@allstak/react 0.3.3 → 0.3.4

package/dist/build/{chunk-ZY4H5AN4.mjs → chunk-3JRNQSVX.mjs}

@@ -1,6 +1,6 @@
 import {
   processBuildOutput
-} from "./chunk-G6VPGDP6.mjs";
+} from "./chunk-DURAJQ3M.mjs";
 
 // src/build/webpack.ts
 var AllStakWebpackPlugin = class {
@@ -29,4 +29,4 @@ var AllStakWebpackPlugin = class {
 export {
   AllStakWebpackPlugin
 };
-//# sourceMappingURL=chunk-ZY4H5AN4.mjs.map
+//# sourceMappingURL=chunk-3JRNQSVX.mjs.map

package/dist/build/{chunk-G6VPGDP6.mjs → chunk-DURAJQ3M.mjs}

@@ -155,6 +155,7 @@ async function uploadAll(pairs, opts) {
 
 // src/build/sourcemaps.ts
 import { resolve } from "path";
+import { existsSync, readFileSync as readFileSync3 } from "fs";
 async function processBuildOutput(opts) {
   const dir = resolve(opts.dir);
   const pairs = findPairs(dir);
@@ -172,8 +173,11 @@ async function processBuildOutput(opts) {
   for (const i of injected) {
     log(`  ${i.bundleName}  ${i.debugId}  ${i.reused ? "(reused)" : "(new)"}`);
   }
-  const token = opts.token ?? process.env.ALLSTAK_UPLOAD_TOKEN;
-  const release = opts.release ?? process.env.ALLSTAK_RELEASE;
+  const env = loadAllStakEnv();
+  const token = opts.token ?? env.ALLSTAK_UPLOAD_TOKEN;
+  const release = opts.release ?? env.ALLSTAK_RELEASE;
+  const host = opts.host ?? env.ALLSTAK_HOST;
+  const dist = opts.dist ?? env.ALLSTAK_DIST;
   if (opts.injectOnly || !token) {
     if (!opts.injectOnly && !token) {
       log("skipping upload \u2014 no token (set ALLSTAK_UPLOAD_TOKEN or pass `token`)");
@@ -187,7 +191,9 @@ async function processBuildOutput(opts) {
   const uploaded = await uploadAll(pairs, {
     ...opts,
     release,
-    token
+    token,
+    host,
+    dist
   });
   for (const u of uploaded) {
     if (u.ok) {
@@ -199,6 +205,24 @@ async function processBuildOutput(opts) {
   }
   return { dir, pairs: pairs.length, injected, uploaded };
 }
+function loadAllStakEnv() {
+  const out = { ...process.env };
+  for (const file of [".env.local", ".env"]) {
+    const full = resolve(process.cwd(), file);
+    if (!existsSync(full)) continue;
+    const text = readFileSync3(full, "utf8");
+    for (const line of text.split(/\r?\n/)) {
+      const trimmed = line.trim();
+      if (!trimmed || trimmed.startsWith("#")) continue;
+      const match = /^([A-Z0-9_]+)\s*=\s*(.*)$/.exec(trimmed);
+      if (!match) continue;
+      const key = match[1];
+      if (out[key] !== void 0) continue;
+      out[key] = match[2].replace(/^['"]|['"]$/g, "");
+    }
+  }
+  return out;
+}
 
 export {
   walk,
@@ -211,4 +235,4 @@ export {
   uploadAll,
   processBuildOutput
 };
-//# sourceMappingURL=chunk-G6VPGDP6.mjs.map
+//# sourceMappingURL=chunk-DURAJQ3M.mjs.map

package/dist/build/{chunk-G6VPGDP6.mjs.map → chunk-DURAJQ3M.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../../src/build/walk.ts","../../src/build/inject.ts","../../src/build/upload.ts","../../src/build/sourcemaps.ts"],"sourcesContent":["/**\n * Build-time only. File-system walking for the source-map pipeline.\n * Pure Node 18+ (built-in `node:fs` only). Browser runtime never imports\n * this — it's behind a `./build/*` subpath that's marked Node-platform.\n */\n\nimport { readdirSync, statSync } from 'node:fs';\nimport { basename, join } from 'node:path';\n\n/** A bundle and its companion source map on disk. */\nexport interface BundlePair {\n  /** Absolute path to the JS bundle (`.js` / `.mjs` / `.cjs`). */\n  jsPath: string;\n  /** Absolute path to the matching `.map` file. */\n  mapPath: string;\n  /** Bare filename of the bundle (no directory), for log lines. */\n  bundleName: string;\n}\n\n/** Recursively list every file under `dir`. Symlinks are followed. */\nexport function walk(dir: string, out: string[] = []): string[] {\n  for (const name of readdirSync(dir)) {\n    const full = join(dir, name);\n    const st = statSync(full);\n    if (st.isDirectory()) walk(full, out);\n    else out.push(full);\n  }\n  return out;\n}\n\n/**\n * Returns every `(bundle, sourcemap)` pair under `root`.\n *\n * A pair is a `.js` / `.mjs` / `.cjs` file with a sibling file of the\n * same name plus a `.map` suffix — the convention every modern bundler\n * (Vite, Webpack, esbuild, Rollup, tsup) follows.\n */\nexport function findPairs(root: string): BundlePair[] {\n  const all = walk(root);\n  const maps = new Set(all.filter((p) => p.endsWith('.map')));\n  const pairs: BundlePair[] = [];\n  for (const js of all) {\n    if (!js.endsWith('.js') && !js.endsWith('.mjs') && !js.endsWith('.cjs')) continue;\n    const map = js + '.map';\n    if (maps.has(map)) {\n      pairs.push({ jsPath: js, mapPath: map, bundleName: basename(js) });\n    }\n  }\n  return pairs;\n}\n","/**\n * Debug-ID injection. Build-time only.\n *\n * For each `(bundle.js, bundle.js.map)` pair we:\n *   - Generate a stable per-bundle UUID (one already on the bundle is\n *     reused so re-running is idempotent).\n *   - Append `//# debugId=<uuid>` to the JS so the runtime resolver in\n *     `src/debug-id.ts` can read it back.\n *   - Write a top-level `debugId` field into the `.map` JSON so the\n *     symbolicator on the backend can join `bundle.js` ↔ `bundle.js.map`\n *     by ID rather than guessing from filenames.\n *\n * Bundlers re-write hashed filenames on every build, so joining by ID\n * (instead of by URL or path) is what makes resolved stack frames\n * survive across releases.\n */\n\nimport { readFileSync, writeFileSync } from 'node:fs';\nimport { randomUUID } from 'node:crypto';\n\nimport type { BundlePair } from './walk';\n\nconst DEBUG_ID_LINE_RE = /^\\/\\/# debugId=([0-9a-f-]{36})\\s*$/m;\nconst REGISTRATION_MARKER = '/*!__allstak_debug_id_registration__*/';\n\nfunction buildRegistrationSnippet(jsBody: string, debugId: string): string {\n  const isEsm = /\\bimport\\.meta\\b/.test(jsBody) || /^\\s*(?:import|export)\\b/m.test(jsBody);\n  if (isEsm) {\n    return `${REGISTRATION_MARKER}try{(globalThis._allstakDebugIds=globalThis._allstakDebugIds||{})[import.meta.url]=\"${debugId}\"}catch(_){}`;\n  }\n  return `${REGISTRATION_MARKER}(function(){try{var u=(typeof document!==\"undefined\"&&document.currentScript&&document.currentScript.src)||(typeof location!==\"undefined\"?location.href:\"\");(globalThis._allstakDebugIds=globalThis._allstakDebugIds||{})[u]=\"${debugId}\"}catch(_){}})();`;\n}\n\nfunction stripRegistration(js: string): string {\n  const lineRe = new RegExp(\n    '^' + REGISTRATION_MARKER.replace(/[/*!]/g, (c) => '\\\\' + c) + '.*$',\n    'm',\n  );\n  return js.replace(lineRe, '');\n}\n\n/** Outcome of injecting one pair. */\nexport interface InjectResult {\n  /** UUID injected (or reused) for this bundle. */\n  debugId: string;\n  /** True if the bundle already had a debugId — we reused it. */\n  reused: boolean;\n}\n\n/**\n * Inject (or reuse) the debug ID for a single bundle/sourcemap pair.\n * Mutates both files on disk. Pure synchronous Node — safe to call from\n * a Vite `closeBundle` or Webpack `afterEmit` hook.\n */\nexport function injectPair(p: BundlePair): InjectResult {\n  const jsRaw = readFileSync(p.jsPath, 'utf8');\n  const mapRaw = readFileSync(p.mapPath, 'utf8');\n  const map = JSON.parse(mapRaw) as { debugId?: unknown; [k: string]: unknown };\n\n  let debugId = typeof map.debugId === 'string' ? map.debugId : '';\n  const existing = DEBUG_ID_LINE_RE.exec(jsRaw);\n  if (existing && existing[1]) debugId = debugId || existing[1];\n  const reused = !!debugId;\n  if (!debugId) debugId = randomUUID();\n\n  map.debugId = debugId;\n  writeFileSync(p.mapPath, JSON.stringify(map));\n\n  let jsOut = stripRegistration(jsRaw.replace(DEBUG_ID_LINE_RE, ''));\n  jsOut = jsOut.replace(/\\s+$/, '');\n  jsOut += `\\n${buildRegistrationSnippet(jsOut, debugId)}\\n//# debugId=${debugId}\\n`;\n  writeFileSync(p.jsPath, jsOut);\n\n  return { debugId, reused };\n}\n\n/** Inject every pair under `root`. Returns one record per pair. */\nexport function injectAll(pairs: BundlePair[]): Array<{ pair: BundlePair; result: InjectResult }> {\n  return pairs.map((pair) => ({ pair, result: injectPair(pair) }));\n}\n\n/** Read a debug ID back from a `.map` file. */\nexport function readDebugIdFromMap(mapPath: string): string | null {\n  const json = JSON.parse(readFileSync(mapPath, 'utf8')) as { debugId?: unknown };\n  return typeof json.debugId === 'string' ? json.debugId : null;\n}\n","/**\n * Source-map / bundle upload client. Build-time only.\n *\n * Wraps the AllStak `/api/v1/artifacts/upload` endpoint with multipart\n * form data and best-effort retries. Pure Node 18+ (uses the global\n * `fetch` and `FormData`), no third-party HTTP client required.\n *\n * Auth: `X-AllStak-Upload-Token` header (NOT the runtime API key —\n * uploads have a dedicated, narrower scope. Generate one in the\n * dashboard → Project Settings → Upload Tokens).\n */\n\nimport { readFileSync } from 'node:fs';\nimport { basename } from 'node:path';\n\nimport type { BundlePair } from './walk';\nimport { readDebugIdFromMap } from './inject';\n\n/** Default ingest host — overridden via `host` option or `ALLSTAK_HOST`. */\nexport const DEFAULT_HOST = 'https://api.allstak.sa';\n\n/** Options for {@link uploadAll} / {@link uploadPair}. */\nexport interface UploadOptions {\n  /** Release identifier, e.g. `myapp@1.4.2`. Required server-side. */\n  release: string;\n  /** Optional distribution tag (`web`, `ios-hermes`, `staging`, …). */\n  dist?: string;\n  /** AllStak ingest host (default `https://api.allstak.sa`). */\n  host?: string;\n  /** Project upload token (`aspk_…`). May come from `ALLSTAK_UPLOAD_TOKEN`. */\n  token: string;\n  /**\n   * Drop `sourcesContent` from the map before upload (smaller payload).\n   * Off by default — sourcesContent enables full-source rendering on the\n   * dashboard. Turn on if you don't want source code uploaded.\n   */\n  stripSources?: boolean;\n  /** Also upload the JS bundle alongside the map (off by default). */\n  uploadBundles?: boolean;\n}\n\n/** One artifact upload result. */\nexport interface UploadResult {\n  bundleName: string;\n  debugId: string;\n  /** True when both the map (and bundle, if requested) uploaded OK. */\n  ok: boolean;\n  /** Per-artifact responses, in the order we sent them. */\n  steps: Array<{\n    type: 'sourcemap' | 'bundle';\n    status: number;\n    sha8: string;\n    body?: string;\n  }>;\n}\n\ninterface OneStepResult {\n  status: number;\n  body: string;\n  ok: boolean;\n}\n\nasync function uploadOne(\n  type: 'sourcemap' | 'bundle',\n  filePath: string,\n  debugId: string,\n  opts: Required<Pick<UploadOptions, 'release' | 'host' | 'token'>> &\n    Pick<UploadOptions, 'dist' | 'stripSources'>,\n): Promise<OneStepResult> {\n  let buf = readFileSync(filePath);\n  if (type === 'sourcemap' && opts.stripSources) {\n    const json = JSON.parse(buf.toString('utf8')) as { sourcesContent?: unknown };\n    if (Array.isArray(json.sourcesContent)) delete json.sourcesContent;\n    buf = Buffer.from(JSON.stringify(json));\n  }\n\n  const form = new FormData();\n  form.append('debugId', debugId);\n  form.append('type', type);\n  form.append('release', opts.release);\n  if (opts.dist) form.append('dist', opts.dist);\n  form.append(\n    'file',\n    new Blob([buf], {\n      type: type === 'sourcemap' ? 'application/json' : 'application/javascript',\n    }),\n    basename(filePath),\n  );\n\n  const res = await fetch(opts.host.replace(/\\/$/, '') + '/api/v1/artifacts/upload', {\n    method: 'POST',\n    headers: { 'X-AllStak-Upload-Token': opts.token },\n    body: form,\n  });\n  return { status: res.status, body: await res.text(), ok: res.ok };\n}\n\nfunction sha8(buf: Buffer): string {\n  // Browser/Node fallback — keeps this file pure-JS (no node:crypto in\n  // the public surface). Caller doesn't need cryptographic strength;\n  // this is for log identification only.\n  let hash = 0;\n  for (let i = 0; i < buf.length; i++) hash = ((hash << 5) - hash + buf[i]!) | 0;\n  return (hash >>> 0).toString(16).padStart(8, '0');\n}\n\n/** Upload one bundle/map pair. The map is always uploaded; bundle is opt-in. */\nexport async function uploadPair(p: BundlePair, opts: UploadOptions): Promise<UploadResult> {\n  const debugId = readDebugIdFromMap(p.mapPath);\n  if (!debugId) {\n    return {\n      bundleName: p.bundleName,\n      debugId: '',\n      ok: false,\n      steps: [{\n        type: 'sourcemap',\n        status: 0,\n        sha8: '',\n        body: `[allstak/upload] no debugId in ${p.mapPath} — run inject first`,\n      }],\n    };\n  }\n  const merged = {\n    release: opts.release,\n    host: opts.host ?? process.env.ALLSTAK_HOST ?? DEFAULT_HOST,\n    token: opts.token,\n    dist: opts.dist,\n    stripSources: opts.stripSources,\n  };\n\n  const steps: UploadResult['steps'] = [];\n  const mapResult = await uploadOne('sourcemap', p.mapPath, debugId, merged);\n  steps.push({\n    type: 'sourcemap',\n    status: mapResult.status,\n    sha8: sha8(readFileSync(p.mapPath)),\n    body: mapResult.ok ? undefined : mapResult.body,\n  });\n\n  let allOk = mapResult.ok;\n  if (opts.uploadBundles) {\n    const bundleResult = await uploadOne('bundle', p.jsPath, debugId, merged);\n    steps.push({\n      type: 'bundle',\n      status: bundleResult.status,\n      sha8: sha8(readFileSync(p.jsPath)),\n      body: bundleResult.ok ? undefined : bundleResult.body,\n    });\n    allOk = allOk && bundleResult.ok;\n  }\n\n  return { bundleName: p.bundleName, debugId, ok: allOk, steps };\n}\n\n/** Upload every pair in parallel. */\nexport async function uploadAll(\n  pairs: BundlePair[],\n  opts: UploadOptions,\n): Promise<UploadResult[]> {\n  return Promise.all(pairs.map((p) => uploadPair(p, opts)));\n}\n","/**\n * Programmatic source-map pipeline. Build-time only.\n *\n * The high-level \"do everything\" entry point Vite/Webpack/Next plugins\n * call. Walk the build output → inject debug IDs → upload artifacts.\n *\n *   import { processBuildOutput } from '@allstak/react/sourcemaps';\n *\n *   await processBuildOutput({\n *     dir: 'dist',\n *     release: 'web@1.4.2',\n *     token: process.env.ALLSTAK_UPLOAD_TOKEN!,\n *   });\n */\n\nexport type { BundlePair } from './walk';\nexport { findPairs, walk } from './walk';\nexport type { InjectResult } from './inject';\nexport { injectPair, injectAll, readDebugIdFromMap } from './inject';\nexport type { UploadOptions, UploadResult } from './upload';\nexport { uploadPair, uploadAll, DEFAULT_HOST } from './upload';\n\nimport { resolve } from 'node:path';\nimport { findPairs } from './walk';\nimport { injectAll } from './inject';\nimport { uploadAll, type UploadOptions, type UploadResult } from './upload';\n\n/** Options for {@link processBuildOutput}. */\nexport interface ProcessOptions extends Partial<UploadOptions> {\n  /** Build output directory to scan (e.g. `dist`, `.next/static`). */\n  dir: string;\n  /**\n   * If true, only inject debug IDs and skip upload. Useful for sample\n   * apps and CI dry-runs.\n   */\n  injectOnly?: boolean;\n  /** Suppress per-pair console output. Default false (you want to see this). */\n  silent?: boolean;\n}\n\n/** What `processBuildOutput` reports back. */\nexport interface ProcessReport {\n  /** Absolute output dir scanned. */\n  dir: string;\n  /** Pairs found. */\n  pairs: number;\n  /** Per-pair injection results (debugId + reused?). */\n  injected: Array<{ bundleName: string; debugId: string; reused: boolean }>;\n  /** Per-pair upload results, omitted when no token / `injectOnly: true`. */\n  uploaded?: UploadResult[];\n}\n\nexport async function processBuildOutput(opts: ProcessOptions): Promise<ProcessReport> {\n  const dir = resolve(opts.dir);\n  const pairs = findPairs(dir);\n  const log = opts.silent ? () => undefined : (m: string) => console.log(`[allstak/sourcemaps] ${m}`);\n\n  log(`scanning ${dir} — ${pairs.length} bundle/map pair(s)`);\n  if (pairs.length === 0) {\n    return { dir, pairs: 0, injected: [] };\n  }\n\n  const injectedRaw = injectAll(pairs);\n  const injected = injectedRaw.map(({ pair, result }) => ({\n    bundleName: pair.bundleName,\n    debugId: result.debugId,\n    reused: result.reused,\n  }));\n  for (const i of injected) {\n    log(`  ${i.bundleName}  ${i.debugId}  ${i.reused ? '(reused)' : '(new)'}`);\n  }\n\n  const token = opts.token ?? process.env.ALLSTAK_UPLOAD_TOKEN;\n  const release = opts.release ?? process.env.ALLSTAK_RELEASE;\n\n  if (opts.injectOnly || !token) {\n    if (!opts.injectOnly && !token) {\n      log('skipping upload — no token (set ALLSTAK_UPLOAD_TOKEN or pass `token`)');\n    }\n    return { dir, pairs: pairs.length, injected };\n  }\n  if (!release) {\n    log('skipping upload — no release (set ALLSTAK_RELEASE or pass `release`)');\n    return { dir, pairs: pairs.length, injected };\n  }\n\n  const uploaded = await uploadAll(pairs, {\n    ...opts,\n    release,\n    token,\n  });\n  for (const u of uploaded) {\n    if (u.ok) {\n      log(`  ${u.bundleName}  uploaded debugId=${u.debugId}`);\n    } else {\n      const last = u.steps[u.steps.length - 1];\n      log(`  ${u.bundleName}  FAIL status=${last?.status ?? '?'} body=${last?.body ?? ''}`);\n    }\n  }\n  return { dir, pairs: pairs.length, injected, uploaded };\n}\n"],"mappings":";AAMA,SAAS,aAAa,gBAAgB;AACtC,SAAS,UAAU,YAAY;AAaxB,SAAS,KAAK,KAAa,MAAgB,CAAC,GAAa;AAC9D,aAAW,QAAQ,YAAY,GAAG,GAAG;AACnC,UAAM,OAAO,KAAK,KAAK,IAAI;AAC3B,UAAM,KAAK,SAAS,IAAI;AACxB,QAAI,GAAG,YAAY,EAAG,MAAK,MAAM,GAAG;AAAA,QAC/B,KAAI,KAAK,IAAI;AAAA,EACpB;AACA,SAAO;AACT;AASO,SAAS,UAAU,MAA4B;AACpD,QAAM,MAAM,KAAK,IAAI;AACrB,QAAM,OAAO,IAAI,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM,CAAC,CAAC;AAC1D,QAAM,QAAsB,CAAC;AAC7B,aAAW,MAAM,KAAK;AACpB,QAAI,CAAC,GAAG,SAAS,KAAK,KAAK,CAAC,GAAG,SAAS,MAAM,KAAK,CAAC,GAAG,SAAS,MAAM,EAAG;AACzE,UAAM,MAAM,KAAK;AACjB,QAAI,KAAK,IAAI,GAAG,GAAG;AACjB,YAAM,KAAK,EAAE,QAAQ,IAAI,SAAS,KAAK,YAAY,SAAS,EAAE,EAAE,CAAC;AAAA,IACnE;AAAA,EACF;AACA,SAAO;AACT;;;AChCA,SAAS,cAAc,qBAAqB;AAC5C,SAAS,kBAAkB;AAI3B,IAAM,mBAAmB;AACzB,IAAM,sBAAsB;AAE5B,SAAS,yBAAyB,QAAgB,SAAyB;AACzE,QAAM,QAAQ,mBAAmB,KAAK,MAAM,KAAK,2BAA2B,KAAK,MAAM;AACvF,MAAI,OAAO;AACT,WAAO,GAAG,mBAAmB,uFAAuF,OAAO;AAAA,EAC7H;AACA,SAAO,GAAG,mBAAmB,iOAAiO,OAAO;AACvQ;AAEA,SAAS,kBAAkB,IAAoB;AAC7C,QAAM,SAAS,IAAI;AAAA,IACjB,MAAM,oBAAoB,QAAQ,UAAU,CAAC,MAAM,OAAO,CAAC,IAAI;AAAA,IAC/D;AAAA,EACF;AACA,SAAO,GAAG,QAAQ,QAAQ,EAAE;AAC9B;AAeO,SAAS,WAAW,GAA6B;AACtD,QAAM,QAAQ,aAAa,EAAE,QAAQ,MAAM;AAC3C,QAAM,SAAS,aAAa,EAAE,SAAS,MAAM;AAC7C,QAAM,MAAM,KAAK,MAAM,MAAM;AAE7B,MAAI,UAAU,OAAO,IAAI,YAAY,WAAW,IAAI,UAAU;AAC9D,QAAM,WAAW,iBAAiB,KAAK,KAAK;AAC5C,MAAI,YAAY,SAAS,CAAC,EAAG,WAAU,WAAW,SAAS,CAAC;AAC5D,QAAM,SAAS,CAAC,CAAC;AACjB,MAAI,CAAC,QAAS,WAAU,WAAW;AAEnC,MAAI,UAAU;AACd,gBAAc,EAAE,SAAS,KAAK,UAAU,GAAG,CAAC;AAE5C,MAAI,QAAQ,kBAAkB,MAAM,QAAQ,kBAAkB,EAAE,CAAC;AACjE,UAAQ,MAAM,QAAQ,QAAQ,EAAE;AAChC,WAAS;AAAA,EAAK,yBAAyB,OAAO,OAAO,CAAC;AAAA,cAAiB,OAAO;AAAA;AAC9E,gBAAc,EAAE,QAAQ,KAAK;AAE7B,SAAO,EAAE,SAAS,OAAO;AAC3B;AAGO,SAAS,UAAU,OAAwE;AAChG,SAAO,MAAM,IAAI,CAAC,UAAU,EAAE,MAAM,QAAQ,WAAW,IAAI,EAAE,EAAE;AACjE;AAGO,SAAS,mBAAmB,SAAgC;AACjE,QAAM,OAAO,KAAK,MAAM,aAAa,SAAS,MAAM,CAAC;AACrD,SAAO,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;AAC3D;;;ACzEA,SAAS,gBAAAA,qBAAoB;AAC7B,SAAS,YAAAC,iBAAgB;AAMlB,IAAM,eAAe;AA2C5B,eAAe,UACb,MACA,UACA,SACA,MAEwB;AACxB,MAAI,MAAMC,cAAa,QAAQ;AAC/B,MAAI,SAAS,eAAe,KAAK,cAAc;AAC7C,UAAM,OAAO,KAAK,MAAM,IAAI,SAAS,MAAM,CAAC;AAC5C,QAAI,MAAM,QAAQ,KAAK,cAAc,EAAG,QAAO,KAAK;AACpD,UAAM,OAAO,KAAK,KAAK,UAAU,IAAI,CAAC;AAAA,EACxC;AAEA,QAAM,OAAO,IAAI,SAAS;AAC1B,OAAK,OAAO,WAAW,OAAO;AAC9B,OAAK,OAAO,QAAQ,IAAI;AACxB,OAAK,OAAO,WAAW,KAAK,OAAO;AACnC,MAAI,KAAK,KAAM,MAAK,OAAO,QAAQ,KAAK,IAAI;AAC5C,OAAK;AAAA,IACH;AAAA,IACA,IAAI,KAAK,CAAC,GAAG,GAAG;AAAA,MACd,MAAM,SAAS,cAAc,qBAAqB;AAAA,IACpD,CAAC;AAAA,IACDC,UAAS,QAAQ;AAAA,EACnB;AAEA,QAAM,MAAM,MAAM,MAAM,KAAK,KAAK,QAAQ,OAAO,EAAE,IAAI,4BAA4B;AAAA,IACjF,QAAQ;AAAA,IACR,SAAS,EAAE,0BAA0B,KAAK,MAAM;AAAA,IAChD,MAAM;AAAA,EACR,CAAC;AACD,SAAO,EAAE,QAAQ,IAAI,QAAQ,MAAM,MAAM,IAAI,KAAK,GAAG,IAAI,IAAI,GAAG;AAClE;AAEA,SAAS,KAAK,KAAqB;AAIjC,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,SAAS,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAM;AAC7E,UAAQ,SAAS,GAAG,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAClD;AAGA,eAAsB,WAAW,GAAe,MAA4C;AAC1F,QAAM,UAAU,mBAAmB,EAAE,OAAO;AAC5C,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,MACL,YAAY,EAAE;AAAA,MACd,SAAS;AAAA,MACT,IAAI;AAAA,MACJ,OAAO,CAAC;AAAA,QACN,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,MAAM,kCAAkC,EAAE,OAAO;AAAA,MACnD,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,SAAS;AAAA,IACb,SAAS,KAAK;AAAA,IACd,MAAM,KAAK,QAAQ,QAAQ,IAAI,gBAAgB;AAAA,IAC/C,OAAO,KAAK;AAAA,IACZ,MAAM,KAAK;AAAA,IACX,cAAc,KAAK;AAAA,EACrB;AAEA,QAAM,QAA+B,CAAC;AACtC,QAAM,YAAY,MAAM,UAAU,aAAa,EAAE,SAAS,SAAS,MAAM;AACzE,QAAM,KAAK;AAAA,IACT,MAAM;AAAA,IACN,QAAQ,UAAU;AAAA,IAClB,MAAM,KAAKD,cAAa,EAAE,OAAO,CAAC;AAAA,IAClC,MAAM,UAAU,KAAK,SAAY,UAAU;AAAA,EAC7C,CAAC;AAED,MAAI,QAAQ,UAAU;AACtB,MAAI,KAAK,eAAe;AACtB,UAAM,eAAe,MAAM,UAAU,UAAU,EAAE,QAAQ,SAAS,MAAM;AACxE,UAAM,KAAK;AAAA,MACT,MAAM;AAAA,MACN,QAAQ,aAAa;AAAA,MACrB,MAAM,KAAKA,cAAa,EAAE,MAAM,CAAC;AAAA,MACjC,MAAM,aAAa,KAAK,SAAY,aAAa;AAAA,IACnD,CAAC;AACD,YAAQ,SAAS,aAAa;AAAA,EAChC;AAEA,SAAO,EAAE,YAAY,EAAE,YAAY,SAAS,IAAI,OAAO,MAAM;AAC/D;AAGA,eAAsB,UACpB,OACA,MACyB;AACzB,SAAO,QAAQ,IAAI,MAAM,IAAI,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC;AAC1D;;;AC1IA,SAAS,eAAe;AA8BxB,eAAsB,mBAAmB,MAA8C;AACrF,QAAM,MAAM,QAAQ,KAAK,GAAG;AAC5B,QAAM,QAAQ,UAAU,GAAG;AAC3B,QAAM,MAAM,KAAK,SAAS,MAAM,SAAY,CAAC,MAAc,QAAQ,IAAI,wBAAwB,CAAC,EAAE;AAElG,MAAI,YAAY,GAAG,WAAM,MAAM,MAAM,qBAAqB;AAC1D,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,EAAE,KAAK,OAAO,GAAG,UAAU,CAAC,EAAE;AAAA,EACvC;AAEA,QAAM,cAAc,UAAU,KAAK;AACnC,QAAM,WAAW,YAAY,IAAI,CAAC,EAAE,MAAM,OAAO,OAAO;AAAA,IACtD,YAAY,KAAK;AAAA,IACjB,SAAS,OAAO;AAAA,IAChB,QAAQ,OAAO;AAAA,EACjB,EAAE;AACF,aAAW,KAAK,UAAU;AACxB,QAAI,KAAK,EAAE,UAAU,KAAK,EAAE,OAAO,KAAK,EAAE,SAAS,aAAa,OAAO,EAAE;AAAA,EAC3E;AAEA,QAAM,QAAQ,KAAK,SAAS,QAAQ,IAAI;AACxC,QAAM,UAAU,KAAK,WAAW,QAAQ,IAAI;AAE5C,MAAI,KAAK,cAAc,CAAC,OAAO;AAC7B,QAAI,CAAC,KAAK,cAAc,CAAC,OAAO;AAC9B,UAAI,4EAAuE;AAAA,IAC7E;AACA,WAAO,EAAE,KAAK,OAAO,MAAM,QAAQ,SAAS;AAAA,EAC9C;AACA,MAAI,CAAC,SAAS;AACZ,QAAI,2EAAsE;AAC1E,WAAO,EAAE,KAAK,OAAO,MAAM,QAAQ,SAAS;AAAA,EAC9C;AAEA,QAAM,WAAW,MAAM,UAAU,OAAO;AAAA,IACtC,GAAG;AAAA,IACH;AAAA,IACA;AAAA,EACF,CAAC;AACD,aAAW,KAAK,UAAU;AACxB,QAAI,EAAE,IAAI;AACR,UAAI,KAAK,EAAE,UAAU,sBAAsB,EAAE,OAAO,EAAE;AAAA,IACxD,OAAO;AACL,YAAM,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACvC,UAAI,KAAK,EAAE,UAAU,iBAAiB,MAAM,UAAU,GAAG,SAAS,MAAM,QAAQ,EAAE,EAAE;AAAA,IACtF;AAAA,EACF;AACA,SAAO,EAAE,KAAK,OAAO,MAAM,QAAQ,UAAU,SAAS;AACxD;","names":["readFileSync","basename","readFileSync","basename"]}
+{"version":3,"sources":["../../src/build/walk.ts","../../src/build/inject.ts","../../src/build/upload.ts","../../src/build/sourcemaps.ts"],"sourcesContent":["/**\n * Build-time only. File-system walking for the source-map pipeline.\n * Pure Node 18+ (built-in `node:fs` only). Browser runtime never imports\n * this — it's behind a `./build/*` subpath that's marked Node-platform.\n */\n\nimport { readdirSync, statSync } from 'node:fs';\nimport { basename, join } from 'node:path';\n\n/** A bundle and its companion source map on disk. */\nexport interface BundlePair {\n  /** Absolute path to the JS bundle (`.js` / `.mjs` / `.cjs`). */\n  jsPath: string;\n  /** Absolute path to the matching `.map` file. */\n  mapPath: string;\n  /** Bare filename of the bundle (no directory), for log lines. */\n  bundleName: string;\n}\n\n/** Recursively list every file under `dir`. Symlinks are followed. */\nexport function walk(dir: string, out: string[] = []): string[] {\n  for (const name of readdirSync(dir)) {\n    const full = join(dir, name);\n    const st = statSync(full);\n    if (st.isDirectory()) walk(full, out);\n    else out.push(full);\n  }\n  return out;\n}\n\n/**\n * Returns every `(bundle, sourcemap)` pair under `root`.\n *\n * A pair is a `.js` / `.mjs` / `.cjs` file with a sibling file of the\n * same name plus a `.map` suffix — the convention every modern bundler\n * (Vite, Webpack, esbuild, Rollup, tsup) follows.\n */\nexport function findPairs(root: string): BundlePair[] {\n  const all = walk(root);\n  const maps = new Set(all.filter((p) => p.endsWith('.map')));\n  const pairs: BundlePair[] = [];\n  for (const js of all) {\n    if (!js.endsWith('.js') && !js.endsWith('.mjs') && !js.endsWith('.cjs')) continue;\n    const map = js + '.map';\n    if (maps.has(map)) {\n      pairs.push({ jsPath: js, mapPath: map, bundleName: basename(js) });\n    }\n  }\n  return pairs;\n}\n","/**\n * Debug-ID injection. Build-time only.\n *\n * For each `(bundle.js, bundle.js.map)` pair we:\n *   - Generate a stable per-bundle UUID (one already on the bundle is\n *     reused so re-running is idempotent).\n *   - Append `//# debugId=<uuid>` to the JS so the runtime resolver in\n *     `src/debug-id.ts` can read it back.\n *   - Write a top-level `debugId` field into the `.map` JSON so the\n *     symbolicator on the backend can join `bundle.js` ↔ `bundle.js.map`\n *     by ID rather than guessing from filenames.\n *\n * Bundlers re-write hashed filenames on every build, so joining by ID\n * (instead of by URL or path) is what makes resolved stack frames\n * survive across releases.\n */\n\nimport { readFileSync, writeFileSync } from 'node:fs';\nimport { randomUUID } from 'node:crypto';\n\nimport type { BundlePair } from './walk';\n\nconst DEBUG_ID_LINE_RE = /^\\/\\/# debugId=([0-9a-f-]{36})\\s*$/m;\nconst REGISTRATION_MARKER = '/*!__allstak_debug_id_registration__*/';\n\nfunction buildRegistrationSnippet(jsBody: string, debugId: string): string {\n  const isEsm = /\\bimport\\.meta\\b/.test(jsBody) || /^\\s*(?:import|export)\\b/m.test(jsBody);\n  if (isEsm) {\n    return `${REGISTRATION_MARKER}try{(globalThis._allstakDebugIds=globalThis._allstakDebugIds||{})[import.meta.url]=\"${debugId}\"}catch(_){}`;\n  }\n  return `${REGISTRATION_MARKER}(function(){try{var u=(typeof document!==\"undefined\"&&document.currentScript&&document.currentScript.src)||(typeof location!==\"undefined\"?location.href:\"\");(globalThis._allstakDebugIds=globalThis._allstakDebugIds||{})[u]=\"${debugId}\"}catch(_){}})();`;\n}\n\nfunction stripRegistration(js: string): string {\n  const lineRe = new RegExp(\n    '^' + REGISTRATION_MARKER.replace(/[/*!]/g, (c) => '\\\\' + c) + '.*$',\n    'm',\n  );\n  return js.replace(lineRe, '');\n}\n\n/** Outcome of injecting one pair. */\nexport interface InjectResult {\n  /** UUID injected (or reused) for this bundle. */\n  debugId: string;\n  /** True if the bundle already had a debugId — we reused it. */\n  reused: boolean;\n}\n\n/**\n * Inject (or reuse) the debug ID for a single bundle/sourcemap pair.\n * Mutates both files on disk. Pure synchronous Node — safe to call from\n * a Vite `closeBundle` or Webpack `afterEmit` hook.\n */\nexport function injectPair(p: BundlePair): InjectResult {\n  const jsRaw = readFileSync(p.jsPath, 'utf8');\n  const mapRaw = readFileSync(p.mapPath, 'utf8');\n  const map = JSON.parse(mapRaw) as { debugId?: unknown; [k: string]: unknown };\n\n  let debugId = typeof map.debugId === 'string' ? map.debugId : '';\n  const existing = DEBUG_ID_LINE_RE.exec(jsRaw);\n  if (existing && existing[1]) debugId = debugId || existing[1];\n  const reused = !!debugId;\n  if (!debugId) debugId = randomUUID();\n\n  map.debugId = debugId;\n  writeFileSync(p.mapPath, JSON.stringify(map));\n\n  let jsOut = stripRegistration(jsRaw.replace(DEBUG_ID_LINE_RE, ''));\n  jsOut = jsOut.replace(/\\s+$/, '');\n  jsOut += `\\n${buildRegistrationSnippet(jsOut, debugId)}\\n//# debugId=${debugId}\\n`;\n  writeFileSync(p.jsPath, jsOut);\n\n  return { debugId, reused };\n}\n\n/** Inject every pair under `root`. Returns one record per pair. */\nexport function injectAll(pairs: BundlePair[]): Array<{ pair: BundlePair; result: InjectResult }> {\n  return pairs.map((pair) => ({ pair, result: injectPair(pair) }));\n}\n\n/** Read a debug ID back from a `.map` file. */\nexport function readDebugIdFromMap(mapPath: string): string | null {\n  const json = JSON.parse(readFileSync(mapPath, 'utf8')) as { debugId?: unknown };\n  return typeof json.debugId === 'string' ? json.debugId : null;\n}\n","/**\n * Source-map / bundle upload client. Build-time only.\n *\n * Wraps the AllStak `/api/v1/artifacts/upload` endpoint with multipart\n * form data and best-effort retries. Pure Node 18+ (uses the global\n * `fetch` and `FormData`), no third-party HTTP client required.\n *\n * Auth: `X-AllStak-Upload-Token` header (NOT the runtime API key —\n * uploads have a dedicated, narrower scope. Generate one in the\n * dashboard → Project Settings → Upload Tokens).\n */\n\nimport { readFileSync } from 'node:fs';\nimport { basename } from 'node:path';\n\nimport type { BundlePair } from './walk';\nimport { readDebugIdFromMap } from './inject';\n\n/** Default ingest host — overridden via `host` option or `ALLSTAK_HOST`. */\nexport const DEFAULT_HOST = 'https://api.allstak.sa';\n\n/** Options for {@link uploadAll} / {@link uploadPair}. */\nexport interface UploadOptions {\n  /** Release identifier, e.g. `myapp@1.4.2`. Required server-side. */\n  release: string;\n  /** Optional distribution tag (`web`, `ios-hermes`, `staging`, …). */\n  dist?: string;\n  /** AllStak ingest host (default `https://api.allstak.sa`). */\n  host?: string;\n  /** Project upload token (`aspk_…`). May come from `ALLSTAK_UPLOAD_TOKEN`. */\n  token: string;\n  /**\n   * Drop `sourcesContent` from the map before upload (smaller payload).\n   * Off by default — sourcesContent enables full-source rendering on the\n   * dashboard. Turn on if you don't want source code uploaded.\n   */\n  stripSources?: boolean;\n  /** Also upload the JS bundle alongside the map (off by default). */\n  uploadBundles?: boolean;\n}\n\n/** One artifact upload result. */\nexport interface UploadResult {\n  bundleName: string;\n  debugId: string;\n  /** True when both the map (and bundle, if requested) uploaded OK. */\n  ok: boolean;\n  /** Per-artifact responses, in the order we sent them. */\n  steps: Array<{\n    type: 'sourcemap' | 'bundle';\n    status: number;\n    sha8: string;\n    body?: string;\n  }>;\n}\n\ninterface OneStepResult {\n  status: number;\n  body: string;\n  ok: boolean;\n}\n\nasync function uploadOne(\n  type: 'sourcemap' | 'bundle',\n  filePath: string,\n  debugId: string,\n  opts: Required<Pick<UploadOptions, 'release' | 'host' | 'token'>> &\n    Pick<UploadOptions, 'dist' | 'stripSources'>,\n): Promise<OneStepResult> {\n  let buf = readFileSync(filePath);\n  if (type === 'sourcemap' && opts.stripSources) {\n    const json = JSON.parse(buf.toString('utf8')) as { sourcesContent?: unknown };\n    if (Array.isArray(json.sourcesContent)) delete json.sourcesContent;\n    buf = Buffer.from(JSON.stringify(json));\n  }\n\n  const form = new FormData();\n  form.append('debugId', debugId);\n  form.append('type', type);\n  form.append('release', opts.release);\n  if (opts.dist) form.append('dist', opts.dist);\n  form.append(\n    'file',\n    new Blob([buf], {\n      type: type === 'sourcemap' ? 'application/json' : 'application/javascript',\n    }),\n    basename(filePath),\n  );\n\n  const res = await fetch(opts.host.replace(/\\/$/, '') + '/api/v1/artifacts/upload', {\n    method: 'POST',\n    headers: { 'X-AllStak-Upload-Token': opts.token },\n    body: form,\n  });\n  return { status: res.status, body: await res.text(), ok: res.ok };\n}\n\nfunction sha8(buf: Buffer): string {\n  // Browser/Node fallback — keeps this file pure-JS (no node:crypto in\n  // the public surface). Caller doesn't need cryptographic strength;\n  // this is for log identification only.\n  let hash = 0;\n  for (let i = 0; i < buf.length; i++) hash = ((hash << 5) - hash + buf[i]!) | 0;\n  return (hash >>> 0).toString(16).padStart(8, '0');\n}\n\n/** Upload one bundle/map pair. The map is always uploaded; bundle is opt-in. */\nexport async function uploadPair(p: BundlePair, opts: UploadOptions): Promise<UploadResult> {\n  const debugId = readDebugIdFromMap(p.mapPath);\n  if (!debugId) {\n    return {\n      bundleName: p.bundleName,\n      debugId: '',\n      ok: false,\n      steps: [{\n        type: 'sourcemap',\n        status: 0,\n        sha8: '',\n        body: `[allstak/upload] no debugId in ${p.mapPath} — run inject first`,\n      }],\n    };\n  }\n  const merged = {\n    release: opts.release,\n    host: opts.host ?? process.env.ALLSTAK_HOST ?? DEFAULT_HOST,\n    token: opts.token,\n    dist: opts.dist,\n    stripSources: opts.stripSources,\n  };\n\n  const steps: UploadResult['steps'] = [];\n  const mapResult = await uploadOne('sourcemap', p.mapPath, debugId, merged);\n  steps.push({\n    type: 'sourcemap',\n    status: mapResult.status,\n    sha8: sha8(readFileSync(p.mapPath)),\n    body: mapResult.ok ? undefined : mapResult.body,\n  });\n\n  let allOk = mapResult.ok;\n  if (opts.uploadBundles) {\n    const bundleResult = await uploadOne('bundle', p.jsPath, debugId, merged);\n    steps.push({\n      type: 'bundle',\n      status: bundleResult.status,\n      sha8: sha8(readFileSync(p.jsPath)),\n      body: bundleResult.ok ? undefined : bundleResult.body,\n    });\n    allOk = allOk && bundleResult.ok;\n  }\n\n  return { bundleName: p.bundleName, debugId, ok: allOk, steps };\n}\n\n/** Upload every pair in parallel. */\nexport async function uploadAll(\n  pairs: BundlePair[],\n  opts: UploadOptions,\n): Promise<UploadResult[]> {\n  return Promise.all(pairs.map((p) => uploadPair(p, opts)));\n}\n","/**\n * Programmatic source-map pipeline. Build-time only.\n *\n * The high-level \"do everything\" entry point Vite/Webpack/Next plugins\n * call. Walk the build output → inject debug IDs → upload artifacts.\n *\n *   import { processBuildOutput } from '@allstak/react/sourcemaps';\n *\n *   await processBuildOutput({\n *     dir: 'dist',\n *     release: 'web@1.4.2',\n *     token: process.env.ALLSTAK_UPLOAD_TOKEN!,\n *   });\n */\n\nexport type { BundlePair } from './walk';\nexport { findPairs, walk } from './walk';\nexport type { InjectResult } from './inject';\nexport { injectPair, injectAll, readDebugIdFromMap } from './inject';\nexport type { UploadOptions, UploadResult } from './upload';\nexport { uploadPair, uploadAll, DEFAULT_HOST } from './upload';\n\nimport { resolve } from 'node:path';\nimport { existsSync, readFileSync } from 'node:fs';\nimport { findPairs } from './walk';\nimport { injectAll } from './inject';\nimport { uploadAll, type UploadOptions, type UploadResult } from './upload';\n\n/** Options for {@link processBuildOutput}. */\nexport interface ProcessOptions extends Partial<UploadOptions> {\n  /** Build output directory to scan (e.g. `dist`, `.next/static`). */\n  dir: string;\n  /**\n   * If true, only inject debug IDs and skip upload. Useful for sample\n   * apps and CI dry-runs.\n   */\n  injectOnly?: boolean;\n  /** Suppress per-pair console output. Default false (you want to see this). */\n  silent?: boolean;\n}\n\n/** What `processBuildOutput` reports back. */\nexport interface ProcessReport {\n  /** Absolute output dir scanned. */\n  dir: string;\n  /** Pairs found. */\n  pairs: number;\n  /** Per-pair injection results (debugId + reused?). */\n  injected: Array<{ bundleName: string; debugId: string; reused: boolean }>;\n  /** Per-pair upload results, omitted when no token / `injectOnly: true`. */\n  uploaded?: UploadResult[];\n}\n\nexport async function processBuildOutput(opts: ProcessOptions): Promise<ProcessReport> {\n  const dir = resolve(opts.dir);\n  const pairs = findPairs(dir);\n  const log = opts.silent ? () => undefined : (m: string) => console.log(`[allstak/sourcemaps] ${m}`);\n\n  log(`scanning ${dir} — ${pairs.length} bundle/map pair(s)`);\n  if (pairs.length === 0) {\n    return { dir, pairs: 0, injected: [] };\n  }\n\n  const injectedRaw = injectAll(pairs);\n  const injected = injectedRaw.map(({ pair, result }) => ({\n    bundleName: pair.bundleName,\n    debugId: result.debugId,\n    reused: result.reused,\n  }));\n  for (const i of injected) {\n    log(`  ${i.bundleName}  ${i.debugId}  ${i.reused ? '(reused)' : '(new)'}`);\n  }\n\n  const env = loadAllStakEnv();\n  const token = opts.token ?? env.ALLSTAK_UPLOAD_TOKEN;\n  const release = opts.release ?? env.ALLSTAK_RELEASE;\n  const host = opts.host ?? env.ALLSTAK_HOST;\n  const dist = opts.dist ?? env.ALLSTAK_DIST;\n\n  if (opts.injectOnly || !token) {\n    if (!opts.injectOnly && !token) {\n      log('skipping upload — no token (set ALLSTAK_UPLOAD_TOKEN or pass `token`)');\n    }\n    return { dir, pairs: pairs.length, injected };\n  }\n  if (!release) {\n    log('skipping upload — no release (set ALLSTAK_RELEASE or pass `release`)');\n    return { dir, pairs: pairs.length, injected };\n  }\n\n  const uploaded = await uploadAll(pairs, {\n    ...opts,\n    release,\n    token,\n    host,\n    dist,\n  });\n  for (const u of uploaded) {\n    if (u.ok) {\n      log(`  ${u.bundleName}  uploaded debugId=${u.debugId}`);\n    } else {\n      const last = u.steps[u.steps.length - 1];\n      log(`  ${u.bundleName}  FAIL status=${last?.status ?? '?'} body=${last?.body ?? ''}`);\n    }\n  }\n  return { dir, pairs: pairs.length, injected, uploaded };\n}\n\nfunction loadAllStakEnv(): Record<string, string | undefined> {\n  const out: Record<string, string | undefined> = { ...process.env };\n  for (const file of ['.env.local', '.env']) {\n    const full = resolve(process.cwd(), file);\n    if (!existsSync(full)) continue;\n    const text = readFileSync(full, 'utf8');\n    for (const line of text.split(/\\r?\\n/)) {\n      const trimmed = line.trim();\n      if (!trimmed || trimmed.startsWith('#')) continue;\n      const match = /^([A-Z0-9_]+)\\s*=\\s*(.*)$/.exec(trimmed);\n      if (!match) continue;\n      const key = match[1]!;\n      if (out[key] !== undefined) continue;\n      out[key] = match[2]!.replace(/^['\"]|['\"]$/g, '');\n    }\n  }\n  return out;\n}\n"],"mappings":";AAMA,SAAS,aAAa,gBAAgB;AACtC,SAAS,UAAU,YAAY;AAaxB,SAAS,KAAK,KAAa,MAAgB,CAAC,GAAa;AAC9D,aAAW,QAAQ,YAAY,GAAG,GAAG;AACnC,UAAM,OAAO,KAAK,KAAK,IAAI;AAC3B,UAAM,KAAK,SAAS,IAAI;AACxB,QAAI,GAAG,YAAY,EAAG,MAAK,MAAM,GAAG;AAAA,QAC/B,KAAI,KAAK,IAAI;AAAA,EACpB;AACA,SAAO;AACT;AASO,SAAS,UAAU,MAA4B;AACpD,QAAM,MAAM,KAAK,IAAI;AACrB,QAAM,OAAO,IAAI,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM,CAAC,CAAC;AAC1D,QAAM,QAAsB,CAAC;AAC7B,aAAW,MAAM,KAAK;AACpB,QAAI,CAAC,GAAG,SAAS,KAAK,KAAK,CAAC,GAAG,SAAS,MAAM,KAAK,CAAC,GAAG,SAAS,MAAM,EAAG;AACzE,UAAM,MAAM,KAAK;AACjB,QAAI,KAAK,IAAI,GAAG,GAAG;AACjB,YAAM,KAAK,EAAE,QAAQ,IAAI,SAAS,KAAK,YAAY,SAAS,EAAE,EAAE,CAAC;AAAA,IACnE;AAAA,EACF;AACA,SAAO;AACT;;;AChCA,SAAS,cAAc,qBAAqB;AAC5C,SAAS,kBAAkB;AAI3B,IAAM,mBAAmB;AACzB,IAAM,sBAAsB;AAE5B,SAAS,yBAAyB,QAAgB,SAAyB;AACzE,QAAM,QAAQ,mBAAmB,KAAK,MAAM,KAAK,2BAA2B,KAAK,MAAM;AACvF,MAAI,OAAO;AACT,WAAO,GAAG,mBAAmB,uFAAuF,OAAO;AAAA,EAC7H;AACA,SAAO,GAAG,mBAAmB,iOAAiO,OAAO;AACvQ;AAEA,SAAS,kBAAkB,IAAoB;AAC7C,QAAM,SAAS,IAAI;AAAA,IACjB,MAAM,oBAAoB,QAAQ,UAAU,CAAC,MAAM,OAAO,CAAC,IAAI;AAAA,IAC/D;AAAA,EACF;AACA,SAAO,GAAG,QAAQ,QAAQ,EAAE;AAC9B;AAeO,SAAS,WAAW,GAA6B;AACtD,QAAM,QAAQ,aAAa,EAAE,QAAQ,MAAM;AAC3C,QAAM,SAAS,aAAa,EAAE,SAAS,MAAM;AAC7C,QAAM,MAAM,KAAK,MAAM,MAAM;AAE7B,MAAI,UAAU,OAAO,IAAI,YAAY,WAAW,IAAI,UAAU;AAC9D,QAAM,WAAW,iBAAiB,KAAK,KAAK;AAC5C,MAAI,YAAY,SAAS,CAAC,EAAG,WAAU,WAAW,SAAS,CAAC;AAC5D,QAAM,SAAS,CAAC,CAAC;AACjB,MAAI,CAAC,QAAS,WAAU,WAAW;AAEnC,MAAI,UAAU;AACd,gBAAc,EAAE,SAAS,KAAK,UAAU,GAAG,CAAC;AAE5C,MAAI,QAAQ,kBAAkB,MAAM,QAAQ,kBAAkB,EAAE,CAAC;AACjE,UAAQ,MAAM,QAAQ,QAAQ,EAAE;AAChC,WAAS;AAAA,EAAK,yBAAyB,OAAO,OAAO,CAAC;AAAA,cAAiB,OAAO;AAAA;AAC9E,gBAAc,EAAE,QAAQ,KAAK;AAE7B,SAAO,EAAE,SAAS,OAAO;AAC3B;AAGO,SAAS,UAAU,OAAwE;AAChG,SAAO,MAAM,IAAI,CAAC,UAAU,EAAE,MAAM,QAAQ,WAAW,IAAI,EAAE,EAAE;AACjE;AAGO,SAAS,mBAAmB,SAAgC;AACjE,QAAM,OAAO,KAAK,MAAM,aAAa,SAAS,MAAM,CAAC;AACrD,SAAO,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;AAC3D;;;ACzEA,SAAS,gBAAAA,qBAAoB;AAC7B,SAAS,YAAAC,iBAAgB;AAMlB,IAAM,eAAe;AA2C5B,eAAe,UACb,MACA,UACA,SACA,MAEwB;AACxB,MAAI,MAAMC,cAAa,QAAQ;AAC/B,MAAI,SAAS,eAAe,KAAK,cAAc;AAC7C,UAAM,OAAO,KAAK,MAAM,IAAI,SAAS,MAAM,CAAC;AAC5C,QAAI,MAAM,QAAQ,KAAK,cAAc,EAAG,QAAO,KAAK;AACpD,UAAM,OAAO,KAAK,KAAK,UAAU,IAAI,CAAC;AAAA,EACxC;AAEA,QAAM,OAAO,IAAI,SAAS;AAC1B,OAAK,OAAO,WAAW,OAAO;AAC9B,OAAK,OAAO,QAAQ,IAAI;AACxB,OAAK,OAAO,WAAW,KAAK,OAAO;AACnC,MAAI,KAAK,KAAM,MAAK,OAAO,QAAQ,KAAK,IAAI;AAC5C,OAAK;AAAA,IACH;AAAA,IACA,IAAI,KAAK,CAAC,GAAG,GAAG;AAAA,MACd,MAAM,SAAS,cAAc,qBAAqB;AAAA,IACpD,CAAC;AAAA,IACDC,UAAS,QAAQ;AAAA,EACnB;AAEA,QAAM,MAAM,MAAM,MAAM,KAAK,KAAK,QAAQ,OAAO,EAAE,IAAI,4BAA4B;AAAA,IACjF,QAAQ;AAAA,IACR,SAAS,EAAE,0BAA0B,KAAK,MAAM;AAAA,IAChD,MAAM;AAAA,EACR,CAAC;AACD,SAAO,EAAE,QAAQ,IAAI,QAAQ,MAAM,MAAM,IAAI,KAAK,GAAG,IAAI,IAAI,GAAG;AAClE;AAEA,SAAS,KAAK,KAAqB;AAIjC,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,SAAS,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAM;AAC7E,UAAQ,SAAS,GAAG,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAClD;AAGA,eAAsB,WAAW,GAAe,MAA4C;AAC1F,QAAM,UAAU,mBAAmB,EAAE,OAAO;AAC5C,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,MACL,YAAY,EAAE;AAAA,MACd,SAAS;AAAA,MACT,IAAI;AAAA,MACJ,OAAO,CAAC;AAAA,QACN,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,MAAM,kCAAkC,EAAE,OAAO;AAAA,MACnD,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,SAAS;AAAA,IACb,SAAS,KAAK;AAAA,IACd,MAAM,KAAK,QAAQ,QAAQ,IAAI,gBAAgB;AAAA,IAC/C,OAAO,KAAK;AAAA,IACZ,MAAM,KAAK;AAAA,IACX,cAAc,KAAK;AAAA,EACrB;AAEA,QAAM,QAA+B,CAAC;AACtC,QAAM,YAAY,MAAM,UAAU,aAAa,EAAE,SAAS,SAAS,MAAM;AACzE,QAAM,KAAK;AAAA,IACT,MAAM;AAAA,IACN,QAAQ,UAAU;AAAA,IAClB,MAAM,KAAKD,cAAa,EAAE,OAAO,CAAC;AAAA,IAClC,MAAM,UAAU,KAAK,SAAY,UAAU;AAAA,EAC7C,CAAC;AAED,MAAI,QAAQ,UAAU;AACtB,MAAI,KAAK,eAAe;AACtB,UAAM,eAAe,MAAM,UAAU,UAAU,EAAE,QAAQ,SAAS,MAAM;AACxE,UAAM,KAAK;AAAA,MACT,MAAM;AAAA,MACN,QAAQ,aAAa;AAAA,MACrB,MAAM,KAAKA,cAAa,EAAE,MAAM,CAAC;AAAA,MACjC,MAAM,aAAa,KAAK,SAAY,aAAa;AAAA,IACnD,CAAC;AACD,YAAQ,SAAS,aAAa;AAAA,EAChC;AAEA,SAAO,EAAE,YAAY,EAAE,YAAY,SAAS,IAAI,OAAO,MAAM;AAC/D;AAGA,eAAsB,UACpB,OACA,MACyB;AACzB,SAAO,QAAQ,IAAI,MAAM,IAAI,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC;AAC1D;;;AC1IA,SAAS,eAAe;AACxB,SAAS,YAAY,gBAAAE,qBAAoB;AA8BzC,eAAsB,mBAAmB,MAA8C;AACrF,QAAM,MAAM,QAAQ,KAAK,GAAG;AAC5B,QAAM,QAAQ,UAAU,GAAG;AAC3B,QAAM,MAAM,KAAK,SAAS,MAAM,SAAY,CAAC,MAAc,QAAQ,IAAI,wBAAwB,CAAC,EAAE;AAElG,MAAI,YAAY,GAAG,WAAM,MAAM,MAAM,qBAAqB;AAC1D,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,EAAE,KAAK,OAAO,GAAG,UAAU,CAAC,EAAE;AAAA,EACvC;AAEA,QAAM,cAAc,UAAU,KAAK;AACnC,QAAM,WAAW,YAAY,IAAI,CAAC,EAAE,MAAM,OAAO,OAAO;AAAA,IACtD,YAAY,KAAK;AAAA,IACjB,SAAS,OAAO;AAAA,IAChB,QAAQ,OAAO;AAAA,EACjB,EAAE;AACF,aAAW,KAAK,UAAU;AACxB,QAAI,KAAK,EAAE,UAAU,KAAK,EAAE,OAAO,KAAK,EAAE,SAAS,aAAa,OAAO,EAAE;AAAA,EAC3E;AAEA,QAAM,MAAM,eAAe;AAC3B,QAAM,QAAQ,KAAK,SAAS,IAAI;AAChC,QAAM,UAAU,KAAK,WAAW,IAAI;AACpC,QAAM,OAAO,KAAK,QAAQ,IAAI;AAC9B,QAAM,OAAO,KAAK,QAAQ,IAAI;AAE9B,MAAI,KAAK,cAAc,CAAC,OAAO;AAC7B,QAAI,CAAC,KAAK,cAAc,CAAC,OAAO;AAC9B,UAAI,4EAAuE;AAAA,IAC7E;AACA,WAAO,EAAE,KAAK,OAAO,MAAM,QAAQ,SAAS;AAAA,EAC9C;AACA,MAAI,CAAC,SAAS;AACZ,QAAI,2EAAsE;AAC1E,WAAO,EAAE,KAAK,OAAO,MAAM,QAAQ,SAAS;AAAA,EAC9C;AAEA,QAAM,WAAW,MAAM,UAAU,OAAO;AAAA,IACtC,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,aAAW,KAAK,UAAU;AACxB,QAAI,EAAE,IAAI;AACR,UAAI,KAAK,EAAE,UAAU,sBAAsB,EAAE,OAAO,EAAE;AAAA,IACxD,OAAO;AACL,YAAM,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACvC,UAAI,KAAK,EAAE,UAAU,iBAAiB,MAAM,UAAU,GAAG,SAAS,MAAM,QAAQ,EAAE,EAAE;AAAA,IACtF;AAAA,EACF;AACA,SAAO,EAAE,KAAK,OAAO,MAAM,QAAQ,UAAU,SAAS;AACxD;AAEA,SAAS,iBAAqD;AAC5D,QAAM,MAA0C,EAAE,GAAG,QAAQ,IAAI;AACjE,aAAW,QAAQ,CAAC,cAAc,MAAM,GAAG;AACzC,UAAM,OAAO,QAAQ,QAAQ,IAAI,GAAG,IAAI;AACxC,QAAI,CAAC,WAAW,IAAI,EAAG;AACvB,UAAM,OAAOC,cAAa,MAAM,MAAM;AACtC,eAAW,QAAQ,KAAK,MAAM,OAAO,GAAG;AACtC,YAAM,UAAU,KAAK,KAAK;AAC1B,UAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,EAAG;AACzC,YAAM,QAAQ,4BAA4B,KAAK,OAAO;AACtD,UAAI,CAAC,MAAO;AACZ,YAAM,MAAM,MAAM,CAAC;AACnB,UAAI,IAAI,GAAG,MAAM,OAAW;AAC5B,UAAI,GAAG,IAAI,MAAM,CAAC,EAAG,QAAQ,gBAAgB,EAAE;AAAA,IACjD;AAAA,EACF;AACA,SAAO;AACT;","names":["readFileSync","basename","readFileSync","basename","readFileSync","readFileSync"]}

package/dist/build/next.js

@@ -181,6 +181,7 @@ async function uploadAll(pairs, opts) {
 
 // src/build/sourcemaps.ts
 var import_node_path3 = require("path");
+var import_node_fs4 = require("fs");
 async function processBuildOutput(opts) {
   const dir = (0, import_node_path3.resolve)(opts.dir);
   const pairs = findPairs(dir);
@@ -198,8 +199,11 @@ async function processBuildOutput(opts) {
   for (const i of injected) {
     log(`  ${i.bundleName}  ${i.debugId}  ${i.reused ? "(reused)" : "(new)"}`);
   }
-  const token = opts.token ?? process.env.ALLSTAK_UPLOAD_TOKEN;
-  const release = opts.release ?? process.env.ALLSTAK_RELEASE;
+  const env = loadAllStakEnv();
+  const token = opts.token ?? env.ALLSTAK_UPLOAD_TOKEN;
+  const release = opts.release ?? env.ALLSTAK_RELEASE;
+  const host = opts.host ?? env.ALLSTAK_HOST;
+  const dist = opts.dist ?? env.ALLSTAK_DIST;
   if (opts.injectOnly || !token) {
     if (!opts.injectOnly && !token) {
       log("skipping upload \u2014 no token (set ALLSTAK_UPLOAD_TOKEN or pass `token`)");
@@ -213,7 +217,9 @@ async function processBuildOutput(opts) {
   const uploaded = await uploadAll(pairs, {
     ...opts,
     release,
-    token
+    token,
+    host,
+    dist
   });
   for (const u of uploaded) {
     if (u.ok) {
@@ -225,6 +231,24 @@ async function processBuildOutput(opts) {
   }
   return { dir, pairs: pairs.length, injected, uploaded };
 }
+function loadAllStakEnv() {
+  const out = { ...process.env };
+  for (const file of [".env.local", ".env"]) {
+    const full = (0, import_node_path3.resolve)(process.cwd(), file);
+    if (!(0, import_node_fs4.existsSync)(full)) continue;
+    const text = (0, import_node_fs4.readFileSync)(full, "utf8");
+    for (const line of text.split(/\r?\n/)) {
+      const trimmed = line.trim();
+      if (!trimmed || trimmed.startsWith("#")) continue;
+      const match = /^([A-Z0-9_]+)\s*=\s*(.*)$/.exec(trimmed);
+      if (!match) continue;
+      const key = match[1];
+      if (out[key] !== void 0) continue;
+      out[key] = match[2].replace(/^['"]|['"]$/g, "");
+    }
+  }
+  return out;
+}
 
 // src/build/webpack.ts
 var AllStakWebpackPlugin = class {

package/dist/build/next.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/build/next.ts","../../src/build/walk.ts","../../src/build/inject.ts","../../src/build/upload.ts","../../src/build/sourcemaps.ts","../../src/build/webpack.ts"],"sourcesContent":["/**\n * Next.js wrapper — `withAllStak(nextConfig)` decorates a project's\n * `next.config.js` so the AllStak Webpack plugin runs on every build.\n *\n *   // next.config.js\n *   const { withAllStak } = require('@allstak/react/next');\n *\n *   module.exports = withAllStak({\n *     release: process.env.ALLSTAK_RELEASE,\n *     token: process.env.ALLSTAK_UPLOAD_TOKEN,\n *     dist: 'web',\n *   }, {\n *     reactStrictMode: true,\n *     // …rest of your Next config…\n *   });\n *\n * The wrapper:\n *   - sets `productionBrowserSourceMaps: true` so Next emits `.map`\n *     files for the client bundles (the only ones we symbolicate).\n *   - chains any user-provided `webpack(config, ctx)` so we don't\n *     stomp existing customizations.\n */\n\nimport { AllStakWebpackPlugin, type AllStakWebpackPluginOptions } from './webpack';\n\ntype NextConfigLike = Record<string, unknown> & {\n  productionBrowserSourceMaps?: boolean;\n  webpack?: (config: unknown, ctx: unknown) => unknown;\n};\n\ninterface WebpackConfigLike {\n  plugins?: unknown[];\n  devtool?: string | false;\n}\n\ninterface WebpackContextLike {\n  isServer?: boolean;\n  dev?: boolean;\n}\n\nexport function withAllStak(\n  allstakOpts: AllStakWebpackPluginOptions,\n  nextConfig: NextConfigLike = {},\n): NextConfigLike {\n  const userWebpack = nextConfig.webpack;\n\n  return {\n    ...nextConfig,\n    productionBrowserSourceMaps:\n      nextConfig.productionBrowserSourceMaps ?? true,\n\n    webpack(config: unknown, ctx: unknown): unknown {\n      const webpackConfig = (config as WebpackConfigLike) ?? {};\n      const webpackCtx = (ctx as WebpackContextLike) ?? {};\n      const plugins = webpackConfig.plugins ?? (webpackConfig.plugins = []);\n\n      // Only attach to the client compilation. Server bundles run in\n      // Node where stack traces are already symbolicated.\n      if (!webpackCtx.isServer && !webpackCtx.dev) {\n        plugins.push(new AllStakWebpackPlugin(allstakOpts));\n      }\n\n      return userWebpack ? userWebpack(webpackConfig, ctx) : webpackConfig;\n    },\n  };\n}\n\nexport type { AllStakWebpackPluginOptions };\n","/**\n * Build-time only. File-system walking for the source-map pipeline.\n * Pure Node 18+ (built-in `node:fs` only). Browser runtime never imports\n * this — it's behind a `./build/*` subpath that's marked Node-platform.\n */\n\nimport { readdirSync, statSync } from 'node:fs';\nimport { basename, join } from 'node:path';\n\n/** A bundle and its companion source map on disk. */\nexport interface BundlePair {\n  /** Absolute path to the JS bundle (`.js` / `.mjs` / `.cjs`). */\n  jsPath: string;\n  /** Absolute path to the matching `.map` file. */\n  mapPath: string;\n  /** Bare filename of the bundle (no directory), for log lines. */\n  bundleName: string;\n}\n\n/** Recursively list every file under `dir`. Symlinks are followed. */\nexport function walk(dir: string, out: string[] = []): string[] {\n  for (const name of readdirSync(dir)) {\n    const full = join(dir, name);\n    const st = statSync(full);\n    if (st.isDirectory()) walk(full, out);\n    else out.push(full);\n  }\n  return out;\n}\n\n/**\n * Returns every `(bundle, sourcemap)` pair under `root`.\n *\n * A pair is a `.js` / `.mjs` / `.cjs` file with a sibling file of the\n * same name plus a `.map` suffix — the convention every modern bundler\n * (Vite, Webpack, esbuild, Rollup, tsup) follows.\n */\nexport function findPairs(root: string): BundlePair[] {\n  const all = walk(root);\n  const maps = new Set(all.filter((p) => p.endsWith('.map')));\n  const pairs: BundlePair[] = [];\n  for (const js of all) {\n    if (!js.endsWith('.js') && !js.endsWith('.mjs') && !js.endsWith('.cjs')) continue;\n    const map = js + '.map';\n    if (maps.has(map)) {\n      pairs.push({ jsPath: js, mapPath: map, bundleName: basename(js) });\n    }\n  }\n  return pairs;\n}\n","/**\n * Debug-ID injection. Build-time only.\n *\n * For each `(bundle.js, bundle.js.map)` pair we:\n *   - Generate a stable per-bundle UUID (one already on the bundle is\n *     reused so re-running is idempotent).\n *   - Append `//# debugId=<uuid>` to the JS so the runtime resolver in\n *     `src/debug-id.ts` can read it back.\n *   - Write a top-level `debugId` field into the `.map` JSON so the\n *     symbolicator on the backend can join `bundle.js` ↔ `bundle.js.map`\n *     by ID rather than guessing from filenames.\n *\n * Bundlers re-write hashed filenames on every build, so joining by ID\n * (instead of by URL or path) is what makes resolved stack frames\n * survive across releases.\n */\n\nimport { readFileSync, writeFileSync } from 'node:fs';\nimport { randomUUID } from 'node:crypto';\n\nimport type { BundlePair } from './walk';\n\nconst DEBUG_ID_LINE_RE = /^\\/\\/# debugId=([0-9a-f-]{36})\\s*$/m;\nconst REGISTRATION_MARKER = '/*!__allstak_debug_id_registration__*/';\n\nfunction buildRegistrationSnippet(jsBody: string, debugId: string): string {\n  const isEsm = /\\bimport\\.meta\\b/.test(jsBody) || /^\\s*(?:import|export)\\b/m.test(jsBody);\n  if (isEsm) {\n    return `${REGISTRATION_MARKER}try{(globalThis._allstakDebugIds=globalThis._allstakDebugIds||{})[import.meta.url]=\"${debugId}\"}catch(_){}`;\n  }\n  return `${REGISTRATION_MARKER}(function(){try{var u=(typeof document!==\"undefined\"&&document.currentScript&&document.currentScript.src)||(typeof location!==\"undefined\"?location.href:\"\");(globalThis._allstakDebugIds=globalThis._allstakDebugIds||{})[u]=\"${debugId}\"}catch(_){}})();`;\n}\n\nfunction stripRegistration(js: string): string {\n  const lineRe = new RegExp(\n    '^' + REGISTRATION_MARKER.replace(/[/*!]/g, (c) => '\\\\' + c) + '.*$',\n    'm',\n  );\n  return js.replace(lineRe, '');\n}\n\n/** Outcome of injecting one pair. */\nexport interface InjectResult {\n  /** UUID injected (or reused) for this bundle. */\n  debugId: string;\n  /** True if the bundle already had a debugId — we reused it. */\n  reused: boolean;\n}\n\n/**\n * Inject (or reuse) the debug ID for a single bundle/sourcemap pair.\n * Mutates both files on disk. Pure synchronous Node — safe to call from\n * a Vite `closeBundle` or Webpack `afterEmit` hook.\n */\nexport function injectPair(p: BundlePair): InjectResult {\n  const jsRaw = readFileSync(p.jsPath, 'utf8');\n  const mapRaw = readFileSync(p.mapPath, 'utf8');\n  const map = JSON.parse(mapRaw) as { debugId?: unknown; [k: string]: unknown };\n\n  let debugId = typeof map.debugId === 'string' ? map.debugId : '';\n  const existing = DEBUG_ID_LINE_RE.exec(jsRaw);\n  if (existing && existing[1]) debugId = debugId || existing[1];\n  const reused = !!debugId;\n  if (!debugId) debugId = randomUUID();\n\n  map.debugId = debugId;\n  writeFileSync(p.mapPath, JSON.stringify(map));\n\n  let jsOut = stripRegistration(jsRaw.replace(DEBUG_ID_LINE_RE, ''));\n  jsOut = jsOut.replace(/\\s+$/, '');\n  jsOut += `\\n${buildRegistrationSnippet(jsOut, debugId)}\\n//# debugId=${debugId}\\n`;\n  writeFileSync(p.jsPath, jsOut);\n\n  return { debugId, reused };\n}\n\n/** Inject every pair under `root`. Returns one record per pair. */\nexport function injectAll(pairs: BundlePair[]): Array<{ pair: BundlePair; result: InjectResult }> {\n  return pairs.map((pair) => ({ pair, result: injectPair(pair) }));\n}\n\n/** Read a debug ID back from a `.map` file. */\nexport function readDebugIdFromMap(mapPath: string): string | null {\n  const json = JSON.parse(readFileSync(mapPath, 'utf8')) as { debugId?: unknown };\n  return typeof json.debugId === 'string' ? json.debugId : null;\n}\n","/**\n * Source-map / bundle upload client. Build-time only.\n *\n * Wraps the AllStak `/api/v1/artifacts/upload` endpoint with multipart\n * form data and best-effort retries. Pure Node 18+ (uses the global\n * `fetch` and `FormData`), no third-party HTTP client required.\n *\n * Auth: `X-AllStak-Upload-Token` header (NOT the runtime API key —\n * uploads have a dedicated, narrower scope. Generate one in the\n * dashboard → Project Settings → Upload Tokens).\n */\n\nimport { readFileSync } from 'node:fs';\nimport { basename } from 'node:path';\n\nimport type { BundlePair } from './walk';\nimport { readDebugIdFromMap } from './inject';\n\n/** Default ingest host — overridden via `host` option or `ALLSTAK_HOST`. */\nexport const DEFAULT_HOST = 'https://api.allstak.sa';\n\n/** Options for {@link uploadAll} / {@link uploadPair}. */\nexport interface UploadOptions {\n  /** Release identifier, e.g. `myapp@1.4.2`. Required server-side. */\n  release: string;\n  /** Optional distribution tag (`web`, `ios-hermes`, `staging`, …). */\n  dist?: string;\n  /** AllStak ingest host (default `https://api.allstak.sa`). */\n  host?: string;\n  /** Project upload token (`aspk_…`). May come from `ALLSTAK_UPLOAD_TOKEN`. */\n  token: string;\n  /**\n   * Drop `sourcesContent` from the map before upload (smaller payload).\n   * Off by default — sourcesContent enables full-source rendering on the\n   * dashboard. Turn on if you don't want source code uploaded.\n   */\n  stripSources?: boolean;\n  /** Also upload the JS bundle alongside the map (off by default). */\n  uploadBundles?: boolean;\n}\n\n/** One artifact upload result. */\nexport interface UploadResult {\n  bundleName: string;\n  debugId: string;\n  /** True when both the map (and bundle, if requested) uploaded OK. */\n  ok: boolean;\n  /** Per-artifact responses, in the order we sent them. */\n  steps: Array<{\n    type: 'sourcemap' | 'bundle';\n    status: number;\n    sha8: string;\n    body?: string;\n  }>;\n}\n\ninterface OneStepResult {\n  status: number;\n  body: string;\n  ok: boolean;\n}\n\nasync function uploadOne(\n  type: 'sourcemap' | 'bundle',\n  filePath: string,\n  debugId: string,\n  opts: Required<Pick<UploadOptions, 'release' | 'host' | 'token'>> &\n    Pick<UploadOptions, 'dist' | 'stripSources'>,\n): Promise<OneStepResult> {\n  let buf = readFileSync(filePath);\n  if (type === 'sourcemap' && opts.stripSources) {\n    const json = JSON.parse(buf.toString('utf8')) as { sourcesContent?: unknown };\n    if (Array.isArray(json.sourcesContent)) delete json.sourcesContent;\n    buf = Buffer.from(JSON.stringify(json));\n  }\n\n  const form = new FormData();\n  form.append('debugId', debugId);\n  form.append('type', type);\n  form.append('release', opts.release);\n  if (opts.dist) form.append('dist', opts.dist);\n  form.append(\n    'file',\n    new Blob([buf], {\n      type: type === 'sourcemap' ? 'application/json' : 'application/javascript',\n    }),\n    basename(filePath),\n  );\n\n  const res = await fetch(opts.host.replace(/\\/$/, '') + '/api/v1/artifacts/upload', {\n    method: 'POST',\n    headers: { 'X-AllStak-Upload-Token': opts.token },\n    body: form,\n  });\n  return { status: res.status, body: await res.text(), ok: res.ok };\n}\n\nfunction sha8(buf: Buffer): string {\n  // Browser/Node fallback — keeps this file pure-JS (no node:crypto in\n  // the public surface). Caller doesn't need cryptographic strength;\n  // this is for log identification only.\n  let hash = 0;\n  for (let i = 0; i < buf.length; i++) hash = ((hash << 5) - hash + buf[i]!) | 0;\n  return (hash >>> 0).toString(16).padStart(8, '0');\n}\n\n/** Upload one bundle/map pair. The map is always uploaded; bundle is opt-in. */\nexport async function uploadPair(p: BundlePair, opts: UploadOptions): Promise<UploadResult> {\n  const debugId = readDebugIdFromMap(p.mapPath);\n  if (!debugId) {\n    return {\n      bundleName: p.bundleName,\n      debugId: '',\n      ok: false,\n      steps: [{\n        type: 'sourcemap',\n        status: 0,\n        sha8: '',\n        body: `[allstak/upload] no debugId in ${p.mapPath} — run inject first`,\n      }],\n    };\n  }\n  const merged = {\n    release: opts.release,\n    host: opts.host ?? process.env.ALLSTAK_HOST ?? DEFAULT_HOST,\n    token: opts.token,\n    dist: opts.dist,\n    stripSources: opts.stripSources,\n  };\n\n  const steps: UploadResult['steps'] = [];\n  const mapResult = await uploadOne('sourcemap', p.mapPath, debugId, merged);\n  steps.push({\n    type: 'sourcemap',\n    status: mapResult.status,\n    sha8: sha8(readFileSync(p.mapPath)),\n    body: mapResult.ok ? undefined : mapResult.body,\n  });\n\n  let allOk = mapResult.ok;\n  if (opts.uploadBundles) {\n    const bundleResult = await uploadOne('bundle', p.jsPath, debugId, merged);\n    steps.push({\n      type: 'bundle',\n      status: bundleResult.status,\n      sha8: sha8(readFileSync(p.jsPath)),\n      body: bundleResult.ok ? undefined : bundleResult.body,\n    });\n    allOk = allOk && bundleResult.ok;\n  }\n\n  return { bundleName: p.bundleName, debugId, ok: allOk, steps };\n}\n\n/** Upload every pair in parallel. */\nexport async function uploadAll(\n  pairs: BundlePair[],\n  opts: UploadOptions,\n): Promise<UploadResult[]> {\n  return Promise.all(pairs.map((p) => uploadPair(p, opts)));\n}\n","/**\n * Programmatic source-map pipeline. Build-time only.\n *\n * The high-level \"do everything\" entry point Vite/Webpack/Next plugins\n * call. Walk the build output → inject debug IDs → upload artifacts.\n *\n *   import { processBuildOutput } from '@allstak/react/sourcemaps';\n *\n *   await processBuildOutput({\n *     dir: 'dist',\n *     release: 'web@1.4.2',\n *     token: process.env.ALLSTAK_UPLOAD_TOKEN!,\n *   });\n */\n\nexport type { BundlePair } from './walk';\nexport { findPairs, walk } from './walk';\nexport type { InjectResult } from './inject';\nexport { injectPair, injectAll, readDebugIdFromMap } from './inject';\nexport type { UploadOptions, UploadResult } from './upload';\nexport { uploadPair, uploadAll, DEFAULT_HOST } from './upload';\n\nimport { resolve } from 'node:path';\nimport { findPairs } from './walk';\nimport { injectAll } from './inject';\nimport { uploadAll, type UploadOptions, type UploadResult } from './upload';\n\n/** Options for {@link processBuildOutput}. */\nexport interface ProcessOptions extends Partial<UploadOptions> {\n  /** Build output directory to scan (e.g. `dist`, `.next/static`). */\n  dir: string;\n  /**\n   * If true, only inject debug IDs and skip upload. Useful for sample\n   * apps and CI dry-runs.\n   */\n  injectOnly?: boolean;\n  /** Suppress per-pair console output. Default false (you want to see this). */\n  silent?: boolean;\n}\n\n/** What `processBuildOutput` reports back. */\nexport interface ProcessReport {\n  /** Absolute output dir scanned. */\n  dir: string;\n  /** Pairs found. */\n  pairs: number;\n  /** Per-pair injection results (debugId + reused?). */\n  injected: Array<{ bundleName: string; debugId: string; reused: boolean }>;\n  /** Per-pair upload results, omitted when no token / `injectOnly: true`. */\n  uploaded?: UploadResult[];\n}\n\nexport async function processBuildOutput(opts: ProcessOptions): Promise<ProcessReport> {\n  const dir = resolve(opts.dir);\n  const pairs = findPairs(dir);\n  const log = opts.silent ? () => undefined : (m: string) => console.log(`[allstak/sourcemaps] ${m}`);\n\n  log(`scanning ${dir} — ${pairs.length} bundle/map pair(s)`);\n  if (pairs.length === 0) {\n    return { dir, pairs: 0, injected: [] };\n  }\n\n  const injectedRaw = injectAll(pairs);\n  const injected = injectedRaw.map(({ pair, result }) => ({\n    bundleName: pair.bundleName,\n    debugId: result.debugId,\n    reused: result.reused,\n  }));\n  for (const i of injected) {\n    log(`  ${i.bundleName}  ${i.debugId}  ${i.reused ? '(reused)' : '(new)'}`);\n  }\n\n  const token = opts.token ?? process.env.ALLSTAK_UPLOAD_TOKEN;\n  const release = opts.release ?? process.env.ALLSTAK_RELEASE;\n\n  if (opts.injectOnly || !token) {\n    if (!opts.injectOnly && !token) {\n      log('skipping upload — no token (set ALLSTAK_UPLOAD_TOKEN or pass `token`)');\n    }\n    return { dir, pairs: pairs.length, injected };\n  }\n  if (!release) {\n    log('skipping upload — no release (set ALLSTAK_RELEASE or pass `release`)');\n    return { dir, pairs: pairs.length, injected };\n  }\n\n  const uploaded = await uploadAll(pairs, {\n    ...opts,\n    release,\n    token,\n  });\n  for (const u of uploaded) {\n    if (u.ok) {\n      log(`  ${u.bundleName}  uploaded debugId=${u.debugId}`);\n    } else {\n      const last = u.steps[u.steps.length - 1];\n      log(`  ${u.bundleName}  FAIL status=${last?.status ?? '?'} body=${last?.body ?? ''}`);\n    }\n  }\n  return { dir, pairs: pairs.length, injected, uploaded };\n}\n","/**\n * Webpack plugin — same job as the Vite plugin: walk the build output\n * after emit, inject debug IDs into every JS+map pair, and (when a\n * token is present) upload to AllStak.\n *\n *   // webpack.config.js\n *   const { AllStakWebpackPlugin } = require('@allstak/react/webpack');\n *\n *   module.exports = {\n *     devtool: 'source-map',\n *     plugins: [\n *       new AllStakWebpackPlugin({\n *         release: process.env.ALLSTAK_RELEASE,\n *         token: process.env.ALLSTAK_UPLOAD_TOKEN,\n *         dist: 'web',\n *       }),\n *     ],\n *   };\n *\n * The plugin hooks `afterEmit`, the moment Webpack guarantees every\n * asset is on disk. Failures log a warning rather than failing the\n * build — a flaky CI step doesn't block shipping.\n */\n\nimport { processBuildOutput, type ProcessOptions, type ProcessReport } from './sourcemaps';\n\nexport interface AllStakWebpackPluginOptions extends Omit<ProcessOptions, 'dir'> {\n  /** Override the output directory. By default uses `compiler.outputPath`. */\n  dir?: string;\n  /** If true, plugin is a no-op. */\n  disabled?: boolean;\n}\n\ninterface MinimalCompiler {\n  hooks: { afterEmit: { tapPromise: (name: string, fn: (compilation: { compiler?: { outputPath?: string } }) => Promise<void>) => void } };\n  outputPath?: string;\n  options?: { output?: { path?: string } };\n}\n\nexport class AllStakWebpackPlugin {\n  /** Last successful report — exposed for tests / programmatic inspection. */\n  public lastReport: ProcessReport | null = null;\n\n  constructor(private readonly opts: AllStakWebpackPluginOptions = {} as AllStakWebpackPluginOptions) {}\n\n  apply(compiler: MinimalCompiler): void {\n    if (this.opts.disabled) return;\n\n    compiler.hooks.afterEmit.tapPromise('AllStakWebpackPlugin', async (compilation) => {\n      const dir =\n        this.opts.dir ??\n        compilation.compiler?.outputPath ??\n        compiler.outputPath ??\n        compiler.options?.output?.path ??\n        process.cwd();\n\n      try {\n        this.lastReport = await processBuildOutput({\n          ...this.opts,\n          dir,\n          silent: this.opts.silent ?? false,\n        });\n      } catch (e) {\n        console.error(`[allstak/webpack] failed: ${(e as Error).message}`);\n      }\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACMA,qBAAsC;AACtC,uBAA+B;AAaxB,SAAS,KAAK,KAAa,MAAgB,CAAC,GAAa;AAC9D,aAAW,YAAQ,4BAAY,GAAG,GAAG;AACnC,UAAM,WAAO,uBAAK,KAAK,IAAI;AAC3B,UAAM,SAAK,yBAAS,IAAI;AACxB,QAAI,GAAG,YAAY,EAAG,MAAK,MAAM,GAAG;AAAA,QAC/B,KAAI,KAAK,IAAI;AAAA,EACpB;AACA,SAAO;AACT;AASO,SAAS,UAAU,MAA4B;AACpD,QAAM,MAAM,KAAK,IAAI;AACrB,QAAM,OAAO,IAAI,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM,CAAC,CAAC;AAC1D,QAAM,QAAsB,CAAC;AAC7B,aAAW,MAAM,KAAK;AACpB,QAAI,CAAC,GAAG,SAAS,KAAK,KAAK,CAAC,GAAG,SAAS,MAAM,KAAK,CAAC,GAAG,SAAS,MAAM,EAAG;AACzE,UAAM,MAAM,KAAK;AACjB,QAAI,KAAK,IAAI,GAAG,GAAG;AACjB,YAAM,KAAK,EAAE,QAAQ,IAAI,SAAS,KAAK,gBAAY,2BAAS,EAAE,EAAE,CAAC;AAAA,IACnE;AAAA,EACF;AACA,SAAO;AACT;;;AChCA,IAAAA,kBAA4C;AAC5C,yBAA2B;AAI3B,IAAM,mBAAmB;AACzB,IAAM,sBAAsB;AAE5B,SAAS,yBAAyB,QAAgB,SAAyB;AACzE,QAAM,QAAQ,mBAAmB,KAAK,MAAM,KAAK,2BAA2B,KAAK,MAAM;AACvF,MAAI,OAAO;AACT,WAAO,GAAG,mBAAmB,uFAAuF,OAAO;AAAA,EAC7H;AACA,SAAO,GAAG,mBAAmB,iOAAiO,OAAO;AACvQ;AAEA,SAAS,kBAAkB,IAAoB;AAC7C,QAAM,SAAS,IAAI;AAAA,IACjB,MAAM,oBAAoB,QAAQ,UAAU,CAAC,MAAM,OAAO,CAAC,IAAI;AAAA,IAC/D;AAAA,EACF;AACA,SAAO,GAAG,QAAQ,QAAQ,EAAE;AAC9B;AAeO,SAAS,WAAW,GAA6B;AACtD,QAAM,YAAQ,8BAAa,EAAE,QAAQ,MAAM;AAC3C,QAAM,aAAS,8BAAa,EAAE,SAAS,MAAM;AAC7C,QAAM,MAAM,KAAK,MAAM,MAAM;AAE7B,MAAI,UAAU,OAAO,IAAI,YAAY,WAAW,IAAI,UAAU;AAC9D,QAAM,WAAW,iBAAiB,KAAK,KAAK;AAC5C,MAAI,YAAY,SAAS,CAAC,EAAG,WAAU,WAAW,SAAS,CAAC;AAC5D,QAAM,SAAS,CAAC,CAAC;AACjB,MAAI,CAAC,QAAS,eAAU,+BAAW;AAEnC,MAAI,UAAU;AACd,qCAAc,EAAE,SAAS,KAAK,UAAU,GAAG,CAAC;AAE5C,MAAI,QAAQ,kBAAkB,MAAM,QAAQ,kBAAkB,EAAE,CAAC;AACjE,UAAQ,MAAM,QAAQ,QAAQ,EAAE;AAChC,WAAS;AAAA,EAAK,yBAAyB,OAAO,OAAO,CAAC;AAAA,cAAiB,OAAO;AAAA;AAC9E,qCAAc,EAAE,QAAQ,KAAK;AAE7B,SAAO,EAAE,SAAS,OAAO;AAC3B;AAGO,SAAS,UAAU,OAAwE;AAChG,SAAO,MAAM,IAAI,CAAC,UAAU,EAAE,MAAM,QAAQ,WAAW,IAAI,EAAE,EAAE;AACjE;AAGO,SAAS,mBAAmB,SAAgC;AACjE,QAAM,OAAO,KAAK,UAAM,8BAAa,SAAS,MAAM,CAAC;AACrD,SAAO,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;AAC3D;;;ACzEA,IAAAC,kBAA6B;AAC7B,IAAAC,oBAAyB;AAMlB,IAAM,eAAe;AA2C5B,eAAe,UACb,MACA,UACA,SACA,MAEwB;AACxB,MAAI,UAAM,8BAAa,QAAQ;AAC/B,MAAI,SAAS,eAAe,KAAK,cAAc;AAC7C,UAAM,OAAO,KAAK,MAAM,IAAI,SAAS,MAAM,CAAC;AAC5C,QAAI,MAAM,QAAQ,KAAK,cAAc,EAAG,QAAO,KAAK;AACpD,UAAM,OAAO,KAAK,KAAK,UAAU,IAAI,CAAC;AAAA,EACxC;AAEA,QAAM,OAAO,IAAI,SAAS;AAC1B,OAAK,OAAO,WAAW,OAAO;AAC9B,OAAK,OAAO,QAAQ,IAAI;AACxB,OAAK,OAAO,WAAW,KAAK,OAAO;AACnC,MAAI,KAAK,KAAM,MAAK,OAAO,QAAQ,KAAK,IAAI;AAC5C,OAAK;AAAA,IACH;AAAA,IACA,IAAI,KAAK,CAAC,GAAG,GAAG;AAAA,MACd,MAAM,SAAS,cAAc,qBAAqB;AAAA,IACpD,CAAC;AAAA,QACD,4BAAS,QAAQ;AAAA,EACnB;AAEA,QAAM,MAAM,MAAM,MAAM,KAAK,KAAK,QAAQ,OAAO,EAAE,IAAI,4BAA4B;AAAA,IACjF,QAAQ;AAAA,IACR,SAAS,EAAE,0BAA0B,KAAK,MAAM;AAAA,IAChD,MAAM;AAAA,EACR,CAAC;AACD,SAAO,EAAE,QAAQ,IAAI,QAAQ,MAAM,MAAM,IAAI,KAAK,GAAG,IAAI,IAAI,GAAG;AAClE;AAEA,SAAS,KAAK,KAAqB;AAIjC,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,SAAS,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAM;AAC7E,UAAQ,SAAS,GAAG,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAClD;AAGA,eAAsB,WAAW,GAAe,MAA4C;AAC1F,QAAM,UAAU,mBAAmB,EAAE,OAAO;AAC5C,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,MACL,YAAY,EAAE;AAAA,MACd,SAAS;AAAA,MACT,IAAI;AAAA,MACJ,OAAO,CAAC;AAAA,QACN,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,MAAM,kCAAkC,EAAE,OAAO;AAAA,MACnD,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,SAAS;AAAA,IACb,SAAS,KAAK;AAAA,IACd,MAAM,KAAK,QAAQ,QAAQ,IAAI,gBAAgB;AAAA,IAC/C,OAAO,KAAK;AAAA,IACZ,MAAM,KAAK;AAAA,IACX,cAAc,KAAK;AAAA,EACrB;AAEA,QAAM,QAA+B,CAAC;AACtC,QAAM,YAAY,MAAM,UAAU,aAAa,EAAE,SAAS,SAAS,MAAM;AACzE,QAAM,KAAK;AAAA,IACT,MAAM;AAAA,IACN,QAAQ,UAAU;AAAA,IAClB,MAAM,SAAK,8BAAa,EAAE,OAAO,CAAC;AAAA,IAClC,MAAM,UAAU,KAAK,SAAY,UAAU;AAAA,EAC7C,CAAC;AAED,MAAI,QAAQ,UAAU;AACtB,MAAI,KAAK,eAAe;AACtB,UAAM,eAAe,MAAM,UAAU,UAAU,EAAE,QAAQ,SAAS,MAAM;AACxE,UAAM,KAAK;AAAA,MACT,MAAM;AAAA,MACN,QAAQ,aAAa;AAAA,MACrB,MAAM,SAAK,8BAAa,EAAE,MAAM,CAAC;AAAA,MACjC,MAAM,aAAa,KAAK,SAAY,aAAa;AAAA,IACnD,CAAC;AACD,YAAQ,SAAS,aAAa;AAAA,EAChC;AAEA,SAAO,EAAE,YAAY,EAAE,YAAY,SAAS,IAAI,OAAO,MAAM;AAC/D;AAGA,eAAsB,UACpB,OACA,MACyB;AACzB,SAAO,QAAQ,IAAI,MAAM,IAAI,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC;AAC1D;;;AC1IA,IAAAC,oBAAwB;AA8BxB,eAAsB,mBAAmB,MAA8C;AACrF,QAAM,UAAM,2BAAQ,KAAK,GAAG;AAC5B,QAAM,QAAQ,UAAU,GAAG;AAC3B,QAAM,MAAM,KAAK,SAAS,MAAM,SAAY,CAAC,MAAc,QAAQ,IAAI,wBAAwB,CAAC,EAAE;AAElG,MAAI,YAAY,GAAG,WAAM,MAAM,MAAM,qBAAqB;AAC1D,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,EAAE,KAAK,OAAO,GAAG,UAAU,CAAC,EAAE;AAAA,EACvC;AAEA,QAAM,cAAc,UAAU,KAAK;AACnC,QAAM,WAAW,YAAY,IAAI,CAAC,EAAE,MAAM,OAAO,OAAO;AAAA,IACtD,YAAY,KAAK;AAAA,IACjB,SAAS,OAAO;AAAA,IAChB,QAAQ,OAAO;AAAA,EACjB,EAAE;AACF,aAAW,KAAK,UAAU;AACxB,QAAI,KAAK,EAAE,UAAU,KAAK,EAAE,OAAO,KAAK,EAAE,SAAS,aAAa,OAAO,EAAE;AAAA,EAC3E;AAEA,QAAM,QAAQ,KAAK,SAAS,QAAQ,IAAI;AACxC,QAAM,UAAU,KAAK,WAAW,QAAQ,IAAI;AAE5C,MAAI,KAAK,cAAc,CAAC,OAAO;AAC7B,QAAI,CAAC,KAAK,cAAc,CAAC,OAAO;AAC9B,UAAI,4EAAuE;AAAA,IAC7E;AACA,WAAO,EAAE,KAAK,OAAO,MAAM,QAAQ,SAAS;AAAA,EAC9C;AACA,MAAI,CAAC,SAAS;AACZ,QAAI,2EAAsE;AAC1E,WAAO,EAAE,KAAK,OAAO,MAAM,QAAQ,SAAS;AAAA,EAC9C;AAEA,QAAM,WAAW,MAAM,UAAU,OAAO;AAAA,IACtC,GAAG;AAAA,IACH;AAAA,IACA;AAAA,EACF,CAAC;AACD,aAAW,KAAK,UAAU;AACxB,QAAI,EAAE,IAAI;AACR,UAAI,KAAK,EAAE,UAAU,sBAAsB,EAAE,OAAO,EAAE;AAAA,IACxD,OAAO;AACL,YAAM,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACvC,UAAI,KAAK,EAAE,UAAU,iBAAiB,MAAM,UAAU,GAAG,SAAS,MAAM,QAAQ,EAAE,EAAE;AAAA,IACtF;AAAA,EACF;AACA,SAAO,EAAE,KAAK,OAAO,MAAM,QAAQ,UAAU,SAAS;AACxD;;;AC7DO,IAAM,uBAAN,MAA2B;AAAA,EAIhC,YAA6B,OAAoC,CAAC,GAAkC;AAAvE;AAF7B;AAAA,SAAO,aAAmC;AAAA,EAE2D;AAAA,EAErG,MAAM,UAAiC;AACrC,QAAI,KAAK,KAAK,SAAU;AAExB,aAAS,MAAM,UAAU,WAAW,wBAAwB,OAAO,gBAAgB;AACjF,YAAM,MACJ,KAAK,KAAK,OACV,YAAY,UAAU,cACtB,SAAS,cACT,SAAS,SAAS,QAAQ,QAC1B,QAAQ,IAAI;AAEd,UAAI;AACF,aAAK,aAAa,MAAM,mBAAmB;AAAA,UACzC,GAAG,KAAK;AAAA,UACR;AAAA,UACA,QAAQ,KAAK,KAAK,UAAU;AAAA,QAC9B,CAAC;AAAA,MACH,SAAS,GAAG;AACV,gBAAQ,MAAM,6BAA8B,EAAY,OAAO,EAAE;AAAA,MACnE;AAAA,IACF,CAAC;AAAA,EACH;AACF;;;AL3BO,SAAS,YACd,aACA,aAA6B,CAAC,GACd;AAChB,QAAM,cAAc,WAAW;AAE/B,SAAO;AAAA,IACL,GAAG;AAAA,IACH,6BACE,WAAW,+BAA+B;AAAA,IAE5C,QAAQ,QAAiB,KAAuB;AAC9C,YAAM,gBAAiB,UAAgC,CAAC;AACxD,YAAM,aAAc,OAA8B,CAAC;AACnD,YAAM,UAAU,cAAc,YAAY,cAAc,UAAU,CAAC;AAInE,UAAI,CAAC,WAAW,YAAY,CAAC,WAAW,KAAK;AAC3C,gBAAQ,KAAK,IAAI,qBAAqB,WAAW,CAAC;AAAA,MACpD;AAEA,aAAO,cAAc,YAAY,eAAe,GAAG,IAAI;AAAA,IACzD;AAAA,EACF;AACF;","names":["import_node_fs","import_node_fs","import_node_path","import_node_path"]}
+{"version":3,"sources":["../../src/build/next.ts","../../src/build/walk.ts","../../src/build/inject.ts","../../src/build/upload.ts","../../src/build/sourcemaps.ts","../../src/build/webpack.ts"],"sourcesContent":["/**\n * Next.js wrapper — `withAllStak(nextConfig)` decorates a project's\n * `next.config.js` so the AllStak Webpack plugin runs on every build.\n *\n *   // next.config.js\n *   const { withAllStak } = require('@allstak/react/next');\n *\n *   module.exports = withAllStak({\n *     release: process.env.ALLSTAK_RELEASE,\n *     token: process.env.ALLSTAK_UPLOAD_TOKEN,\n *     dist: 'web',\n *   }, {\n *     reactStrictMode: true,\n *     // …rest of your Next config…\n *   });\n *\n * The wrapper:\n *   - sets `productionBrowserSourceMaps: true` so Next emits `.map`\n *     files for the client bundles (the only ones we symbolicate).\n *   - chains any user-provided `webpack(config, ctx)` so we don't\n *     stomp existing customizations.\n */\n\nimport { AllStakWebpackPlugin, type AllStakWebpackPluginOptions } from './webpack';\n\ntype NextConfigLike = Record<string, unknown> & {\n  productionBrowserSourceMaps?: boolean;\n  webpack?: (config: unknown, ctx: unknown) => unknown;\n};\n\ninterface WebpackConfigLike {\n  plugins?: unknown[];\n  devtool?: string | false;\n}\n\ninterface WebpackContextLike {\n  isServer?: boolean;\n  dev?: boolean;\n}\n\nexport function withAllStak(\n  allstakOpts: AllStakWebpackPluginOptions,\n  nextConfig: NextConfigLike = {},\n): NextConfigLike {\n  const userWebpack = nextConfig.webpack;\n\n  return {\n    ...nextConfig,\n    productionBrowserSourceMaps:\n      nextConfig.productionBrowserSourceMaps ?? true,\n\n    webpack(config: unknown, ctx: unknown): unknown {\n      const webpackConfig = (config as WebpackConfigLike) ?? {};\n      const webpackCtx = (ctx as WebpackContextLike) ?? {};\n      const plugins = webpackConfig.plugins ?? (webpackConfig.plugins = []);\n\n      // Only attach to the client compilation. Server bundles run in\n      // Node where stack traces are already symbolicated.\n      if (!webpackCtx.isServer && !webpackCtx.dev) {\n        plugins.push(new AllStakWebpackPlugin(allstakOpts));\n      }\n\n      return userWebpack ? userWebpack(webpackConfig, ctx) : webpackConfig;\n    },\n  };\n}\n\nexport type { AllStakWebpackPluginOptions };\n","/**\n * Build-time only. File-system walking for the source-map pipeline.\n * Pure Node 18+ (built-in `node:fs` only). Browser runtime never imports\n * this — it's behind a `./build/*` subpath that's marked Node-platform.\n */\n\nimport { readdirSync, statSync } from 'node:fs';\nimport { basename, join } from 'node:path';\n\n/** A bundle and its companion source map on disk. */\nexport interface BundlePair {\n  /** Absolute path to the JS bundle (`.js` / `.mjs` / `.cjs`). */\n  jsPath: string;\n  /** Absolute path to the matching `.map` file. */\n  mapPath: string;\n  /** Bare filename of the bundle (no directory), for log lines. */\n  bundleName: string;\n}\n\n/** Recursively list every file under `dir`. Symlinks are followed. */\nexport function walk(dir: string, out: string[] = []): string[] {\n  for (const name of readdirSync(dir)) {\n    const full = join(dir, name);\n    const st = statSync(full);\n    if (st.isDirectory()) walk(full, out);\n    else out.push(full);\n  }\n  return out;\n}\n\n/**\n * Returns every `(bundle, sourcemap)` pair under `root`.\n *\n * A pair is a `.js` / `.mjs` / `.cjs` file with a sibling file of the\n * same name plus a `.map` suffix — the convention every modern bundler\n * (Vite, Webpack, esbuild, Rollup, tsup) follows.\n */\nexport function findPairs(root: string): BundlePair[] {\n  const all = walk(root);\n  const maps = new Set(all.filter((p) => p.endsWith('.map')));\n  const pairs: BundlePair[] = [];\n  for (const js of all) {\n    if (!js.endsWith('.js') && !js.endsWith('.mjs') && !js.endsWith('.cjs')) continue;\n    const map = js + '.map';\n    if (maps.has(map)) {\n      pairs.push({ jsPath: js, mapPath: map, bundleName: basename(js) });\n    }\n  }\n  return pairs;\n}\n","/**\n * Debug-ID injection. Build-time only.\n *\n * For each `(bundle.js, bundle.js.map)` pair we:\n *   - Generate a stable per-bundle UUID (one already on the bundle is\n *     reused so re-running is idempotent).\n *   - Append `//# debugId=<uuid>` to the JS so the runtime resolver in\n *     `src/debug-id.ts` can read it back.\n *   - Write a top-level `debugId` field into the `.map` JSON so the\n *     symbolicator on the backend can join `bundle.js` ↔ `bundle.js.map`\n *     by ID rather than guessing from filenames.\n *\n * Bundlers re-write hashed filenames on every build, so joining by ID\n * (instead of by URL or path) is what makes resolved stack frames\n * survive across releases.\n */\n\nimport { readFileSync, writeFileSync } from 'node:fs';\nimport { randomUUID } from 'node:crypto';\n\nimport type { BundlePair } from './walk';\n\nconst DEBUG_ID_LINE_RE = /^\\/\\/# debugId=([0-9a-f-]{36})\\s*$/m;\nconst REGISTRATION_MARKER = '/*!__allstak_debug_id_registration__*/';\n\nfunction buildRegistrationSnippet(jsBody: string, debugId: string): string {\n  const isEsm = /\\bimport\\.meta\\b/.test(jsBody) || /^\\s*(?:import|export)\\b/m.test(jsBody);\n  if (isEsm) {\n    return `${REGISTRATION_MARKER}try{(globalThis._allstakDebugIds=globalThis._allstakDebugIds||{})[import.meta.url]=\"${debugId}\"}catch(_){}`;\n  }\n  return `${REGISTRATION_MARKER}(function(){try{var u=(typeof document!==\"undefined\"&&document.currentScript&&document.currentScript.src)||(typeof location!==\"undefined\"?location.href:\"\");(globalThis._allstakDebugIds=globalThis._allstakDebugIds||{})[u]=\"${debugId}\"}catch(_){}})();`;\n}\n\nfunction stripRegistration(js: string): string {\n  const lineRe = new RegExp(\n    '^' + REGISTRATION_MARKER.replace(/[/*!]/g, (c) => '\\\\' + c) + '.*$',\n    'm',\n  );\n  return js.replace(lineRe, '');\n}\n\n/** Outcome of injecting one pair. */\nexport interface InjectResult {\n  /** UUID injected (or reused) for this bundle. */\n  debugId: string;\n  /** True if the bundle already had a debugId — we reused it. */\n  reused: boolean;\n}\n\n/**\n * Inject (or reuse) the debug ID for a single bundle/sourcemap pair.\n * Mutates both files on disk. Pure synchronous Node — safe to call from\n * a Vite `closeBundle` or Webpack `afterEmit` hook.\n */\nexport function injectPair(p: BundlePair): InjectResult {\n  const jsRaw = readFileSync(p.jsPath, 'utf8');\n  const mapRaw = readFileSync(p.mapPath, 'utf8');\n  const map = JSON.parse(mapRaw) as { debugId?: unknown; [k: string]: unknown };\n\n  let debugId = typeof map.debugId === 'string' ? map.debugId : '';\n  const existing = DEBUG_ID_LINE_RE.exec(jsRaw);\n  if (existing && existing[1]) debugId = debugId || existing[1];\n  const reused = !!debugId;\n  if (!debugId) debugId = randomUUID();\n\n  map.debugId = debugId;\n  writeFileSync(p.mapPath, JSON.stringify(map));\n\n  let jsOut = stripRegistration(jsRaw.replace(DEBUG_ID_LINE_RE, ''));\n  jsOut = jsOut.replace(/\\s+$/, '');\n  jsOut += `\\n${buildRegistrationSnippet(jsOut, debugId)}\\n//# debugId=${debugId}\\n`;\n  writeFileSync(p.jsPath, jsOut);\n\n  return { debugId, reused };\n}\n\n/** Inject every pair under `root`. Returns one record per pair. */\nexport function injectAll(pairs: BundlePair[]): Array<{ pair: BundlePair; result: InjectResult }> {\n  return pairs.map((pair) => ({ pair, result: injectPair(pair) }));\n}\n\n/** Read a debug ID back from a `.map` file. */\nexport function readDebugIdFromMap(mapPath: string): string | null {\n  const json = JSON.parse(readFileSync(mapPath, 'utf8')) as { debugId?: unknown };\n  return typeof json.debugId === 'string' ? json.debugId : null;\n}\n","/**\n * Source-map / bundle upload client. Build-time only.\n *\n * Wraps the AllStak `/api/v1/artifacts/upload` endpoint with multipart\n * form data and best-effort retries. Pure Node 18+ (uses the global\n * `fetch` and `FormData`), no third-party HTTP client required.\n *\n * Auth: `X-AllStak-Upload-Token` header (NOT the runtime API key —\n * uploads have a dedicated, narrower scope. Generate one in the\n * dashboard → Project Settings → Upload Tokens).\n */\n\nimport { readFileSync } from 'node:fs';\nimport { basename } from 'node:path';\n\nimport type { BundlePair } from './walk';\nimport { readDebugIdFromMap } from './inject';\n\n/** Default ingest host — overridden via `host` option or `ALLSTAK_HOST`. */\nexport const DEFAULT_HOST = 'https://api.allstak.sa';\n\n/** Options for {@link uploadAll} / {@link uploadPair}. */\nexport interface UploadOptions {\n  /** Release identifier, e.g. `myapp@1.4.2`. Required server-side. */\n  release: string;\n  /** Optional distribution tag (`web`, `ios-hermes`, `staging`, …). */\n  dist?: string;\n  /** AllStak ingest host (default `https://api.allstak.sa`). */\n  host?: string;\n  /** Project upload token (`aspk_…`). May come from `ALLSTAK_UPLOAD_TOKEN`. */\n  token: string;\n  /**\n   * Drop `sourcesContent` from the map before upload (smaller payload).\n   * Off by default — sourcesContent enables full-source rendering on the\n   * dashboard. Turn on if you don't want source code uploaded.\n   */\n  stripSources?: boolean;\n  /** Also upload the JS bundle alongside the map (off by default). */\n  uploadBundles?: boolean;\n}\n\n/** One artifact upload result. */\nexport interface UploadResult {\n  bundleName: string;\n  debugId: string;\n  /** True when both the map (and bundle, if requested) uploaded OK. */\n  ok: boolean;\n  /** Per-artifact responses, in the order we sent them. */\n  steps: Array<{\n    type: 'sourcemap' | 'bundle';\n    status: number;\n    sha8: string;\n    body?: string;\n  }>;\n}\n\ninterface OneStepResult {\n  status: number;\n  body: string;\n  ok: boolean;\n}\n\nasync function uploadOne(\n  type: 'sourcemap' | 'bundle',\n  filePath: string,\n  debugId: string,\n  opts: Required<Pick<UploadOptions, 'release' | 'host' | 'token'>> &\n    Pick<UploadOptions, 'dist' | 'stripSources'>,\n): Promise<OneStepResult> {\n  let buf = readFileSync(filePath);\n  if (type === 'sourcemap' && opts.stripSources) {\n    const json = JSON.parse(buf.toString('utf8')) as { sourcesContent?: unknown };\n    if (Array.isArray(json.sourcesContent)) delete json.sourcesContent;\n    buf = Buffer.from(JSON.stringify(json));\n  }\n\n  const form = new FormData();\n  form.append('debugId', debugId);\n  form.append('type', type);\n  form.append('release', opts.release);\n  if (opts.dist) form.append('dist', opts.dist);\n  form.append(\n    'file',\n    new Blob([buf], {\n      type: type === 'sourcemap' ? 'application/json' : 'application/javascript',\n    }),\n    basename(filePath),\n  );\n\n  const res = await fetch(opts.host.replace(/\\/$/, '') + '/api/v1/artifacts/upload', {\n    method: 'POST',\n    headers: { 'X-AllStak-Upload-Token': opts.token },\n    body: form,\n  });\n  return { status: res.status, body: await res.text(), ok: res.ok };\n}\n\nfunction sha8(buf: Buffer): string {\n  // Browser/Node fallback — keeps this file pure-JS (no node:crypto in\n  // the public surface). Caller doesn't need cryptographic strength;\n  // this is for log identification only.\n  let hash = 0;\n  for (let i = 0; i < buf.length; i++) hash = ((hash << 5) - hash + buf[i]!) | 0;\n  return (hash >>> 0).toString(16).padStart(8, '0');\n}\n\n/** Upload one bundle/map pair. The map is always uploaded; bundle is opt-in. */\nexport async function uploadPair(p: BundlePair, opts: UploadOptions): Promise<UploadResult> {\n  const debugId = readDebugIdFromMap(p.mapPath);\n  if (!debugId) {\n    return {\n      bundleName: p.bundleName,\n      debugId: '',\n      ok: false,\n      steps: [{\n        type: 'sourcemap',\n        status: 0,\n        sha8: '',\n        body: `[allstak/upload] no debugId in ${p.mapPath} — run inject first`,\n      }],\n    };\n  }\n  const merged = {\n    release: opts.release,\n    host: opts.host ?? process.env.ALLSTAK_HOST ?? DEFAULT_HOST,\n    token: opts.token,\n    dist: opts.dist,\n    stripSources: opts.stripSources,\n  };\n\n  const steps: UploadResult['steps'] = [];\n  const mapResult = await uploadOne('sourcemap', p.mapPath, debugId, merged);\n  steps.push({\n    type: 'sourcemap',\n    status: mapResult.status,\n    sha8: sha8(readFileSync(p.mapPath)),\n    body: mapResult.ok ? undefined : mapResult.body,\n  });\n\n  let allOk = mapResult.ok;\n  if (opts.uploadBundles) {\n    const bundleResult = await uploadOne('bundle', p.jsPath, debugId, merged);\n    steps.push({\n      type: 'bundle',\n      status: bundleResult.status,\n      sha8: sha8(readFileSync(p.jsPath)),\n      body: bundleResult.ok ? undefined : bundleResult.body,\n    });\n    allOk = allOk && bundleResult.ok;\n  }\n\n  return { bundleName: p.bundleName, debugId, ok: allOk, steps };\n}\n\n/** Upload every pair in parallel. */\nexport async function uploadAll(\n  pairs: BundlePair[],\n  opts: UploadOptions,\n): Promise<UploadResult[]> {\n  return Promise.all(pairs.map((p) => uploadPair(p, opts)));\n}\n","/**\n * Programmatic source-map pipeline. Build-time only.\n *\n * The high-level \"do everything\" entry point Vite/Webpack/Next plugins\n * call. Walk the build output → inject debug IDs → upload artifacts.\n *\n *   import { processBuildOutput } from '@allstak/react/sourcemaps';\n *\n *   await processBuildOutput({\n *     dir: 'dist',\n *     release: 'web@1.4.2',\n *     token: process.env.ALLSTAK_UPLOAD_TOKEN!,\n *   });\n */\n\nexport type { BundlePair } from './walk';\nexport { findPairs, walk } from './walk';\nexport type { InjectResult } from './inject';\nexport { injectPair, injectAll, readDebugIdFromMap } from './inject';\nexport type { UploadOptions, UploadResult } from './upload';\nexport { uploadPair, uploadAll, DEFAULT_HOST } from './upload';\n\nimport { resolve } from 'node:path';\nimport { existsSync, readFileSync } from 'node:fs';\nimport { findPairs } from './walk';\nimport { injectAll } from './inject';\nimport { uploadAll, type UploadOptions, type UploadResult } from './upload';\n\n/** Options for {@link processBuildOutput}. */\nexport interface ProcessOptions extends Partial<UploadOptions> {\n  /** Build output directory to scan (e.g. `dist`, `.next/static`). */\n  dir: string;\n  /**\n   * If true, only inject debug IDs and skip upload. Useful for sample\n   * apps and CI dry-runs.\n   */\n  injectOnly?: boolean;\n  /** Suppress per-pair console output. Default false (you want to see this). */\n  silent?: boolean;\n}\n\n/** What `processBuildOutput` reports back. */\nexport interface ProcessReport {\n  /** Absolute output dir scanned. */\n  dir: string;\n  /** Pairs found. */\n  pairs: number;\n  /** Per-pair injection results (debugId + reused?). */\n  injected: Array<{ bundleName: string; debugId: string; reused: boolean }>;\n  /** Per-pair upload results, omitted when no token / `injectOnly: true`. */\n  uploaded?: UploadResult[];\n}\n\nexport async function processBuildOutput(opts: ProcessOptions): Promise<ProcessReport> {\n  const dir = resolve(opts.dir);\n  const pairs = findPairs(dir);\n  const log = opts.silent ? () => undefined : (m: string) => console.log(`[allstak/sourcemaps] ${m}`);\n\n  log(`scanning ${dir} — ${pairs.length} bundle/map pair(s)`);\n  if (pairs.length === 0) {\n    return { dir, pairs: 0, injected: [] };\n  }\n\n  const injectedRaw = injectAll(pairs);\n  const injected = injectedRaw.map(({ pair, result }) => ({\n    bundleName: pair.bundleName,\n    debugId: result.debugId,\n    reused: result.reused,\n  }));\n  for (const i of injected) {\n    log(`  ${i.bundleName}  ${i.debugId}  ${i.reused ? '(reused)' : '(new)'}`);\n  }\n\n  const env = loadAllStakEnv();\n  const token = opts.token ?? env.ALLSTAK_UPLOAD_TOKEN;\n  const release = opts.release ?? env.ALLSTAK_RELEASE;\n  const host = opts.host ?? env.ALLSTAK_HOST;\n  const dist = opts.dist ?? env.ALLSTAK_DIST;\n\n  if (opts.injectOnly || !token) {\n    if (!opts.injectOnly && !token) {\n      log('skipping upload — no token (set ALLSTAK_UPLOAD_TOKEN or pass `token`)');\n    }\n    return { dir, pairs: pairs.length, injected };\n  }\n  if (!release) {\n    log('skipping upload — no release (set ALLSTAK_RELEASE or pass `release`)');\n    return { dir, pairs: pairs.length, injected };\n  }\n\n  const uploaded = await uploadAll(pairs, {\n    ...opts,\n    release,\n    token,\n    host,\n    dist,\n  });\n  for (const u of uploaded) {\n    if (u.ok) {\n      log(`  ${u.bundleName}  uploaded debugId=${u.debugId}`);\n    } else {\n      const last = u.steps[u.steps.length - 1];\n      log(`  ${u.bundleName}  FAIL status=${last?.status ?? '?'} body=${last?.body ?? ''}`);\n    }\n  }\n  return { dir, pairs: pairs.length, injected, uploaded };\n}\n\nfunction loadAllStakEnv(): Record<string, string | undefined> {\n  const out: Record<string, string | undefined> = { ...process.env };\n  for (const file of ['.env.local', '.env']) {\n    const full = resolve(process.cwd(), file);\n    if (!existsSync(full)) continue;\n    const text = readFileSync(full, 'utf8');\n    for (const line of text.split(/\\r?\\n/)) {\n      const trimmed = line.trim();\n      if (!trimmed || trimmed.startsWith('#')) continue;\n      const match = /^([A-Z0-9_]+)\\s*=\\s*(.*)$/.exec(trimmed);\n      if (!match) continue;\n      const key = match[1]!;\n      if (out[key] !== undefined) continue;\n      out[key] = match[2]!.replace(/^['\"]|['\"]$/g, '');\n    }\n  }\n  return out;\n}\n","/**\n * Webpack plugin — same job as the Vite plugin: walk the build output\n * after emit, inject debug IDs into every JS+map pair, and (when a\n * token is present) upload to AllStak.\n *\n *   // webpack.config.js\n *   const { AllStakWebpackPlugin } = require('@allstak/react/webpack');\n *\n *   module.exports = {\n *     devtool: 'source-map',\n *     plugins: [\n *       new AllStakWebpackPlugin({\n *         release: process.env.ALLSTAK_RELEASE,\n *         token: process.env.ALLSTAK_UPLOAD_TOKEN,\n *         dist: 'web',\n *       }),\n *     ],\n *   };\n *\n * The plugin hooks `afterEmit`, the moment Webpack guarantees every\n * asset is on disk. Failures log a warning rather than failing the\n * build — a flaky CI step doesn't block shipping.\n */\n\nimport { processBuildOutput, type ProcessOptions, type ProcessReport } from './sourcemaps';\n\nexport interface AllStakWebpackPluginOptions extends Omit<ProcessOptions, 'dir'> {\n  /** Override the output directory. By default uses `compiler.outputPath`. */\n  dir?: string;\n  /** If true, plugin is a no-op. */\n  disabled?: boolean;\n}\n\ninterface MinimalCompiler {\n  hooks: { afterEmit: { tapPromise: (name: string, fn: (compilation: { compiler?: { outputPath?: string } }) => Promise<void>) => void } };\n  outputPath?: string;\n  options?: { output?: { path?: string } };\n}\n\nexport class AllStakWebpackPlugin {\n  /** Last successful report — exposed for tests / programmatic inspection. */\n  public lastReport: ProcessReport | null = null;\n\n  constructor(private readonly opts: AllStakWebpackPluginOptions = {} as AllStakWebpackPluginOptions) {}\n\n  apply(compiler: MinimalCompiler): void {\n    if (this.opts.disabled) return;\n\n    compiler.hooks.afterEmit.tapPromise('AllStakWebpackPlugin', async (compilation) => {\n      const dir =\n        this.opts.dir ??\n        compilation.compiler?.outputPath ??\n        compiler.outputPath ??\n        compiler.options?.output?.path ??\n        process.cwd();\n\n      try {\n        this.lastReport = await processBuildOutput({\n          ...this.opts,\n          dir,\n          silent: this.opts.silent ?? false,\n        });\n      } catch (e) {\n        console.error(`[allstak/webpack] failed: ${(e as Error).message}`);\n      }\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACMA,qBAAsC;AACtC,uBAA+B;AAaxB,SAAS,KAAK,KAAa,MAAgB,CAAC,GAAa;AAC9D,aAAW,YAAQ,4BAAY,GAAG,GAAG;AACnC,UAAM,WAAO,uBAAK,KAAK,IAAI;AAC3B,UAAM,SAAK,yBAAS,IAAI;AACxB,QAAI,GAAG,YAAY,EAAG,MAAK,MAAM,GAAG;AAAA,QAC/B,KAAI,KAAK,IAAI;AAAA,EACpB;AACA,SAAO;AACT;AASO,SAAS,UAAU,MAA4B;AACpD,QAAM,MAAM,KAAK,IAAI;AACrB,QAAM,OAAO,IAAI,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM,CAAC,CAAC;AAC1D,QAAM,QAAsB,CAAC;AAC7B,aAAW,MAAM,KAAK;AACpB,QAAI,CAAC,GAAG,SAAS,KAAK,KAAK,CAAC,GAAG,SAAS,MAAM,KAAK,CAAC,GAAG,SAAS,MAAM,EAAG;AACzE,UAAM,MAAM,KAAK;AACjB,QAAI,KAAK,IAAI,GAAG,GAAG;AACjB,YAAM,KAAK,EAAE,QAAQ,IAAI,SAAS,KAAK,gBAAY,2BAAS,EAAE,EAAE,CAAC;AAAA,IACnE;AAAA,EACF;AACA,SAAO;AACT;;;AChCA,IAAAA,kBAA4C;AAC5C,yBAA2B;AAI3B,IAAM,mBAAmB;AACzB,IAAM,sBAAsB;AAE5B,SAAS,yBAAyB,QAAgB,SAAyB;AACzE,QAAM,QAAQ,mBAAmB,KAAK,MAAM,KAAK,2BAA2B,KAAK,MAAM;AACvF,MAAI,OAAO;AACT,WAAO,GAAG,mBAAmB,uFAAuF,OAAO;AAAA,EAC7H;AACA,SAAO,GAAG,mBAAmB,iOAAiO,OAAO;AACvQ;AAEA,SAAS,kBAAkB,IAAoB;AAC7C,QAAM,SAAS,IAAI;AAAA,IACjB,MAAM,oBAAoB,QAAQ,UAAU,CAAC,MAAM,OAAO,CAAC,IAAI;AAAA,IAC/D;AAAA,EACF;AACA,SAAO,GAAG,QAAQ,QAAQ,EAAE;AAC9B;AAeO,SAAS,WAAW,GAA6B;AACtD,QAAM,YAAQ,8BAAa,EAAE,QAAQ,MAAM;AAC3C,QAAM,aAAS,8BAAa,EAAE,SAAS,MAAM;AAC7C,QAAM,MAAM,KAAK,MAAM,MAAM;AAE7B,MAAI,UAAU,OAAO,IAAI,YAAY,WAAW,IAAI,UAAU;AAC9D,QAAM,WAAW,iBAAiB,KAAK,KAAK;AAC5C,MAAI,YAAY,SAAS,CAAC,EAAG,WAAU,WAAW,SAAS,CAAC;AAC5D,QAAM,SAAS,CAAC,CAAC;AACjB,MAAI,CAAC,QAAS,eAAU,+BAAW;AAEnC,MAAI,UAAU;AACd,qCAAc,EAAE,SAAS,KAAK,UAAU,GAAG,CAAC;AAE5C,MAAI,QAAQ,kBAAkB,MAAM,QAAQ,kBAAkB,EAAE,CAAC;AACjE,UAAQ,MAAM,QAAQ,QAAQ,EAAE;AAChC,WAAS;AAAA,EAAK,yBAAyB,OAAO,OAAO,CAAC;AAAA,cAAiB,OAAO;AAAA;AAC9E,qCAAc,EAAE,QAAQ,KAAK;AAE7B,SAAO,EAAE,SAAS,OAAO;AAC3B;AAGO,SAAS,UAAU,OAAwE;AAChG,SAAO,MAAM,IAAI,CAAC,UAAU,EAAE,MAAM,QAAQ,WAAW,IAAI,EAAE,EAAE;AACjE;AAGO,SAAS,mBAAmB,SAAgC;AACjE,QAAM,OAAO,KAAK,UAAM,8BAAa,SAAS,MAAM,CAAC;AACrD,SAAO,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;AAC3D;;;ACzEA,IAAAC,kBAA6B;AAC7B,IAAAC,oBAAyB;AAMlB,IAAM,eAAe;AA2C5B,eAAe,UACb,MACA,UACA,SACA,MAEwB;AACxB,MAAI,UAAM,8BAAa,QAAQ;AAC/B,MAAI,SAAS,eAAe,KAAK,cAAc;AAC7C,UAAM,OAAO,KAAK,MAAM,IAAI,SAAS,MAAM,CAAC;AAC5C,QAAI,MAAM,QAAQ,KAAK,cAAc,EAAG,QAAO,KAAK;AACpD,UAAM,OAAO,KAAK,KAAK,UAAU,IAAI,CAAC;AAAA,EACxC;AAEA,QAAM,OAAO,IAAI,SAAS;AAC1B,OAAK,OAAO,WAAW,OAAO;AAC9B,OAAK,OAAO,QAAQ,IAAI;AACxB,OAAK,OAAO,WAAW,KAAK,OAAO;AACnC,MAAI,KAAK,KAAM,MAAK,OAAO,QAAQ,KAAK,IAAI;AAC5C,OAAK;AAAA,IACH;AAAA,IACA,IAAI,KAAK,CAAC,GAAG,GAAG;AAAA,MACd,MAAM,SAAS,cAAc,qBAAqB;AAAA,IACpD,CAAC;AAAA,QACD,4BAAS,QAAQ;AAAA,EACnB;AAEA,QAAM,MAAM,MAAM,MAAM,KAAK,KAAK,QAAQ,OAAO,EAAE,IAAI,4BAA4B;AAAA,IACjF,QAAQ;AAAA,IACR,SAAS,EAAE,0BAA0B,KAAK,MAAM;AAAA,IAChD,MAAM;AAAA,EACR,CAAC;AACD,SAAO,EAAE,QAAQ,IAAI,QAAQ,MAAM,MAAM,IAAI,KAAK,GAAG,IAAI,IAAI,GAAG;AAClE;AAEA,SAAS,KAAK,KAAqB;AAIjC,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,SAAS,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAM;AAC7E,UAAQ,SAAS,GAAG,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAClD;AAGA,eAAsB,WAAW,GAAe,MAA4C;AAC1F,QAAM,UAAU,mBAAmB,EAAE,OAAO;AAC5C,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,MACL,YAAY,EAAE;AAAA,MACd,SAAS;AAAA,MACT,IAAI;AAAA,MACJ,OAAO,CAAC;AAAA,QACN,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,MAAM,kCAAkC,EAAE,OAAO;AAAA,MACnD,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,SAAS;AAAA,IACb,SAAS,KAAK;AAAA,IACd,MAAM,KAAK,QAAQ,QAAQ,IAAI,gBAAgB;AAAA,IAC/C,OAAO,KAAK;AAAA,IACZ,MAAM,KAAK;AAAA,IACX,cAAc,KAAK;AAAA,EACrB;AAEA,QAAM,QAA+B,CAAC;AACtC,QAAM,YAAY,MAAM,UAAU,aAAa,EAAE,SAAS,SAAS,MAAM;AACzE,QAAM,KAAK;AAAA,IACT,MAAM;AAAA,IACN,QAAQ,UAAU;AAAA,IAClB,MAAM,SAAK,8BAAa,EAAE,OAAO,CAAC;AAAA,IAClC,MAAM,UAAU,KAAK,SAAY,UAAU;AAAA,EAC7C,CAAC;AAED,MAAI,QAAQ,UAAU;AACtB,MAAI,KAAK,eAAe;AACtB,UAAM,eAAe,MAAM,UAAU,UAAU,EAAE,QAAQ,SAAS,MAAM;AACxE,UAAM,KAAK;AAAA,MACT,MAAM;AAAA,MACN,QAAQ,aAAa;AAAA,MACrB,MAAM,SAAK,8BAAa,EAAE,MAAM,CAAC;AAAA,MACjC,MAAM,aAAa,KAAK,SAAY,aAAa;AAAA,IACnD,CAAC;AACD,YAAQ,SAAS,aAAa;AAAA,EAChC;AAEA,SAAO,EAAE,YAAY,EAAE,YAAY,SAAS,IAAI,OAAO,MAAM;AAC/D;AAGA,eAAsB,UACpB,OACA,MACyB;AACzB,SAAO,QAAQ,IAAI,MAAM,IAAI,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC;AAC1D;;;AC1IA,IAAAC,oBAAwB;AACxB,IAAAC,kBAAyC;AA8BzC,eAAsB,mBAAmB,MAA8C;AACrF,QAAM,UAAM,2BAAQ,KAAK,GAAG;AAC5B,QAAM,QAAQ,UAAU,GAAG;AAC3B,QAAM,MAAM,KAAK,SAAS,MAAM,SAAY,CAAC,MAAc,QAAQ,IAAI,wBAAwB,CAAC,EAAE;AAElG,MAAI,YAAY,GAAG,WAAM,MAAM,MAAM,qBAAqB;AAC1D,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,EAAE,KAAK,OAAO,GAAG,UAAU,CAAC,EAAE;AAAA,EACvC;AAEA,QAAM,cAAc,UAAU,KAAK;AACnC,QAAM,WAAW,YAAY,IAAI,CAAC,EAAE,MAAM,OAAO,OAAO;AAAA,IACtD,YAAY,KAAK;AAAA,IACjB,SAAS,OAAO;AAAA,IAChB,QAAQ,OAAO;AAAA,EACjB,EAAE;AACF,aAAW,KAAK,UAAU;AACxB,QAAI,KAAK,EAAE,UAAU,KAAK,EAAE,OAAO,KAAK,EAAE,SAAS,aAAa,OAAO,EAAE;AAAA,EAC3E;AAEA,QAAM,MAAM,eAAe;AAC3B,QAAM,QAAQ,KAAK,SAAS,IAAI;AAChC,QAAM,UAAU,KAAK,WAAW,IAAI;AACpC,QAAM,OAAO,KAAK,QAAQ,IAAI;AAC9B,QAAM,OAAO,KAAK,QAAQ,IAAI;AAE9B,MAAI,KAAK,cAAc,CAAC,OAAO;AAC7B,QAAI,CAAC,KAAK,cAAc,CAAC,OAAO;AAC9B,UAAI,4EAAuE;AAAA,IAC7E;AACA,WAAO,EAAE,KAAK,OAAO,MAAM,QAAQ,SAAS;AAAA,EAC9C;AACA,MAAI,CAAC,SAAS;AACZ,QAAI,2EAAsE;AAC1E,WAAO,EAAE,KAAK,OAAO,MAAM,QAAQ,SAAS;AAAA,EAC9C;AAEA,QAAM,WAAW,MAAM,UAAU,OAAO;AAAA,IACtC,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,aAAW,KAAK,UAAU;AACxB,QAAI,EAAE,IAAI;AACR,UAAI,KAAK,EAAE,UAAU,sBAAsB,EAAE,OAAO,EAAE;AAAA,IACxD,OAAO;AACL,YAAM,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACvC,UAAI,KAAK,EAAE,UAAU,iBAAiB,MAAM,UAAU,GAAG,SAAS,MAAM,QAAQ,EAAE,EAAE;AAAA,IACtF;AAAA,EACF;AACA,SAAO,EAAE,KAAK,OAAO,MAAM,QAAQ,UAAU,SAAS;AACxD;AAEA,SAAS,iBAAqD;AAC5D,QAAM,MAA0C,EAAE,GAAG,QAAQ,IAAI;AACjE,aAAW,QAAQ,CAAC,cAAc,MAAM,GAAG;AACzC,UAAM,WAAO,2BAAQ,QAAQ,IAAI,GAAG,IAAI;AACxC,QAAI,KAAC,4BAAW,IAAI,EAAG;AACvB,UAAM,WAAO,8BAAa,MAAM,MAAM;AACtC,eAAW,QAAQ,KAAK,MAAM,OAAO,GAAG;AACtC,YAAM,UAAU,KAAK,KAAK;AAC1B,UAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,EAAG;AACzC,YAAM,QAAQ,4BAA4B,KAAK,OAAO;AACtD,UAAI,CAAC,MAAO;AACZ,YAAM,MAAM,MAAM,CAAC;AACnB,UAAI,IAAI,GAAG,MAAM,OAAW;AAC5B,UAAI,GAAG,IAAI,MAAM,CAAC,EAAG,QAAQ,gBAAgB,EAAE;AAAA,IACjD;AAAA,EACF;AACA,SAAO;AACT;;;ACtFO,IAAM,uBAAN,MAA2B;AAAA,EAIhC,YAA6B,OAAoC,CAAC,GAAkC;AAAvE;AAF7B;AAAA,SAAO,aAAmC;AAAA,EAE2D;AAAA,EAErG,MAAM,UAAiC;AACrC,QAAI,KAAK,KAAK,SAAU;AAExB,aAAS,MAAM,UAAU,WAAW,wBAAwB,OAAO,gBAAgB;AACjF,YAAM,MACJ,KAAK,KAAK,OACV,YAAY,UAAU,cACtB,SAAS,cACT,SAAS,SAAS,QAAQ,QAC1B,QAAQ,IAAI;AAEd,UAAI;AACF,aAAK,aAAa,MAAM,mBAAmB;AAAA,UACzC,GAAG,KAAK;AAAA,UACR;AAAA,UACA,QAAQ,KAAK,KAAK,UAAU;AAAA,QAC9B,CAAC;AAAA,MACH,SAAS,GAAG;AACV,gBAAQ,MAAM,6BAA8B,EAAY,OAAO,EAAE;AAAA,MACnE;AAAA,IACF,CAAC;AAAA,EACH;AACF;;;AL3BO,SAAS,YACd,aACA,aAA6B,CAAC,GACd;AAChB,QAAM,cAAc,WAAW;AAE/B,SAAO;AAAA,IACL,GAAG;AAAA,IACH,6BACE,WAAW,+BAA+B;AAAA,IAE5C,QAAQ,QAAiB,KAAuB;AAC9C,YAAM,gBAAiB,UAAgC,CAAC;AACxD,YAAM,aAAc,OAA8B,CAAC;AACnD,YAAM,UAAU,cAAc,YAAY,cAAc,UAAU,CAAC;AAInE,UAAI,CAAC,WAAW,YAAY,CAAC,WAAW,KAAK;AAC3C,gBAAQ,KAAK,IAAI,qBAAqB,WAAW,CAAC;AAAA,MACpD;AAEA,aAAO,cAAc,YAAY,eAAe,GAAG,IAAI;AAAA,IACzD;AAAA,EACF;AACF;","names":["import_node_fs","import_node_fs","import_node_path","import_node_path","import_node_fs"]}

package/dist/build/next.mjs

@@ -1,7 +1,7 @@
 import {
   AllStakWebpackPlugin
-} from "./chunk-ZY4H5AN4.mjs";
-import "./chunk-G6VPGDP6.mjs";
+} from "./chunk-3JRNQSVX.mjs";
+import "./chunk-DURAJQ3M.mjs";
 
 // src/build/next.ts
 function withAllStak(allstakOpts, nextConfig = {}) {

package/dist/build/sourcemaps.js

@@ -189,6 +189,7 @@ async function uploadAll(pairs, opts) {
 
 // src/build/sourcemaps.ts
 var import_node_path3 = require("path");
+var import_node_fs4 = require("fs");
 async function processBuildOutput(opts) {
   const dir = (0, import_node_path3.resolve)(opts.dir);
   const pairs = findPairs(dir);
@@ -206,8 +207,11 @@ async function processBuildOutput(opts) {
   for (const i of injected) {
     log(`  ${i.bundleName}  ${i.debugId}  ${i.reused ? "(reused)" : "(new)"}`);
   }
-  const token = opts.token ?? process.env.ALLSTAK_UPLOAD_TOKEN;
-  const release = opts.release ?? process.env.ALLSTAK_RELEASE;
+  const env = loadAllStakEnv();
+  const token = opts.token ?? env.ALLSTAK_UPLOAD_TOKEN;
+  const release = opts.release ?? env.ALLSTAK_RELEASE;
+  const host = opts.host ?? env.ALLSTAK_HOST;
+  const dist = opts.dist ?? env.ALLSTAK_DIST;
   if (opts.injectOnly || !token) {
     if (!opts.injectOnly && !token) {
       log("skipping upload \u2014 no token (set ALLSTAK_UPLOAD_TOKEN or pass `token`)");
@@ -221,7 +225,9 @@ async function processBuildOutput(opts) {
   const uploaded = await uploadAll(pairs, {
     ...opts,
     release,
-    token
+    token,
+    host,
+    dist
   });
   for (const u of uploaded) {
     if (u.ok) {
@@ -233,6 +239,24 @@ async function processBuildOutput(opts) {
   }
   return { dir, pairs: pairs.length, injected, uploaded };
 }
+function loadAllStakEnv() {
+  const out = { ...process.env };
+  for (const file of [".env.local", ".env"]) {
+    const full = (0, import_node_path3.resolve)(process.cwd(), file);
+    if (!(0, import_node_fs4.existsSync)(full)) continue;
+    const text = (0, import_node_fs4.readFileSync)(full, "utf8");
+    for (const line of text.split(/\r?\n/)) {
+      const trimmed = line.trim();
+      if (!trimmed || trimmed.startsWith("#")) continue;
+      const match = /^([A-Z0-9_]+)\s*=\s*(.*)$/.exec(trimmed);
+      if (!match) continue;
+      const key = match[1];
+      if (out[key] !== void 0) continue;
+      out[key] = match[2].replace(/^['"]|['"]$/g, "");
+    }
+  }
+  return out;
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   DEFAULT_HOST,

package/dist/build/sourcemaps.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/build/sourcemaps.ts","../../src/build/walk.ts","../../src/build/inject.ts","../../src/build/upload.ts"],"sourcesContent":["/**\n * Programmatic source-map pipeline. Build-time only.\n *\n * The high-level \"do everything\" entry point Vite/Webpack/Next plugins\n * call. Walk the build output → inject debug IDs → upload artifacts.\n *\n *   import { processBuildOutput } from '@allstak/react/sourcemaps';\n *\n *   await processBuildOutput({\n *     dir: 'dist',\n *     release: 'web@1.4.2',\n *     token: process.env.ALLSTAK_UPLOAD_TOKEN!,\n *   });\n */\n\nexport type { BundlePair } from './walk';\nexport { findPairs, walk } from './walk';\nexport type { InjectResult } from './inject';\nexport { injectPair, injectAll, readDebugIdFromMap } from './inject';\nexport type { UploadOptions, UploadResult } from './upload';\nexport { uploadPair, uploadAll, DEFAULT_HOST } from './upload';\n\nimport { resolve } from 'node:path';\nimport { findPairs } from './walk';\nimport { injectAll } from './inject';\nimport { uploadAll, type UploadOptions, type UploadResult } from './upload';\n\n/** Options for {@link processBuildOutput}. */\nexport interface ProcessOptions extends Partial<UploadOptions> {\n  /** Build output directory to scan (e.g. `dist`, `.next/static`). */\n  dir: string;\n  /**\n   * If true, only inject debug IDs and skip upload. Useful for sample\n   * apps and CI dry-runs.\n   */\n  injectOnly?: boolean;\n  /** Suppress per-pair console output. Default false (you want to see this). */\n  silent?: boolean;\n}\n\n/** What `processBuildOutput` reports back. */\nexport interface ProcessReport {\n  /** Absolute output dir scanned. */\n  dir: string;\n  /** Pairs found. */\n  pairs: number;\n  /** Per-pair injection results (debugId + reused?). */\n  injected: Array<{ bundleName: string; debugId: string; reused: boolean }>;\n  /** Per-pair upload results, omitted when no token / `injectOnly: true`. */\n  uploaded?: UploadResult[];\n}\n\nexport async function processBuildOutput(opts: ProcessOptions): Promise<ProcessReport> {\n  const dir = resolve(opts.dir);\n  const pairs = findPairs(dir);\n  const log = opts.silent ? () => undefined : (m: string) => console.log(`[allstak/sourcemaps] ${m}`);\n\n  log(`scanning ${dir} — ${pairs.length} bundle/map pair(s)`);\n  if (pairs.length === 0) {\n    return { dir, pairs: 0, injected: [] };\n  }\n\n  const injectedRaw = injectAll(pairs);\n  const injected = injectedRaw.map(({ pair, result }) => ({\n    bundleName: pair.bundleName,\n    debugId: result.debugId,\n    reused: result.reused,\n  }));\n  for (const i of injected) {\n    log(`  ${i.bundleName}  ${i.debugId}  ${i.reused ? '(reused)' : '(new)'}`);\n  }\n\n  const token = opts.token ?? process.env.ALLSTAK_UPLOAD_TOKEN;\n  const release = opts.release ?? process.env.ALLSTAK_RELEASE;\n\n  if (opts.injectOnly || !token) {\n    if (!opts.injectOnly && !token) {\n      log('skipping upload — no token (set ALLSTAK_UPLOAD_TOKEN or pass `token`)');\n    }\n    return { dir, pairs: pairs.length, injected };\n  }\n  if (!release) {\n    log('skipping upload — no release (set ALLSTAK_RELEASE or pass `release`)');\n    return { dir, pairs: pairs.length, injected };\n  }\n\n  const uploaded = await uploadAll(pairs, {\n    ...opts,\n    release,\n    token,\n  });\n  for (const u of uploaded) {\n    if (u.ok) {\n      log(`  ${u.bundleName}  uploaded debugId=${u.debugId}`);\n    } else {\n      const last = u.steps[u.steps.length - 1];\n      log(`  ${u.bundleName}  FAIL status=${last?.status ?? '?'} body=${last?.body ?? ''}`);\n    }\n  }\n  return { dir, pairs: pairs.length, injected, uploaded };\n}\n","/**\n * Build-time only. File-system walking for the source-map pipeline.\n * Pure Node 18+ (built-in `node:fs` only). Browser runtime never imports\n * this — it's behind a `./build/*` subpath that's marked Node-platform.\n */\n\nimport { readdirSync, statSync } from 'node:fs';\nimport { basename, join } from 'node:path';\n\n/** A bundle and its companion source map on disk. */\nexport interface BundlePair {\n  /** Absolute path to the JS bundle (`.js` / `.mjs` / `.cjs`). */\n  jsPath: string;\n  /** Absolute path to the matching `.map` file. */\n  mapPath: string;\n  /** Bare filename of the bundle (no directory), for log lines. */\n  bundleName: string;\n}\n\n/** Recursively list every file under `dir`. Symlinks are followed. */\nexport function walk(dir: string, out: string[] = []): string[] {\n  for (const name of readdirSync(dir)) {\n    const full = join(dir, name);\n    const st = statSync(full);\n    if (st.isDirectory()) walk(full, out);\n    else out.push(full);\n  }\n  return out;\n}\n\n/**\n * Returns every `(bundle, sourcemap)` pair under `root`.\n *\n * A pair is a `.js` / `.mjs` / `.cjs` file with a sibling file of the\n * same name plus a `.map` suffix — the convention every modern bundler\n * (Vite, Webpack, esbuild, Rollup, tsup) follows.\n */\nexport function findPairs(root: string): BundlePair[] {\n  const all = walk(root);\n  const maps = new Set(all.filter((p) => p.endsWith('.map')));\n  const pairs: BundlePair[] = [];\n  for (const js of all) {\n    if (!js.endsWith('.js') && !js.endsWith('.mjs') && !js.endsWith('.cjs')) continue;\n    const map = js + '.map';\n    if (maps.has(map)) {\n      pairs.push({ jsPath: js, mapPath: map, bundleName: basename(js) });\n    }\n  }\n  return pairs;\n}\n","/**\n * Debug-ID injection. Build-time only.\n *\n * For each `(bundle.js, bundle.js.map)` pair we:\n *   - Generate a stable per-bundle UUID (one already on the bundle is\n *     reused so re-running is idempotent).\n *   - Append `//# debugId=<uuid>` to the JS so the runtime resolver in\n *     `src/debug-id.ts` can read it back.\n *   - Write a top-level `debugId` field into the `.map` JSON so the\n *     symbolicator on the backend can join `bundle.js` ↔ `bundle.js.map`\n *     by ID rather than guessing from filenames.\n *\n * Bundlers re-write hashed filenames on every build, so joining by ID\n * (instead of by URL or path) is what makes resolved stack frames\n * survive across releases.\n */\n\nimport { readFileSync, writeFileSync } from 'node:fs';\nimport { randomUUID } from 'node:crypto';\n\nimport type { BundlePair } from './walk';\n\nconst DEBUG_ID_LINE_RE = /^\\/\\/# debugId=([0-9a-f-]{36})\\s*$/m;\nconst REGISTRATION_MARKER = '/*!__allstak_debug_id_registration__*/';\n\nfunction buildRegistrationSnippet(jsBody: string, debugId: string): string {\n  const isEsm = /\\bimport\\.meta\\b/.test(jsBody) || /^\\s*(?:import|export)\\b/m.test(jsBody);\n  if (isEsm) {\n    return `${REGISTRATION_MARKER}try{(globalThis._allstakDebugIds=globalThis._allstakDebugIds||{})[import.meta.url]=\"${debugId}\"}catch(_){}`;\n  }\n  return `${REGISTRATION_MARKER}(function(){try{var u=(typeof document!==\"undefined\"&&document.currentScript&&document.currentScript.src)||(typeof location!==\"undefined\"?location.href:\"\");(globalThis._allstakDebugIds=globalThis._allstakDebugIds||{})[u]=\"${debugId}\"}catch(_){}})();`;\n}\n\nfunction stripRegistration(js: string): string {\n  const lineRe = new RegExp(\n    '^' + REGISTRATION_MARKER.replace(/[/*!]/g, (c) => '\\\\' + c) + '.*$',\n    'm',\n  );\n  return js.replace(lineRe, '');\n}\n\n/** Outcome of injecting one pair. */\nexport interface InjectResult {\n  /** UUID injected (or reused) for this bundle. */\n  debugId: string;\n  /** True if the bundle already had a debugId — we reused it. */\n  reused: boolean;\n}\n\n/**\n * Inject (or reuse) the debug ID for a single bundle/sourcemap pair.\n * Mutates both files on disk. Pure synchronous Node — safe to call from\n * a Vite `closeBundle` or Webpack `afterEmit` hook.\n */\nexport function injectPair(p: BundlePair): InjectResult {\n  const jsRaw = readFileSync(p.jsPath, 'utf8');\n  const mapRaw = readFileSync(p.mapPath, 'utf8');\n  const map = JSON.parse(mapRaw) as { debugId?: unknown; [k: string]: unknown };\n\n  let debugId = typeof map.debugId === 'string' ? map.debugId : '';\n  const existing = DEBUG_ID_LINE_RE.exec(jsRaw);\n  if (existing && existing[1]) debugId = debugId || existing[1];\n  const reused = !!debugId;\n  if (!debugId) debugId = randomUUID();\n\n  map.debugId = debugId;\n  writeFileSync(p.mapPath, JSON.stringify(map));\n\n  let jsOut = stripRegistration(jsRaw.replace(DEBUG_ID_LINE_RE, ''));\n  jsOut = jsOut.replace(/\\s+$/, '');\n  jsOut += `\\n${buildRegistrationSnippet(jsOut, debugId)}\\n//# debugId=${debugId}\\n`;\n  writeFileSync(p.jsPath, jsOut);\n\n  return { debugId, reused };\n}\n\n/** Inject every pair under `root`. Returns one record per pair. */\nexport function injectAll(pairs: BundlePair[]): Array<{ pair: BundlePair; result: InjectResult }> {\n  return pairs.map((pair) => ({ pair, result: injectPair(pair) }));\n}\n\n/** Read a debug ID back from a `.map` file. */\nexport function readDebugIdFromMap(mapPath: string): string | null {\n  const json = JSON.parse(readFileSync(mapPath, 'utf8')) as { debugId?: unknown };\n  return typeof json.debugId === 'string' ? json.debugId : null;\n}\n","/**\n * Source-map / bundle upload client. Build-time only.\n *\n * Wraps the AllStak `/api/v1/artifacts/upload` endpoint with multipart\n * form data and best-effort retries. Pure Node 18+ (uses the global\n * `fetch` and `FormData`), no third-party HTTP client required.\n *\n * Auth: `X-AllStak-Upload-Token` header (NOT the runtime API key —\n * uploads have a dedicated, narrower scope. Generate one in the\n * dashboard → Project Settings → Upload Tokens).\n */\n\nimport { readFileSync } from 'node:fs';\nimport { basename } from 'node:path';\n\nimport type { BundlePair } from './walk';\nimport { readDebugIdFromMap } from './inject';\n\n/** Default ingest host — overridden via `host` option or `ALLSTAK_HOST`. */\nexport const DEFAULT_HOST = 'https://api.allstak.sa';\n\n/** Options for {@link uploadAll} / {@link uploadPair}. */\nexport interface UploadOptions {\n  /** Release identifier, e.g. `myapp@1.4.2`. Required server-side. */\n  release: string;\n  /** Optional distribution tag (`web`, `ios-hermes`, `staging`, …). */\n  dist?: string;\n  /** AllStak ingest host (default `https://api.allstak.sa`). */\n  host?: string;\n  /** Project upload token (`aspk_…`). May come from `ALLSTAK_UPLOAD_TOKEN`. */\n  token: string;\n  /**\n   * Drop `sourcesContent` from the map before upload (smaller payload).\n   * Off by default — sourcesContent enables full-source rendering on the\n   * dashboard. Turn on if you don't want source code uploaded.\n   */\n  stripSources?: boolean;\n  /** Also upload the JS bundle alongside the map (off by default). */\n  uploadBundles?: boolean;\n}\n\n/** One artifact upload result. */\nexport interface UploadResult {\n  bundleName: string;\n  debugId: string;\n  /** True when both the map (and bundle, if requested) uploaded OK. */\n  ok: boolean;\n  /** Per-artifact responses, in the order we sent them. */\n  steps: Array<{\n    type: 'sourcemap' | 'bundle';\n    status: number;\n    sha8: string;\n    body?: string;\n  }>;\n}\n\ninterface OneStepResult {\n  status: number;\n  body: string;\n  ok: boolean;\n}\n\nasync function uploadOne(\n  type: 'sourcemap' | 'bundle',\n  filePath: string,\n  debugId: string,\n  opts: Required<Pick<UploadOptions, 'release' | 'host' | 'token'>> &\n    Pick<UploadOptions, 'dist' | 'stripSources'>,\n): Promise<OneStepResult> {\n  let buf = readFileSync(filePath);\n  if (type === 'sourcemap' && opts.stripSources) {\n    const json = JSON.parse(buf.toString('utf8')) as { sourcesContent?: unknown };\n    if (Array.isArray(json.sourcesContent)) delete json.sourcesContent;\n    buf = Buffer.from(JSON.stringify(json));\n  }\n\n  const form = new FormData();\n  form.append('debugId', debugId);\n  form.append('type', type);\n  form.append('release', opts.release);\n  if (opts.dist) form.append('dist', opts.dist);\n  form.append(\n    'file',\n    new Blob([buf], {\n      type: type === 'sourcemap' ? 'application/json' : 'application/javascript',\n    }),\n    basename(filePath),\n  );\n\n  const res = await fetch(opts.host.replace(/\\/$/, '') + '/api/v1/artifacts/upload', {\n    method: 'POST',\n    headers: { 'X-AllStak-Upload-Token': opts.token },\n    body: form,\n  });\n  return { status: res.status, body: await res.text(), ok: res.ok };\n}\n\nfunction sha8(buf: Buffer): string {\n  // Browser/Node fallback — keeps this file pure-JS (no node:crypto in\n  // the public surface). Caller doesn't need cryptographic strength;\n  // this is for log identification only.\n  let hash = 0;\n  for (let i = 0; i < buf.length; i++) hash = ((hash << 5) - hash + buf[i]!) | 0;\n  return (hash >>> 0).toString(16).padStart(8, '0');\n}\n\n/** Upload one bundle/map pair. The map is always uploaded; bundle is opt-in. */\nexport async function uploadPair(p: BundlePair, opts: UploadOptions): Promise<UploadResult> {\n  const debugId = readDebugIdFromMap(p.mapPath);\n  if (!debugId) {\n    return {\n      bundleName: p.bundleName,\n      debugId: '',\n      ok: false,\n      steps: [{\n        type: 'sourcemap',\n        status: 0,\n        sha8: '',\n        body: `[allstak/upload] no debugId in ${p.mapPath} — run inject first`,\n      }],\n    };\n  }\n  const merged = {\n    release: opts.release,\n    host: opts.host ?? process.env.ALLSTAK_HOST ?? DEFAULT_HOST,\n    token: opts.token,\n    dist: opts.dist,\n    stripSources: opts.stripSources,\n  };\n\n  const steps: UploadResult['steps'] = [];\n  const mapResult = await uploadOne('sourcemap', p.mapPath, debugId, merged);\n  steps.push({\n    type: 'sourcemap',\n    status: mapResult.status,\n    sha8: sha8(readFileSync(p.mapPath)),\n    body: mapResult.ok ? undefined : mapResult.body,\n  });\n\n  let allOk = mapResult.ok;\n  if (opts.uploadBundles) {\n    const bundleResult = await uploadOne('bundle', p.jsPath, debugId, merged);\n    steps.push({\n      type: 'bundle',\n      status: bundleResult.status,\n      sha8: sha8(readFileSync(p.jsPath)),\n      body: bundleResult.ok ? undefined : bundleResult.body,\n    });\n    allOk = allOk && bundleResult.ok;\n  }\n\n  return { bundleName: p.bundleName, debugId, ok: allOk, steps };\n}\n\n/** Upload every pair in parallel. */\nexport async function uploadAll(\n  pairs: BundlePair[],\n  opts: UploadOptions,\n): Promise<UploadResult[]> {\n  return Promise.all(pairs.map((p) => uploadPair(p, opts)));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACMA,qBAAsC;AACtC,uBAA+B;AAaxB,SAAS,KAAK,KAAa,MAAgB,CAAC,GAAa;AAC9D,aAAW,YAAQ,4BAAY,GAAG,GAAG;AACnC,UAAM,WAAO,uBAAK,KAAK,IAAI;AAC3B,UAAM,SAAK,yBAAS,IAAI;AACxB,QAAI,GAAG,YAAY,EAAG,MAAK,MAAM,GAAG;AAAA,QAC/B,KAAI,KAAK,IAAI;AAAA,EACpB;AACA,SAAO;AACT;AASO,SAAS,UAAU,MAA4B;AACpD,QAAM,MAAM,KAAK,IAAI;AACrB,QAAM,OAAO,IAAI,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM,CAAC,CAAC;AAC1D,QAAM,QAAsB,CAAC;AAC7B,aAAW,MAAM,KAAK;AACpB,QAAI,CAAC,GAAG,SAAS,KAAK,KAAK,CAAC,GAAG,SAAS,MAAM,KAAK,CAAC,GAAG,SAAS,MAAM,EAAG;AACzE,UAAM,MAAM,KAAK;AACjB,QAAI,KAAK,IAAI,GAAG,GAAG;AACjB,YAAM,KAAK,EAAE,QAAQ,IAAI,SAAS,KAAK,gBAAY,2BAAS,EAAE,EAAE,CAAC;AAAA,IACnE;AAAA,EACF;AACA,SAAO;AACT;;;AChCA,IAAAA,kBAA4C;AAC5C,yBAA2B;AAI3B,IAAM,mBAAmB;AACzB,IAAM,sBAAsB;AAE5B,SAAS,yBAAyB,QAAgB,SAAyB;AACzE,QAAM,QAAQ,mBAAmB,KAAK,MAAM,KAAK,2BAA2B,KAAK,MAAM;AACvF,MAAI,OAAO;AACT,WAAO,GAAG,mBAAmB,uFAAuF,OAAO;AAAA,EAC7H;AACA,SAAO,GAAG,mBAAmB,iOAAiO,OAAO;AACvQ;AAEA,SAAS,kBAAkB,IAAoB;AAC7C,QAAM,SAAS,IAAI;AAAA,IACjB,MAAM,oBAAoB,QAAQ,UAAU,CAAC,MAAM,OAAO,CAAC,IAAI;AAAA,IAC/D;AAAA,EACF;AACA,SAAO,GAAG,QAAQ,QAAQ,EAAE;AAC9B;AAeO,SAAS,WAAW,GAA6B;AACtD,QAAM,YAAQ,8BAAa,EAAE,QAAQ,MAAM;AAC3C,QAAM,aAAS,8BAAa,EAAE,SAAS,MAAM;AAC7C,QAAM,MAAM,KAAK,MAAM,MAAM;AAE7B,MAAI,UAAU,OAAO,IAAI,YAAY,WAAW,IAAI,UAAU;AAC9D,QAAM,WAAW,iBAAiB,KAAK,KAAK;AAC5C,MAAI,YAAY,SAAS,CAAC,EAAG,WAAU,WAAW,SAAS,CAAC;AAC5D,QAAM,SAAS,CAAC,CAAC;AACjB,MAAI,CAAC,QAAS,eAAU,+BAAW;AAEnC,MAAI,UAAU;AACd,qCAAc,EAAE,SAAS,KAAK,UAAU,GAAG,CAAC;AAE5C,MAAI,QAAQ,kBAAkB,MAAM,QAAQ,kBAAkB,EAAE,CAAC;AACjE,UAAQ,MAAM,QAAQ,QAAQ,EAAE;AAChC,WAAS;AAAA,EAAK,yBAAyB,OAAO,OAAO,CAAC;AAAA,cAAiB,OAAO;AAAA;AAC9E,qCAAc,EAAE,QAAQ,KAAK;AAE7B,SAAO,EAAE,SAAS,OAAO;AAC3B;AAGO,SAAS,UAAU,OAAwE;AAChG,SAAO,MAAM,IAAI,CAAC,UAAU,EAAE,MAAM,QAAQ,WAAW,IAAI,EAAE,EAAE;AACjE;AAGO,SAAS,mBAAmB,SAAgC;AACjE,QAAM,OAAO,KAAK,UAAM,8BAAa,SAAS,MAAM,CAAC;AACrD,SAAO,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;AAC3D;;;ACzEA,IAAAC,kBAA6B;AAC7B,IAAAC,oBAAyB;AAMlB,IAAM,eAAe;AA2C5B,eAAe,UACb,MACA,UACA,SACA,MAEwB;AACxB,MAAI,UAAM,8BAAa,QAAQ;AAC/B,MAAI,SAAS,eAAe,KAAK,cAAc;AAC7C,UAAM,OAAO,KAAK,MAAM,IAAI,SAAS,MAAM,CAAC;AAC5C,QAAI,MAAM,QAAQ,KAAK,cAAc,EAAG,QAAO,KAAK;AACpD,UAAM,OAAO,KAAK,KAAK,UAAU,IAAI,CAAC;AAAA,EACxC;AAEA,QAAM,OAAO,IAAI,SAAS;AAC1B,OAAK,OAAO,WAAW,OAAO;AAC9B,OAAK,OAAO,QAAQ,IAAI;AACxB,OAAK,OAAO,WAAW,KAAK,OAAO;AACnC,MAAI,KAAK,KAAM,MAAK,OAAO,QAAQ,KAAK,IAAI;AAC5C,OAAK;AAAA,IACH;AAAA,IACA,IAAI,KAAK,CAAC,GAAG,GAAG;AAAA,MACd,MAAM,SAAS,cAAc,qBAAqB;AAAA,IACpD,CAAC;AAAA,QACD,4BAAS,QAAQ;AAAA,EACnB;AAEA,QAAM,MAAM,MAAM,MAAM,KAAK,KAAK,QAAQ,OAAO,EAAE,IAAI,4BAA4B;AAAA,IACjF,QAAQ;AAAA,IACR,SAAS,EAAE,0BAA0B,KAAK,MAAM;AAAA,IAChD,MAAM;AAAA,EACR,CAAC;AACD,SAAO,EAAE,QAAQ,IAAI,QAAQ,MAAM,MAAM,IAAI,KAAK,GAAG,IAAI,IAAI,GAAG;AAClE;AAEA,SAAS,KAAK,KAAqB;AAIjC,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,SAAS,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAM;AAC7E,UAAQ,SAAS,GAAG,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAClD;AAGA,eAAsB,WAAW,GAAe,MAA4C;AAC1F,QAAM,UAAU,mBAAmB,EAAE,OAAO;AAC5C,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,MACL,YAAY,EAAE;AAAA,MACd,SAAS;AAAA,MACT,IAAI;AAAA,MACJ,OAAO,CAAC;AAAA,QACN,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,MAAM,kCAAkC,EAAE,OAAO;AAAA,MACnD,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,SAAS;AAAA,IACb,SAAS,KAAK;AAAA,IACd,MAAM,KAAK,QAAQ,QAAQ,IAAI,gBAAgB;AAAA,IAC/C,OAAO,KAAK;AAAA,IACZ,MAAM,KAAK;AAAA,IACX,cAAc,KAAK;AAAA,EACrB;AAEA,QAAM,QAA+B,CAAC;AACtC,QAAM,YAAY,MAAM,UAAU,aAAa,EAAE,SAAS,SAAS,MAAM;AACzE,QAAM,KAAK;AAAA,IACT,MAAM;AAAA,IACN,QAAQ,UAAU;AAAA,IAClB,MAAM,SAAK,8BAAa,EAAE,OAAO,CAAC;AAAA,IAClC,MAAM,UAAU,KAAK,SAAY,UAAU;AAAA,EAC7C,CAAC;AAED,MAAI,QAAQ,UAAU;AACtB,MAAI,KAAK,eAAe;AACtB,UAAM,eAAe,MAAM,UAAU,UAAU,EAAE,QAAQ,SAAS,MAAM;AACxE,UAAM,KAAK;AAAA,MACT,MAAM;AAAA,MACN,QAAQ,aAAa;AAAA,MACrB,MAAM,SAAK,8BAAa,EAAE,MAAM,CAAC;AAAA,MACjC,MAAM,aAAa,KAAK,SAAY,aAAa;AAAA,IACnD,CAAC;AACD,YAAQ,SAAS,aAAa;AAAA,EAChC;AAEA,SAAO,EAAE,YAAY,EAAE,YAAY,SAAS,IAAI,OAAO,MAAM;AAC/D;AAGA,eAAsB,UACpB,OACA,MACyB;AACzB,SAAO,QAAQ,IAAI,MAAM,IAAI,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC;AAC1D;;;AH1IA,IAAAC,oBAAwB;AA8BxB,eAAsB,mBAAmB,MAA8C;AACrF,QAAM,UAAM,2BAAQ,KAAK,GAAG;AAC5B,QAAM,QAAQ,UAAU,GAAG;AAC3B,QAAM,MAAM,KAAK,SAAS,MAAM,SAAY,CAAC,MAAc,QAAQ,IAAI,wBAAwB,CAAC,EAAE;AAElG,MAAI,YAAY,GAAG,WAAM,MAAM,MAAM,qBAAqB;AAC1D,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,EAAE,KAAK,OAAO,GAAG,UAAU,CAAC,EAAE;AAAA,EACvC;AAEA,QAAM,cAAc,UAAU,KAAK;AACnC,QAAM,WAAW,YAAY,IAAI,CAAC,EAAE,MAAM,OAAO,OAAO;AAAA,IACtD,YAAY,KAAK;AAAA,IACjB,SAAS,OAAO;AAAA,IAChB,QAAQ,OAAO;AAAA,EACjB,EAAE;AACF,aAAW,KAAK,UAAU;AACxB,QAAI,KAAK,EAAE,UAAU,KAAK,EAAE,OAAO,KAAK,EAAE,SAAS,aAAa,OAAO,EAAE;AAAA,EAC3E;AAEA,QAAM,QAAQ,KAAK,SAAS,QAAQ,IAAI;AACxC,QAAM,UAAU,KAAK,WAAW,QAAQ,IAAI;AAE5C,MAAI,KAAK,cAAc,CAAC,OAAO;AAC7B,QAAI,CAAC,KAAK,cAAc,CAAC,OAAO;AAC9B,UAAI,4EAAuE;AAAA,IAC7E;AACA,WAAO,EAAE,KAAK,OAAO,MAAM,QAAQ,SAAS;AAAA,EAC9C;AACA,MAAI,CAAC,SAAS;AACZ,QAAI,2EAAsE;AAC1E,WAAO,EAAE,KAAK,OAAO,MAAM,QAAQ,SAAS;AAAA,EAC9C;AAEA,QAAM,WAAW,MAAM,UAAU,OAAO;AAAA,IACtC,GAAG;AAAA,IACH;AAAA,IACA;AAAA,EACF,CAAC;AACD,aAAW,KAAK,UAAU;AACxB,QAAI,EAAE,IAAI;AACR,UAAI,KAAK,EAAE,UAAU,sBAAsB,EAAE,OAAO,EAAE;AAAA,IACxD,OAAO;AACL,YAAM,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACvC,UAAI,KAAK,EAAE,UAAU,iBAAiB,MAAM,UAAU,GAAG,SAAS,MAAM,QAAQ,EAAE,EAAE;AAAA,IACtF;AAAA,EACF;AACA,SAAO,EAAE,KAAK,OAAO,MAAM,QAAQ,UAAU,SAAS;AACxD;","names":["import_node_fs","import_node_fs","import_node_path","import_node_path"]}
+{"version":3,"sources":["../../src/build/sourcemaps.ts","../../src/build/walk.ts","../../src/build/inject.ts","../../src/build/upload.ts"],"sourcesContent":["/**\n * Programmatic source-map pipeline. Build-time only.\n *\n * The high-level \"do everything\" entry point Vite/Webpack/Next plugins\n * call. Walk the build output → inject debug IDs → upload artifacts.\n *\n *   import { processBuildOutput } from '@allstak/react/sourcemaps';\n *\n *   await processBuildOutput({\n *     dir: 'dist',\n *     release: 'web@1.4.2',\n *     token: process.env.ALLSTAK_UPLOAD_TOKEN!,\n *   });\n */\n\nexport type { BundlePair } from './walk';\nexport { findPairs, walk } from './walk';\nexport type { InjectResult } from './inject';\nexport { injectPair, injectAll, readDebugIdFromMap } from './inject';\nexport type { UploadOptions, UploadResult } from './upload';\nexport { uploadPair, uploadAll, DEFAULT_HOST } from './upload';\n\nimport { resolve } from 'node:path';\nimport { existsSync, readFileSync } from 'node:fs';\nimport { findPairs } from './walk';\nimport { injectAll } from './inject';\nimport { uploadAll, type UploadOptions, type UploadResult } from './upload';\n\n/** Options for {@link processBuildOutput}. */\nexport interface ProcessOptions extends Partial<UploadOptions> {\n  /** Build output directory to scan (e.g. `dist`, `.next/static`). */\n  dir: string;\n  /**\n   * If true, only inject debug IDs and skip upload. Useful for sample\n   * apps and CI dry-runs.\n   */\n  injectOnly?: boolean;\n  /** Suppress per-pair console output. Default false (you want to see this). */\n  silent?: boolean;\n}\n\n/** What `processBuildOutput` reports back. */\nexport interface ProcessReport {\n  /** Absolute output dir scanned. */\n  dir: string;\n  /** Pairs found. */\n  pairs: number;\n  /** Per-pair injection results (debugId + reused?). */\n  injected: Array<{ bundleName: string; debugId: string; reused: boolean }>;\n  /** Per-pair upload results, omitted when no token / `injectOnly: true`. */\n  uploaded?: UploadResult[];\n}\n\nexport async function processBuildOutput(opts: ProcessOptions): Promise<ProcessReport> {\n  const dir = resolve(opts.dir);\n  const pairs = findPairs(dir);\n  const log = opts.silent ? () => undefined : (m: string) => console.log(`[allstak/sourcemaps] ${m}`);\n\n  log(`scanning ${dir} — ${pairs.length} bundle/map pair(s)`);\n  if (pairs.length === 0) {\n    return { dir, pairs: 0, injected: [] };\n  }\n\n  const injectedRaw = injectAll(pairs);\n  const injected = injectedRaw.map(({ pair, result }) => ({\n    bundleName: pair.bundleName,\n    debugId: result.debugId,\n    reused: result.reused,\n  }));\n  for (const i of injected) {\n    log(`  ${i.bundleName}  ${i.debugId}  ${i.reused ? '(reused)' : '(new)'}`);\n  }\n\n  const env = loadAllStakEnv();\n  const token = opts.token ?? env.ALLSTAK_UPLOAD_TOKEN;\n  const release = opts.release ?? env.ALLSTAK_RELEASE;\n  const host = opts.host ?? env.ALLSTAK_HOST;\n  const dist = opts.dist ?? env.ALLSTAK_DIST;\n\n  if (opts.injectOnly || !token) {\n    if (!opts.injectOnly && !token) {\n      log('skipping upload — no token (set ALLSTAK_UPLOAD_TOKEN or pass `token`)');\n    }\n    return { dir, pairs: pairs.length, injected };\n  }\n  if (!release) {\n    log('skipping upload — no release (set ALLSTAK_RELEASE or pass `release`)');\n    return { dir, pairs: pairs.length, injected };\n  }\n\n  const uploaded = await uploadAll(pairs, {\n    ...opts,\n    release,\n    token,\n    host,\n    dist,\n  });\n  for (const u of uploaded) {\n    if (u.ok) {\n      log(`  ${u.bundleName}  uploaded debugId=${u.debugId}`);\n    } else {\n      const last = u.steps[u.steps.length - 1];\n      log(`  ${u.bundleName}  FAIL status=${last?.status ?? '?'} body=${last?.body ?? ''}`);\n    }\n  }\n  return { dir, pairs: pairs.length, injected, uploaded };\n}\n\nfunction loadAllStakEnv(): Record<string, string | undefined> {\n  const out: Record<string, string | undefined> = { ...process.env };\n  for (const file of ['.env.local', '.env']) {\n    const full = resolve(process.cwd(), file);\n    if (!existsSync(full)) continue;\n    const text = readFileSync(full, 'utf8');\n    for (const line of text.split(/\\r?\\n/)) {\n      const trimmed = line.trim();\n      if (!trimmed || trimmed.startsWith('#')) continue;\n      const match = /^([A-Z0-9_]+)\\s*=\\s*(.*)$/.exec(trimmed);\n      if (!match) continue;\n      const key = match[1]!;\n      if (out[key] !== undefined) continue;\n      out[key] = match[2]!.replace(/^['\"]|['\"]$/g, '');\n    }\n  }\n  return out;\n}\n","/**\n * Build-time only. File-system walking for the source-map pipeline.\n * Pure Node 18+ (built-in `node:fs` only). Browser runtime never imports\n * this — it's behind a `./build/*` subpath that's marked Node-platform.\n */\n\nimport { readdirSync, statSync } from 'node:fs';\nimport { basename, join } from 'node:path';\n\n/** A bundle and its companion source map on disk. */\nexport interface BundlePair {\n  /** Absolute path to the JS bundle (`.js` / `.mjs` / `.cjs`). */\n  jsPath: string;\n  /** Absolute path to the matching `.map` file. */\n  mapPath: string;\n  /** Bare filename of the bundle (no directory), for log lines. */\n  bundleName: string;\n}\n\n/** Recursively list every file under `dir`. Symlinks are followed. */\nexport function walk(dir: string, out: string[] = []): string[] {\n  for (const name of readdirSync(dir)) {\n    const full = join(dir, name);\n    const st = statSync(full);\n    if (st.isDirectory()) walk(full, out);\n    else out.push(full);\n  }\n  return out;\n}\n\n/**\n * Returns every `(bundle, sourcemap)` pair under `root`.\n *\n * A pair is a `.js` / `.mjs` / `.cjs` file with a sibling file of the\n * same name plus a `.map` suffix — the convention every modern bundler\n * (Vite, Webpack, esbuild, Rollup, tsup) follows.\n */\nexport function findPairs(root: string): BundlePair[] {\n  const all = walk(root);\n  const maps = new Set(all.filter((p) => p.endsWith('.map')));\n  const pairs: BundlePair[] = [];\n  for (const js of all) {\n    if (!js.endsWith('.js') && !js.endsWith('.mjs') && !js.endsWith('.cjs')) continue;\n    const map = js + '.map';\n    if (maps.has(map)) {\n      pairs.push({ jsPath: js, mapPath: map, bundleName: basename(js) });\n    }\n  }\n  return pairs;\n}\n","/**\n * Debug-ID injection. Build-time only.\n *\n * For each `(bundle.js, bundle.js.map)` pair we:\n *   - Generate a stable per-bundle UUID (one already on the bundle is\n *     reused so re-running is idempotent).\n *   - Append `//# debugId=<uuid>` to the JS so the runtime resolver in\n *     `src/debug-id.ts` can read it back.\n *   - Write a top-level `debugId` field into the `.map` JSON so the\n *     symbolicator on the backend can join `bundle.js` ↔ `bundle.js.map`\n *     by ID rather than guessing from filenames.\n *\n * Bundlers re-write hashed filenames on every build, so joining by ID\n * (instead of by URL or path) is what makes resolved stack frames\n * survive across releases.\n */\n\nimport { readFileSync, writeFileSync } from 'node:fs';\nimport { randomUUID } from 'node:crypto';\n\nimport type { BundlePair } from './walk';\n\nconst DEBUG_ID_LINE_RE = /^\\/\\/# debugId=([0-9a-f-]{36})\\s*$/m;\nconst REGISTRATION_MARKER = '/*!__allstak_debug_id_registration__*/';\n\nfunction buildRegistrationSnippet(jsBody: string, debugId: string): string {\n  const isEsm = /\\bimport\\.meta\\b/.test(jsBody) || /^\\s*(?:import|export)\\b/m.test(jsBody);\n  if (isEsm) {\n    return `${REGISTRATION_MARKER}try{(globalThis._allstakDebugIds=globalThis._allstakDebugIds||{})[import.meta.url]=\"${debugId}\"}catch(_){}`;\n  }\n  return `${REGISTRATION_MARKER}(function(){try{var u=(typeof document!==\"undefined\"&&document.currentScript&&document.currentScript.src)||(typeof location!==\"undefined\"?location.href:\"\");(globalThis._allstakDebugIds=globalThis._allstakDebugIds||{})[u]=\"${debugId}\"}catch(_){}})();`;\n}\n\nfunction stripRegistration(js: string): string {\n  const lineRe = new RegExp(\n    '^' + REGISTRATION_MARKER.replace(/[/*!]/g, (c) => '\\\\' + c) + '.*$',\n    'm',\n  );\n  return js.replace(lineRe, '');\n}\n\n/** Outcome of injecting one pair. */\nexport interface InjectResult {\n  /** UUID injected (or reused) for this bundle. */\n  debugId: string;\n  /** True if the bundle already had a debugId — we reused it. */\n  reused: boolean;\n}\n\n/**\n * Inject (or reuse) the debug ID for a single bundle/sourcemap pair.\n * Mutates both files on disk. Pure synchronous Node — safe to call from\n * a Vite `closeBundle` or Webpack `afterEmit` hook.\n */\nexport function injectPair(p: BundlePair): InjectResult {\n  const jsRaw = readFileSync(p.jsPath, 'utf8');\n  const mapRaw = readFileSync(p.mapPath, 'utf8');\n  const map = JSON.parse(mapRaw) as { debugId?: unknown; [k: string]: unknown };\n\n  let debugId = typeof map.debugId === 'string' ? map.debugId : '';\n  const existing = DEBUG_ID_LINE_RE.exec(jsRaw);\n  if (existing && existing[1]) debugId = debugId || existing[1];\n  const reused = !!debugId;\n  if (!debugId) debugId = randomUUID();\n\n  map.debugId = debugId;\n  writeFileSync(p.mapPath, JSON.stringify(map));\n\n  let jsOut = stripRegistration(jsRaw.replace(DEBUG_ID_LINE_RE, ''));\n  jsOut = jsOut.replace(/\\s+$/, '');\n  jsOut += `\\n${buildRegistrationSnippet(jsOut, debugId)}\\n//# debugId=${debugId}\\n`;\n  writeFileSync(p.jsPath, jsOut);\n\n  return { debugId, reused };\n}\n\n/** Inject every pair under `root`. Returns one record per pair. */\nexport function injectAll(pairs: BundlePair[]): Array<{ pair: BundlePair; result: InjectResult }> {\n  return pairs.map((pair) => ({ pair, result: injectPair(pair) }));\n}\n\n/** Read a debug ID back from a `.map` file. */\nexport function readDebugIdFromMap(mapPath: string): string | null {\n  const json = JSON.parse(readFileSync(mapPath, 'utf8')) as { debugId?: unknown };\n  return typeof json.debugId === 'string' ? json.debugId : null;\n}\n","/**\n * Source-map / bundle upload client. Build-time only.\n *\n * Wraps the AllStak `/api/v1/artifacts/upload` endpoint with multipart\n * form data and best-effort retries. Pure Node 18+ (uses the global\n * `fetch` and `FormData`), no third-party HTTP client required.\n *\n * Auth: `X-AllStak-Upload-Token` header (NOT the runtime API key —\n * uploads have a dedicated, narrower scope. Generate one in the\n * dashboard → Project Settings → Upload Tokens).\n */\n\nimport { readFileSync } from 'node:fs';\nimport { basename } from 'node:path';\n\nimport type { BundlePair } from './walk';\nimport { readDebugIdFromMap } from './inject';\n\n/** Default ingest host — overridden via `host` option or `ALLSTAK_HOST`. */\nexport const DEFAULT_HOST = 'https://api.allstak.sa';\n\n/** Options for {@link uploadAll} / {@link uploadPair}. */\nexport interface UploadOptions {\n  /** Release identifier, e.g. `myapp@1.4.2`. Required server-side. */\n  release: string;\n  /** Optional distribution tag (`web`, `ios-hermes`, `staging`, …). */\n  dist?: string;\n  /** AllStak ingest host (default `https://api.allstak.sa`). */\n  host?: string;\n  /** Project upload token (`aspk_…`). May come from `ALLSTAK_UPLOAD_TOKEN`. */\n  token: string;\n  /**\n   * Drop `sourcesContent` from the map before upload (smaller payload).\n   * Off by default — sourcesContent enables full-source rendering on the\n   * dashboard. Turn on if you don't want source code uploaded.\n   */\n  stripSources?: boolean;\n  /** Also upload the JS bundle alongside the map (off by default). */\n  uploadBundles?: boolean;\n}\n\n/** One artifact upload result. */\nexport interface UploadResult {\n  bundleName: string;\n  debugId: string;\n  /** True when both the map (and bundle, if requested) uploaded OK. */\n  ok: boolean;\n  /** Per-artifact responses, in the order we sent them. */\n  steps: Array<{\n    type: 'sourcemap' | 'bundle';\n    status: number;\n    sha8: string;\n    body?: string;\n  }>;\n}\n\ninterface OneStepResult {\n  status: number;\n  body: string;\n  ok: boolean;\n}\n\nasync function uploadOne(\n  type: 'sourcemap' | 'bundle',\n  filePath: string,\n  debugId: string,\n  opts: Required<Pick<UploadOptions, 'release' | 'host' | 'token'>> &\n    Pick<UploadOptions, 'dist' | 'stripSources'>,\n): Promise<OneStepResult> {\n  let buf = readFileSync(filePath);\n  if (type === 'sourcemap' && opts.stripSources) {\n    const json = JSON.parse(buf.toString('utf8')) as { sourcesContent?: unknown };\n    if (Array.isArray(json.sourcesContent)) delete json.sourcesContent;\n    buf = Buffer.from(JSON.stringify(json));\n  }\n\n  const form = new FormData();\n  form.append('debugId', debugId);\n  form.append('type', type);\n  form.append('release', opts.release);\n  if (opts.dist) form.append('dist', opts.dist);\n  form.append(\n    'file',\n    new Blob([buf], {\n      type: type === 'sourcemap' ? 'application/json' : 'application/javascript',\n    }),\n    basename(filePath),\n  );\n\n  const res = await fetch(opts.host.replace(/\\/$/, '') + '/api/v1/artifacts/upload', {\n    method: 'POST',\n    headers: { 'X-AllStak-Upload-Token': opts.token },\n    body: form,\n  });\n  return { status: res.status, body: await res.text(), ok: res.ok };\n}\n\nfunction sha8(buf: Buffer): string {\n  // Browser/Node fallback — keeps this file pure-JS (no node:crypto in\n  // the public surface). Caller doesn't need cryptographic strength;\n  // this is for log identification only.\n  let hash = 0;\n  for (let i = 0; i < buf.length; i++) hash = ((hash << 5) - hash + buf[i]!) | 0;\n  return (hash >>> 0).toString(16).padStart(8, '0');\n}\n\n/** Upload one bundle/map pair. The map is always uploaded; bundle is opt-in. */\nexport async function uploadPair(p: BundlePair, opts: UploadOptions): Promise<UploadResult> {\n  const debugId = readDebugIdFromMap(p.mapPath);\n  if (!debugId) {\n    return {\n      bundleName: p.bundleName,\n      debugId: '',\n      ok: false,\n      steps: [{\n        type: 'sourcemap',\n        status: 0,\n        sha8: '',\n        body: `[allstak/upload] no debugId in ${p.mapPath} — run inject first`,\n      }],\n    };\n  }\n  const merged = {\n    release: opts.release,\n    host: opts.host ?? process.env.ALLSTAK_HOST ?? DEFAULT_HOST,\n    token: opts.token,\n    dist: opts.dist,\n    stripSources: opts.stripSources,\n  };\n\n  const steps: UploadResult['steps'] = [];\n  const mapResult = await uploadOne('sourcemap', p.mapPath, debugId, merged);\n  steps.push({\n    type: 'sourcemap',\n    status: mapResult.status,\n    sha8: sha8(readFileSync(p.mapPath)),\n    body: mapResult.ok ? undefined : mapResult.body,\n  });\n\n  let allOk = mapResult.ok;\n  if (opts.uploadBundles) {\n    const bundleResult = await uploadOne('bundle', p.jsPath, debugId, merged);\n    steps.push({\n      type: 'bundle',\n      status: bundleResult.status,\n      sha8: sha8(readFileSync(p.jsPath)),\n      body: bundleResult.ok ? undefined : bundleResult.body,\n    });\n    allOk = allOk && bundleResult.ok;\n  }\n\n  return { bundleName: p.bundleName, debugId, ok: allOk, steps };\n}\n\n/** Upload every pair in parallel. */\nexport async function uploadAll(\n  pairs: BundlePair[],\n  opts: UploadOptions,\n): Promise<UploadResult[]> {\n  return Promise.all(pairs.map((p) => uploadPair(p, opts)));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACMA,qBAAsC;AACtC,uBAA+B;AAaxB,SAAS,KAAK,KAAa,MAAgB,CAAC,GAAa;AAC9D,aAAW,YAAQ,4BAAY,GAAG,GAAG;AACnC,UAAM,WAAO,uBAAK,KAAK,IAAI;AAC3B,UAAM,SAAK,yBAAS,IAAI;AACxB,QAAI,GAAG,YAAY,EAAG,MAAK,MAAM,GAAG;AAAA,QAC/B,KAAI,KAAK,IAAI;AAAA,EACpB;AACA,SAAO;AACT;AASO,SAAS,UAAU,MAA4B;AACpD,QAAM,MAAM,KAAK,IAAI;AACrB,QAAM,OAAO,IAAI,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM,CAAC,CAAC;AAC1D,QAAM,QAAsB,CAAC;AAC7B,aAAW,MAAM,KAAK;AACpB,QAAI,CAAC,GAAG,SAAS,KAAK,KAAK,CAAC,GAAG,SAAS,MAAM,KAAK,CAAC,GAAG,SAAS,MAAM,EAAG;AACzE,UAAM,MAAM,KAAK;AACjB,QAAI,KAAK,IAAI,GAAG,GAAG;AACjB,YAAM,KAAK,EAAE,QAAQ,IAAI,SAAS,KAAK,gBAAY,2BAAS,EAAE,EAAE,CAAC;AAAA,IACnE;AAAA,EACF;AACA,SAAO;AACT;;;AChCA,IAAAA,kBAA4C;AAC5C,yBAA2B;AAI3B,IAAM,mBAAmB;AACzB,IAAM,sBAAsB;AAE5B,SAAS,yBAAyB,QAAgB,SAAyB;AACzE,QAAM,QAAQ,mBAAmB,KAAK,MAAM,KAAK,2BAA2B,KAAK,MAAM;AACvF,MAAI,OAAO;AACT,WAAO,GAAG,mBAAmB,uFAAuF,OAAO;AAAA,EAC7H;AACA,SAAO,GAAG,mBAAmB,iOAAiO,OAAO;AACvQ;AAEA,SAAS,kBAAkB,IAAoB;AAC7C,QAAM,SAAS,IAAI;AAAA,IACjB,MAAM,oBAAoB,QAAQ,UAAU,CAAC,MAAM,OAAO,CAAC,IAAI;AAAA,IAC/D;AAAA,EACF;AACA,SAAO,GAAG,QAAQ,QAAQ,EAAE;AAC9B;AAeO,SAAS,WAAW,GAA6B;AACtD,QAAM,YAAQ,8BAAa,EAAE,QAAQ,MAAM;AAC3C,QAAM,aAAS,8BAAa,EAAE,SAAS,MAAM;AAC7C,QAAM,MAAM,KAAK,MAAM,MAAM;AAE7B,MAAI,UAAU,OAAO,IAAI,YAAY,WAAW,IAAI,UAAU;AAC9D,QAAM,WAAW,iBAAiB,KAAK,KAAK;AAC5C,MAAI,YAAY,SAAS,CAAC,EAAG,WAAU,WAAW,SAAS,CAAC;AAC5D,QAAM,SAAS,CAAC,CAAC;AACjB,MAAI,CAAC,QAAS,eAAU,+BAAW;AAEnC,MAAI,UAAU;AACd,qCAAc,EAAE,SAAS,KAAK,UAAU,GAAG,CAAC;AAE5C,MAAI,QAAQ,kBAAkB,MAAM,QAAQ,kBAAkB,EAAE,CAAC;AACjE,UAAQ,MAAM,QAAQ,QAAQ,EAAE;AAChC,WAAS;AAAA,EAAK,yBAAyB,OAAO,OAAO,CAAC;AAAA,cAAiB,OAAO;AAAA;AAC9E,qCAAc,EAAE,QAAQ,KAAK;AAE7B,SAAO,EAAE,SAAS,OAAO;AAC3B;AAGO,SAAS,UAAU,OAAwE;AAChG,SAAO,MAAM,IAAI,CAAC,UAAU,EAAE,MAAM,QAAQ,WAAW,IAAI,EAAE,EAAE;AACjE;AAGO,SAAS,mBAAmB,SAAgC;AACjE,QAAM,OAAO,KAAK,UAAM,8BAAa,SAAS,MAAM,CAAC;AACrD,SAAO,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;AAC3D;;;ACzEA,IAAAC,kBAA6B;AAC7B,IAAAC,oBAAyB;AAMlB,IAAM,eAAe;AA2C5B,eAAe,UACb,MACA,UACA,SACA,MAEwB;AACxB,MAAI,UAAM,8BAAa,QAAQ;AAC/B,MAAI,SAAS,eAAe,KAAK,cAAc;AAC7C,UAAM,OAAO,KAAK,MAAM,IAAI,SAAS,MAAM,CAAC;AAC5C,QAAI,MAAM,QAAQ,KAAK,cAAc,EAAG,QAAO,KAAK;AACpD,UAAM,OAAO,KAAK,KAAK,UAAU,IAAI,CAAC;AAAA,EACxC;AAEA,QAAM,OAAO,IAAI,SAAS;AAC1B,OAAK,OAAO,WAAW,OAAO;AAC9B,OAAK,OAAO,QAAQ,IAAI;AACxB,OAAK,OAAO,WAAW,KAAK,OAAO;AACnC,MAAI,KAAK,KAAM,MAAK,OAAO,QAAQ,KAAK,IAAI;AAC5C,OAAK;AAAA,IACH;AAAA,IACA,IAAI,KAAK,CAAC,GAAG,GAAG;AAAA,MACd,MAAM,SAAS,cAAc,qBAAqB;AAAA,IACpD,CAAC;AAAA,QACD,4BAAS,QAAQ;AAAA,EACnB;AAEA,QAAM,MAAM,MAAM,MAAM,KAAK,KAAK,QAAQ,OAAO,EAAE,IAAI,4BAA4B;AAAA,IACjF,QAAQ;AAAA,IACR,SAAS,EAAE,0BAA0B,KAAK,MAAM;AAAA,IAChD,MAAM;AAAA,EACR,CAAC;AACD,SAAO,EAAE,QAAQ,IAAI,QAAQ,MAAM,MAAM,IAAI,KAAK,GAAG,IAAI,IAAI,GAAG;AAClE;AAEA,SAAS,KAAK,KAAqB;AAIjC,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,SAAS,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAM;AAC7E,UAAQ,SAAS,GAAG,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAClD;AAGA,eAAsB,WAAW,GAAe,MAA4C;AAC1F,QAAM,UAAU,mBAAmB,EAAE,OAAO;AAC5C,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,MACL,YAAY,EAAE;AAAA,MACd,SAAS;AAAA,MACT,IAAI;AAAA,MACJ,OAAO,CAAC;AAAA,QACN,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,MAAM,kCAAkC,EAAE,OAAO;AAAA,MACnD,CAAC;AAAA,IACH;AAAA,EACF;AACA,QAAM,SAAS;AAAA,IACb,SAAS,KAAK;AAAA,IACd,MAAM,KAAK,QAAQ,QAAQ,IAAI,gBAAgB;AAAA,IAC/C,OAAO,KAAK;AAAA,IACZ,MAAM,KAAK;AAAA,IACX,cAAc,KAAK;AAAA,EACrB;AAEA,QAAM,QAA+B,CAAC;AACtC,QAAM,YAAY,MAAM,UAAU,aAAa,EAAE,SAAS,SAAS,MAAM;AACzE,QAAM,KAAK;AAAA,IACT,MAAM;AAAA,IACN,QAAQ,UAAU;AAAA,IAClB,MAAM,SAAK,8BAAa,EAAE,OAAO,CAAC;AAAA,IAClC,MAAM,UAAU,KAAK,SAAY,UAAU;AAAA,EAC7C,CAAC;AAED,MAAI,QAAQ,UAAU;AACtB,MAAI,KAAK,eAAe;AACtB,UAAM,eAAe,MAAM,UAAU,UAAU,EAAE,QAAQ,SAAS,MAAM;AACxE,UAAM,KAAK;AAAA,MACT,MAAM;AAAA,MACN,QAAQ,aAAa;AAAA,MACrB,MAAM,SAAK,8BAAa,EAAE,MAAM,CAAC;AAAA,MACjC,MAAM,aAAa,KAAK,SAAY,aAAa;AAAA,IACnD,CAAC;AACD,YAAQ,SAAS,aAAa;AAAA,EAChC;AAEA,SAAO,EAAE,YAAY,EAAE,YAAY,SAAS,IAAI,OAAO,MAAM;AAC/D;AAGA,eAAsB,UACpB,OACA,MACyB;AACzB,SAAO,QAAQ,IAAI,MAAM,IAAI,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC;AAC1D;;;AH1IA,IAAAC,oBAAwB;AACxB,IAAAC,kBAAyC;AA8BzC,eAAsB,mBAAmB,MAA8C;AACrF,QAAM,UAAM,2BAAQ,KAAK,GAAG;AAC5B,QAAM,QAAQ,UAAU,GAAG;AAC3B,QAAM,MAAM,KAAK,SAAS,MAAM,SAAY,CAAC,MAAc,QAAQ,IAAI,wBAAwB,CAAC,EAAE;AAElG,MAAI,YAAY,GAAG,WAAM,MAAM,MAAM,qBAAqB;AAC1D,MAAI,MAAM,WAAW,GAAG;AACtB,WAAO,EAAE,KAAK,OAAO,GAAG,UAAU,CAAC,EAAE;AAAA,EACvC;AAEA,QAAM,cAAc,UAAU,KAAK;AACnC,QAAM,WAAW,YAAY,IAAI,CAAC,EAAE,MAAM,OAAO,OAAO;AAAA,IACtD,YAAY,KAAK;AAAA,IACjB,SAAS,OAAO;AAAA,IAChB,QAAQ,OAAO;AAAA,EACjB,EAAE;AACF,aAAW,KAAK,UAAU;AACxB,QAAI,KAAK,EAAE,UAAU,KAAK,EAAE,OAAO,KAAK,EAAE,SAAS,aAAa,OAAO,EAAE;AAAA,EAC3E;AAEA,QAAM,MAAM,eAAe;AAC3B,QAAM,QAAQ,KAAK,SAAS,IAAI;AAChC,QAAM,UAAU,KAAK,WAAW,IAAI;AACpC,QAAM,OAAO,KAAK,QAAQ,IAAI;AAC9B,QAAM,OAAO,KAAK,QAAQ,IAAI;AAE9B,MAAI,KAAK,cAAc,CAAC,OAAO;AAC7B,QAAI,CAAC,KAAK,cAAc,CAAC,OAAO;AAC9B,UAAI,4EAAuE;AAAA,IAC7E;AACA,WAAO,EAAE,KAAK,OAAO,MAAM,QAAQ,SAAS;AAAA,EAC9C;AACA,MAAI,CAAC,SAAS;AACZ,QAAI,2EAAsE;AAC1E,WAAO,EAAE,KAAK,OAAO,MAAM,QAAQ,SAAS;AAAA,EAC9C;AAEA,QAAM,WAAW,MAAM,UAAU,OAAO;AAAA,IACtC,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,aAAW,KAAK,UAAU;AACxB,QAAI,EAAE,IAAI;AACR,UAAI,KAAK,EAAE,UAAU,sBAAsB,EAAE,OAAO,EAAE;AAAA,IACxD,OAAO;AACL,YAAM,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACvC,UAAI,KAAK,EAAE,UAAU,iBAAiB,MAAM,UAAU,GAAG,SAAS,MAAM,QAAQ,EAAE,EAAE;AAAA,IACtF;AAAA,EACF;AACA,SAAO,EAAE,KAAK,OAAO,MAAM,QAAQ,UAAU,SAAS;AACxD;AAEA,SAAS,iBAAqD;AAC5D,QAAM,MAA0C,EAAE,GAAG,QAAQ,IAAI;AACjE,aAAW,QAAQ,CAAC,cAAc,MAAM,GAAG;AACzC,UAAM,WAAO,2BAAQ,QAAQ,IAAI,GAAG,IAAI;AACxC,QAAI,KAAC,4BAAW,IAAI,EAAG;AACvB,UAAM,WAAO,8BAAa,MAAM,MAAM;AACtC,eAAW,QAAQ,KAAK,MAAM,OAAO,GAAG;AACtC,YAAM,UAAU,KAAK,KAAK;AAC1B,UAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,EAAG;AACzC,YAAM,QAAQ,4BAA4B,KAAK,OAAO;AACtD,UAAI,CAAC,MAAO;AACZ,YAAM,MAAM,MAAM,CAAC;AACnB,UAAI,IAAI,GAAG,MAAM,OAAW;AAC5B,UAAI,GAAG,IAAI,MAAM,CAAC,EAAG,QAAQ,gBAAgB,EAAE;AAAA,IACjD;AAAA,EACF;AACA,SAAO;AACT;","names":["import_node_fs","import_node_fs","import_node_path","import_node_path","import_node_fs"]}

package/dist/build/sourcemaps.mjs

@@ -8,7 +8,7 @@ import {
   uploadAll,
   uploadPair,
   walk
-} from "./chunk-G6VPGDP6.mjs";
+} from "./chunk-DURAJQ3M.mjs";
 export {
   DEFAULT_HOST,
   findPairs,

package/dist/build/vite.js

@@ -183,6 +183,7 @@ async function uploadAll(pairs, opts) {
 
 // src/build/sourcemaps.ts
 var import_node_path3 = require("path");
+var import_node_fs4 = require("fs");
 async function processBuildOutput(opts) {
   const dir = (0, import_node_path3.resolve)(opts.dir);
   const pairs = findPairs(dir);
@@ -200,8 +201,11 @@ async function processBuildOutput(opts) {
   for (const i of injected) {
     log(`  ${i.bundleName}  ${i.debugId}  ${i.reused ? "(reused)" : "(new)"}`);
   }
-  const token = opts.token ?? process.env.ALLSTAK_UPLOAD_TOKEN;
-  const release = opts.release ?? process.env.ALLSTAK_RELEASE;
+  const env = loadAllStakEnv();
+  const token = opts.token ?? env.ALLSTAK_UPLOAD_TOKEN;
+  const release = opts.release ?? env.ALLSTAK_RELEASE;
+  const host = opts.host ?? env.ALLSTAK_HOST;
+  const dist = opts.dist ?? env.ALLSTAK_DIST;
   if (opts.injectOnly || !token) {
     if (!opts.injectOnly && !token) {
       log("skipping upload \u2014 no token (set ALLSTAK_UPLOAD_TOKEN or pass `token`)");
@@ -215,7 +219,9 @@ async function processBuildOutput(opts) {
   const uploaded = await uploadAll(pairs, {
     ...opts,
     release,
-    token
+    token,
+    host,
+    dist
   });
   for (const u of uploaded) {
     if (u.ok) {
@@ -227,6 +233,24 @@ async function processBuildOutput(opts) {
   }
   return { dir, pairs: pairs.length, injected, uploaded };
 }
+function loadAllStakEnv() {
+  const out = { ...process.env };
+  for (const file of [".env.local", ".env"]) {
+    const full = (0, import_node_path3.resolve)(process.cwd(), file);
+    if (!(0, import_node_fs4.existsSync)(full)) continue;
+    const text = (0, import_node_fs4.readFileSync)(full, "utf8");
+    for (const line of text.split(/\r?\n/)) {
+      const trimmed = line.trim();
+      if (!trimmed || trimmed.startsWith("#")) continue;
+      const match = /^([A-Z0-9_]+)\s*=\s*(.*)$/.exec(trimmed);
+      if (!match) continue;
+      const key = match[1];
+      if (out[key] !== void 0) continue;
+      out[key] = match[2].replace(/^['"]|['"]$/g, "");
+    }
+  }
+  return out;
+}
 
 // src/build/vite.ts
 function allstakSourcemaps(opts = {}) {