.isFinite(parsed) && parsed >= 0 ? parsed : DEFAULT_FLOATING_MAX_AGE_MS;
-}
-function compareCodePoints(left, right) {
-  if (left < right) return -1;
-  if (left > right) return 1;
-  return 0;
-}
-function workspaceRecipe(workspace) {
-  const repos = [...workspace.repos].map(({ provider, repo }) => ({
-    provider,
-    repo
-  })).sort((left, right) => {
-    const provider = compareCodePoints(left.provider, right.provider);
-    if (provider !== 0) return provider;
-    return compareCodePoints(left.repo, right.repo);
-  });
-  return {
-    id: workspace.id,
-    repos,
-    setupScript: workspace.setupScript
-  };
-}
-function create(runtime, workspace) {
-  const dependencies2 = mergeDependencies([
-    ...GLOBAL_RUNTIME_DEPENDENCIES,
-    ...pluginCatalogRuntime.getRuntimeDependencies()
-  ]);
-  const pluginPostinstall = pluginCatalogRuntime.getRuntimePostinstall();
-  const postinstall2 = [...GLOBAL_RUNTIME_POSTINSTALL, ...pluginPostinstall];
-  if (dependencies2.length === 0 && postinstall2.length === 0 && !workspace) {
-    return null;
-  }
-  const rebuildEpoch = process.env.SANDBOX_SNAPSHOT_REBUILD_EPOCH?.trim() ?? "";
-  const floating = dependencies2.some((dependency) => isFloating(dependency)) || pluginPostinstall.length > 0 || Boolean(workspace);
-  const hash2 = createHash("sha256").update(
-    JSON.stringify({
-      version: VERSION,
-      runtime,
-      rebuildEpoch,
-      dependencies: dependencies2,
-      postinstall: postinstall2,
-      ...workspace ? { workspace: workspaceRecipe(workspace) } : {}
-    })
-  ).digest("hex");
-  return {
-    hash: hash2,
-    dependencyCount: dependencies2.length,
-    floating,
-    dependencies: dependencies2,
-    postinstall: postinstall2
-  };
-}
-function hash(runtime, workspace) {
-  return create(runtime, workspace)?.hash;
-}
-function isStale(profile, createdAtMs) {
-  if (!profile.floating) {
-    return false;
-  }
-  const maxAgeMs = floatingMaxAgeMs();
-  return maxAgeMs === 0 || Date.now() - createdAtMs > maxAgeMs;
-}
-
 // src/chat/sandbox/snapshot/resolve.ts
 import { Sandbox } from "@vercel/sandbox";
 import { z } from "zod";
@@ -1186,12 +925,9 @@ export {
   wrapSandboxSetupError,
   throwSandboxOperationError,
   getVercelSandboxCredentials,
-  ensureDockerDaemon,
   getSandboxResourceConfig,
   setSandboxResourceConfig,
   getSandboxResources,
-  create,
-  hash,
   bindSandboxFileSystem,
   createSandboxSession,
   stopSession,

package/dist/{chunk-NFERKIUX.js → chunk-QCGDWFYC.js}

@@ -1,6 +1,6 @@
 import {
   getTurnRequestDeadline
-} from "./chunk-T4SEUU7A.js";
+} from "./chunk-Q36YWAJT.js";
 import {
   CONVERSATION_WORK_CHECK_IN_INTERVAL_MS,
   CONVERSATION_WORK_MAX_RETRIES,
@@ -21,20 +21,20 @@ import {
   releaseConversationWork,
   requestAnotherSlice,
   startConversationWork
-} from "./chunk-7TVGQZOH.js";
+} from "./chunk-CO47EWFW.js";
 import {
   ConversationQueueMessageRejectedError
 } from "./chunk-JAL3CH4G.js";
 import {
   getChatConfig,
   isProviderRetryError
-} from "./chunk-E7HKIHI5.js";
+} from "./chunk-CBPREIWS.js";
 import {
   logException,
   logInfo,
   logWarn,
   withLogContext
-} from "./chunk-5EPG7PYS.js";
+} from "./chunk-IAOQPDO6.js";
 
 // src/chat/task-execution/worker.ts
 var CONVERSATION_WORK_DEFER_DELAY_MS = 15e3;

package/dist/{chunk-KQCHIOME.js → chunk-SU7QH274.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-RF6J3DIO.js";
 import {
   resolveBaseUrl
-} from "./chunk-6GOKKLWF.js";
+} from "./chunk-G2DJ7LUE.js";
 import {
   isExperimentalFeatureEnabled
 } from "./chunk-VRS6WDK5.js";
@@ -12,27 +12,27 @@ import {
   getPlugins,
   getSlackClient,
   withSlackRetries
-} from "./chunk-F3I6YFB4.js";
+} from "./chunk-YRBLN5PJ.js";
 import {
   getDb,
   parseDestination
-} from "./chunk-IX7VHMIJ.js";
+} from "./chunk-Y4AEFUEV.js";
 import {
   sleep
-} from "./chunk-BVREIWBD.js";
+} from "./chunk-IFSKN5VH.js";
 import {
   acquireActiveLock,
   getStateAdapter
-} from "./chunk-74XMBKRI.js";
+} from "./chunk-FUYKKSDV.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-6E4WQV75.js";
+} from "./chunk-HEOOUGVL.js";
 import {
   fetchWithBoundedOAuthErrorBodies
-} from "./chunk-A22DGDXT.js";
+} from "./chunk-NB7WS4SP.js";
 import {
   isRecord
-} from "./chunk-5EPG7PYS.js";
+} from "./chunk-IAOQPDO6.js";
 
 // src/chat/capabilities/router.ts
 var ProviderCredentialRouter = class {

package/dist/{chunk-IF3OK4XO.js → chunk-TWIRPYVB.js}

@@ -1,12 +1,12 @@
 import {
   appendAndEnqueueInboundMessage
-} from "./chunk-7TVGQZOH.js";
+} from "./chunk-CO47EWFW.js";
 import {
   ConversationTurnLifecycleService,
   getPersistedSandboxState,
   getPersistedThreadState,
   persistThreadStateById
-} from "./chunk-TX553KXA.js";
+} from "./chunk-A6AJ354O.js";
 import {
   AgentInvocationBusyError,
   AgentInvocationLimitError,
@@ -15,7 +15,7 @@ import {
   agentBindingSchema,
   agentInvocationSchema,
   createAgentInvocationSchema
-} from "./chunk-FKOLWEMX.js";
+} from "./chunk-W6THM2TX.js";
 import {
   TurnInputCommitLostError,
   failTurnRecord,
@@ -26,16 +26,16 @@ import {
   isTurnInputCommitLostError,
   openConversationProjection,
   saveTurnCheckpoint
-} from "./chunk-HZALSYOW.js";
+} from "./chunk-G4GNP4Q2.js";
 import {
   getConversationEventStore,
   getConversationStore,
   getSqlExecutor
-} from "./chunk-IX7VHMIJ.js";
+} from "./chunk-Y4AEFUEV.js";
 import {
   juniorAgentBindings,
   juniorAgentInvocations
-} from "./chunk-6W2UIZSA.js";
+} from "./chunk-LVNMMESU.js";
 
 // src/chat/agent-invocations/work.ts
 import { z } from "zod";

package/dist/{chunk-FKOLWEMX.js → chunk-W6THM2TX.js}

@@ -4,7 +4,7 @@ import {
 import {
   formatProviderLabel,
   startOAuthFlow
-} from "./chunk-6GOKKLWF.js";
+} from "./chunk-G2DJ7LUE.js";
 import {
   parseSandboxEgressAuthRequiredSignal
 } from "./chunk-6ZWRNC4D.js";
@@ -12,16 +12,16 @@ import {
   abandonReplacedPendingAuth,
   canReusePendingAuthLink,
   recordAuthorizationRequested
-} from "./chunk-HZALSYOW.js";
+} from "./chunk-G4GNP4Q2.js";
 import {
   AGENT_INVOCATION_MAILBOX_STATUSES
-} from "./chunk-6W2UIZSA.js";
+} from "./chunk-LVNMMESU.js";
 import {
   TURN_REASONING_LEVELS
-} from "./chunk-E7HKIHI5.js";
+} from "./chunk-CBPREIWS.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-6E4WQV75.js";
+} from "./chunk-HEOOUGVL.js";
 import {
   credentialContextSchema
 } from "./chunk-CGA4ERJ5.js";

package/dist/{chunk-UHW5RAIB.js → chunk-XSO5JEHI.js}

@@ -1,10 +1,10 @@
 import {
   createWebAuthorization,
   deleteWebAuthorization
-} from "./chunk-NESGW5HV.js";
+} from "./chunk-27T2WQJV.js";
 import {
   appendAndEnqueueInboundMessage
-} from "./chunk-7TVGQZOH.js";
+} from "./chunk-CO47EWFW.js";
 import {
   buildDeliveredTurnStatePatch,
   completeAuthPauseTurn,
@@ -12,20 +12,20 @@ import {
   getTurnUserMessage,
   processPluginTask,
   scheduleSessionCompletedPluginTasks
-} from "./chunk-2XI6OLXA.js";
+} from "./chunk-CUJ2T7FO.js";
 import {
   ConversationTurnLifecycleService,
   coerceThreadConversationState,
   getPersistedSandboxState,
   getPersistedThreadState,
   persistThreadStateById
-} from "./chunk-TX553KXA.js";
+} from "./chunk-A6AJ354O.js";
 import {
   healthReportSchema
 } from "./chunk-UTL3MHPC.js";
 import {
   parseSlackThreadId
-} from "./chunk-4PSUCN4P.js";
+} from "./chunk-FESC2EW7.js";
 import {
   TurnInputCommitLostError,
   abandonTurnRecord,
@@ -49,31 +49,31 @@ import {
   saveTurnCheckpoint,
   startActiveTurn,
   upsertConversationMessage
-} from "./chunk-HZALSYOW.js";
+} from "./chunk-G4GNP4Q2.js";
 import {
   normalizeSlackConversationId
-} from "./chunk-F3I6YFB4.js";
+} from "./chunk-YRBLN5PJ.js";
 import {
   getConversationEventStore,
   getConversationStore,
   getDb
-} from "./chunk-IX7VHMIJ.js";
+} from "./chunk-Y4AEFUEV.js";
 import {
   juniorApiTokens,
   juniorConversationParticipants,
   juniorConversations,
   juniorIdentities,
   juniorUsers
-} from "./chunk-6W2UIZSA.js";
+} from "./chunk-LVNMMESU.js";
 import {
   getSlackBotToken
-} from "./chunk-E7HKIHI5.js";
+} from "./chunk-CBPREIWS.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";
 import {
   canExposeConversationPayload
-} from "./chunk-NGL4XFT2.js";
+} from "./chunk-QAEKVEZY.js";
 import {
   credentialContextForActor
 } from "./chunk-CGA4ERJ5.js";
@@ -82,7 +82,7 @@ import {
   logWarn,
   setTags,
   withLogContext
-} from "./chunk-5EPG7PYS.js";
+} from "./chunk-IAOQPDO6.js";
 
 // src/handlers/health.ts
 function readHealthReport() {

package/dist/{chunk-IX7VHMIJ.js → chunk-Y4AEFUEV.js}

@@ -7,12 +7,12 @@ import {
   juniorConversations,
   juniorIdentities,
   juniorUsers
-} from "./chunk-6W2UIZSA.js";
+} from "./chunk-LVNMMESU.js";
 import {
   TURN_REASONING_LEVELS,
   getChatConfig,
   modelProfileSchema
-} from "./chunk-E7HKIHI5.js";
+} from "./chunk-CBPREIWS.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";
@@ -23,7 +23,7 @@ import {
 } from "./chunk-M63DETLL.js";
 import {
   normalizeIdentityEmail
-} from "./chunk-5EPG7PYS.js";
+} from "./chunk-IAOQPDO6.js";
 
 // src/chat/conversations/sql/store.ts
 import { randomUUID as randomUUID2 } from "crypto";