@sentry/junior 0.257.0 → 0.259.0

package/dist/{resolve-ncQPZROQ.js → resolve-BzpuLh8c.js}

@@ -1,8 +1,9 @@
-import { T as withSpan, y as setSpanAttributes } from "./logging-CWxiIuCF.js";
-import { N as SANDBOX_WORKSPACE_ROOT, k as sleep, r as isStale, t as create, u as isSandboxUnavailableError, v as getVercelSandboxCredentials, w as getStateAdapter, x as runNonInteractiveCommand } from "./profile-h-72wM78.js";
+import { T as withSpan, y as setSpanAttributes } from "./logging-BStXN56b.js";
+import { E as SANDBOX_WORKSPACE_ROOT, S as sleep, r as isStale, t as create, u as isSandboxUnavailableError, v as getVercelSandboxCredentials, x as runNonInteractiveCommand } from "./profile-qBM6B_-V.js";
+import { r as getStateAdapter } from "./adapter-Bn0gFVSF.js";
 import { z } from "zod";
 import { FileSystem, Sandbox } from "@vercel/sandbox";
-//#region src/chat/sandbox/resources.ts
+// src/chat/sandbox/resources.ts
 let configuredResources;
 function resourcesFromEnv() {
 	const value = process.env.SANDBOX_VCPUS?.trim();
@@ -30,8 +31,7 @@ function setSandboxResourceConfig(config) {
 function getSandboxResources() {
 	return configuredResources ?? resourcesFromEnv();
 }
-//#endregion
-//#region src/chat/sandbox/snapshot/span.ts
+// src/chat/sandbox/snapshot/span.ts
 /** Record the reusable snapshot selected for a new Sandbox. */
 function setSnapshotSpanAttributes(snapshot) {
 	setSpanAttributes({
@@ -47,8 +47,7 @@ function setSnapshotSpanAttributes(snapshot) {
 async function trace(name, op, attributes, callback) {
 	return await withSpan(name, op, {}, callback, attributes);
 }
-//#endregion
-//#region src/chat/sandbox/snapshot/install.ts
+// src/chat/sandbox/snapshot/install.ts
 async function runOrThrow(sandbox, params, label) {
 	const result = await runNonInteractiveCommand(sandbox, params);
 	if (result.exitCode === 0) return;
@@ -225,8 +224,7 @@ async function postinstall(sandbox, commands, signal, timeoutMs) {
 		}
 	});
 }
-//#endregion
-//#region src/chat/sandbox/workspace.ts
+// src/chat/sandbox/workspace.ts
 /** Bind one tool call's cancellation to every sandbox filesystem operation. */
 function bindSandboxFileSystem(fs, signal) {
 	if (!signal) return fs;
@@ -317,8 +315,7 @@ async function stopSession(session) {
 		await session.stop();
 	} catch {}
 }
-//#endregion
-//#region src/chat/sandbox/snapshot/resolve.ts
+// src/chat/sandbox/snapshot/resolve.ts
 const SNAPSHOT_CACHE_PREFIX = "junior:sandbox_snapshot_profile:v2";
 const SNAPSHOT_LOCK_PREFIX = "junior:sandbox_snapshot_lock";
 const SNAPSHOT_CACHE_TTL_MS = 2592e6;
@@ -542,5 +539,4 @@ function isMissingError(error) {
 	const searchable = error instanceof Error ? error.message.toLowerCase() : String(error).toLowerCase();
 	return searchable.includes("snapshot") && (searchable.includes("not found") || searchable.includes("unknown") || searchable.includes("404"));
 }
-//#endregion
 export { createSandboxSession as a, postinstall as c, getSandboxResources as d, setSandboxResourceConfig as f, bindSandboxFileSystem as i, setSnapshotSpanAttributes as l, isMissingError as n, stopSession as o, resolve as r, dependencies as s, getCachedSnapshot as t, getSandboxResourceConfig as u };

package/dist/{result-C883vngT.js → result-DEZH_AnZ.js}

@@ -1,21 +1,20 @@
-import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { $ as getAgentInvocation, X as createAgentInvocationFromLatest, ct as isTerminalAgentInvocation, et as getAgentInvocationIdForEvents, ft as markAgentInvocationParentMailboxAppended, it as getAgentInvocationResultMessageId, nt as getAgentInvocationIdForResult, st as getLatestAgentInvocationForConversation, tt as getAgentInvocationIdForMessage } from "./agent-runner-D7OboVb3.js";
-import { t as createActor } from "./actor-BTtLaeWy.js";
-import { f as credentialContextForActor } from "./registry-sLTr-sV9.js";
-import { Q as listTurnSummaries, Z as getTurnRecord } from "./tasks-D_WIJtvO.js";
-import { a as EVENT_WAIT_MS, c as timerWatchCredentialSubject, s as isEventMailboxMetadata } from "./session-stop-CQjKd4a2.js";
-import { a as EVENT_SYSTEM_ACTOR, i as EVENT_MESSAGE_AUTHOR, o as isEventConversationMessage } from "./prompt-DyoEj9c2.js";
-import { r as appendAndEnqueueInboundMessage } from "./store-DXFIQy-G.js";
-import { r as enqueueAgentInvocation } from "./work-nAfDSUFP.js";
+import { t as __exportAll } from "./rolldown-runtime-nwUcYXjP.js";
+import { $ as getAgentInvocation, X as createAgentInvocationFromLatest, ct as isTerminalAgentInvocation, et as getAgentInvocationIdForEvents, ft as markAgentInvocationParentMailboxAppended, it as getAgentInvocationResultMessageId, nt as getAgentInvocationIdForResult, st as getLatestAgentInvocationForConversation, tt as getAgentInvocationIdForMessage } from "./agent-runner-CPSd7rKm.js";
+import { t as createActor } from "./actor-tlxzqaRe.js";
+import { f as credentialContextForActor } from "./registry-B_M_x_iS.js";
+import { Q as listTurnSummaries, Z as getTurnRecord } from "./tasks-DieKX3d4.js";
+import { a as EVENT_WAIT_MS, c as timerWatchCredentialSubject, s as isEventMailboxMetadata } from "./session-stop-CV65ZlU3.js";
+import { a as EVENT_SYSTEM_ACTOR, i as EVENT_MESSAGE_AUTHOR, o as isEventConversationMessage } from "./prompt-xgpyMtg7.js";
+import { r as appendAndEnqueueInboundMessage } from "./store-B1GES4gC.js";
+import { r as enqueueAgentInvocation } from "./work-D3QKiV0O.js";
 import { z } from "zod";
 import { createEventSource, createLocalSource, createWebSource } from "@sentry/junior-plugin-api";
-//#region src/chat/task-execution/mailbox-input.ts
+// src/chat/task-execution/mailbox-input.ts
 /** Join non-empty mailbox Message text for one Turn. */
 function joinMailboxText(messages) {
 	return messages.map((message) => message.input.text.trim()).filter(Boolean).join("\n\n");
 }
-//#endregion
-//#region src/chat/conversations/web-mailbox.ts
+// src/chat/conversations/web-mailbox.ts
 /** Parse web mailbox metadata written before Source and Actor were complete. */
 const legacyWebMailboxMetadataSchema = z.object({
 	authorEmail: z.string().email(),
@@ -25,8 +24,7 @@ const legacyWebMailboxMetadataSchema = z.object({
 	kind: z.literal("api_turn"),
 	messageId: z.string().min(1)
 }).strict();
-//#endregion
-//#region src/chat/task-execution/mailbox-turn.ts
+// src/chat/task-execution/mailbox-turn.ts
 /**
 * Restore Turn input facts, with saved Message fallback for legacy cursors.
 *
@@ -171,8 +169,7 @@ async function resolveMailboxTurnWork(context) {
 		turnId
 	} : void 0;
 }
-//#endregion
-//#region src/chat/agent-invocations/result.ts
+// src/chat/agent-invocations/result.ts
 var result_exports = /* @__PURE__ */ __exportAll({
 	enqueueAgentInvocationResult: () => enqueueAgentInvocationResult,
 	enqueueAgentMessageToParent: () => enqueueAgentMessageToParent,
@@ -459,5 +456,4 @@ async function withAgentInvocationResultActors(work) {
 		}))
 	};
 }
-//#endregion
 export { withAgentInvocationResultActors as a, resolveMailboxTurnWork as c, legacyWebMailboxMetadataSchema as d, joinMailboxText as f, startAgentInvocationsForChildInput as i, sourceFromTurnInput as l, enqueueAgentMessageToParent as n, getAuthPausedConversationTurnId as o, result_exports as r, getEventBatchDelayMs as s, enqueueAgentInvocationResult as t, turnInputFactsFromConversationMessage as u };

package/dist/{rolldown-runtime-B4FMCO8f.js → rolldown-runtime-nwUcYXjP.js}

@@ -1,5 +1,5 @@
 import "node:module";
-//#region \0rolldown/runtime.js
+// \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
@@ -24,5 +24,4 @@ var __copyProps = (to, from, except, desc) => {
 	return to;
 };
 var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
-//#endregion
 export { __reExport as n, __exportAll as t };

package/dist/{runner-CzYImdOF.js → runner-BqQlG10t.js}

@@ -1,17 +1,17 @@
-import { f as logException, w as withLogContext, x as setTags } from "./logging-CWxiIuCF.js";
-import { d as getConversationStore, l as getConversationEventStore } from "./viewer-DSZXygMU.js";
-import { f as credentialContextForActor } from "./registry-sLTr-sV9.js";
-import { $t as buildConversationContext, Gt as persistConversationMessages, It as recordAuthorizationCompleted, Wt as hydrateConversationMessages, an as normalizeConversationText, cn as upsertConversationMessage, et as persistWithRetry, in as markConversationMessage, kt as loadProjection, on as recordDeliveredAssistantMessage, q as saveTurnCheckpoint, wt as commitAcceptedReply } from "./tasks-D_WIJtvO.js";
-import { K as messageCardText } from "./conversation-CKNLYBJt.js";
-import { f as markTurnFailed, p as startActiveTurn, t as authorizationId } from "./oauth-authorization-BA4Dt6a7.js";
-import { n as getAssistantReplyText } from "./assistant-reply-CbTPebzL.js";
-import { n as scheduleSessionCompletedPluginTasks, t as processPluginTask } from "./task-runner-DUjvzYXj.js";
-import { t as ConversationTurnLifecycleService } from "./turn-lifecycle-CO-ylUmV.js";
-import { n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-Ch4yuCqG.js";
-import { d as loadPendingMessageCards, i as completeAuthPauseTurn, l as buildDeliveredTurnStatePatch, t as finalizeFailedTurnReplyWithEvent } from "./turn-failure-response-C5nBKC4S.js";
+import { f as logException, w as withLogContext, x as setTags } from "./logging-BStXN56b.js";
+import { c as getConversationEventStore, u as getConversationStore } from "./viewer-B2_ABsYi.js";
+import { f as credentialContextForActor } from "./registry-B_M_x_iS.js";
+import { $t as buildConversationContext, Gt as persistConversationMessages, It as recordAuthorizationCompleted, Wt as hydrateConversationMessages, an as normalizeConversationText, cn as upsertConversationMessage, et as persistWithRetry, in as markConversationMessage, kt as loadProjection, on as recordDeliveredAssistantMessage, q as saveTurnCheckpoint, wt as commitAcceptedReply } from "./tasks-DieKX3d4.js";
+import { K as messageCardText } from "./conversation-DjN3mlog.js";
+import { f as markTurnFailed, p as startActiveTurn, t as authorizationId } from "./oauth-authorization-djQn5Nhy.js";
+import { n as getAssistantReplyText } from "./assistant-reply-CqthTerd.js";
+import { n as scheduleSessionCompletedPluginTasks, t as processPluginTask } from "./task-runner-BlGhcQPi.js";
+import { t as ConversationTurnLifecycleService } from "./turn-lifecycle-BLgrkV_L.js";
+import { n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-DpSWS4Rr.js";
+import { d as loadPendingMessageCards, i as completeAuthPauseTurn, l as buildDeliveredTurnStatePatch, t as finalizeFailedTurnReplyWithEvent } from "./turn-failure-response-DQljogGJ.js";
 import { randomUUID } from "node:crypto";
 import { createLocalSource, localDestinationSchema } from "@sentry/junior-plugin-api";
-//#region src/chat/local/runner.ts
+// src/chat/local/runner.ts
 /**
 * Local agent turn runtime.
 *
@@ -399,5 +399,4 @@ async function runLocalAgentTurnInContext(input, deps) {
 		outcome: reply.diagnostics.outcome
 	};
 }
-//#endregion
 export { runLocalAgentTurn };

package/dist/{sandbox-egress-signals-CZbMINHI.js → sandbox-egress-signals-DCq3WLs5.js}

@@ -1,5 +1,5 @@
-import { Mt as sandboxEgressSignalsResponseSchema } from "./agent-runner-D7OboVb3.js";
-//#region src/chat/local/sandbox-egress-signals.ts
+import { jt as sandboxEgressSignalsResponseSchema } from "./agent-runner-CPSd7rKm.js";
+// src/chat/local/sandbox-egress-signals.ts
 const SANDBOX_EGRESS_SIGNALS_PATH = "/api/internal/sandbox-egress/signals";
 const LOCAL_DEV_SERVER_TIMEOUT_MS = 1e3;
 function signalRequest(baseUrl, credentialToken) {
@@ -42,5 +42,4 @@ function createLocalSandboxEgressSignalTransport(baseUrl) {
 		}
 	};
 }
-//#endregion
 export { createLocalSandboxEgressSignalTransport };

package/dist/{schema-Dy69D4Ge.js → schema-CF9HqNRY.js}

@@ -1,14 +1,13 @@
-import { r as AGENT_INVOCATION_STATUSES, u as juniorDestinationKindSchema } from "./agent-invocations-Bdu3ROfo.js";
-import { D as conversationUsageSchema, E as conversationSummaryReportSchema, M as conversationChildAgentTotalsSchema, l as conversationAuxiliaryCostsSchema, n as actorIdentitySchema, w as conversationStatsItemSchema } from "./conversation-CKNLYBJt.js";
-import "./automation-CHdlHVZP.js";
-import { a as fillUtcHours, c as sumUtcHoursIntoSixHours, i as fillUtcDays } from "./web-message-id-xPI_EFSC.js";
+import { r as AGENT_INVOCATION_STATUSES, u as juniorDestinationKindSchema } from "./agent-invocations-Qfz7dWgU.js";
+import { D as conversationUsageSchema, E as conversationSummaryReportSchema, M as conversationChildAgentTotalsSchema, l as conversationAuxiliaryCostsSchema, n as actorIdentitySchema, w as conversationStatsItemSchema } from "./conversation-DjN3mlog.js";
+import "./automation-DWBFBenG.js";
+import { a as fillUtcHours, c as sumUtcHoursIntoSixHours, i as fillUtcDays } from "./web-message-id-CJSUiksE.js";
 import { z } from "zod";
 import { codeChangeStateSchema } from "@sentry/junior-plugin-api";
-//#region src/api/schema/common.ts
+// src/api/schema/common.ts
 /** Stable error body returned by Junior-owned REST endpoints. */
 const apiErrorSchema = z.object({ error: z.string().min(1) }).strict();
-//#endregion
-//#region src/api/schema/conversation-stop.ts
+// src/api/schema/conversation-stop.ts
 /** One queued web message from the viewer that a stop removed. */
 const stoppedConversationMessageSchema = z.object({
 	inboundMessageId: z.string().min(1),
@@ -27,8 +26,7 @@ const stopConversationTurnResponseSchema = z.object({
 	stoppedInboundMessageIds: z.array(z.string().min(1)),
 	stoppedMessages: z.array(stoppedConversationMessageSchema)
 }).strict();
-//#endregion
-//#region src/api/schema/child-agent.ts
+// src/api/schema/child-agent.ts
 /**
 * One direct child agent of a Conversation, from agent invocation records.
 *
@@ -64,8 +62,7 @@ const conversationChildAgentsReportSchema = z.object({
 	agents: z.array(conversationChildAgentSchema),
 	conversationId: z.string().min(1)
 }).strict();
-//#endregion
-//#region src/api/schema/code.ts
+// src/api/schema/code.ts
 const codeChangeSummarySchema = z.object({
 	closed: z.number().int().nonnegative(),
 	costUsd: z.number().nonnegative().optional(),
@@ -152,8 +149,7 @@ const codePersonReportSchema = z.object({
 	windowEnd: z.string(),
 	windowStart: z.string()
 }).strict();
-//#endregion
-//#region src/api/schema/connection.ts
+// src/api/schema/connection.ts
 const connectionSchema = z.object({
 	provider: z.string(),
 	displayName: z.string(),
@@ -168,8 +164,7 @@ const connectionListSchema = z.object({ connections: z.array(connectionSchema) }
 const connectionParamsSchema = z.object({ provider: z.string().regex(/^[a-z][a-z0-9-]*$/).max(64) }).strict();
 const startConnectionResponseSchema = z.object({ authorizationUrl: z.string().url() }).strict();
 const disconnectConnectionResponseSchema = z.object({ disconnected: z.literal(true) }).strict();
-//#endregion
-//#region src/api/activity.ts
+// src/api/activity.ts
 const dailyConversationActivitySchema = z.object({
 	active: z.number(),
 	conversations: z.number(),
@@ -221,8 +216,7 @@ function activitySixHours(hours, nowMs) {
 		nowMs
 	});
 }
-//#endregion
-//#region src/api/schema/location.ts
+// src/api/schema/location.ts
 const locationParamsSchema = z.object({ locationId: z.string().min(1) }).strict();
 const locationSummaryReportSchema = conversationStatsItemSchema.extend({
 	id: z.string(),
@@ -263,8 +257,7 @@ const locationDetailReportSchema = locationSummaryReportSchema.extend({
 	windowEnd: z.string(),
 	windowStart: z.string()
 }).strict();
-//#endregion
-//#region src/api/schema/person.ts
+// src/api/schema/person.ts
 const personParamsSchema = z.object({ email: z.string().trim().min(1) }).strict();
 const peopleConversationStatsItemSchema = conversationStatsItemSchema.omit({ costUsd: true });
 /** UTC day (`YYYY-MM-DD`) or hour (`YYYY-MM-DDTHH`) activity bucket key. */
@@ -344,8 +337,7 @@ const personalSpendReportSchema = z.object({
 	windowEnd: z.string(),
 	windowStart: z.string()
 }).strict();
-//#endregion
-//#region src/api/schema/personal-token.ts
+// src/api/schema/personal-token.ts
 const personalTokenMetadataSchema = z.object({
 	id: z.string().uuid(),
 	name: z.string(),
@@ -359,8 +351,21 @@ const createPersonalTokenBodySchema = z.object({ name: z.string().trim().min(1).
 const createdPersonalTokenSchema = personalTokenMetadataSchema.extend({ token: z.string().startsWith("jr_pat_") }).strict();
 const personalTokenParamsSchema = z.object({ id: z.string().uuid() }).strict();
 const revokePersonalTokenResponseSchema = z.object({ revoked: z.literal(true) }).strict();
-//#endregion
-//#region src/api/schema/workspace.ts
+// src/api/schema/service-account.ts
+const serviceAccountSchema = z.object({
+	provider: z.string(),
+	displayName: z.string(),
+	userOAuth: z.boolean(),
+	tools: z.array(z.string()),
+	connected: z.boolean(),
+	connectedAt: z.string().optional(),
+	connectedBy: z.string().optional()
+}).strict();
+const serviceAccountListSchema = z.object({ serviceAccounts: z.array(serviceAccountSchema) }).strict();
+const serviceAccountParamsSchema = z.object({ provider: z.string().regex(/^[a-z][a-z0-9-]*$/).max(64) }).strict();
+const startServiceAccountSignInResponseSchema = z.object({ authorizationUrl: z.string().url() }).strict();
+const disconnectServiceAccountResponseSchema = z.object({ disconnected: z.literal(true) }).strict();
+// src/api/schema/workspace.ts
 const workspaceRepoInputSchema = z.object({
 	provider: z.string(),
 	repo: z.string()
@@ -401,8 +406,7 @@ const workspaceBodySchema = z.object({
 }).strict();
 const workspaceParamsSchema = z.object({ id: z.string().uuid() }).strict();
 const deleteWorkspaceResponseSchema = z.object({ deleted: z.literal(true) }).strict();
-//#endregion
-//#region src/api/schema/stats.ts
+// src/api/schema/stats.ts
 const statSchema = z.object({
 	count: z.number().int().nonnegative(),
 	date: z.string(),
@@ -416,5 +420,4 @@ const statsReportSchema = z.object({
 	windowEnd: z.string(),
 	windowStart: z.string()
 }).strict();
-//#endregion
-export { connectionSchema as A, codeRepositorySummarySchema as B, locationParamsSchema as C, dailyConversationActivitySchema as D, activitySixHours as E, codeChangeSummarySchema as F, conversationChildAgentsReportSchema as H, codeOverviewReportSchema as I, codePersonReportSchema as L, startConnectionResponseSchema as M, codeActivityDaySchema as N, connectionListSchema as O, codeChangeSummaryReportSchema as P, codeRepositoryParamsSchema as R, locationDirectoryReportSchema as S, activityHours as T, stopConversationTurnResponseSchema as U, conversationChildAgentSchema as V, apiErrorSchema as W, actorProfileReportSchema as _, workspaceBodySchema as a, locationActivityDayReportSchema as b, workspaceRepoSchema as c, createdPersonalTokenSchema as d, personalTokenListSchema as f, actorDirectoryReportSchema as g, revokePersonalTokenResponseSchema as h, deleteWorkspaceResponseSchema as i, disconnectConnectionResponseSchema as j, connectionParamsSchema as k, workspaceSchema as l, personalTokenParamsSchema as m, statsReportSchema as n, workspaceListSchema as o, personalTokenMetadataSchema as p, baselineSnapshotSchema as r, workspaceParamsSchema as s, statSchema as t, createPersonalTokenBodySchema as u, personParamsSchema as v, activityDays as w, locationDetailReportSchema as x, personalSpendReportSchema as y, codeRepositoryReportSchema as z };
+export { activityHours as A, codeChangeSummarySchema as B, personParamsSchema as C, locationDirectoryReportSchema as D, locationDetailReportSchema as E, connectionSchema as F, codeRepositorySummarySchema as G, codePersonReportSchema as H, disconnectConnectionResponseSchema as I, stopConversationTurnResponseSchema as J, conversationChildAgentSchema as K, startConnectionResponseSchema as L, dailyConversationActivitySchema as M, connectionListSchema as N, locationParamsSchema as O, connectionParamsSchema as P, codeActivityDaySchema as R, actorProfileReportSchema as S, locationActivityDayReportSchema as T, codeRepositoryParamsSchema as U, codeOverviewReportSchema as V, codeRepositoryReportSchema as W, apiErrorSchema as Y, personalTokenListSchema as _, workspaceBodySchema as a, revokePersonalTokenResponseSchema as b, workspaceRepoSchema as c, serviceAccountListSchema as d, serviceAccountParamsSchema as f, createdPersonalTokenSchema as g, createPersonalTokenBodySchema as h, deleteWorkspaceResponseSchema as i, activitySixHours as j, activityDays as k, workspaceSchema as l, startServiceAccountSignInResponseSchema as m, statsReportSchema as n, workspaceListSchema as o, serviceAccountSchema as p, conversationChildAgentsReportSchema as q, baselineSnapshotSchema as r, workspaceParamsSchema as s, statSchema as t, disconnectServiceAccountResponseSchema as u, personalTokenMetadataSchema as v, personalSpendReportSchema as w, actorDirectoryReportSchema as x, personalTokenParamsSchema as y, codeChangeSummaryReportSchema as z };

package/dist/{sentry-CgWZM_kV.js → sentry-BBUlHih9.js}

@@ -1,6 +1,6 @@
-import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
+import { t as __exportAll } from "./rolldown-runtime-nwUcYXjP.js";
 import { captureException, captureMessage, continueTrace, flush, getActiveSpan, getClient, getGlobalScope, getTraceData, init, logger, setTag, setUser, spanToJSON, startInactiveSpan, startSpan, startSpanManual, vercelAIIntegration, withActiveSpan, withScope, withStreamedSpan } from "@sentry/node";
-//#region src/chat/sentry.ts
+// src/chat/sentry.ts
 var sentry_exports = /* @__PURE__ */ __exportAll({
 	captureException: () => captureException,
 	captureMessage: () => captureMessage,
@@ -23,5 +23,4 @@ var sentry_exports = /* @__PURE__ */ __exportAll({
 	withScope: () => withScope,
 	withStreamedSpan: () => withStreamedSpan
 });
-//#endregion
 export { vercelAIIntegration as _, getClient as a, withStreamedSpan as b, init as c, setTag as d, setUser as f, startSpanManual as g, startSpan as h, getActiveSpan as i, logger as l, startInactiveSpan as m, captureMessage as n, getGlobalScope as o, spanToJSON as p, continueTrace as r, getTraceData as s, captureException as t, sentry_exports as u, withActiveSpan as v, withScope as y };

package/dist/service-account-BqTBkyD7.js

@@ -0,0 +1,120 @@
+import { n as pluginCatalogRuntime } from "./catalog-runtime-B8SuFPGb.js";
+import { t as disconnectStateAdapter } from "./adapter-Bn0gFVSF.js";
+import { n as finishServiceAccountSignIn, o as serviceAccountPlugins, r as getServiceAccountStatus, s as startServiceAccountSignIn, t as disconnectServiceAccount } from "./service-account-BzhW7kXu.js";
+import { CLI_USAGE } from "./cli/run.js";
+import { createServer } from "node:http";
+// src/cli/service-account.ts
+/**
+* Operator CLI for plugin service accounts.
+*
+* Connecting a service account gives everyone who can talk to Junior the
+* access that the plugin's service account policy allows, to what that
+* account can see. The dashboard Admin page is the main way to connect one.
+* This CLI is the out-of-band fallback. It runs against the deployment state
+* store, and Slack never sees the sign-in link or any token.
+*/
+const SIGN_IN_TIMEOUT_MS = 6e5;
+const CALLBACK_PATH = "/oauth/callback";
+/** Listen on a free loopback port for one OAuth redirect. */
+async function listenForCallback() {
+	let resolveCallback = () => {};
+	const callback = new Promise((resolve) => {
+		resolveCallback = resolve;
+	});
+	const server = createServer((request, response) => {
+		const url = new URL(request.url ?? "/", "http://127.0.0.1");
+		if (url.pathname !== CALLBACK_PATH) {
+			response.writeHead(404).end();
+			return;
+		}
+		response.writeHead(200, {
+			Connection: "close",
+			"Content-Type": "text/plain; charset=utf-8",
+			"Referrer-Policy": "no-referrer"
+		}).end("Sign-in received. Return to your terminal.\n");
+		resolveCallback(url.searchParams);
+	});
+	await new Promise((resolve, reject) => {
+		server.once("error", reject);
+		server.listen(0, "127.0.0.1", () => resolve());
+	});
+	const { port } = server.address();
+	return {
+		close: () => server.close(),
+		redirectUrl: `http://127.0.0.1:${port}${CALLBACK_PATH}`,
+		waitForCallback: async () => {
+			let timer;
+			try {
+				return await Promise.race([callback, new Promise((_, reject) => {
+					timer = setTimeout(() => reject(/* @__PURE__ */ new Error("Timed out waiting for the sign-in.")), SIGN_IN_TIMEOUT_MS);
+				})]);
+			} finally {
+				clearTimeout(timer);
+			}
+		}
+	};
+}
+function requireServiceAccountPlugin(name) {
+	const plugin = pluginCatalogRuntime.getDefinition(name);
+	if (plugin?.manifest.accounts?.serviceAccount) return plugin;
+	const supported = serviceAccountPlugins(pluginCatalogRuntime.getProviders()).map((candidate) => candidate.manifest.name);
+	console.error(`Plugin "${name}" does not support a service account.` + (supported.length ? ` Supported plugins: ${supported.join(", ")}.` : ""));
+}
+async function runConnect(plugin) {
+	const provider = plugin.manifest.name;
+	const loopback = await listenForCallback();
+	try {
+		const { authorizationUrl } = await startServiceAccountSignIn({
+			plugin,
+			redirectUrl: loopback.redirectUrl
+		});
+		console.log([
+			`Open this URL in a browser on this machine. Sign in as the account Junior should use for ${provider}, not as yourself:`,
+			"",
+			authorizationUrl.toString(),
+			"",
+			`Waiting for the redirect to ${loopback.redirectUrl} ...`
+		].join("\n"));
+		const result = await finishServiceAccountSignIn({
+			callback: await loopback.waitForCallback(),
+			plugin
+		});
+		if (!result.ok) {
+			console.error(result.message);
+			return 1;
+		}
+	} finally {
+		loopback.close();
+	}
+	const tools = (plugin.manifest.accounts?.serviceAccount?.tools ?? []).join(", ");
+	console.log(plugin.manifest.accounts?.userOAuth === false ? `Connected the ${provider} service account. Everyone now uses it for: ${tools}.` : `Connected the ${provider} service account. Actors who have not connected ${provider} now use it for: ${tools}.`);
+	return 0;
+}
+async function runStatus(plugin) {
+	const status = await getServiceAccountStatus(plugin);
+	console.log(status.connectedAt ? `The ${status.provider} service account is connected since ${status.connectedAt}.` : `The ${status.provider} service account is not connected.`);
+	return 0;
+}
+async function runDisconnect(plugin) {
+	const provider = plugin.manifest.name;
+	await disconnectServiceAccount(plugin);
+	console.log(`Removed the ${provider} service account from Junior. To revoke the grant, remove Junior's connection in the ${provider} account settings.`);
+	return 0;
+}
+/** Run `junior service-account connect|status|disconnect <plugin>`. */
+async function runServiceAccount(argv) {
+	const [subcommand, name, ...rest] = argv;
+	const run = subcommand === "connect" ? runConnect : subcommand === "status" ? runStatus : subcommand === "disconnect" ? runDisconnect : void 0;
+	if (!run || !name?.trim() || rest.length > 0) {
+		console.error(CLI_USAGE);
+		return 1;
+	}
+	const plugin = requireServiceAccountPlugin(name.trim());
+	if (!plugin) return 1;
+	try {
+		return await run(plugin);
+	} finally {
+		await disconnectStateAdapter();
+	}
+}
+export { runServiceAccount };