@sentry/junior 0.19.0 → 0.21.0

package/dist/{chunk-DTOS5CG4.js → chunk-N4ICA2BC.js}

@@ -4,7 +4,7 @@ import {
 import {
   discoverInstalledPluginPackageContent,
   pluginRoots
-} from "./chunk-RBB2MZAN.js";
+} from "./chunk-XPXD3FCE.js";
 
 // src/chat/logging.ts
 import { AsyncLocalStorage } from "async_hooks";
@@ -1738,6 +1738,29 @@ var CredentialUnavailableError = class extends Error {
   }
 };
 
+// src/chat/credentials/oauth-scope.ts
+function parseScope(scope) {
+  if (!scope) {
+    return [];
+  }
+  return [...new Set(scope.split(/\s+/).filter(Boolean))].sort();
+}
+function normalizeOAuthScope(scope) {
+  const parsed = parseScope(scope);
+  return parsed.length > 0 ? parsed.join(" ") : void 0;
+}
+function hasRequiredOAuthScope(storedScope, requiredScope) {
+  const required = parseScope(requiredScope);
+  if (required.length === 0) {
+    return true;
+  }
+  const stored = new Set(parseScope(storedScope));
+  if (stored.size === 0) {
+    return false;
+  }
+  return required.every((scope) => stored.has(scope));
+}
+
 // src/chat/plugins/auth/oauth-request.ts
 var DEFAULT_TOKEN_CONTENT_TYPE = "application/x-www-form-urlencoded";
 function requireNonEmptyTokenField(data, field) {
@@ -1785,12 +1808,22 @@ function buildOAuthTokenRequest(input) {
     body: contentTypeToBody(contentType, payload)
   };
 }
-function parseOAuthTokenResponse(data) {
+function parseOAuthTokenResponse(data, fallbackScope) {
   const accessToken = requireNonEmptyTokenField(data, "access_token");
   const refreshToken = requireNonEmptyTokenField(data, "refresh_token");
   const expiresIn = data.expires_in;
+  const responseScope = data.scope;
+  let scope;
+  if (responseScope !== void 0) {
+    if (typeof responseScope !== "string" || !responseScope.trim()) {
+      throw new Error("OAuth token response returned invalid scope");
+    }
+    scope = normalizeOAuthScope(responseScope);
+  } else {
+    scope = normalizeOAuthScope(fallbackScope);
+  }
   if (expiresIn === void 0) {
-    return { accessToken, refreshToken };
+    return { accessToken, refreshToken, ...scope ? { scope } : {} };
   }
   if (typeof expiresIn !== "number" || !Number.isFinite(expiresIn) || expiresIn <= 0) {
     throw new Error("OAuth token response returned invalid expires_in");
@@ -1798,14 +1831,15 @@ function parseOAuthTokenResponse(data) {
   return {
     accessToken,
     refreshToken,
-    expiresAt: Date.now() + expiresIn * 1e3
+    expiresAt: Date.now() + expiresIn * 1e3,
+    ...scope ? { scope } : {}
   };
 }
 
 // src/chat/plugins/auth/oauth-bearer-broker.ts
 var MAX_LEASE_MS2 = 60 * 60 * 1e3;
 var REFRESH_BUFFER_MS = 5 * 60 * 1e3;
-async function refreshAccessToken(refreshToken, oauth) {
+async function refreshAccessToken(refreshToken, oauth, fallbackScope) {
   const clientId = process.env[oauth.clientIdEnv]?.trim();
   const clientSecret = process.env[oauth.clientSecretEnv]?.trim();
   if (!clientId || !clientSecret) {
@@ -1832,7 +1866,7 @@ async function refreshAccessToken(refreshToken, oauth) {
     throw new Error(`Token refresh failed: ${response.status}`);
   }
   const data = await response.json();
-  return parseOAuthTokenResponse(data);
+  return parseOAuthTokenResponse(data, fallbackScope);
 }
 function getLeaseExpiry(expiresAt) {
   return expiresAt ? Math.min(expiresAt, Date.now() + MAX_LEASE_MS2) : Date.now() + MAX_LEASE_MS2;
@@ -1885,13 +1919,26 @@ function createOAuthBearerBroker(manifest, credentials, deps) {
           provider
         );
         if (stored) {
+          if (!hasRequiredOAuthScope(stored.scope, oauth.scope)) {
+            throw new CredentialUnavailableError(
+              provider,
+              `Your ${provider} connection needs to be reauthorized.`
+            );
+          }
           const now = Date.now();
           if (stored.expiresAt !== void 0 && stored.expiresAt - now < REFRESH_BUFFER_MS) {
             try {
               const refreshed = await refreshAccessToken(
                 stored.refreshToken,
-                oauth
+                oauth,
+                stored.scope ?? oauth.scope
               );
+              if (!hasRequiredOAuthScope(refreshed.scope, oauth.scope)) {
+                throw new CredentialUnavailableError(
+                  provider,
+                  `Your ${provider} connection needs to be reauthorized.`
+                );
+              }
               await deps.userTokenStore.set(
                 input.requesterId,
                 provider,
@@ -1903,7 +1950,10 @@ function createOAuthBearerBroker(manifest, credentials, deps) {
                 getLeaseExpiry(refreshed.expiresAt),
                 input.reason
               );
-            } catch {
+            } catch (error) {
+              if (error instanceof CredentialUnavailableError) {
+                throw error;
+              }
               if (stored.expiresAt > Date.now()) {
                 return buildLease(
                   stored.accessToken,
@@ -2303,6 +2353,7 @@ export {
   resolveAuthTokenPlaceholder,
   parsePluginManifest,
   CredentialUnavailableError,
+  hasRequiredOAuthScope,
   buildOAuthTokenRequest,
   parseOAuthTokenResponse,
   getPluginCatalogSignature,

package/dist/{chunk-4XWTSMRF.js → chunk-NRSP2MLC.js}

@@ -5,10 +5,10 @@ import {
   getPluginSkillRoots,
   logInfo,
   logWarn
-} from "./chunk-DTOS5CG4.js";
+} from "./chunk-N4ICA2BC.js";
 import {
   skillRoots
-} from "./chunk-RBB2MZAN.js";
+} from "./chunk-XPXD3FCE.js";
 
 // src/chat/skills.ts
 import fs from "fs/promises";
@@ -431,7 +431,6 @@ export {
   getCapabilityProvider,
   listCapabilityProviders,
   logCapabilityCatalogLoadedOnce,
-  stripFrontmatter,
   parseSkillFile,
   discoverSkills,
   parseSkillInvocation,

package/dist/{chunk-RBB2MZAN.js → chunk-XPXD3FCE.js}

@@ -113,14 +113,14 @@ function pathExists(targetPath) {
   }
 }
 function hasAnyDataMarkers(appDir) {
-  return pathExists(path.join(appDir, "SOUL.md")) || pathExists(path.join(appDir, "ABOUT.md"));
+  return pathExists(path.join(appDir, "SOUL.md")) || pathExists(path.join(appDir, "WORLD.md"));
 }
 function scoreAppCandidate(appDir) {
   let score = 0;
   if (pathExists(path.join(appDir, "SOUL.md"))) {
     score += 4;
   }
-  if (pathExists(path.join(appDir, "ABOUT.md"))) {
+  if (pathExists(path.join(appDir, "WORLD.md"))) {
     score += 2;
   }
   if (pathExists(path.join(appDir, "skills"))) {
@@ -198,10 +198,27 @@ function soulPathCandidates() {
   const candidates = dataRoots().map((root) => path.join(root, "SOUL.md"));
   return unique(candidates);
 }
-function aboutPathCandidates() {
-  const candidates = dataRoots().map((root) => path.join(root, "ABOUT.md"));
+function worldPathCandidates() {
+  const candidates = dataRoots().map((root) => path.join(root, "WORLD.md"));
   return unique(candidates);
 }
+var RESERVED_APP_FILES = /* @__PURE__ */ new Set([
+  "SOUL.md",
+  "WORLD.md",
+  "DESCRIPTION.md",
+  "ABOUT.md"
+]);
+function listReferenceFiles() {
+  const appDir = homeDir();
+  try {
+    const entries = fs.readdirSync(appDir, { withFileTypes: true });
+    return entries.filter(
+      (entry) => entry.isFile() && entry.name.endsWith(".md") && !RESERVED_APP_FILES.has(entry.name)
+    ).map((entry) => path.join(appDir, entry.name)).sort();
+  } catch {
+    return [];
+  }
+}
 
 // src/chat/plugins/package-discovery.ts
 function normalizeForGlob(targetPath) {
@@ -336,7 +353,8 @@ export {
   skillRoots,
   pluginRoots,
   soulPathCandidates,
-  aboutPathCandidates,
+  worldPathCandidates,
+  listReferenceFiles,
   setPluginPackages,
   discoverInstalledPluginPackageContent
 };

package/dist/{chunk-XYOKYK6U.js → chunk-Z43DS7XN.js}

@@ -2,7 +2,7 @@ import {
   getPluginRuntimeDependencies,
   getPluginRuntimePostinstall,
   withSpan
-} from "./chunk-DTOS5CG4.js";
+} from "./chunk-N4ICA2BC.js";
 
 // src/chat/state/adapter.ts
 import { createMemoryState } from "@chat-adapter/state-memory";
@@ -51,6 +51,7 @@ function readBotConfig(env) {
     userName: env.JUNIOR_BOT_NAME ?? "junior",
     modelId: env.AI_MODEL ?? "anthropic/claude-sonnet-4.6",
     fastModelId: env.AI_FAST_MODEL ?? env.AI_MODEL ?? "anthropic/claude-haiku-4.5",
+    visionModelId: toOptionalTrimmed(env.AI_VISION_MODEL),
     turnTimeoutMs: parseAgentTurnTimeoutMs(
       env.AGENT_TURN_TIMEOUT_MS,
       maxTurnTimeoutMs
@@ -251,11 +252,17 @@ function normalizeWorkspaceRoot(input) {
   const normalized = candidate.replace(/\/+$/, "");
   return normalized.startsWith("/") ? normalized : `/${normalized}`;
 }
-var SANDBOX_WORKSPACE_ROOT = normalizeWorkspaceRoot(process.env.VERCEL_SANDBOX_WORKSPACE_DIR);
+var SANDBOX_WORKSPACE_ROOT = normalizeWorkspaceRoot(
+  process.env.VERCEL_SANDBOX_WORKSPACE_DIR
+);
 var SANDBOX_SKILLS_ROOT = `${SANDBOX_WORKSPACE_ROOT}/skills`;
+var SANDBOX_DATA_ROOT = `${SANDBOX_WORKSPACE_ROOT}/data`;
 function sandboxSkillDir(skillName) {
   return `${SANDBOX_SKILLS_ROOT}/${skillName}`;
 }
+function sandboxSkillFile(skillName) {
+  return `${sandboxSkillDir(skillName)}/SKILL.md`;
+}
 
 // src/chat/sandbox/runtime-dependency-snapshots.ts
 var SNAPSHOT_CACHE_PREFIX = "junior:sandbox_snapshot_profile";
@@ -810,7 +817,9 @@ export {
   disconnectStateAdapter,
   SANDBOX_WORKSPACE_ROOT,
   SANDBOX_SKILLS_ROOT,
+  SANDBOX_DATA_ROOT,
   sandboxSkillDir,
+  sandboxSkillFile,
   buildNonInteractiveShellScript,
   runNonInteractiveCommand,
   getVercelSandboxCredentials,

package/dist/cli/check.js

@@ -1,11 +1,11 @@
 import {
   parseSkillFile
-} from "../chunk-4XWTSMRF.js";
+} from "../chunk-NRSP2MLC.js";
 import {
   parsePluginManifest
-} from "../chunk-DTOS5CG4.js";
+} from "../chunk-N4ICA2BC.js";
 import "../chunk-Z3YD6NHK.js";
-import "../chunk-RBB2MZAN.js";
+import "../chunk-XPXD3FCE.js";
 import "../chunk-2KG3PWR4.js";
 
 // src/cli/check.ts
@@ -223,6 +223,45 @@ function reportAppSkills(skillResults, io) {
     reportSkillResult(skillResult, io, "  ", index === skillResults.length - 1);
   }
 }
+async function validateAppFiles(appDir) {
+  const errors = [];
+  const warnings = [];
+  if (await pathIsFile(path.join(appDir, "ABOUT.md"))) {
+    errors.push(
+      `${path.join(appDir, "ABOUT.md")}: ABOUT.md is no longer supported. Rename to WORLD.md (operational context) and DESCRIPTION.md (user-facing description).`
+    );
+  }
+  if (!await pathIsFile(path.join(appDir, "SOUL.md"))) {
+    warnings.push(`${path.join(appDir, "SOUL.md")}: missing SOUL.md`);
+  }
+  if (!await pathIsFile(path.join(appDir, "WORLD.md"))) {
+    warnings.push(`${path.join(appDir, "WORLD.md")}: missing WORLD.md`);
+  }
+  if (!await pathIsFile(path.join(appDir, "DESCRIPTION.md"))) {
+    warnings.push(
+      `${path.join(appDir, "DESCRIPTION.md")}: missing DESCRIPTION.md`
+    );
+  }
+  return { errors, warnings };
+}
+async function hasJuniorAppMarkers(appDir) {
+  for (const fileName of [
+    "SOUL.md",
+    "WORLD.md",
+    "DESCRIPTION.md",
+    "ABOUT.md"
+  ]) {
+    if (await pathIsFile(path.join(appDir, fileName))) {
+      return true;
+    }
+  }
+  for (const dirName of ["skills", "plugins"]) {
+    if (await pathIsDirectory(path.join(appDir, dirName))) {
+      return true;
+    }
+  }
+  return false;
+}
 async function runCheck(rootDir = process.cwd(), io = DEFAULT_IO) {
   const resolvedRoot = path.resolve(rootDir);
   if (!await pathIsDirectory(resolvedRoot)) {
@@ -274,12 +313,30 @@ async function runCheck(rootDir = process.cwd(), io = DEFAULT_IO) {
     pluginResult.skillResults = (pluginSkillDirs.get(pluginResult.pluginDir) ?? []).map((skillDir) => skillResultsByDir.get(skillDir)).filter((result) => Boolean(result));
   }
   const appSkillResults = appSkillDirs.map((skillDir) => skillResultsByDir.get(skillDir)).filter((result) => Boolean(result));
+  const appDir = path.resolve(resolvedRoot, "app");
+  let appFileResult = {
+    errors: [],
+    warnings: []
+  };
+  const shouldValidateAppFiles = await pathIsDirectory(appDir) && await hasJuniorAppMarkers(appDir);
+  if (shouldValidateAppFiles) {
+    appFileResult = await validateAppFiles(appDir);
+    warnings.push(...appFileResult.warnings);
+    errors.push(...appFileResult.errors);
+  }
   io.info(
     `${color("Checking", ANSI.bold, ANSI.cyan)} ${color(
       formatDisplayPath(resolvedRoot, resolvedRoot),
       ANSI.dim
     )}`
   );
+  if (shouldValidateAppFiles) {
+    const appFileStatus = formatStatus(
+      appFileResult.errors.length,
+      appFileResult.warnings.length
+    );
+    io.info(formatHeading(appFileStatus, "app files"));
+  }
   for (const pluginResult of pluginResults) {
     reportPluginResult(pluginResult, io);
   }

package/dist/cli/init.js

@@ -109,10 +109,15 @@ You are ${name}, a helpful assistant.
 `
   );
   fs.writeFileSync(
-    path.join(appDir, "ABOUT.md"),
-    `# About ${name}
+    path.join(appDir, "WORLD.md"),
+    `# ${name} World
 
-Describe what ${name} helps users do.
+Operational context and domain knowledge for ${name}.
+`
+  );
+  fs.writeFileSync(
+    path.join(appDir, "DESCRIPTION.md"),
+    `${name} helps your team make progress directly in Slack.
 `
   );
   const skillsDir = path.join(appDir, "skills");
@@ -138,6 +143,7 @@ SLACK_SIGNING_SECRET=
 JUNIOR_BOT_NAME=
 AI_MODEL=
 AI_FAST_MODEL=
+AI_VISION_MODEL=
 REDIS_URL=
 SENTRY_DSN=
 `

package/dist/cli/snapshot-warmup.js

@@ -1,14 +1,14 @@
 import {
   disconnectStateAdapter,
   resolveRuntimeDependencySnapshot
-} from "../chunk-XYOKYK6U.js";
+} from "../chunk-Z43DS7XN.js";
 import {
   getPluginProviders,
   getPluginRuntimeDependencies,
   getPluginRuntimePostinstall
-} from "../chunk-DTOS5CG4.js";
+} from "../chunk-N4ICA2BC.js";
 import "../chunk-Z3YD6NHK.js";
-import "../chunk-RBB2MZAN.js";
+import "../chunk-XPXD3FCE.js";
 import "../chunk-2KG3PWR4.js";
 
 // src/cli/snapshot-warmup.ts

package/dist/nitro.js

@@ -1,6 +1,6 @@
 import {
   discoverInstalledPluginPackageContent
-} from "./chunk-RBB2MZAN.js";
+} from "./chunk-XPXD3FCE.js";
 import "./chunk-2KG3PWR4.js";
 
 // src/nitro.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sentry/junior",
-  "version": "0.19.0",
+  "version": "0.21.0",
   "private": false,
   "publishConfig": {
     "access": "public"