@sentry/junior 0.74.0 → 0.75.0

package/dist/{chunk-3BYAPS6B.js → chunk-OK4KKR7B.js}

@@ -1340,14 +1340,6 @@ function extractGenAiUsageAttributes(...sources) {
   };
 }
 
-// src/chat/slack/ids.ts
-function isSlackTeamId(value) {
-  return /^T[A-Z0-9]+$/.test(value);
-}
-function isSlackConversationId(value) {
-  return /^(C|G|D)[A-Z0-9]+$/.test(value);
-}
-
 export {
   toOptionalString,
   toOptionalNumber,
@@ -1371,7 +1363,5 @@ export {
   buildTurnFailureResponse,
   serializeGenAiAttribute,
   extractGenAiUsageSummary,
-  extractGenAiUsageAttributes,
-  isSlackTeamId,
-  isSlackConversationId
+  extractGenAiUsageAttributes
 };

package/dist/chunk-OZSPLAQ4.js

@@ -0,0 +1,71 @@
+import {
+  getPluginProviders
+} from "./chunk-2RWFUS5F.js";
+
+// src/chat/plugins/validation.ts
+function validatePluginRegistrations(registrations) {
+  const loadedPlugins = getPluginProviders();
+  const loadedNames = new Set(
+    loadedPlugins.map((plugin) => plugin.manifest.name)
+  );
+  for (const registration of registrations) {
+    if (!loadedNames.has(registration.manifest.name)) {
+      throw new Error(
+        `Plugin registration "${registration.manifest.name}" does not have a matching plugin manifest. Add an inline manifest, packageName, or app-local plugin.yaml with the same name.`
+      );
+    }
+  }
+}
+function validatePluginEgressCredentialHooks(registrations) {
+  const plugins = new Map(
+    registrations.map((registration) => [
+      registration.manifest.name,
+      registration
+    ])
+  );
+  for (const provider of getPluginProviders()) {
+    const hooks = plugins.get(provider.manifest.name)?.hooks;
+    const hasGrantHook = Boolean(hooks?.grantForEgress);
+    const hasIssueHook = Boolean(hooks?.issueCredential);
+    const hasGenericCredentials = Boolean(
+      provider.manifest.credentials || provider.manifest.apiHeaders
+    );
+    const hasDomains = Boolean(provider.manifest.domains?.length);
+    const hasHookManagedOAuth = Boolean(
+      provider.manifest.oauth && !provider.manifest.credentials
+    );
+    if (!hasGrantHook && !hasIssueHook) {
+      if (hasDomains && !hasGenericCredentials) {
+        throw new Error(
+          `Plugin "${provider.manifest.name}" manifest.domains requires egress credential hooks when no generic credentials or apiHeaders are configured.`
+        );
+      }
+      if (hasHookManagedOAuth) {
+        throw new Error(
+          `Plugin "${provider.manifest.name}" manifest.oauth without oauth-bearer credentials requires egress credential hooks.`
+        );
+      }
+      continue;
+    }
+    if (!hasGrantHook || !hasIssueHook) {
+      throw new Error(
+        `Plugin "${provider.manifest.name}" egress credential hooks must include both grantForEgress and issueCredential.`
+      );
+    }
+    if (hasGenericCredentials) {
+      throw new Error(
+        `Plugin "${provider.manifest.name}" egress credential hooks must use manifest.domains instead of generic credentials or apiHeaders.`
+      );
+    }
+    if (!hasDomains) {
+      throw new Error(
+        `Plugin "${provider.manifest.name}" egress credential hooks require manifest.domains to list sandbox egress hosts.`
+      );
+    }
+  }
+}
+
+export {
+  validatePluginRegistrations,
+  validatePluginEgressCredentialHooks
+};

package/dist/{chunk-KVZL5NZS.js → chunk-Q3XNY442.js}

@@ -217,6 +217,9 @@ function listReferenceFiles() {
   }
 }
 
+// src/chat/plugins/package-discovery.ts
+import path3 from "path";
+
 // src/package-resolution.ts
 import { statSync as statSync2 } from "fs";
 import { createRequire } from "module";
@@ -354,7 +357,6 @@ function resolvePackageDir(cwd, packageName) {
 }
 
 // src/chat/plugins/package-discovery.ts
-import path3 from "path";
 function normalizeForGlob(targetPath) {
   return targetPath.split(path3.sep).join("/");
 }
@@ -410,13 +412,15 @@ function resolvePackageDirFromName(cwd, packageName, candidateNodeModulesDirs) {
 }
 function readPluginPackageFlags(dir) {
   const hasRootPluginManifest = isFile(path3.join(dir, "plugin.yaml"));
+  const hasMigrationsDir = isDirectory(path3.join(dir, "migrations"));
   const hasPluginsDir = isDirectory(path3.join(dir, "plugins"));
   const hasSkillsDir = isDirectory(path3.join(dir, "skills"));
-  if (!hasRootPluginManifest && !hasPluginsDir && !hasSkillsDir) {
+  if (!hasRootPluginManifest && !hasMigrationsDir && !hasPluginsDir && !hasSkillsDir) {
     return null;
   }
   return {
     hasRootPluginManifest,
+    hasMigrationsDir,
     hasPluginsDir,
     hasSkillsDir
   };
@@ -441,14 +445,14 @@ function discoverDeclaredPackages(packageNames, candidateNodeModulesDirs, cwd) {
     const pluginFlags = readPluginPackageFlags(resolved.dir);
     if (!pluginFlags) {
       throw new Error(
-        `Plugin package "${packageName}" was configured but does not contain plugin content; expected plugin.yaml, plugins/, or skills/ in ${resolved.dir}`
+        `Plugin package "${packageName}" was configured but does not contain plugin content; expected plugin.yaml, migrations/, plugins/, or skills/ in ${resolved.dir}`
       );
     }
     seenPackageDirs.add(resolved.dir);
     discovered.push({
-      name: packageName,
       dir: resolved.dir,
       nodeModulesDir: resolved.nodeModulesDir,
+      packageName,
       ...pluginFlags
     });
   }
@@ -469,7 +473,7 @@ function discoverInstalledPluginPackageContent(cwd = process.cwd(), options) {
   for (const pkg of discoveredPackages) {
     const tracingBasePath = pkg.nodeModulesDir ? pathForTracingInclude(
       resolvedCwd,
-      path3.join(pkg.nodeModulesDir, ...pkg.name.split("/"))
+      path3.join(pkg.nodeModulesDir, ...pkg.packageName.split("/"))
     ) : pathForTracingInclude(resolvedCwd, pkg.dir);
     if (pkg.hasRootPluginManifest) {
       manifestRoots.push(pkg.dir);
@@ -477,6 +481,11 @@ function discoverInstalledPluginPackageContent(cwd = process.cwd(), options) {
         tracingIncludes.push(`${tracingBasePath}/plugin.yaml`);
       }
     }
+    if (pkg.hasMigrationsDir) {
+      if (tracingBasePath) {
+        tracingIncludes.push(`${tracingBasePath}/migrations/**/*`);
+      }
+    }
     if (pkg.hasPluginsDir) {
       manifestRoots.push(path3.join(pkg.dir, "plugins"));
       if (tracingBasePath) {
@@ -492,12 +501,13 @@ function discoverInstalledPluginPackageContent(cwd = process.cwd(), options) {
   }
   return {
     packageNames: uniqueStringsInOrder(
-      discoveredPackages.map((pkg) => pkg.name)
+      discoveredPackages.map((pkg) => pkg.packageName)
     ),
     packages: discoveredPackages.map((pkg) => ({
       dir: pkg.dir,
+      hasMigrationsDir: pkg.hasMigrationsDir,
       hasSkillsDir: pkg.hasSkillsDir,
-      name: pkg.name
+      packageName: pkg.packageName
     })),
     manifestRoots: uniqueStringsInOrder(manifestRoots),
     skillRoots: uniqueStringsInOrder(skillRoots2),

package/dist/{chunk-SQGMG7OD.js → chunk-TQ74BATR.js}

@@ -3,29 +3,34 @@ import {
   abandonAgentTurnSessionRecord,
   buildSystemPrompt,
   buildTurnContextPrompt,
-  createAgentPluginHookRunner,
   escapeXml,
-  getAgentPluginTools,
   getAgentTurnSessionRecord,
-  getSlackToolContext,
   loadConnectedMcpProviders,
   recordAuthorizationRequested,
   recordMcpProviderConnected,
-  resolveChannelCapabilities,
   upsertAgentTurnSessionRecord
-} from "./chunk-HYHKTFG2.js";
+} from "./chunk-VNTLUFTY.js";
+import {
+  createPluginHookRunner,
+  getPluginTools,
+  getSlackToolContext,
+  resolveChannelCapabilities
+} from "./chunk-NPVUAXUE.js";
 import {
   discoverSkills,
   findSkillByName,
   loadSkillsByName,
   parseSkillInvocation
-} from "./chunk-OR6NQJ5E.js";
+} from "./chunk-OJODNL2P.js";
 import {
   buildConversationStatePatch
-} from "./chunk-M4FLLXXD.js";
+} from "./chunk-74HO27II.js";
 import {
   JUNIOR_THREAD_STATE_TTL_MS
-} from "./chunk-JL2SLRAT.js";
+} from "./chunk-UJ7OTHPO.js";
+import {
+  parseDestination
+} from "./chunk-WBZ4M5N5.js";
 import {
   SlackActionError,
   downloadPrivateSlackFile,
@@ -34,9 +39,8 @@ import {
   isConversationScopedChannel,
   isDmChannel,
   normalizeSlackConversationId,
-  parseDestination,
   withSlackRetries
-} from "./chunk-YRDS7VKO.js";
+} from "./chunk-62FUNJYS.js";
 import {
   buildNonInteractiveShellScript,
   createSandboxInstance,
@@ -45,7 +49,7 @@ import {
   isSnapshotMissingError,
   resolveRuntimeDependencySnapshot,
   runNonInteractiveCommand
-} from "./chunk-6UP2Z2RZ.js";
+} from "./chunk-XJHDZUGD.js";
 import {
   SANDBOX_DATA_ROOT,
   SANDBOX_SKILLS_ROOT,
@@ -53,26 +57,9 @@ import {
   sandboxSkillDir,
   sandboxSkillFile
 } from "./chunk-G3E7SCME.js";
-import {
-  createPluginBroker,
-  credentialContextSchema,
-  getPluginCapabilityProviders,
-  getPluginCatalogSignature,
-  getPluginDefinition,
-  getPluginDisplayName,
-  getPluginMcpProviders,
-  getPluginOAuthConfig,
-  getPluginProviders,
-  isPluginConfigKey,
-  resolveAuthTokenPlaceholder,
-  resolvePluginCommandEnv
-} from "./chunk-7Q5YOUUT.js";
-import {
-  listReferenceFiles
-} from "./chunk-KVZL5NZS.js";
 import {
   getStateAdapter
-} from "./chunk-F6HWCPOC.js";
+} from "./chunk-ZNNTSPNF.js";
 import {
   GEN_AI_PROVIDER_NAME,
   GEN_AI_SERVER_ADDRESS,
@@ -112,12 +99,29 @@ import {
   toObservablePromptPart,
   trimTrailingAssistantMessages,
   upsertActiveSkill
-} from "./chunk-GM7HTXYC.js";
+} from "./chunk-FCZO7LAR.js";
+import {
+  createPluginBroker,
+  credentialContextSchema,
+  getPluginCapabilityProviders,
+  getPluginCatalogSignature,
+  getPluginDefinition,
+  getPluginDisplayName,
+  getPluginMcpProviders,
+  getPluginOAuthConfig,
+  getPluginProviders,
+  isPluginConfigKey,
+  resolveAuthTokenPlaceholder,
+  resolvePluginCommandEnv
+} from "./chunk-2RWFUS5F.js";
+import {
+  listReferenceFiles
+} from "./chunk-Q3XNY442.js";
 import {
   createRequester,
   parseActorUserId,
   toStoredSlackRequester
-} from "./chunk-CYUI7JU5.js";
+} from "./chunk-EIYL7I4S.js";
 import {
   extractGenAiUsageAttributes,
   extractGenAiUsageSummary,
@@ -136,7 +140,7 @@ import {
   setTags,
   toOptionalString,
   withSpan
-} from "./chunk-3BYAPS6B.js";
+} from "./chunk-OK4KKR7B.js";
 import {
   sentry_exports
 } from "./chunk-SJHUF3DP.js";
@@ -1008,18 +1012,48 @@ ${usage}
     exitCode: 2
   });
 }
+async function handlePluginsCommand(args) {
+  const usage = "jr-rpc plugins list";
+  const subverb = (args[0] ?? "").trim();
+  if (subverb !== "list" || args.length !== 1) {
+    return commandResult({
+      stderr: `Usage:
+${usage}
+`,
+      exitCode: 2
+    });
+  }
+  const plugins = getPluginProviders().map((plugin) => ({
+    name: plugin.manifest.name,
+    displayName: plugin.manifest.displayName,
+    description: plugin.manifest.description,
+    capabilities: [...plugin.manifest.capabilities],
+    configKeys: [...plugin.manifest.configKeys]
+  })).sort((left, right) => left.name.localeCompare(right.name));
+  return commandResult({
+    stdout: {
+      ok: true,
+      plugins
+    },
+    exitCode: 0
+  });
+}
 function createJrRpcCommand(deps) {
   return defineCommand("jr-rpc", async (args) => {
     const usage = [
       "jr-rpc config get <key>",
       "jr-rpc config set <key> <value> [--json]",
       "jr-rpc config unset <key>",
-      "jr-rpc config list [--prefix <value>]"
+      "jr-rpc config list [--prefix <value>]",
+      "jr-rpc plugins list"
     ].join("\n");
     const verb = (args[0] ?? "").trim();
     if (verb === "config") {
       return handleConfigCommand(args.slice(1), deps);
     }
+    if (verb === "plugins") {
+      return handlePluginsCommand(args.slice(1));
+    }
     return commandResult({
       stderr: `Unsupported jr-rpc command. Use:
 ${usage}
@@ -6685,6 +6719,7 @@ function createTools(availableSkills, hooks = {}, context) {
     tools.slackListUpdateItem = createSlackListUpdateItemTool(state);
     const outputChannelId = slackContext.destinationChannelId;
     const outputCapabilities = outputChannelId ? resolveChannelCapabilities(outputChannelId) : void 0;
+    const canPostStandaloneSlackMessage = context.surface === void 0 || context.surface === "slack";
     const rawChannelCapabilities = resolveChannelCapabilities(
       slackContext.sourceChannelId
     );
@@ -6694,11 +6729,13 @@ function createTools(availableSkills, hooks = {}, context) {
         state
       );
     }
-    if (outputCapabilities?.canPostToChannel) {
+    if (outputCapabilities?.canPostToChannel && canPostStandaloneSlackMessage) {
       tools.slackChannelPostMessage = createSlackChannelPostMessageTool(
         slackContext,
         state
       );
+    }
+    if (outputCapabilities?.canPostToChannel) {
       tools.slackChannelListMessages = createSlackChannelListMessagesTool(slackContext);
     }
     if (rawChannelCapabilities.canAddReactions) {
@@ -6708,9 +6745,7 @@ function createTools(availableSkills, hooks = {}, context) {
       );
     }
   }
-  for (const [name, pluginTool] of Object.entries(
-    getAgentPluginTools(context)
-  )) {
+  for (const [name, pluginTool] of Object.entries(getPluginTools(context))) {
     if (tools[name]) {
       throw new Error(`Plugin tool "${name}" conflicts with a core tool`);
     }
@@ -7021,16 +7056,16 @@ import { createHmac, randomUUID, timingSafeEqual } from "crypto";
 // src/chat/sandbox/egress-schemas.ts
 import { z } from "zod";
 import {
-  agentPluginAuthorizationSchema,
-  agentPluginCredentialHeaderTransformSchema,
-  agentPluginGrantSchema,
-  agentPluginProviderAccountSchema
+  pluginAuthorizationSchema,
+  pluginCredentialHeaderTransformSchema,
+  pluginGrantSchema,
+  pluginProviderAccountSchema
 } from "@sentry/junior-plugin-api";
 var finiteNumberSchema = z.number().refine(Number.isFinite);
 var httpStatusSchema = z.number().int().min(100).max(599);
 var providerNameSchema = z.string().regex(/^[a-z][a-z0-9-]*$/);
 var credentialSignalKindSchema = z.enum(["auth_required", "unavailable"]);
-var sandboxEgressGrantSchema = agentPluginGrantSchema;
+var sandboxEgressGrantSchema = pluginGrantSchema;
 var sandboxEgressCredentialContextSchema = z.object({
   credentials: credentialContextSchema,
   egressId: z.string().min(1),
@@ -7038,15 +7073,15 @@ var sandboxEgressCredentialContextSchema = z.object({
   contextId: z.string().min(1)
 }).strict();
 var sandboxEgressCredentialLeaseSchema = z.object({
-  account: agentPluginProviderAccountSchema.optional(),
-  authorization: agentPluginAuthorizationSchema.optional(),
+  account: pluginProviderAccountSchema.optional(),
+  authorization: pluginAuthorizationSchema.optional(),
   grant: sandboxEgressGrantSchema,
   provider: providerNameSchema,
   expiresAt: z.string().min(1),
-  headerTransforms: z.array(agentPluginCredentialHeaderTransformSchema).min(1)
+  headerTransforms: z.array(pluginCredentialHeaderTransformSchema).min(1)
 }).strict();
 var sandboxEgressAuthRequiredSignalSchema = z.object({
-  authorization: agentPluginAuthorizationSchema.optional(),
+  authorization: pluginAuthorizationSchema.optional(),
   grant: sandboxEgressGrantSchema,
   kind: credentialSignalKindSchema.default("auth_required"),
   provider: providerNameSchema,
@@ -7062,7 +7097,7 @@ var sandboxEgressAuthRequiredSignalSchema = z.object({
   }
 });
 var sandboxEgressPermissionDeniedSignalSchema = z.object({
-  account: agentPluginProviderAccountSchema.optional(),
+  account: pluginProviderAccountSchema.optional(),
   acceptedPermissions: z.string().optional(),
   grant: sandboxEgressGrantSchema,
   message: z.string().min(1),
@@ -9100,7 +9135,7 @@ function normalizeToolResult(result, isSandboxResult) {
 }
 
 // src/chat/tools/execution/tool-error-handler.ts
-import { AgentPluginToolInputError } from "@sentry/junior-plugin-api";
+import { PluginToolInputError } from "@sentry/junior-plugin-api";
 
 // src/chat/services/plugin-auth-orchestration.ts
 import { THREAD_STATE_TTL_MS } from "chat";
@@ -9580,7 +9615,7 @@ function createPluginAuthOrchestration(input) {
 
 // src/chat/tools/execution/tool-error-handler.ts
 function isPluginToolInputError(error) {
-  return error instanceof AgentPluginToolInputError || error instanceof Error && error.name === "AgentPluginToolInputError";
+  return error instanceof PluginToolInputError || error instanceof Error && error.name === "PluginToolInputError";
 }
 function getToolErrorType(error) {
   if (error instanceof McpToolError) return "tool_error";
@@ -9731,7 +9766,9 @@ function createAgentTools(tools, sandbox, spanContext, onStatus, sandboxExecutor
             });
             const normalized = normalizeToolResult(result, isSandbox);
             if (isSandbox && pluginAuthOrchestration) {
-              await pluginAuthOrchestration.maybeHandleAuthSignal(normalized.details);
+              await pluginAuthOrchestration.maybeHandleAuthSignal(
+                normalized.details
+              );
             }
             const resultAttributeValue = normalized.details && typeof normalized.details === "object" && "rawResult" in normalized.details && normalized.details.rawResult !== void 0 ? normalized.details.rawResult : normalized.details;
             const toolResultAttribute = serializeToolPayload(resultAttributeValue);
@@ -11119,6 +11156,9 @@ function actorRequesterFromContext(context) {
   });
 }
 function toolInvocationSource(context) {
+  if (context.source) {
+    return context.source;
+  }
   if (context.destination.platform !== "slack") {
     return context.destination;
   }
@@ -11148,10 +11188,6 @@ function surfaceFromContext(context) {
   if (context.slackConversation || (conversationId ? parseSlackThreadId(conversationId) : void 0)) {
     return "slack";
   }
-  const actor = context.credentialContext?.actor;
-  if (actor?.type === "system" && actor.id === "scheduler") {
-    return "scheduler";
-  }
   if (conversationId) {
     return "api";
   }
@@ -11404,7 +11440,7 @@ async function generateAssistantReply(messageText, context) {
     };
     const authRequesterId = context.credentialContext?.actor.type === "user" ? context.credentialContext.actor.userId : void 0;
     const userTokenStore = createUserTokenStore();
-    const agentPluginHooks = createAgentPluginHookRunner({
+    const pluginHooks = createPluginHookRunner({
       requester: actorRequester
     });
     sandboxExecutor = createSandboxExecutor({
@@ -11413,7 +11449,7 @@ async function generateAssistantReply(messageText, context) {
       traceContext: spanContext,
       tracePropagation: context.sandbox?.tracePropagation,
       credentialEgress: context.credentialContext,
-      agentHooks: agentPluginHooks,
+      agentHooks: pluginHooks,
       onSandboxAcquired: async (sandbox2) => {
         lastKnownSandboxId = sandbox2.sandboxId;
         lastKnownSandboxDependencyProfileHash = sandbox2.sandboxDependencyProfileHash;
@@ -11615,6 +11651,7 @@ async function generateAssistantReply(messageText, context) {
       configuration: configurationValues,
       mcpToolManager: turnMcpToolManager,
       sandbox,
+      surface,
       advisor: {
         config: botConfig.advisor,
         conversationId: sessionConversationId,
@@ -11733,6 +11770,11 @@ async function generateAssistantReply(messageText, context) {
         conversationId: spanContext.conversationId,
         slackConversation: context.slackConversation
       },
+      dispatch: context.dispatch ? {
+        ...context.dispatch,
+        destination: context.destination,
+        source: toolSource
+      } : void 0,
       invocation: skillInvocation,
       requester: actorRequester,
       artifactState: context.artifactState,
@@ -11780,7 +11822,7 @@ async function generateAssistantReply(messageText, context) {
       sandboxExecutor,
       pluginAuth,
       onToolCall,
-      agentPluginHooks,
+      pluginHooks,
       conversationPrivacy
     );
     advisorTools = createAgentTools(
@@ -11791,7 +11833,7 @@ async function generateAssistantReply(messageText, context) {
       sandboxExecutor,
       pluginAuth,
       onToolCall,
-      agentPluginHooks,
+      pluginHooks,
       conversationPrivacy
     );
     let hasEmittedText = false;