@sentry/junior 0.258.0 → 0.259.0

package/dist/{runner-CCuqFSqx.js → runner-BqQlG10t.js}

@@ -1,14 +1,14 @@
-import { f as logException, w as withLogContext, x as setTags } from "./logging-DsHONhVm.js";
-import { c as getConversationEventStore, u as getConversationStore } from "./viewer-CGvvRqKp.js";
-import { f as credentialContextForActor } from "./registry-Du566MtJ.js";
-import { $t as buildConversationContext, Gt as persistConversationMessages, It as recordAuthorizationCompleted, Wt as hydrateConversationMessages, an as normalizeConversationText, cn as upsertConversationMessage, et as persistWithRetry, in as markConversationMessage, kt as loadProjection, on as recordDeliveredAssistantMessage, q as saveTurnCheckpoint, wt as commitAcceptedReply } from "./tasks-CEXKTASS.js";
+import { f as logException, w as withLogContext, x as setTags } from "./logging-BStXN56b.js";
+import { c as getConversationEventStore, u as getConversationStore } from "./viewer-B2_ABsYi.js";
+import { f as credentialContextForActor } from "./registry-B_M_x_iS.js";
+import { $t as buildConversationContext, Gt as persistConversationMessages, It as recordAuthorizationCompleted, Wt as hydrateConversationMessages, an as normalizeConversationText, cn as upsertConversationMessage, et as persistWithRetry, in as markConversationMessage, kt as loadProjection, on as recordDeliveredAssistantMessage, q as saveTurnCheckpoint, wt as commitAcceptedReply } from "./tasks-DieKX3d4.js";
 import { K as messageCardText } from "./conversation-DjN3mlog.js";
 import { f as markTurnFailed, p as startActiveTurn, t as authorizationId } from "./oauth-authorization-djQn5Nhy.js";
-import { n as getAssistantReplyText } from "./assistant-reply-H1M-91oF.js";
-import { n as scheduleSessionCompletedPluginTasks, t as processPluginTask } from "./task-runner-D3qJh4fK.js";
-import { t as ConversationTurnLifecycleService } from "./turn-lifecycle-C9JFst7-.js";
-import { n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-W3f6kAtz.js";
-import { d as loadPendingMessageCards, i as completeAuthPauseTurn, l as buildDeliveredTurnStatePatch, t as finalizeFailedTurnReplyWithEvent } from "./turn-failure-response-CWx7aNIh.js";
+import { n as getAssistantReplyText } from "./assistant-reply-CqthTerd.js";
+import { n as scheduleSessionCompletedPluginTasks, t as processPluginTask } from "./task-runner-BlGhcQPi.js";
+import { t as ConversationTurnLifecycleService } from "./turn-lifecycle-BLgrkV_L.js";
+import { n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-DpSWS4Rr.js";
+import { d as loadPendingMessageCards, i as completeAuthPauseTurn, l as buildDeliveredTurnStatePatch, t as finalizeFailedTurnReplyWithEvent } from "./turn-failure-response-DQljogGJ.js";
 import { randomUUID } from "node:crypto";
 import { createLocalSource, localDestinationSchema } from "@sentry/junior-plugin-api";
 // src/chat/local/runner.ts

package/dist/{sandbox-egress-signals-DY1mbKF4.js → sandbox-egress-signals-DCq3WLs5.js}

@@ -1,4 +1,4 @@
-import { Mt as sandboxEgressSignalsResponseSchema } from "./agent-runner-DGsFQw72.js";
+import { jt as sandboxEgressSignalsResponseSchema } from "./agent-runner-CPSd7rKm.js";
 // src/chat/local/sandbox-egress-signals.ts
 const SANDBOX_EGRESS_SIGNALS_PATH = "/api/internal/sandbox-egress/signals";
 const LOCAL_DEV_SERVER_TIMEOUT_MS = 1e3;

package/dist/{schema-DrMh3NtR.js → schema-CF9HqNRY.js}

@@ -351,6 +351,20 @@ const createPersonalTokenBodySchema = z.object({ name: z.string().trim().min(1).
 const createdPersonalTokenSchema = personalTokenMetadataSchema.extend({ token: z.string().startsWith("jr_pat_") }).strict();
 const personalTokenParamsSchema = z.object({ id: z.string().uuid() }).strict();
 const revokePersonalTokenResponseSchema = z.object({ revoked: z.literal(true) }).strict();
+// src/api/schema/service-account.ts
+const serviceAccountSchema = z.object({
+	provider: z.string(),
+	displayName: z.string(),
+	userOAuth: z.boolean(),
+	tools: z.array(z.string()),
+	connected: z.boolean(),
+	connectedAt: z.string().optional(),
+	connectedBy: z.string().optional()
+}).strict();
+const serviceAccountListSchema = z.object({ serviceAccounts: z.array(serviceAccountSchema) }).strict();
+const serviceAccountParamsSchema = z.object({ provider: z.string().regex(/^[a-z][a-z0-9-]*$/).max(64) }).strict();
+const startServiceAccountSignInResponseSchema = z.object({ authorizationUrl: z.string().url() }).strict();
+const disconnectServiceAccountResponseSchema = z.object({ disconnected: z.literal(true) }).strict();
 // src/api/schema/workspace.ts
 const workspaceRepoInputSchema = z.object({
 	provider: z.string(),
@@ -406,4 +420,4 @@ const statsReportSchema = z.object({
 	windowEnd: z.string(),
 	windowStart: z.string()
 }).strict();
-export { connectionSchema as A, codeRepositorySummarySchema as B, locationParamsSchema as C, dailyConversationActivitySchema as D, activitySixHours as E, codeChangeSummarySchema as F, conversationChildAgentsReportSchema as H, codeOverviewReportSchema as I, codePersonReportSchema as L, startConnectionResponseSchema as M, codeActivityDaySchema as N, connectionListSchema as O, codeChangeSummaryReportSchema as P, codeRepositoryParamsSchema as R, locationDirectoryReportSchema as S, activityHours as T, stopConversationTurnResponseSchema as U, conversationChildAgentSchema as V, apiErrorSchema as W, actorProfileReportSchema as _, workspaceBodySchema as a, locationActivityDayReportSchema as b, workspaceRepoSchema as c, createdPersonalTokenSchema as d, personalTokenListSchema as f, actorDirectoryReportSchema as g, revokePersonalTokenResponseSchema as h, deleteWorkspaceResponseSchema as i, disconnectConnectionResponseSchema as j, connectionParamsSchema as k, workspaceSchema as l, personalTokenParamsSchema as m, statsReportSchema as n, workspaceListSchema as o, personalTokenMetadataSchema as p, baselineSnapshotSchema as r, workspaceParamsSchema as s, statSchema as t, createPersonalTokenBodySchema as u, personParamsSchema as v, activityDays as w, locationDetailReportSchema as x, personalSpendReportSchema as y, codeRepositoryReportSchema as z };
+export { activityHours as A, codeChangeSummarySchema as B, personParamsSchema as C, locationDirectoryReportSchema as D, locationDetailReportSchema as E, connectionSchema as F, codeRepositorySummarySchema as G, codePersonReportSchema as H, disconnectConnectionResponseSchema as I, stopConversationTurnResponseSchema as J, conversationChildAgentSchema as K, startConnectionResponseSchema as L, dailyConversationActivitySchema as M, connectionListSchema as N, locationParamsSchema as O, connectionParamsSchema as P, codeActivityDaySchema as R, actorProfileReportSchema as S, locationActivityDayReportSchema as T, codeRepositoryParamsSchema as U, codeOverviewReportSchema as V, codeRepositoryReportSchema as W, apiErrorSchema as Y, personalTokenListSchema as _, workspaceBodySchema as a, revokePersonalTokenResponseSchema as b, workspaceRepoSchema as c, serviceAccountListSchema as d, serviceAccountParamsSchema as f, createdPersonalTokenSchema as g, createPersonalTokenBodySchema as h, deleteWorkspaceResponseSchema as i, activitySixHours as j, activityDays as k, workspaceSchema as l, startServiceAccountSignInResponseSchema as m, statsReportSchema as n, workspaceListSchema as o, serviceAccountSchema as p, conversationChildAgentsReportSchema as q, baselineSnapshotSchema as r, workspaceParamsSchema as s, statSchema as t, disconnectServiceAccountResponseSchema as u, personalTokenMetadataSchema as v, personalSpendReportSchema as w, actorDirectoryReportSchema as x, personalTokenParamsSchema as y, codeChangeSummaryReportSchema as z };

package/dist/service-account-BqTBkyD7.js

@@ -0,0 +1,120 @@
+import { n as pluginCatalogRuntime } from "./catalog-runtime-B8SuFPGb.js";
+import { t as disconnectStateAdapter } from "./adapter-Bn0gFVSF.js";
+import { n as finishServiceAccountSignIn, o as serviceAccountPlugins, r as getServiceAccountStatus, s as startServiceAccountSignIn, t as disconnectServiceAccount } from "./service-account-BzhW7kXu.js";
+import { CLI_USAGE } from "./cli/run.js";
+import { createServer } from "node:http";
+// src/cli/service-account.ts
+/**
+* Operator CLI for plugin service accounts.
+*
+* Connecting a service account gives everyone who can talk to Junior the
+* access that the plugin's service account policy allows, to what that
+* account can see. The dashboard Admin page is the main way to connect one.
+* This CLI is the out-of-band fallback. It runs against the deployment state
+* store, and Slack never sees the sign-in link or any token.
+*/
+const SIGN_IN_TIMEOUT_MS = 6e5;
+const CALLBACK_PATH = "/oauth/callback";
+/** Listen on a free loopback port for one OAuth redirect. */
+async function listenForCallback() {
+	let resolveCallback = () => {};
+	const callback = new Promise((resolve) => {
+		resolveCallback = resolve;
+	});
+	const server = createServer((request, response) => {
+		const url = new URL(request.url ?? "/", "http://127.0.0.1");
+		if (url.pathname !== CALLBACK_PATH) {
+			response.writeHead(404).end();
+			return;
+		}
+		response.writeHead(200, {
+			Connection: "close",
+			"Content-Type": "text/plain; charset=utf-8",
+			"Referrer-Policy": "no-referrer"
+		}).end("Sign-in received. Return to your terminal.\n");
+		resolveCallback(url.searchParams);
+	});
+	await new Promise((resolve, reject) => {
+		server.once("error", reject);
+		server.listen(0, "127.0.0.1", () => resolve());
+	});
+	const { port } = server.address();
+	return {
+		close: () => server.close(),
+		redirectUrl: `http://127.0.0.1:${port}${CALLBACK_PATH}`,
+		waitForCallback: async () => {
+			let timer;
+			try {
+				return await Promise.race([callback, new Promise((_, reject) => {
+					timer = setTimeout(() => reject(/* @__PURE__ */ new Error("Timed out waiting for the sign-in.")), SIGN_IN_TIMEOUT_MS);
+				})]);
+			} finally {
+				clearTimeout(timer);
+			}
+		}
+	};
+}
+function requireServiceAccountPlugin(name) {
+	const plugin = pluginCatalogRuntime.getDefinition(name);
+	if (plugin?.manifest.accounts?.serviceAccount) return plugin;
+	const supported = serviceAccountPlugins(pluginCatalogRuntime.getProviders()).map((candidate) => candidate.manifest.name);
+	console.error(`Plugin "${name}" does not support a service account.` + (supported.length ? ` Supported plugins: ${supported.join(", ")}.` : ""));
+}
+async function runConnect(plugin) {
+	const provider = plugin.manifest.name;
+	const loopback = await listenForCallback();
+	try {
+		const { authorizationUrl } = await startServiceAccountSignIn({
+			plugin,
+			redirectUrl: loopback.redirectUrl
+		});
+		console.log([
+			`Open this URL in a browser on this machine. Sign in as the account Junior should use for ${provider}, not as yourself:`,
+			"",
+			authorizationUrl.toString(),
+			"",
+			`Waiting for the redirect to ${loopback.redirectUrl} ...`
+		].join("\n"));
+		const result = await finishServiceAccountSignIn({
+			callback: await loopback.waitForCallback(),
+			plugin
+		});
+		if (!result.ok) {
+			console.error(result.message);
+			return 1;
+		}
+	} finally {
+		loopback.close();
+	}
+	const tools = (plugin.manifest.accounts?.serviceAccount?.tools ?? []).join(", ");
+	console.log(plugin.manifest.accounts?.userOAuth === false ? `Connected the ${provider} service account. Everyone now uses it for: ${tools}.` : `Connected the ${provider} service account. Actors who have not connected ${provider} now use it for: ${tools}.`);
+	return 0;
+}
+async function runStatus(plugin) {
+	const status = await getServiceAccountStatus(plugin);
+	console.log(status.connectedAt ? `The ${status.provider} service account is connected since ${status.connectedAt}.` : `The ${status.provider} service account is not connected.`);
+	return 0;
+}
+async function runDisconnect(plugin) {
+	const provider = plugin.manifest.name;
+	await disconnectServiceAccount(plugin);
+	console.log(`Removed the ${provider} service account from Junior. To revoke the grant, remove Junior's connection in the ${provider} account settings.`);
+	return 0;
+}
+/** Run `junior service-account connect|status|disconnect <plugin>`. */
+async function runServiceAccount(argv) {
+	const [subcommand, name, ...rest] = argv;
+	const run = subcommand === "connect" ? runConnect : subcommand === "status" ? runStatus : subcommand === "disconnect" ? runDisconnect : void 0;
+	if (!run || !name?.trim() || rest.length > 0) {
+		console.error(CLI_USAGE);
+		return 1;
+	}
+	const plugin = requireServiceAccountPlugin(name.trim());
+	if (!plugin) return 1;
+	try {
+		return await run(plugin);
+	} finally {
+		await disconnectStateAdapter();
+	}
+}
+export { runServiceAccount };