@sentry/junior 0.85.0 → 0.87.0

package/dist/{chunk-C2PSUWK3.js → chunk-GGD6WK6V.js}

@@ -1,6 +1,6 @@
 import {
   getSlackBotToken
-} from "./chunk-BU2AWPEN.js";
+} from "./chunk-ZU2ALUVQ.js";
 import {
   isSlackConversationId,
   isSlackTeamId,
@@ -11,7 +11,21 @@ import {
 } from "./chunk-KF7522P3.js";
 
 // src/chat/slack/client.ts
+import { AsyncLocalStorage as AsyncLocalStorage2 } from "async_hooks";
 import { WebClient } from "@slack/web-api";
+
+// src/chat/slack/workspace-context.ts
+import { AsyncLocalStorage } from "async_hooks";
+var workspaceTeamIdStorage = new AsyncLocalStorage();
+function runWithWorkspaceTeamId(teamId, fn) {
+  if (!teamId) return fn();
+  return workspaceTeamIdStorage.run(teamId, fn);
+}
+function getWorkspaceTeamId() {
+  return workspaceTeamIdStorage.getStore();
+}
+
+// src/chat/slack/client.ts
 var SlackActionError = class extends Error {
   code;
   apiError;
@@ -98,7 +112,39 @@ function parseSlackCanvasDetail(detail) {
   }
   return parsed;
 }
-var client = null;
+var installationTokenStorage = new AsyncLocalStorage2();
+var clientsByToken = /* @__PURE__ */ new Map();
+function runWithSlackInstallationToken(token, fn) {
+  const trimmed = token.trim();
+  if (!trimmed) {
+    throw new SlackActionError(
+      "Slack installation token binding requires a non-empty token",
+      "missing_token"
+    );
+  }
+  return installationTokenStorage.run({ token: trimmed }, fn);
+}
+function resolveSlackToken() {
+  const ambientToken = installationTokenStorage.getStore()?.token;
+  if (ambientToken) {
+    return ambientToken;
+  }
+  const envToken = getSlackBotToken();
+  if (envToken) {
+    return envToken;
+  }
+  const teamId = getWorkspaceTeamId();
+  if (teamId) {
+    throw new SlackActionError(
+      `Slack call is scoped to workspace ${teamId} but no installation token is bound and no default bot token is configured`,
+      "missing_token"
+    );
+  }
+  throw new SlackActionError(
+    "SLACK_BOT_TOKEN (or SLACK_BOT_USER_TOKEN) is required for Slack Web API actions in this service",
+    "missing_token"
+  );
+}
 function normalizeSlackConversationId(channelId) {
   if (!channelId) return void 0;
   const trimmed = channelId.trim();
@@ -110,16 +156,16 @@ function normalizeSlackConversationId(channelId) {
   return parts[1]?.trim() || void 0;
 }
 function getClient() {
-  if (client) return client;
-  const token = getSlackBotToken();
-  if (!token) {
-    throw new SlackActionError(
-      "SLACK_BOT_TOKEN (or SLACK_BOT_USER_TOKEN) is required for Slack canvas/list actions in this service",
-      "missing_token"
-    );
+  const token = resolveSlackToken();
+  let cached = clientsByToken.get(token);
+  if (!cached) {
+    cached = new WebClient(token, {
+      retryConfig: { retries: 0 },
+      rejectRateLimitedCalls: true
+    });
+    clientsByToken.set(token, cached);
   }
-  client = new WebClient(token);
-  return client;
+  return cached;
 }
 function mapSlackError(error) {
   if (error instanceof SlackActionError) {
@@ -186,8 +232,54 @@ function mapSlackError(error) {
 function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
+var MAX_RETRY_DELAY_MS = 1e4;
+var MAX_TOTAL_RETRY_DELAY_MS = 2e4;
+var CONNECTION_ERROR_CODES = /* @__PURE__ */ new Set([
+  "ECONNREFUSED",
+  "ECONNRESET",
+  "ENOTFOUND",
+  "EAI_AGAIN"
+]);
+var TIMEOUT_ERROR_CODES = /* @__PURE__ */ new Set([
+  "ETIMEDOUT",
+  "ECONNABORTED",
+  "ESOCKETTIMEDOUT"
+]);
+function findNetworkErrorCode(error, depth = 0) {
+  if (!error || typeof error !== "object" || depth > 4) {
+    return void 0;
+  }
+  const candidate = error;
+  if (typeof candidate.code === "string" && (CONNECTION_ERROR_CODES.has(candidate.code) || TIMEOUT_ERROR_CODES.has(candidate.code))) {
+    return candidate.code;
+  }
+  return findNetworkErrorCode(candidate.original, depth + 1) ?? findNetworkErrorCode(candidate.cause, depth + 1);
+}
+function hasSocketHangUpMessage(error) {
+  return error instanceof Error && error.message.toLowerCase().includes("socket hang up");
+}
+function classifySlackRetry(raw, mapped) {
+  if (mapped.code === "rate_limited") {
+    return "rate_limited";
+  }
+  if (mapped.statusCode !== void 0 && mapped.statusCode >= 500) {
+    return "server_error";
+  }
+  const networkCode = findNetworkErrorCode(raw);
+  if (networkCode && CONNECTION_ERROR_CODES.has(networkCode)) {
+    return "connection";
+  }
+  if (networkCode && TIMEOUT_ERROR_CODES.has(networkCode)) {
+    return "timeout";
+  }
+  if (hasSocketHangUpMessage(raw)) {
+    return "connection";
+  }
+  return "none";
+}
 async function withSlackRetries(task, maxAttempts = 3, context = {}) {
   let attempt = 0;
+  let totalDelayMs = 0;
   const action = context.action ?? "unknown";
   while (attempt < maxAttempts) {
     attempt += 1;
@@ -235,7 +327,9 @@ async function withSlackRetries(task, maxAttempts = 3, context = {}) {
       );
     } catch (error) {
       const mapped = mapSlackError(error);
-      const isRetryable = mapped.code === "rate_limited";
+      const retryClass = classifySlackRetry(error, mapped);
+      const isRetryable = retryClass === "rate_limited" || retryClass === "connection" || retryClass === "server_error" || retryClass === "timeout" && context.idempotent === true;
+      const remainingDelayBudgetMs = MAX_TOTAL_RETRY_DELAY_MS - totalDelayMs;
       const baseLogAttributes = {
         "app.slack.action": action,
         "app.slack.error_code": mapped.code,
@@ -247,7 +341,7 @@ async function withSlackRetries(task, maxAttempts = 3, context = {}) {
         ...mapped.statusCode !== void 0 ? { "http.response.status_code": mapped.statusCode } : {},
         ...context.attributes ?? {}
       };
-      if (!isRetryable || attempt >= maxAttempts) {
+      if (!isRetryable || attempt >= maxAttempts || remainingDelayBudgetMs <= 0) {
         logWarn(
           "slack_action_failed",
           {},
@@ -264,13 +358,20 @@ async function withSlackRetries(task, maxAttempts = 3, context = {}) {
         {},
         {
           ...baseLogAttributes,
-          "app.slack.retry_attempt": attempt
+          "app.slack.retry_attempt": attempt,
+          "app.slack.retry_class": retryClass
         },
         "Retrying Slack action after transient failure"
       );
-      const retryAfterMs = mapped.code === "rate_limited" && mapped.retryAfterSeconds && mapped.retryAfterSeconds > 0 ? mapped.retryAfterSeconds * 1e3 : void 0;
+      const retryAfterMs = retryClass === "rate_limited" && mapped.retryAfterSeconds && mapped.retryAfterSeconds > 0 ? mapped.retryAfterSeconds * 1e3 : void 0;
       const backoffMs = Math.min(2e3, 250 * 2 ** (attempt - 1));
-      await sleep(retryAfterMs ?? backoffMs);
+      const delayMs = Math.min(
+        retryAfterMs ?? backoffMs,
+        MAX_RETRY_DELAY_MS,
+        remainingDelayBudgetMs
+      );
+      totalDelayMs += delayMs;
+      await sleep(delayMs);
     }
   }
   throw new SlackActionError(
@@ -296,27 +397,22 @@ function isConversationChannel(channelId) {
   return normalized.startsWith("C") || normalized.startsWith("G");
 }
 async function getFilePermalink(fileId) {
-  const client2 = getClient();
+  const client = getClient();
   const response = await withSlackRetries(
-    () => client2.files.info({
+    () => client.files.info({
       file: fileId
     }),
     3,
     {
       action: "files.info",
+      idempotent: true,
       spanAttributes: { "app.slack.file_id": fileId }
     }
   );
   return response.file?.permalink;
 }
 async function downloadPrivateSlackFile(url) {
-  const token = getSlackBotToken();
-  if (!token) {
-    throw new SlackActionError(
-      "SLACK_BOT_TOKEN (or SLACK_BOT_USER_TOKEN) is required for Slack file downloads in this service",
-      "missing_token"
-    );
-  }
+  const token = resolveSlackToken();
   return withSpan(
     "GET files.slack.com",
     "http.client",
@@ -389,8 +485,11 @@ function destinationKey(destination) {
 }
 
 export {
+  runWithWorkspaceTeamId,
+  getWorkspaceTeamId,
   SlackActionError,
   getHeaderString,
+  runWithSlackInstallationToken,
   normalizeSlackConversationId,
   withSlackRetries,
   getSlackClient,

package/dist/{chunk-SSUEWAVS.js → chunk-JRXCSSSU.js}

@@ -1,12 +1,12 @@
 import {
   getStateAdapter
-} from "./chunk-RUB77TGS.js";
+} from "./chunk-GB5DFM4D.js";
 import {
   normalizeSlackConversationId
-} from "./chunk-C2PSUWK3.js";
+} from "./chunk-GGD6WK6V.js";
 import {
   parseSlackThreadId
-} from "./chunk-DR75T7J3.js";
+} from "./chunk-L7OHKDOX.js";
 import {
   parseStoredSlackRequester
 } from "./chunk-IXTBFABZ.js";
@@ -114,6 +114,18 @@ function toSlackEventChannelType(channelType) {
   }
   return void 0;
 }
+function conversationVisibilityFromSlackChannelType(channelType) {
+  if (!channelType) return void 0;
+  return channelType === "channel" ? "public" : "private";
+}
+function visibilityFromChannelIdPrefix(channelId) {
+  const normalized = normalizeSlackConversationId(channelId);
+  if (!normalized) return void 0;
+  if (normalized.startsWith("D") || normalized.startsWith("G")) {
+    return "private";
+  }
+  return void 0;
+}
 function resolveSlackChannelTypeFromMessage(message) {
   const raw = message.raw;
   if (!raw || typeof raw !== "object") {
@@ -126,9 +138,11 @@ function resolveSlackConversationContext(input) {
   const type = typeFromSlackChannelType(input.channelType) ?? typeFromChannelId(input.channelId, input.channelName);
   if (!type) return void 0;
   const name = normalizeConversationName(type, input.channelName);
+  const visibility = conversationVisibilityFromSlackChannelType(input.channelType) ?? visibilityFromChannelIdPrefix(input.channelId);
   return {
     type,
-    ...name ? { name } : {}
+    ...name ? { name } : {},
+    ...visibility ? { visibility } : {}
   };
 }
 function resolveSlackConversationContextFromThreadId(input) {
@@ -264,6 +278,7 @@ export {
   GET,
   buildSentryConversationUrl,
   buildSentryTraceUrl,
+  conversationVisibilityFromSlackChannelType,
   resolveSlackChannelTypeFromMessage,
   resolveSlackConversationContext,
   resolveSlackConversationContextFromThreadId,

package/dist/{chunk-DR75T7J3.js → chunk-L7OHKDOX.js}

@@ -52,21 +52,25 @@ function resolveSlackChannelIdFromMessage(message) {
 import { AsyncLocalStorage } from "async_hooks";
 var SAFE_METADATA_KEY_LIMIT = 20;
 var conversationPrivacyStorage = new AsyncLocalStorage();
-function conversationPrivacyFromChannelId(channelId) {
+function privateNarrowingFromChannelId(channelId) {
   const normalized = channelId?.trim();
   if (!normalized) return void 0;
-  return normalized.startsWith("C") ? "public" : "private";
+  return normalized.startsWith("D") || normalized.startsWith("G") ? "private" : void 0;
 }
-function conversationPrivacyFromConversationId(conversationId) {
+function privateNarrowingFromConversationId(conversationId) {
   if (!conversationId?.trim()) return void 0;
   const slackThread = parseSlackThreadId(conversationId);
   if (slackThread) {
-    return conversationPrivacyFromChannelId(slackThread.channelId);
+    return privateNarrowingFromChannelId(slackThread.channelId);
   }
   return "private";
 }
 function resolveConversationPrivacy(input) {
-  return conversationPrivacyFromChannelId(input.channelId) ?? conversationPrivacyFromConversationId(input.conversationId);
+  const narrowed = privateNarrowingFromChannelId(input.channelId) ?? privateNarrowingFromConversationId(input.conversationId);
+  if (narrowed === "private") {
+    return "private";
+  }
+  return input.visibility;
 }
 function canExposeConversationPayload(input) {
   return resolveConversationPrivacy(input) === "public";

package/dist/{chunk-FYPO4K7C.js → chunk-RIB3M6YA.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-G3E7SCME.js";
 import {
   getStateAdapter
-} from "./chunk-RUB77TGS.js";
+} from "./chunk-GB5DFM4D.js";
 import {
   toOptionalTrimmed
-} from "./chunk-BU2AWPEN.js";
+} from "./chunk-ZU2ALUVQ.js";
 import {
   pluginCatalogRuntime
 } from "./chunk-BQ3ITJA6.js";

package/dist/{chunk-BU2AWPEN.js → chunk-ZU2ALUVQ.js}

@@ -1,9 +1,10 @@
 import {
+  getCurrentConversationPrivacy,
   resolveConversationPrivacy,
   toGenAiMessageMetadata,
   toGenAiMessagesTraceAttributes,
   toGenAiTextMetadata
-} from "./chunk-DR75T7J3.js";
+} from "./chunk-L7OHKDOX.js";
 import {
   extractGenAiUsageAttributes,
   logException,
@@ -378,7 +379,7 @@ async function completeText(params) {
   const privacy = resolveConversationPrivacy({
     channelId: typeof params.metadata?.channelId === "string" ? params.metadata.channelId : void 0,
     conversationId: typeof params.metadata?.conversationId === "string" ? params.metadata.conversationId : typeof params.metadata?.threadId === "string" ? params.metadata.threadId : void 0
-  });
+  }) ?? getCurrentConversationPrivacy();
   const effectivePrivacy = privacy ?? "private";
   const messageAttributeMode = params.messageAttributeMode ?? (effectivePrivacy === "public" ? "content" : "metadata");
   const requestMessagesAttribute = serializeGenAiAttribute(

package/dist/cli/chat.js

@@ -130,10 +130,10 @@ async function configureLocalChatPlugins(pluginSet) {
     databaseModule
   ] = await Promise.all([
     import("../plugins-PZMDS7AT.js"),
-    import("../agent-hooks-AV7CHLUO.js"),
+    import("../agent-hooks-NWOUB3UR.js"),
     import("../catalog-runtime-XOD7YPRS.js"),
     import("../validation-MBNJKWPQ.js"),
-    import("../db-S3HYBLUS.js")
+    import("../db-SZVUU7RB.js")
   ]);
   const resolvedPluginSet = pluginSet === void 0 ? await loadLocalPluginSet() : pluginSet ?? void 0;
   const plugins = pluginsModule.pluginRuntimeRegistrationsFromPluginSet(resolvedPluginSet);
@@ -195,7 +195,7 @@ async function runPrompt(options, io, pluginSet) {
   defaultStateAdapterForLocalChat();
   await configureLocalChatPlugins(pluginSet);
   const conversationId = newRunConversationId();
-  const { runLocalAgentTurn } = await import("../runner-IMQH6V2B.js");
+  const { runLocalAgentTurn } = await import("../runner-DMP3IQNM.js");
   const result = await runLocalAgentTurn(
     {
       conversationId,
@@ -219,7 +219,7 @@ async function runInteractive(io, pluginSet) {
   defaultStateAdapterForLocalChat();
   await configureLocalChatPlugins(pluginSet);
   const conversationId = newRunConversationId();
-  const { runLocalAgentTurn } = await import("../runner-IMQH6V2B.js");
+  const { runLocalAgentTurn } = await import("../runner-DMP3IQNM.js");
   const rl = readline.createInterface({
     input: io.input,
     output: io.output,

package/dist/cli/plugins.js

@@ -10,18 +10,18 @@ import {
 import {
   setPlugins,
   validatePlugins
-} from "../chunk-UVNV67EC.js";
+} from "../chunk-2NFV5FMB.js";
 import {
   createPluginLogger
-} from "../chunk-MTE5NRPJ.js";
+} from "../chunk-BRSQQRG6.js";
 import {
   getDb
-} from "../chunk-QTTTRBNB.js";
+} from "../chunk-6I6HBOQM.js";
 import "../chunk-G3E7SCME.js";
-import "../chunk-RUB77TGS.js";
-import "../chunk-C2PSUWK3.js";
-import "../chunk-BU2AWPEN.js";
-import "../chunk-DR75T7J3.js";
+import "../chunk-GB5DFM4D.js";
+import "../chunk-GGD6WK6V.js";
+import "../chunk-ZU2ALUVQ.js";
+import "../chunk-L7OHKDOX.js";
 import {
   loadAppPluginSet
 } from "../chunk-Y2CM7HXH.js";

package/dist/cli/snapshot-warmup.js

@@ -1,12 +1,12 @@
 import {
   resolveRuntimeDependencySnapshot
-} from "../chunk-FYPO4K7C.js";
+} from "../chunk-RIB3M6YA.js";
 import "../chunk-G3E7SCME.js";
 import {
   disconnectStateAdapter
-} from "../chunk-RUB77TGS.js";
-import "../chunk-BU2AWPEN.js";
-import "../chunk-DR75T7J3.js";
+} from "../chunk-GB5DFM4D.js";
+import "../chunk-ZU2ALUVQ.js";
+import "../chunk-L7OHKDOX.js";
 import {
   pluginCatalogRuntime
 } from "../chunk-BQ3ITJA6.js";

package/dist/cli/upgrade.js

@@ -4,7 +4,7 @@ import {
   recordConversationActivity,
   recordConversationExecution,
   requestConversationWork
-} from "../chunk-EENOFKDN.js";
+} from "../chunk-ENPSU7L7.js";
 import {
   JUNIOR_THREAD_STATE_TTL_MS,
   coerceThreadConversationState
@@ -18,24 +18,24 @@ import {
 import {
   createPluginLogger,
   createPluginState
-} from "../chunk-MTE5NRPJ.js";
+} from "../chunk-BRSQQRG6.js";
 import {
   createJuniorSqlExecutor,
   createSqlStore,
   getDb
-} from "../chunk-QTTTRBNB.js";
+} from "../chunk-6I6HBOQM.js";
 import {
   disconnectStateAdapter,
   getConnectedStateContext
-} from "../chunk-RUB77TGS.js";
+} from "../chunk-GB5DFM4D.js";
 import {
   parseDestination,
   sameDestination
-} from "../chunk-C2PSUWK3.js";
+} from "../chunk-GGD6WK6V.js";
 import {
   getChatConfig
-} from "../chunk-BU2AWPEN.js";
-import "../chunk-DR75T7J3.js";
+} from "../chunk-ZU2ALUVQ.js";
+import "../chunk-L7OHKDOX.js";
 import {
   loadAppPluginSet
 } from "../chunk-Y2CM7HXH.js";
@@ -75,6 +75,9 @@ async function backfillToSql(args) {
 function createStateConversationStore(state) {
   return {
     get: (args) => getConversation({ ...args, state }),
+    // Task-execution state has no destination records, so visibility is never
+    // source-confirmed here and cross-context reads fail closed to private.
+    getDestinationVisibility: async () => void 0,
     recordActivity: (args) => recordConversationActivity({ ...args, state }),
     recordExecution: (args) => recordConversationExecution({ ...args, state }),
     listByActivity: (args) => listConversationsByActivity({ ...args, state })

package/dist/{db-S3HYBLUS.js → db-SZVUU7RB.js}

@@ -2,10 +2,10 @@ import {
   closeDb,
   getConversationStore,
   getDb
-} from "./chunk-QTTTRBNB.js";
-import "./chunk-C2PSUWK3.js";
-import "./chunk-BU2AWPEN.js";
-import "./chunk-DR75T7J3.js";
+} from "./chunk-6I6HBOQM.js";
+import "./chunk-GGD6WK6V.js";
+import "./chunk-ZU2ALUVQ.js";
+import "./chunk-L7OHKDOX.js";
 import "./chunk-IXTBFABZ.js";
 import "./chunk-KF7522P3.js";
 import "./chunk-FTMXFBDC.js";

package/dist/instrumentation.js

@@ -1,6 +1,6 @@
 import {
   getCurrentConversationPrivacy
-} from "./chunk-DR75T7J3.js";
+} from "./chunk-L7OHKDOX.js";
 import {
   getDeploymentServiceVersion,
   getDeploymentTelemetryAttributes

package/dist/nitro.js

@@ -1,6 +1,6 @@
 import {
   resolveConversationWorkQueueTopic
-} from "./chunk-ENEWQMRJ.js";
+} from "./chunk-6O5UI3RG.js";
 import {
   PLUGIN_TASK_QUEUE_TOPIC
 } from "./chunk-KNFROR7R.js";
@@ -8,9 +8,9 @@ import {
   pluginCatalogConfigFromPluginSet,
   pluginRuntimeRegistrationsFromPluginSet
 } from "./chunk-SG5WAA7H.js";
-import "./chunk-C2PSUWK3.js";
-import "./chunk-BU2AWPEN.js";
-import "./chunk-DR75T7J3.js";
+import "./chunk-GGD6WK6V.js";
+import "./chunk-ZU2ALUVQ.js";
+import "./chunk-L7OHKDOX.js";
 import {
   loadPluginSetFromModule,
   resolvePluginModule

package/dist/reporting/conversations.d.ts

@@ -35,6 +35,7 @@ export interface ConversationSummaryReport {
     requesterIdentity?: RequesterIdentity;
     channel?: string;
     channelName?: string;
+    channelNameRedacted?: boolean;
     sentryTraceUrl?: string;
     traceId?: string;
 }
@@ -230,4 +231,4 @@ export declare function listRecentConversationSummaries(options?: {
 /** Read one conversation transcript for reporting consumers. */
 export declare function readConversationReport(conversationId: string, options?: ConversationReaderOptions): Promise<ConversationReport>;
 /** Read one child-agent transcript through its parent conversation run. */
-export declare function readConversationSubagentTranscriptReport(conversationId: string, runId: string, subagentId: string): Promise<ConversationSubagentTranscriptReport>;
+export declare function readConversationSubagentTranscriptReport(conversationId: string, runId: string, subagentId: string, options?: ConversationReaderOptions): Promise<ConversationSubagentTranscriptReport>;