@sentry/junior 0.237.0 → 0.238.0

package/dist/{context-0Et9iVSB.js → actor-BTtLaeWy.js}

@@ -200,99 +200,4 @@ function createSlackResumeActor(args) {
 	return actor;
 }
 //#endregion
-//#region src/chat/credentials/context.ts
-const exactActorIdSchema = z.string().refine((value) => parseActorUserId(value) === value);
-const exactNonBlankStringSchema = z.string().min(1).refine((value) => value === value.trim());
-const slackDirectCredentialSubjectBindingSchema = z.object({
-	type: z.literal("slack-direct-conversation"),
-	teamId: z.string().min(1),
-	channelId: z.string().min(1),
-	signature: z.string().min(1)
-}).strict();
-const scheduledAutomationCredentialSubjectBindingSchema = z.object({
-	type: z.literal("scheduled-automation"),
-	plugin: z.string().min(1),
-	taskId: exactNonBlankStringSchema,
-	signature: z.string().min(1)
-}).strict();
-const eventAutomationCredentialSubjectBindingSchema = z.object({
-	type: z.literal("event-automation"),
-	plugin: z.string().min(1),
-	taskId: exactNonBlankStringSchema,
-	signature: z.string().min(1)
-}).strict();
-z.discriminatedUnion("type", [
-	slackDirectCredentialSubjectBindingSchema,
-	scheduledAutomationCredentialSubjectBindingSchema,
-	eventAutomationCredentialSubjectBindingSchema
-]);
-const credentialUserActorSchema = z.object({
-	type: z.literal("user"),
-	userId: exactActorIdSchema
-}).strict();
-const credentialSystemActorSchema = z.object({
-	platform: z.literal("system"),
-	name: exactActorIdSchema
-}).strict();
-const credentialSubjectSchema = z.discriminatedUnion("allowedWhen", [
-	z.object({
-		type: z.literal("user"),
-		userId: exactActorIdSchema,
-		allowedWhen: z.literal("private-direct-conversation"),
-		binding: slackDirectCredentialSubjectBindingSchema
-	}).strict(),
-	z.object({
-		type: z.literal("user"),
-		userId: exactActorIdSchema,
-		allowedWhen: z.literal("scheduled-automation"),
-		taskId: exactNonBlankStringSchema,
-		binding: scheduledAutomationCredentialSubjectBindingSchema
-	}).strict().refine((subject) => subject.binding.taskId === subject.taskId, {
-		message: "Scheduled automation credential subject requires task binding",
-		path: ["binding"]
-	}),
-	z.object({
-		type: z.literal("user"),
-		userId: exactActorIdSchema,
-		allowedWhen: z.literal("event-automation"),
-		taskId: exactNonBlankStringSchema,
-		binding: eventAutomationCredentialSubjectBindingSchema
-	}).strict().refine((subject) => subject.binding.taskId === subject.taskId, {
-		message: "Event automation credential subject requires task binding",
-		path: ["binding"]
-	})
-]);
-const credentialContextSchema = z.union([z.object({ actor: credentialUserActorSchema }).strict(), z.object({
-	actor: credentialSystemActorSchema,
-	subject: credentialSubjectSchema.optional()
-}).strict()]);
-/**
-* Build credential authority from the run actor.
-*
-* `actor` is the rich execution principal. This projects the credential stub
-* tools/auth need from it:
-* - user actor → `{ actor: { type: "user", userId } }`
-* - system actor → `{ actor: systemActor, subject? }`
-*
-* They only diverge when a system run carries an explicit delegated `subject`
-* (scheduled/event-automation creator credentials). Callers should set `actor` first,
-* then derive this — do not hand-build parallel shapes.
-*/
-function credentialContextForActor(actor, subject) {
-	if (actor.platform === "system") return subject ? {
-		actor,
-		subject
-	} : { actor };
-	if (subject) throw new TypeError("Delegated credential subjects require a system actor");
-	return { actor: {
-		type: "user",
-		userId: actor.userId
-	} };
-}
-/** Return the user whose OAuth token may satisfy this credential request. */
-function credentialUserSubjectId(context) {
-	if ("type" in context.actor) return context.actor.userId;
-	return "subject" in context ? context.subject?.userId : void 0;
-}
-//#endregion
-export { slackChannelIdSchema as _, createActor as a, parseSlackMessageTs as b, isActorUserId as c, parseStoredSlackActor as d, toStoredSlackActor as f, parseSlackUserId as g, parseSlackTeamId as h, credentialUserSubjectId as i, isUserActor as l, parseSlackChannelReferenceId as m, credentialContextSchema as n, createSlackActor as o, parseSlackChannelId as p, credentialSubjectSchema as r, createSlackResumeActor as s, credentialContextForActor as t, parseActorUserId as u, slackTeamIdSchema as v, slackMessageTsSchema as x, slackUserIdSchema as y };
+export { slackMessageTsSchema as _, isUserActor as a, toStoredSlackActor as c, parseSlackTeamId as d, parseSlackUserId as f, parseSlackMessageTs as g, slackUserIdSchema as h, isActorUserId as i, parseSlackChannelId as l, slackTeamIdSchema as m, createSlackActor as n, parseActorUserId as o, slackChannelIdSchema as p, createSlackResumeActor as r, parseStoredSlackActor as s, createActor as t, parseSlackChannelReferenceId as u };

package/dist/admin-ZGlZ8lY6.js

@@ -0,0 +1,33 @@
+import { a as setUserAdminFromSql, d as getDb, n as listAdminUsersFromSql } from "./viewer-DsyM9kb9.js";
+import { CLI_USAGE } from "./cli/run.js";
+//#region src/cli/admin.ts
+/**
+* Operator CLI for the Junior-wide admin role.
+*
+* Admin changes happen only here, out of band. The dashboard and Slack can
+* read the role but cannot change it, so no one can make themselves admin.
+*/
+/** Run `junior admin list`, `grant <email>`, or `revoke <email>`. */
+async function runAdmin(argv) {
+	const [subcommand, email, ...rest] = argv;
+	if (subcommand === "list" && email === void 0) {
+		const admins = await listAdminUsersFromSql(getDb());
+		if (admins.length === 0) console.log("No Junior admins.");
+		for (const admin of admins) console.log(admin.email);
+		return 0;
+	}
+	if ((subcommand === "grant" || subcommand === "revoke") && email?.trim() && rest.length === 0) {
+		const isAdmin = subcommand === "grant";
+		const user = await setUserAdminFromSql(getDb(), email, isAdmin);
+		if (!user) {
+			console.error(isAdmin ? `Could not grant admin: "${email}" is not a valid email.` : `No Junior user has the email "${email}".`);
+			return 1;
+		}
+		console.log(isAdmin ? `${user.email} is now a Junior admin.` : `${user.email} is no longer a Junior admin.`);
+		return 0;
+	}
+	console.error(CLI_USAGE);
+	return 1;
+}
+//#endregion
+export { runAdmin };