@sentry/junior 0.68.0 → 0.69.0

package/dist/chat/sandbox/egress-session.d.ts

@@ -1,17 +1,7 @@
-import { type CredentialContext } from "@/chat/credentials/context";
-import type { CredentialHeaderTransform } from "@/chat/credentials/broker";
+import type { CredentialContext } from "@/chat/credentials/context";
+import { type SandboxEgressAuthRequiredSignal, type SandboxEgressCredentialContext, type SandboxEgressCredentialLease, type SandboxEgressPermissionDeniedSignal } from "@/chat/sandbox/egress-schemas";
 export declare const SANDBOX_EGRESS_PROXY_PATH = "/api/internal/sandbox-egress";
-export interface SandboxEgressCredentialContext {
-    credentials: CredentialContext;
-    egressId: string;
-    expiresAtMs: number;
-    contextId: string;
-}
-export interface SandboxEgressCredentialLease {
-    provider: string;
-    expiresAt: string;
-    headerTransforms: CredentialHeaderTransform[];
-}
+export type { SandboxEgressAuthRequiredSignal, SandboxEgressCredentialContext, SandboxEgressCredentialLease, SandboxEgressPermissionDeniedSignal, };
 /** Create a signed actor/sandbox context token for lazy sandbox egress auth. */
 export declare function createSandboxEgressCredentialToken(input: {
     credentials: CredentialContext;
@@ -20,9 +10,19 @@ export declare function createSandboxEgressCredentialToken(input: {
 }): string;
 /** Verify a signed actor/sandbox context token from the proxy URL. */
 export declare function parseSandboxEgressCredentialToken(token: string | undefined): SandboxEgressCredentialContext | undefined;
-/** Cache a short-lived credential lease for repeated forwarded requests for one actor/sandbox context. */
+/** Cache a short-lived credential lease for one actor/sandbox context and grant. */
 export declare function setSandboxEgressCredentialLease(context: SandboxEgressCredentialContext, lease: SandboxEgressCredentialLease): Promise<void>;
-/** Load a cached egress credential lease for an actor/sandbox context/provider pair. */
-export declare function getSandboxEgressCredentialLease(provider: string, context: SandboxEgressCredentialContext): Promise<SandboxEgressCredentialLease | undefined>;
+/** Load a cached egress credential lease for one actor/sandbox context and grant. */
+export declare function getSandboxEgressCredentialLease(provider: string, grantName: string, context: SandboxEgressCredentialContext): Promise<SandboxEgressCredentialLease | undefined>;
 /** Clear a cached egress credential lease after the provider rejects its headers. */
-export declare function clearSandboxEgressCredentialLease(provider: string, context: SandboxEgressCredentialContext): Promise<void>;
+export declare function clearSandboxEgressCredentialLease(provider: string, grantName: string, context: SandboxEgressCredentialContext): Promise<void>;
+/** Record that host-side sandbox egress returned an auth-required response. */
+export declare function setSandboxEgressAuthRequiredSignal(context: SandboxEgressCredentialContext, signal: Omit<SandboxEgressAuthRequiredSignal, "createdAtMs">): Promise<void>;
+/** Record that host-side sandbox egress saw an upstream permission denial. */
+export declare function setSandboxEgressPermissionDeniedSignal(context: SandboxEgressCredentialContext, signal: Omit<SandboxEgressPermissionDeniedSignal, "createdAtMs">): Promise<void>;
+/** Remove any pending host-side sandbox egress signals for a command. */
+export declare function clearSandboxEgressSignals(egressId: string | undefined): Promise<void>;
+/** Consume the host-side sandbox egress auth signal produced during a command. */
+export declare function consumeSandboxEgressAuthRequiredSignal(egressId: string | undefined): Promise<SandboxEgressAuthRequiredSignal | undefined>;
+/** Consume the host-side sandbox egress permission signal produced during a command. */
+export declare function consumeSandboxEgressPermissionDeniedSignal(egressId: string | undefined): Promise<SandboxEgressPermissionDeniedSignal | undefined>;

package/dist/chat/sandbox/sandbox.d.ts

@@ -1,4 +1,5 @@
 import { type LogContext } from "@/chat/logging";
+import { type SandboxEgressAuthRequiredSignal, type SandboxEgressPermissionDeniedSignal } from "@/chat/sandbox/egress-session";
 import type { CredentialContext } from "@/chat/credentials/context";
 import type { AgentPluginHookRunner } from "@/chat/plugins/agent-hooks";
 import type { SandboxInstance } from "@/chat/sandbox/workspace";
@@ -22,6 +23,8 @@ export interface BashCustomCommandResult {
     stderr: string;
     stdout_truncated: boolean;
     stderr_truncated: boolean;
+    auth_required?: SandboxEgressAuthRequiredSignal;
+    permission_denied?: SandboxEgressPermissionDeniedSignal;
 }
 export interface SandboxAcquiredState {
     sandboxId: string;

package/dist/chat/sandbox/session.d.ts

@@ -34,6 +34,7 @@ interface SandboxSessionManager {
     configureSkills(skills: SkillMetadata[]): void;
     configureReferenceFiles(files: string[]): void;
     getSandboxId(): string | undefined;
+    getSandboxEgressId(): string | undefined;
     getDependencyProfileHash(): string | undefined;
     createSandbox(): Promise<SandboxInstance>;
     ensureToolExecutors(): Promise<SandboxToolExecutors>;

package/dist/chat/services/mcp-auth-orchestration.d.ts

@@ -1,4 +1,5 @@
 import type { OAuthClientProvider } from "@modelcontextprotocol/sdk/client/auth.js";
+import type { Destination } from "@sentry/junior-plugin-api";
 import { AuthorizationPauseError, type AuthorizationFlowMode } from "@/chat/services/auth-pause";
 import type { ThreadArtifactsState } from "@/chat/state/artifacts";
 import type { ConversationPendingAuthState } from "@/chat/state/conversation";
@@ -11,6 +12,7 @@ export interface McpAuthOrchestrationDeps {
     sessionId?: string;
     requesterId?: string;
     channelId?: string;
+    destination?: Destination;
     threadTs?: string;
     toolChannelId?: string;
     userMessage: string;

package/dist/chat/services/pending-auth.d.ts

@@ -6,12 +6,14 @@ export declare function canReusePendingAuthLink(args: {
     pendingAuth?: ConversationPendingAuthState;
     provider: string;
     requesterId: string;
+    scope?: string;
 }): boolean;
 export declare function getConversationPendingAuth(args: {
     conversation: ThreadConversationState;
     kind: AuthorizationPauseKind;
     provider: string;
     requesterId: string;
+    scope?: string;
 }): ConversationPendingAuthState | undefined;
 export declare function clearPendingAuth(conversation: ThreadConversationState, sessionId?: string): void;
 /**

package/dist/chat/services/plugin-auth-orchestration.d.ts

@@ -1,3 +1,4 @@
+import type { Destination } from "@sentry/junior-plugin-api";
 import type { ChannelConfigurationService } from "@/chat/configuration/types";
 import type { UserTokenStore } from "@/chat/credentials/user-token-store";
 import { AuthorizationPauseError, type AuthorizationFlowMode } from "@/chat/services/auth-pause";
@@ -15,6 +16,7 @@ export interface PluginAuthOrchestrationDeps {
     sessionId?: string;
     requesterId?: string;
     channelId?: string;
+    destination?: Destination;
     threadTs?: string;
     userMessage: string;
     channelConfiguration?: ChannelConfigurationService;

package/dist/chat/services/provider-retry.d.ts

@@ -1,6 +1,15 @@
 import type { AssistantMessage } from "@earendil-works/pi-ai";
 import type { PiMessage } from "@/chat/pi/messages";
-/** Detect transient provider failures that are safe to retry from a Pi boundary. */
-export declare function isRetryableProviderError(message: Pick<AssistantMessage, "stopReason" | "errorMessage"> | undefined): boolean;
-/** Remove a failed assistant tail only when the remaining Pi history can continue. */
-export declare function trimRetryableProviderErrorTail(messages: PiMessage[]): PiMessage[] | undefined;
+/** Mark failures that cross the AI provider boundary for shared retry handling. */
+export declare function createProviderError(error: unknown): Error;
+/** Return whether a provider-boundary error should be retried by the worker. */
+export declare function isProviderRetryError(error: unknown): boolean;
+/** Build the next provider retry step from Pi history, if the turn can resume. */
+export declare function nextProviderRetry(args: {
+    attempt: number;
+    lastAssistant: Pick<AssistantMessage, "stopReason" | "errorMessage"> | undefined;
+    messages: PiMessage[];
+}): {
+    delayMs: number;
+    messages: PiMessage[];
+} | undefined;

package/dist/chat/services/timeout-resume.d.ts

@@ -1,7 +1,9 @@
 import type { StateAdapter } from "chat";
+import type { Destination } from "@sentry/junior-plugin-api";
 import type { ConversationWorkQueue } from "@/chat/task-execution/queue";
 export interface TurnContinuationRequest {
     conversationId: string;
+    destination: Destination;
     expectedVersion: number;
     sessionId: string;
 }

package/dist/chat/services/turn-session-record.d.ts

@@ -1,4 +1,5 @@
 import { type AgentTurnSessionRecord, type AgentTurnRequester, type AgentTurnSurface } from "@/chat/state/turn-session";
+import type { Destination } from "@sentry/junior-plugin-api";
 import type { PiMessage } from "@/chat/pi/messages";
 import { type AgentTurnUsage } from "@/chat/usage";
 export declare const AGENT_TURN_TIMEOUT_RESUME_MAX_SLICES = 48;
@@ -26,6 +27,7 @@ export declare function loadTurnSessionRecord(ctx: TurnSessionContext): Promise<
 export declare function persistRunningSessionRecord(args: {
     channelName?: string;
     conversationId: string;
+    destination?: Destination;
     sessionId: string;
     sliceId: number;
     messages: PiMessage[];
@@ -40,6 +42,7 @@ export declare function persistCompletedSessionRecord(args: {
     conversationId: string;
     currentDurationMs?: number;
     currentUsage?: AgentTurnUsage;
+    destination?: Destination;
     sessionId: string;
     sliceId: number;
     allMessages: PiMessage[];
@@ -59,6 +62,7 @@ export declare function persistAuthPauseSessionRecord(args: {
     currentSliceId: number;
     currentDurationMs?: number;
     currentUsage?: AgentTurnUsage;
+    destination?: Destination;
     messages: PiMessage[];
     loadedSkillNames?: string[];
     errorMessage: string;
@@ -77,6 +81,7 @@ export declare function persistTimeoutSessionRecord(args: {
     currentSliceId: number;
     currentDurationMs?: number;
     currentUsage?: AgentTurnUsage;
+    destination?: Destination;
     messages: PiMessage[];
     loadedSkillNames?: string[];
     errorMessage: string;
@@ -94,6 +99,7 @@ export declare function persistYieldSessionRecord(args: {
     currentSliceId: number;
     currentDurationMs?: number;
     currentUsage?: AgentTurnUsage;
+    destination?: Destination;
     messages: PiMessage[];
     loadedSkillNames?: string[];
     errorMessage: string;

package/dist/chat/slack/attachment-fetchers.d.ts

@@ -0,0 +1,11 @@
+import { downloadPrivateSlackFile as downloadPrivateSlackFileImpl } from "@/chat/slack/client";
+/**
+ * Restore Slack private-file fetchers on message attachments that crossed a
+ * serialization boundary.
+ */
+export declare function rehydrateAttachmentFetchers(message: {
+    attachments: Array<{
+        fetchData?: unknown;
+        url?: string;
+    }>;
+}, downloadPrivateSlackFile?: typeof downloadPrivateSlackFileImpl): void;

package/dist/chat/state/conversation.d.ts

@@ -45,6 +45,7 @@ export interface ConversationPendingAuthState {
     linkSentAtMs: number;
     provider: string;
     requesterId: string;
+    scope?: string;
     sessionId: string;
 }
 export interface ConversationStats {

package/dist/chat/state/turn-session.d.ts

@@ -1,3 +1,4 @@
+import type { Destination } from "@sentry/junior-plugin-api";
 import type { PiMessage } from "@/chat/pi/messages";
 import type { AgentTurnUsage } from "@/chat/usage";
 export type AgentTurnSessionStatus = "running" | "awaiting_resume" | "completed" | "failed" | "abandoned";
@@ -16,6 +17,7 @@ export interface AgentTurnSessionRecord {
     conversationId: string;
     cumulativeDurationMs: number;
     cumulativeUsage?: AgentTurnUsage;
+    destination?: Destination;
     errorMessage?: string;
     lastProgressAtMs: number;
     loadedSkillNames?: string[];
@@ -41,6 +43,7 @@ export declare function upsertAgentTurnSessionRecord(args: {
     conversationId: string;
     cumulativeDurationMs?: number;
     cumulativeUsage?: AgentTurnUsage;
+    destination?: Destination;
     lastProgressAtMs?: number;
     loadedSkillNames?: string[];
     sessionId: string;
@@ -62,6 +65,7 @@ export declare function recordAgentTurnSessionSummary(args: {
     conversationId: string;
     cumulativeDurationMs?: number;
     cumulativeUsage?: AgentTurnUsage;
+    destination?: Destination;
     lastProgressAtMs?: number;
     loadedSkillNames?: string[];
     requester?: AgentTurnRequester;

package/dist/chat/task-execution/queue.d.ts

@@ -1,5 +1,7 @@
+import type { Destination } from "@sentry/junior-plugin-api";
 export interface ConversationQueueMessage {
     conversationId: string;
+    destination: Destination;
 }
 export interface ConversationQueueSendOptions {
     delayMs?: number;

package/dist/chat/task-execution/store.d.ts

@@ -1,4 +1,5 @@
 import type { StateAdapter } from "chat";
+import type { Destination } from "@sentry/junior-plugin-api";
 import type { ConversationWorkQueue } from "./queue";
 export declare const CONVERSATION_WORK_LEASE_TTL_MS = 90000;
 export declare const CONVERSATION_WORK_CHECK_IN_INTERVAL_MS = 15000;
@@ -13,6 +14,7 @@ export interface AgentInputMessage {
 export interface InboundMessageRecord {
     conversationId: string;
     createdAtMs: number;
+    destination: Destination;
     inboundMessageId: string;
     injectedAtMs?: number;
     input: AgentInputMessage;
@@ -27,6 +29,7 @@ export interface ConversationLease {
 }
 export interface ConversationWorkState {
     conversationId: string;
+    destination: Destination;
     lastEnqueuedAtMs?: number;
     lease?: ConversationLease;
     messages: InboundMessageRecord[];
@@ -81,6 +84,7 @@ export declare function appendAndEnqueueInboundMessage(args: {
 /** Mark a conversation runnable when there is no new mailbox message. */
 export declare function requestConversationWork(args: {
     conversationId: string;
+    destination: Destination;
     nowMs?: number;
     state?: StateAdapter;
 }): Promise<RequestConversationWorkResult>;
@@ -122,6 +126,7 @@ export declare function markConversationMessagesInjected(args: {
 /** Mark the leased conversation as needing another queue-delivered slice. */
 export declare function requestConversationContinuation(args: {
     conversationId: string;
+    destination: Destination;
     leaseToken: string;
     nowMs?: number;
     state?: StateAdapter;

package/dist/chat/task-execution/vercel-callback.d.ts

@@ -2,6 +2,7 @@ import type { StateAdapter } from "chat";
 import type { ConversationWorkQueue } from "./queue";
 import { type ConversationWorkProcessResult, type ConversationWorkerResult, type ConversationWorkerContext } from "./worker";
 export declare const CONVERSATION_WORK_VISIBILITY_TIMEOUT_BUFFER_SECONDS = 30;
+export declare const CONVERSATION_WORK_DEV_CONSUMER_GROUP = "junior_conversation_work_dev";
 export interface ProcessConversationQueueMessageOptions {
     checkInIntervalMs?: number;
     nowMs?: () => number;
@@ -11,6 +12,7 @@ export interface ProcessConversationQueueMessageOptions {
     state?: StateAdapter;
 }
 export interface VercelConversationWorkCallbackOptions extends ProcessConversationQueueMessageOptions {
+    topic?: string;
     visibilityTimeoutSeconds?: number;
 }
 /** Resolve queue visibility so redelivery waits past the host timeout boundary. */
@@ -19,3 +21,5 @@ export declare function resolveConversationWorkVisibilityTimeoutSeconds(function
 export declare function processConversationQueueMessage(message: unknown, options: ProcessConversationQueueMessageOptions): Promise<ConversationWorkProcessResult>;
 /** Create the Vercel Queue push callback for conversation work nudges. */
 export declare function createVercelConversationWorkCallback(options: VercelConversationWorkCallbackOptions): (request: Request) => Promise<Response>;
+/** Register the Vercel Queue local-dev consumer for Nitro's central route dispatcher. */
+export declare function registerVercelConversationWorkDevConsumer(options: VercelConversationWorkCallbackOptions): (() => void) | undefined;

package/dist/chat/task-execution/vercel-queue.d.ts

@@ -9,6 +9,8 @@ export interface VercelConversationWorkQueueOptions {
     retentionSeconds?: number;
     topic?: string;
 }
+/** Resolve the Vercel Queue topic used for conversation wake-up nudges. */
+export declare function resolveConversationWorkQueueTopic(options?: Pick<VercelConversationWorkQueueOptions, "topic">): string;
 /** Create the Vercel Queue implementation for conversation wake-up nudges. */
 export declare function createVercelConversationWorkQueue(options?: VercelConversationWorkQueueOptions): ConversationWorkQueue;
 /** Return the default production conversation work queue. */

package/dist/chat/task-execution/worker.d.ts

@@ -1,11 +1,13 @@
 import type { StateAdapter } from "chat";
-import type { ConversationWorkQueue } from "./queue";
+import type { Destination } from "@sentry/junior-plugin-api";
+import type { ConversationQueueMessage, ConversationWorkQueue } from "./queue";
 import { type InboundMessageRecord } from "./store";
 export declare const CONVERSATION_WORK_DEFER_DELAY_MS = 15000;
 export declare const CONVERSATION_WORK_SOFT_YIELD_AFTER_MS = 240000;
 export interface ConversationWorkerContext {
     checkIn(): Promise<boolean>;
     conversationId: string;
+    destination: Destination;
     drainMailbox(inject: (messages: InboundMessageRecord[]) => Promise<void>): Promise<InboundMessageRecord[]>;
     leaseToken: string;
     shouldYield(): boolean;
@@ -25,4 +27,4 @@ export interface ProcessConversationWorkOptions {
     state?: StateAdapter;
 }
 /** Process one queue wake-up for a conversation. */
-export declare function processConversationWork(conversationId: string, options: ProcessConversationWorkOptions): Promise<ConversationWorkProcessResult>;
+export declare function processConversationWork(message: ConversationQueueMessage, options: ProcessConversationWorkOptions): Promise<ConversationWorkProcessResult>;

package/dist/chat/tools/slack/context.d.ts

@@ -0,0 +1,3 @@
+import type { ToolRuntimeContext } from "@/chat/tools/types";
+/** Resolve the Slack channel used by first-class delivery tools. */
+export declare function getSlackDeliveryChannelId(context: ToolRuntimeContext): string | undefined;

package/dist/chat/tools/types.d.ts

@@ -1,10 +1,10 @@
 import type { FileUpload } from "chat";
+import type { Destination } from "@sentry/junior-plugin-api";
 import type { McpToolManager } from "@/chat/mcp/tool-manager";
 import type { SandboxWorkspace } from "@/chat/sandbox/workspace";
 import type { ThreadArtifactsState } from "@/chat/state/artifacts";
 import type { Skill } from "@/chat/skills";
 import type { LoadSkillMetadata } from "@/chat/tools/skill/load-skill";
-import type { ChannelCapabilities } from "@/chat/tools/channel-capabilities";
 import type { AdvisorToolRuntimeContext } from "@/chat/tools/advisor/tool";
 export interface ImageGenerateToolDeps {
     fetch?: typeof fetch;
@@ -35,8 +35,27 @@ export interface ToolHooks {
 }
 export interface ToolRuntimeContext {
     advisor?: AdvisorToolRuntimeContext;
+    /**
+     * Raw Slack channel/conversation container for this turn: `C...`, `D...`,
+     * or `G...`. Never overridden by assistant context. Stable binding key for
+     * state scoped to a Slack conversation. Passed to plugin hooks as-is via
+     * `ToolRegistrationHookContext.channelId`.
+     */
     channelId?: string;
-    channelCapabilities: ChannelCapabilities;
+    /**
+     * Slack channel used by first-class delivery tools when assistant context
+     * points at a source channel different from the raw conversation channel.
+     */
+    deliveryChannelId?: string;
+    /**
+     * Opaque Junior conversation/session identity for this turn.
+     * Interactive Slack turns use `slack:{channelId}:{threadTs}`.
+     * Scheduled/API turns use an internal id such as `agent-dispatch:{id}`.
+     * Do not parse as Slack unless the value starts with `slack:`.
+     */
+    conversationId?: string;
+    /** Runtime-owned destination for provider-neutral side effects. */
+    destination?: Destination;
     requester?: {
         userId?: string;
         userName?: string;