@sentry/junior 0.262.0 → 0.263.0

package/dist/{adapter-t-Y9RHML.js → adapter-BIacI0Bt.js}

@@ -1,4 +1,4 @@
-import { i as getChatConfig } from "./config-BiCtNiu5.js";
+import { i as getChatConfig } from "./config-Dnv8KmNs.js";
 import { setTimeout } from "node:timers/promises";
 import { createMemoryState } from "@chat-adapter/state-memory";
 import { createRedisState } from "@chat-adapter/state-redis";

package/dist/{admin-BCqeFndQ.js → admin-C7vUk7s9.js}

@@ -1,4 +1,4 @@
-import { a as setUserAdminFromSql, d as getDb, n as listAdminUsersFromSql } from "./viewer-oMTUVAcR.js";
+import { a as setUserAdminFromSql, d as getDb, n as listAdminUsersFromSql } from "./viewer-DmNRM88V.js";
 import { CLI_USAGE } from "./cli/run.js";
 // src/cli/admin.ts
 /**

package/dist/{agent-hooks-9q2zdKHL.js → agent-hooks-CqnZfuCt.js}

@@ -1,21 +1,21 @@
 import { t as __exportAll } from "./rolldown-runtime-nwUcYXjP.js";
-import { i as completeObject, o as embedTexts } from "./client-DpfjZgNk.js";
-import { T as withSpan, a as extractGenAiUsageSummary, b as setSpanStatus, f as logException, m as logWarn, p as logInfo, y as setSpanAttributes, z as isRecord$1 } from "./logging-dZN1Bvtu.js";
+import { i as completeObject, o as embedTexts } from "./client-DZBCBj1M.js";
+import { T as withSpan, a as extractGenAiUsageSummary, b as setSpanStatus, f as logException, m as logWarn, p as logInfo, y as setSpanAttributes, z as isRecord$1 } from "./logging-Dk_FpF36.js";
 import { a as getClient$1 } from "./sentry-BBUlHih9.js";
-import { t as canExposeConversationPayload } from "./conversation-privacy-CBUI0frD.js";
-import { i as getChatConfig, n as botConfig, o as getSlackBotToken } from "./config-BiCtNiu5.js";
+import { t as canExposeConversationPayload } from "./conversation-privacy-FY8yc2q3.js";
+import { i as getChatConfig, n as botConfig, o as getSlackBotToken } from "./config-Dnv8KmNs.js";
 import { r as defaultModelId } from "./model-profile-Bg8EoCKD.js";
 import { d as parseSlackTeamId, g as parseSlackMessageTs, i as isActorUserId, o as parseActorUserId, u as parseSlackChannelReferenceId } from "./actor-tlxzqaRe.js";
-import { D as hasAgentTurnUsage, M as readUserTimezone, P as saveUserTimezone, c as getConversationEventStore, d as getDb, f as getSqlExecutor, g as createSqlStore, i as resolveViewerUser, r as readActorIdentity } from "./viewer-oMTUVAcR.js";
+import { D as hasAgentTurnUsage, M as readUserTimezone, P as saveUserTimezone, c as getConversationEventStore, d as getDb, f as getSqlExecutor, g as createSqlStore, i as resolveViewerUser, r as readActorIdentity } from "./viewer-DmNRM88V.js";
 import { c as juniorIdentities, d as juniorDestinations, l as juniorUsers, s as juniorConversations } from "./agent-invocations-CxKldAeB.js";
-import { _ as juniorConversationAnnotations, b as juniorAttachments, f as juniorConversationBriefs, h as juniorConversationEvents, i as juniorWorkspaces, n as juniorSnapshots, r as juniorWorkspaceRepos, u as juniorConversationParticipants, v as juniorCodeChanges, y as juniorCodeRepositories } from "./executor-O8xqLDN6.js";
+import { _ as juniorConversationAnnotations, b as juniorAttachments, f as juniorConversationBriefs, h as juniorConversationEvents, i as juniorWorkspaces, n as juniorSnapshots, r as juniorWorkspaceRepos, u as juniorConversationParticipants, v as juniorCodeChanges, y as juniorCodeRepositories } from "./executor-J9k2sp9m.js";
 import { o as decodeStoredConversationEvent } from "./history-AY8rs-FR.js";
-import { h as credentialSubjectSchema } from "./registry-BUje_knT.js";
-import { n as getDefaultRedisStateAdapterFor, r as getStateAdapter, s as withLock } from "./adapter-t-Y9RHML.js";
+import { h as credentialSubjectSchema } from "./registry-BFzQFV_y.js";
+import { n as getDefaultRedisStateAdapterFor, r as getStateAdapter, s as withLock } from "./adapter-BIacI0Bt.js";
 import { i as isValidTimeZone } from "./cadence-R7Em4RjE.js";
-import { B as readMessageAttachments, C as conversationReportEventSchema, F as readMessageCardRefs, J as parseBriefInput, q as conversationBriefSchema, w as conversationReportMessageEventSchema } from "./conversation-CvuKJ3tA.js";
-import { n as briefEntriesFromReportEvents, s as generateBrief, t as BRIEF_PROMPT } from "./prompt-DeVax2qO.js";
-import { D as SANDBOX_WORKSPACE_ROOT, S as runNonInteractiveCommand, l as isSandboxMissingError, n as hash, v as getVercelSandboxCredentials, y as sleep$1 } from "./profile-BP2N5uDY.js";
+import { B as readMessageAttachments, C as conversationReportEventSchema, F as readMessageCardRefs, J as parseBriefInput, q as conversationBriefSchema, w as conversationReportMessageEventSchema } from "./conversation-B0baEwoA.js";
+import { n as briefEntriesFromReportEvents, s as generateBrief, t as BRIEF_PROMPT } from "./prompt-CxatQVaj.js";
+import { D as SANDBOX_WORKSPACE_ROOT, S as runNonInteractiveCommand, l as isSandboxMissingError, n as hash, v as getVercelSandboxCredentials, y as sleep$1 } from "./profile-Dq5I7TV1.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { z } from "zod";
 import { createHash, createHmac, randomUUID, timingSafeEqual } from "node:crypto";
@@ -326,25 +326,49 @@ function createPluginAnnotations(args) {
 			await args.db.delete(juniorConversationAnnotations).where(and(eq(juniorConversationAnnotations.conversationId, args.conversationId), eq(juniorConversationAnnotations.plugin, args.plugin), eq(juniorConversationAnnotations.kind, kind), eq(juniorConversationAnnotations.key, key)));
 		},
 		async list() {
-			return (await listConversationAnnotations(args.db, args.conversationId)).filter((a) => a.plugin === args.plugin);
+			return (await args.db.select().from(juniorConversationAnnotations).where(and(eq(juniorConversationAnnotations.conversationId, args.conversationId), eq(juniorConversationAnnotations.plugin, args.plugin))).orderBy(desc(juniorConversationAnnotations.updatedAt))).flatMap((row) => annotationFromRow(row) ?? []);
 		}
 	};
 }
-/** Load stored annotations for one conversation, newest update first. */
+/**
+* Load stored annotations for one conversation, newest update first. A root
+* Conversation also reads the annotations of its child Conversations.
+*/
 async function listConversationAnnotations(db, conversationId) {
 	return (await listConversationAnnotationsById(db, [conversationId])).get(conversationId) ?? [];
 }
-/** Load stored annotations for a bounded set of conversations. */
+/**
+* Load stored annotations for a bounded set of conversations, newest update
+* first. Child agents save annotations in their own Conversation, but people
+* see the root Conversation. So a root also reads the annotations of every
+* Conversation in its tree. The newest annotation wins for each object.
+*/
 async function listConversationAnnotationsById(db, conversationIds) {
 	const byConversation = /* @__PURE__ */ new Map();
 	if (conversationIds.length === 0) return byConversation;
-	const rows = await db.select().from(juniorConversationAnnotations).where(inArray(juniorConversationAnnotations.conversationId, [...conversationIds])).orderBy(desc(juniorConversationAnnotations.updatedAt));
-	for (const row of rows) {
+	const requested = new Set(conversationIds);
+	const rows = await db.select({
+		annotation: juniorConversationAnnotations,
+		rootConversationId: juniorConversations.rootConversationId
+	}).from(juniorConversationAnnotations).innerJoin(juniorConversations, eq(juniorConversations.conversationId, juniorConversationAnnotations.conversationId)).where(or(inArray(juniorConversationAnnotations.conversationId, [...requested]), inArray(juniorConversations.rootConversationId, [...requested]))).orderBy(desc(juniorConversationAnnotations.updatedAt));
+	const seen = /* @__PURE__ */ new Set();
+	for (const { annotation: row, rootConversationId } of rows) {
 		const annotation = annotationFromRow(row);
 		if (!annotation) continue;
-		const current = byConversation.get(row.conversationId);
-		if (current) current.push(annotation);
-		else byConversation.set(row.conversationId, [annotation]);
+		for (const owner of /* @__PURE__ */ new Set([row.conversationId, rootConversationId])) {
+			if (!owner || !requested.has(owner)) continue;
+			const objectKey = JSON.stringify([
+				owner,
+				row.plugin,
+				row.kind,
+				row.key
+			]);
+			if (seen.has(objectKey)) continue;
+			seen.add(objectKey);
+			const current = byConversation.get(owner);
+			if (current) current.push(annotation);
+			else byConversation.set(owner, [annotation]);
+		}
 	}
 	return byConversation;
 }
@@ -793,6 +817,7 @@ function reportEventData(args) {
 				role: data.role,
 				...data.meta?.source === "web" || data.meta?.source === "slack" ? { source: data.meta.source } : void 0,
 				...actorIdentity ? { actorIdentity } : void 0,
+				...typeof data.meta?.agentInvocationId === "string" ? { agentInvocationId: data.meta.agentInvocationId } : void 0,
 				eventObjectType: objectTypeSchema.safeParse(data.meta?.eventObjectType).data,
 				...typeof data.meta?.eventType === "string" ? { eventType: data.meta.eventType } : void 0,
 				...typeof data.meta?.explicitMention === "boolean" ? { explicitMention: data.meta.explicitMention } : void 0,
@@ -1807,6 +1832,27 @@ function createPluginState(plugin, adapter) {
 		}
 	};
 }
+// src/chat/tools/execution/plugin-tool-denied-error.ts
+const PLUGIN_DENIAL_INSTRUCTIONS = [
+	"This action was blocked by policy and was not executed.",
+	"Do not retry it or reach the same result through a workaround or another tool.",
+	"Stop and explain what was blocked and why."
+].join("\n");
+/** Expected tool failure when a plugin hook refuses a tool call by policy. */
+var PluginToolDeniedError = class extends Error {
+	constructor(reason) {
+		super(`${PLUGIN_DENIAL_INSTRUCTIONS}\nReason: ${reason}`);
+		this.name = "PluginToolDeniedError";
+	}
+};
+// src/chat/tools/execution/tool-input-error.ts
+/** Thrown when a tool fails due to invalid model/user input, not a system error. */
+var ToolInputError = class extends Error {
+	constructor(message, options) {
+		super(message, options);
+		this.name = "ToolInputError";
+	}
+};
 // src/chat/dashboard-link.ts
 let dashboardConversationLinkOptions;
 function withHttps(host) {
@@ -3409,7 +3455,6 @@ function coreTaskRegistrations() {
 }
 // src/chat/plugins/agent-hooks.ts
 var agent_hooks_exports = /* @__PURE__ */ __exportAll({
-	PluginHookDeniedError: () => PluginHookDeniedError,
 	applyPluginFormatMarkdown: () => applyPluginFormatMarkdown,
 	createPluginHookRunner: () => createPluginHookRunner,
 	getPluginApiRoutes: () => getPluginApiRoutes,
@@ -3424,13 +3469,6 @@ var agent_hooks_exports = /* @__PURE__ */ __exportAll({
 	setPlugins: () => setPlugins,
 	validatePlugins: () => validatePlugins
 });
-/** Signal that a plugin intentionally denied a tool execution. */
-var PluginHookDeniedError = class extends Error {
-	constructor(message) {
-		super(message);
-		this.name = "PluginHookDeniedError";
-	}
-};
 let registeredPlugins = [];
 const PLUGIN_NAME_RE = /^[a-z][a-z0-9-]*$/;
 const PLUGIN_TASK_NAME_RE = /^[a-z][A-Za-z0-9]*$/;
@@ -4358,7 +4396,7 @@ function createPluginHookRunner(input = {}) {
 				const hook = plugin.hooks?.beforeToolExecute;
 				if (!hook) continue;
 				let replacement;
-				let denied;
+				let blocked;
 				await hook({
 					...basePluginContext(plugin),
 					actor: input.actor,
@@ -4377,15 +4415,18 @@ function createPluginHookRunner(input = {}) {
 						}
 					},
 					decision: {
-						deny(message) {
-							denied = message;
+						deny(reason) {
+							blocked = new PluginToolDeniedError(reason);
+						},
+						redirect(message) {
+							blocked = new ToolInputError(message);
 						},
 						replaceInput(input) {
 							replacement = input;
 						}
 					}
 				});
-				if (denied) throw new PluginHookDeniedError(denied);
+				if (blocked) throw blocked;
 				if (replacement !== void 0) {
 					if (!isRecord(replacement)) throw new Error(`Plugin "${pluginName}" replaced tool input with a non-object value`);
 					nextInput = { ...replacement };
@@ -4398,4 +4439,4 @@ function createPluginHookRunner(input = {}) {
 		}
 	};
 }
-export { bindSlackDirectCredentialSubject as $, agentsInstructionsUpdatedEvent as $t, getWorkspaceSnapshotBuilder as A, conversationIsMemberRoot as At, STOP_WATCHING_TOOL_NAME as B, readAttachmentVisionSummary as Bt, WorkspaceValidationError as C, createPluginModel as Ct, setWorkspaceSnapshotBuild as D, conversationArchivedForEmail as Dt, setWorkspaceSnapshot as E, conversationArchiveTimes as Et, isSlackMessageTurn as F, readLatestConversationBrief as Ft, createWatch as G, listConversationAnnotations as Gt, cancelWatch as H, resolveRootVisibility as Ht, slackMessageTurnDisabledReason as I, readConversationEventPage as It, getWatch as J, resolveUserTimezone as Jt, deliverWatch as K, listConversationAnnotationsById as Kt, RESOURCE_SUBSCRIPTION_DEFAULT_TTL_MS as L, buildSentryConversationUrl as Lt, workspaceRepoCheckoutPath as M, conversationNotArchivedForUser as Mt, resolveChannelCapabilities as N, viewerConversationMembership as Nt, SANDBOX_RUNTIME as O, conversationArchivedForUser as Ot, getSlackToolContext as P, createPluginConversationEvents as Pt, bindScheduledAutomationCredentialSubject as Q, JUNIOR_NATIVE_EVENT_NAMESPACE as Qt, RESOURCE_SUBSCRIPTION_MAX_TTL_MS as R, getSlackFileId as Rt, updateWorkspace as S, createPluginEmbedder as St, loadSnapshotsForProfile as T, readConversationAccessFromSql as Tt, collectEventMatchKeys as U, saveObjectAnnotations as Ut, cancelSubscriptions as V, recordSlackAttachment as Vt, createTimerWatch as W, createPluginAnnotations as Wt, takeDueTimerWatches as X, createPluginCache as Xt, listWatches as Y, lookupSlackUser as Yt, bindEventAutomationCredentialSubject as Z, createCache as Zt, deleteWorkspace as _, getDashboardConversationLink as _t, getPluginRoutes as a, downloadPrivateSlackFile as at, listWorkspaces as b, setDashboardConversationLinkOptions as bt, getPluginTools as c, getSlackClient as ct, setPlugins as d, normalizeSlackConversationId as dt, authenticationLinkedEvent as en, verifyEventAutomationCredentialSubject as et, validatePlugins as f, runWithSlackInstallationToken as ft, createWorkspace as g, JUNIOR_THREAD_STATE_TTL_MS as gt, setBriefsConfig as h, runWithWorkspaceTeamId as ht, getPluginApiRoutes as i, SlackActionError as it, tryWorkspaceRepoCheckoutPath as j, conversationNotArchivedForEmail as jt, deleteWorkspaceSnapshotBuilders as k, conversationHasParticipantUser as kt, getPluginUserPromptContributions as l, isConversationScopedChannel as lt, registration_exports as m, getWorkspaceTeamId as mt, applyPluginFormatMarkdown as n, conversationNoteEvent as nn, verifySlackDirectCredentialSubject as nt, getPluginSlackConversationLink as o, getFilePermalink as ot, coreTaskRegistrations as p, withSlackRetries as pt, findMatchingWatches as q, defaultTimezone as qt, createPluginHookRunner as r, verifyTimerWatchCredentialSubject as rt, getPluginSystemPromptContributions as s, getHeaderString as st, agent_hooks_exports as t, authenticationUnlinkedEvent as tn, verifyScheduledAutomationCredentialSubject as tt, getPlugins as u, isDmChannel as ut, getWorkspace as v, getDashboardObjectIconLink as vt, invalidateReadySnapshot as w, createPluginLogger as wt, listWorkspacesByRepository as x, createPluginState as xt, getWorkspaceByName as y, getDashboardTaskLink as yt, RESOURCE_WATCH_TOOL_SOURCE as z, matchSlackAttachments as zt };
+export { bindSlackDirectCredentialSubject as $, createCache as $t, getWorkspaceSnapshotBuilder as A, conversationArchivedForUser as At, STOP_WATCHING_TOOL_NAME as B, getSlackFileId as Bt, WorkspaceValidationError as C, createPluginState as Ct, setWorkspaceSnapshotBuild as D, readConversationAccessFromSql as Dt, setWorkspaceSnapshot as E, createPluginLogger as Et, isSlackMessageTurn as F, viewerConversationMembership as Ft, createWatch as G, saveObjectAnnotations as Gt, cancelWatch as H, readAttachmentVisionSummary as Ht, slackMessageTurnDisabledReason as I, createPluginConversationEvents as It, getWatch as J, listConversationAnnotationsById as Jt, deliverWatch as K, createPluginAnnotations as Kt, RESOURCE_SUBSCRIPTION_DEFAULT_TTL_MS as L, readLatestConversationBrief as Lt, workspaceRepoCheckoutPath as M, conversationIsMemberRoot as Mt, resolveChannelCapabilities as N, conversationNotArchivedForEmail as Nt, SANDBOX_RUNTIME as O, conversationArchiveTimes as Ot, getSlackToolContext as P, conversationNotArchivedForUser as Pt, bindScheduledAutomationCredentialSubject as Q, createPluginCache as Qt, RESOURCE_SUBSCRIPTION_MAX_TTL_MS as R, readConversationEventPage as Rt, updateWorkspace as S, PluginToolDeniedError as St, loadSnapshotsForProfile as T, createPluginModel as Tt, collectEventMatchKeys as U, recordSlackAttachment as Ut, cancelSubscriptions as V, matchSlackAttachments as Vt, createTimerWatch as W, resolveRootVisibility as Wt, takeDueTimerWatches as X, resolveUserTimezone as Xt, listWatches as Y, defaultTimezone as Yt, bindEventAutomationCredentialSubject as Z, lookupSlackUser as Zt, deleteWorkspace as _, getDashboardConversationLink as _t, getPluginRoutes as a, downloadPrivateSlackFile as at, listWorkspaces as b, setDashboardConversationLinkOptions as bt, getPluginTools as c, getSlackClient as ct, setPlugins as d, normalizeSlackConversationId as dt, JUNIOR_NATIVE_EVENT_NAMESPACE as en, verifyEventAutomationCredentialSubject as et, validatePlugins as f, runWithSlackInstallationToken as ft, createWorkspace as g, JUNIOR_THREAD_STATE_TTL_MS as gt, setBriefsConfig as h, runWithWorkspaceTeamId as ht, getPluginApiRoutes as i, conversationNoteEvent as in, SlackActionError as it, tryWorkspaceRepoCheckoutPath as j, conversationHasParticipantUser as jt, deleteWorkspaceSnapshotBuilders as k, conversationArchivedForEmail as kt, getPluginUserPromptContributions as l, isConversationScopedChannel as lt, registration_exports as m, getWorkspaceTeamId as mt, applyPluginFormatMarkdown as n, authenticationLinkedEvent as nn, verifySlackDirectCredentialSubject as nt, getPluginSlackConversationLink as o, getFilePermalink as ot, coreTaskRegistrations as p, withSlackRetries as pt, findMatchingWatches as q, listConversationAnnotations as qt, createPluginHookRunner as r, authenticationUnlinkedEvent as rn, verifyTimerWatchCredentialSubject as rt, getPluginSystemPromptContributions as s, getHeaderString as st, agent_hooks_exports as t, agentsInstructionsUpdatedEvent as tn, verifyScheduledAutomationCredentialSubject as tt, getPlugins as u, isDmChannel as ut, getWorkspace as v, getDashboardObjectIconLink as vt, invalidateReadySnapshot as w, createPluginEmbedder as wt, listWorkspacesByRepository as x, ToolInputError as xt, getWorkspaceByName as y, getDashboardTaskLink as yt, RESOURCE_WATCH_TOOL_SOURCE as z, buildSentryConversationUrl as zt };