@getmonitor/cli 0.3.3 → 0.3.5

package/README.md

@@ -9,7 +9,7 @@ as part of a customer's build.
 For every `*.js` file with a resolvable source map under a directory, `processSourceMaps`:
 
 1. Generates a debug ID and injects it into both the JS file and its source map.
-2. Uploads the tagged source map to `https://ingest.getmonitor.io/api/v1/sourcemaps` — the
+2. Uploads the tagged source map to `https://track.getmonitor.io/api/v1/sourcemaps` — the
    upload host is fixed and not customer-configurable.
 3. On a successful upload: deletes the `.map` file and strips the `//# sourceMappingURL=`
    comment from the JS file, so nothing readable ships publicly.

package/dist/bin.js

@@ -172,7 +172,7 @@ function tryPackageVersion(directory) {
 
 // packages/cli/src/uploadSourceMap.ts
 /** The one sourcemap-upload host every CLI invocation talks to — not customer-configurable. */
-const DEFAULT_API_HOST = 'https://ingest.getmonitor.io';
+const DEFAULT_API_HOST = 'https://track.getmonitor.io';
 /** POSTs a single source map artifact to ingester-api's `/api/v1/sourcemaps` contract.
  * Throws on any non-2xx response or network failure — the caller (processSourceMaps) decides
  * what "failed" means for its own result reporting and disk-write ordering. */
@@ -197,7 +197,11 @@ async function uploadSourceMap(params) {
         body: form,
     });
     if (!response.ok) {
-        throw new Error(`Source map upload failed for ${params.filename}: ${response.status} ${response.statusText}`);
+        // Deliberately excludes `params.filename` — a real deployment can have hundreds/thousands
+        // of artifacts fail identically (e.g. one bad auth token), and processSourceMaps
+        // deduplicates these messages to log the reason once instead of once per file. Baking the
+        // filename in here would make every message unique and defeat that dedup.
+        throw new Error(`${response.status} ${response.statusText}`);
     }
 }
 
@@ -221,24 +225,42 @@ async function processSourceMaps(options) {
     }
     const release = resolveRelease(options.directory, options.release);
     const artifacts = discoverArtifacts(options.directory);
-    // Indexed by each artifact's position in `artifacts` rather than appended in completion
-    // order, so the final result below is deterministic no matter which worker finishes first.
     const outcomes = new Array(artifacts.length);
     const processOne = async (index) => {
         const artifact = artifacts[index];
         const debugId = randomUUID();
         let injected;
+        // Local step: reading the artifact and injecting its debug ID. A failure here (unreadable
+        // file, malformed map JSON) means the build's own output is broken — that's a real bug
+        // worth failing CI over, so it's tracked in `failed` and logged per-file: with a genuine
+        // local bug there are normally only one or a handful of these, unlike a systemic upload
+        // outage below.
         try {
             const originalJs = readFileSync(artifact.jsPath, 'utf8');
             const originalMap = readFileSync(artifact.mapPath, 'utf8');
             // injectDebugId is a pure function that throws on malformed map JSON (by design — see
-            // its own doc comment). That's deliberately caught here, alongside upload failures: one
-            // corrupt/unreadable artifact on disk must not abort processing of every other artifact
-            // in the directory, the same failure-isolation principle discoverArtifacts applies to
-            // unreadable files during its walk. Nothing has been uploaded or written yet at this
-            // point, so a thrown injectDebugId or upload failure leaves the artifact's files
-            // completely untouched, and it's safe to report it as `failed` for a retry.
+            // its own doc comment). One corrupt/unreadable artifact on disk must not abort
+            // processing of every other artifact in the directory, the same failure-isolation
+            // principle discoverArtifacts applies to unreadable files during its walk. Nothing has
+            // been uploaded or written yet at this point, so a thrown injectDebugId failure leaves
+            // the artifact's files completely untouched, and it's safe to report it as `failed` for
+            // a retry.
             injected = injectDebugId(originalJs, originalMap, debugId);
+        }
+        catch (error) {
+            console.error(`Failed to process ${artifact.jsPath}:`, error instanceof Error ? error.message : error);
+            outcomes[index] = { path: artifact.jsPath, kind: 'failed' };
+            return;
+        }
+        // Remote step: uploading to the ingest API. Unlike the local step above, this artifact was
+        // perfectly fine — the *endpoint* rejected the request or was unreachable (bad/expired auth
+        // token, network outage, backend 5xx). That's an infra/connectivity problem outside this
+        // build's control, not a bug in it, so it's tracked separately in `skipped` (never `failed`)
+        // and deliberately NOT logged per-file here: an outage or bad token fails every one of
+        // potentially thousands of artifacts identically, and logging each one would drown out
+        // everything else in the build's output. The deduplicated reason is logged once, after all
+        // artifacts finish, by the summary block below.
+        try {
             await uploadSourceMap({
                 apiHost: options.apiHost,
                 authToken,
@@ -252,27 +274,26 @@ async function processSourceMaps(options) {
             });
         }
         catch (error) {
-            // Surfaced here rather than swallowed: this is the only place the actual failure reason
-            // (injectDebugId's malformed-JSON error, or uploadSourceMap's `status statusText` message)
-            // is available. Without logging it, callers only ever see a bare list of failed paths with
-            // no way to tell an auth failure from a malformed map from a network error.
-            console.error(`Failed to process ${artifact.jsPath}:`, error instanceof Error ? error.message : error);
-            outcomes[index] = { path: artifact.jsPath, ok: false };
+            outcomes[index] = {
+                path: artifact.jsPath,
+                kind: 'skipped',
+                reason: error instanceof Error ? error.message : String(error),
+            };
             return;
         }
         try {
             writeFileSync(artifact.jsPath, injected.js);
             rmSync(artifact.mapPath);
-            outcomes[index] = { path: artifact.jsPath, ok: true };
+            outcomes[index] = { path: artifact.jsPath, kind: 'uploaded' };
         }
         catch (cleanupError) {
-            // The upload above already succeeded, so this must never land in `failed` — a caller
-            // retrying failed artifacts would mint a fresh debugId and re-upload, orphaning this
+            // The upload above already succeeded, so this must never land in `failed` or `skipped` —
+            // a caller retrying either would mint a fresh debugId and re-upload, orphaning this
             // upload server-side under the old one with no way to reconcile the two. The local
             // cleanup failure (disk full, permission error, file lock) is real and worth knowing
             // about, so it's surfaced here rather than silently swallowed, but it doesn't change
             // the artifact's outcome.
-            outcomes[index] = { path: artifact.jsPath, ok: true };
+            outcomes[index] = { path: artifact.jsPath, kind: 'uploaded' };
             console.error(`Uploaded ${artifact.jsPath} but failed to update local files:`, cleanupError);
         }
     };
@@ -287,9 +308,25 @@ async function processSourceMaps(options) {
     };
     const workerCount = Math.min(UPLOAD_CONCURRENCY, artifacts.length);
     await Promise.all(Array.from({ length: workerCount }, runWorker));
-    const result = { uploaded: [], failed: [] };
+    const result = { uploaded: [], failed: [], skipped: [] };
+    // Counts occurrences of each distinct skip reason, preserving first-seen order, so the
+    // summary below reads one line per *kind* of problem rather than one line per file.
+    const skipReasonCounts = new Map();
     for (const outcome of outcomes) {
-        (outcome.ok ? result.uploaded : result.failed).push(outcome.path);
+        if (outcome.kind === 'uploaded')
+            result.uploaded.push(outcome.path);
+        else if (outcome.kind === 'failed')
+            result.failed.push(outcome.path);
+        else {
+            result.skipped.push(outcome.path);
+            skipReasonCounts.set(outcome.reason, (skipReasonCounts.get(outcome.reason) ?? 0) + 1);
+        }
+    }
+    if (result.skipped.length > 0) {
+        console.warn(`GetMonitor: could not upload ${result.skipped.length} source map(s); continuing without them.`);
+        for (const [reason, count] of skipReasonCounts) {
+            console.warn(`  - ${reason} (${count}x)`);
+        }
     }
     return result;
 }
@@ -323,6 +360,13 @@ async function main() {
         authToken: args.authToken,
     });
     console.log(`Uploaded ${result.uploaded.length} source map(s).`);
+    if (result.skipped.length > 0) {
+        // Non-fatal by design: processSourceMaps already warned with the reason(s) above. This is
+        // a plain summary line, not an error — exitCode must stay 0 when the only problem was an
+        // unreachable/unauthenticated upload endpoint, not a bug in this build's output, so a
+        // `next build && getmonitor sourcemaps upload` pipeline still succeeds overall.
+        console.log(`Skipped ${result.skipped.length} source map(s) due to upload errors (see warnings above).`);
+    }
     if (result.failed.length > 0) {
         console.error(`Failed to upload ${result.failed.length} source map(s):`);
         for (const file of result.failed)

package/dist/bin.js.map

@@ -1 +1 @@
-{"version":3,"file":"bin.js","sources":["../src/discoverArtifacts.ts","../src/injectDebugId.ts","../src/resolveRelease.ts","../src/uploadSourceMap.ts","../src/processSourceMaps.ts","../src/bin.ts"],"sourcesContent":["// packages/cli/src/discoverArtifacts.ts\nimport { existsSync, readdirSync, readFileSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\n\nexport interface Artifact {\n  jsPath: string\n  mapPath: string\n}\n\nconst SOURCE_MAPPING_URL = /^\\s*\\/\\/#\\s*sourceMappingURL=(\\S+)\\s*$/gm\n\n// Node recognizes three JS module extensions with runtime meaning (`.js`, `.mjs` for explicit\n// ESM, `.cjs` for explicit CommonJS regardless of the nearest package.json's \"type\") — all three\n// show up as real build output. Nitro's node-server preset (used by `@getmonitor/nuxt`'s e2e\n// test), for one, emits `.output/server/**/*.mjs` unconditionally: verified against a real\n// `nuxt build`, where a `.js`-only match left every server chunk's `.map` file undiscovered and\n// unstripped even though `.output/` itself was already fully written by the time discovery ran.\nconst JS_EXTENSIONS = ['.js', '.mjs', '.cjs']\n\n/** Recursively finds every JS file (`.js`, `.mjs`, `.cjs`) under `directory` and resolves its\n * source map path primarily via its `//# sourceMappingURL=` comment (resolved relative to the\n * JS file's own directory), falling back to same-basename-plus-`.map` when there's no comment,\n * the comment references a data: URI, or the referenced file doesn't exist. A JS file with no\n * resolvable map either way is skipped. */\nexport function discoverArtifacts(directory: string): Artifact[] {\n  const artifacts: Artifact[] = []\n  walk(directory, artifacts)\n  return artifacts\n}\n\nfunction walk(dir: string, artifacts: Artifact[]): void {\n  for (const entry of readdirSync(dir, { withFileTypes: true })) {\n    const fullPath = join(dir, entry.name)\n    if (entry.isDirectory()) {\n      walk(fullPath, artifacts)\n    } else if (entry.isFile() && JS_EXTENSIONS.some((ext) => entry.name.endsWith(ext))) {\n      const mapPath = resolveMapPath(fullPath)\n      if (mapPath) artifacts.push({ jsPath: fullPath, mapPath })\n    }\n  }\n}\n\nfunction resolveMapPath(jsPath: string): string | undefined {\n  const commentMapPath = readSourceMappingUrlComment(jsPath)\n  if (commentMapPath && existsSync(commentMapPath)) return commentMapPath\n\n  const fallbackMapPath = `${jsPath}.map`\n  if (existsSync(fallbackMapPath)) return fallbackMapPath\n\n  return undefined\n}\n\nfunction readSourceMappingUrlComment(jsPath: string): string | undefined {\n  let content: string\n  try {\n    content = readFileSync(jsPath, 'utf8')\n  } catch {\n    // Unreadable file (permission denied, broken symlink, deleted mid-walk, etc.) — treat it\n    // like \"no comment found\" rather than aborting the whole discoverArtifacts() walk.\n    return undefined\n  }\n\n  const matches = [...content.matchAll(SOURCE_MAPPING_URL)]\n  if (matches.length === 0) return undefined\n\n  // The LAST sourceMappingURL comment in the file wins, matching how bundlers/browsers treat\n  // concatenated/reprocessed output — later comments supersede earlier ones.\n  const reference = matches.at(-1)![1]\n  if (reference.startsWith('data:')) return undefined // embedded map, nothing to discover on disk\n\n  return join(dirname(jsPath), reference)\n}\n","// packages/cli/src/injectDebugId.ts\n\nexport interface InjectedArtifact {\n  js: string\n  map: string\n}\n\n/** Computes the debug-ID-injected JS content and the debug-ID-tagged source map JSON, in\n * memory — callers decide whether/when to persist the result to disk (processSourceMaps\n * only writes it after a successful upload, so a failed upload never leaves partially\n * mutated files behind). The injected JS also has its `//# sourceMappingURL=` comment(s)\n * removed, since the source map it names is only ever kept in GetMonitor's backend after\n * a successful upload — never served publicly alongside it.\n *\n * `originalMapJson` must be valid JSON — this is a pure function with no fallback to\n * degrade to (unlike discoverArtifacts, which can skip an unreadable file, this function's\n * caller expects a definite result), so a malformed map is left to throw via JSON.parse\n * rather than being swallowed here. */\nexport function injectDebugId(originalJs: string, originalMapJson: string, debugId: string): InjectedArtifact {\n  const withoutMapComment = originalJs\n    .split('\\n')\n    .filter((line) => !line.trimStart().startsWith('//# sourceMappingURL='))\n    .join('\\n')\n\n  const map = JSON.parse(originalMapJson)\n  map.debugId = debugId\n\n  return {\n    js: `${withoutMapComment}\\n${buildInjectedSnippet(debugId)}`,\n    map: JSON.stringify(map),\n  }\n}\n\n/** At load time, captures this statement's own `Error().stack`, extracts this file's\n * identity from it using the same frame-shape @getmonitor/core's parseStackTrace parses for\n * real errors (V8's `at ... (file:line:col)`, V8's bare `at file:line:col`, and Gecko's\n * `fn@file:line:col`), and registers the debug ID under that identity. Like parseStackTrace,\n * it scans every stack line and takes the first one that matches any of those shapes, rather\n * than assuming a fixed line index — V8 prefixes an `\"ErrorType: message\"` header line that\n * Gecko and Safari don't emit, so a fixed index would grab the wrong frame (or the wrong\n * file's identity) on non-V8 engines; the header line simply fails to match any frame regex\n * and is skipped automatically. A later real error whose frame.filename is parsed from the\n * same JS-engine stack serialization will look up the same key. Wrapped in try/catch so any\n * parsing edge case can never break the host app; wrapped in an IIFE so its locals don't leak\n * into the file's module scope.\n *\n * `debugId` is interpolated unescaped into the generated snippet's string literal. That's\n * safe today because every caller in this system sources `debugId` from\n * `crypto.randomUUID()` (a later task), which can never contain a quote or backslash — but\n * this function itself doesn't enforce that shape, so a caller passing an arbitrary string\n * containing `'` or `\\` would produce invalid/injected JS here. Flagged, not fixed, since\n * validating/escaping isn't part of this function's specified contract. */\nfunction buildInjectedSnippet(debugId: string): string {\n  return (\n    \";(function(){try{var s=(new Error()).stack||'';var ls=s.split('\\\\n');var m=null;\" +\n    'for(var i=0;i<ls.length&&!m;i++){var l=ls[i];' +\n    \"m=l.match(/\\\\((.*):(\\\\d+):(\\\\d+)\\\\)\\\\s*$/)||l.match(/at (.*):(\\\\d+):(\\\\d+)\\\\s*$/)||l.match(/@(.*):(\\\\d+):(\\\\d+)\\\\s*$/)}\" +\n    \"var f=m&&m[1];if(f){var g=(typeof globalThis!=='undefined'?globalThis:self);\" +\n    `g.__getmonitorDebugIds=g.__getmonitorDebugIds||{};g.__getmonitorDebugIds[f]='${debugId}';` +\n    '}}catch(e){}})();'\n  )\n}\n","// packages/cli/src/resolveRelease.ts\nimport { execFileSync } from 'node:child_process'\nimport { existsSync, readFileSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\n\n/** Resolves the release identifier to tag uploaded source maps with. Precedence: explicit\n * argument -> GETMONITOR_RELEASE env var -> current git commit SHA (if `directory` is inside\n * a git working tree) -> `version` field of the nearest package.json walking up from\n * `directory`. Matches the SDKs' own optional `release` field so events and source maps\n * for the same deploy carry the same value. */\nexport function resolveRelease(directory: string, explicit?: string): string {\n  if (explicit) return explicit\n  if (process.env.GETMONITOR_RELEASE) return process.env.GETMONITOR_RELEASE\n\n  const gitSha = tryGitSha(directory)\n  if (gitSha) return gitSha\n\n  const packageVersion = tryPackageVersion(directory)\n  if (packageVersion) return packageVersion\n\n  throw new Error(\n    'Could not resolve a release. Pass --release, set GETMONITOR_RELEASE, run inside a git repository, or add a package.json with a \"version\" field.',\n  )\n}\n\nfunction tryGitSha(directory: string): string | undefined {\n  try {\n    return execFileSync('git', ['rev-parse', 'HEAD'], {\n      cwd: directory,\n      encoding: 'utf8',\n      stdio: ['ignore', 'pipe', 'ignore'],\n    }).trim()\n  } catch {\n    return undefined\n  }\n}\n\nfunction tryPackageVersion(directory: string): string | undefined {\n  let dir = directory\n  for (let i = 0; i < 20; i++) {\n    const pkgPath = join(dir, 'package.json')\n    if (existsSync(pkgPath)) {\n      try {\n        const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'))\n        return typeof pkg.version === 'string' ? pkg.version : undefined\n      } catch {\n        return undefined\n      }\n    }\n    const parent = dirname(dir)\n    if (parent === dir) return undefined\n    dir = parent\n  }\n  return undefined\n}\n","// packages/cli/src/uploadSourceMap.ts\n\n/** The one sourcemap-upload host every CLI invocation talks to — not customer-configurable. */\nexport const DEFAULT_API_HOST = 'https://ingest.getmonitor.io'\n\nexport interface UploadSourceMapParams {\n  /**\n   * @internal Test-only override for redirecting delivery to a local mock server (see\n   * cli/e2e/processSourceMaps.spec.ts and the nextjs-config/nuxt e2e suites). Never exposed\n   * through the public CLI/programmatic surface — real usage always ships to\n   * {@link DEFAULT_API_HOST}.\n   */\n  apiHost?: string\n  authToken: string\n  release: string\n  debugId: string\n  filename: string\n  mapContent: string\n  fetchImpl?: typeof fetch\n}\n\n/** POSTs a single source map artifact to ingester-api's `/api/v1/sourcemaps` contract.\n * Throws on any non-2xx response or network failure — the caller (processSourceMaps) decides\n * what \"failed\" means for its own result reporting and disk-write ordering. */\nexport async function uploadSourceMap(params: UploadSourceMapParams): Promise<void> {\n  // Must bind to globalThis, mirroring @getmonitor/core's HttpTransport: browsers' native\n  // fetch() throws \"Illegal invocation\" if called with a `this` other than\n  // Window/WorkerGlobalScope. Here fetchImpl is invoked as a plain function call below\n  // (`fetchImpl(url, init)`, never `params.fetchImpl(...)` or `this.fetchImpl(...)`), so this\n  // bind is defensive/consistent rather than load-bearing for this particular call site — but\n  // keeping the same default expression as HttpTransport avoids a divergent default if this\n  // code is ever refactored into a method.\n  const fetchImpl = params.fetchImpl ?? fetch.bind(globalThis)\n  const apiHost = params.apiHost ?? DEFAULT_API_HOST\n\n  const form = new FormData()\n  form.set('release', params.release)\n  form.set('debugId', params.debugId)\n  form.set('filename', params.filename)\n  form.set('sourcemap', new Blob([params.mapContent], { type: 'application/json' }), `${params.filename}.map`)\n\n  const response = await fetchImpl(`${apiHost}/api/v1/sourcemaps`, {\n    method: 'POST',\n    headers: { Authorization: `Bearer ${params.authToken}` },\n    body: form,\n  })\n\n  if (!response.ok) {\n    throw new Error(`Source map upload failed for ${params.filename}: ${response.status} ${response.statusText}`)\n  }\n}\n","// packages/cli/src/processSourceMaps.ts\nimport { randomUUID } from 'node:crypto'\nimport { readFileSync, rmSync, writeFileSync } from 'node:fs'\nimport { relative } from 'node:path'\nimport { discoverArtifacts } from './discoverArtifacts'\nimport { injectDebugId, InjectedArtifact } from './injectDebugId'\nimport { resolveRelease } from './resolveRelease'\nimport { uploadSourceMap } from './uploadSourceMap'\nimport { ProcessSourceMapsOptions, ProcessSourceMapsResult } from './types'\n\n/**\n * @internal Test-only host override, intersected into `processSourceMaps`'s options but\n * deliberately not part of the exported `ProcessSourceMapsOptions` type — see\n * `uploadSourceMap`'s `UploadSourceMapParams.apiHost`. Used by this package's own e2e suite\n * and by nextjs-config/nuxt's e2e suites (via their own internal overrides) to redirect\n * delivery to a local mock server; real callers must never set it.\n */\ninterface InternalTestOverrides {\n  apiHost?: string\n}\n\n/** Number of artifacts uploaded at once. Each upload is an independent network round trip to\n * ingester-api, so processing them one at a time made wall-clock time scale linearly with\n * artifact count for no reason — a real Next.js build can emit well over a thousand of them,\n * turning a few hundred ms of per-file latency into many minutes of serial waiting. */\nconst UPLOAD_CONCURRENCY = 20\n\n/** Finds every JS/map artifact pair under `options.directory`, and for each one: injects a\n * debug ID, uploads the tagged source map, and — only on a successful upload — writes the\n * debug-ID-injected JS back to disk and deletes the `.map` file. An artifact whose upload\n * fails is left completely untouched on disk, so it can be retried by re-running this\n * function against the same directory. Artifacts are uploaded concurrently (bounded by\n * `UPLOAD_CONCURRENCY`), but `result.uploaded`/`result.failed` are always ordered to match\n * `discoverArtifacts`'s output, regardless of which upload happens to finish first. */\nexport async function processSourceMaps(\n  options: ProcessSourceMapsOptions & InternalTestOverrides\n): Promise<ProcessSourceMapsResult> {\n  const authToken = options.authToken ?? process.env.GETMONITOR_AUTH_TOKEN\n  if (!authToken) {\n    throw new Error('Missing auth token. Pass --auth-token or set GETMONITOR_AUTH_TOKEN.')\n  }\n\n  const release = resolveRelease(options.directory, options.release)\n  const artifacts = discoverArtifacts(options.directory)\n  // Indexed by each artifact's position in `artifacts` rather than appended in completion\n  // order, so the final result below is deterministic no matter which worker finishes first.\n  const outcomes: Array<{ path: string; ok: boolean }> = new Array(artifacts.length)\n\n  const processOne = async (index: number): Promise<void> => {\n    const artifact = artifacts[index]\n    const debugId = randomUUID()\n    let injected: InjectedArtifact\n\n    try {\n      const originalJs = readFileSync(artifact.jsPath, 'utf8')\n      const originalMap = readFileSync(artifact.mapPath, 'utf8')\n      // injectDebugId is a pure function that throws on malformed map JSON (by design — see\n      // its own doc comment). That's deliberately caught here, alongside upload failures: one\n      // corrupt/unreadable artifact on disk must not abort processing of every other artifact\n      // in the directory, the same failure-isolation principle discoverArtifacts applies to\n      // unreadable files during its walk. Nothing has been uploaded or written yet at this\n      // point, so a thrown injectDebugId or upload failure leaves the artifact's files\n      // completely untouched, and it's safe to report it as `failed` for a retry.\n      injected = injectDebugId(originalJs, originalMap, debugId)\n\n      await uploadSourceMap({\n        apiHost: options.apiHost,\n        authToken,\n        release,\n        debugId,\n        // Relative to options.directory, not the absolute on-disk path — the backend has no\n        // use for (and shouldn't see) the build machine's local filesystem layout.\n        filename: relative(options.directory, artifact.jsPath),\n        mapContent: injected.map,\n        fetchImpl: options.fetchImpl,\n      })\n    } catch (error) {\n      // Surfaced here rather than swallowed: this is the only place the actual failure reason\n      // (injectDebugId's malformed-JSON error, or uploadSourceMap's `status statusText` message)\n      // is available. Without logging it, callers only ever see a bare list of failed paths with\n      // no way to tell an auth failure from a malformed map from a network error.\n      console.error(`Failed to process ${artifact.jsPath}:`, error instanceof Error ? error.message : error)\n      outcomes[index] = { path: artifact.jsPath, ok: false }\n      return\n    }\n\n    try {\n      writeFileSync(artifact.jsPath, injected.js)\n      rmSync(artifact.mapPath)\n      outcomes[index] = { path: artifact.jsPath, ok: true }\n    } catch (cleanupError) {\n      // The upload above already succeeded, so this must never land in `failed` — a caller\n      // retrying failed artifacts would mint a fresh debugId and re-upload, orphaning this\n      // upload server-side under the old one with no way to reconcile the two. The local\n      // cleanup failure (disk full, permission error, file lock) is real and worth knowing\n      // about, so it's surfaced here rather than silently swallowed, but it doesn't change\n      // the artifact's outcome.\n      outcomes[index] = { path: artifact.jsPath, ok: true }\n      console.error(`Uploaded ${artifact.jsPath} but failed to update local files:`, cleanupError)\n    }\n  }\n\n  // A fixed-size pool of workers, each pulling the next unclaimed artifact index off a shared\n  // cursor, bounds concurrency to UPLOAD_CONCURRENCY regardless of how many artifacts there are.\n  let nextIndex = 0\n  const runWorker = async (): Promise<void> => {\n    while (nextIndex < artifacts.length) {\n      const index = nextIndex++\n      await processOne(index)\n    }\n  }\n  const workerCount = Math.min(UPLOAD_CONCURRENCY, artifacts.length)\n  await Promise.all(Array.from({ length: workerCount }, runWorker))\n\n  const result: ProcessSourceMapsResult = { uploaded: [], failed: [] }\n  for (const outcome of outcomes) {\n    ;(outcome.ok ? result.uploaded : result.failed).push(outcome.path)\n  }\n  return result\n}\n","// packages/cli/src/bin.ts\nimport { processSourceMaps } from './processSourceMaps'\n\ninterface ParsedArgs {\n  directory: string\n  release?: string\n  authToken?: string\n}\n\n/** Exported (not just used internally) so it's unit-testable without spawning a process. */\nexport function parseArgs(argv: string[]): ParsedArgs {\n  const [command, subcommand, directory, ...rest] = argv\n  if (command !== 'sourcemaps' || subcommand !== 'upload' || !directory) {\n    throw new Error(\n      'Usage: getmonitor sourcemaps upload <directory> [--release <release>] [--auth-token <token>]',\n    )\n  }\n\n  let release: string | undefined\n  let authToken: string | undefined\n\n  for (let i = 0; i < rest.length; i += 2) {\n    const flag = rest[i]\n    const value = rest[i + 1]\n    if (flag === '--release') release = value\n    else if (flag === '--auth-token') authToken = value\n    else throw new Error(`Unknown flag: ${flag}`)\n  }\n\n  return { directory, release, authToken }\n}\n\nasync function main(): Promise<void> {\n  const args = parseArgs(process.argv.slice(2))\n\n  const result = await processSourceMaps({\n    directory: args.directory,\n    release: args.release,\n    authToken: args.authToken,\n  })\n\n  console.log(`Uploaded ${result.uploaded.length} source map(s).`)\n  if (result.failed.length > 0) {\n    console.error(`Failed to upload ${result.failed.length} source map(s):`)\n    for (const file of result.failed) console.error(`  ${file}`)\n    process.exitCode = 1\n  }\n}\n\n// Skipped under Vitest (which imports this module to test parseArgs) — only run when\n// invoked directly as the built dist/bin.js executable. Confirmed empirically that Vitest\n// sets process.env.VITEST = 'true' in the process that loads this module, so this check\n// reliably prevents main() (which does real I/O and can set process.exitCode) from running\n// during `pnpm test`.\nif (process.env.VITEST === undefined) {\n  main().catch((error) => {\n    console.error(error instanceof Error ? error.message : error)\n    process.exitCode = 1\n  })\n}\n"],"names":[],"mappings":";;;;;;AAAA;AASA,MAAM,kBAAkB,GAAG,0CAA0C;AAErE;AACA;AACA;AACA;AACA;AACA;AACA,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;AAE7C;;;;AAI2C;AACrC,SAAU,iBAAiB,CAAC,SAAiB,EAAA;IACjD,MAAM,SAAS,GAAe,EAAE;AAChC,IAAA,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;AAC1B,IAAA,OAAO,SAAS;AAClB;AAEA,SAAS,IAAI,CAAC,GAAW,EAAE,SAAqB,EAAA;AAC9C,IAAA,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC;AACtC,QAAA,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE;AACvB,YAAA,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC;QAC3B;aAAO,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE;AAClF,YAAA,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC;AACxC,YAAA,IAAI,OAAO;gBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC5D;IACF;AACF;AAEA,SAAS,cAAc,CAAC,MAAc,EAAA;AACpC,IAAA,MAAM,cAAc,GAAG,2BAA2B,CAAC,MAAM,CAAC;AAC1D,IAAA,IAAI,cAAc,IAAI,UAAU,CAAC,cAAc,CAAC;AAAE,QAAA,OAAO,cAAc;AAEvE,IAAA,MAAM,eAAe,GAAG,CAAA,EAAG,MAAM,MAAM;IACvC,IAAI,UAAU,CAAC,eAAe,CAAC;AAAE,QAAA,OAAO,eAAe;AAEvD,IAAA,OAAO,SAAS;AAClB;AAEA,SAAS,2BAA2B,CAAC,MAAc,EAAA;AACjD,IAAA,IAAI,OAAe;AACnB,IAAA,IAAI;AACF,QAAA,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC;IACxC;AAAE,IAAA,MAAM;;;AAGN,QAAA,OAAO,SAAS;IAClB;IAEA,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AACzD,IAAA,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;AAAE,QAAA,OAAO,SAAS;;;AAI1C,IAAA,MAAM,SAAS,GAAG,OAAO,CAAC,EAAE,CAAC,EAAE,CAAE,CAAC,CAAC,CAAC;AACpC,IAAA,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAA;IAEnD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;AACzC;;ACvEA;AAOA;;;;;;;;;;AAUuC;SACvB,aAAa,CAAC,UAAkB,EAAE,eAAuB,EAAE,OAAe,EAAA;IACxF,MAAM,iBAAiB,GAAG;SACvB,KAAK,CAAC,IAAI;AACV,SAAA,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC;SACtE,IAAI,CAAC,IAAI,CAAC;IAEb,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;AACvC,IAAA,GAAG,CAAC,OAAO,GAAG,OAAO;IAErB,OAAO;QACL,EAAE,EAAE,GAAG,iBAAiB,CAAA,EAAA,EAAK,oBAAoB,CAAC,OAAO,CAAC,CAAA,CAAE;AAC5D,QAAA,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;KACzB;AACH;AAEA;;;;;;;;;;;;;;;;;;AAkB2E;AAC3E,SAAS,oBAAoB,CAAC,OAAe,EAAA;AAC3C,IAAA,QACE,kFAAkF;QAClF,+CAA+C;QAC/C,yHAAyH;QACzH,8EAA8E;AAC9E,QAAA,CAAA,6EAAA,EAAgF,OAAO,CAAA,EAAA,CAAI;AAC3F,QAAA,mBAAmB;AAEvB;;AC7DA;AAKA;;;;AAI+C;AACzC,SAAU,cAAc,CAAC,SAAiB,EAAE,QAAiB,EAAA;AACjE,IAAA,IAAI,QAAQ;AAAE,QAAA,OAAO,QAAQ;AAC7B,IAAA,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB;AAAE,QAAA,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB;AAEzE,IAAA,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC;AACnC,IAAA,IAAI,MAAM;AAAE,QAAA,OAAO,MAAM;AAEzB,IAAA,MAAM,cAAc,GAAG,iBAAiB,CAAC,SAAS,CAAC;AACnD,IAAA,IAAI,cAAc;AAAE,QAAA,OAAO,cAAc;AAEzC,IAAA,MAAM,IAAI,KAAK,CACb,iJAAiJ,CAClJ;AACH;AAEA,SAAS,SAAS,CAAC,SAAiB,EAAA;AAClC,IAAA,IAAI;QACF,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE;AAChD,YAAA,GAAG,EAAE,SAAS;AACd,YAAA,QAAQ,EAAE,MAAM;AAChB,YAAA,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE;IACX;AAAE,IAAA,MAAM;AACN,QAAA,OAAO,SAAS;IAClB;AACF;AAEA,SAAS,iBAAiB,CAAC,SAAiB,EAAA;IAC1C,IAAI,GAAG,GAAG,SAAS;AACnB,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC;AACzC,QAAA,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE;AACvB,YAAA,IAAI;AACF,gBAAA,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACrD,gBAAA,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,GAAG,GAAG,CAAC,OAAO,GAAG,SAAS;YAClE;AAAE,YAAA,MAAM;AACN,gBAAA,OAAO,SAAS;YAClB;QACF;AACA,QAAA,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAC3B,IAAI,MAAM,KAAK,GAAG;AAAE,YAAA,OAAO,SAAS;QACpC,GAAG,GAAG,MAAM;IACd;AACA,IAAA,OAAO,SAAS;AAClB;;ACtDA;AAEA;AACO,MAAM,gBAAgB,GAAG,8BAA8B;AAkB9D;;AAE+E;AACxE,eAAe,eAAe,CAAC,MAA6B,EAAA;;;;;;;;AAQjE,IAAA,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;AAC5D,IAAA,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,gBAAgB;AAElD,IAAA,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE;IAC3B,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC;IACrC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAA,EAAG,MAAM,CAAC,QAAQ,CAAA,IAAA,CAAM,CAAC;IAE5G,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,CAAA,EAAG,OAAO,oBAAoB,EAAE;AAC/D,QAAA,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,SAAS,CAAA,CAAE,EAAE;AACxD,QAAA,IAAI,EAAE,IAAI;AACX,KAAA,CAAC;AAEF,IAAA,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;AAChB,QAAA,MAAM,IAAI,KAAK,CAAC,CAAA,6BAAA,EAAgC,MAAM,CAAC,QAAQ,CAAA,EAAA,EAAK,QAAQ,CAAC,MAAM,CAAA,CAAA,EAAI,QAAQ,CAAC,UAAU,CAAA,CAAE,CAAC;IAC/G;AACF;;AClDA;AAqBA;;;AAGuF;AACvF,MAAM,kBAAkB,GAAG,EAAE;AAE7B;;;;;;AAMuF;AAChF,eAAe,iBAAiB,CACrC,OAAyD,EAAA;IAEzD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB;IACxE,IAAI,CAAC,SAAS,EAAE;AACd,QAAA,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC;IACxF;AAEA,IAAA,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC;IAClE,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC;;;IAGtD,MAAM,QAAQ,GAAyC,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;AAElF,IAAA,MAAM,UAAU,GAAG,OAAO,KAAa,KAAmB;AACxD,QAAA,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC;AACjC,QAAA,MAAM,OAAO,GAAG,UAAU,EAAE;AAC5B,QAAA,IAAI,QAA0B;AAE9B,QAAA,IAAI;YACF,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;YACxD,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;;;;;;;;YAQ1D,QAAQ,GAAG,aAAa,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC;AAE1D,YAAA,MAAM,eAAe,CAAC;gBACpB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,SAAS;gBACT,OAAO;gBACP,OAAO;;;gBAGP,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC;gBACtD,UAAU,EAAE,QAAQ,CAAC,GAAG;gBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;AAC7B,aAAA,CAAC;QACJ;QAAE,OAAO,KAAK,EAAE;;;;;YAKd,OAAO,CAAC,KAAK,CAAC,CAAA,kBAAA,EAAqB,QAAQ,CAAC,MAAM,CAAA,CAAA,CAAG,EAAE,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;AACtG,YAAA,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE;YACtD;QACF;AAEA,QAAA,IAAI;YACF,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAC3C,YAAA,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;AACxB,YAAA,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE;QACvD;QAAE,OAAO,YAAY,EAAE;;;;;;;AAOrB,YAAA,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE;YACrD,OAAO,CAAC,KAAK,CAAC,CAAA,SAAA,EAAY,QAAQ,CAAC,MAAM,CAAA,kCAAA,CAAoC,EAAE,YAAY,CAAC;QAC9F;AACF,IAAA,CAAC;;;IAID,IAAI,SAAS,GAAG,CAAC;AACjB,IAAA,MAAM,SAAS,GAAG,YAA0B;AAC1C,QAAA,OAAO,SAAS,GAAG,SAAS,CAAC,MAAM,EAAE;AACnC,YAAA,MAAM,KAAK,GAAG,SAAS,EAAE;AACzB,YAAA,MAAM,UAAU,CAAC,KAAK,CAAC;QACzB;AACF,IAAA,CAAC;AACD,IAAA,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,MAAM,CAAC;AAClE,IAAA,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;IAEjE,MAAM,MAAM,GAA4B,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;AACpE,IAAA,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE;QAC7B,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IACpE;AACA,IAAA,OAAO,MAAM;AACf;;ACvHA;AASA;AACM,SAAU,SAAS,CAAC,IAAc,EAAA;AACtC,IAAA,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI;IACtD,IAAI,OAAO,KAAK,YAAY,IAAI,UAAU,KAAK,QAAQ,IAAI,CAAC,SAAS,EAAE;AACrE,QAAA,MAAM,IAAI,KAAK,CACb,8FAA8F,CAC/F;IACH;AAEA,IAAA,IAAI,OAA2B;AAC/B,IAAA,IAAI,SAA6B;AAEjC,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE;AACvC,QAAA,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,WAAW;YAAE,OAAO,GAAG,KAAK;aACpC,IAAI,IAAI,KAAK,cAAc;YAAE,SAAS,GAAG,KAAK;;AAC9C,YAAA,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAA,CAAE,CAAC;IAC/C;AAEA,IAAA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE;AAC1C;AAEA,eAAe,IAAI,GAAA;AACjB,IAAA,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAE7C,IAAA,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;QACrC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,SAAS;AAC1B,KAAA,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,CAAA,SAAA,EAAY,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAA,eAAA,CAAiB,CAAC;IAChE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;QAC5B,OAAO,CAAC,KAAK,CAAC,CAAA,iBAAA,EAAoB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAA,eAAA,CAAiB,CAAC;AACxE,QAAA,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM;AAAE,YAAA,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAA,CAAE,CAAC;AAC5D,QAAA,OAAO,CAAC,QAAQ,GAAG,CAAC;IACtB;AACF;AAEA;AACA;AACA;AACA;AACA;AACA,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE;AACpC,IAAA,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,KAAI;AACrB,QAAA,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;AAC7D,QAAA,OAAO,CAAC,QAAQ,GAAG,CAAC;AACtB,IAAA,CAAC,CAAC;AACJ;;;;"}
+{"version":3,"file":"bin.js","sources":["../src/discoverArtifacts.ts","../src/injectDebugId.ts","../src/resolveRelease.ts","../src/uploadSourceMap.ts","../src/processSourceMaps.ts","../src/bin.ts"],"sourcesContent":["// packages/cli/src/discoverArtifacts.ts\nimport { existsSync, readdirSync, readFileSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\n\nexport interface Artifact {\n  jsPath: string\n  mapPath: string\n}\n\nconst SOURCE_MAPPING_URL = /^\\s*\\/\\/#\\s*sourceMappingURL=(\\S+)\\s*$/gm\n\n// Node recognizes three JS module extensions with runtime meaning (`.js`, `.mjs` for explicit\n// ESM, `.cjs` for explicit CommonJS regardless of the nearest package.json's \"type\") — all three\n// show up as real build output. Nitro's node-server preset (used by `@getmonitor/nuxt`'s e2e\n// test), for one, emits `.output/server/**/*.mjs` unconditionally: verified against a real\n// `nuxt build`, where a `.js`-only match left every server chunk's `.map` file undiscovered and\n// unstripped even though `.output/` itself was already fully written by the time discovery ran.\nconst JS_EXTENSIONS = ['.js', '.mjs', '.cjs']\n\n/** Recursively finds every JS file (`.js`, `.mjs`, `.cjs`) under `directory` and resolves its\n * source map path primarily via its `//# sourceMappingURL=` comment (resolved relative to the\n * JS file's own directory), falling back to same-basename-plus-`.map` when there's no comment,\n * the comment references a data: URI, or the referenced file doesn't exist. A JS file with no\n * resolvable map either way is skipped. */\nexport function discoverArtifacts(directory: string): Artifact[] {\n  const artifacts: Artifact[] = []\n  walk(directory, artifacts)\n  return artifacts\n}\n\nfunction walk(dir: string, artifacts: Artifact[]): void {\n  for (const entry of readdirSync(dir, { withFileTypes: true })) {\n    const fullPath = join(dir, entry.name)\n    if (entry.isDirectory()) {\n      walk(fullPath, artifacts)\n    } else if (entry.isFile() && JS_EXTENSIONS.some((ext) => entry.name.endsWith(ext))) {\n      const mapPath = resolveMapPath(fullPath)\n      if (mapPath) artifacts.push({ jsPath: fullPath, mapPath })\n    }\n  }\n}\n\nfunction resolveMapPath(jsPath: string): string | undefined {\n  const commentMapPath = readSourceMappingUrlComment(jsPath)\n  if (commentMapPath && existsSync(commentMapPath)) return commentMapPath\n\n  const fallbackMapPath = `${jsPath}.map`\n  if (existsSync(fallbackMapPath)) return fallbackMapPath\n\n  return undefined\n}\n\nfunction readSourceMappingUrlComment(jsPath: string): string | undefined {\n  let content: string\n  try {\n    content = readFileSync(jsPath, 'utf8')\n  } catch {\n    // Unreadable file (permission denied, broken symlink, deleted mid-walk, etc.) — treat it\n    // like \"no comment found\" rather than aborting the whole discoverArtifacts() walk.\n    return undefined\n  }\n\n  const matches = [...content.matchAll(SOURCE_MAPPING_URL)]\n  if (matches.length === 0) return undefined\n\n  // The LAST sourceMappingURL comment in the file wins, matching how bundlers/browsers treat\n  // concatenated/reprocessed output — later comments supersede earlier ones.\n  const reference = matches.at(-1)![1]\n  if (reference.startsWith('data:')) return undefined // embedded map, nothing to discover on disk\n\n  return join(dirname(jsPath), reference)\n}\n","// packages/cli/src/injectDebugId.ts\n\nexport interface InjectedArtifact {\n  js: string\n  map: string\n}\n\n/** Computes the debug-ID-injected JS content and the debug-ID-tagged source map JSON, in\n * memory — callers decide whether/when to persist the result to disk (processSourceMaps\n * only writes it after a successful upload, so a failed upload never leaves partially\n * mutated files behind). The injected JS also has its `//# sourceMappingURL=` comment(s)\n * removed, since the source map it names is only ever kept in GetMonitor's backend after\n * a successful upload — never served publicly alongside it.\n *\n * `originalMapJson` must be valid JSON — this is a pure function with no fallback to\n * degrade to (unlike discoverArtifacts, which can skip an unreadable file, this function's\n * caller expects a definite result), so a malformed map is left to throw via JSON.parse\n * rather than being swallowed here. */\nexport function injectDebugId(originalJs: string, originalMapJson: string, debugId: string): InjectedArtifact {\n  const withoutMapComment = originalJs\n    .split('\\n')\n    .filter((line) => !line.trimStart().startsWith('//# sourceMappingURL='))\n    .join('\\n')\n\n  const map = JSON.parse(originalMapJson)\n  map.debugId = debugId\n\n  return {\n    js: `${withoutMapComment}\\n${buildInjectedSnippet(debugId)}`,\n    map: JSON.stringify(map),\n  }\n}\n\n/** At load time, captures this statement's own `Error().stack`, extracts this file's\n * identity from it using the same frame-shape @getmonitor/core's parseStackTrace parses for\n * real errors (V8's `at ... (file:line:col)`, V8's bare `at file:line:col`, and Gecko's\n * `fn@file:line:col`), and registers the debug ID under that identity. Like parseStackTrace,\n * it scans every stack line and takes the first one that matches any of those shapes, rather\n * than assuming a fixed line index — V8 prefixes an `\"ErrorType: message\"` header line that\n * Gecko and Safari don't emit, so a fixed index would grab the wrong frame (or the wrong\n * file's identity) on non-V8 engines; the header line simply fails to match any frame regex\n * and is skipped automatically. A later real error whose frame.filename is parsed from the\n * same JS-engine stack serialization will look up the same key. Wrapped in try/catch so any\n * parsing edge case can never break the host app; wrapped in an IIFE so its locals don't leak\n * into the file's module scope.\n *\n * `debugId` is interpolated unescaped into the generated snippet's string literal. That's\n * safe today because every caller in this system sources `debugId` from\n * `crypto.randomUUID()` (a later task), which can never contain a quote or backslash — but\n * this function itself doesn't enforce that shape, so a caller passing an arbitrary string\n * containing `'` or `\\` would produce invalid/injected JS here. Flagged, not fixed, since\n * validating/escaping isn't part of this function's specified contract. */\nfunction buildInjectedSnippet(debugId: string): string {\n  return (\n    \";(function(){try{var s=(new Error()).stack||'';var ls=s.split('\\\\n');var m=null;\" +\n    'for(var i=0;i<ls.length&&!m;i++){var l=ls[i];' +\n    \"m=l.match(/\\\\((.*):(\\\\d+):(\\\\d+)\\\\)\\\\s*$/)||l.match(/at (.*):(\\\\d+):(\\\\d+)\\\\s*$/)||l.match(/@(.*):(\\\\d+):(\\\\d+)\\\\s*$/)}\" +\n    \"var f=m&&m[1];if(f){var g=(typeof globalThis!=='undefined'?globalThis:self);\" +\n    `g.__getmonitorDebugIds=g.__getmonitorDebugIds||{};g.__getmonitorDebugIds[f]='${debugId}';` +\n    '}}catch(e){}})();'\n  )\n}\n","// packages/cli/src/resolveRelease.ts\nimport { execFileSync } from 'node:child_process'\nimport { existsSync, readFileSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\n\n/** Resolves the release identifier to tag uploaded source maps with. Precedence: explicit\n * argument -> GETMONITOR_RELEASE env var -> current git commit SHA (if `directory` is inside\n * a git working tree) -> `version` field of the nearest package.json walking up from\n * `directory`. Matches the SDKs' own optional `release` field so events and source maps\n * for the same deploy carry the same value. */\nexport function resolveRelease(directory: string, explicit?: string): string {\n  if (explicit) return explicit\n  if (process.env.GETMONITOR_RELEASE) return process.env.GETMONITOR_RELEASE\n\n  const gitSha = tryGitSha(directory)\n  if (gitSha) return gitSha\n\n  const packageVersion = tryPackageVersion(directory)\n  if (packageVersion) return packageVersion\n\n  throw new Error(\n    'Could not resolve a release. Pass --release, set GETMONITOR_RELEASE, run inside a git repository, or add a package.json with a \"version\" field.',\n  )\n}\n\nfunction tryGitSha(directory: string): string | undefined {\n  try {\n    return execFileSync('git', ['rev-parse', 'HEAD'], {\n      cwd: directory,\n      encoding: 'utf8',\n      stdio: ['ignore', 'pipe', 'ignore'],\n    }).trim()\n  } catch {\n    return undefined\n  }\n}\n\nfunction tryPackageVersion(directory: string): string | undefined {\n  let dir = directory\n  for (let i = 0; i < 20; i++) {\n    const pkgPath = join(dir, 'package.json')\n    if (existsSync(pkgPath)) {\n      try {\n        const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'))\n        return typeof pkg.version === 'string' ? pkg.version : undefined\n      } catch {\n        return undefined\n      }\n    }\n    const parent = dirname(dir)\n    if (parent === dir) return undefined\n    dir = parent\n  }\n  return undefined\n}\n","// packages/cli/src/uploadSourceMap.ts\n\n/** The one sourcemap-upload host every CLI invocation talks to — not customer-configurable. */\nexport const DEFAULT_API_HOST = 'https://track.getmonitor.io'\n\nexport interface UploadSourceMapParams {\n  /**\n   * @internal Test-only override for redirecting delivery to a local mock server (see\n   * cli/e2e/processSourceMaps.spec.ts and the nextjs-config/nuxt e2e suites). Never exposed\n   * through the public CLI/programmatic surface — real usage always ships to\n   * {@link DEFAULT_API_HOST}.\n   */\n  apiHost?: string\n  authToken: string\n  release: string\n  debugId: string\n  filename: string\n  mapContent: string\n  fetchImpl?: typeof fetch\n}\n\n/** POSTs a single source map artifact to ingester-api's `/api/v1/sourcemaps` contract.\n * Throws on any non-2xx response or network failure — the caller (processSourceMaps) decides\n * what \"failed\" means for its own result reporting and disk-write ordering. */\nexport async function uploadSourceMap(params: UploadSourceMapParams): Promise<void> {\n  // Must bind to globalThis, mirroring @getmonitor/core's HttpTransport: browsers' native\n  // fetch() throws \"Illegal invocation\" if called with a `this` other than\n  // Window/WorkerGlobalScope. Here fetchImpl is invoked as a plain function call below\n  // (`fetchImpl(url, init)`, never `params.fetchImpl(...)` or `this.fetchImpl(...)`), so this\n  // bind is defensive/consistent rather than load-bearing for this particular call site — but\n  // keeping the same default expression as HttpTransport avoids a divergent default if this\n  // code is ever refactored into a method.\n  const fetchImpl = params.fetchImpl ?? fetch.bind(globalThis)\n  const apiHost = params.apiHost ?? DEFAULT_API_HOST\n\n  const form = new FormData()\n  form.set('release', params.release)\n  form.set('debugId', params.debugId)\n  form.set('filename', params.filename)\n  form.set('sourcemap', new Blob([params.mapContent], { type: 'application/json' }), `${params.filename}.map`)\n\n  const response = await fetchImpl(`${apiHost}/api/v1/sourcemaps`, {\n    method: 'POST',\n    headers: { Authorization: `Bearer ${params.authToken}` },\n    body: form,\n  })\n\n  if (!response.ok) {\n    // Deliberately excludes `params.filename` — a real deployment can have hundreds/thousands\n    // of artifacts fail identically (e.g. one bad auth token), and processSourceMaps\n    // deduplicates these messages to log the reason once instead of once per file. Baking the\n    // filename in here would make every message unique and defeat that dedup.\n    throw new Error(`${response.status} ${response.statusText}`)\n  }\n}\n","// packages/cli/src/processSourceMaps.ts\nimport { randomUUID } from 'node:crypto'\nimport { readFileSync, rmSync, writeFileSync } from 'node:fs'\nimport { relative } from 'node:path'\nimport { discoverArtifacts } from './discoverArtifacts'\nimport { injectDebugId, InjectedArtifact } from './injectDebugId'\nimport { resolveRelease } from './resolveRelease'\nimport { uploadSourceMap } from './uploadSourceMap'\nimport { ProcessSourceMapsOptions, ProcessSourceMapsResult } from './types'\n\n/**\n * @internal Test-only host override, intersected into `processSourceMaps`'s options but\n * deliberately not part of the exported `ProcessSourceMapsOptions` type — see\n * `uploadSourceMap`'s `UploadSourceMapParams.apiHost`. Used by this package's own e2e suite\n * and by nextjs-config/nuxt's e2e suites (via their own internal overrides) to redirect\n * delivery to a local mock server; real callers must never set it.\n */\ninterface InternalTestOverrides {\n  apiHost?: string\n}\n\n/** Number of artifacts uploaded at once. Each upload is an independent network round trip to\n * ingester-api, so processing them one at a time made wall-clock time scale linearly with\n * artifact count for no reason — a real Next.js build can emit well over a thousand of them,\n * turning a few hundred ms of per-file latency into many minutes of serial waiting. */\nconst UPLOAD_CONCURRENCY = 20\n\n/** Finds every JS/map artifact pair under `options.directory`, and for each one: injects a\n * debug ID, uploads the tagged source map, and — only on a successful upload — writes the\n * debug-ID-injected JS back to disk and deletes the `.map` file. An artifact whose upload\n * fails is left completely untouched on disk, so it can be retried by re-running this\n * function against the same directory. Artifacts are uploaded concurrently (bounded by\n * `UPLOAD_CONCURRENCY`), but `result.uploaded`/`result.failed` are always ordered to match\n * `discoverArtifacts`'s output, regardless of which upload happens to finish first. */\nexport async function processSourceMaps(\n  options: ProcessSourceMapsOptions & InternalTestOverrides\n): Promise<ProcessSourceMapsResult> {\n  const authToken = options.authToken ?? process.env.GETMONITOR_AUTH_TOKEN\n  if (!authToken) {\n    throw new Error('Missing auth token. Pass --auth-token or set GETMONITOR_AUTH_TOKEN.')\n  }\n\n  const release = resolveRelease(options.directory, options.release)\n  const artifacts = discoverArtifacts(options.directory)\n  // Indexed by each artifact's position in `artifacts` rather than appended in completion\n  // order, so the final result below is deterministic no matter which worker finishes first.\n  type Outcome =\n    | { path: string; kind: 'uploaded' }\n    | { path: string; kind: 'failed' }\n    | { path: string; kind: 'skipped'; reason: string }\n  const outcomes: Outcome[] = new Array(artifacts.length)\n\n  const processOne = async (index: number): Promise<void> => {\n    const artifact = artifacts[index]\n    const debugId = randomUUID()\n    let injected: InjectedArtifact\n\n    // Local step: reading the artifact and injecting its debug ID. A failure here (unreadable\n    // file, malformed map JSON) means the build's own output is broken — that's a real bug\n    // worth failing CI over, so it's tracked in `failed` and logged per-file: with a genuine\n    // local bug there are normally only one or a handful of these, unlike a systemic upload\n    // outage below.\n    try {\n      const originalJs = readFileSync(artifact.jsPath, 'utf8')\n      const originalMap = readFileSync(artifact.mapPath, 'utf8')\n      // injectDebugId is a pure function that throws on malformed map JSON (by design — see\n      // its own doc comment). One corrupt/unreadable artifact on disk must not abort\n      // processing of every other artifact in the directory, the same failure-isolation\n      // principle discoverArtifacts applies to unreadable files during its walk. Nothing has\n      // been uploaded or written yet at this point, so a thrown injectDebugId failure leaves\n      // the artifact's files completely untouched, and it's safe to report it as `failed` for\n      // a retry.\n      injected = injectDebugId(originalJs, originalMap, debugId)\n    } catch (error) {\n      console.error(`Failed to process ${artifact.jsPath}:`, error instanceof Error ? error.message : error)\n      outcomes[index] = { path: artifact.jsPath, kind: 'failed' }\n      return\n    }\n\n    // Remote step: uploading to the ingest API. Unlike the local step above, this artifact was\n    // perfectly fine — the *endpoint* rejected the request or was unreachable (bad/expired auth\n    // token, network outage, backend 5xx). That's an infra/connectivity problem outside this\n    // build's control, not a bug in it, so it's tracked separately in `skipped` (never `failed`)\n    // and deliberately NOT logged per-file here: an outage or bad token fails every one of\n    // potentially thousands of artifacts identically, and logging each one would drown out\n    // everything else in the build's output. The deduplicated reason is logged once, after all\n    // artifacts finish, by the summary block below.\n    try {\n      await uploadSourceMap({\n        apiHost: options.apiHost,\n        authToken,\n        release,\n        debugId,\n        // Relative to options.directory, not the absolute on-disk path — the backend has no\n        // use for (and shouldn't see) the build machine's local filesystem layout.\n        filename: relative(options.directory, artifact.jsPath),\n        mapContent: injected.map,\n        fetchImpl: options.fetchImpl,\n      })\n    } catch (error) {\n      outcomes[index] = {\n        path: artifact.jsPath,\n        kind: 'skipped',\n        reason: error instanceof Error ? error.message : String(error),\n      }\n      return\n    }\n\n    try {\n      writeFileSync(artifact.jsPath, injected.js)\n      rmSync(artifact.mapPath)\n      outcomes[index] = { path: artifact.jsPath, kind: 'uploaded' }\n    } catch (cleanupError) {\n      // The upload above already succeeded, so this must never land in `failed` or `skipped` —\n      // a caller retrying either would mint a fresh debugId and re-upload, orphaning this\n      // upload server-side under the old one with no way to reconcile the two. The local\n      // cleanup failure (disk full, permission error, file lock) is real and worth knowing\n      // about, so it's surfaced here rather than silently swallowed, but it doesn't change\n      // the artifact's outcome.\n      outcomes[index] = { path: artifact.jsPath, kind: 'uploaded' }\n      console.error(`Uploaded ${artifact.jsPath} but failed to update local files:`, cleanupError)\n    }\n  }\n\n  // A fixed-size pool of workers, each pulling the next unclaimed artifact index off a shared\n  // cursor, bounds concurrency to UPLOAD_CONCURRENCY regardless of how many artifacts there are.\n  let nextIndex = 0\n  const runWorker = async (): Promise<void> => {\n    while (nextIndex < artifacts.length) {\n      const index = nextIndex++\n      await processOne(index)\n    }\n  }\n  const workerCount = Math.min(UPLOAD_CONCURRENCY, artifacts.length)\n  await Promise.all(Array.from({ length: workerCount }, runWorker))\n\n  const result: ProcessSourceMapsResult = { uploaded: [], failed: [], skipped: [] }\n  // Counts occurrences of each distinct skip reason, preserving first-seen order, so the\n  // summary below reads one line per *kind* of problem rather than one line per file.\n  const skipReasonCounts = new Map<string, number>()\n  for (const outcome of outcomes) {\n    if (outcome.kind === 'uploaded') result.uploaded.push(outcome.path)\n    else if (outcome.kind === 'failed') result.failed.push(outcome.path)\n    else {\n      result.skipped.push(outcome.path)\n      skipReasonCounts.set(outcome.reason, (skipReasonCounts.get(outcome.reason) ?? 0) + 1)\n    }\n  }\n\n  if (result.skipped.length > 0) {\n    console.warn(`GetMonitor: could not upload ${result.skipped.length} source map(s); continuing without them.`)\n    for (const [reason, count] of skipReasonCounts) {\n      console.warn(`  - ${reason} (${count}x)`)\n    }\n  }\n\n  return result\n}\n","// packages/cli/src/bin.ts\nimport { processSourceMaps } from './processSourceMaps'\n\ninterface ParsedArgs {\n  directory: string\n  release?: string\n  authToken?: string\n}\n\n/** Exported (not just used internally) so it's unit-testable without spawning a process. */\nexport function parseArgs(argv: string[]): ParsedArgs {\n  const [command, subcommand, directory, ...rest] = argv\n  if (command !== 'sourcemaps' || subcommand !== 'upload' || !directory) {\n    throw new Error(\n      'Usage: getmonitor sourcemaps upload <directory> [--release <release>] [--auth-token <token>]',\n    )\n  }\n\n  let release: string | undefined\n  let authToken: string | undefined\n\n  for (let i = 0; i < rest.length; i += 2) {\n    const flag = rest[i]\n    const value = rest[i + 1]\n    if (flag === '--release') release = value\n    else if (flag === '--auth-token') authToken = value\n    else throw new Error(`Unknown flag: ${flag}`)\n  }\n\n  return { directory, release, authToken }\n}\n\nasync function main(): Promise<void> {\n  const args = parseArgs(process.argv.slice(2))\n\n  const result = await processSourceMaps({\n    directory: args.directory,\n    release: args.release,\n    authToken: args.authToken,\n  })\n\n  console.log(`Uploaded ${result.uploaded.length} source map(s).`)\n  if (result.skipped.length > 0) {\n    // Non-fatal by design: processSourceMaps already warned with the reason(s) above. This is\n    // a plain summary line, not an error — exitCode must stay 0 when the only problem was an\n    // unreachable/unauthenticated upload endpoint, not a bug in this build's output, so a\n    // `next build && getmonitor sourcemaps upload` pipeline still succeeds overall.\n    console.log(`Skipped ${result.skipped.length} source map(s) due to upload errors (see warnings above).`)\n  }\n  if (result.failed.length > 0) {\n    console.error(`Failed to upload ${result.failed.length} source map(s):`)\n    for (const file of result.failed) console.error(`  ${file}`)\n    process.exitCode = 1\n  }\n}\n\n// Skipped under Vitest (which imports this module to test parseArgs) — only run when\n// invoked directly as the built dist/bin.js executable. Confirmed empirically that Vitest\n// sets process.env.VITEST = 'true' in the process that loads this module, so this check\n// reliably prevents main() (which does real I/O and can set process.exitCode) from running\n// during `pnpm test`.\nif (process.env.VITEST === undefined) {\n  main().catch((error) => {\n    console.error(error instanceof Error ? error.message : error)\n    process.exitCode = 1\n  })\n}\n"],"names":[],"mappings":";;;;;;AAAA;AASA,MAAM,kBAAkB,GAAG,0CAA0C;AAErE;AACA;AACA;AACA;AACA;AACA;AACA,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;AAE7C;;;;AAI2C;AACrC,SAAU,iBAAiB,CAAC,SAAiB,EAAA;IACjD,MAAM,SAAS,GAAe,EAAE;AAChC,IAAA,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;AAC1B,IAAA,OAAO,SAAS;AAClB;AAEA,SAAS,IAAI,CAAC,GAAW,EAAE,SAAqB,EAAA;AAC9C,IAAA,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC;AACtC,QAAA,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE;AACvB,YAAA,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC;QAC3B;aAAO,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE;AAClF,YAAA,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC;AACxC,YAAA,IAAI,OAAO;gBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC5D;IACF;AACF;AAEA,SAAS,cAAc,CAAC,MAAc,EAAA;AACpC,IAAA,MAAM,cAAc,GAAG,2BAA2B,CAAC,MAAM,CAAC;AAC1D,IAAA,IAAI,cAAc,IAAI,UAAU,CAAC,cAAc,CAAC;AAAE,QAAA,OAAO,cAAc;AAEvE,IAAA,MAAM,eAAe,GAAG,CAAA,EAAG,MAAM,MAAM;IACvC,IAAI,UAAU,CAAC,eAAe,CAAC;AAAE,QAAA,OAAO,eAAe;AAEvD,IAAA,OAAO,SAAS;AAClB;AAEA,SAAS,2BAA2B,CAAC,MAAc,EAAA;AACjD,IAAA,IAAI,OAAe;AACnB,IAAA,IAAI;AACF,QAAA,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC;IACxC;AAAE,IAAA,MAAM;;;AAGN,QAAA,OAAO,SAAS;IAClB;IAEA,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AACzD,IAAA,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;AAAE,QAAA,OAAO,SAAS;;;AAI1C,IAAA,MAAM,SAAS,GAAG,OAAO,CAAC,EAAE,CAAC,EAAE,CAAE,CAAC,CAAC,CAAC;AACpC,IAAA,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAA;IAEnD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;AACzC;;ACvEA;AAOA;;;;;;;;;;AAUuC;SACvB,aAAa,CAAC,UAAkB,EAAE,eAAuB,EAAE,OAAe,EAAA;IACxF,MAAM,iBAAiB,GAAG;SACvB,KAAK,CAAC,IAAI;AACV,SAAA,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC;SACtE,IAAI,CAAC,IAAI,CAAC;IAEb,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;AACvC,IAAA,GAAG,CAAC,OAAO,GAAG,OAAO;IAErB,OAAO;QACL,EAAE,EAAE,GAAG,iBAAiB,CAAA,EAAA,EAAK,oBAAoB,CAAC,OAAO,CAAC,CAAA,CAAE;AAC5D,QAAA,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;KACzB;AACH;AAEA;;;;;;;;;;;;;;;;;;AAkB2E;AAC3E,SAAS,oBAAoB,CAAC,OAAe,EAAA;AAC3C,IAAA,QACE,kFAAkF;QAClF,+CAA+C;QAC/C,yHAAyH;QACzH,8EAA8E;AAC9E,QAAA,CAAA,6EAAA,EAAgF,OAAO,CAAA,EAAA,CAAI;AAC3F,QAAA,mBAAmB;AAEvB;;AC7DA;AAKA;;;;AAI+C;AACzC,SAAU,cAAc,CAAC,SAAiB,EAAE,QAAiB,EAAA;AACjE,IAAA,IAAI,QAAQ;AAAE,QAAA,OAAO,QAAQ;AAC7B,IAAA,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB;AAAE,QAAA,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB;AAEzE,IAAA,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC;AACnC,IAAA,IAAI,MAAM;AAAE,QAAA,OAAO,MAAM;AAEzB,IAAA,MAAM,cAAc,GAAG,iBAAiB,CAAC,SAAS,CAAC;AACnD,IAAA,IAAI,cAAc;AAAE,QAAA,OAAO,cAAc;AAEzC,IAAA,MAAM,IAAI,KAAK,CACb,iJAAiJ,CAClJ;AACH;AAEA,SAAS,SAAS,CAAC,SAAiB,EAAA;AAClC,IAAA,IAAI;QACF,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE;AAChD,YAAA,GAAG,EAAE,SAAS;AACd,YAAA,QAAQ,EAAE,MAAM;AAChB,YAAA,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE;IACX;AAAE,IAAA,MAAM;AACN,QAAA,OAAO,SAAS;IAClB;AACF;AAEA,SAAS,iBAAiB,CAAC,SAAiB,EAAA;IAC1C,IAAI,GAAG,GAAG,SAAS;AACnB,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC;AACzC,QAAA,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE;AACvB,YAAA,IAAI;AACF,gBAAA,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACrD,gBAAA,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,GAAG,GAAG,CAAC,OAAO,GAAG,SAAS;YAClE;AAAE,YAAA,MAAM;AACN,gBAAA,OAAO,SAAS;YAClB;QACF;AACA,QAAA,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAC3B,IAAI,MAAM,KAAK,GAAG;AAAE,YAAA,OAAO,SAAS;QACpC,GAAG,GAAG,MAAM;IACd;AACA,IAAA,OAAO,SAAS;AAClB;;ACtDA;AAEA;AACO,MAAM,gBAAgB,GAAG,6BAA6B;AAkB7D;;AAE+E;AACxE,eAAe,eAAe,CAAC,MAA6B,EAAA;;;;;;;;AAQjE,IAAA,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;AAC5D,IAAA,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,gBAAgB;AAElD,IAAA,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE;IAC3B,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC;IACrC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAA,EAAG,MAAM,CAAC,QAAQ,CAAA,IAAA,CAAM,CAAC;IAE5G,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,CAAA,EAAG,OAAO,oBAAoB,EAAE;AAC/D,QAAA,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,SAAS,CAAA,CAAE,EAAE;AACxD,QAAA,IAAI,EAAE,IAAI;AACX,KAAA,CAAC;AAEF,IAAA,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;;;;;AAKhB,QAAA,MAAM,IAAI,KAAK,CAAC,CAAA,EAAG,QAAQ,CAAC,MAAM,CAAA,CAAA,EAAI,QAAQ,CAAC,UAAU,CAAA,CAAE,CAAC;IAC9D;AACF;;ACtDA;AAqBA;;;AAGuF;AACvF,MAAM,kBAAkB,GAAG,EAAE;AAE7B;;;;;;AAMuF;AAChF,eAAe,iBAAiB,CACrC,OAAyD,EAAA;IAEzD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB;IACxE,IAAI,CAAC,SAAS,EAAE;AACd,QAAA,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC;IACxF;AAEA,IAAA,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC;IAClE,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC;IAOtD,MAAM,QAAQ,GAAc,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;AAEvD,IAAA,MAAM,UAAU,GAAG,OAAO,KAAa,KAAmB;AACxD,QAAA,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC;AACjC,QAAA,MAAM,OAAO,GAAG,UAAU,EAAE;AAC5B,QAAA,IAAI,QAA0B;;;;;;AAO9B,QAAA,IAAI;YACF,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;YACxD,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;;;;;;;;YAQ1D,QAAQ,GAAG,aAAa,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC;QAC5D;QAAE,OAAO,KAAK,EAAE;YACd,OAAO,CAAC,KAAK,CAAC,CAAA,kBAAA,EAAqB,QAAQ,CAAC,MAAM,CAAA,CAAA,CAAG,EAAE,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;AACtG,YAAA,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC3D;QACF;;;;;;;;;AAUA,QAAA,IAAI;AACF,YAAA,MAAM,eAAe,CAAC;gBACpB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,SAAS;gBACT,OAAO;gBACP,OAAO;;;gBAGP,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC;gBACtD,UAAU,EAAE,QAAQ,CAAC,GAAG;gBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;AAC7B,aAAA,CAAC;QACJ;QAAE,OAAO,KAAK,EAAE;YACd,QAAQ,CAAC,KAAK,CAAC,GAAG;gBAChB,IAAI,EAAE,QAAQ,CAAC,MAAM;AACrB,gBAAA,IAAI,EAAE,SAAS;AACf,gBAAA,MAAM,EAAE,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;aAC/D;YACD;QACF;AAEA,QAAA,IAAI;YACF,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAC3C,YAAA,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;AACxB,YAAA,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;QAC/D;QAAE,OAAO,YAAY,EAAE;;;;;;;AAOrB,YAAA,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;YAC7D,OAAO,CAAC,KAAK,CAAC,CAAA,SAAA,EAAY,QAAQ,CAAC,MAAM,CAAA,kCAAA,CAAoC,EAAE,YAAY,CAAC;QAC9F;AACF,IAAA,CAAC;;;IAID,IAAI,SAAS,GAAG,CAAC;AACjB,IAAA,MAAM,SAAS,GAAG,YAA0B;AAC1C,QAAA,OAAO,SAAS,GAAG,SAAS,CAAC,MAAM,EAAE;AACnC,YAAA,MAAM,KAAK,GAAG,SAAS,EAAE;AACzB,YAAA,MAAM,UAAU,CAAC,KAAK,CAAC;QACzB;AACF,IAAA,CAAC;AACD,IAAA,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,MAAM,CAAC;AAClE,IAAA,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;AAEjE,IAAA,MAAM,MAAM,GAA4B,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;;;AAGjF,IAAA,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB;AAClD,IAAA,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE;AAC9B,QAAA,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;YAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;AAC9D,aAAA,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;aAC/D;YACH,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YACjC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvF;IACF;IAEA,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;QAC7B,OAAO,CAAC,IAAI,CAAC,CAAA,6BAAA,EAAgC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAA,wCAAA,CAA0C,CAAC;QAC7G,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,gBAAgB,EAAE;YAC9C,OAAO,CAAC,IAAI,CAAC,CAAA,IAAA,EAAO,MAAM,CAAA,EAAA,EAAK,KAAK,CAAA,EAAA,CAAI,CAAC;QAC3C;IACF;AAEA,IAAA,OAAO,MAAM;AACf;;AC7JA;AASA;AACM,SAAU,SAAS,CAAC,IAAc,EAAA;AACtC,IAAA,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI;IACtD,IAAI,OAAO,KAAK,YAAY,IAAI,UAAU,KAAK,QAAQ,IAAI,CAAC,SAAS,EAAE;AACrE,QAAA,MAAM,IAAI,KAAK,CACb,8FAA8F,CAC/F;IACH;AAEA,IAAA,IAAI,OAA2B;AAC/B,IAAA,IAAI,SAA6B;AAEjC,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE;AACvC,QAAA,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,WAAW;YAAE,OAAO,GAAG,KAAK;aACpC,IAAI,IAAI,KAAK,cAAc;YAAE,SAAS,GAAG,KAAK;;AAC9C,YAAA,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAA,CAAE,CAAC;IAC/C;AAEA,IAAA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE;AAC1C;AAEA,eAAe,IAAI,GAAA;AACjB,IAAA,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAE7C,IAAA,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;QACrC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,SAAS;AAC1B,KAAA,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,CAAA,SAAA,EAAY,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAA,eAAA,CAAiB,CAAC;IAChE,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;;;;;QAK7B,OAAO,CAAC,GAAG,CAAC,CAAA,QAAA,EAAW,MAAM,CAAC,OAAO,CAAC,MAAM,CAAA,yDAAA,CAA2D,CAAC;IAC1G;IACA,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;QAC5B,OAAO,CAAC,KAAK,CAAC,CAAA,iBAAA,EAAoB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAA,eAAA,CAAiB,CAAC;AACxE,QAAA,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM;AAAE,YAAA,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAA,CAAE,CAAC;AAC5D,QAAA,OAAO,CAAC,QAAQ,GAAG,CAAC;IACtB;AACF;AAEA;AACA;AACA;AACA;AACA;AACA,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE;AACpC,IAAA,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,KAAI;AACrB,QAAA,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;AAC7D,QAAA,OAAO,CAAC,QAAQ,GAAG,CAAC;AACtB,IAAA,CAAC,CAAC;AACJ;;;;"}

package/dist/index.cjs

@@ -173,7 +173,7 @@ function tryPackageVersion(directory) {
 
 // packages/cli/src/uploadSourceMap.ts
 /** The one sourcemap-upload host every CLI invocation talks to — not customer-configurable. */
-const DEFAULT_API_HOST = 'https://ingest.getmonitor.io';
+const DEFAULT_API_HOST = 'https://track.getmonitor.io';
 /** POSTs a single source map artifact to ingester-api's `/api/v1/sourcemaps` contract.
  * Throws on any non-2xx response or network failure — the caller (processSourceMaps) decides
  * what "failed" means for its own result reporting and disk-write ordering. */
@@ -198,7 +198,11 @@ async function uploadSourceMap(params) {
         body: form,
     });
     if (!response.ok) {
-        throw new Error(`Source map upload failed for ${params.filename}: ${response.status} ${response.statusText}`);
+        // Deliberately excludes `params.filename` — a real deployment can have hundreds/thousands
+        // of artifacts fail identically (e.g. one bad auth token), and processSourceMaps
+        // deduplicates these messages to log the reason once instead of once per file. Baking the
+        // filename in here would make every message unique and defeat that dedup.
+        throw new Error(`${response.status} ${response.statusText}`);
     }
 }
 
@@ -222,24 +226,42 @@ async function processSourceMaps(options) {
     }
     const release = resolveRelease(options.directory, options.release);
     const artifacts = discoverArtifacts(options.directory);
-    // Indexed by each artifact's position in `artifacts` rather than appended in completion
-    // order, so the final result below is deterministic no matter which worker finishes first.
     const outcomes = new Array(artifacts.length);
     const processOne = async (index) => {
         const artifact = artifacts[index];
         const debugId = node_crypto.randomUUID();
         let injected;
+        // Local step: reading the artifact and injecting its debug ID. A failure here (unreadable
+        // file, malformed map JSON) means the build's own output is broken — that's a real bug
+        // worth failing CI over, so it's tracked in `failed` and logged per-file: with a genuine
+        // local bug there are normally only one or a handful of these, unlike a systemic upload
+        // outage below.
         try {
             const originalJs = node_fs.readFileSync(artifact.jsPath, 'utf8');
             const originalMap = node_fs.readFileSync(artifact.mapPath, 'utf8');
             // injectDebugId is a pure function that throws on malformed map JSON (by design — see
-            // its own doc comment). That's deliberately caught here, alongside upload failures: one
-            // corrupt/unreadable artifact on disk must not abort processing of every other artifact
-            // in the directory, the same failure-isolation principle discoverArtifacts applies to
-            // unreadable files during its walk. Nothing has been uploaded or written yet at this
-            // point, so a thrown injectDebugId or upload failure leaves the artifact's files
-            // completely untouched, and it's safe to report it as `failed` for a retry.
+            // its own doc comment). One corrupt/unreadable artifact on disk must not abort
+            // processing of every other artifact in the directory, the same failure-isolation
+            // principle discoverArtifacts applies to unreadable files during its walk. Nothing has
+            // been uploaded or written yet at this point, so a thrown injectDebugId failure leaves
+            // the artifact's files completely untouched, and it's safe to report it as `failed` for
+            // a retry.
             injected = injectDebugId(originalJs, originalMap, debugId);
+        }
+        catch (error) {
+            console.error(`Failed to process ${artifact.jsPath}:`, error instanceof Error ? error.message : error);
+            outcomes[index] = { path: artifact.jsPath, kind: 'failed' };
+            return;
+        }
+        // Remote step: uploading to the ingest API. Unlike the local step above, this artifact was
+        // perfectly fine — the *endpoint* rejected the request or was unreachable (bad/expired auth
+        // token, network outage, backend 5xx). That's an infra/connectivity problem outside this
+        // build's control, not a bug in it, so it's tracked separately in `skipped` (never `failed`)
+        // and deliberately NOT logged per-file here: an outage or bad token fails every one of
+        // potentially thousands of artifacts identically, and logging each one would drown out
+        // everything else in the build's output. The deduplicated reason is logged once, after all
+        // artifacts finish, by the summary block below.
+        try {
             await uploadSourceMap({
                 apiHost: options.apiHost,
                 authToken,
@@ -253,27 +275,26 @@ async function processSourceMaps(options) {
             });
         }
         catch (error) {
-            // Surfaced here rather than swallowed: this is the only place the actual failure reason
-            // (injectDebugId's malformed-JSON error, or uploadSourceMap's `status statusText` message)
-            // is available. Without logging it, callers only ever see a bare list of failed paths with
-            // no way to tell an auth failure from a malformed map from a network error.
-            console.error(`Failed to process ${artifact.jsPath}:`, error instanceof Error ? error.message : error);
-            outcomes[index] = { path: artifact.jsPath, ok: false };
+            outcomes[index] = {
+                path: artifact.jsPath,
+                kind: 'skipped',
+                reason: error instanceof Error ? error.message : String(error),
+            };
             return;
         }
         try {
             node_fs.writeFileSync(artifact.jsPath, injected.js);
             node_fs.rmSync(artifact.mapPath);
-            outcomes[index] = { path: artifact.jsPath, ok: true };
+            outcomes[index] = { path: artifact.jsPath, kind: 'uploaded' };
         }
         catch (cleanupError) {
-            // The upload above already succeeded, so this must never land in `failed` — a caller
-            // retrying failed artifacts would mint a fresh debugId and re-upload, orphaning this
+            // The upload above already succeeded, so this must never land in `failed` or `skipped` —
+            // a caller retrying either would mint a fresh debugId and re-upload, orphaning this
             // upload server-side under the old one with no way to reconcile the two. The local
             // cleanup failure (disk full, permission error, file lock) is real and worth knowing
             // about, so it's surfaced here rather than silently swallowed, but it doesn't change
             // the artifact's outcome.
-            outcomes[index] = { path: artifact.jsPath, ok: true };
+            outcomes[index] = { path: artifact.jsPath, kind: 'uploaded' };
             console.error(`Uploaded ${artifact.jsPath} but failed to update local files:`, cleanupError);
         }
     };
@@ -288,9 +309,25 @@ async function processSourceMaps(options) {
     };
     const workerCount = Math.min(UPLOAD_CONCURRENCY, artifacts.length);
     await Promise.all(Array.from({ length: workerCount }, runWorker));
-    const result = { uploaded: [], failed: [] };
+    const result = { uploaded: [], failed: [], skipped: [] };
+    // Counts occurrences of each distinct skip reason, preserving first-seen order, so the
+    // summary below reads one line per *kind* of problem rather than one line per file.
+    const skipReasonCounts = new Map();
     for (const outcome of outcomes) {
-        (outcome.ok ? result.uploaded : result.failed).push(outcome.path);
+        if (outcome.kind === 'uploaded')
+            result.uploaded.push(outcome.path);
+        else if (outcome.kind === 'failed')
+            result.failed.push(outcome.path);
+        else {
+            result.skipped.push(outcome.path);
+            skipReasonCounts.set(outcome.reason, (skipReasonCounts.get(outcome.reason) ?? 0) + 1);
+        }
+    }
+    if (result.skipped.length > 0) {
+        console.warn(`GetMonitor: could not upload ${result.skipped.length} source map(s); continuing without them.`);
+        for (const [reason, count] of skipReasonCounts) {
+            console.warn(`  - ${reason} (${count}x)`);
+        }
     }
     return result;
 }

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","sources":["../src/discoverArtifacts.ts","../src/injectDebugId.ts","../src/resolveRelease.ts","../src/uploadSourceMap.ts","../src/processSourceMaps.ts"],"sourcesContent":["// packages/cli/src/discoverArtifacts.ts\nimport { existsSync, readdirSync, readFileSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\n\nexport interface Artifact {\n  jsPath: string\n  mapPath: string\n}\n\nconst SOURCE_MAPPING_URL = /^\\s*\\/\\/#\\s*sourceMappingURL=(\\S+)\\s*$/gm\n\n// Node recognizes three JS module extensions with runtime meaning (`.js`, `.mjs` for explicit\n// ESM, `.cjs` for explicit CommonJS regardless of the nearest package.json's \"type\") — all three\n// show up as real build output. Nitro's node-server preset (used by `@getmonitor/nuxt`'s e2e\n// test), for one, emits `.output/server/**/*.mjs` unconditionally: verified against a real\n// `nuxt build`, where a `.js`-only match left every server chunk's `.map` file undiscovered and\n// unstripped even though `.output/` itself was already fully written by the time discovery ran.\nconst JS_EXTENSIONS = ['.js', '.mjs', '.cjs']\n\n/** Recursively finds every JS file (`.js`, `.mjs`, `.cjs`) under `directory` and resolves its\n * source map path primarily via its `//# sourceMappingURL=` comment (resolved relative to the\n * JS file's own directory), falling back to same-basename-plus-`.map` when there's no comment,\n * the comment references a data: URI, or the referenced file doesn't exist. A JS file with no\n * resolvable map either way is skipped. */\nexport function discoverArtifacts(directory: string): Artifact[] {\n  const artifacts: Artifact[] = []\n  walk(directory, artifacts)\n  return artifacts\n}\n\nfunction walk(dir: string, artifacts: Artifact[]): void {\n  for (const entry of readdirSync(dir, { withFileTypes: true })) {\n    const fullPath = join(dir, entry.name)\n    if (entry.isDirectory()) {\n      walk(fullPath, artifacts)\n    } else if (entry.isFile() && JS_EXTENSIONS.some((ext) => entry.name.endsWith(ext))) {\n      const mapPath = resolveMapPath(fullPath)\n      if (mapPath) artifacts.push({ jsPath: fullPath, mapPath })\n    }\n  }\n}\n\nfunction resolveMapPath(jsPath: string): string | undefined {\n  const commentMapPath = readSourceMappingUrlComment(jsPath)\n  if (commentMapPath && existsSync(commentMapPath)) return commentMapPath\n\n  const fallbackMapPath = `${jsPath}.map`\n  if (existsSync(fallbackMapPath)) return fallbackMapPath\n\n  return undefined\n}\n\nfunction readSourceMappingUrlComment(jsPath: string): string | undefined {\n  let content: string\n  try {\n    content = readFileSync(jsPath, 'utf8')\n  } catch {\n    // Unreadable file (permission denied, broken symlink, deleted mid-walk, etc.) — treat it\n    // like \"no comment found\" rather than aborting the whole discoverArtifacts() walk.\n    return undefined\n  }\n\n  const matches = [...content.matchAll(SOURCE_MAPPING_URL)]\n  if (matches.length === 0) return undefined\n\n  // The LAST sourceMappingURL comment in the file wins, matching how bundlers/browsers treat\n  // concatenated/reprocessed output — later comments supersede earlier ones.\n  const reference = matches.at(-1)![1]\n  if (reference.startsWith('data:')) return undefined // embedded map, nothing to discover on disk\n\n  return join(dirname(jsPath), reference)\n}\n","// packages/cli/src/injectDebugId.ts\n\nexport interface InjectedArtifact {\n  js: string\n  map: string\n}\n\n/** Computes the debug-ID-injected JS content and the debug-ID-tagged source map JSON, in\n * memory — callers decide whether/when to persist the result to disk (processSourceMaps\n * only writes it after a successful upload, so a failed upload never leaves partially\n * mutated files behind). The injected JS also has its `//# sourceMappingURL=` comment(s)\n * removed, since the source map it names is only ever kept in GetMonitor's backend after\n * a successful upload — never served publicly alongside it.\n *\n * `originalMapJson` must be valid JSON — this is a pure function with no fallback to\n * degrade to (unlike discoverArtifacts, which can skip an unreadable file, this function's\n * caller expects a definite result), so a malformed map is left to throw via JSON.parse\n * rather than being swallowed here. */\nexport function injectDebugId(originalJs: string, originalMapJson: string, debugId: string): InjectedArtifact {\n  const withoutMapComment = originalJs\n    .split('\\n')\n    .filter((line) => !line.trimStart().startsWith('//# sourceMappingURL='))\n    .join('\\n')\n\n  const map = JSON.parse(originalMapJson)\n  map.debugId = debugId\n\n  return {\n    js: `${withoutMapComment}\\n${buildInjectedSnippet(debugId)}`,\n    map: JSON.stringify(map),\n  }\n}\n\n/** At load time, captures this statement's own `Error().stack`, extracts this file's\n * identity from it using the same frame-shape @getmonitor/core's parseStackTrace parses for\n * real errors (V8's `at ... (file:line:col)`, V8's bare `at file:line:col`, and Gecko's\n * `fn@file:line:col`), and registers the debug ID under that identity. Like parseStackTrace,\n * it scans every stack line and takes the first one that matches any of those shapes, rather\n * than assuming a fixed line index — V8 prefixes an `\"ErrorType: message\"` header line that\n * Gecko and Safari don't emit, so a fixed index would grab the wrong frame (or the wrong\n * file's identity) on non-V8 engines; the header line simply fails to match any frame regex\n * and is skipped automatically. A later real error whose frame.filename is parsed from the\n * same JS-engine stack serialization will look up the same key. Wrapped in try/catch so any\n * parsing edge case can never break the host app; wrapped in an IIFE so its locals don't leak\n * into the file's module scope.\n *\n * `debugId` is interpolated unescaped into the generated snippet's string literal. That's\n * safe today because every caller in this system sources `debugId` from\n * `crypto.randomUUID()` (a later task), which can never contain a quote or backslash — but\n * this function itself doesn't enforce that shape, so a caller passing an arbitrary string\n * containing `'` or `\\` would produce invalid/injected JS here. Flagged, not fixed, since\n * validating/escaping isn't part of this function's specified contract. */\nfunction buildInjectedSnippet(debugId: string): string {\n  return (\n    \";(function(){try{var s=(new Error()).stack||'';var ls=s.split('\\\\n');var m=null;\" +\n    'for(var i=0;i<ls.length&&!m;i++){var l=ls[i];' +\n    \"m=l.match(/\\\\((.*):(\\\\d+):(\\\\d+)\\\\)\\\\s*$/)||l.match(/at (.*):(\\\\d+):(\\\\d+)\\\\s*$/)||l.match(/@(.*):(\\\\d+):(\\\\d+)\\\\s*$/)}\" +\n    \"var f=m&&m[1];if(f){var g=(typeof globalThis!=='undefined'?globalThis:self);\" +\n    `g.__getmonitorDebugIds=g.__getmonitorDebugIds||{};g.__getmonitorDebugIds[f]='${debugId}';` +\n    '}}catch(e){}})();'\n  )\n}\n","// packages/cli/src/resolveRelease.ts\nimport { execFileSync } from 'node:child_process'\nimport { existsSync, readFileSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\n\n/** Resolves the release identifier to tag uploaded source maps with. Precedence: explicit\n * argument -> GETMONITOR_RELEASE env var -> current git commit SHA (if `directory` is inside\n * a git working tree) -> `version` field of the nearest package.json walking up from\n * `directory`. Matches the SDKs' own optional `release` field so events and source maps\n * for the same deploy carry the same value. */\nexport function resolveRelease(directory: string, explicit?: string): string {\n  if (explicit) return explicit\n  if (process.env.GETMONITOR_RELEASE) return process.env.GETMONITOR_RELEASE\n\n  const gitSha = tryGitSha(directory)\n  if (gitSha) return gitSha\n\n  const packageVersion = tryPackageVersion(directory)\n  if (packageVersion) return packageVersion\n\n  throw new Error(\n    'Could not resolve a release. Pass --release, set GETMONITOR_RELEASE, run inside a git repository, or add a package.json with a \"version\" field.',\n  )\n}\n\nfunction tryGitSha(directory: string): string | undefined {\n  try {\n    return execFileSync('git', ['rev-parse', 'HEAD'], {\n      cwd: directory,\n      encoding: 'utf8',\n      stdio: ['ignore', 'pipe', 'ignore'],\n    }).trim()\n  } catch {\n    return undefined\n  }\n}\n\nfunction tryPackageVersion(directory: string): string | undefined {\n  let dir = directory\n  for (let i = 0; i < 20; i++) {\n    const pkgPath = join(dir, 'package.json')\n    if (existsSync(pkgPath)) {\n      try {\n        const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'))\n        return typeof pkg.version === 'string' ? pkg.version : undefined\n      } catch {\n        return undefined\n      }\n    }\n    const parent = dirname(dir)\n    if (parent === dir) return undefined\n    dir = parent\n  }\n  return undefined\n}\n","// packages/cli/src/uploadSourceMap.ts\n\n/** The one sourcemap-upload host every CLI invocation talks to — not customer-configurable. */\nexport const DEFAULT_API_HOST = 'https://ingest.getmonitor.io'\n\nexport interface UploadSourceMapParams {\n  /**\n   * @internal Test-only override for redirecting delivery to a local mock server (see\n   * cli/e2e/processSourceMaps.spec.ts and the nextjs-config/nuxt e2e suites). Never exposed\n   * through the public CLI/programmatic surface — real usage always ships to\n   * {@link DEFAULT_API_HOST}.\n   */\n  apiHost?: string\n  authToken: string\n  release: string\n  debugId: string\n  filename: string\n  mapContent: string\n  fetchImpl?: typeof fetch\n}\n\n/** POSTs a single source map artifact to ingester-api's `/api/v1/sourcemaps` contract.\n * Throws on any non-2xx response or network failure — the caller (processSourceMaps) decides\n * what \"failed\" means for its own result reporting and disk-write ordering. */\nexport async function uploadSourceMap(params: UploadSourceMapParams): Promise<void> {\n  // Must bind to globalThis, mirroring @getmonitor/core's HttpTransport: browsers' native\n  // fetch() throws \"Illegal invocation\" if called with a `this` other than\n  // Window/WorkerGlobalScope. Here fetchImpl is invoked as a plain function call below\n  // (`fetchImpl(url, init)`, never `params.fetchImpl(...)` or `this.fetchImpl(...)`), so this\n  // bind is defensive/consistent rather than load-bearing for this particular call site — but\n  // keeping the same default expression as HttpTransport avoids a divergent default if this\n  // code is ever refactored into a method.\n  const fetchImpl = params.fetchImpl ?? fetch.bind(globalThis)\n  const apiHost = params.apiHost ?? DEFAULT_API_HOST\n\n  const form = new FormData()\n  form.set('release', params.release)\n  form.set('debugId', params.debugId)\n  form.set('filename', params.filename)\n  form.set('sourcemap', new Blob([params.mapContent], { type: 'application/json' }), `${params.filename}.map`)\n\n  const response = await fetchImpl(`${apiHost}/api/v1/sourcemaps`, {\n    method: 'POST',\n    headers: { Authorization: `Bearer ${params.authToken}` },\n    body: form,\n  })\n\n  if (!response.ok) {\n    throw new Error(`Source map upload failed for ${params.filename}: ${response.status} ${response.statusText}`)\n  }\n}\n","// packages/cli/src/processSourceMaps.ts\nimport { randomUUID } from 'node:crypto'\nimport { readFileSync, rmSync, writeFileSync } from 'node:fs'\nimport { relative } from 'node:path'\nimport { discoverArtifacts } from './discoverArtifacts'\nimport { injectDebugId, InjectedArtifact } from './injectDebugId'\nimport { resolveRelease } from './resolveRelease'\nimport { uploadSourceMap } from './uploadSourceMap'\nimport { ProcessSourceMapsOptions, ProcessSourceMapsResult } from './types'\n\n/**\n * @internal Test-only host override, intersected into `processSourceMaps`'s options but\n * deliberately not part of the exported `ProcessSourceMapsOptions` type — see\n * `uploadSourceMap`'s `UploadSourceMapParams.apiHost`. Used by this package's own e2e suite\n * and by nextjs-config/nuxt's e2e suites (via their own internal overrides) to redirect\n * delivery to a local mock server; real callers must never set it.\n */\ninterface InternalTestOverrides {\n  apiHost?: string\n}\n\n/** Number of artifacts uploaded at once. Each upload is an independent network round trip to\n * ingester-api, so processing them one at a time made wall-clock time scale linearly with\n * artifact count for no reason — a real Next.js build can emit well over a thousand of them,\n * turning a few hundred ms of per-file latency into many minutes of serial waiting. */\nconst UPLOAD_CONCURRENCY = 20\n\n/** Finds every JS/map artifact pair under `options.directory`, and for each one: injects a\n * debug ID, uploads the tagged source map, and — only on a successful upload — writes the\n * debug-ID-injected JS back to disk and deletes the `.map` file. An artifact whose upload\n * fails is left completely untouched on disk, so it can be retried by re-running this\n * function against the same directory. Artifacts are uploaded concurrently (bounded by\n * `UPLOAD_CONCURRENCY`), but `result.uploaded`/`result.failed` are always ordered to match\n * `discoverArtifacts`'s output, regardless of which upload happens to finish first. */\nexport async function processSourceMaps(\n  options: ProcessSourceMapsOptions & InternalTestOverrides\n): Promise<ProcessSourceMapsResult> {\n  const authToken = options.authToken ?? process.env.GETMONITOR_AUTH_TOKEN\n  if (!authToken) {\n    throw new Error('Missing auth token. Pass --auth-token or set GETMONITOR_AUTH_TOKEN.')\n  }\n\n  const release = resolveRelease(options.directory, options.release)\n  const artifacts = discoverArtifacts(options.directory)\n  // Indexed by each artifact's position in `artifacts` rather than appended in completion\n  // order, so the final result below is deterministic no matter which worker finishes first.\n  const outcomes: Array<{ path: string; ok: boolean }> = new Array(artifacts.length)\n\n  const processOne = async (index: number): Promise<void> => {\n    const artifact = artifacts[index]\n    const debugId = randomUUID()\n    let injected: InjectedArtifact\n\n    try {\n      const originalJs = readFileSync(artifact.jsPath, 'utf8')\n      const originalMap = readFileSync(artifact.mapPath, 'utf8')\n      // injectDebugId is a pure function that throws on malformed map JSON (by design — see\n      // its own doc comment). That's deliberately caught here, alongside upload failures: one\n      // corrupt/unreadable artifact on disk must not abort processing of every other artifact\n      // in the directory, the same failure-isolation principle discoverArtifacts applies to\n      // unreadable files during its walk. Nothing has been uploaded or written yet at this\n      // point, so a thrown injectDebugId or upload failure leaves the artifact's files\n      // completely untouched, and it's safe to report it as `failed` for a retry.\n      injected = injectDebugId(originalJs, originalMap, debugId)\n\n      await uploadSourceMap({\n        apiHost: options.apiHost,\n        authToken,\n        release,\n        debugId,\n        // Relative to options.directory, not the absolute on-disk path — the backend has no\n        // use for (and shouldn't see) the build machine's local filesystem layout.\n        filename: relative(options.directory, artifact.jsPath),\n        mapContent: injected.map,\n        fetchImpl: options.fetchImpl,\n      })\n    } catch (error) {\n      // Surfaced here rather than swallowed: this is the only place the actual failure reason\n      // (injectDebugId's malformed-JSON error, or uploadSourceMap's `status statusText` message)\n      // is available. Without logging it, callers only ever see a bare list of failed paths with\n      // no way to tell an auth failure from a malformed map from a network error.\n      console.error(`Failed to process ${artifact.jsPath}:`, error instanceof Error ? error.message : error)\n      outcomes[index] = { path: artifact.jsPath, ok: false }\n      return\n    }\n\n    try {\n      writeFileSync(artifact.jsPath, injected.js)\n      rmSync(artifact.mapPath)\n      outcomes[index] = { path: artifact.jsPath, ok: true }\n    } catch (cleanupError) {\n      // The upload above already succeeded, so this must never land in `failed` — a caller\n      // retrying failed artifacts would mint a fresh debugId and re-upload, orphaning this\n      // upload server-side under the old one with no way to reconcile the two. The local\n      // cleanup failure (disk full, permission error, file lock) is real and worth knowing\n      // about, so it's surfaced here rather than silently swallowed, but it doesn't change\n      // the artifact's outcome.\n      outcomes[index] = { path: artifact.jsPath, ok: true }\n      console.error(`Uploaded ${artifact.jsPath} but failed to update local files:`, cleanupError)\n    }\n  }\n\n  // A fixed-size pool of workers, each pulling the next unclaimed artifact index off a shared\n  // cursor, bounds concurrency to UPLOAD_CONCURRENCY regardless of how many artifacts there are.\n  let nextIndex = 0\n  const runWorker = async (): Promise<void> => {\n    while (nextIndex < artifacts.length) {\n      const index = nextIndex++\n      await processOne(index)\n    }\n  }\n  const workerCount = Math.min(UPLOAD_CONCURRENCY, artifacts.length)\n  await Promise.all(Array.from({ length: workerCount }, runWorker))\n\n  const result: ProcessSourceMapsResult = { uploaded: [], failed: [] }\n  for (const outcome of outcomes) {\n    ;(outcome.ok ? result.uploaded : result.failed).push(outcome.path)\n  }\n  return result\n}\n"],"names":["readdirSync","join","existsSync","readFileSync","dirname","execFileSync","randomUUID","relative","writeFileSync","rmSync"],"mappings":";;;;;;;AAAA;AASA,MAAM,kBAAkB,GAAG,0CAA0C;AAErE;AACA;AACA;AACA;AACA;AACA;AACA,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;AAE7C;;;;AAI2C;AACrC,SAAU,iBAAiB,CAAC,SAAiB,EAAA;IACjD,MAAM,SAAS,GAAe,EAAE;AAChC,IAAA,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;AAC1B,IAAA,OAAO,SAAS;AAClB;AAEA,SAAS,IAAI,CAAC,GAAW,EAAE,SAAqB,EAAA;AAC9C,IAAA,KAAK,MAAM,KAAK,IAAIA,mBAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE;QAC7D,MAAM,QAAQ,GAAGC,cAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC;AACtC,QAAA,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE;AACvB,YAAA,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC;QAC3B;aAAO,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE;AAClF,YAAA,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC;AACxC,YAAA,IAAI,OAAO;gBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC5D;IACF;AACF;AAEA,SAAS,cAAc,CAAC,MAAc,EAAA;AACpC,IAAA,MAAM,cAAc,GAAG,2BAA2B,CAAC,MAAM,CAAC;AAC1D,IAAA,IAAI,cAAc,IAAIC,kBAAU,CAAC,cAAc,CAAC;AAAE,QAAA,OAAO,cAAc;AAEvE,IAAA,MAAM,eAAe,GAAG,CAAA,EAAG,MAAM,MAAM;IACvC,IAAIA,kBAAU,CAAC,eAAe,CAAC;AAAE,QAAA,OAAO,eAAe;AAEvD,IAAA,OAAO,SAAS;AAClB;AAEA,SAAS,2BAA2B,CAAC,MAAc,EAAA;AACjD,IAAA,IAAI,OAAe;AACnB,IAAA,IAAI;AACF,QAAA,OAAO,GAAGC,oBAAY,CAAC,MAAM,EAAE,MAAM,CAAC;IACxC;AAAE,IAAA,MAAM;;;AAGN,QAAA,OAAO,SAAS;IAClB;IAEA,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AACzD,IAAA,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;AAAE,QAAA,OAAO,SAAS;;;AAI1C,IAAA,MAAM,SAAS,GAAG,OAAO,CAAC,EAAE,CAAC,EAAE,CAAE,CAAC,CAAC,CAAC;AACpC,IAAA,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAA;IAEnD,OAAOF,cAAI,CAACG,iBAAO,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;AACzC;;ACvEA;AAOA;;;;;;;;;;AAUuC;SACvB,aAAa,CAAC,UAAkB,EAAE,eAAuB,EAAE,OAAe,EAAA;IACxF,MAAM,iBAAiB,GAAG;SACvB,KAAK,CAAC,IAAI;AACV,SAAA,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC;SACtE,IAAI,CAAC,IAAI,CAAC;IAEb,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;AACvC,IAAA,GAAG,CAAC,OAAO,GAAG,OAAO;IAErB,OAAO;QACL,EAAE,EAAE,GAAG,iBAAiB,CAAA,EAAA,EAAK,oBAAoB,CAAC,OAAO,CAAC,CAAA,CAAE;AAC5D,QAAA,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;KACzB;AACH;AAEA;;;;;;;;;;;;;;;;;;AAkB2E;AAC3E,SAAS,oBAAoB,CAAC,OAAe,EAAA;AAC3C,IAAA,QACE,kFAAkF;QAClF,+CAA+C;QAC/C,yHAAyH;QACzH,8EAA8E;AAC9E,QAAA,CAAA,6EAAA,EAAgF,OAAO,CAAA,EAAA,CAAI;AAC3F,QAAA,mBAAmB;AAEvB;;AC7DA;AAKA;;;;AAI+C;AACzC,SAAU,cAAc,CAAC,SAAiB,EAAE,QAAiB,EAAA;AACjE,IAAA,IAAI,QAAQ;AAAE,QAAA,OAAO,QAAQ;AAC7B,IAAA,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB;AAAE,QAAA,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB;AAEzE,IAAA,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC;AACnC,IAAA,IAAI,MAAM;AAAE,QAAA,OAAO,MAAM;AAEzB,IAAA,MAAM,cAAc,GAAG,iBAAiB,CAAC,SAAS,CAAC;AACnD,IAAA,IAAI,cAAc;AAAE,QAAA,OAAO,cAAc;AAEzC,IAAA,MAAM,IAAI,KAAK,CACb,iJAAiJ,CAClJ;AACH;AAEA,SAAS,SAAS,CAAC,SAAiB,EAAA;AAClC,IAAA,IAAI;QACF,OAAOC,+BAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE;AAChD,YAAA,GAAG,EAAE,SAAS;AACd,YAAA,QAAQ,EAAE,MAAM;AAChB,YAAA,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE;IACX;AAAE,IAAA,MAAM;AACN,QAAA,OAAO,SAAS;IAClB;AACF;AAEA,SAAS,iBAAiB,CAAC,SAAiB,EAAA;IAC1C,IAAI,GAAG,GAAG,SAAS;AACnB,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAGJ,cAAI,CAAC,GAAG,EAAE,cAAc,CAAC;AACzC,QAAA,IAAIC,kBAAU,CAAC,OAAO,CAAC,EAAE;AACvB,YAAA,IAAI;AACF,gBAAA,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAACC,oBAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACrD,gBAAA,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,GAAG,GAAG,CAAC,OAAO,GAAG,SAAS;YAClE;AAAE,YAAA,MAAM;AACN,gBAAA,OAAO,SAAS;YAClB;QACF;AACA,QAAA,MAAM,MAAM,GAAGC,iBAAO,CAAC,GAAG,CAAC;QAC3B,IAAI,MAAM,KAAK,GAAG;AAAE,YAAA,OAAO,SAAS;QACpC,GAAG,GAAG,MAAM;IACd;AACA,IAAA,OAAO,SAAS;AAClB;;ACtDA;AAEA;AACO,MAAM,gBAAgB,GAAG,8BAA8B;AAkB9D;;AAE+E;AACxE,eAAe,eAAe,CAAC,MAA6B,EAAA;;;;;;;;AAQjE,IAAA,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;AAC5D,IAAA,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,gBAAgB;AAElD,IAAA,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE;IAC3B,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC;IACrC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAA,EAAG,MAAM,CAAC,QAAQ,CAAA,IAAA,CAAM,CAAC;IAE5G,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,CAAA,EAAG,OAAO,oBAAoB,EAAE;AAC/D,QAAA,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,SAAS,CAAA,CAAE,EAAE;AACxD,QAAA,IAAI,EAAE,IAAI;AACX,KAAA,CAAC;AAEF,IAAA,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;AAChB,QAAA,MAAM,IAAI,KAAK,CAAC,CAAA,6BAAA,EAAgC,MAAM,CAAC,QAAQ,CAAA,EAAA,EAAK,QAAQ,CAAC,MAAM,CAAA,CAAA,EAAI,QAAQ,CAAC,UAAU,CAAA,CAAE,CAAC;IAC/G;AACF;;AClDA;AAqBA;;;AAGuF;AACvF,MAAM,kBAAkB,GAAG,EAAE;AAE7B;;;;;;AAMuF;AAChF,eAAe,iBAAiB,CACrC,OAAyD,EAAA;IAEzD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB;IACxE,IAAI,CAAC,SAAS,EAAE;AACd,QAAA,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC;IACxF;AAEA,IAAA,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC;IAClE,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC;;;IAGtD,MAAM,QAAQ,GAAyC,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;AAElF,IAAA,MAAM,UAAU,GAAG,OAAO,KAAa,KAAmB;AACxD,QAAA,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC;AACjC,QAAA,MAAM,OAAO,GAAGE,sBAAU,EAAE;AAC5B,QAAA,IAAI,QAA0B;AAE9B,QAAA,IAAI;YACF,MAAM,UAAU,GAAGH,oBAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;YACxD,MAAM,WAAW,GAAGA,oBAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;;;;;;;;YAQ1D,QAAQ,GAAG,aAAa,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC;AAE1D,YAAA,MAAM,eAAe,CAAC;gBACpB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,SAAS;gBACT,OAAO;gBACP,OAAO;;;gBAGP,QAAQ,EAAEI,kBAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC;gBACtD,UAAU,EAAE,QAAQ,CAAC,GAAG;gBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;AAC7B,aAAA,CAAC;QACJ;QAAE,OAAO,KAAK,EAAE;;;;;YAKd,OAAO,CAAC,KAAK,CAAC,CAAA,kBAAA,EAAqB,QAAQ,CAAC,MAAM,CAAA,CAAA,CAAG,EAAE,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;AACtG,YAAA,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE;YACtD;QACF;AAEA,QAAA,IAAI;YACFC,qBAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAC3C,YAAAC,cAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;AACxB,YAAA,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE;QACvD;QAAE,OAAO,YAAY,EAAE;;;;;;;AAOrB,YAAA,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE;YACrD,OAAO,CAAC,KAAK,CAAC,CAAA,SAAA,EAAY,QAAQ,CAAC,MAAM,CAAA,kCAAA,CAAoC,EAAE,YAAY,CAAC;QAC9F;AACF,IAAA,CAAC;;;IAID,IAAI,SAAS,GAAG,CAAC;AACjB,IAAA,MAAM,SAAS,GAAG,YAA0B;AAC1C,QAAA,OAAO,SAAS,GAAG,SAAS,CAAC,MAAM,EAAE;AACnC,YAAA,MAAM,KAAK,GAAG,SAAS,EAAE;AACzB,YAAA,MAAM,UAAU,CAAC,KAAK,CAAC;QACzB;AACF,IAAA,CAAC;AACD,IAAA,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,MAAM,CAAC;AAClE,IAAA,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;IAEjE,MAAM,MAAM,GAA4B,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;AACpE,IAAA,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE;QAC7B,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IACpE;AACA,IAAA,OAAO,MAAM;AACf;;;;"}
+{"version":3,"file":"index.cjs","sources":["../src/discoverArtifacts.ts","../src/injectDebugId.ts","../src/resolveRelease.ts","../src/uploadSourceMap.ts","../src/processSourceMaps.ts"],"sourcesContent":["// packages/cli/src/discoverArtifacts.ts\nimport { existsSync, readdirSync, readFileSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\n\nexport interface Artifact {\n  jsPath: string\n  mapPath: string\n}\n\nconst SOURCE_MAPPING_URL = /^\\s*\\/\\/#\\s*sourceMappingURL=(\\S+)\\s*$/gm\n\n// Node recognizes three JS module extensions with runtime meaning (`.js`, `.mjs` for explicit\n// ESM, `.cjs` for explicit CommonJS regardless of the nearest package.json's \"type\") — all three\n// show up as real build output. Nitro's node-server preset (used by `@getmonitor/nuxt`'s e2e\n// test), for one, emits `.output/server/**/*.mjs` unconditionally: verified against a real\n// `nuxt build`, where a `.js`-only match left every server chunk's `.map` file undiscovered and\n// unstripped even though `.output/` itself was already fully written by the time discovery ran.\nconst JS_EXTENSIONS = ['.js', '.mjs', '.cjs']\n\n/** Recursively finds every JS file (`.js`, `.mjs`, `.cjs`) under `directory` and resolves its\n * source map path primarily via its `//# sourceMappingURL=` comment (resolved relative to the\n * JS file's own directory), falling back to same-basename-plus-`.map` when there's no comment,\n * the comment references a data: URI, or the referenced file doesn't exist. A JS file with no\n * resolvable map either way is skipped. */\nexport function discoverArtifacts(directory: string): Artifact[] {\n  const artifacts: Artifact[] = []\n  walk(directory, artifacts)\n  return artifacts\n}\n\nfunction walk(dir: string, artifacts: Artifact[]): void {\n  for (const entry of readdirSync(dir, { withFileTypes: true })) {\n    const fullPath = join(dir, entry.name)\n    if (entry.isDirectory()) {\n      walk(fullPath, artifacts)\n    } else if (entry.isFile() && JS_EXTENSIONS.some((ext) => entry.name.endsWith(ext))) {\n      const mapPath = resolveMapPath(fullPath)\n      if (mapPath) artifacts.push({ jsPath: fullPath, mapPath })\n    }\n  }\n}\n\nfunction resolveMapPath(jsPath: string): string | undefined {\n  const commentMapPath = readSourceMappingUrlComment(jsPath)\n  if (commentMapPath && existsSync(commentMapPath)) return commentMapPath\n\n  const fallbackMapPath = `${jsPath}.map`\n  if (existsSync(fallbackMapPath)) return fallbackMapPath\n\n  return undefined\n}\n\nfunction readSourceMappingUrlComment(jsPath: string): string | undefined {\n  let content: string\n  try {\n    content = readFileSync(jsPath, 'utf8')\n  } catch {\n    // Unreadable file (permission denied, broken symlink, deleted mid-walk, etc.) — treat it\n    // like \"no comment found\" rather than aborting the whole discoverArtifacts() walk.\n    return undefined\n  }\n\n  const matches = [...content.matchAll(SOURCE_MAPPING_URL)]\n  if (matches.length === 0) return undefined\n\n  // The LAST sourceMappingURL comment in the file wins, matching how bundlers/browsers treat\n  // concatenated/reprocessed output — later comments supersede earlier ones.\n  const reference = matches.at(-1)![1]\n  if (reference.startsWith('data:')) return undefined // embedded map, nothing to discover on disk\n\n  return join(dirname(jsPath), reference)\n}\n","// packages/cli/src/injectDebugId.ts\n\nexport interface InjectedArtifact {\n  js: string\n  map: string\n}\n\n/** Computes the debug-ID-injected JS content and the debug-ID-tagged source map JSON, in\n * memory — callers decide whether/when to persist the result to disk (processSourceMaps\n * only writes it after a successful upload, so a failed upload never leaves partially\n * mutated files behind). The injected JS also has its `//# sourceMappingURL=` comment(s)\n * removed, since the source map it names is only ever kept in GetMonitor's backend after\n * a successful upload — never served publicly alongside it.\n *\n * `originalMapJson` must be valid JSON — this is a pure function with no fallback to\n * degrade to (unlike discoverArtifacts, which can skip an unreadable file, this function's\n * caller expects a definite result), so a malformed map is left to throw via JSON.parse\n * rather than being swallowed here. */\nexport function injectDebugId(originalJs: string, originalMapJson: string, debugId: string): InjectedArtifact {\n  const withoutMapComment = originalJs\n    .split('\\n')\n    .filter((line) => !line.trimStart().startsWith('//# sourceMappingURL='))\n    .join('\\n')\n\n  const map = JSON.parse(originalMapJson)\n  map.debugId = debugId\n\n  return {\n    js: `${withoutMapComment}\\n${buildInjectedSnippet(debugId)}`,\n    map: JSON.stringify(map),\n  }\n}\n\n/** At load time, captures this statement's own `Error().stack`, extracts this file's\n * identity from it using the same frame-shape @getmonitor/core's parseStackTrace parses for\n * real errors (V8's `at ... (file:line:col)`, V8's bare `at file:line:col`, and Gecko's\n * `fn@file:line:col`), and registers the debug ID under that identity. Like parseStackTrace,\n * it scans every stack line and takes the first one that matches any of those shapes, rather\n * than assuming a fixed line index — V8 prefixes an `\"ErrorType: message\"` header line that\n * Gecko and Safari don't emit, so a fixed index would grab the wrong frame (or the wrong\n * file's identity) on non-V8 engines; the header line simply fails to match any frame regex\n * and is skipped automatically. A later real error whose frame.filename is parsed from the\n * same JS-engine stack serialization will look up the same key. Wrapped in try/catch so any\n * parsing edge case can never break the host app; wrapped in an IIFE so its locals don't leak\n * into the file's module scope.\n *\n * `debugId` is interpolated unescaped into the generated snippet's string literal. That's\n * safe today because every caller in this system sources `debugId` from\n * `crypto.randomUUID()` (a later task), which can never contain a quote or backslash — but\n * this function itself doesn't enforce that shape, so a caller passing an arbitrary string\n * containing `'` or `\\` would produce invalid/injected JS here. Flagged, not fixed, since\n * validating/escaping isn't part of this function's specified contract. */\nfunction buildInjectedSnippet(debugId: string): string {\n  return (\n    \";(function(){try{var s=(new Error()).stack||'';var ls=s.split('\\\\n');var m=null;\" +\n    'for(var i=0;i<ls.length&&!m;i++){var l=ls[i];' +\n    \"m=l.match(/\\\\((.*):(\\\\d+):(\\\\d+)\\\\)\\\\s*$/)||l.match(/at (.*):(\\\\d+):(\\\\d+)\\\\s*$/)||l.match(/@(.*):(\\\\d+):(\\\\d+)\\\\s*$/)}\" +\n    \"var f=m&&m[1];if(f){var g=(typeof globalThis!=='undefined'?globalThis:self);\" +\n    `g.__getmonitorDebugIds=g.__getmonitorDebugIds||{};g.__getmonitorDebugIds[f]='${debugId}';` +\n    '}}catch(e){}})();'\n  )\n}\n","// packages/cli/src/resolveRelease.ts\nimport { execFileSync } from 'node:child_process'\nimport { existsSync, readFileSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\n\n/** Resolves the release identifier to tag uploaded source maps with. Precedence: explicit\n * argument -> GETMONITOR_RELEASE env var -> current git commit SHA (if `directory` is inside\n * a git working tree) -> `version` field of the nearest package.json walking up from\n * `directory`. Matches the SDKs' own optional `release` field so events and source maps\n * for the same deploy carry the same value. */\nexport function resolveRelease(directory: string, explicit?: string): string {\n  if (explicit) return explicit\n  if (process.env.GETMONITOR_RELEASE) return process.env.GETMONITOR_RELEASE\n\n  const gitSha = tryGitSha(directory)\n  if (gitSha) return gitSha\n\n  const packageVersion = tryPackageVersion(directory)\n  if (packageVersion) return packageVersion\n\n  throw new Error(\n    'Could not resolve a release. Pass --release, set GETMONITOR_RELEASE, run inside a git repository, or add a package.json with a \"version\" field.',\n  )\n}\n\nfunction tryGitSha(directory: string): string | undefined {\n  try {\n    return execFileSync('git', ['rev-parse', 'HEAD'], {\n      cwd: directory,\n      encoding: 'utf8',\n      stdio: ['ignore', 'pipe', 'ignore'],\n    }).trim()\n  } catch {\n    return undefined\n  }\n}\n\nfunction tryPackageVersion(directory: string): string | undefined {\n  let dir = directory\n  for (let i = 0; i < 20; i++) {\n    const pkgPath = join(dir, 'package.json')\n    if (existsSync(pkgPath)) {\n      try {\n        const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'))\n        return typeof pkg.version === 'string' ? pkg.version : undefined\n      } catch {\n        return undefined\n      }\n    }\n    const parent = dirname(dir)\n    if (parent === dir) return undefined\n    dir = parent\n  }\n  return undefined\n}\n","// packages/cli/src/uploadSourceMap.ts\n\n/** The one sourcemap-upload host every CLI invocation talks to — not customer-configurable. */\nexport const DEFAULT_API_HOST = 'https://track.getmonitor.io'\n\nexport interface UploadSourceMapParams {\n  /**\n   * @internal Test-only override for redirecting delivery to a local mock server (see\n   * cli/e2e/processSourceMaps.spec.ts and the nextjs-config/nuxt e2e suites). Never exposed\n   * through the public CLI/programmatic surface — real usage always ships to\n   * {@link DEFAULT_API_HOST}.\n   */\n  apiHost?: string\n  authToken: string\n  release: string\n  debugId: string\n  filename: string\n  mapContent: string\n  fetchImpl?: typeof fetch\n}\n\n/** POSTs a single source map artifact to ingester-api's `/api/v1/sourcemaps` contract.\n * Throws on any non-2xx response or network failure — the caller (processSourceMaps) decides\n * what \"failed\" means for its own result reporting and disk-write ordering. */\nexport async function uploadSourceMap(params: UploadSourceMapParams): Promise<void> {\n  // Must bind to globalThis, mirroring @getmonitor/core's HttpTransport: browsers' native\n  // fetch() throws \"Illegal invocation\" if called with a `this` other than\n  // Window/WorkerGlobalScope. Here fetchImpl is invoked as a plain function call below\n  // (`fetchImpl(url, init)`, never `params.fetchImpl(...)` or `this.fetchImpl(...)`), so this\n  // bind is defensive/consistent rather than load-bearing for this particular call site — but\n  // keeping the same default expression as HttpTransport avoids a divergent default if this\n  // code is ever refactored into a method.\n  const fetchImpl = params.fetchImpl ?? fetch.bind(globalThis)\n  const apiHost = params.apiHost ?? DEFAULT_API_HOST\n\n  const form = new FormData()\n  form.set('release', params.release)\n  form.set('debugId', params.debugId)\n  form.set('filename', params.filename)\n  form.set('sourcemap', new Blob([params.mapContent], { type: 'application/json' }), `${params.filename}.map`)\n\n  const response = await fetchImpl(`${apiHost}/api/v1/sourcemaps`, {\n    method: 'POST',\n    headers: { Authorization: `Bearer ${params.authToken}` },\n    body: form,\n  })\n\n  if (!response.ok) {\n    // Deliberately excludes `params.filename` — a real deployment can have hundreds/thousands\n    // of artifacts fail identically (e.g. one bad auth token), and processSourceMaps\n    // deduplicates these messages to log the reason once instead of once per file. Baking the\n    // filename in here would make every message unique and defeat that dedup.\n    throw new Error(`${response.status} ${response.statusText}`)\n  }\n}\n","// packages/cli/src/processSourceMaps.ts\nimport { randomUUID } from 'node:crypto'\nimport { readFileSync, rmSync, writeFileSync } from 'node:fs'\nimport { relative } from 'node:path'\nimport { discoverArtifacts } from './discoverArtifacts'\nimport { injectDebugId, InjectedArtifact } from './injectDebugId'\nimport { resolveRelease } from './resolveRelease'\nimport { uploadSourceMap } from './uploadSourceMap'\nimport { ProcessSourceMapsOptions, ProcessSourceMapsResult } from './types'\n\n/**\n * @internal Test-only host override, intersected into `processSourceMaps`'s options but\n * deliberately not part of the exported `ProcessSourceMapsOptions` type — see\n * `uploadSourceMap`'s `UploadSourceMapParams.apiHost`. Used by this package's own e2e suite\n * and by nextjs-config/nuxt's e2e suites (via their own internal overrides) to redirect\n * delivery to a local mock server; real callers must never set it.\n */\ninterface InternalTestOverrides {\n  apiHost?: string\n}\n\n/** Number of artifacts uploaded at once. Each upload is an independent network round trip to\n * ingester-api, so processing them one at a time made wall-clock time scale linearly with\n * artifact count for no reason — a real Next.js build can emit well over a thousand of them,\n * turning a few hundred ms of per-file latency into many minutes of serial waiting. */\nconst UPLOAD_CONCURRENCY = 20\n\n/** Finds every JS/map artifact pair under `options.directory`, and for each one: injects a\n * debug ID, uploads the tagged source map, and — only on a successful upload — writes the\n * debug-ID-injected JS back to disk and deletes the `.map` file. An artifact whose upload\n * fails is left completely untouched on disk, so it can be retried by re-running this\n * function against the same directory. Artifacts are uploaded concurrently (bounded by\n * `UPLOAD_CONCURRENCY`), but `result.uploaded`/`result.failed` are always ordered to match\n * `discoverArtifacts`'s output, regardless of which upload happens to finish first. */\nexport async function processSourceMaps(\n  options: ProcessSourceMapsOptions & InternalTestOverrides\n): Promise<ProcessSourceMapsResult> {\n  const authToken = options.authToken ?? process.env.GETMONITOR_AUTH_TOKEN\n  if (!authToken) {\n    throw new Error('Missing auth token. Pass --auth-token or set GETMONITOR_AUTH_TOKEN.')\n  }\n\n  const release = resolveRelease(options.directory, options.release)\n  const artifacts = discoverArtifacts(options.directory)\n  // Indexed by each artifact's position in `artifacts` rather than appended in completion\n  // order, so the final result below is deterministic no matter which worker finishes first.\n  type Outcome =\n    | { path: string; kind: 'uploaded' }\n    | { path: string; kind: 'failed' }\n    | { path: string; kind: 'skipped'; reason: string }\n  const outcomes: Outcome[] = new Array(artifacts.length)\n\n  const processOne = async (index: number): Promise<void> => {\n    const artifact = artifacts[index]\n    const debugId = randomUUID()\n    let injected: InjectedArtifact\n\n    // Local step: reading the artifact and injecting its debug ID. A failure here (unreadable\n    // file, malformed map JSON) means the build's own output is broken — that's a real bug\n    // worth failing CI over, so it's tracked in `failed` and logged per-file: with a genuine\n    // local bug there are normally only one or a handful of these, unlike a systemic upload\n    // outage below.\n    try {\n      const originalJs = readFileSync(artifact.jsPath, 'utf8')\n      const originalMap = readFileSync(artifact.mapPath, 'utf8')\n      // injectDebugId is a pure function that throws on malformed map JSON (by design — see\n      // its own doc comment). One corrupt/unreadable artifact on disk must not abort\n      // processing of every other artifact in the directory, the same failure-isolation\n      // principle discoverArtifacts applies to unreadable files during its walk. Nothing has\n      // been uploaded or written yet at this point, so a thrown injectDebugId failure leaves\n      // the artifact's files completely untouched, and it's safe to report it as `failed` for\n      // a retry.\n      injected = injectDebugId(originalJs, originalMap, debugId)\n    } catch (error) {\n      console.error(`Failed to process ${artifact.jsPath}:`, error instanceof Error ? error.message : error)\n      outcomes[index] = { path: artifact.jsPath, kind: 'failed' }\n      return\n    }\n\n    // Remote step: uploading to the ingest API. Unlike the local step above, this artifact was\n    // perfectly fine — the *endpoint* rejected the request or was unreachable (bad/expired auth\n    // token, network outage, backend 5xx). That's an infra/connectivity problem outside this\n    // build's control, not a bug in it, so it's tracked separately in `skipped` (never `failed`)\n    // and deliberately NOT logged per-file here: an outage or bad token fails every one of\n    // potentially thousands of artifacts identically, and logging each one would drown out\n    // everything else in the build's output. The deduplicated reason is logged once, after all\n    // artifacts finish, by the summary block below.\n    try {\n      await uploadSourceMap({\n        apiHost: options.apiHost,\n        authToken,\n        release,\n        debugId,\n        // Relative to options.directory, not the absolute on-disk path — the backend has no\n        // use for (and shouldn't see) the build machine's local filesystem layout.\n        filename: relative(options.directory, artifact.jsPath),\n        mapContent: injected.map,\n        fetchImpl: options.fetchImpl,\n      })\n    } catch (error) {\n      outcomes[index] = {\n        path: artifact.jsPath,\n        kind: 'skipped',\n        reason: error instanceof Error ? error.message : String(error),\n      }\n      return\n    }\n\n    try {\n      writeFileSync(artifact.jsPath, injected.js)\n      rmSync(artifact.mapPath)\n      outcomes[index] = { path: artifact.jsPath, kind: 'uploaded' }\n    } catch (cleanupError) {\n      // The upload above already succeeded, so this must never land in `failed` or `skipped` —\n      // a caller retrying either would mint a fresh debugId and re-upload, orphaning this\n      // upload server-side under the old one with no way to reconcile the two. The local\n      // cleanup failure (disk full, permission error, file lock) is real and worth knowing\n      // about, so it's surfaced here rather than silently swallowed, but it doesn't change\n      // the artifact's outcome.\n      outcomes[index] = { path: artifact.jsPath, kind: 'uploaded' }\n      console.error(`Uploaded ${artifact.jsPath} but failed to update local files:`, cleanupError)\n    }\n  }\n\n  // A fixed-size pool of workers, each pulling the next unclaimed artifact index off a shared\n  // cursor, bounds concurrency to UPLOAD_CONCURRENCY regardless of how many artifacts there are.\n  let nextIndex = 0\n  const runWorker = async (): Promise<void> => {\n    while (nextIndex < artifacts.length) {\n      const index = nextIndex++\n      await processOne(index)\n    }\n  }\n  const workerCount = Math.min(UPLOAD_CONCURRENCY, artifacts.length)\n  await Promise.all(Array.from({ length: workerCount }, runWorker))\n\n  const result: ProcessSourceMapsResult = { uploaded: [], failed: [], skipped: [] }\n  // Counts occurrences of each distinct skip reason, preserving first-seen order, so the\n  // summary below reads one line per *kind* of problem rather than one line per file.\n  const skipReasonCounts = new Map<string, number>()\n  for (const outcome of outcomes) {\n    if (outcome.kind === 'uploaded') result.uploaded.push(outcome.path)\n    else if (outcome.kind === 'failed') result.failed.push(outcome.path)\n    else {\n      result.skipped.push(outcome.path)\n      skipReasonCounts.set(outcome.reason, (skipReasonCounts.get(outcome.reason) ?? 0) + 1)\n    }\n  }\n\n  if (result.skipped.length > 0) {\n    console.warn(`GetMonitor: could not upload ${result.skipped.length} source map(s); continuing without them.`)\n    for (const [reason, count] of skipReasonCounts) {\n      console.warn(`  - ${reason} (${count}x)`)\n    }\n  }\n\n  return result\n}\n"],"names":["readdirSync","join","existsSync","readFileSync","dirname","execFileSync","randomUUID","relative","writeFileSync","rmSync"],"mappings":";;;;;;;AAAA;AASA,MAAM,kBAAkB,GAAG,0CAA0C;AAErE;AACA;AACA;AACA;AACA;AACA;AACA,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;AAE7C;;;;AAI2C;AACrC,SAAU,iBAAiB,CAAC,SAAiB,EAAA;IACjD,MAAM,SAAS,GAAe,EAAE;AAChC,IAAA,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;AAC1B,IAAA,OAAO,SAAS;AAClB;AAEA,SAAS,IAAI,CAAC,GAAW,EAAE,SAAqB,EAAA;AAC9C,IAAA,KAAK,MAAM,KAAK,IAAIA,mBAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE;QAC7D,MAAM,QAAQ,GAAGC,cAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC;AACtC,QAAA,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE;AACvB,YAAA,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC;QAC3B;aAAO,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE;AAClF,YAAA,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC;AACxC,YAAA,IAAI,OAAO;gBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC5D;IACF;AACF;AAEA,SAAS,cAAc,CAAC,MAAc,EAAA;AACpC,IAAA,MAAM,cAAc,GAAG,2BAA2B,CAAC,MAAM,CAAC;AAC1D,IAAA,IAAI,cAAc,IAAIC,kBAAU,CAAC,cAAc,CAAC;AAAE,QAAA,OAAO,cAAc;AAEvE,IAAA,MAAM,eAAe,GAAG,CAAA,EAAG,MAAM,MAAM;IACvC,IAAIA,kBAAU,CAAC,eAAe,CAAC;AAAE,QAAA,OAAO,eAAe;AAEvD,IAAA,OAAO,SAAS;AAClB;AAEA,SAAS,2BAA2B,CAAC,MAAc,EAAA;AACjD,IAAA,IAAI,OAAe;AACnB,IAAA,IAAI;AACF,QAAA,OAAO,GAAGC,oBAAY,CAAC,MAAM,EAAE,MAAM,CAAC;IACxC;AAAE,IAAA,MAAM;;;AAGN,QAAA,OAAO,SAAS;IAClB;IAEA,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AACzD,IAAA,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;AAAE,QAAA,OAAO,SAAS;;;AAI1C,IAAA,MAAM,SAAS,GAAG,OAAO,CAAC,EAAE,CAAC,EAAE,CAAE,CAAC,CAAC,CAAC;AACpC,IAAA,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAA;IAEnD,OAAOF,cAAI,CAACG,iBAAO,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;AACzC;;ACvEA;AAOA;;;;;;;;;;AAUuC;SACvB,aAAa,CAAC,UAAkB,EAAE,eAAuB,EAAE,OAAe,EAAA;IACxF,MAAM,iBAAiB,GAAG;SACvB,KAAK,CAAC,IAAI;AACV,SAAA,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC;SACtE,IAAI,CAAC,IAAI,CAAC;IAEb,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;AACvC,IAAA,GAAG,CAAC,OAAO,GAAG,OAAO;IAErB,OAAO;QACL,EAAE,EAAE,GAAG,iBAAiB,CAAA,EAAA,EAAK,oBAAoB,CAAC,OAAO,CAAC,CAAA,CAAE;AAC5D,QAAA,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;KACzB;AACH;AAEA;;;;;;;;;;;;;;;;;;AAkB2E;AAC3E,SAAS,oBAAoB,CAAC,OAAe,EAAA;AAC3C,IAAA,QACE,kFAAkF;QAClF,+CAA+C;QAC/C,yHAAyH;QACzH,8EAA8E;AAC9E,QAAA,CAAA,6EAAA,EAAgF,OAAO,CAAA,EAAA,CAAI;AAC3F,QAAA,mBAAmB;AAEvB;;AC7DA;AAKA;;;;AAI+C;AACzC,SAAU,cAAc,CAAC,SAAiB,EAAE,QAAiB,EAAA;AACjE,IAAA,IAAI,QAAQ;AAAE,QAAA,OAAO,QAAQ;AAC7B,IAAA,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB;AAAE,QAAA,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB;AAEzE,IAAA,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC;AACnC,IAAA,IAAI,MAAM;AAAE,QAAA,OAAO,MAAM;AAEzB,IAAA,MAAM,cAAc,GAAG,iBAAiB,CAAC,SAAS,CAAC;AACnD,IAAA,IAAI,cAAc;AAAE,QAAA,OAAO,cAAc;AAEzC,IAAA,MAAM,IAAI,KAAK,CACb,iJAAiJ,CAClJ;AACH;AAEA,SAAS,SAAS,CAAC,SAAiB,EAAA;AAClC,IAAA,IAAI;QACF,OAAOC,+BAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE;AAChD,YAAA,GAAG,EAAE,SAAS;AACd,YAAA,QAAQ,EAAE,MAAM;AAChB,YAAA,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE;IACX;AAAE,IAAA,MAAM;AACN,QAAA,OAAO,SAAS;IAClB;AACF;AAEA,SAAS,iBAAiB,CAAC,SAAiB,EAAA;IAC1C,IAAI,GAAG,GAAG,SAAS;AACnB,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAGJ,cAAI,CAAC,GAAG,EAAE,cAAc,CAAC;AACzC,QAAA,IAAIC,kBAAU,CAAC,OAAO,CAAC,EAAE;AACvB,YAAA,IAAI;AACF,gBAAA,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAACC,oBAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACrD,gBAAA,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,GAAG,GAAG,CAAC,OAAO,GAAG,SAAS;YAClE;AAAE,YAAA,MAAM;AACN,gBAAA,OAAO,SAAS;YAClB;QACF;AACA,QAAA,MAAM,MAAM,GAAGC,iBAAO,CAAC,GAAG,CAAC;QAC3B,IAAI,MAAM,KAAK,GAAG;AAAE,YAAA,OAAO,SAAS;QACpC,GAAG,GAAG,MAAM;IACd;AACA,IAAA,OAAO,SAAS;AAClB;;ACtDA;AAEA;AACO,MAAM,gBAAgB,GAAG,6BAA6B;AAkB7D;;AAE+E;AACxE,eAAe,eAAe,CAAC,MAA6B,EAAA;;;;;;;;AAQjE,IAAA,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;AAC5D,IAAA,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,gBAAgB;AAElD,IAAA,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE;IAC3B,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC;IACrC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAA,EAAG,MAAM,CAAC,QAAQ,CAAA,IAAA,CAAM,CAAC;IAE5G,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,CAAA,EAAG,OAAO,oBAAoB,EAAE;AAC/D,QAAA,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,SAAS,CAAA,CAAE,EAAE;AACxD,QAAA,IAAI,EAAE,IAAI;AACX,KAAA,CAAC;AAEF,IAAA,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;;;;;AAKhB,QAAA,MAAM,IAAI,KAAK,CAAC,CAAA,EAAG,QAAQ,CAAC,MAAM,CAAA,CAAA,EAAI,QAAQ,CAAC,UAAU,CAAA,CAAE,CAAC;IAC9D;AACF;;ACtDA;AAqBA;;;AAGuF;AACvF,MAAM,kBAAkB,GAAG,EAAE;AAE7B;;;;;;AAMuF;AAChF,eAAe,iBAAiB,CACrC,OAAyD,EAAA;IAEzD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB;IACxE,IAAI,CAAC,SAAS,EAAE;AACd,QAAA,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC;IACxF;AAEA,IAAA,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC;IAClE,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC;IAOtD,MAAM,QAAQ,GAAc,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;AAEvD,IAAA,MAAM,UAAU,GAAG,OAAO,KAAa,KAAmB;AACxD,QAAA,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC;AACjC,QAAA,MAAM,OAAO,GAAGE,sBAAU,EAAE;AAC5B,QAAA,IAAI,QAA0B;;;;;;AAO9B,QAAA,IAAI;YACF,MAAM,UAAU,GAAGH,oBAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;YACxD,MAAM,WAAW,GAAGA,oBAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;;;;;;;;YAQ1D,QAAQ,GAAG,aAAa,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC;QAC5D;QAAE,OAAO,KAAK,EAAE;YACd,OAAO,CAAC,KAAK,CAAC,CAAA,kBAAA,EAAqB,QAAQ,CAAC,MAAM,CAAA,CAAA,CAAG,EAAE,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;AACtG,YAAA,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC3D;QACF;;;;;;;;;AAUA,QAAA,IAAI;AACF,YAAA,MAAM,eAAe,CAAC;gBACpB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,SAAS;gBACT,OAAO;gBACP,OAAO;;;gBAGP,QAAQ,EAAEI,kBAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC;gBACtD,UAAU,EAAE,QAAQ,CAAC,GAAG;gBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;AAC7B,aAAA,CAAC;QACJ;QAAE,OAAO,KAAK,EAAE;YACd,QAAQ,CAAC,KAAK,CAAC,GAAG;gBAChB,IAAI,EAAE,QAAQ,CAAC,MAAM;AACrB,gBAAA,IAAI,EAAE,SAAS;AACf,gBAAA,MAAM,EAAE,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;aAC/D;YACD;QACF;AAEA,QAAA,IAAI;YACFC,qBAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAC3C,YAAAC,cAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;AACxB,YAAA,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;QAC/D;QAAE,OAAO,YAAY,EAAE;;;;;;;AAOrB,YAAA,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;YAC7D,OAAO,CAAC,KAAK,CAAC,CAAA,SAAA,EAAY,QAAQ,CAAC,MAAM,CAAA,kCAAA,CAAoC,EAAE,YAAY,CAAC;QAC9F;AACF,IAAA,CAAC;;;IAID,IAAI,SAAS,GAAG,CAAC;AACjB,IAAA,MAAM,SAAS,GAAG,YAA0B;AAC1C,QAAA,OAAO,SAAS,GAAG,SAAS,CAAC,MAAM,EAAE;AACnC,YAAA,MAAM,KAAK,GAAG,SAAS,EAAE;AACzB,YAAA,MAAM,UAAU,CAAC,KAAK,CAAC;QACzB;AACF,IAAA,CAAC;AACD,IAAA,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,MAAM,CAAC;AAClE,IAAA,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;AAEjE,IAAA,MAAM,MAAM,GAA4B,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;;;AAGjF,IAAA,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB;AAClD,IAAA,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE;AAC9B,QAAA,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;YAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;AAC9D,aAAA,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;aAC/D;YACH,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YACjC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvF;IACF;IAEA,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;QAC7B,OAAO,CAAC,IAAI,CAAC,CAAA,6BAAA,EAAgC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAA,wCAAA,CAA0C,CAAC;QAC7G,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,gBAAgB,EAAE;YAC9C,OAAO,CAAC,IAAI,CAAC,CAAA,IAAA,EAAO,MAAM,CAAA,EAAA,EAAK,KAAK,CAAA,EAAA,CAAI,CAAC;QAC3C;IACF;AAEA,IAAA,OAAO,MAAM;AACf;;;;"}

package/dist/index.js

@@ -171,7 +171,7 @@ function tryPackageVersion(directory) {
 
 // packages/cli/src/uploadSourceMap.ts
 /** The one sourcemap-upload host every CLI invocation talks to — not customer-configurable. */
-const DEFAULT_API_HOST = 'https://ingest.getmonitor.io';
+const DEFAULT_API_HOST = 'https://track.getmonitor.io';
 /** POSTs a single source map artifact to ingester-api's `/api/v1/sourcemaps` contract.
  * Throws on any non-2xx response or network failure — the caller (processSourceMaps) decides
  * what "failed" means for its own result reporting and disk-write ordering. */
@@ -196,7 +196,11 @@ async function uploadSourceMap(params) {
         body: form,
     });
     if (!response.ok) {
-        throw new Error(`Source map upload failed for ${params.filename}: ${response.status} ${response.statusText}`);
+        // Deliberately excludes `params.filename` — a real deployment can have hundreds/thousands
+        // of artifacts fail identically (e.g. one bad auth token), and processSourceMaps
+        // deduplicates these messages to log the reason once instead of once per file. Baking the
+        // filename in here would make every message unique and defeat that dedup.
+        throw new Error(`${response.status} ${response.statusText}`);
     }
 }
 
@@ -220,24 +224,42 @@ async function processSourceMaps(options) {
     }
     const release = resolveRelease(options.directory, options.release);
     const artifacts = discoverArtifacts(options.directory);
-    // Indexed by each artifact's position in `artifacts` rather than appended in completion
-    // order, so the final result below is deterministic no matter which worker finishes first.
     const outcomes = new Array(artifacts.length);
     const processOne = async (index) => {
         const artifact = artifacts[index];
         const debugId = randomUUID();
         let injected;
+        // Local step: reading the artifact and injecting its debug ID. A failure here (unreadable
+        // file, malformed map JSON) means the build's own output is broken — that's a real bug
+        // worth failing CI over, so it's tracked in `failed` and logged per-file: with a genuine
+        // local bug there are normally only one or a handful of these, unlike a systemic upload
+        // outage below.
         try {
             const originalJs = readFileSync(artifact.jsPath, 'utf8');
             const originalMap = readFileSync(artifact.mapPath, 'utf8');
             // injectDebugId is a pure function that throws on malformed map JSON (by design — see
-            // its own doc comment). That's deliberately caught here, alongside upload failures: one
-            // corrupt/unreadable artifact on disk must not abort processing of every other artifact
-            // in the directory, the same failure-isolation principle discoverArtifacts applies to
-            // unreadable files during its walk. Nothing has been uploaded or written yet at this
-            // point, so a thrown injectDebugId or upload failure leaves the artifact's files
-            // completely untouched, and it's safe to report it as `failed` for a retry.
+            // its own doc comment). One corrupt/unreadable artifact on disk must not abort
+            // processing of every other artifact in the directory, the same failure-isolation
+            // principle discoverArtifacts applies to unreadable files during its walk. Nothing has
+            // been uploaded or written yet at this point, so a thrown injectDebugId failure leaves
+            // the artifact's files completely untouched, and it's safe to report it as `failed` for
+            // a retry.
             injected = injectDebugId(originalJs, originalMap, debugId);
+        }
+        catch (error) {
+            console.error(`Failed to process ${artifact.jsPath}:`, error instanceof Error ? error.message : error);
+            outcomes[index] = { path: artifact.jsPath, kind: 'failed' };
+            return;
+        }
+        // Remote step: uploading to the ingest API. Unlike the local step above, this artifact was
+        // perfectly fine — the *endpoint* rejected the request or was unreachable (bad/expired auth
+        // token, network outage, backend 5xx). That's an infra/connectivity problem outside this
+        // build's control, not a bug in it, so it's tracked separately in `skipped` (never `failed`)
+        // and deliberately NOT logged per-file here: an outage or bad token fails every one of
+        // potentially thousands of artifacts identically, and logging each one would drown out
+        // everything else in the build's output. The deduplicated reason is logged once, after all
+        // artifacts finish, by the summary block below.
+        try {
             await uploadSourceMap({
                 apiHost: options.apiHost,
                 authToken,
@@ -251,27 +273,26 @@ async function processSourceMaps(options) {
             });
         }
         catch (error) {
-            // Surfaced here rather than swallowed: this is the only place the actual failure reason
-            // (injectDebugId's malformed-JSON error, or uploadSourceMap's `status statusText` message)
-            // is available. Without logging it, callers only ever see a bare list of failed paths with
-            // no way to tell an auth failure from a malformed map from a network error.
-            console.error(`Failed to process ${artifact.jsPath}:`, error instanceof Error ? error.message : error);
-            outcomes[index] = { path: artifact.jsPath, ok: false };
+            outcomes[index] = {
+                path: artifact.jsPath,
+                kind: 'skipped',
+                reason: error instanceof Error ? error.message : String(error),
+            };
             return;
         }
         try {
             writeFileSync(artifact.jsPath, injected.js);
             rmSync(artifact.mapPath);
-            outcomes[index] = { path: artifact.jsPath, ok: true };
+            outcomes[index] = { path: artifact.jsPath, kind: 'uploaded' };
         }
         catch (cleanupError) {
-            // The upload above already succeeded, so this must never land in `failed` — a caller
-            // retrying failed artifacts would mint a fresh debugId and re-upload, orphaning this
+            // The upload above already succeeded, so this must never land in `failed` or `skipped` —
+            // a caller retrying either would mint a fresh debugId and re-upload, orphaning this
             // upload server-side under the old one with no way to reconcile the two. The local
             // cleanup failure (disk full, permission error, file lock) is real and worth knowing
             // about, so it's surfaced here rather than silently swallowed, but it doesn't change
             // the artifact's outcome.
-            outcomes[index] = { path: artifact.jsPath, ok: true };
+            outcomes[index] = { path: artifact.jsPath, kind: 'uploaded' };
             console.error(`Uploaded ${artifact.jsPath} but failed to update local files:`, cleanupError);
         }
     };
@@ -286,9 +307,25 @@ async function processSourceMaps(options) {
     };
     const workerCount = Math.min(UPLOAD_CONCURRENCY, artifacts.length);
     await Promise.all(Array.from({ length: workerCount }, runWorker));
-    const result = { uploaded: [], failed: [] };
+    const result = { uploaded: [], failed: [], skipped: [] };
+    // Counts occurrences of each distinct skip reason, preserving first-seen order, so the
+    // summary below reads one line per *kind* of problem rather than one line per file.
+    const skipReasonCounts = new Map();
     for (const outcome of outcomes) {
-        (outcome.ok ? result.uploaded : result.failed).push(outcome.path);
+        if (outcome.kind === 'uploaded')
+            result.uploaded.push(outcome.path);
+        else if (outcome.kind === 'failed')
+            result.failed.push(outcome.path);
+        else {
+            result.skipped.push(outcome.path);
+            skipReasonCounts.set(outcome.reason, (skipReasonCounts.get(outcome.reason) ?? 0) + 1);
+        }
+    }
+    if (result.skipped.length > 0) {
+        console.warn(`GetMonitor: could not upload ${result.skipped.length} source map(s); continuing without them.`);
+        for (const [reason, count] of skipReasonCounts) {
+            console.warn(`  - ${reason} (${count}x)`);
+        }
     }
     return result;
 }

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../src/discoverArtifacts.ts","../src/injectDebugId.ts","../src/resolveRelease.ts","../src/uploadSourceMap.ts","../src/processSourceMaps.ts"],"sourcesContent":["// packages/cli/src/discoverArtifacts.ts\nimport { existsSync, readdirSync, readFileSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\n\nexport interface Artifact {\n  jsPath: string\n  mapPath: string\n}\n\nconst SOURCE_MAPPING_URL = /^\\s*\\/\\/#\\s*sourceMappingURL=(\\S+)\\s*$/gm\n\n// Node recognizes three JS module extensions with runtime meaning (`.js`, `.mjs` for explicit\n// ESM, `.cjs` for explicit CommonJS regardless of the nearest package.json's \"type\") — all three\n// show up as real build output. Nitro's node-server preset (used by `@getmonitor/nuxt`'s e2e\n// test), for one, emits `.output/server/**/*.mjs` unconditionally: verified against a real\n// `nuxt build`, where a `.js`-only match left every server chunk's `.map` file undiscovered and\n// unstripped even though `.output/` itself was already fully written by the time discovery ran.\nconst JS_EXTENSIONS = ['.js', '.mjs', '.cjs']\n\n/** Recursively finds every JS file (`.js`, `.mjs`, `.cjs`) under `directory` and resolves its\n * source map path primarily via its `//# sourceMappingURL=` comment (resolved relative to the\n * JS file's own directory), falling back to same-basename-plus-`.map` when there's no comment,\n * the comment references a data: URI, or the referenced file doesn't exist. A JS file with no\n * resolvable map either way is skipped. */\nexport function discoverArtifacts(directory: string): Artifact[] {\n  const artifacts: Artifact[] = []\n  walk(directory, artifacts)\n  return artifacts\n}\n\nfunction walk(dir: string, artifacts: Artifact[]): void {\n  for (const entry of readdirSync(dir, { withFileTypes: true })) {\n    const fullPath = join(dir, entry.name)\n    if (entry.isDirectory()) {\n      walk(fullPath, artifacts)\n    } else if (entry.isFile() && JS_EXTENSIONS.some((ext) => entry.name.endsWith(ext))) {\n      const mapPath = resolveMapPath(fullPath)\n      if (mapPath) artifacts.push({ jsPath: fullPath, mapPath })\n    }\n  }\n}\n\nfunction resolveMapPath(jsPath: string): string | undefined {\n  const commentMapPath = readSourceMappingUrlComment(jsPath)\n  if (commentMapPath && existsSync(commentMapPath)) return commentMapPath\n\n  const fallbackMapPath = `${jsPath}.map`\n  if (existsSync(fallbackMapPath)) return fallbackMapPath\n\n  return undefined\n}\n\nfunction readSourceMappingUrlComment(jsPath: string): string | undefined {\n  let content: string\n  try {\n    content = readFileSync(jsPath, 'utf8')\n  } catch {\n    // Unreadable file (permission denied, broken symlink, deleted mid-walk, etc.) — treat it\n    // like \"no comment found\" rather than aborting the whole discoverArtifacts() walk.\n    return undefined\n  }\n\n  const matches = [...content.matchAll(SOURCE_MAPPING_URL)]\n  if (matches.length === 0) return undefined\n\n  // The LAST sourceMappingURL comment in the file wins, matching how bundlers/browsers treat\n  // concatenated/reprocessed output — later comments supersede earlier ones.\n  const reference = matches.at(-1)![1]\n  if (reference.startsWith('data:')) return undefined // embedded map, nothing to discover on disk\n\n  return join(dirname(jsPath), reference)\n}\n","// packages/cli/src/injectDebugId.ts\n\nexport interface InjectedArtifact {\n  js: string\n  map: string\n}\n\n/** Computes the debug-ID-injected JS content and the debug-ID-tagged source map JSON, in\n * memory — callers decide whether/when to persist the result to disk (processSourceMaps\n * only writes it after a successful upload, so a failed upload never leaves partially\n * mutated files behind). The injected JS also has its `//# sourceMappingURL=` comment(s)\n * removed, since the source map it names is only ever kept in GetMonitor's backend after\n * a successful upload — never served publicly alongside it.\n *\n * `originalMapJson` must be valid JSON — this is a pure function with no fallback to\n * degrade to (unlike discoverArtifacts, which can skip an unreadable file, this function's\n * caller expects a definite result), so a malformed map is left to throw via JSON.parse\n * rather than being swallowed here. */\nexport function injectDebugId(originalJs: string, originalMapJson: string, debugId: string): InjectedArtifact {\n  const withoutMapComment = originalJs\n    .split('\\n')\n    .filter((line) => !line.trimStart().startsWith('//# sourceMappingURL='))\n    .join('\\n')\n\n  const map = JSON.parse(originalMapJson)\n  map.debugId = debugId\n\n  return {\n    js: `${withoutMapComment}\\n${buildInjectedSnippet(debugId)}`,\n    map: JSON.stringify(map),\n  }\n}\n\n/** At load time, captures this statement's own `Error().stack`, extracts this file's\n * identity from it using the same frame-shape @getmonitor/core's parseStackTrace parses for\n * real errors (V8's `at ... (file:line:col)`, V8's bare `at file:line:col`, and Gecko's\n * `fn@file:line:col`), and registers the debug ID under that identity. Like parseStackTrace,\n * it scans every stack line and takes the first one that matches any of those shapes, rather\n * than assuming a fixed line index — V8 prefixes an `\"ErrorType: message\"` header line that\n * Gecko and Safari don't emit, so a fixed index would grab the wrong frame (or the wrong\n * file's identity) on non-V8 engines; the header line simply fails to match any frame regex\n * and is skipped automatically. A later real error whose frame.filename is parsed from the\n * same JS-engine stack serialization will look up the same key. Wrapped in try/catch so any\n * parsing edge case can never break the host app; wrapped in an IIFE so its locals don't leak\n * into the file's module scope.\n *\n * `debugId` is interpolated unescaped into the generated snippet's string literal. That's\n * safe today because every caller in this system sources `debugId` from\n * `crypto.randomUUID()` (a later task), which can never contain a quote or backslash — but\n * this function itself doesn't enforce that shape, so a caller passing an arbitrary string\n * containing `'` or `\\` would produce invalid/injected JS here. Flagged, not fixed, since\n * validating/escaping isn't part of this function's specified contract. */\nfunction buildInjectedSnippet(debugId: string): string {\n  return (\n    \";(function(){try{var s=(new Error()).stack||'';var ls=s.split('\\\\n');var m=null;\" +\n    'for(var i=0;i<ls.length&&!m;i++){var l=ls[i];' +\n    \"m=l.match(/\\\\((.*):(\\\\d+):(\\\\d+)\\\\)\\\\s*$/)||l.match(/at (.*):(\\\\d+):(\\\\d+)\\\\s*$/)||l.match(/@(.*):(\\\\d+):(\\\\d+)\\\\s*$/)}\" +\n    \"var f=m&&m[1];if(f){var g=(typeof globalThis!=='undefined'?globalThis:self);\" +\n    `g.__getmonitorDebugIds=g.__getmonitorDebugIds||{};g.__getmonitorDebugIds[f]='${debugId}';` +\n    '}}catch(e){}})();'\n  )\n}\n","// packages/cli/src/resolveRelease.ts\nimport { execFileSync } from 'node:child_process'\nimport { existsSync, readFileSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\n\n/** Resolves the release identifier to tag uploaded source maps with. Precedence: explicit\n * argument -> GETMONITOR_RELEASE env var -> current git commit SHA (if `directory` is inside\n * a git working tree) -> `version` field of the nearest package.json walking up from\n * `directory`. Matches the SDKs' own optional `release` field so events and source maps\n * for the same deploy carry the same value. */\nexport function resolveRelease(directory: string, explicit?: string): string {\n  if (explicit) return explicit\n  if (process.env.GETMONITOR_RELEASE) return process.env.GETMONITOR_RELEASE\n\n  const gitSha = tryGitSha(directory)\n  if (gitSha) return gitSha\n\n  const packageVersion = tryPackageVersion(directory)\n  if (packageVersion) return packageVersion\n\n  throw new Error(\n    'Could not resolve a release. Pass --release, set GETMONITOR_RELEASE, run inside a git repository, or add a package.json with a \"version\" field.',\n  )\n}\n\nfunction tryGitSha(directory: string): string | undefined {\n  try {\n    return execFileSync('git', ['rev-parse', 'HEAD'], {\n      cwd: directory,\n      encoding: 'utf8',\n      stdio: ['ignore', 'pipe', 'ignore'],\n    }).trim()\n  } catch {\n    return undefined\n  }\n}\n\nfunction tryPackageVersion(directory: string): string | undefined {\n  let dir = directory\n  for (let i = 0; i < 20; i++) {\n    const pkgPath = join(dir, 'package.json')\n    if (existsSync(pkgPath)) {\n      try {\n        const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'))\n        return typeof pkg.version === 'string' ? pkg.version : undefined\n      } catch {\n        return undefined\n      }\n    }\n    const parent = dirname(dir)\n    if (parent === dir) return undefined\n    dir = parent\n  }\n  return undefined\n}\n","// packages/cli/src/uploadSourceMap.ts\n\n/** The one sourcemap-upload host every CLI invocation talks to — not customer-configurable. */\nexport const DEFAULT_API_HOST = 'https://ingest.getmonitor.io'\n\nexport interface UploadSourceMapParams {\n  /**\n   * @internal Test-only override for redirecting delivery to a local mock server (see\n   * cli/e2e/processSourceMaps.spec.ts and the nextjs-config/nuxt e2e suites). Never exposed\n   * through the public CLI/programmatic surface — real usage always ships to\n   * {@link DEFAULT_API_HOST}.\n   */\n  apiHost?: string\n  authToken: string\n  release: string\n  debugId: string\n  filename: string\n  mapContent: string\n  fetchImpl?: typeof fetch\n}\n\n/** POSTs a single source map artifact to ingester-api's `/api/v1/sourcemaps` contract.\n * Throws on any non-2xx response or network failure — the caller (processSourceMaps) decides\n * what \"failed\" means for its own result reporting and disk-write ordering. */\nexport async function uploadSourceMap(params: UploadSourceMapParams): Promise<void> {\n  // Must bind to globalThis, mirroring @getmonitor/core's HttpTransport: browsers' native\n  // fetch() throws \"Illegal invocation\" if called with a `this` other than\n  // Window/WorkerGlobalScope. Here fetchImpl is invoked as a plain function call below\n  // (`fetchImpl(url, init)`, never `params.fetchImpl(...)` or `this.fetchImpl(...)`), so this\n  // bind is defensive/consistent rather than load-bearing for this particular call site — but\n  // keeping the same default expression as HttpTransport avoids a divergent default if this\n  // code is ever refactored into a method.\n  const fetchImpl = params.fetchImpl ?? fetch.bind(globalThis)\n  const apiHost = params.apiHost ?? DEFAULT_API_HOST\n\n  const form = new FormData()\n  form.set('release', params.release)\n  form.set('debugId', params.debugId)\n  form.set('filename', params.filename)\n  form.set('sourcemap', new Blob([params.mapContent], { type: 'application/json' }), `${params.filename}.map`)\n\n  const response = await fetchImpl(`${apiHost}/api/v1/sourcemaps`, {\n    method: 'POST',\n    headers: { Authorization: `Bearer ${params.authToken}` },\n    body: form,\n  })\n\n  if (!response.ok) {\n    throw new Error(`Source map upload failed for ${params.filename}: ${response.status} ${response.statusText}`)\n  }\n}\n","// packages/cli/src/processSourceMaps.ts\nimport { randomUUID } from 'node:crypto'\nimport { readFileSync, rmSync, writeFileSync } from 'node:fs'\nimport { relative } from 'node:path'\nimport { discoverArtifacts } from './discoverArtifacts'\nimport { injectDebugId, InjectedArtifact } from './injectDebugId'\nimport { resolveRelease } from './resolveRelease'\nimport { uploadSourceMap } from './uploadSourceMap'\nimport { ProcessSourceMapsOptions, ProcessSourceMapsResult } from './types'\n\n/**\n * @internal Test-only host override, intersected into `processSourceMaps`'s options but\n * deliberately not part of the exported `ProcessSourceMapsOptions` type — see\n * `uploadSourceMap`'s `UploadSourceMapParams.apiHost`. Used by this package's own e2e suite\n * and by nextjs-config/nuxt's e2e suites (via their own internal overrides) to redirect\n * delivery to a local mock server; real callers must never set it.\n */\ninterface InternalTestOverrides {\n  apiHost?: string\n}\n\n/** Number of artifacts uploaded at once. Each upload is an independent network round trip to\n * ingester-api, so processing them one at a time made wall-clock time scale linearly with\n * artifact count for no reason — a real Next.js build can emit well over a thousand of them,\n * turning a few hundred ms of per-file latency into many minutes of serial waiting. */\nconst UPLOAD_CONCURRENCY = 20\n\n/** Finds every JS/map artifact pair under `options.directory`, and for each one: injects a\n * debug ID, uploads the tagged source map, and — only on a successful upload — writes the\n * debug-ID-injected JS back to disk and deletes the `.map` file. An artifact whose upload\n * fails is left completely untouched on disk, so it can be retried by re-running this\n * function against the same directory. Artifacts are uploaded concurrently (bounded by\n * `UPLOAD_CONCURRENCY`), but `result.uploaded`/`result.failed` are always ordered to match\n * `discoverArtifacts`'s output, regardless of which upload happens to finish first. */\nexport async function processSourceMaps(\n  options: ProcessSourceMapsOptions & InternalTestOverrides\n): Promise<ProcessSourceMapsResult> {\n  const authToken = options.authToken ?? process.env.GETMONITOR_AUTH_TOKEN\n  if (!authToken) {\n    throw new Error('Missing auth token. Pass --auth-token or set GETMONITOR_AUTH_TOKEN.')\n  }\n\n  const release = resolveRelease(options.directory, options.release)\n  const artifacts = discoverArtifacts(options.directory)\n  // Indexed by each artifact's position in `artifacts` rather than appended in completion\n  // order, so the final result below is deterministic no matter which worker finishes first.\n  const outcomes: Array<{ path: string; ok: boolean }> = new Array(artifacts.length)\n\n  const processOne = async (index: number): Promise<void> => {\n    const artifact = artifacts[index]\n    const debugId = randomUUID()\n    let injected: InjectedArtifact\n\n    try {\n      const originalJs = readFileSync(artifact.jsPath, 'utf8')\n      const originalMap = readFileSync(artifact.mapPath, 'utf8')\n      // injectDebugId is a pure function that throws on malformed map JSON (by design — see\n      // its own doc comment). That's deliberately caught here, alongside upload failures: one\n      // corrupt/unreadable artifact on disk must not abort processing of every other artifact\n      // in the directory, the same failure-isolation principle discoverArtifacts applies to\n      // unreadable files during its walk. Nothing has been uploaded or written yet at this\n      // point, so a thrown injectDebugId or upload failure leaves the artifact's files\n      // completely untouched, and it's safe to report it as `failed` for a retry.\n      injected = injectDebugId(originalJs, originalMap, debugId)\n\n      await uploadSourceMap({\n        apiHost: options.apiHost,\n        authToken,\n        release,\n        debugId,\n        // Relative to options.directory, not the absolute on-disk path — the backend has no\n        // use for (and shouldn't see) the build machine's local filesystem layout.\n        filename: relative(options.directory, artifact.jsPath),\n        mapContent: injected.map,\n        fetchImpl: options.fetchImpl,\n      })\n    } catch (error) {\n      // Surfaced here rather than swallowed: this is the only place the actual failure reason\n      // (injectDebugId's malformed-JSON error, or uploadSourceMap's `status statusText` message)\n      // is available. Without logging it, callers only ever see a bare list of failed paths with\n      // no way to tell an auth failure from a malformed map from a network error.\n      console.error(`Failed to process ${artifact.jsPath}:`, error instanceof Error ? error.message : error)\n      outcomes[index] = { path: artifact.jsPath, ok: false }\n      return\n    }\n\n    try {\n      writeFileSync(artifact.jsPath, injected.js)\n      rmSync(artifact.mapPath)\n      outcomes[index] = { path: artifact.jsPath, ok: true }\n    } catch (cleanupError) {\n      // The upload above already succeeded, so this must never land in `failed` — a caller\n      // retrying failed artifacts would mint a fresh debugId and re-upload, orphaning this\n      // upload server-side under the old one with no way to reconcile the two. The local\n      // cleanup failure (disk full, permission error, file lock) is real and worth knowing\n      // about, so it's surfaced here rather than silently swallowed, but it doesn't change\n      // the artifact's outcome.\n      outcomes[index] = { path: artifact.jsPath, ok: true }\n      console.error(`Uploaded ${artifact.jsPath} but failed to update local files:`, cleanupError)\n    }\n  }\n\n  // A fixed-size pool of workers, each pulling the next unclaimed artifact index off a shared\n  // cursor, bounds concurrency to UPLOAD_CONCURRENCY regardless of how many artifacts there are.\n  let nextIndex = 0\n  const runWorker = async (): Promise<void> => {\n    while (nextIndex < artifacts.length) {\n      const index = nextIndex++\n      await processOne(index)\n    }\n  }\n  const workerCount = Math.min(UPLOAD_CONCURRENCY, artifacts.length)\n  await Promise.all(Array.from({ length: workerCount }, runWorker))\n\n  const result: ProcessSourceMapsResult = { uploaded: [], failed: [] }\n  for (const outcome of outcomes) {\n    ;(outcome.ok ? result.uploaded : result.failed).push(outcome.path)\n  }\n  return result\n}\n"],"names":[],"mappings":";;;;;AAAA;AASA,MAAM,kBAAkB,GAAG,0CAA0C;AAErE;AACA;AACA;AACA;AACA;AACA;AACA,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;AAE7C;;;;AAI2C;AACrC,SAAU,iBAAiB,CAAC,SAAiB,EAAA;IACjD,MAAM,SAAS,GAAe,EAAE;AAChC,IAAA,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;AAC1B,IAAA,OAAO,SAAS;AAClB;AAEA,SAAS,IAAI,CAAC,GAAW,EAAE,SAAqB,EAAA;AAC9C,IAAA,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC;AACtC,QAAA,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE;AACvB,YAAA,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC;QAC3B;aAAO,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE;AAClF,YAAA,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC;AACxC,YAAA,IAAI,OAAO;gBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC5D;IACF;AACF;AAEA,SAAS,cAAc,CAAC,MAAc,EAAA;AACpC,IAAA,MAAM,cAAc,GAAG,2BAA2B,CAAC,MAAM,CAAC;AAC1D,IAAA,IAAI,cAAc,IAAI,UAAU,CAAC,cAAc,CAAC;AAAE,QAAA,OAAO,cAAc;AAEvE,IAAA,MAAM,eAAe,GAAG,CAAA,EAAG,MAAM,MAAM;IACvC,IAAI,UAAU,CAAC,eAAe,CAAC;AAAE,QAAA,OAAO,eAAe;AAEvD,IAAA,OAAO,SAAS;AAClB;AAEA,SAAS,2BAA2B,CAAC,MAAc,EAAA;AACjD,IAAA,IAAI,OAAe;AACnB,IAAA,IAAI;AACF,QAAA,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC;IACxC;AAAE,IAAA,MAAM;;;AAGN,QAAA,OAAO,SAAS;IAClB;IAEA,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AACzD,IAAA,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;AAAE,QAAA,OAAO,SAAS;;;AAI1C,IAAA,MAAM,SAAS,GAAG,OAAO,CAAC,EAAE,CAAC,EAAE,CAAE,CAAC,CAAC,CAAC;AACpC,IAAA,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAA;IAEnD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;AACzC;;ACvEA;AAOA;;;;;;;;;;AAUuC;SACvB,aAAa,CAAC,UAAkB,EAAE,eAAuB,EAAE,OAAe,EAAA;IACxF,MAAM,iBAAiB,GAAG;SACvB,KAAK,CAAC,IAAI;AACV,SAAA,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC;SACtE,IAAI,CAAC,IAAI,CAAC;IAEb,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;AACvC,IAAA,GAAG,CAAC,OAAO,GAAG,OAAO;IAErB,OAAO;QACL,EAAE,EAAE,GAAG,iBAAiB,CAAA,EAAA,EAAK,oBAAoB,CAAC,OAAO,CAAC,CAAA,CAAE;AAC5D,QAAA,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;KACzB;AACH;AAEA;;;;;;;;;;;;;;;;;;AAkB2E;AAC3E,SAAS,oBAAoB,CAAC,OAAe,EAAA;AAC3C,IAAA,QACE,kFAAkF;QAClF,+CAA+C;QAC/C,yHAAyH;QACzH,8EAA8E;AAC9E,QAAA,CAAA,6EAAA,EAAgF,OAAO,CAAA,EAAA,CAAI;AAC3F,QAAA,mBAAmB;AAEvB;;AC7DA;AAKA;;;;AAI+C;AACzC,SAAU,cAAc,CAAC,SAAiB,EAAE,QAAiB,EAAA;AACjE,IAAA,IAAI,QAAQ;AAAE,QAAA,OAAO,QAAQ;AAC7B,IAAA,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB;AAAE,QAAA,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB;AAEzE,IAAA,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC;AACnC,IAAA,IAAI,MAAM;AAAE,QAAA,OAAO,MAAM;AAEzB,IAAA,MAAM,cAAc,GAAG,iBAAiB,CAAC,SAAS,CAAC;AACnD,IAAA,IAAI,cAAc;AAAE,QAAA,OAAO,cAAc;AAEzC,IAAA,MAAM,IAAI,KAAK,CACb,iJAAiJ,CAClJ;AACH;AAEA,SAAS,SAAS,CAAC,SAAiB,EAAA;AAClC,IAAA,IAAI;QACF,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE;AAChD,YAAA,GAAG,EAAE,SAAS;AACd,YAAA,QAAQ,EAAE,MAAM;AAChB,YAAA,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE;IACX;AAAE,IAAA,MAAM;AACN,QAAA,OAAO,SAAS;IAClB;AACF;AAEA,SAAS,iBAAiB,CAAC,SAAiB,EAAA;IAC1C,IAAI,GAAG,GAAG,SAAS;AACnB,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC;AACzC,QAAA,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE;AACvB,YAAA,IAAI;AACF,gBAAA,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACrD,gBAAA,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,GAAG,GAAG,CAAC,OAAO,GAAG,SAAS;YAClE;AAAE,YAAA,MAAM;AACN,gBAAA,OAAO,SAAS;YAClB;QACF;AACA,QAAA,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAC3B,IAAI,MAAM,KAAK,GAAG;AAAE,YAAA,OAAO,SAAS;QACpC,GAAG,GAAG,MAAM;IACd;AACA,IAAA,OAAO,SAAS;AAClB;;ACtDA;AAEA;AACO,MAAM,gBAAgB,GAAG,8BAA8B;AAkB9D;;AAE+E;AACxE,eAAe,eAAe,CAAC,MAA6B,EAAA;;;;;;;;AAQjE,IAAA,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;AAC5D,IAAA,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,gBAAgB;AAElD,IAAA,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE;IAC3B,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC;IACrC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAA,EAAG,MAAM,CAAC,QAAQ,CAAA,IAAA,CAAM,CAAC;IAE5G,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,CAAA,EAAG,OAAO,oBAAoB,EAAE;AAC/D,QAAA,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,SAAS,CAAA,CAAE,EAAE;AACxD,QAAA,IAAI,EAAE,IAAI;AACX,KAAA,CAAC;AAEF,IAAA,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;AAChB,QAAA,MAAM,IAAI,KAAK,CAAC,CAAA,6BAAA,EAAgC,MAAM,CAAC,QAAQ,CAAA,EAAA,EAAK,QAAQ,CAAC,MAAM,CAAA,CAAA,EAAI,QAAQ,CAAC,UAAU,CAAA,CAAE,CAAC;IAC/G;AACF;;AClDA;AAqBA;;;AAGuF;AACvF,MAAM,kBAAkB,GAAG,EAAE;AAE7B;;;;;;AAMuF;AAChF,eAAe,iBAAiB,CACrC,OAAyD,EAAA;IAEzD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB;IACxE,IAAI,CAAC,SAAS,EAAE;AACd,QAAA,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC;IACxF;AAEA,IAAA,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC;IAClE,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC;;;IAGtD,MAAM,QAAQ,GAAyC,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;AAElF,IAAA,MAAM,UAAU,GAAG,OAAO,KAAa,KAAmB;AACxD,QAAA,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC;AACjC,QAAA,MAAM,OAAO,GAAG,UAAU,EAAE;AAC5B,QAAA,IAAI,QAA0B;AAE9B,QAAA,IAAI;YACF,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;YACxD,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;;;;;;;;YAQ1D,QAAQ,GAAG,aAAa,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC;AAE1D,YAAA,MAAM,eAAe,CAAC;gBACpB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,SAAS;gBACT,OAAO;gBACP,OAAO;;;gBAGP,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC;gBACtD,UAAU,EAAE,QAAQ,CAAC,GAAG;gBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;AAC7B,aAAA,CAAC;QACJ;QAAE,OAAO,KAAK,EAAE;;;;;YAKd,OAAO,CAAC,KAAK,CAAC,CAAA,kBAAA,EAAqB,QAAQ,CAAC,MAAM,CAAA,CAAA,CAAG,EAAE,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;AACtG,YAAA,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE;YACtD;QACF;AAEA,QAAA,IAAI;YACF,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAC3C,YAAA,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;AACxB,YAAA,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE;QACvD;QAAE,OAAO,YAAY,EAAE;;;;;;;AAOrB,YAAA,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE;YACrD,OAAO,CAAC,KAAK,CAAC,CAAA,SAAA,EAAY,QAAQ,CAAC,MAAM,CAAA,kCAAA,CAAoC,EAAE,YAAY,CAAC;QAC9F;AACF,IAAA,CAAC;;;IAID,IAAI,SAAS,GAAG,CAAC;AACjB,IAAA,MAAM,SAAS,GAAG,YAA0B;AAC1C,QAAA,OAAO,SAAS,GAAG,SAAS,CAAC,MAAM,EAAE;AACnC,YAAA,MAAM,KAAK,GAAG,SAAS,EAAE;AACzB,YAAA,MAAM,UAAU,CAAC,KAAK,CAAC;QACzB;AACF,IAAA,CAAC;AACD,IAAA,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,MAAM,CAAC;AAClE,IAAA,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;IAEjE,MAAM,MAAM,GAA4B,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;AACpE,IAAA,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE;QAC7B,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IACpE;AACA,IAAA,OAAO,MAAM;AACf;;;;"}
+{"version":3,"file":"index.js","sources":["../src/discoverArtifacts.ts","../src/injectDebugId.ts","../src/resolveRelease.ts","../src/uploadSourceMap.ts","../src/processSourceMaps.ts"],"sourcesContent":["// packages/cli/src/discoverArtifacts.ts\nimport { existsSync, readdirSync, readFileSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\n\nexport interface Artifact {\n  jsPath: string\n  mapPath: string\n}\n\nconst SOURCE_MAPPING_URL = /^\\s*\\/\\/#\\s*sourceMappingURL=(\\S+)\\s*$/gm\n\n// Node recognizes three JS module extensions with runtime meaning (`.js`, `.mjs` for explicit\n// ESM, `.cjs` for explicit CommonJS regardless of the nearest package.json's \"type\") — all three\n// show up as real build output. Nitro's node-server preset (used by `@getmonitor/nuxt`'s e2e\n// test), for one, emits `.output/server/**/*.mjs` unconditionally: verified against a real\n// `nuxt build`, where a `.js`-only match left every server chunk's `.map` file undiscovered and\n// unstripped even though `.output/` itself was already fully written by the time discovery ran.\nconst JS_EXTENSIONS = ['.js', '.mjs', '.cjs']\n\n/** Recursively finds every JS file (`.js`, `.mjs`, `.cjs`) under `directory` and resolves its\n * source map path primarily via its `//# sourceMappingURL=` comment (resolved relative to the\n * JS file's own directory), falling back to same-basename-plus-`.map` when there's no comment,\n * the comment references a data: URI, or the referenced file doesn't exist. A JS file with no\n * resolvable map either way is skipped. */\nexport function discoverArtifacts(directory: string): Artifact[] {\n  const artifacts: Artifact[] = []\n  walk(directory, artifacts)\n  return artifacts\n}\n\nfunction walk(dir: string, artifacts: Artifact[]): void {\n  for (const entry of readdirSync(dir, { withFileTypes: true })) {\n    const fullPath = join(dir, entry.name)\n    if (entry.isDirectory()) {\n      walk(fullPath, artifacts)\n    } else if (entry.isFile() && JS_EXTENSIONS.some((ext) => entry.name.endsWith(ext))) {\n      const mapPath = resolveMapPath(fullPath)\n      if (mapPath) artifacts.push({ jsPath: fullPath, mapPath })\n    }\n  }\n}\n\nfunction resolveMapPath(jsPath: string): string | undefined {\n  const commentMapPath = readSourceMappingUrlComment(jsPath)\n  if (commentMapPath && existsSync(commentMapPath)) return commentMapPath\n\n  const fallbackMapPath = `${jsPath}.map`\n  if (existsSync(fallbackMapPath)) return fallbackMapPath\n\n  return undefined\n}\n\nfunction readSourceMappingUrlComment(jsPath: string): string | undefined {\n  let content: string\n  try {\n    content = readFileSync(jsPath, 'utf8')\n  } catch {\n    // Unreadable file (permission denied, broken symlink, deleted mid-walk, etc.) — treat it\n    // like \"no comment found\" rather than aborting the whole discoverArtifacts() walk.\n    return undefined\n  }\n\n  const matches = [...content.matchAll(SOURCE_MAPPING_URL)]\n  if (matches.length === 0) return undefined\n\n  // The LAST sourceMappingURL comment in the file wins, matching how bundlers/browsers treat\n  // concatenated/reprocessed output — later comments supersede earlier ones.\n  const reference = matches.at(-1)![1]\n  if (reference.startsWith('data:')) return undefined // embedded map, nothing to discover on disk\n\n  return join(dirname(jsPath), reference)\n}\n","// packages/cli/src/injectDebugId.ts\n\nexport interface InjectedArtifact {\n  js: string\n  map: string\n}\n\n/** Computes the debug-ID-injected JS content and the debug-ID-tagged source map JSON, in\n * memory — callers decide whether/when to persist the result to disk (processSourceMaps\n * only writes it after a successful upload, so a failed upload never leaves partially\n * mutated files behind). The injected JS also has its `//# sourceMappingURL=` comment(s)\n * removed, since the source map it names is only ever kept in GetMonitor's backend after\n * a successful upload — never served publicly alongside it.\n *\n * `originalMapJson` must be valid JSON — this is a pure function with no fallback to\n * degrade to (unlike discoverArtifacts, which can skip an unreadable file, this function's\n * caller expects a definite result), so a malformed map is left to throw via JSON.parse\n * rather than being swallowed here. */\nexport function injectDebugId(originalJs: string, originalMapJson: string, debugId: string): InjectedArtifact {\n  const withoutMapComment = originalJs\n    .split('\\n')\n    .filter((line) => !line.trimStart().startsWith('//# sourceMappingURL='))\n    .join('\\n')\n\n  const map = JSON.parse(originalMapJson)\n  map.debugId = debugId\n\n  return {\n    js: `${withoutMapComment}\\n${buildInjectedSnippet(debugId)}`,\n    map: JSON.stringify(map),\n  }\n}\n\n/** At load time, captures this statement's own `Error().stack`, extracts this file's\n * identity from it using the same frame-shape @getmonitor/core's parseStackTrace parses for\n * real errors (V8's `at ... (file:line:col)`, V8's bare `at file:line:col`, and Gecko's\n * `fn@file:line:col`), and registers the debug ID under that identity. Like parseStackTrace,\n * it scans every stack line and takes the first one that matches any of those shapes, rather\n * than assuming a fixed line index — V8 prefixes an `\"ErrorType: message\"` header line that\n * Gecko and Safari don't emit, so a fixed index would grab the wrong frame (or the wrong\n * file's identity) on non-V8 engines; the header line simply fails to match any frame regex\n * and is skipped automatically. A later real error whose frame.filename is parsed from the\n * same JS-engine stack serialization will look up the same key. Wrapped in try/catch so any\n * parsing edge case can never break the host app; wrapped in an IIFE so its locals don't leak\n * into the file's module scope.\n *\n * `debugId` is interpolated unescaped into the generated snippet's string literal. That's\n * safe today because every caller in this system sources `debugId` from\n * `crypto.randomUUID()` (a later task), which can never contain a quote or backslash — but\n * this function itself doesn't enforce that shape, so a caller passing an arbitrary string\n * containing `'` or `\\` would produce invalid/injected JS here. Flagged, not fixed, since\n * validating/escaping isn't part of this function's specified contract. */\nfunction buildInjectedSnippet(debugId: string): string {\n  return (\n    \";(function(){try{var s=(new Error()).stack||'';var ls=s.split('\\\\n');var m=null;\" +\n    'for(var i=0;i<ls.length&&!m;i++){var l=ls[i];' +\n    \"m=l.match(/\\\\((.*):(\\\\d+):(\\\\d+)\\\\)\\\\s*$/)||l.match(/at (.*):(\\\\d+):(\\\\d+)\\\\s*$/)||l.match(/@(.*):(\\\\d+):(\\\\d+)\\\\s*$/)}\" +\n    \"var f=m&&m[1];if(f){var g=(typeof globalThis!=='undefined'?globalThis:self);\" +\n    `g.__getmonitorDebugIds=g.__getmonitorDebugIds||{};g.__getmonitorDebugIds[f]='${debugId}';` +\n    '}}catch(e){}})();'\n  )\n}\n","// packages/cli/src/resolveRelease.ts\nimport { execFileSync } from 'node:child_process'\nimport { existsSync, readFileSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\n\n/** Resolves the release identifier to tag uploaded source maps with. Precedence: explicit\n * argument -> GETMONITOR_RELEASE env var -> current git commit SHA (if `directory` is inside\n * a git working tree) -> `version` field of the nearest package.json walking up from\n * `directory`. Matches the SDKs' own optional `release` field so events and source maps\n * for the same deploy carry the same value. */\nexport function resolveRelease(directory: string, explicit?: string): string {\n  if (explicit) return explicit\n  if (process.env.GETMONITOR_RELEASE) return process.env.GETMONITOR_RELEASE\n\n  const gitSha = tryGitSha(directory)\n  if (gitSha) return gitSha\n\n  const packageVersion = tryPackageVersion(directory)\n  if (packageVersion) return packageVersion\n\n  throw new Error(\n    'Could not resolve a release. Pass --release, set GETMONITOR_RELEASE, run inside a git repository, or add a package.json with a \"version\" field.',\n  )\n}\n\nfunction tryGitSha(directory: string): string | undefined {\n  try {\n    return execFileSync('git', ['rev-parse', 'HEAD'], {\n      cwd: directory,\n      encoding: 'utf8',\n      stdio: ['ignore', 'pipe', 'ignore'],\n    }).trim()\n  } catch {\n    return undefined\n  }\n}\n\nfunction tryPackageVersion(directory: string): string | undefined {\n  let dir = directory\n  for (let i = 0; i < 20; i++) {\n    const pkgPath = join(dir, 'package.json')\n    if (existsSync(pkgPath)) {\n      try {\n        const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'))\n        return typeof pkg.version === 'string' ? pkg.version : undefined\n      } catch {\n        return undefined\n      }\n    }\n    const parent = dirname(dir)\n    if (parent === dir) return undefined\n    dir = parent\n  }\n  return undefined\n}\n","// packages/cli/src/uploadSourceMap.ts\n\n/** The one sourcemap-upload host every CLI invocation talks to — not customer-configurable. */\nexport const DEFAULT_API_HOST = 'https://track.getmonitor.io'\n\nexport interface UploadSourceMapParams {\n  /**\n   * @internal Test-only override for redirecting delivery to a local mock server (see\n   * cli/e2e/processSourceMaps.spec.ts and the nextjs-config/nuxt e2e suites). Never exposed\n   * through the public CLI/programmatic surface — real usage always ships to\n   * {@link DEFAULT_API_HOST}.\n   */\n  apiHost?: string\n  authToken: string\n  release: string\n  debugId: string\n  filename: string\n  mapContent: string\n  fetchImpl?: typeof fetch\n}\n\n/** POSTs a single source map artifact to ingester-api's `/api/v1/sourcemaps` contract.\n * Throws on any non-2xx response or network failure — the caller (processSourceMaps) decides\n * what \"failed\" means for its own result reporting and disk-write ordering. */\nexport async function uploadSourceMap(params: UploadSourceMapParams): Promise<void> {\n  // Must bind to globalThis, mirroring @getmonitor/core's HttpTransport: browsers' native\n  // fetch() throws \"Illegal invocation\" if called with a `this` other than\n  // Window/WorkerGlobalScope. Here fetchImpl is invoked as a plain function call below\n  // (`fetchImpl(url, init)`, never `params.fetchImpl(...)` or `this.fetchImpl(...)`), so this\n  // bind is defensive/consistent rather than load-bearing for this particular call site — but\n  // keeping the same default expression as HttpTransport avoids a divergent default if this\n  // code is ever refactored into a method.\n  const fetchImpl = params.fetchImpl ?? fetch.bind(globalThis)\n  const apiHost = params.apiHost ?? DEFAULT_API_HOST\n\n  const form = new FormData()\n  form.set('release', params.release)\n  form.set('debugId', params.debugId)\n  form.set('filename', params.filename)\n  form.set('sourcemap', new Blob([params.mapContent], { type: 'application/json' }), `${params.filename}.map`)\n\n  const response = await fetchImpl(`${apiHost}/api/v1/sourcemaps`, {\n    method: 'POST',\n    headers: { Authorization: `Bearer ${params.authToken}` },\n    body: form,\n  })\n\n  if (!response.ok) {\n    // Deliberately excludes `params.filename` — a real deployment can have hundreds/thousands\n    // of artifacts fail identically (e.g. one bad auth token), and processSourceMaps\n    // deduplicates these messages to log the reason once instead of once per file. Baking the\n    // filename in here would make every message unique and defeat that dedup.\n    throw new Error(`${response.status} ${response.statusText}`)\n  }\n}\n","// packages/cli/src/processSourceMaps.ts\nimport { randomUUID } from 'node:crypto'\nimport { readFileSync, rmSync, writeFileSync } from 'node:fs'\nimport { relative } from 'node:path'\nimport { discoverArtifacts } from './discoverArtifacts'\nimport { injectDebugId, InjectedArtifact } from './injectDebugId'\nimport { resolveRelease } from './resolveRelease'\nimport { uploadSourceMap } from './uploadSourceMap'\nimport { ProcessSourceMapsOptions, ProcessSourceMapsResult } from './types'\n\n/**\n * @internal Test-only host override, intersected into `processSourceMaps`'s options but\n * deliberately not part of the exported `ProcessSourceMapsOptions` type — see\n * `uploadSourceMap`'s `UploadSourceMapParams.apiHost`. Used by this package's own e2e suite\n * and by nextjs-config/nuxt's e2e suites (via their own internal overrides) to redirect\n * delivery to a local mock server; real callers must never set it.\n */\ninterface InternalTestOverrides {\n  apiHost?: string\n}\n\n/** Number of artifacts uploaded at once. Each upload is an independent network round trip to\n * ingester-api, so processing them one at a time made wall-clock time scale linearly with\n * artifact count for no reason — a real Next.js build can emit well over a thousand of them,\n * turning a few hundred ms of per-file latency into many minutes of serial waiting. */\nconst UPLOAD_CONCURRENCY = 20\n\n/** Finds every JS/map artifact pair under `options.directory`, and for each one: injects a\n * debug ID, uploads the tagged source map, and — only on a successful upload — writes the\n * debug-ID-injected JS back to disk and deletes the `.map` file. An artifact whose upload\n * fails is left completely untouched on disk, so it can be retried by re-running this\n * function against the same directory. Artifacts are uploaded concurrently (bounded by\n * `UPLOAD_CONCURRENCY`), but `result.uploaded`/`result.failed` are always ordered to match\n * `discoverArtifacts`'s output, regardless of which upload happens to finish first. */\nexport async function processSourceMaps(\n  options: ProcessSourceMapsOptions & InternalTestOverrides\n): Promise<ProcessSourceMapsResult> {\n  const authToken = options.authToken ?? process.env.GETMONITOR_AUTH_TOKEN\n  if (!authToken) {\n    throw new Error('Missing auth token. Pass --auth-token or set GETMONITOR_AUTH_TOKEN.')\n  }\n\n  const release = resolveRelease(options.directory, options.release)\n  const artifacts = discoverArtifacts(options.directory)\n  // Indexed by each artifact's position in `artifacts` rather than appended in completion\n  // order, so the final result below is deterministic no matter which worker finishes first.\n  type Outcome =\n    | { path: string; kind: 'uploaded' }\n    | { path: string; kind: 'failed' }\n    | { path: string; kind: 'skipped'; reason: string }\n  const outcomes: Outcome[] = new Array(artifacts.length)\n\n  const processOne = async (index: number): Promise<void> => {\n    const artifact = artifacts[index]\n    const debugId = randomUUID()\n    let injected: InjectedArtifact\n\n    // Local step: reading the artifact and injecting its debug ID. A failure here (unreadable\n    // file, malformed map JSON) means the build's own output is broken — that's a real bug\n    // worth failing CI over, so it's tracked in `failed` and logged per-file: with a genuine\n    // local bug there are normally only one or a handful of these, unlike a systemic upload\n    // outage below.\n    try {\n      const originalJs = readFileSync(artifact.jsPath, 'utf8')\n      const originalMap = readFileSync(artifact.mapPath, 'utf8')\n      // injectDebugId is a pure function that throws on malformed map JSON (by design — see\n      // its own doc comment). One corrupt/unreadable artifact on disk must not abort\n      // processing of every other artifact in the directory, the same failure-isolation\n      // principle discoverArtifacts applies to unreadable files during its walk. Nothing has\n      // been uploaded or written yet at this point, so a thrown injectDebugId failure leaves\n      // the artifact's files completely untouched, and it's safe to report it as `failed` for\n      // a retry.\n      injected = injectDebugId(originalJs, originalMap, debugId)\n    } catch (error) {\n      console.error(`Failed to process ${artifact.jsPath}:`, error instanceof Error ? error.message : error)\n      outcomes[index] = { path: artifact.jsPath, kind: 'failed' }\n      return\n    }\n\n    // Remote step: uploading to the ingest API. Unlike the local step above, this artifact was\n    // perfectly fine — the *endpoint* rejected the request or was unreachable (bad/expired auth\n    // token, network outage, backend 5xx). That's an infra/connectivity problem outside this\n    // build's control, not a bug in it, so it's tracked separately in `skipped` (never `failed`)\n    // and deliberately NOT logged per-file here: an outage or bad token fails every one of\n    // potentially thousands of artifacts identically, and logging each one would drown out\n    // everything else in the build's output. The deduplicated reason is logged once, after all\n    // artifacts finish, by the summary block below.\n    try {\n      await uploadSourceMap({\n        apiHost: options.apiHost,\n        authToken,\n        release,\n        debugId,\n        // Relative to options.directory, not the absolute on-disk path — the backend has no\n        // use for (and shouldn't see) the build machine's local filesystem layout.\n        filename: relative(options.directory, artifact.jsPath),\n        mapContent: injected.map,\n        fetchImpl: options.fetchImpl,\n      })\n    } catch (error) {\n      outcomes[index] = {\n        path: artifact.jsPath,\n        kind: 'skipped',\n        reason: error instanceof Error ? error.message : String(error),\n      }\n      return\n    }\n\n    try {\n      writeFileSync(artifact.jsPath, injected.js)\n      rmSync(artifact.mapPath)\n      outcomes[index] = { path: artifact.jsPath, kind: 'uploaded' }\n    } catch (cleanupError) {\n      // The upload above already succeeded, so this must never land in `failed` or `skipped` —\n      // a caller retrying either would mint a fresh debugId and re-upload, orphaning this\n      // upload server-side under the old one with no way to reconcile the two. The local\n      // cleanup failure (disk full, permission error, file lock) is real and worth knowing\n      // about, so it's surfaced here rather than silently swallowed, but it doesn't change\n      // the artifact's outcome.\n      outcomes[index] = { path: artifact.jsPath, kind: 'uploaded' }\n      console.error(`Uploaded ${artifact.jsPath} but failed to update local files:`, cleanupError)\n    }\n  }\n\n  // A fixed-size pool of workers, each pulling the next unclaimed artifact index off a shared\n  // cursor, bounds concurrency to UPLOAD_CONCURRENCY regardless of how many artifacts there are.\n  let nextIndex = 0\n  const runWorker = async (): Promise<void> => {\n    while (nextIndex < artifacts.length) {\n      const index = nextIndex++\n      await processOne(index)\n    }\n  }\n  const workerCount = Math.min(UPLOAD_CONCURRENCY, artifacts.length)\n  await Promise.all(Array.from({ length: workerCount }, runWorker))\n\n  const result: ProcessSourceMapsResult = { uploaded: [], failed: [], skipped: [] }\n  // Counts occurrences of each distinct skip reason, preserving first-seen order, so the\n  // summary below reads one line per *kind* of problem rather than one line per file.\n  const skipReasonCounts = new Map<string, number>()\n  for (const outcome of outcomes) {\n    if (outcome.kind === 'uploaded') result.uploaded.push(outcome.path)\n    else if (outcome.kind === 'failed') result.failed.push(outcome.path)\n    else {\n      result.skipped.push(outcome.path)\n      skipReasonCounts.set(outcome.reason, (skipReasonCounts.get(outcome.reason) ?? 0) + 1)\n    }\n  }\n\n  if (result.skipped.length > 0) {\n    console.warn(`GetMonitor: could not upload ${result.skipped.length} source map(s); continuing without them.`)\n    for (const [reason, count] of skipReasonCounts) {\n      console.warn(`  - ${reason} (${count}x)`)\n    }\n  }\n\n  return result\n}\n"],"names":[],"mappings":";;;;;AAAA;AASA,MAAM,kBAAkB,GAAG,0CAA0C;AAErE;AACA;AACA;AACA;AACA;AACA;AACA,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;AAE7C;;;;AAI2C;AACrC,SAAU,iBAAiB,CAAC,SAAiB,EAAA;IACjD,MAAM,SAAS,GAAe,EAAE;AAChC,IAAA,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;AAC1B,IAAA,OAAO,SAAS;AAClB;AAEA,SAAS,IAAI,CAAC,GAAW,EAAE,SAAqB,EAAA;AAC9C,IAAA,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC;AACtC,QAAA,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE;AACvB,YAAA,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC;QAC3B;aAAO,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE;AAClF,YAAA,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC;AACxC,YAAA,IAAI,OAAO;gBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC5D;IACF;AACF;AAEA,SAAS,cAAc,CAAC,MAAc,EAAA;AACpC,IAAA,MAAM,cAAc,GAAG,2BAA2B,CAAC,MAAM,CAAC;AAC1D,IAAA,IAAI,cAAc,IAAI,UAAU,CAAC,cAAc,CAAC;AAAE,QAAA,OAAO,cAAc;AAEvE,IAAA,MAAM,eAAe,GAAG,CAAA,EAAG,MAAM,MAAM;IACvC,IAAI,UAAU,CAAC,eAAe,CAAC;AAAE,QAAA,OAAO,eAAe;AAEvD,IAAA,OAAO,SAAS;AAClB;AAEA,SAAS,2BAA2B,CAAC,MAAc,EAAA;AACjD,IAAA,IAAI,OAAe;AACnB,IAAA,IAAI;AACF,QAAA,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC;IACxC;AAAE,IAAA,MAAM;;;AAGN,QAAA,OAAO,SAAS;IAClB;IAEA,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AACzD,IAAA,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;AAAE,QAAA,OAAO,SAAS;;;AAI1C,IAAA,MAAM,SAAS,GAAG,OAAO,CAAC,EAAE,CAAC,EAAE,CAAE,CAAC,CAAC,CAAC;AACpC,IAAA,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAA;IAEnD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;AACzC;;ACvEA;AAOA;;;;;;;;;;AAUuC;SACvB,aAAa,CAAC,UAAkB,EAAE,eAAuB,EAAE,OAAe,EAAA;IACxF,MAAM,iBAAiB,GAAG;SACvB,KAAK,CAAC,IAAI;AACV,SAAA,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,uBAAuB,CAAC;SACtE,IAAI,CAAC,IAAI,CAAC;IAEb,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;AACvC,IAAA,GAAG,CAAC,OAAO,GAAG,OAAO;IAErB,OAAO;QACL,EAAE,EAAE,GAAG,iBAAiB,CAAA,EAAA,EAAK,oBAAoB,CAAC,OAAO,CAAC,CAAA,CAAE;AAC5D,QAAA,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;KACzB;AACH;AAEA;;;;;;;;;;;;;;;;;;AAkB2E;AAC3E,SAAS,oBAAoB,CAAC,OAAe,EAAA;AAC3C,IAAA,QACE,kFAAkF;QAClF,+CAA+C;QAC/C,yHAAyH;QACzH,8EAA8E;AAC9E,QAAA,CAAA,6EAAA,EAAgF,OAAO,CAAA,EAAA,CAAI;AAC3F,QAAA,mBAAmB;AAEvB;;AC7DA;AAKA;;;;AAI+C;AACzC,SAAU,cAAc,CAAC,SAAiB,EAAE,QAAiB,EAAA;AACjE,IAAA,IAAI,QAAQ;AAAE,QAAA,OAAO,QAAQ;AAC7B,IAAA,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB;AAAE,QAAA,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB;AAEzE,IAAA,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC;AACnC,IAAA,IAAI,MAAM;AAAE,QAAA,OAAO,MAAM;AAEzB,IAAA,MAAM,cAAc,GAAG,iBAAiB,CAAC,SAAS,CAAC;AACnD,IAAA,IAAI,cAAc;AAAE,QAAA,OAAO,cAAc;AAEzC,IAAA,MAAM,IAAI,KAAK,CACb,iJAAiJ,CAClJ;AACH;AAEA,SAAS,SAAS,CAAC,SAAiB,EAAA;AAClC,IAAA,IAAI;QACF,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE;AAChD,YAAA,GAAG,EAAE,SAAS;AACd,YAAA,QAAQ,EAAE,MAAM;AAChB,YAAA,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE;IACX;AAAE,IAAA,MAAM;AACN,QAAA,OAAO,SAAS;IAClB;AACF;AAEA,SAAS,iBAAiB,CAAC,SAAiB,EAAA;IAC1C,IAAI,GAAG,GAAG,SAAS;AACnB,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC;AACzC,QAAA,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE;AACvB,YAAA,IAAI;AACF,gBAAA,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACrD,gBAAA,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,GAAG,GAAG,CAAC,OAAO,GAAG,SAAS;YAClE;AAAE,YAAA,MAAM;AACN,gBAAA,OAAO,SAAS;YAClB;QACF;AACA,QAAA,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;QAC3B,IAAI,MAAM,KAAK,GAAG;AAAE,YAAA,OAAO,SAAS;QACpC,GAAG,GAAG,MAAM;IACd;AACA,IAAA,OAAO,SAAS;AAClB;;ACtDA;AAEA;AACO,MAAM,gBAAgB,GAAG,6BAA6B;AAkB7D;;AAE+E;AACxE,eAAe,eAAe,CAAC,MAA6B,EAAA;;;;;;;;AAQjE,IAAA,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;AAC5D,IAAA,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,gBAAgB;AAElD,IAAA,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE;IAC3B,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC;IACrC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAA,EAAG,MAAM,CAAC,QAAQ,CAAA,IAAA,CAAM,CAAC;IAE5G,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,CAAA,EAAG,OAAO,oBAAoB,EAAE;AAC/D,QAAA,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,SAAS,CAAA,CAAE,EAAE;AACxD,QAAA,IAAI,EAAE,IAAI;AACX,KAAA,CAAC;AAEF,IAAA,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;;;;;AAKhB,QAAA,MAAM,IAAI,KAAK,CAAC,CAAA,EAAG,QAAQ,CAAC,MAAM,CAAA,CAAA,EAAI,QAAQ,CAAC,UAAU,CAAA,CAAE,CAAC;IAC9D;AACF;;ACtDA;AAqBA;;;AAGuF;AACvF,MAAM,kBAAkB,GAAG,EAAE;AAE7B;;;;;;AAMuF;AAChF,eAAe,iBAAiB,CACrC,OAAyD,EAAA;IAEzD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB;IACxE,IAAI,CAAC,SAAS,EAAE;AACd,QAAA,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC;IACxF;AAEA,IAAA,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC;IAClE,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC;IAOtD,MAAM,QAAQ,GAAc,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;AAEvD,IAAA,MAAM,UAAU,GAAG,OAAO,KAAa,KAAmB;AACxD,QAAA,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC;AACjC,QAAA,MAAM,OAAO,GAAG,UAAU,EAAE;AAC5B,QAAA,IAAI,QAA0B;;;;;;AAO9B,QAAA,IAAI;YACF,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;YACxD,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;;;;;;;;YAQ1D,QAAQ,GAAG,aAAa,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC;QAC5D;QAAE,OAAO,KAAK,EAAE;YACd,OAAO,CAAC,KAAK,CAAC,CAAA,kBAAA,EAAqB,QAAQ,CAAC,MAAM,CAAA,CAAA,CAAG,EAAE,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;AACtG,YAAA,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC3D;QACF;;;;;;;;;AAUA,QAAA,IAAI;AACF,YAAA,MAAM,eAAe,CAAC;gBACpB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,SAAS;gBACT,OAAO;gBACP,OAAO;;;gBAGP,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC;gBACtD,UAAU,EAAE,QAAQ,CAAC,GAAG;gBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;AAC7B,aAAA,CAAC;QACJ;QAAE,OAAO,KAAK,EAAE;YACd,QAAQ,CAAC,KAAK,CAAC,GAAG;gBAChB,IAAI,EAAE,QAAQ,CAAC,MAAM;AACrB,gBAAA,IAAI,EAAE,SAAS;AACf,gBAAA,MAAM,EAAE,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;aAC/D;YACD;QACF;AAEA,QAAA,IAAI;YACF,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAC3C,YAAA,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;AACxB,YAAA,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;QAC/D;QAAE,OAAO,YAAY,EAAE;;;;;;;AAOrB,YAAA,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;YAC7D,OAAO,CAAC,KAAK,CAAC,CAAA,SAAA,EAAY,QAAQ,CAAC,MAAM,CAAA,kCAAA,CAAoC,EAAE,YAAY,CAAC;QAC9F;AACF,IAAA,CAAC;;;IAID,IAAI,SAAS,GAAG,CAAC;AACjB,IAAA,MAAM,SAAS,GAAG,YAA0B;AAC1C,QAAA,OAAO,SAAS,GAAG,SAAS,CAAC,MAAM,EAAE;AACnC,YAAA,MAAM,KAAK,GAAG,SAAS,EAAE;AACzB,YAAA,MAAM,UAAU,CAAC,KAAK,CAAC;QACzB;AACF,IAAA,CAAC;AACD,IAAA,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,MAAM,CAAC;AAClE,IAAA,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;AAEjE,IAAA,MAAM,MAAM,GAA4B,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;;;AAGjF,IAAA,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB;AAClD,IAAA,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE;AAC9B,QAAA,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;YAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;AAC9D,aAAA,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;aAC/D;YACH,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YACjC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvF;IACF;IAEA,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;QAC7B,OAAO,CAAC,IAAI,CAAC,CAAA,6BAAA,EAAgC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAA,wCAAA,CAA0C,CAAC;QAC7G,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,gBAAgB,EAAE;YAC9C,OAAO,CAAC,IAAI,CAAC,CAAA,IAAA,EAAO,MAAM,CAAA,EAAA,EAAK,KAAK,CAAA,EAAA,CAAI,CAAC;QAC3C;IACF;AAEA,IAAA,OAAO,MAAM;AACf;;;;"}

package/dist/types.d.ts

@@ -6,5 +6,11 @@ export interface ProcessSourceMapsOptions {
 }
 export interface ProcessSourceMapsResult {
     uploaded: string[];
+    /** Artifacts whose local files (JS/map) were corrupt or unreadable — a real bug in this
+     * build's output, worth failing CI over. Never includes remote/upload failures; see `skipped`. */
     failed: string[];
+    /** Artifacts whose upload to the ingest API failed — auth, connection, timeout, or a 5xx
+     * response. Deliberately kept separate from `failed`: these are infra/connectivity problems
+     * outside this build's control, not a bug in it, so callers must not fail the build over them. */
+    skipped: string[];
 }

package/dist/uploadSourceMap.d.ts

@@ -1,5 +1,5 @@
 /** The one sourcemap-upload host every CLI invocation talks to — not customer-configurable. */
-export declare const DEFAULT_API_HOST = "https://ingest.getmonitor.io";
+export declare const DEFAULT_API_HOST = "https://track.getmonitor.io";
 export interface UploadSourceMapParams {
     /**
      * @internal Test-only override for redirecting delivery to a local mock server (see

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getmonitor/cli",
-  "version": "0.3.3",
+  "version": "0.3.5",
   "license": "Apache-2.0",
   "type": "module",
   "main": "dist/index.cjs",