@volter/twin-sentry 1.0.0 → 1.0.1

package/dist/api/src/semantics/shared.js

@@ -1,4 +1,4 @@
-import { bearerToken, grants, orgBySlug, projectOf, wire } from "../../../src/semantics/shared.js";
+import { bearerToken, grants, orgBySlug, projectOf } from "../../../src/semantics/shared.js";
 export * from "../../../src/semantics/shared.js";
 export const detail = (status, message) => Response.json({ detail: message }, { status });
 // Where the documentation stops: the spec names these answers' statuses (401, 403, 404) without their bodies; the
@@ -24,4 +24,3 @@ export function projectFor(ctx, scope) {
     const project = projectOf(ctx, org, String(ctx.call.params.project_id_or_slug ?? ''));
     return project ? { org, project } : notFound();
 }
-export function projectView(ctx, p, _org) { return wire(ctx, p); }

package/dist/api/src/semantics/shared.ts

@@ -1,7 +1,7 @@
 // What every family of Sentry's API shares: who is calling (an auth token the World issued), the organization a request
 // names and whether the token may act on it, and the API's answers (Django REST framework's `{"detail": ...}`).
 import type { HandlerContext } from '@volter/world-core';
-import { bearerToken, grants, orgBySlug, projectOf, type Row, wire } from '../../../src/semantics/shared.ts';
+import { bearerToken, grants, orgBySlug, projectOf, type Row } from '../../../src/semantics/shared.ts';
 
 export * from '../../../src/semantics/shared.ts';
 
@@ -29,7 +29,3 @@ export function projectFor(ctx: HandlerContext, scope: string): { org: Row; proj
   const project = projectOf(ctx, org, String(ctx.call.params.project_id_or_slug ?? ''));
   return project ? { org, project } : notFound();
 }
-
-
-
-export function projectView(ctx: HandlerContext, p: Row, _org: Row): Row { return wire(ctx, p); }

package/dist/ingest/src/manifest.js

@@ -2,6 +2,9 @@ export const manifest = {
     vendor: 'sentry',
     // one service with the API lane (../../api/src/manifest.ts), so one store
     service: 'sentry',
+    hosts: [{ suffix: '.ingest.sentry.io' }, { suffix: '.ingest.us.sentry.io' }, { suffix: '.ingest.de.sentry.io' }],
+    // source: spec:/servers/0/url "https://o0.ingest.us.sentry.io"
+    remoteHost: { template: 'o0.ingest.us.sentry.io' },
     // an envelope is not JSON: its bytes are kept (./semantics/around.ts) and read by the handler
     body: {},
     // source: https://raw.githubusercontent.com/getsentry/sentry-docs/3ec4e139711af82b38a3c2c17261f5f5cdb66dfc/develop-docs/sdk/foundations/transport/compression.mdx "The following content encodings are accepted by Relay and Sentry:"

package/dist/ingest/src/manifest.ts

@@ -7,6 +7,9 @@ export const manifest: DerivedManifest = {
   vendor: 'sentry',
   // one service with the API lane (../../api/src/manifest.ts), so one store
   service: 'sentry',
+  hosts: [{ suffix: '.ingest.sentry.io' }, { suffix: '.ingest.us.sentry.io' }, { suffix: '.ingest.de.sentry.io' }],
+  // source: spec:/servers/0/url "https://o0.ingest.us.sentry.io"
+  remoteHost: { template: 'o0.ingest.us.sentry.io' },
   // an envelope is not JSON: its bytes are kept (./semantics/around.ts) and read by the handler
   body: {},
   // source: https://raw.githubusercontent.com/getsentry/sentry-docs/3ec4e139711af82b38a3c2c17261f5f5cdb66dfc/develop-docs/sdk/foundations/transport/compression.mdx "The following content encodings are accepted by Relay and Sentry:"

package/dist/journeys/customer-life.json

@@ -1,7 +1,7 @@
 {
   "vendor": "sentry",
   "author": "Contributor 93",
-  "about": "Harbourline runs Rallly and Twenty, uses Postiz for social channels and Cal.com for booking. Account setup uses the API after bootstrap; releases, source maps and ingestion follow the pinned application clients.",
+  "about": "Harbourline runs Rallly and Twenty, uses Scheduler for social channels and Cal.com for booking. Account setup uses the API after bootstrap; releases, source maps and ingestion follow the pinned application clients.",
   "steps": [
     {
       "name": "Monday 5 January, 09:00: Harbourline puts Sentry on Rallly and Twenty",
@@ -105,7 +105,7 @@
       "evidence": "spec:listProjectKeys"
     },
     {
-      "name": "Priya creates the postiz project through Sentry API",
+      "name": "Priya creates the scheduler project through Sentry API",
       "method": "POST",
       "path": "https://sentry.io/api/0/organizations/harbourline/projects/",
       "status": 201,
@@ -113,8 +113,8 @@
         "authorization": "Bearer {ci}"
       },
       "body": {
-        "name": "postiz",
-        "slug": "postiz",
+        "name": "scheduler",
+        "slug": "scheduler",
         "platform": "javascript-nextjs"
       },
       "capture": {
@@ -123,11 +123,11 @@
       "expect": [
         {
           "path": "slug",
-          "equals": "postiz"
+          "equals": "scheduler"
         },
         {
           "path": "name",
-          "equals": "postiz"
+          "equals": "scheduler"
         },
         {
           "path": "platform",
@@ -137,9 +137,9 @@
       "evidence": "spec:createOrganizationProject"
     },
     {
-      "name": "She reads the postiz DSN from its client key",
+      "name": "She reads the scheduler DSN from its client key",
       "method": "GET",
-      "path": "https://sentry.io/api/0/projects/harbourline/postiz/keys/",
+      "path": "https://sentry.io/api/0/projects/harbourline/scheduler/keys/",
       "status": 200,
       "headers": {
         "authorization": "Bearer {ci}"
@@ -485,7 +485,7 @@
       "client": "@sentry-internal/replay@10.38.0:build/npm/esm/index.js:8039"
     },
     {
-      "name": "A Postiz user sends feedback from its configured widget",
+      "name": "A Scheduler user sends feedback from its configured widget",
       "method": "POST",
       "path": "https://{r_host}/api/{p_proj}/envelope/",
       "status": 200,
@@ -493,18 +493,17 @@
         "x-sentry-auth": "Sentry sentry_version=7, sentry_client=sentry.javascript.nextjs/10.56.0, sentry_key={p_key}",
         "content-type": "application/x-sentry-envelope"
       },
-      "body": "{\"event_id\":\"fb0000000000400080000000000000a1\",\"sent_at\":\"2026-01-06T14:08:00.000Z\",\"sdk\":{\"name\":\"sentry.javascript.nextjs\",\"version\":\"10.56.0\"}}\n{\"type\":\"feedback\"}\n{\"event_id\":\"fb0000000000400080000000000000a1\",\"timestamp\":\"2026-01-06T14:08:00.000Z\",\"level\":\"info\",\"platform\":\"javascript\",\"contexts\":{\"feedback\":{\"message\":\"The scheduling button is hard to find.\",\"contact_email\":\"u_1182@harbourline.test\",\"name\":\"Dana Ito\",\"url\":\"https://postiz.harbourline.test/launches\"}},\"user\":{\"id\":\"u_1182\",\"email\":\"u_1182@harbourline.test\",\"username\":\"Dana Ito\"},\"sdk\":{\"name\":\"sentry.javascript.nextjs\",\"version\":\"10.56.0\"},\"type\":\"feedback\"}\n",
+      "body": "{\"event_id\":\"fb0000000000400080000000000000a1\",\"sent_at\":\"2026-01-06T14:08:00.000Z\",\"sdk\":{\"name\":\"sentry.javascript.nextjs\",\"version\":\"10.56.0\"}}\n{\"type\":\"feedback\"}\n{\"event_id\":\"fb0000000000400080000000000000a1\",\"timestamp\":\"2026-01-06T14:08:00.000Z\",\"level\":\"info\",\"platform\":\"javascript\",\"contexts\":{\"feedback\":{\"message\":\"The scheduling button is hard to find.\",\"contact_email\":\"u_1182@harbourline.test\",\"name\":\"Dana Ito\",\"url\":\"https://scheduler.harbourline.test/launches\"}},\"user\":{\"id\":\"u_1182\",\"email\":\"u_1182@harbourline.test\",\"username\":\"Dana Ito\"},\"sdk\":{\"name\":\"sentry.javascript.nextjs\",\"version\":\"10.56.0\"},\"type\":\"feedback\"}\n",
       "expect": [
         {
           "path": "id",
           "equals": "fb0000000000400080000000000000a1"
         }
       ],
-      "evidence": "gitroomhq/postiz-app@e0a08a7d9592:apps/frontend/src/components/new-layout/sentry.feedback.component.tsx:24",
       "client": "@sentry/core@10.56.0:build/esm/feedback.js:6"
     },
     {
-      "name": "Harbourline schedules a Postiz post and the service counts post_created",
+      "name": "Harbourline schedules a Scheduler post and the service counts post_created",
       "method": "POST",
       "path": "https://{r_host}/api/{p_proj}/envelope/",
       "status": 200,
@@ -513,7 +512,6 @@
         "content-type": "application/x-sentry-envelope"
       },
       "body": "{\"sent_at\":\"2026-01-06T14:30:00.000Z\",\"sdk\":{\"name\":\"sentry.javascript.nestjs\",\"version\":\"10.56.0\"}}\n{\"type\":\"trace_metric\",\"item_count\":1,\"content_type\":\"application/vnd.sentry.items.trace-metric+json\"}\n{\"items\":[{\"timestamp\":1767709800,\"trace_id\":\"abcdef0123456789abcdef0123456789\",\"name\":\"post_created\",\"type\":\"counter\",\"unit\":\"none\",\"value\":1,\"attributes\":{\"sentry.environment\":{\"value\":\"production\",\"type\":\"string\"},\"service\":{\"value\":\"backend\",\"type\":\"string\"}}}],\"version\":2}\n",
-      "evidence": "gitroomhq/postiz-app@e0a08a7d9592:libraries/nestjs-libraries/src/database/prisma/posts/posts.service.ts:994",
       "client": "@sentry/core@10.56.0:build/esm/metrics/envelope.js:12"
     },
     {

package/dist/journeys/customer-life.outline.md

@@ -5,7 +5,7 @@ Author: Contributor 93
 ## The customer
 
 **Harbourline** runs Rallly (lukevella/rallly at `3e63239dbdec`) and Twenty (twentyhq/twenty at `1d561b8c73c9`) for its team,
-and Postiz (gitroomhq/postiz-app at `e0a08a7d9592`) for its social channels, each reporting to Sentry (../journeys/demand.json):
+and Scheduler for its social channels, each reporting to Sentry (../journeys/demand.json):
 
 - **Rallly**: `@sentry/nextjs` 10.38 on the server, edge and browser (errors, transactions, logs, Session Replay; the
   browser envelopes directly to its DSN host (tunnelRoute is commented out)), and at build `withSentryConfig`, whose sentry-cli makes the release,
@@ -13,7 +13,7 @@ and Postiz (gitroomhq/postiz-app at `e0a08a7d9592`) for its social channels, eac
 - **Twenty**: `@sentry/nestjs` 10.73 on the server (errors, transactions, profiles), its cron jobs checked in as
   monitors (`captureCheckIn` with the schedule).
 
-Harbourline also runs Cal.com (calcom/cal.diy at `54343aa685ae`) for bookings. Its release script reads SENTRY_AUTH_TOKEN, makes its git HEAD release, associates local commits, injects source-map debug ids, uploads the bundle and finalizes. Postiz pins Sentry 10.56.0.
+Harbourline also runs Cal.com (calcom/cal.diy at `54343aa685ae`) for bookings. Its release script reads SENTRY_AUTH_TOKEN, makes its git HEAD release, associates local commits, injects source-map debug ids, uploads the bundle and finalizes. Scheduler pins Sentry 10.56.0.
 
 The World clock starts 2026-01-01.
 
@@ -23,12 +23,12 @@ The World clock starts 2026-01-01.
 |---|---|---|
 | Priya Raman, Harbourline's engineer | the harbourline organization | bootstrap sign-up; additional projects and keys through the API; token issuance door |
 | Rallly and Cal builds | the bootstrap token and Cal CI token | sentry-cli 2.58.4 |
-| Rallly, Twenty and Postiz in production | their projects' DSNs | the SDKs' envelopes |
+| Rallly, Twenty and Scheduler in production | their projects' DSNs | the SDKs' envelopes |
 
 ## The arc
 
 ### 1. Setting up (Mon 5 Jan)
-The bootstrap makes the organization, first auth token and rallly project/DSN. Priya issues Cal's CI auth token for SENTRY_AUTH_TOKEN. With her bootstrap token she creates twenty and postiz through createOrganizationProject, and reads their DSNs through listProjectKeys. She creates cal for the booking app.
+The bootstrap makes the organization, first auth token and rallly project/DSN. Priya issues Cal's CI auth token for SENTRY_AUTH_TOKEN. With her bootstrap token she creates twenty and scheduler through createOrganizationProject, and reads their DSNs through listProjectKeys. She creates cal for the booking app.
 
 ### 2. Rallly's release (Tue 6 Jan, 10:00)
 sentry-cli makes `rallly@4.2.0` (a retry answers 208), reads the chunk
@@ -38,7 +38,7 @@ finalizes the release.
 ### 3. Production (Tue 6 Jan, 14:30)
 A browser session; an unhandled rejection with its stack trace, and the same error for another visitor in a gzipped
 envelope (one issue, two users); a transaction; a replay of the visitor who hit
-the error; a Postiz user sends feedback from its configured widget; Postiz's post_created metric; the server's logs and minute of HTTP request-session aggregates; a client report for sampled-out transactions.
+the error; a Scheduler user sends feedback from its configured widget; Scheduler's post_created metric; the server's logs and minute of HTTP request-session aggregates; a client report for sampled-out transactions.
 
 ### 4. Twenty's cron (Wed 7 Jan, 03:00)
 The cleanup job checks in in progress with its schedule (the monitor is made), then ok using the same check-in id and no explicit duration (checkin_margin 1, max_runtime 5); a worker

package/dist/journeys/demand.json

@@ -1,20 +1,6 @@
 {
   "measured": "Application calls and optional settings are recorded below at the cited commits.",
-  "applications": [
-    {
-      "name": "gitroomhq/postiz-app",
-      "commit": "e0a08a7d9592fdc1ef1e82cb7cb781489fceade3",
-      "client": "@sentry/nextjs 10.56.0 feedbackIntegration; the SDK envelope transport",
-      "frontend": [
-        {
-          "call": "A Postiz user sends feedback through the shipped feedback button; its message, contact and user context are sent as a feedback envelope item",
-          "operation": "sendEnvelope",
-          "evidence": "apps/frontend/src/components/new-layout/sentry.feedback.component.tsx:13-24,30-38; libraries/react-shared-libraries/src/sentry/initialize.sentry.client.ts:34-38"
-        }
-      ],
-      "gate": "The shipped button attaches the SDK feedback widget when its DSN is supplied; there is no separate install or feature/provider selection (apps/frontend/src/components/new-layout/sentry.feedback.component.tsx:13-24,30-38; libraries/react-shared-libraries/src/sentry/initialize.sentry.client.ts:34-38)."
-    }
-  ],
+  "applications": [],
   "notDemanded": "every other operation of Sentry's API (dashboards, alerts, detectors, members, teams, integrations, issue changes, the organization's events and discover queries, replays' and profiles' reads, release files, deploys): no application here calls them.",
   "optional": [
     {
@@ -37,36 +23,6 @@
       "setting": "Configuration: operator instrumentation is a setting that turns the reporting provider on; operator error reporting uses SENTRY_DSN/NEXT_PUBLIC_SENTRY_DSN; no person uses the reporting flow (apps/web/instrumentation-client.ts:9-12).",
       "evidence": "apps/web/instrumentation-client.ts:9-12"
     },
-    {
-      "commit": "e0a08a7d9592fdc1ef1e82cb7cb781489fceade3",
-      "client": "@sentry/nestjs, @sentry/nextjs and @sentry/react 10.56.0 with profiling (bundler plugin 5.3, sentry-cli 2.58.5)",
-      "backend": [
-        {
-          "call": "errors, transactions and profiles from the backend, with its logs",
-          "operation": "sendEnvelope",
-          "evidence": "libraries/nestjs-libraries/src/sentry/initialize.sentry.ts:34"
-        },
-        {
-          "call": "the frontend: Session Replay and browser profiling (user feedback is a separate demanded frontend call)",
-          "operation": "sendEnvelope",
-          "evidence": "libraries/react-shared-libraries/src/sentry/initialize.sentry.client.ts:34"
-        },
-        {
-          "call": "metrics: counters, gauges and distributions (Sentry.metrics)",
-          "operation": "sendEnvelope",
-          "evidence": "libraries/nestjs-libraries/src/database/prisma/posts/posts.service.ts:994"
-        },
-        {
-          "call": "withSentryConfig at build: release, source maps, finalize",
-          "operation": "createProjectRelease; getChunkUploadOptions; uploadChunks; assembleArtifactBundle; updateProjectRelease",
-          "evidence": "apps/frontend/next.config.js:60"
-        }
-      ],
-      "application": "gitroomhq/postiz-app",
-      "what": "@sentry/nestjs, @sentry/nextjs and @sentry/react 10.56.0 with profiling (bundler plugin 5.3, sentry-cli 2.58.5)",
-      "setting": "Configuration: operator instrumentation is a setting that turns the reporting provider on; operator error, replay, profile and metrics reporting uses NEXT_PUBLIC_SENTRY_DSN (libraries/react-shared-libraries/src/sentry/initialize.sentry.next.basic.ts:4-7). The shipped feedback button using the same SDK is separately demand; supplying its DSN is a credential, not a provider-selection setting.",
-      "evidence": "docker-compose.yaml:89; (apps/frontend/src/instrumentation.ts:2"
-    },
     {
       "commit": "1d561b8c73c984058a5121ec229f4805a2424a91",
       "client": "@sentry/nestjs and @sentry/node 10.73 with profiling, @sentry/react 10.59.0 (lockfile resolution of ^10.51.0)",

package/dist/journeys/first-use.json

@@ -0,0 +1,22 @@
+{
+  "schemaVersion": 1,
+  "source": "https://docs.sentry.io/platforms/javascript/guides/node/usage/",
+  "about": "A Node application uses Twenty's demanded @sentry/node 10.73.0 to capture and flush a scoped exception using its issued SENTRY_DSN. The documented project-event API reads the resulting event with the issued SENTRY_AUTH_TOKEN. Resume reads the same event ID and asserts the exception, user and application tag without submitting another envelope.",
+  "files": {
+    "package.json": "{\n  \"name\": \"sentry-exception-customer\",\n  \"private\": true,\n  \"type\": \"module\",\n  \"dependencies\": {\n    \"@sentry/node\": \"10.73.0\"\n  }\n}\n",
+    ".env.example": "SENTRY_DSN=\nSENTRY_AUTH_TOKEN=\nSENTRY_ORG=\nSENTRY_PROJECT=\n",
+    ".gitignore": ".sentry-event.json\n",
+    "capture.mjs": "import assert from 'node:assert/strict';\nimport { writeFileSync } from 'node:fs';\nimport * as Sentry from '@sentry/node';\nif (!process.env.VOLTER_WORLD) throw new Error('Run this application through its World.');\nassert.ok(process.env.SENTRY_DSN, 'the application receives its own project DSN');\nSentry.init({ dsn: process.env.SENTRY_DSN, defaultIntegrations: false });\nSentry.setUser({ id: 'customer-member' });\nSentry.setTag('application', 'customer-workflow');\nconst eventId = Sentry.captureException(new Error('Customer workflow exception'));\nassert.match(eventId, /^[a-f0-9]{32}$/i);\nassert.equal(await Sentry.close(5000), true, 'the SDK drains its exception envelope');\nwriteFileSync('.sentry-event.json', JSON.stringify({ eventId }) + '\\n');\nawait import('./readback.mjs');\n",
+    "readback.mjs": "import assert from 'node:assert/strict';\nimport { readFileSync } from 'node:fs';\nif (!process.env.VOLTER_WORLD) throw new Error('Run this application through its World.');\nconst { eventId } = JSON.parse(readFileSync('.sentry-event.json', 'utf8'));\n// https://docs.sentry.io/api/events/retrieve-an-event-for-a-project/\nconst url = 'https://sentry.io/api/0/projects/' + encodeURIComponent(process.env.SENTRY_ORG) + '/' + encodeURIComponent(process.env.SENTRY_PROJECT) + '/events/' + eventId + '/';\nconst response = await fetch(url, { headers: { authorization: 'Bearer ' + process.env.SENTRY_AUTH_TOKEN } });\nassert.equal(response.status, 200, 'the issued organization token reads its project event');\nconst event = await response.json();\nassert.equal(event.eventID, eventId);\nassert.equal(event.user.id, 'customer-member');\nassert.ok(event.tags.some(tag => tag.key === 'application' && tag.value === 'customer-workflow'));\nconst exception = event.entries.find(entry => entry.type === 'exception');\nassert.equal(exception.data.values[0].value, 'Customer workflow exception');\nassert.ok(exception.data.values[0].stacktrace.frames.length > 0, 'the SDK stack survives ingestion and resume');\nconsole.log(JSON.stringify({ eventId: event.eventID, exception: exception.data.values[0].value, retained: true }));\n"
+  },
+  "run": [
+    "node",
+    "capture.mjs"
+  ],
+  "retention": {
+    "readback": [
+      "node",
+      "readback.mjs"
+    ]
+  }
+}

package/dist/src/cli.js

@@ -7,7 +7,7 @@ const [cmd, ...rest] = process.argv.slice(2);
 const port = Number(optionValue(rest, '--port', '0')) || undefined;
 const root = optionValue(rest, '--root') || undefined;
 const readOnly = hasFlag(rest, '--read-only');
-// the World's managed Postgres, which the runtime binds a pack declaring managedDatabase to
+// the selected twin's private Postgres, which the runtime binds a pack declaring managedDatabase to
 const database = optionValue(rest, '--database') || undefined;
 // the World's scenario file, for a model vendor's turns
 const scenarioPath = optionValue(rest, '--scenario') || undefined;

package/dist/src/index.js

@@ -1,5 +1,6 @@
 // @volter/twin-sentry — the sentry twin (Protocol 3). A fixed file (create-pack): the descriptor is the manifest's, and the
-// kernel derives the vendor-backed half from the generated surface (architecture, "The real-system adapters").
+// kernel derives the vendor-backed half from the generated surface, unless the manifest declares none (vendorBacked.none;
+// architecture, "The real-system adapters").
 import { packOf, registerPack } from '@volter/world-core';
 import { manifest } from "./manifest.js";
 import { manifest as apiManifest } from "../api/src/manifest.js";

package/dist/src/manifest.js

@@ -18,12 +18,13 @@ export const manifest = {
         bin: 'world-sentry',
         resources: ['organization', 'project', 'project_key', 'event', 'issue', 'release', 'monitor', 'check_in'],
         specSource: "Sentry's OpenAPI document (api/spec, sentry-api-schema 98ec014, patched with evidence) and its SDK developer documentation's envelope endpoint (ingest/spec)",
-        description: 'Sentry twin — the envelope endpoint every SDK sends to (events grouped into issues, transactions, sessions, replays, profiles, check-ins, feedback, logs, metrics), and release and source-map APIs used by Cal.com, Postiz and Rallly, account project/key setup, and core vendor-backed reads.',
+        description: 'Sentry twin — the envelope endpoint every SDK sends to (events grouped into issues, transactions, sessions, replays, profiles, check-ins, feedback, logs, metrics), and release and source-map APIs used by Cal.com and Rallly, account project/key setup, and core vendor-backed reads.',
         adoption: { sdks: ['@sentry/astro', '@sentry/browser', '@sentry/electron', '@sentry/nextjs', '@sentry/node', '@sentry/nestjs', '@sentry/react', '@sentry/react-native', '@sentry/remix', '@sentry/sveltekit', '@sentry/vue', '@sentry/cli'], pypi: ['sentry-sdk'], envStems: ['APPSMITHSENTRY', 'SENTRY'] },
         hosts: [{ host: 'sentry.io' }, { host: 'us.sentry.io' }, { host: 'de.sentry.io' }, { suffix: '.ingest.sentry.io' }, { suffix: '.ingest.us.sentry.io' }, { suffix: '.ingest.de.sentry.io' }],
         endpointEnvNone: "an SDK sends to its DSN's host and sentry-cli to SENTRY_URL (sentry.io by default); the DSN the World issues names the World's ingest host, claimed by the host rules",
         // Bootstrap: account sign-up, first credential and the project/key named by this env, stable at every boot.
-        credentialDoor: {
+        credentialDoor: { account: { field: 'account', tenancy: 'organization', source: 'https://docs.sentry.io/api/permissions/' },
+            deployment: { field: 'deployment', object: 'project and client key', source: 'https://docs.sentry.io/product/sentry-basics/environments/', organizationOutputs: ['SENTRY_ORG', 'SENTRY_ORGANIZATION'] },
             path: '/_twin/app-credentials', body: {},
             fill: {
                 SENTRY_DSN: 'dsn', NEXT_PUBLIC_SENTRY_DSN: 'dsn', NEXT_PUBLIC_SENTRY_DSN_CLIENT: 'dsn', SENTRY_FRONT_DSN: 'dsn', SENTRY_DSN_API: 'dsn', VITE_SENTRY_DSN: 'dsn', EXPO_PUBLIC_SENTRY_DSN: 'dsn',

package/dist/src/semantics/shared.d.ts

@@ -2,14 +2,15 @@ import type { HandlerContext } from '@volter/world-core';
 type Reader = Pick<HandlerContext, 'row' | 'rowsRaw' | 'own'>;
 export type Row = Record<string, unknown>;
 /** An organization, made the first time (sentry.io's sign-up names it). */
-export declare function makeOrg(ctx: HandlerContext, slug: string, name: string): Promise<Row>;
+export declare function makeOrg(ctx: HandlerContext, slug: string, name: string, owner: string): Promise<Row | Response>;
 /** A project of an organization with its default client key (the project's creation makes one). */
-export declare function makeProject(ctx: HandlerContext, org: Row, slug: string, platform: string | null): Promise<Row>;
+export declare function makeProject(ctx: HandlerContext, org: Row, slug: string, platform: string | null): Promise<Row | Response>;
+export declare function makeClientKey(ctx: HandlerContext, org: Row, project: Row): Promise<Row>;
 /** An organization auth token, made on Settings > Auth Tokens: its value shown once. Its scopes are the organization
  *  token's fixed set ("org:ci": releases and source maps, and reading the organization). */
 export declare function makeOrgToken(ctx: HandlerContext, org: Row, name: string, scopes?: string[]): Promise<string>;
-/** A token the organization holds by its name, answered again only while its derived value still matches its hash. */
-export declare function heldOrgToken(ctx: HandlerContext, org: Row, name: string): Promise<string | undefined>;
+/** A live native auth token, reconstructed only while its stored digest still matches. */
+export declare function readToken(ctx: HandlerContext, org: Row, row: Row): Promise<string | undefined>;
 /** A personal token (User Settings > Personal Tokens): `sntryu_` and 64 hexadecimal digits, with the scopes chosen when it
  *  is made, acting on the organizations its user belongs to (here, the one named). */
 export declare function makePersonalToken(ctx: HandlerContext, org: Row, name: string, scopes: string[]): Promise<string>;

package/dist/src/semantics/shared.js

@@ -1,35 +1,33 @@
 /** An organization, made the first time (sentry.io's sign-up names it). */
-export async function makeOrg(ctx, slug, name) {
-    const held = orgBySlug(ctx, slug);
-    if (held)
-        return held;
-    const id = ctx.mint(ORG);
-    await ctx.write(ORG, id, { id, slug, name, dateCreated: ctx.occurredAt, status: { id: 'active', name: 'active' }, avatar: { avatarType: 'letter_avatar', avatarUuid: null }, isEarlyAdopter: false, require2FA: false, hasAuthProvider: false, features: [...DEFAULT_FEATURES], links: { organizationUrl: `https://${slug}.sentry.io`, regionUrl: 'https://us.sentry.io' }, allowMemberInvite: true, allowMemberProjectCreation: true, allowSuperuserAccess: false }, 'organization.create');
-    return ctx.row(ORG, id);
+export async function makeOrg(ctx, slug, name, owner) {
+    const made = await ctx.createUnique(ORG, { slug, name, _owner: owner, dateCreated: ctx.occurredAt, status: { id: 'active', name: 'active' }, avatar: { avatarType: 'letter_avatar', avatarUuid: null }, isEarlyAdopter: false, require2FA: false, hasAuthProvider: false, features: [...DEFAULT_FEATURES], links: { organizationUrl: `https://${slug}.sentry.io`, regionUrl: 'https://us.sentry.io' }, allowMemberInvite: true, allowMemberProjectCreation: true, allowSuperuserAccess: false }, 'organization.create');
+    return made.created ? ctx.row(ORG, String(made.row.id)) : Response.json({ slug: ['An organization with this slug already exists.'] }, { status: 409 });
 }
 /** A project of an organization with its default client key (the project's creation makes one). */
 export async function makeProject(ctx, org, slug, platform) {
-    const held = projectOf(ctx, org, slug);
-    if (held)
-        return held;
-    const id = ctx.mint(PROJECT);
-    const project = await ctx.write(PROJECT, id, { id, slug, name: slug, platform, _organization: org.id, dateCreated: ctx.occurredAt, _issueCounter: 0, isBookmarked: false, isMember: true, features: ['releases'], firstEvent: null, firstTransactionEvent: false, access: [], hasAccess: true, team: null, teams: [], environments: [], latestRelease: null, platforms: platform ? [platform] : [], hasSessions: false, hasProfiles: false, hasReplays: false, hasFlags: false, hasMinifiedStackTrace: false, hasMonitors: false, hasFeedbacks: false, hasNewFeedbacks: false, hasUserReports: false, hasInsightsHttp: false, hasInsightsDb: false, hasInsightsAssets: false, hasInsightsAppStart: false, hasInsightsScreenLoad: false, hasInsightsVitals: false, hasInsightsCaches: false, hasInsightsQueues: false, hasInsightsAgentMonitoring: false, hasInsightsMCP: false, hasLogs: false, hasTraceMetrics: false }, 'project.create');
-    // a client key's public part: 32 hexadecimal characters, drawn from the World's secret for the project
-    const pub = ctx.mint(CLIENT_KEY);
+    const made = await ctx.createUnique(PROJECT, { slug, name: slug, platform, _organization: org.id, dateCreated: ctx.occurredAt, _issueCounter: 0, isBookmarked: false, isMember: true, features: ['releases'], firstEvent: null, firstTransactionEvent: false, access: [], hasAccess: true, team: null, teams: [], environments: [], latestRelease: null, platforms: platform ? [platform] : [], hasSessions: false, hasProfiles: false, hasReplays: false, hasFlags: false, hasMinifiedStackTrace: false, hasMonitors: false, hasFeedbacks: false, hasNewFeedbacks: false, hasUserReports: false, hasInsightsHttp: false, hasInsightsDb: false, hasInsightsAssets: false, hasInsightsAppStart: false, hasInsightsScreenLoad: false, hasInsightsVitals: false, hasInsightsCaches: false, hasInsightsQueues: false, hasInsightsAgentMonitoring: false, hasInsightsMCP: false, hasLogs: false, hasTraceMetrics: false }, 'project.create');
+    if (!made.created)
+        return Response.json({ slug: ['A project with this slug already exists.'] }, { status: 409 });
+    const project = ctx.row(PROJECT, String(made.row.id));
+    await makeClientKey(ctx, org, project);
+    return project;
+}
+export async function makeClientKey(ctx, org, project) {
+    const id = String(project.id);
     // source: https://raw.githubusercontent.com/getsentry/sentry/2efdd4760a75a3d395e3534b7f66a7fbb0c3f22e/src/sentry/models/projectkey.py "secret_key = ProjectKey.generate_api_key()"
-    const secret = ctx.crypto.digest('sha256', await ctx.secret(`sentry-project-key:${pub}`), 'hex').slice(0, 32);
+    const secret = ctx.crypto.digest('sha256', await ctx.secret(`sentry-project-key:${await next(ctx, 'project_key')}`), 'hex').slice(0, 32);
     const endpoint = `https://o${String(org.id)}.ingest.us.sentry.io`;
     const api = `${endpoint}/api/${id}`;
     // source: https://raw.githubusercontent.com/getsentry/sentry/2efdd4760a75a3d395e3534b7f66a7fbb0c3f22e/src/sentry/api/serializers/models/project_key.py "ProjectKeySerializerResponse"
     // source: https://raw.githubusercontent.com/getsentry/sentry/2efdd4760a75a3d395e3534b7f66a7fbb0c3f22e/src/sentry/projectoptions/defaults.py "sentry:default_loader_version"
     // New projects take the current option epoch's loader defaults; the installed application SDK is independent.
-    await ctx.write(CLIENT_KEY, pub, { id: pub, public: pub, secret, _project: id, name: 'Default', label: 'Default', projectId: Number(id), isActive: true, dateCreated: ctx.occurredAt, rateLimit: null,
+    const made = await ctx.create(CLIENT_KEY, (pub) => ({ id: pub, public: pub, secret, _project: id, name: 'Default', label: 'Default', projectId: Number(id), isActive: true, dateCreated: ctx.occurredAt, rateLimit: null,
         dsn: { public: `https://${pub}@${endpoint.slice(8)}/${id}`, secret: `https://${pub}:${secret}@${endpoint.slice(8)}/${id}`,
             csp: `${api}/csp-report/?sentry_key=${pub}`, security: `${api}/security/?sentry_key=${pub}`, minidump: `${api}/minidump/?sentry_key=${pub}`, nel: `${api}/nel/?sentry_key=${pub}`,
             playstation: `${api}/playstation/?sentry_key=${pub}`, integration: `${api}/integration/`, otlp_traces: `${api}/integration/otlp/v1/traces`, otlp_logs: `${api}/integration/otlp/v1/logs`, unreal: `${api}/unreal/${pub}/`, crons: `${api}/cron/___MONITOR_SLUG___/${pub}/`, cdn: `https://js.sentry-cdn.com/${pub}.min.js` },
         browserSdkVersion: '11.x', browserSdk: { choices: ['11.x', '10.x', '9.x', '8.x', '7.x'].map((v) => [v, v]) }, dynamicSdkLoaderOptions: { hasReplay: true, hasPerformance: true, hasDebug: false, hasFeedback: false, hasLogsAndMetrics: false },
-    }, 'project_key.create');
-    return ctx.row(PROJECT, id);
+    }), 'project_key.create');
+    return ctx.row(CLIENT_KEY, String(made.id));
 }
 /** An organization auth token's value: `sntrys_`, the base64 of what it is for (when it was made, the API's and the
  *  region's URLs, the organization) and `_` and its secret, drawn from the World's secret under its label. */
@@ -47,12 +45,10 @@ export async function makeOrgToken(ctx, org, name, scopes = ['org:ci']) {
     await ctx.record(TOKEN, { organization: org.id, name, scopes, kind: 'org', dateCreated: ctx.occurredAt, iat, label, lastChars: token.slice(-4) }, sha256(ctx, token));
     return token;
 }
-/** A token the organization holds by its name, answered again only while its derived value still matches its hash. */
-export async function heldOrgToken(ctx, org, name) {
-    const row = ctx.rowsRaw(TOKEN).find((t) => t.deleted !== true && t.organization === org.id && t.name === name);
-    return row ? reissueHeldToken(ctx, org, row) : undefined;
-}
-async function reissueHeldToken(ctx, org, row) {
+/** A live native auth token, reconstructed only while its stored digest still matches. */
+export async function readToken(ctx, org, row) {
+    if (row.deleted === true || row.organization !== org.id)
+        return undefined;
     const token = row.kind === 'personal' ? `sntryu_${ctx.crypto.digest('sha256', await ctx.secret(String(row.label)), 'hex')}` : await tokenValue(ctx, org, String(row.label), Number(row.iat));
     return sha256(ctx, token) === row.id ? token : undefined;
 }
@@ -62,7 +58,7 @@ export async function makePersonalToken(ctx, org, name, scopes) {
     const label = `sentry-personal-token:${await next(ctx, 'token')}`;
     const hex = ctx.crypto.digest('sha256', await ctx.secret(label), 'hex');
     const token = `sntryu_${hex}`;
-    await ctx.record(TOKEN, { organization: org.id, name, scopes, kind: 'personal', dateCreated: ctx.occurredAt, label, lastChars: token.slice(-4) }, sha256(ctx, token));
+    await ctx.record(TOKEN, { organization: org.id, user: org._owner, name, scopes, kind: 'personal', dateCreated: ctx.occurredAt, label, lastChars: token.slice(-4) }, sha256(ctx, token));
     return token;
 }
 /** The token a request's `Authorization: Bearer` names, if the World issued it and it is not revoked. */
@@ -288,7 +284,7 @@ export function issueView(ctx, raw) {
 }
 /** Stored vendor fields, including the API's own _meta; private association/payload fields stay in the tree. */
 export function wire(ctx, row) {
-    return Object.fromEntries(Object.entries(ctx.own(row)).filter(([key]) => !key.startsWith('_') || key === '_meta'));
+    return Object.fromEntries(Object.entries({ id: row.id, ...ctx.own(row) }).filter(([key]) => !key.startsWith('_') || key === '_meta'));
 }
 export const ORG = 'organization';
 export const PROJECT = 'project';

package/generated/pack-facts.json

@@ -64,6 +64,20 @@
       ],
       "endpointEnvNone": "an SDK sends to its DSN's host and sentry-cli to SENTRY_URL (sentry.io by default); the DSN the World issues names the World's ingest host, claimed by the host rules",
       "credentialDoor": {
+        "account": {
+          "field": "account",
+          "tenancy": "organization",
+          "source": "https://docs.sentry.io/api/permissions/"
+        },
+        "deployment": {
+          "field": "deployment",
+          "object": "project and client key",
+          "source": "https://docs.sentry.io/product/sentry-basics/environments/",
+          "organizationOutputs": [
+            "SENTRY_ORG",
+            "SENTRY_ORGANIZATION"
+          ]
+        },
         "path": "/_twin/app-credentials",
         "body": {},
         "fill": {

package/ingest/src/manifest.ts

@@ -7,6 +7,9 @@ export const manifest: DerivedManifest = {
   vendor: 'sentry',
   // one service with the API lane (../../api/src/manifest.ts), so one store
   service: 'sentry',
+  hosts: [{ suffix: '.ingest.sentry.io' }, { suffix: '.ingest.us.sentry.io' }, { suffix: '.ingest.de.sentry.io' }],
+  // source: spec:/servers/0/url "https://o0.ingest.us.sentry.io"
+  remoteHost: { template: 'o0.ingest.us.sentry.io' },
   // an envelope is not JSON: its bytes are kept (./semantics/around.ts) and read by the handler
   body: {},
   // source: https://raw.githubusercontent.com/getsentry/sentry-docs/3ec4e139711af82b38a3c2c17261f5f5cdb66dfc/develop-docs/sdk/foundations/transport/compression.mdx "The following content encodings are accepted by Relay and Sentry:"

package/journeys/customer-life.json

@@ -1,7 +1,7 @@
 {
   "vendor": "sentry",
   "author": "Contributor 93",
-  "about": "Harbourline runs Rallly and Twenty, uses Postiz for social channels and Cal.com for booking. Account setup uses the API after bootstrap; releases, source maps and ingestion follow the pinned application clients.",
+  "about": "Harbourline runs Rallly and Twenty, uses Scheduler for social channels and Cal.com for booking. Account setup uses the API after bootstrap; releases, source maps and ingestion follow the pinned application clients.",
   "steps": [
     {
       "name": "Monday 5 January, 09:00: Harbourline puts Sentry on Rallly and Twenty",
@@ -105,7 +105,7 @@
       "evidence": "spec:listProjectKeys"
     },
     {
-      "name": "Priya creates the postiz project through Sentry API",
+      "name": "Priya creates the scheduler project through Sentry API",
       "method": "POST",
       "path": "https://sentry.io/api/0/organizations/harbourline/projects/",
       "status": 201,
@@ -113,8 +113,8 @@
         "authorization": "Bearer {ci}"
       },
       "body": {
-        "name": "postiz",
-        "slug": "postiz",
+        "name": "scheduler",
+        "slug": "scheduler",
         "platform": "javascript-nextjs"
       },
       "capture": {
@@ -123,11 +123,11 @@
       "expect": [
         {
           "path": "slug",
-          "equals": "postiz"
+          "equals": "scheduler"
         },
         {
           "path": "name",
-          "equals": "postiz"
+          "equals": "scheduler"
         },
         {
           "path": "platform",
@@ -137,9 +137,9 @@
       "evidence": "spec:createOrganizationProject"
     },
     {
-      "name": "She reads the postiz DSN from its client key",
+      "name": "She reads the scheduler DSN from its client key",
       "method": "GET",
-      "path": "https://sentry.io/api/0/projects/harbourline/postiz/keys/",
+      "path": "https://sentry.io/api/0/projects/harbourline/scheduler/keys/",
       "status": 200,
       "headers": {
         "authorization": "Bearer {ci}"
@@ -485,7 +485,7 @@
       "client": "@sentry-internal/replay@10.38.0:build/npm/esm/index.js:8039"
     },
     {
-      "name": "A Postiz user sends feedback from its configured widget",
+      "name": "A Scheduler user sends feedback from its configured widget",
       "method": "POST",
       "path": "https://{r_host}/api/{p_proj}/envelope/",
       "status": 200,
@@ -493,18 +493,17 @@
         "x-sentry-auth": "Sentry sentry_version=7, sentry_client=sentry.javascript.nextjs/10.56.0, sentry_key={p_key}",
         "content-type": "application/x-sentry-envelope"
       },
-      "body": "{\"event_id\":\"fb0000000000400080000000000000a1\",\"sent_at\":\"2026-01-06T14:08:00.000Z\",\"sdk\":{\"name\":\"sentry.javascript.nextjs\",\"version\":\"10.56.0\"}}\n{\"type\":\"feedback\"}\n{\"event_id\":\"fb0000000000400080000000000000a1\",\"timestamp\":\"2026-01-06T14:08:00.000Z\",\"level\":\"info\",\"platform\":\"javascript\",\"contexts\":{\"feedback\":{\"message\":\"The scheduling button is hard to find.\",\"contact_email\":\"u_1182@harbourline.test\",\"name\":\"Dana Ito\",\"url\":\"https://postiz.harbourline.test/launches\"}},\"user\":{\"id\":\"u_1182\",\"email\":\"u_1182@harbourline.test\",\"username\":\"Dana Ito\"},\"sdk\":{\"name\":\"sentry.javascript.nextjs\",\"version\":\"10.56.0\"},\"type\":\"feedback\"}\n",
+      "body": "{\"event_id\":\"fb0000000000400080000000000000a1\",\"sent_at\":\"2026-01-06T14:08:00.000Z\",\"sdk\":{\"name\":\"sentry.javascript.nextjs\",\"version\":\"10.56.0\"}}\n{\"type\":\"feedback\"}\n{\"event_id\":\"fb0000000000400080000000000000a1\",\"timestamp\":\"2026-01-06T14:08:00.000Z\",\"level\":\"info\",\"platform\":\"javascript\",\"contexts\":{\"feedback\":{\"message\":\"The scheduling button is hard to find.\",\"contact_email\":\"u_1182@harbourline.test\",\"name\":\"Dana Ito\",\"url\":\"https://scheduler.harbourline.test/launches\"}},\"user\":{\"id\":\"u_1182\",\"email\":\"u_1182@harbourline.test\",\"username\":\"Dana Ito\"},\"sdk\":{\"name\":\"sentry.javascript.nextjs\",\"version\":\"10.56.0\"},\"type\":\"feedback\"}\n",
       "expect": [
         {
           "path": "id",
           "equals": "fb0000000000400080000000000000a1"
         }
       ],
-      "evidence": "gitroomhq/postiz-app@e0a08a7d9592:apps/frontend/src/components/new-layout/sentry.feedback.component.tsx:24",
       "client": "@sentry/core@10.56.0:build/esm/feedback.js:6"
     },
     {
-      "name": "Harbourline schedules a Postiz post and the service counts post_created",
+      "name": "Harbourline schedules a Scheduler post and the service counts post_created",
       "method": "POST",
       "path": "https://{r_host}/api/{p_proj}/envelope/",
       "status": 200,
@@ -513,7 +512,6 @@
         "content-type": "application/x-sentry-envelope"
       },
       "body": "{\"sent_at\":\"2026-01-06T14:30:00.000Z\",\"sdk\":{\"name\":\"sentry.javascript.nestjs\",\"version\":\"10.56.0\"}}\n{\"type\":\"trace_metric\",\"item_count\":1,\"content_type\":\"application/vnd.sentry.items.trace-metric+json\"}\n{\"items\":[{\"timestamp\":1767709800,\"trace_id\":\"abcdef0123456789abcdef0123456789\",\"name\":\"post_created\",\"type\":\"counter\",\"unit\":\"none\",\"value\":1,\"attributes\":{\"sentry.environment\":{\"value\":\"production\",\"type\":\"string\"},\"service\":{\"value\":\"backend\",\"type\":\"string\"}}}],\"version\":2}\n",
-      "evidence": "gitroomhq/postiz-app@e0a08a7d9592:libraries/nestjs-libraries/src/database/prisma/posts/posts.service.ts:994",
       "client": "@sentry/core@10.56.0:build/esm/metrics/envelope.js:12"
     },
     {

package/journeys/customer-life.outline.md

@@ -5,7 +5,7 @@ Author: Contributor 93
 ## The customer
 
 **Harbourline** runs Rallly (lukevella/rallly at `3e63239dbdec`) and Twenty (twentyhq/twenty at `1d561b8c73c9`) for its team,
-and Postiz (gitroomhq/postiz-app at `e0a08a7d9592`) for its social channels, each reporting to Sentry (../journeys/demand.json):
+and Scheduler for its social channels, each reporting to Sentry (../journeys/demand.json):
 
 - **Rallly**: `@sentry/nextjs` 10.38 on the server, edge and browser (errors, transactions, logs, Session Replay; the
   browser envelopes directly to its DSN host (tunnelRoute is commented out)), and at build `withSentryConfig`, whose sentry-cli makes the release,
@@ -13,7 +13,7 @@ and Postiz (gitroomhq/postiz-app at `e0a08a7d9592`) for its social channels, eac
 - **Twenty**: `@sentry/nestjs` 10.73 on the server (errors, transactions, profiles), its cron jobs checked in as
   monitors (`captureCheckIn` with the schedule).
 
-Harbourline also runs Cal.com (calcom/cal.diy at `54343aa685ae`) for bookings. Its release script reads SENTRY_AUTH_TOKEN, makes its git HEAD release, associates local commits, injects source-map debug ids, uploads the bundle and finalizes. Postiz pins Sentry 10.56.0.
+Harbourline also runs Cal.com (calcom/cal.diy at `54343aa685ae`) for bookings. Its release script reads SENTRY_AUTH_TOKEN, makes its git HEAD release, associates local commits, injects source-map debug ids, uploads the bundle and finalizes. Scheduler pins Sentry 10.56.0.
 
 The World clock starts 2026-01-01.
 
@@ -23,12 +23,12 @@ The World clock starts 2026-01-01.
 |---|---|---|
 | Priya Raman, Harbourline's engineer | the harbourline organization | bootstrap sign-up; additional projects and keys through the API; token issuance door |
 | Rallly and Cal builds | the bootstrap token and Cal CI token | sentry-cli 2.58.4 |
-| Rallly, Twenty and Postiz in production | their projects' DSNs | the SDKs' envelopes |
+| Rallly, Twenty and Scheduler in production | their projects' DSNs | the SDKs' envelopes |
 
 ## The arc
 
 ### 1. Setting up (Mon 5 Jan)
-The bootstrap makes the organization, first auth token and rallly project/DSN. Priya issues Cal's CI auth token for SENTRY_AUTH_TOKEN. With her bootstrap token she creates twenty and postiz through createOrganizationProject, and reads their DSNs through listProjectKeys. She creates cal for the booking app.
+The bootstrap makes the organization, first auth token and rallly project/DSN. Priya issues Cal's CI auth token for SENTRY_AUTH_TOKEN. With her bootstrap token she creates twenty and scheduler through createOrganizationProject, and reads their DSNs through listProjectKeys. She creates cal for the booking app.
 
 ### 2. Rallly's release (Tue 6 Jan, 10:00)
 sentry-cli makes `rallly@4.2.0` (a retry answers 208), reads the chunk
@@ -38,7 +38,7 @@ finalizes the release.
 ### 3. Production (Tue 6 Jan, 14:30)
 A browser session; an unhandled rejection with its stack trace, and the same error for another visitor in a gzipped
 envelope (one issue, two users); a transaction; a replay of the visitor who hit
-the error; a Postiz user sends feedback from its configured widget; Postiz's post_created metric; the server's logs and minute of HTTP request-session aggregates; a client report for sampled-out transactions.
+the error; a Scheduler user sends feedback from its configured widget; Scheduler's post_created metric; the server's logs and minute of HTTP request-session aggregates; a client report for sampled-out transactions.
 
 ### 4. Twenty's cron (Wed 7 Jan, 03:00)
 The cleanup job checks in in progress with its schedule (the monitor is made), then ok using the same check-in id and no explicit duration (checkin_margin 1, max_runtime 5); a worker