@goliapkg/sentori-cli 0.2.0 → 0.2.1

package/lib/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/lib/index.js

@@ -0,0 +1,118 @@
+#!/usr/bin/env node
+import { parseArgs } from 'node:util';
+import { uploadSourcemaps } from './upload.js';
+const HELP = `sentori-cli — upload release artifacts to Sentori
+
+Usage:
+  sentori-cli upload sourcemap [options] <path...>
+
+  <path>   one or more files or directories. A directory is scanned
+           (one level) for *.map and *.js / *.bundle / *.hbc files.
+           A file given explicitly is uploaded as-is.
+
+Options:
+  --release <r>     release identifier — MUST equal the value the SDK
+                    reports via init({ release }). Required. A mismatch
+                    means the dashboard silently can't symbolicate.
+  --token <t>       Sentori token (or set $SENTORI_TOKEN).
+  --api-url <url>   Sentori API base (default https://api.sentori.golia.jp,
+                    or $SENTORI_API_URL). For a self-hosted instance, your
+                    host. (Accepts --ingest-url as an alias.)
+  --dry-run         list what would be uploaded; don't upload.
+  -h, --help        show this help.
+
+React Native / Hermes: in a release build the *minified* map (Metro)
+and the *bytecode* map (Hermes) must be composed first —
+  npx react-native bundle --platform ios --dev false \\
+    --entry-file index.js --bundle-output main.jsbundle \\
+    --sourcemap-output main.jsbundle.packager.map
+  node node_modules/react-native/scripts/compose-source-maps.js \\
+    main.jsbundle.packager.map main.jsbundle.hbc.map -o main.jsbundle.map
+then \`sentori-cli upload sourcemap --release "<app>@<version>+<build>" main.jsbundle.map main.jsbundle\`.
+(Web bundlers emit a usable .map directly — just point at the build dir.)
+`;
+async function main(argv) {
+    if (argv.length === 0 || argv[0] === '-h' || argv[0] === '--help') {
+        console.log(HELP);
+        return 0;
+    }
+    if (argv[0] !== 'upload' || argv[1] !== 'sourcemap') {
+        console.error(`unknown command: ${argv.slice(0, 2).join(' ') || '(none)'}\n`);
+        console.error(HELP);
+        return 2;
+    }
+    let parsed;
+    try {
+        parsed = parseArgs({
+            allowPositionals: true,
+            args: argv.slice(2),
+            options: {
+                'api-url': { type: 'string' },
+                'dry-run': { type: 'boolean' },
+                help: { short: 'h', type: 'boolean' },
+                'ingest-url': { type: 'string' }, // alias, kept for older docs
+                release: { type: 'string' },
+                token: { type: 'string' },
+            },
+        });
+    }
+    catch (e) {
+        console.error(`error: ${e.message}\n`);
+        console.error(HELP);
+        return 2;
+    }
+    const { positionals, values } = parsed;
+    if (values.help) {
+        console.log(HELP);
+        return 0;
+    }
+    const release = values.release;
+    if (!release) {
+        console.error('error: --release is required (must match the SDK’s init({ release }))');
+        return 2;
+    }
+    const dryRun = !!values['dry-run'];
+    const token = values.token ?? process.env.SENTORI_TOKEN;
+    if (!token && !dryRun) {
+        console.error('error: --token (or $SENTORI_TOKEN) is required');
+        return 2;
+    }
+    const apiUrl = values['api-url'] ??
+        values['ingest-url'] ??
+        process.env.SENTORI_API_URL ??
+        'https://api.sentori.golia.jp';
+    if (positionals.length === 0) {
+        console.error('error: at least one path (file or directory) is required');
+        return 2;
+    }
+    try {
+        const result = await uploadSourcemaps({
+            apiUrl,
+            dryRun,
+            paths: positionals,
+            release,
+            token: token ?? '',
+        });
+        if (dryRun) {
+            console.log(`would upload ${result.files.length} file(s) to ${apiUrl.replace(/\/+$/, '')}/admin/api/releases/${encodeURIComponent(release)}/sourcemaps:`);
+            for (const f of result.files)
+                console.log(`  ${f}`);
+        }
+        else {
+            console.log(`uploaded ${result.uploaded} file(s) for release "${release}"`);
+            for (const a of result.artifacts ?? [])
+                console.log(`  ${a.name}  [${a.kind}]`);
+            console.log('done — minified stack traces on this release will now resolve to source.');
+        }
+        return 0;
+    }
+    catch (e) {
+        console.error(`upload failed: ${e.message}`);
+        return 1;
+    }
+}
+main(process.argv.slice(2)).then((code) => process.exit(code), (e) => {
+    console.error(`fatal: ${e.message}`);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAErC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9C,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BZ,CAAA;AAED,KAAK,UAAU,IAAI,CAAC,IAAc;IAChC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACjB,OAAO,CAAC,CAAA;IACV,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;QACpD,OAAO,CAAC,KAAK,CAAC,oBAAoB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,IAAI,CAAC,CAAA;QAC7E,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACnB,OAAO,CAAC,CAAA;IACV,CAAC;IAED,IAAI,MAAM,CAAA;IACV,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC;YACjB,gBAAgB,EAAE,IAAI;YACtB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACnB,OAAO,EAAE;gBACP,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC7B,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC9B,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;gBACrC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,6BAA6B;gBAC/D,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC1B;SACF,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,UAAW,CAAW,CAAC,OAAO,IAAI,CAAC,CAAA;QACjD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACnB,OAAO,CAAC,CAAA;IACV,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,CAAA;IAEtC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACjB,OAAO,CAAC,CAAA;IACV,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAA;QACtF,OAAO,CAAC,CAAA;IACV,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAA;IACvD,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAA;QAC/D,OAAO,CAAC,CAAA;IACV,CAAC;IACD,MAAM,MAAM,GACV,MAAM,CAAC,SAAS,CAAC;QACjB,MAAM,CAAC,YAAY,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,8BAA8B,CAAA;IAChC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAA;QACzE,OAAO,CAAC,CAAA;IACV,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;YACpC,MAAM;YACN,MAAM;YACN,KAAK,EAAE,WAAW;YAClB,OAAO;YACP,KAAK,EAAE,KAAK,IAAI,EAAE;SACnB,CAAC,CAAA;QACF,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CACT,gBAAgB,MAAM,CAAC,KAAK,CAAC,MAAM,eAAe,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,uBAAuB,kBAAkB,CAAC,OAAO,CAAC,cAAc,CAC7I,CAAA;YACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACrD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,QAAQ,yBAAyB,OAAO,GAAG,CAAC,CAAA;YAC3E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,IAAI,EAAE;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,CAAA;YAC/E,OAAO,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAA;QACzF,CAAC;QACD,OAAO,CAAC,CAAA;IACV,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,kBAAmB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;QACvD,OAAO,CAAC,CAAA;IACV,CAAC;AACH,CAAC;AAED,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC9B,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAC5B,CAAC,CAAU,EAAE,EAAE;IACb,OAAO,CAAC,KAAK,CAAC,UAAW,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;IAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CACF,CAAA"}

package/lib/upload.d.ts

@@ -0,0 +1,24 @@
+export type UploadOptions = {
+    release: string;
+    token: string;
+    /** Sentori API base, e.g. https://api.sentori.golia.jp or your host. */
+    apiUrl: string;
+    /** Files or directories. Directories are scanned one level deep. */
+    paths: string[];
+    dryRun?: boolean;
+};
+export type UploadResult = {
+    files: string[];
+    uploaded?: number;
+    artifacts?: {
+        kind: string;
+        name: string;
+    }[];
+};
+/** Resolve `paths` (files or dirs) to a deduped list of files to upload.
+ *  A directory contributes its top-level `.map` / `.js` / `.bundle` /
+ *  `.hbc` files; a file given explicitly is taken as-is (even if its
+ *  extension isn't in the list — the caller asked for it). */
+export declare function collectFiles(paths: string[]): Promise<string[]>;
+export declare function uploadSourcemaps(opts: UploadOptions): Promise<UploadResult>;
+//# sourceMappingURL=upload.d.ts.map

package/lib/upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.d.ts","sourceRoot":"","sources":["../src/upload.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAA;IACd,oEAAoE;IACpE,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAC7C,CAAA;AAED;;;8DAG8D;AAC9D,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAoBrE;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAiCjF"}

package/lib/upload.js

@@ -0,0 +1,65 @@
+import { readFile, readdir, stat } from 'node:fs/promises';
+import { basename, join } from 'node:path';
+// Files worth uploading: source maps, and the bundle they map (so the
+// dashboard can show the minified line too if a frame falls outside
+// the map). `.jsbundle` (iOS) and `.bundle` (Android) are RN's bundle
+// names; `.hbc` is the Hermes bytecode bundle.
+const UPLOADABLE = /\.(map|js|jsbundle|bundle|hbc)$/i;
+/** Resolve `paths` (files or dirs) to a deduped list of files to upload.
+ *  A directory contributes its top-level `.map` / `.js` / `.bundle` /
+ *  `.hbc` files; a file given explicitly is taken as-is (even if its
+ *  extension isn't in the list — the caller asked for it). */
+export async function collectFiles(paths) {
+    const out = [];
+    for (const p of paths) {
+        const s = await stat(p).catch(() => null);
+        if (!s)
+            throw new Error(`no such file or directory: ${p}`);
+        if (s.isDirectory()) {
+            for (const entry of await readdir(p)) {
+                const full = join(p, entry);
+                const es = await stat(full).catch(() => null);
+                if (es?.isFile() && UPLOADABLE.test(entry))
+                    out.push(full);
+            }
+        }
+        else {
+            out.push(p);
+        }
+    }
+    const deduped = [...new Set(out)];
+    if (deduped.length === 0) {
+        throw new Error('no .map / .js / .bundle files found in the given path(s)');
+    }
+    return deduped;
+}
+export async function uploadSourcemaps(opts) {
+    const files = await collectFiles(opts.paths);
+    if (opts.dryRun)
+        return { files };
+    const form = new FormData();
+    for (const f of files) {
+        const buf = await readFile(f);
+        form.append('file', new Blob([buf]), basename(f));
+    }
+    const base = opts.apiUrl.replace(/\/+$/, '');
+    const url = `${base}/admin/api/releases/${encodeURIComponent(opts.release)}/sourcemaps`;
+    const resp = await fetch(url, {
+        body: form,
+        headers: { Authorization: `Bearer ${opts.token}` },
+        method: 'POST',
+    });
+    if (!resp.ok) {
+        let detail = '';
+        try {
+            detail = await resp.text();
+        }
+        catch {
+            // ignore
+        }
+        throw new Error(`${resp.status} ${resp.statusText}${detail ? ` — ${detail.slice(0, 300)}` : ''}`);
+    }
+    const body = (await resp.json().catch(() => ({})));
+    return { artifacts: body.artifacts, files, uploaded: body.uploaded ?? files.length };
+}
+//# sourceMappingURL=upload.js.map

package/lib/upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.js","sourceRoot":"","sources":["../src/upload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAE1C,sEAAsE;AACtE,oEAAoE;AACpE,sEAAsE;AACtE,+CAA+C;AAC/C,MAAM,UAAU,GAAG,kCAAkC,CAAA;AAkBrD;;;8DAG8D;AAC9D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAe;IAChD,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QACzC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAA;QAC1D,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACpB,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;gBAC3B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;gBAC7C,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC5D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACb,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IACjC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAC7E,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAmB;IACxD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5C,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAEjC,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAA;IAC3B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;IACnD,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC5C,MAAM,GAAG,GAAG,GAAG,IAAI,uBAAuB,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAA;IACvF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC5B,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE;QAClD,MAAM,EAAE,MAAM;KACf,CAAC,CAAA;IACF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACjF,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAGhD,CAAA;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,EAAE,CAAA;AACtF,CAAC"}

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@goliapkg/sentori-cli",
-  "version": "0.2.0",
-  "description": "Sentori CLI — upload source maps + other release artifacts to a Sentori server. Thin wrapper that downloads the matching prebuilt Rust binary at install time.",
+  "version": "0.2.1",
+  "description": "Sentori CLI \u2014 upload source maps so dashboard stack traces resolve to your original source.",
   "license": "MIT",
   "homepage": "https://sentori.golia.jp",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/goliajp/sentori.git",
-    "directory": "cli/npm"
+    "directory": "sdk/cli"
   },
   "bugs": {
     "url": "https://github.com/goliajp/sentori/issues"
@@ -15,25 +15,34 @@
   "keywords": [
     "sentori",
     "cli",
-    "sourcemap",
+    "sourcemaps",
     "error-tracking"
   ],
+  "type": "module",
   "bin": {
-    "sentori-cli": "bin/sentori-cli.js"
-  },
-  "scripts": {
-    "postinstall": "node scripts/postinstall.js || echo 'sentori-cli postinstall failed — run `npx @goliapkg/sentori-cli` once you have network'"
+    "sentori-cli": "./lib/index.js"
   },
+  "main": "./lib/index.js",
+  "types": "./lib/index.d.ts",
   "files": [
-    "bin/",
-    "scripts/",
+    "lib/",
+    "src/",
     "README.md"
   ],
   "engines": {
     "node": ">=18"
   },
-  "os": ["darwin", "linux"],
-  "cpu": ["x64", "arm64"],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc --noEmit",
+    "test": "bun test",
+    "prepack": "bun run build"
+  },
+  "devDependencies": {
+    "@types/bun": "latest",
+    "@types/node": "*",
+    "typescript": "^5"
+  },
   "publishConfig": {
     "access": "public"
   }

package/src/__tests__/upload.test.ts

@@ -0,0 +1,121 @@
+import { mkdtemp, rm, writeFile } from 'node:fs/promises'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+
+import { afterEach, beforeEach, describe, expect, test } from 'bun:test'
+
+import { collectFiles, uploadSourcemaps } from '../upload.js'
+
+let dir = ''
+beforeEach(async () => {
+  dir = await mkdtemp(join(tmpdir(), 'sentori-cli-test-'))
+  await writeFile(join(dir, 'main.jsbundle'), '/*bundle*/')
+  await writeFile(join(dir, 'main.jsbundle.map'), '{"version":3}')
+  await writeFile(join(dir, 'app.js'), 'console.log(1)')
+  await writeFile(join(dir, 'app.js.map'), '{"version":3}')
+  await writeFile(join(dir, 'README.txt'), 'not a build artifact')
+})
+afterEach(async () => {
+  await rm(dir, { force: true, recursive: true })
+})
+
+describe('collectFiles', () => {
+  test('a directory yields its .map / .js / .bundle files, not others', async () => {
+    const files = await collectFiles([dir])
+    const names = files.map((f) => f.replace(`${dir}/`, '')).sort()
+    expect(names).toEqual(['app.js', 'app.js.map', 'main.jsbundle', 'main.jsbundle.map'])
+  })
+
+  test('an explicit file is taken as-is regardless of extension', async () => {
+    const files = await collectFiles([join(dir, 'README.txt')])
+    expect(files).toEqual([join(dir, 'README.txt')])
+  })
+
+  test('dedupes when a file is named both directly and via its dir', async () => {
+    const files = await collectFiles([dir, join(dir, 'app.js.map')])
+    expect(files.filter((f) => f.endsWith('app.js.map'))).toHaveLength(1)
+  })
+
+  test('throws on a nonexistent path', async () => {
+    await expect(collectFiles([join(dir, 'nope')])).rejects.toThrow('no such file or directory')
+  })
+
+  test('throws when a directory has no uploadable files', async () => {
+    const empty = await mkdtemp(join(tmpdir(), 'sentori-cli-empty-'))
+    try {
+      await expect(collectFiles([empty])).rejects.toThrow('no .map')
+    } finally {
+      await rm(empty, { force: true, recursive: true })
+    }
+  })
+})
+
+describe('uploadSourcemaps', () => {
+  test('dryRun returns the file list, makes no request', async () => {
+    let called = false
+    const orig = globalThis.fetch
+    globalThis.fetch = (async () => {
+      called = true
+      return new Response()
+    }) as typeof fetch
+    try {
+      const r = await uploadSourcemaps({
+        apiUrl: 'https://api.example.com',
+        dryRun: true,
+        paths: [dir],
+        release: 'app@1.0.0+1',
+        token: 'st_pk_x',
+      })
+      expect(r.files).toHaveLength(4)
+      expect(called).toBe(false)
+    } finally {
+      globalThis.fetch = orig
+    }
+  })
+
+  test('POSTs multipart to /admin/api/releases/<release>/sourcemaps with the token', async () => {
+    const calls: { headers: Headers; url: string }[] = []
+    const orig = globalThis.fetch
+    globalThis.fetch = (async (url: Request | string | URL, init?: RequestInit) => {
+      calls.push({ headers: new Headers(init?.headers), url: String(url) })
+      return new Response(JSON.stringify({ artifacts: [], uploaded: 4 }), {
+        headers: { 'content-type': 'application/json' },
+        status: 200,
+      })
+    }) as typeof fetch
+    try {
+      const r = await uploadSourcemaps({
+        apiUrl: 'https://api.example.com/',
+        paths: [dir],
+        release: 'my app@1.0.0+1',
+        token: 'st_pk_secret',
+      })
+      expect(calls).toHaveLength(1)
+      expect(calls[0]?.url).toBe(
+        'https://api.example.com/admin/api/releases/my%20app%401.0.0%2B1/sourcemaps',
+      )
+      expect(calls[0]?.headers.get('authorization')).toBe('Bearer st_pk_secret')
+      expect(r.uploaded).toBe(4)
+    } finally {
+      globalThis.fetch = orig
+    }
+  })
+
+  test('throws with the server detail on a non-2xx response', async () => {
+    const orig = globalThis.fetch
+    globalThis.fetch = (async () =>
+      new Response('release frozen', { status: 403, statusText: 'Forbidden' })) as typeof fetch
+    try {
+      await expect(
+        uploadSourcemaps({
+          apiUrl: 'https://api.example.com',
+          paths: [dir],
+          release: 'app@1.0.0+1',
+          token: 'st_pk_x',
+        }),
+      ).rejects.toThrow('403 Forbidden — release frozen')
+    } finally {
+      globalThis.fetch = orig
+    }
+  })
+})

package/src/index.ts

@@ -0,0 +1,125 @@
+#!/usr/bin/env node
+import { parseArgs } from 'node:util'
+
+import { uploadSourcemaps } from './upload.js'
+
+const HELP = `sentori-cli — upload release artifacts to Sentori
+
+Usage:
+  sentori-cli upload sourcemap [options] <path...>
+
+  <path>   one or more files or directories. A directory is scanned
+           (one level) for *.map and *.js / *.bundle / *.hbc files.
+           A file given explicitly is uploaded as-is.
+
+Options:
+  --release <r>     release identifier — MUST equal the value the SDK
+                    reports via init({ release }). Required. A mismatch
+                    means the dashboard silently can't symbolicate.
+  --token <t>       Sentori token (or set $SENTORI_TOKEN).
+  --api-url <url>   Sentori API base (default https://api.sentori.golia.jp,
+                    or $SENTORI_API_URL). For a self-hosted instance, your
+                    host. (Accepts --ingest-url as an alias.)
+  --dry-run         list what would be uploaded; don't upload.
+  -h, --help        show this help.
+
+React Native / Hermes: in a release build the *minified* map (Metro)
+and the *bytecode* map (Hermes) must be composed first —
+  npx react-native bundle --platform ios --dev false \\
+    --entry-file index.js --bundle-output main.jsbundle \\
+    --sourcemap-output main.jsbundle.packager.map
+  node node_modules/react-native/scripts/compose-source-maps.js \\
+    main.jsbundle.packager.map main.jsbundle.hbc.map -o main.jsbundle.map
+then \`sentori-cli upload sourcemap --release "<app>@<version>+<build>" main.jsbundle.map main.jsbundle\`.
+(Web bundlers emit a usable .map directly — just point at the build dir.)
+`
+
+async function main(argv: string[]): Promise<number> {
+  if (argv.length === 0 || argv[0] === '-h' || argv[0] === '--help') {
+    console.log(HELP)
+    return 0
+  }
+  if (argv[0] !== 'upload' || argv[1] !== 'sourcemap') {
+    console.error(`unknown command: ${argv.slice(0, 2).join(' ') || '(none)'}\n`)
+    console.error(HELP)
+    return 2
+  }
+
+  let parsed
+  try {
+    parsed = parseArgs({
+      allowPositionals: true,
+      args: argv.slice(2),
+      options: {
+        'api-url': { type: 'string' },
+        'dry-run': { type: 'boolean' },
+        help: { short: 'h', type: 'boolean' },
+        'ingest-url': { type: 'string' }, // alias, kept for older docs
+        release: { type: 'string' },
+        token: { type: 'string' },
+      },
+    })
+  } catch (e) {
+    console.error(`error: ${(e as Error).message}\n`)
+    console.error(HELP)
+    return 2
+  }
+  const { positionals, values } = parsed
+
+  if (values.help) {
+    console.log(HELP)
+    return 0
+  }
+  const release = values.release
+  if (!release) {
+    console.error('error: --release is required (must match the SDK’s init({ release }))')
+    return 2
+  }
+  const dryRun = !!values['dry-run']
+  const token = values.token ?? process.env.SENTORI_TOKEN
+  if (!token && !dryRun) {
+    console.error('error: --token (or $SENTORI_TOKEN) is required')
+    return 2
+  }
+  const apiUrl =
+    values['api-url'] ??
+    values['ingest-url'] ??
+    process.env.SENTORI_API_URL ??
+    'https://api.sentori.golia.jp'
+  if (positionals.length === 0) {
+    console.error('error: at least one path (file or directory) is required')
+    return 2
+  }
+
+  try {
+    const result = await uploadSourcemaps({
+      apiUrl,
+      dryRun,
+      paths: positionals,
+      release,
+      token: token ?? '',
+    })
+    if (dryRun) {
+      console.log(
+        `would upload ${result.files.length} file(s) to ${apiUrl.replace(/\/+$/, '')}/admin/api/releases/${encodeURIComponent(release)}/sourcemaps:`,
+      )
+      for (const f of result.files) console.log(`  ${f}`)
+    } else {
+      console.log(`uploaded ${result.uploaded} file(s) for release "${release}"`)
+      for (const a of result.artifacts ?? []) console.log(`  ${a.name}  [${a.kind}]`)
+      console.log('done — minified stack traces on this release will now resolve to source.')
+    }
+    return 0
+  } catch (e) {
+    console.error(`upload failed: ${(e as Error).message}`)
+    return 1
+  }
+}
+
+main(process.argv.slice(2)).then(
+  (code) => process.exit(code),
+  (e: unknown) => {
+    console.error(`fatal: ${(e as Error).message}`)
+    process.exit(1)
+  },
+)

package/src/upload.ts

@@ -0,0 +1,85 @@
+import { readFile, readdir, stat } from 'node:fs/promises'
+import { basename, join } from 'node:path'
+
+// Files worth uploading: source maps, and the bundle they map (so the
+// dashboard can show the minified line too if a frame falls outside
+// the map). `.jsbundle` (iOS) and `.bundle` (Android) are RN's bundle
+// names; `.hbc` is the Hermes bytecode bundle.
+const UPLOADABLE = /\.(map|js|jsbundle|bundle|hbc)$/i
+
+export type UploadOptions = {
+  release: string
+  token: string
+  /** Sentori API base, e.g. https://api.sentori.golia.jp or your host. */
+  apiUrl: string
+  /** Files or directories. Directories are scanned one level deep. */
+  paths: string[]
+  dryRun?: boolean
+}
+
+export type UploadResult = {
+  files: string[]
+  uploaded?: number
+  artifacts?: { kind: string; name: string }[]
+}
+
+/** Resolve `paths` (files or dirs) to a deduped list of files to upload.
+ *  A directory contributes its top-level `.map` / `.js` / `.bundle` /
+ *  `.hbc` files; a file given explicitly is taken as-is (even if its
+ *  extension isn't in the list — the caller asked for it). */
+export async function collectFiles(paths: string[]): Promise<string[]> {
+  const out: string[] = []
+  for (const p of paths) {
+    const s = await stat(p).catch(() => null)
+    if (!s) throw new Error(`no such file or directory: ${p}`)
+    if (s.isDirectory()) {
+      for (const entry of await readdir(p)) {
+        const full = join(p, entry)
+        const es = await stat(full).catch(() => null)
+        if (es?.isFile() && UPLOADABLE.test(entry)) out.push(full)
+      }
+    } else {
+      out.push(p)
+    }
+  }
+  const deduped = [...new Set(out)]
+  if (deduped.length === 0) {
+    throw new Error('no .map / .js / .bundle files found in the given path(s)')
+  }
+  return deduped
+}
+
+export async function uploadSourcemaps(opts: UploadOptions): Promise<UploadResult> {
+  const files = await collectFiles(opts.paths)
+  if (opts.dryRun) return { files }
+
+  const form = new FormData()
+  for (const f of files) {
+    const buf = await readFile(f)
+    form.append('file', new Blob([buf]), basename(f))
+  }
+
+  const base = opts.apiUrl.replace(/\/+$/, '')
+  const url = `${base}/admin/api/releases/${encodeURIComponent(opts.release)}/sourcemaps`
+  const resp = await fetch(url, {
+    body: form,
+    headers: { Authorization: `Bearer ${opts.token}` },
+    method: 'POST',
+  })
+  if (!resp.ok) {
+    let detail = ''
+    try {
+      detail = await resp.text()
+    } catch {
+      // ignore
+    }
+    throw new Error(
+      `${resp.status} ${resp.statusText}${detail ? ` — ${detail.slice(0, 300)}` : ''}`,
+    )
+  }
+  const body = (await resp.json().catch(() => ({}))) as {
+    artifacts?: { kind: string; name: string }[]
+    uploaded?: number
+  }
+  return { artifacts: body.artifacts, files, uploaded: body.uploaded ?? files.length }
+}

package/README.md

@@ -1,51 +0,0 @@
-# @goliapkg/sentori-cli
-
-Thin npm wrapper around the [Sentori](https://sentori.golia.jp) Rust CLI. The package downloads the prebuilt binary for your platform on `npm install` (postinstall hook) so `npx @goliapkg/sentori-cli` works the moment you have it in `package.json`.
-
-## Install
-
-```sh
-npm install -D @goliapkg/sentori-cli
-# or pnpm / yarn
-
-npx @goliapkg/sentori-cli upload sourcemap \
-  --release myapp@1.2.3+456 \
-  --token st_pk_... \
-  --ingest-url https://ingest.sentori.your-host.com \
-  dist/bundle.js.map
-```
-
-### Using bun
-
-Bun blocks postinstall scripts by default. After `bun add`, run:
-
-```sh
-bun pm trust @goliapkg/sentori-cli
-```
-
-once to allow the binary download, or use `bun add --trust @goliapkg/sentori-cli` from the start.
-
-Supported platforms:
-
-| OS | Arch |
-|----|------|
-| Linux | x64, arm64 |
-| macOS | x64 (Intel), arm64 (Apple Silicon) |
-
-If your platform isn't covered, the postinstall hook will print a soft warning and you can fall back to:
-
-```sh
-cargo install --git https://github.com/goliajp/sentori --bin sentori-cli
-```
-
-## Skipping postinstall
-
-`SENTORI_SKIP_DOWNLOAD=1` skips the binary download — useful in monorepo bootstrap or sandbox CI environments where the binary will be vendored separately.
-
-## Verifying the binary
-
-Each release artifact ships with a `.sha256` sidecar published next to the `.tar.gz` on the GitHub Release page; the postinstall script downloads only the tarball but you can manually verify:
-
-```sh
-curl -L https://github.com/goliajp/sentori/releases/download/cli-v<VERSION>/sentori-cli-cli-v<VERSION>-darwin-arm64.tar.gz.sha256
-```

package/bin/sentori-cli.js

@@ -1,32 +0,0 @@
-#!/usr/bin/env node
-// Phase 17 sub-B: Node entry point for `npx @goliapkg/sentori-cli ...`.
-// Forwards argv + stdio to the prebuilt Rust binary that postinstall
-// dropped at ../vendor/sentori-cli.
-
-'use strict'
-
-const path = require('node:path')
-const fs = require('node:fs')
-const { spawn } = require('node:child_process')
-
-const bin = path.join(__dirname, '..', 'vendor', 'sentori-cli')
-if (!fs.existsSync(bin)) {
-  console.error(
-    'sentori-cli binary missing — postinstall did not complete. ' +
-      'Try: `npm rebuild @goliapkg/sentori-cli` or set SENTORI_SKIP_DOWNLOAD=0 then reinstall.'
-  )
-  process.exit(127)
-}
-
-const child = spawn(bin, process.argv.slice(2), { stdio: 'inherit' })
-child.on('exit', (code, signal) => {
-  if (signal) {
-    process.kill(process.pid, signal)
-  } else {
-    process.exit(code ?? 1)
-  }
-})
-child.on('error', (e) => {
-  console.error('failed to run sentori-cli:', e.message)
-  process.exit(1)
-})

package/scripts/postinstall.js

@@ -1,90 +0,0 @@
-#!/usr/bin/env node
-// Phase 17 sub-B: download the prebuilt sentori-cli binary that
-// matches the current platform / arch and place it at ../vendor/.
-//
-// Skips if SENTORI_SKIP_DOWNLOAD=1 (CI, monorepo bootstrap, etc.).
-
-'use strict'
-
-const fs = require('node:fs')
-const https = require('node:https')
-const path = require('node:path')
-const { spawnSync } = require('node:child_process')
-
-const pkg = require(path.join(__dirname, '..', 'package.json'))
-const TAG = `cli-v${pkg.version}`
-
-const SUPPORTED = {
-  'linux-x64': 'linux-x64',
-  'linux-arm64': 'linux-arm64',
-  'darwin-x64': 'darwin-x64',
-  'darwin-arm64': 'darwin-arm64',
-}
-
-function detect() {
-  return `${process.platform}-${process.arch}`
-}
-
-function fetch(url, destStream) {
-  return new Promise((resolve, reject) => {
-    const handle = (u) => {
-      https
-        .get(u, { headers: { 'user-agent': `sentori-cli-installer/${pkg.version}` } }, (res) => {
-          const code = res.statusCode || 0
-          if (code >= 300 && code < 400 && res.headers.location) {
-            return handle(res.headers.location)
-          }
-          if (code !== 200) {
-            return reject(new Error(`HTTP ${code} from ${u}`))
-          }
-          res.pipe(destStream)
-          destStream.on('finish', resolve)
-          destStream.on('error', reject)
-        })
-        .on('error', reject)
-    }
-    handle(url)
-  })
-}
-
-async function main() {
-  if (process.env.SENTORI_SKIP_DOWNLOAD === '1') {
-    console.log('SENTORI_SKIP_DOWNLOAD=1; skipping sentori-cli binary download')
-    return
-  }
-
-  const key = detect()
-  const slug = SUPPORTED[key]
-  if (!slug) {
-    console.error(
-      `sentori-cli has no prebuilt binary for ${key}. ` +
-        `Cargo install instead: cargo install --git https://github.com/goliajp/sentori --bin sentori-cli`
-    )
-    process.exit(0) // soft fail — user can still cargo install
-  }
-
-  const filename = `sentori-cli-${TAG}-${slug}.tar.gz`
-  const url = `https://github.com/goliajp/sentori/releases/download/${TAG}/${filename}`
-  const vendorDir = path.join(__dirname, '..', 'vendor')
-  fs.mkdirSync(vendorDir, { recursive: true })
-  const tarball = path.join(vendorDir, 'sentori-cli.tar.gz')
-
-  console.log(`sentori-cli ${pkg.version}: downloading ${slug} from GitHub Release`)
-  await fetch(url, fs.createWriteStream(tarball))
-
-  const tar = spawnSync('tar', ['-xzf', tarball, '-C', vendorDir], { stdio: 'inherit' })
-  if (tar.status !== 0) {
-    console.error('tar -xzf failed; is `tar` on PATH?')
-    process.exit(1)
-  }
-  fs.unlinkSync(tarball)
-
-  const bin = path.join(vendorDir, 'sentori-cli')
-  fs.chmodSync(bin, 0o755)
-  console.log(`✓ sentori-cli ${pkg.version} ready (${slug})`)
-}
-
-main().catch((e) => {
-  console.error('sentori-cli install failed:', e.message)
-  process.exit(1)
-})