@shipfox/api-integration-sentry 10.2.0 → 12.0.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@shipfox/api-integration-sentry",
   "license": "MIT",
-  "version": "10.2.0",
+  "version": "12.0.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/ShipfoxHQ/shipfox.git",
@@ -22,15 +22,15 @@
     "drizzle-orm": "^0.45.2",
     "ky": "^2.0.0",
     "zod": "^4.4.3",
-    "@shipfox/api-auth-context": "10.2.0",
-    "@shipfox/api-integration-spi": "0.2.2",
-    "@shipfox/api-integration-sentry-dto": "9.0.2",
+    "@shipfox/api-auth-context": "12.0.0",
+    "@shipfox/api-integration-spi": "1.0.0",
+    "@shipfox/api-integration-sentry-dto": "12.0.0",
     "@shipfox/config": "1.2.4",
-    "@shipfox/node-drizzle": "0.3.4",
-    "@shipfox/node-fastify": "0.4.0",
-    "@shipfox/node-module": "1.0.4",
+    "@shipfox/node-drizzle": "0.3.5",
+    "@shipfox/node-fastify": "0.4.1",
+    "@shipfox/node-module": "1.0.5",
     "@shipfox/node-opentelemetry": "0.6.3",
-    "@shipfox/node-postgres": "0.4.4"
+    "@shipfox/node-postgres": "0.5.0"
   },
   "imports": {
     "#*": "./dist/*"

package/src/api/client.ts

@@ -103,7 +103,7 @@ export function createSentryApiClient(): SentryApiClient {
 
 // The typed error deliberately drops Sentry's status and body so no token, code,
 // or client secret can leak to the client or the logged error chain. That also
-// strips the one detail a self-hoster needs to fix a misconfigured Sentry app —
+// strips the one detail a self-hoster needs to fix a misconfigured Sentry app.
 // e.g. a 403 on `get-installation` means the app is missing "Organization: Read"
 // (see README "Required permissions"). So we log the upstream status
 // here, the only place it survives, keyed by the operation that failed.

package/src/core/errors.ts

@@ -41,7 +41,7 @@ export class SentryVerificationInProgressError extends Error {
 /**
  * Base for issue deliveries we received and authenticated but deliberately do
  * not publish. The webhook layer records them for dedup and acknowledges with a
- * 204 rather than treating them as failures — a sustained non-2xx can make Sentry
+ * 204 rather than treating them as failures: a sustained non-2xx can make Sentry
  * disable the webhook. Carries no HTTP concerns so workers/jobs can reuse it.
  */
 export class SentryIssueDroppedError extends Error {}

package/src/core/install.test.ts

@@ -121,7 +121,7 @@ function run(options: RunOptions = {}) {
   };
 }
 
-describe('handleSentryConnect — browser-first (no row)', () => {
+describe('handleSentryConnect: browser-first (no row)', () => {
   it('exchanges, persists the unclaimed row, then binds and verifies last', async () => {
     const sentry = sentryClient();
     const {connectSentryInstallation, persistVerifiedUnclaimedInstallation, result} = run({sentry});
@@ -179,7 +179,7 @@ describe('handleSentryConnect — browser-first (no row)', () => {
   });
 });
 
-describe('handleSentryConnect — verified, unclaimed row exists (webhook-first)', () => {
+describe('handleSentryConnect: verified, unclaimed row exists (webhook-first)', () => {
   it('binds via same-code race when the exchange is already used and the hash matches', async () => {
     const sentry = sentryClient({
       exchangeAuthorizationCode: vi.fn(() =>
@@ -237,7 +237,7 @@ describe('handleSentryConnect — verified, unclaimed row exists (webhook-first)
   });
 });
 
-describe('handleSentryConnect — already claimed / tombstoned', () => {
+describe('handleSentryConnect: already claimed / tombstoned', () => {
   it('is idempotent for an install already claimed to the same workspace', async () => {
     const existing = connection({workspaceId: WORKSPACE_ID});
     const {sentry, connectSentryInstallation, result} = run({
@@ -272,7 +272,7 @@ describe('handleSentryConnect — already claimed / tombstoned', () => {
   });
 });
 
-describe('handleSentryConnect — simultaneous race', () => {
+describe('handleSentryConnect: simultaneous race', () => {
   it('returns a retryable error when the code is already used and no row is visible yet', async () => {
     const sentry = sentryClient({
       exchangeAuthorizationCode: vi.fn(() =>

package/src/core/install.ts

@@ -236,7 +236,7 @@ async function claimBrowserFirst(
 }
 
 // The browser-first exchange got "already used" with no row visible at lookup: a
-// concurrent webhook won the exchange. Re-read once — if its verified row is now
+// concurrent webhook won the exchange. Re-read once: if its verified row is now
 // visible we reconcile through the same proof rules; if it got claimed we resolve
 // it; if it was tombstoned we surface that terminally (matching the top-level
 // check); otherwise it is still mid-flight, so the claim is retryable.

package/src/presentation/routes/install.test.ts

@@ -94,7 +94,7 @@ async function createTestApp(options: CreateTestAppOptions = {}): Promise<Fastif
           updatedAt: new Date(),
         }),
       ),
-    // Webhook receiver dependencies — install/connect tests don't exercise them.
+    // Webhook receiver dependencies: install/connect tests don't exercise them.
     coreDb: vi.fn() as never,
     publishIntegrationEventReceived: vi.fn(() => Promise.resolve({published: false})),
     recordDeliveryOnly: vi.fn(() => Promise.resolve()),
@@ -109,7 +109,7 @@ async function createTestApp(options: CreateTestAppOptions = {}): Promise<Fastif
 function connectPayload(options: {authorize?: boolean} = {}) {
   const workspaceId = crypto.randomUUID();
   if (options.authorize !== false) {
-    authenticatedMemberships = [{workspaceId, role: 'admin'}];
+    authenticatedMemberships = [{workspaceId, role: 'admin', workspaceStatus: 'active'}];
   }
   return {
     workspace_id: workspaceId,
@@ -143,7 +143,7 @@ describe('Sentry integration routes', () => {
   it('returns the external-install URL for a member', async () => {
     const app = await createTestApp();
     const workspaceId = crypto.randomUUID();
-    authenticatedMemberships = [{workspaceId, role: 'admin'}];
+    authenticatedMemberships = [{workspaceId, role: 'admin', workspaceStatus: 'active'}];
 
     const res = await app.inject({
       method: 'POST',

package/test/factories/sentry-installation-webhook.ts

@@ -4,7 +4,7 @@ import {Factory} from 'fishery';
 // over the wire: the lifecycle data nests under `data.installation` and carries
 // the single-use authorization `code`. Tests serialize the built object to form a
 // signed request body; the route parses and validates it with the production Zod
-// schema. Build-only — the payload is never persisted, so there is no onCreate
+// schema. Build-only: the payload is never persisted, so there is no onCreate
 // handler.
 export interface SentryInstallationWebhookPayload {
   action: string;

package/test/factories/sentry-issue-webhook.ts

@@ -2,7 +2,7 @@ import {Factory} from 'fishery';
 
 // Raw Sentry issue webhook payload, shaped exactly as Sentry delivers it over
 // the wire. Tests serialize the built object to form a signed request body; the
-// route parses and validates it with the production Zod schema. Build-only — the
+// route parses and validates it with the production Zod schema. Build-only: the
 // payload is never persisted, so there is no onCreate handler.
 export interface SentryIssueWebhookPayload {
   action: string;