@sentry/junior 0.74.1 → 0.76.0

package/dist/{chunk-6UP2Z2RZ.js → chunk-JBASI5VV.js}

@@ -1,19 +1,19 @@
 import {
   SANDBOX_WORKSPACE_ROOT
 } from "./chunk-G3E7SCME.js";
-import {
-  getPluginRuntimeDependencies,
-  getPluginRuntimePostinstall
-} from "./chunk-7Q5YOUUT.js";
 import {
   getStateAdapter
-} from "./chunk-F6HWCPOC.js";
+} from "./chunk-Y5OFBCBZ.js";
 import {
   toOptionalTrimmed
-} from "./chunk-GM7HTXYC.js";
+} from "./chunk-T77LUIX3.js";
+import {
+  getPluginRuntimeDependencies,
+  getPluginRuntimePostinstall
+} from "./chunk-ZLMBNBUG.js";
 import {
   withSpan
-} from "./chunk-3BYAPS6B.js";
+} from "./chunk-EJN6G5A2.js";
 
 // src/chat/sandbox/runtime-dependency-snapshots.ts
 import { createHash } from "crypto";

package/dist/chunk-KNFROR7R.js

@@ -0,0 +1,127 @@
+// src/chat/vercel-queue-client.ts
+import { QueueClient } from "@vercel/queue";
+function defaultQueueClientOptions() {
+  if (process.env.VERCEL_DEPLOYMENT_ID?.trim()) {
+    return {};
+  }
+  return { deploymentId: null };
+}
+function createVercelQueueClient() {
+  return new QueueClient(defaultQueueClientOptions());
+}
+
+// src/chat/plugins/task-message.ts
+import { createHash } from "crypto";
+import { z } from "zod";
+var pluginTaskParamsSchema = z.object({
+  conversationId: z.string().min(1),
+  sessionId: z.string().min(1)
+}).strict();
+var pluginTaskQueueMessageSchema = z.object({
+  name: z.string().min(1),
+  params: pluginTaskParamsSchema,
+  plugin: z.string().min(1)
+}).strict();
+function pluginTaskId(args) {
+  const digest = createHash("sha256").update(args.plugin).update("\0").update(args.name).update("\0").update(args.params.conversationId).update("\0").update(args.params.sessionId).digest("hex").slice(0, 32);
+  return `plugin-task_${digest}`;
+}
+
+// src/chat/plugins/task-signing.ts
+import { createHmac, timingSafeEqual } from "crypto";
+import { z as z2 } from "zod";
+var SIGNATURE_CONTEXT = "junior.plugin_task_queue.v1";
+var SIGNATURE_VERSION = "v1";
+var PLUGIN_TASK_QUEUE_SIGNATURE_MAX_SKEW_MS = 60 * 60 * 1e3;
+var signedPluginTaskQueueMessageSchema = pluginTaskQueueMessageSchema.extend({
+  signature: z2.string().min(1).refine((value) => value.trim().length > 0),
+  signatureVersion: z2.literal(SIGNATURE_VERSION),
+  signedAtMs: z2.number().finite()
+}).strict();
+function queueSecret() {
+  return process.env.JUNIOR_SECRET?.trim() || void 0;
+}
+function signingPayload(message, signedAtMs) {
+  return [
+    SIGNATURE_CONTEXT,
+    signedAtMs,
+    message.plugin,
+    message.name,
+    message.params.conversationId,
+    message.params.sessionId
+  ].join("\0");
+}
+function hmac(message, signedAtMs, secret) {
+  return createHmac("sha256", secret).update(signingPayload(message, signedAtMs)).digest("hex");
+}
+function parseSignedMessage(value) {
+  const parsed = signedPluginTaskQueueMessageSchema.safeParse(value);
+  return parsed.success ? parsed.data : void 0;
+}
+function signPluginTaskQueueMessage(message, nowMs = Date.now()) {
+  const secret = queueSecret();
+  if (!secret) {
+    throw new Error(
+      "Cannot sign plugin task queue message without JUNIOR_SECRET"
+    );
+  }
+  return {
+    ...message,
+    signedAtMs: nowMs,
+    signatureVersion: SIGNATURE_VERSION,
+    signature: hmac(message, nowMs, secret)
+  };
+}
+function verifyPluginTaskQueueMessage(value, nowMs = Date.now()) {
+  const message = parseSignedMessage(value);
+  if (!message) {
+    return { status: "rejected", reason: "malformed" };
+  }
+  const secret = queueSecret();
+  if (!secret) {
+    return { status: "unavailable", reason: "missing_secret" };
+  }
+  if (!Number.isFinite(nowMs)) {
+    return { status: "unavailable", reason: "invalid_clock" };
+  }
+  if (Math.abs(nowMs - message.signedAtMs) > PLUGIN_TASK_QUEUE_SIGNATURE_MAX_SKEW_MS) {
+    return { status: "rejected", reason: "expired" };
+  }
+  const expected = Buffer.from(hmac(message, message.signedAtMs, secret));
+  const actual = Buffer.from(message.signature);
+  if (expected.length !== actual.length || !timingSafeEqual(expected, actual)) {
+    return { status: "rejected", reason: "signature_mismatch" };
+  }
+  return {
+    status: "verified",
+    message: {
+      name: message.name,
+      params: message.params,
+      plugin: message.plugin
+    }
+  };
+}
+
+// src/chat/plugins/task-queue.ts
+var PLUGIN_TASK_QUEUE_TOPIC = "junior_plugin_tasks";
+var PLUGIN_TASK_QUEUE_RETENTION_SECONDS = PLUGIN_TASK_QUEUE_SIGNATURE_MAX_SKEW_MS / 1e3;
+async function sendVercelPluginTask(message) {
+  const client = createVercelQueueClient();
+  await client.send(
+    PLUGIN_TASK_QUEUE_TOPIC,
+    signPluginTaskQueueMessage(message),
+    {
+      idempotencyKey: pluginTaskId(message),
+      retentionSeconds: PLUGIN_TASK_QUEUE_RETENTION_SECONDS
+    }
+  );
+}
+
+export {
+  pluginTaskParamsSchema,
+  pluginTaskId,
+  createVercelQueueClient,
+  verifyPluginTaskQueueMessage,
+  PLUGIN_TASK_QUEUE_TOPIC,
+  sendVercelPluginTask
+};