@autter/runtime-cli 1.2.0 → 1.3.0

package/README.md

@@ -2,18 +2,23 @@
 
 Readable stack traces for Autter Runtime. Gives every JS bundle a
 content-addressed **debug id** and uploads its **source map** to the ingester,
-so minified browser frames resolve to your original source, even when the
+so minified browser frames and bundled Node and edge frames resolve to your
+original source, with the lines around each frame of your code, even when the
 release your SDK reports doesn't match the upload.
 
 - `autter-runtime sourcemaps setup` wires it into a project; `verify` checks a build
-- `autter-runtime sourcemaps inject <dir>` / `upload <dir>` CLI
-- Vite/Rollup plugin: `@autter/runtime-cli/vite`
-- webpack 5 plugin: `@autter/runtime-cli/webpack`
+- `autter-runtime sourcemaps inject <dir>` / `upload <dir>` CLI, for browser
+  and server output alike (tsup, esbuild, a Worker)
+- Vite/Rollup plugin: `@autter/runtime-cli/vite` (SSR builds and server
+  environments too)
+- webpack 5 plugin: `@autter/runtime-cli/webpack` (Node targets too)
 - Next.js wrapper: `withAutterSourceMaps` from `@autter/runtime-cli/next`
+  (client and `.next/server` output)
 
 Bundlers are optional peer dependencies. Debug ids need ingester 1.6.0+ and
 `@autter/runtime-browser` 1.6.0+ (older ingesters still match `.js` maps by
-release + path). Full guide: [docs/SOURCE-MAPS.md](../../docs/SOURCE-MAPS.md).
+release + path). Server bundles and source contents need the current
+ingester. Full guide: [docs/SOURCE-MAPS.md](../../docs/SOURCE-MAPS.md).
 
 ## Quick start (people and coding agents)
 
@@ -66,8 +71,10 @@ and, when `AUTTER_RUNTIME_KEY` is set, every bundle's map is on the ingester
 local checks still run and the upload is reported as unverified. Files copied
 unchanged from `public/`, Next.js build manifests and polyfills, and service workers are
 skipped; `--ignore <glob>` skips more. `--allow-maps` reports leftover maps
-without failing. `--json` for machines; exit `1` on any failure, with the
-reason per file.
+without failing. `--server` checks server output (a tsup or esbuild `dist/`,
+`.next/server`), where leftover maps are a note, not a failure, and Next.js
+server manifests are skipped. `--json` for machines; exit `1` on any failure,
+with the reason per file.
 
 ## Keys
 
@@ -114,10 +121,20 @@ All three turn on hidden source maps when you haven't configured maps, inject
 debug ids after the build, upload when a key is present, and then delete the
 maps they created whether or not the upload succeeded (a rejected upload, an
 unreachable ingester, a dry run), printing one line that says why; without a
-key they turn none on. Maps you configured yourself are left alone. Options (all optional): `release`, `urlPrefix`,
-`endpoint`, `key`, `upload: false`, `deleteAfterUpload`, `dryRun`,
-`concurrency`, `failOnError` (default `false`: a failed upload is logged and
-never fails the build), `silent`.
+key they turn none on. Maps you configured yourself are left alone.
+
+Server bundles get the same: Vite SSR builds and Vite 6 server environments,
+webpack builds for a Node target, and Next.js `.next/server` (Node and edge,
+webpack and Turbopack). Their maps are stored under the output directory's
+path in the project (`/dist/server/`, `/.next/server/`), which the ingester
+matches against the path the server runs them from, never under the public
+URL prefix.
+
+Options (all optional): `release`, `urlPrefix`, `endpoint`, `key`,
+`upload: false`, `deleteAfterUpload`, `dryRun`, `concurrency`, `failOnError`
+(default `false`: a failed upload is logged and never fails the build),
+`silent`, `sourcesContent: false` (upload maps without your files' source),
+`serverBundles: false` (leave server output exactly as the bundler wrote it).
 
 ## CLI
 
@@ -125,28 +142,40 @@ never fails the build), `silent`.
 npx autter-runtime sourcemaps inject dist
 npx autter-runtime sourcemaps upload dist --url-prefix / --release "$GIT_SHA"
 npx autter-runtime sourcemaps upload dist --dry-run
+
+# A bundled Node server (tsup, esbuild): the same commands
+npx autter-runtime sourcemaps inject dist
+npx autter-runtime sourcemaps upload dist --url-prefix /dist/
+npx autter-runtime sourcemaps verify dist --server
 ```
 
 ```
 autter-runtime sourcemaps setup [dir] [--dry-run] [--install] [--json]
 autter-runtime sourcemaps verify <dir> [--endpoint <url>] [--url-prefix <prefix>]
-              [--ignore <glob>]... [--allow-maps] [--json]
+              [--ignore <glob>]... [--allow-maps] [--server] [--json]
 autter-runtime sourcemaps inject <dir> [--dry-run] [--json]
 autter-runtime sourcemaps upload <dir> [--release <r>] [--url-prefix <prefix>]
               [--endpoint <url>] [--concurrency <n>] [--delete-after-upload]
-              [--best-effort] [--dry-run] [--json]
+              [--no-sources-content] [--best-effort] [--dry-run] [--json]
 ```
 
 - **inject** writes `//# debugId=<id>`, a one-line snippet that registers
   `globalThis._autterDebugIds[new Error().stack] = "<id>"`, and `"debugId"` in
   the `.map`, for each `.js`/`.mjs`/`.cjs` with a map. The id is derived from
-  sha256 of the bundle bytes; running it again changes nothing.
-- **upload** posts each map (without `sourcesContent`, gzipped, up to 32 MB)
-  to `<endpoint>/v1/sourcemaps`, in parallel, skipping maps the ingester
-  already has. Each map carries the bundle's function scopes (`x_autter_scopes`),
+  sha256 of the bundle bytes; running it again changes nothing. The browser
+  SDK and the Node and edge SDKs read the snippet's registry and send the ids
+  of the bundles in each exception's stack.
+- **upload** posts each map (gzipped, up to 32 MB) to
+  `<endpoint>/v1/sourcemaps`, in parallel, skipping maps the ingester already
+  has. Each map carries the bundle's function scopes (`x_autter_scopes`),
   parsed from the file as served, so frames are named after the function they
   are in rather than their call site; a bundle that does not parse is uploaded
-  without them, with a warning. Release: `--release`, else `GITHUB_SHA`,
+  without them, with a warning. It also carries the original source of your own
+  files (`sourcesContent`; never your dependencies', whole files only, as many
+  as fit the 32 MB limit), so issues show the lines around each frame;
+  `--no-sources-content` leaves it out. For server output, `--url-prefix` is
+  any tail of the path the server runs the files from (`/dist/` for
+  `/app/dist/server.js`), or `/`. Release: `--release`, else `GITHUB_SHA`,
   `VERCEL_GIT_COMMIT_SHA`, `CF_PAGES_COMMIT_SHA`, `GIT_SHA`, then
   `git rev-parse HEAD`.
 - **upload --best-effort** is for build scripts that also run locally and in

package/dist/{build-BqjqqeLg.d.cts → build-DGeoDkTh.d.cts}

@@ -69,8 +69,9 @@ declare function injectBundle(bundle: BundleWithMap, options?: InjectOptions): P
 declare function injectDir(dir: string, options?: InjectOptions): Promise<InjectResult[]>;
 
 declare const DEFAULT_ENDPOINT = "https://otlp.autter.dev";
-/** Largest map the ingester stores: characters of JSON without
- * `sourcesContent` (otlp-ingester's SOURCE_MAP_MAX_CHARS). */
+/** Largest map the ingester stores (otlp-ingester's SOURCE_MAP_MAX_CHARS):
+ * characters of JSON without `sourcesContent`; the in-app sources' content
+ * that is sent fits in what is left of it, in UTF-8 bytes (storedMapJson). */
 declare const MAX_MAP_CHARS: number;
 /** The ingester's `/v1/sourcemaps` body limit, counted after the gzip body
  * is inflated: the map plus room for the rest of the request. */
@@ -101,6 +102,11 @@ interface UploadOptions {
     /** Delete each `.map` (and its `sourceMappingURL` comment) once the
      * ingester has it, so maps are never deployed. */
     deleteAfterUpload?: boolean;
+    /** Send the original source of your own files (`sourcesContent`, when the
+     * bundler wrote it), so issues show the lines around each frame of your
+     * code. Dependencies' sources are never sent. Default true; false sends
+     * maps without it (`--no-sources-content`). */
+    sourcesContent?: boolean;
     log?: (line: string) => void;
     env?: NodeJS.ProcessEnv;
     cwd?: string;
@@ -138,8 +144,23 @@ interface UploadSummary {
 declare function resolveEndpoint(flag?: string, env?: NodeJS.ProcessEnv): string;
 /** prefix + path, with exactly one "/" between. "~/" (Sentry's spelling) means "/". */
 declare function servedFilename(urlPrefix: string | undefined, path: string): string;
-/** The map as the ingester stores it: `sourcesContent` removed, compact JSON. */
-declare function storedMapJson(map: Record<string, unknown>): string;
+/** Whether a map's `sources` entry is the app's own code (the ingester's in-app path rule). */
+declare function isInAppSource(path: string): boolean;
+/**
+ * The `sourcesContent` the ingester keeps, or null to leave it out: in-app
+ * sources only (not ignore-listed, not under node_modules/ etc.), whole
+ * files, smallest first, while the JSON fits `limit` UTF-8 bytes given the
+ * `baseBytes` of the map without it.
+ */
+declare function storedSourcesContent(fields: Record<string, unknown>, baseBytes: number, limit?: number): Array<string | null> | null;
+/**
+ * The map as the ingester stores it, compact JSON: every field as given,
+ * then `sourcesContent` bounded by storedSourcesContent (left out when
+ * nothing is kept, or with `sourcesContent: false`).
+ */
+declare function storedMapJson(map: Record<string, unknown>, options?: {
+    sourcesContent?: boolean;
+}): string;
 declare class FatalUploadError extends Error {
 }
 /** Upload every source map under `dir` to the ingester's `/v1/sourcemaps`. */
@@ -177,7 +198,26 @@ interface AutterSourceMapsOptions {
     failOnError?: boolean;
     /** No log output. */
     silent?: boolean;
+    /** Send your own files' original source with each map (`sourcesContent`,
+     * when the bundler wrote it), so issues show the lines around each frame
+     * of your code. Dependencies' sources are never sent. Default true. */
+    sourcesContent?: boolean;
+    /** Server bundles too (default true): Vite SSR builds and server
+     * environments, webpack builds for a Node target, and Next.js server
+     * output get debug ids and their maps uploaded, so errors in your backend
+     * resolve to its original files and lines. False leaves server output
+     * exactly as the bundler wrote it. */
+    serverBundles?: boolean;
 }
+/**
+ * Where a server bundle directory's maps are stored: its path relative to
+ * the project (`/dist/server/`, `/.next/server/`), never the public URL
+ * prefix. The ingester matches a stored path as a suffix of the path the
+ * process runs the bundle from (`/app/dist/server/entry.js`,
+ * `/var/task/.next/server/app/page.js`), and the directory keeps server and
+ * browser maps of one release apart. "/" for a directory outside the project.
+ */
+declare function serverUrlPrefix(projectRoot: string, dir: string): string;
 interface BuildOutputResult {
     injected: InjectResult[];
     upload: UploadSummary | null;
@@ -208,6 +248,9 @@ declare function processBuildOutput(input: {
     /** Map files the build emitted (absolute), when the bundler lists them;
      * the maps of `files` (or of every bundle under `dir`) are added. */
     maps?: string[];
+    /** Server output (RF-05): `urlPrefix` is serverUrlPrefix(), which the
+     * public `options.urlPrefix` never overrides. */
+    server?: boolean;
 }): Promise<BuildOutputResult>;
 
-export { type AutterSourceMapsOptions as A, BUNDLE_RE as B, CLIENT_KEY_PREFIX as C, DEFAULT_ENDPOINT as D, FatalUploadError as F, type InjectOptions as I, KEY_ADVICE as K, MAX_MAP_CHARS as M, SERVER_KEY_PREFIX as S, UPLOAD_KEY_PREFIX as U, type BuildOutputResult as a, type BundleWithMap as b, type InjectResult as c, MAX_UPLOAD_BYTES as d, SNIPPET_LINE_KEY as e, type UploadItem as f, type UploadOptions as g, type UploadSummary as h, findBundles as i, formatUploadSummary as j, injectBundle as k, injectDir as l, mapPathFor as m, resolveEndpoint as n, shiftMappings as o, processBuildOutput as p, snippetLine as q, readSourceMappingUrl as r, servedFilename as s, storedMapJson as t, stripSourceMappingUrl as u, uploadDir as v };
+export { type AutterSourceMapsOptions as A, BUNDLE_RE as B, CLIENT_KEY_PREFIX as C, DEFAULT_ENDPOINT as D, FatalUploadError as F, type InjectOptions as I, KEY_ADVICE as K, MAX_MAP_CHARS as M, SERVER_KEY_PREFIX as S, UPLOAD_KEY_PREFIX as U, type BuildOutputResult as a, type BundleWithMap as b, type InjectResult as c, MAX_UPLOAD_BYTES as d, SNIPPET_LINE_KEY as e, type UploadItem as f, type UploadOptions as g, type UploadSummary as h, findBundles as i, formatUploadSummary as j, injectBundle as k, injectDir as l, isInAppSource as m, mapPathFor as n, resolveEndpoint as o, processBuildOutput as p, serverUrlPrefix as q, readSourceMappingUrl as r, servedFilename as s, shiftMappings as t, snippetLine as u, storedMapJson as v, storedSourcesContent as w, stripSourceMappingUrl as x, uploadDir as y };

package/dist/{build-BqjqqeLg.d.ts → build-DGeoDkTh.d.ts}

@@ -69,8 +69,9 @@ declare function injectBundle(bundle: BundleWithMap, options?: InjectOptions): P
 declare function injectDir(dir: string, options?: InjectOptions): Promise<InjectResult[]>;
 
 declare const DEFAULT_ENDPOINT = "https://otlp.autter.dev";
-/** Largest map the ingester stores: characters of JSON without
- * `sourcesContent` (otlp-ingester's SOURCE_MAP_MAX_CHARS). */
+/** Largest map the ingester stores (otlp-ingester's SOURCE_MAP_MAX_CHARS):
+ * characters of JSON without `sourcesContent`; the in-app sources' content
+ * that is sent fits in what is left of it, in UTF-8 bytes (storedMapJson). */
 declare const MAX_MAP_CHARS: number;
 /** The ingester's `/v1/sourcemaps` body limit, counted after the gzip body
  * is inflated: the map plus room for the rest of the request. */
@@ -101,6 +102,11 @@ interface UploadOptions {
     /** Delete each `.map` (and its `sourceMappingURL` comment) once the
      * ingester has it, so maps are never deployed. */
     deleteAfterUpload?: boolean;
+    /** Send the original source of your own files (`sourcesContent`, when the
+     * bundler wrote it), so issues show the lines around each frame of your
+     * code. Dependencies' sources are never sent. Default true; false sends
+     * maps without it (`--no-sources-content`). */
+    sourcesContent?: boolean;
     log?: (line: string) => void;
     env?: NodeJS.ProcessEnv;
     cwd?: string;
@@ -138,8 +144,23 @@ interface UploadSummary {
 declare function resolveEndpoint(flag?: string, env?: NodeJS.ProcessEnv): string;
 /** prefix + path, with exactly one "/" between. "~/" (Sentry's spelling) means "/". */
 declare function servedFilename(urlPrefix: string | undefined, path: string): string;
-/** The map as the ingester stores it: `sourcesContent` removed, compact JSON. */
-declare function storedMapJson(map: Record<string, unknown>): string;
+/** Whether a map's `sources` entry is the app's own code (the ingester's in-app path rule). */
+declare function isInAppSource(path: string): boolean;
+/**
+ * The `sourcesContent` the ingester keeps, or null to leave it out: in-app
+ * sources only (not ignore-listed, not under node_modules/ etc.), whole
+ * files, smallest first, while the JSON fits `limit` UTF-8 bytes given the
+ * `baseBytes` of the map without it.
+ */
+declare function storedSourcesContent(fields: Record<string, unknown>, baseBytes: number, limit?: number): Array<string | null> | null;
+/**
+ * The map as the ingester stores it, compact JSON: every field as given,
+ * then `sourcesContent` bounded by storedSourcesContent (left out when
+ * nothing is kept, or with `sourcesContent: false`).
+ */
+declare function storedMapJson(map: Record<string, unknown>, options?: {
+    sourcesContent?: boolean;
+}): string;
 declare class FatalUploadError extends Error {
 }
 /** Upload every source map under `dir` to the ingester's `/v1/sourcemaps`. */
@@ -177,7 +198,26 @@ interface AutterSourceMapsOptions {
     failOnError?: boolean;
     /** No log output. */
     silent?: boolean;
+    /** Send your own files' original source with each map (`sourcesContent`,
+     * when the bundler wrote it), so issues show the lines around each frame
+     * of your code. Dependencies' sources are never sent. Default true. */
+    sourcesContent?: boolean;
+    /** Server bundles too (default true): Vite SSR builds and server
+     * environments, webpack builds for a Node target, and Next.js server
+     * output get debug ids and their maps uploaded, so errors in your backend
+     * resolve to its original files and lines. False leaves server output
+     * exactly as the bundler wrote it. */
+    serverBundles?: boolean;
 }
+/**
+ * Where a server bundle directory's maps are stored: its path relative to
+ * the project (`/dist/server/`, `/.next/server/`), never the public URL
+ * prefix. The ingester matches a stored path as a suffix of the path the
+ * process runs the bundle from (`/app/dist/server/entry.js`,
+ * `/var/task/.next/server/app/page.js`), and the directory keeps server and
+ * browser maps of one release apart. "/" for a directory outside the project.
+ */
+declare function serverUrlPrefix(projectRoot: string, dir: string): string;
 interface BuildOutputResult {
     injected: InjectResult[];
     upload: UploadSummary | null;
@@ -208,6 +248,9 @@ declare function processBuildOutput(input: {
     /** Map files the build emitted (absolute), when the bundler lists them;
      * the maps of `files` (or of every bundle under `dir`) are added. */
     maps?: string[];
+    /** Server output (RF-05): `urlPrefix` is serverUrlPrefix(), which the
+     * public `options.urlPrefix` never overrides. */
+    server?: boolean;
 }): Promise<BuildOutputResult>;
 
-export { type AutterSourceMapsOptions as A, BUNDLE_RE as B, CLIENT_KEY_PREFIX as C, DEFAULT_ENDPOINT as D, FatalUploadError as F, type InjectOptions as I, KEY_ADVICE as K, MAX_MAP_CHARS as M, SERVER_KEY_PREFIX as S, UPLOAD_KEY_PREFIX as U, type BuildOutputResult as a, type BundleWithMap as b, type InjectResult as c, MAX_UPLOAD_BYTES as d, SNIPPET_LINE_KEY as e, type UploadItem as f, type UploadOptions as g, type UploadSummary as h, findBundles as i, formatUploadSummary as j, injectBundle as k, injectDir as l, mapPathFor as m, resolveEndpoint as n, shiftMappings as o, processBuildOutput as p, snippetLine as q, readSourceMappingUrl as r, servedFilename as s, storedMapJson as t, stripSourceMappingUrl as u, uploadDir as v };
+export { type AutterSourceMapsOptions as A, BUNDLE_RE as B, CLIENT_KEY_PREFIX as C, DEFAULT_ENDPOINT as D, FatalUploadError as F, type InjectOptions as I, KEY_ADVICE as K, MAX_MAP_CHARS as M, SERVER_KEY_PREFIX as S, UPLOAD_KEY_PREFIX as U, type BuildOutputResult as a, type BundleWithMap as b, type InjectResult as c, MAX_UPLOAD_BYTES as d, SNIPPET_LINE_KEY as e, type UploadItem as f, type UploadOptions as g, type UploadSummary as h, findBundles as i, formatUploadSummary as j, injectBundle as k, injectDir as l, isInAppSource as m, mapPathFor as n, resolveEndpoint as o, processBuildOutput as p, serverUrlPrefix as q, readSourceMappingUrl as r, servedFilename as s, shiftMappings as t, snippetLine as u, storedMapJson as v, storedSourcesContent as w, stripSourceMappingUrl as x, uploadDir as y };

package/dist/{chunk-KIQRQY3X.js → chunk-Q23FB5X3.js}

@@ -684,9 +684,56 @@ function servedFilename(urlPrefix, path) {
   if (!/^[a-z][\w+.-]*:\/\//i.test(prefix) && !prefix.startsWith("/")) prefix = `/${prefix}`;
   return `${prefix.replace(/\/+$/, "")}/${path.replace(/^\/+/, "")}`;
 }
-function storedMapJson(map) {
-  const { sourcesContent: _omitted, ...safe } = map;
-  return JSON.stringify(safe);
+var NOT_IN_APP_PATH_PARTS = ["node_modules/", "/site-packages/", "/dist-packages/", "/vendor/", "/.pnpm/"];
+var NOT_IN_APP_PATH_PREFIXES = ["node:", "internal/"];
+var EXTENSION_SCHEMES = ["chrome-extension:", "moz-extension:", "safari-extension:", "safari-web-extension:", "webkit-masked-url:"];
+function isInAppSource(path) {
+  if (!path) return true;
+  const normalized = path.replace(/\\/g, "/");
+  if (NOT_IN_APP_PATH_PARTS.some((part) => normalized.includes(part))) return false;
+  if (NOT_IN_APP_PATH_PREFIXES.some((prefix) => normalized.startsWith(prefix))) return false;
+  const lower = normalized.toLowerCase();
+  return !EXTENSION_SCHEMES.some((scheme) => lower.startsWith(scheme));
+}
+var SOURCES_CONTENT_WRAPPER_BYTES = Buffer.byteLength(',"sourcesContent":[]');
+var NULL_ENTRY_BYTES = 4;
+function storedSourcesContent(fields, baseBytes, limit = MAX_MAP_CHARS) {
+  const { sources, sourcesContent } = fields;
+  if (!Array.isArray(sources) || !Array.isArray(sourcesContent) || sources.length === 0) return null;
+  const ignored = /* @__PURE__ */ new Set();
+  for (const list of [fields.ignoreList, fields.x_google_ignoreList]) {
+    if (!Array.isArray(list)) continue;
+    for (const index of list) if (Number.isInteger(index)) ignored.add(index);
+  }
+  const count = sources.length;
+  const candidates = [];
+  for (let index = 0; index < count; index++) {
+    const source = sources[index];
+    const content = sourcesContent[index];
+    if (typeof source !== "string" || typeof content !== "string") continue;
+    if (ignored.has(index) || !isInAppSource(source)) continue;
+    candidates.push({ index, content, bytes: Buffer.byteLength(JSON.stringify(content)) });
+  }
+  if (candidates.length === 0) return null;
+  candidates.sort((a, b) => a.bytes - b.bytes || a.index - b.index);
+  let remaining = limit - baseBytes - SOURCES_CONTENT_WRAPPER_BYTES - NULL_ENTRY_BYTES * count - (count - 1);
+  const kept = new Array(count).fill(null);
+  let any = false;
+  for (const candidate of candidates) {
+    const extra = candidate.bytes - NULL_ENTRY_BYTES;
+    if (extra > remaining) break;
+    remaining -= extra;
+    kept[candidate.index] = candidate.content;
+    any = true;
+  }
+  return any ? kept : null;
+}
+function storedMapJson(map, options = {}) {
+  const { sourcesContent: _content, ...rest } = map;
+  const base = JSON.stringify(rest);
+  if (options.sourcesContent === false) return base;
+  const content = storedSourcesContent(map, Buffer.byteLength(base));
+  return content ? JSON.stringify({ ...rest, sourcesContent: content }) : base;
 }
 function bytesOf(buffer) {
   return new Uint8Array(buffer.buffer, buffer.byteOffset, buffer.byteLength);
@@ -697,7 +744,7 @@ function fits(json, body) {
 function uploadBody(release, filename, debugId, json) {
   return `{"release":${JSON.stringify(release)},"filename":${JSON.stringify(filename)},${debugId ? `"debugId":${JSON.stringify(debugId)},` : ""}"map":${json}}`;
 }
-async function prepare(bundle, urlPrefix, release, log, compress) {
+async function prepare(bundle, urlPrefix, release, log, compress, sourcesContent) {
   let map;
   try {
     map = JSON.parse(await readFile3(bundle.map, "utf8"));
@@ -712,9 +759,10 @@ async function prepare(bundle, urlPrefix, release, log, compress) {
   const filename = servedFilename(urlPrefix, bundle.path);
   const { [SCOPES_KEY]: _stale, ...plain } = map;
   const scopes = computeScopes(code, map);
-  let json = storedMapJson(plain);
+  const stored = { sourcesContent };
+  let json = storedMapJson(plain, stored);
   if ("scopes" in scopes) {
-    const scoped = storedMapJson({ ...plain, [SCOPES_KEY]: scopes.scopes });
+    const scoped = storedMapJson({ ...plain, [SCOPES_KEY]: scopes.scopes }, stored);
     if (fits(scoped, uploadBody(release, filename, debugId, scoped))) json = scoped;
     else if (fits(json, uploadBody(release, filename, debugId, json))) {
       log(`warning: ${bundle.path}: its map is over 32 MB with function scopes, so it is uploaded without them (frames keep call-site names)`);
@@ -761,7 +809,7 @@ async function uploadDir(dir, options = {}) {
   };
   const items = [];
   for (const bundle of await findBundles(dir, options.files)) {
-    const prepared = await prepare(bundle, options.urlPrefix, release, log, !options.dryRun);
+    const prepared = await prepare(bundle, options.urlPrefix, release, log, !options.dryRun, options.sourcesContent !== false);
     if ("error" in prepared) {
       summary.failed.push({ path: bundle.path, filename: servedFilename(options.urlPrefix, bundle.path), error: prepared.error });
     } else if (prepared.mapChars > MAX_MAP_CHARS || prepared.bytes > MAX_UPLOAD_BYTES) {
@@ -881,7 +929,11 @@ function strip(item) {
 
 // src/build.ts
 import { existsSync as existsSync2 } from "fs";
-import { relative as relative2, sep as sep2 } from "path";
+import { isAbsolute, relative as relative2, sep as sep2 } from "path";
+function serverUrlPrefix(projectRoot, dir) {
+  const rel = relative2(projectRoot, dir).split(sep2).join("/");
+  return !rel || rel.startsWith("..") || isAbsolute(rel) ? "/" : `/${rel.replace(/\/+$/, "")}/`;
+}
 function buildKey(options) {
   const key = (options.key ?? process.env.AUTTER_RUNTIME_KEY ?? "").trim();
   return key || null;
@@ -944,12 +996,13 @@ async function processBuildOutput(input) {
       result.upload = await uploadDir(input.dir, {
         files: input.files,
         release: options.release,
-        urlPrefix: options.urlPrefix ?? input.urlPrefix,
+        urlPrefix: input.server ? input.urlPrefix : options.urlPrefix ?? input.urlPrefix,
         endpoint: options.endpoint,
         key: key ?? void 0,
         dryRun: options.dryRun,
         concurrency: options.concurrency,
         deleteAfterUpload: options.deleteAfterUpload ?? input.deleteAfterUpload,
+        ...options.sourcesContent === false ? { sourcesContent: false } : {},
         log
       });
       for (const line of formatUploadSummary(result.upload)) log(line);
@@ -1034,9 +1087,12 @@ export {
   KEY_ADVICE,
   resolveEndpoint,
   servedFilename,
+  isInAppSource,
+  storedSourcesContent,
   storedMapJson,
   FatalUploadError,
   uploadDir,
+  serverUrlPrefix,
   shouldGenerateMaps,
   logMapsNotGenerated,
   formatUploadSummary,

package/dist/{chunk-SIL3WZZ3.js → chunk-V66S2YHN.js}

@@ -2,12 +2,18 @@ import {
   BUNDLE_RE,
   logMapsNotGenerated,
   processBuildOutput,
+  serverUrlPrefix,
   shouldGenerateMaps
-} from "./chunk-KIQRQY3X.js";
+} from "./chunk-Q23FB5X3.js";
 
 // src/webpack.ts
 import { resolve } from "path";
 var PLUGIN_NAME = "AutterSourceMapsWebpackPlugin";
+var SERVER_TARGET_RE = /^(?:async-)?node|^electron-(?:main|preload)/;
+function isServerTarget(target) {
+  const targets = Array.isArray(target) ? target : [target];
+  return targets.some((value) => typeof value === "string" && SERVER_TARGET_RE.test(value));
+}
 var AutterSourceMapsWebpackPlugin = class {
   constructor(options = {}, internal = {}) {
     this.options = options;
@@ -18,6 +24,8 @@ var AutterSourceMapsWebpackPlugin = class {
   apply(compiler) {
     const mode = compiler.options.mode ?? (process.env.NODE_ENV === "development" ? "development" : void 0);
     if (mode === "development") return;
+    const server = this.internal.server ?? isServerTarget(compiler.options.target);
+    if (server && this.options.serverBundles === false) return;
     let enabledMaps = this.internal.ownMaps ?? false;
     if (!compiler.options.devtool) {
       if (shouldGenerateMaps(this.options)) {
@@ -31,7 +39,7 @@ var AutterSourceMapsWebpackPlugin = class {
       const dir = compilation.outputOptions.path ?? compiler.outputPath;
       if (!dir) return;
       const publicPath = compilation.outputOptions.publicPath;
-      const urlPrefix = typeof publicPath === "string" && publicPath !== "auto" && publicPath !== "" ? publicPath : "/";
+      const urlPrefix = server ? serverUrlPrefix(compiler.context ?? process.cwd(), dir) : typeof publicPath === "string" && publicPath !== "auto" && publicPath !== "" ? publicPath : "/";
       const assets = compilation.getAssets().map((asset) => asset.name);
       const files = assets.filter((name) => BUNDLE_RE.test(name)).map((name) => resolve(dir, name));
       const maps = assets.filter((name) => name.endsWith(".map")).map((name) => resolve(dir, name));
@@ -42,7 +50,8 @@ var AutterSourceMapsWebpackPlugin = class {
         urlPrefix,
         options: this.options,
         deleteAfterUpload: enabledMaps,
-        ownMaps: enabledMaps
+        ownMaps: enabledMaps,
+        ...server ? { server: true } : {}
       });
     });
   }
@@ -53,6 +62,7 @@ function autterSourceMapsWebpack(options = {}) {
 var webpack_default = AutterSourceMapsWebpackPlugin;
 
 export {
+  isServerTarget,
   AutterSourceMapsWebpackPlugin,
   autterSourceMapsWebpack,
   webpack_default