@goliapkg/sentori-cli 0.5.3 → 0.6.0

package/lib/native-artifacts.js

@@ -0,0 +1,148 @@
+// `sentori-cli upload dsym` (iOS) + `sentori-cli upload mapping` (Android).
+// Both endpoints take the raw artifact bytes (NOT multipart) with a few
+// headers / query params.
+import { spawnSync } from 'node:child_process';
+import { readFile } from 'node:fs/promises';
+import { basename, extname, join } from 'node:path';
+import { statSync, readdirSync } from 'node:fs';
+async function postBytes(url, body, token, headers = {}) {
+    const resp = await fetch(url, {
+        body,
+        headers: {
+            Authorization: `Bearer ${token}`,
+            'Content-Type': 'application/octet-stream',
+            ...headers,
+        },
+        method: 'POST',
+    });
+    if (!resp.ok) {
+        let detail = '';
+        try {
+            detail = await resp.text();
+        }
+        catch {
+            // ignore
+        }
+        throw new Error(`${resp.status} ${resp.statusText}${detail ? ` — ${detail.slice(0, 300)}` : ''}`);
+    }
+    const txt = await resp.text();
+    return txt ? JSON.parse(txt) : null;
+}
+const ARCHES = new Set([
+    'arm64',
+    'arm64_32',
+    'arm64e',
+    'armv7',
+    'armv7k',
+    'armv7s',
+    'i386',
+    'x86_64',
+    'x86_64h',
+]);
+/**
+ * Use `dwarfdump --uuid <path>` to enumerate `(arch, debug_id, file)`
+ * for each Mach-O slice. Returns [] if dwarfdump isn't installed or the
+ * output couldn't be parsed; callers should fall back to explicit
+ * `--debug-id` / `--arch` flags in that case.
+ */
+export function dsymSlicesFromDwarfdump(path) {
+    const r = spawnSync('dwarfdump', ['--uuid', path]);
+    if (r.status !== 0 || !r.stdout)
+        return [];
+    const out = [];
+    // Output lines look like:
+    //   UUID: 1234ABCD-... (arm64) /path/to/Foo.dSYM/Contents/Resources/DWARF/Foo
+    const re = /^UUID:\s+([0-9A-Fa-f-]{32,36})\s+\(([^)]+)\)\s+(.+)\s*$/m;
+    for (const line of r.stdout.toString().split('\n')) {
+        const m = re.exec(line);
+        if (!m)
+            continue;
+        const [, debugId, arch, file] = m;
+        if (!ARCHES.has(arch))
+            continue;
+        out.push({ arch, debugId: debugId.toUpperCase(), file: file.trim() });
+    }
+    return out;
+}
+/** Walk a `.dSYM` bundle and return the DWARF binary files inside
+ *  `Contents/Resources/DWARF/`. If `path` already points at a binary
+ *  (not a bundle), returns `[path]`. */
+export function dwarfBinariesIn(path) {
+    let st;
+    try {
+        st = statSync(path);
+    }
+    catch {
+        return [];
+    }
+    if (st.isFile())
+        return [path];
+    const dwarfDir = join(path, 'Contents/Resources/DWARF');
+    try {
+        return readdirSync(dwarfDir)
+            .filter((n) => !n.startsWith('.'))
+            .map((n) => join(dwarfDir, n));
+    }
+    catch {
+        // not a .dSYM bundle layout — try the top-level path
+        return [path];
+    }
+}
+export async function uploadDsym(opts) {
+    const slices = [];
+    if (opts.debugId && opts.arch) {
+        // Explicit single-slice upload — no parsing needed.
+        const binaries = dwarfBinariesIn(opts.path);
+        if (binaries.length === 0)
+            throw new Error(`no DWARF binary at: ${opts.path}`);
+        slices.push({ arch: opts.arch, debugId: opts.debugId.toUpperCase(), file: binaries[0] });
+    }
+    else {
+        // Auto-discover via dwarfdump.
+        const found = dsymSlicesFromDwarfdump(opts.path);
+        if (found.length === 0) {
+            throw new Error('couldn’t enumerate dSYM slices — install Xcode command-line tools ' +
+                '(for `dwarfdump`), or pass --debug-id and --arch explicitly');
+        }
+        slices.push(...found);
+    }
+    const base = opts.apiUrl.replace(/\/+$/, '');
+    const q = new URLSearchParams();
+    if (opts.release)
+        q.set('release', opts.release);
+    if (opts.objectName ?? basename(opts.path).replace(/\.dSYM$/, ''))
+        q.set('objectName', opts.objectName ?? basename(opts.path).replace(/\.dSYM$/, ''));
+    const qs = q.toString();
+    const url = `${base}/admin/api/projects/${encodeURIComponent(opts.projectId)}/dsyms${qs ? '?' + qs : ''}`;
+    const uploaded = [];
+    for (const s of slices) {
+        const body = await readFile(s.file);
+        await postBytes(url, body, opts.token, {
+            'x-sentori-arch': s.arch,
+            'x-sentori-debug-id': s.debugId,
+        });
+        uploaded.push({ arch: s.arch, debugId: s.debugId });
+    }
+    return { slices: uploaded };
+}
+export async function uploadMapping(opts) {
+    const ext = extname(opts.path).toLowerCase();
+    if (ext && ext !== '.txt' && ext !== '.map') {
+        // R8 emits `mapping.txt` by default; accept anything but warn.
+        console.warn(`[sentori-cli] upload mapping: unexpected extension ${ext} — uploading anyway`);
+    }
+    const body = await readFile(opts.path);
+    if (body.length === 0)
+        throw new Error(`empty mapping file: ${opts.path}`);
+    const base = opts.apiUrl.replace(/\/+$/, '');
+    const q = new URLSearchParams();
+    if (opts.release)
+        q.set('release', opts.release);
+    const qs = q.toString();
+    const url = `${base}/admin/api/projects/${encodeURIComponent(opts.projectId)}/mappings${qs ? '?' + qs : ''}`;
+    const headers = {};
+    if (opts.debugId)
+        headers['x-sentori-debug-id'] = opts.debugId;
+    await postBytes(url, body, opts.token, headers);
+}
+//# sourceMappingURL=native-artifacts.js.map

package/lib/native-artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-artifacts.js","sourceRoot":"","sources":["../src/native-artifacts.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,wEAAwE;AACxE,0BAA0B;AAE1B,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAS/C,KAAK,UAAU,SAAS,CACtB,GAAW,EACX,IAAY,EACZ,KAAa,EACb,UAAkC,EAAE;IAEpC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC5B,IAAI;QACJ,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,cAAc,EAAE,0BAA0B;YAC1C,GAAG,OAAO;SACX;QACD,MAAM,EAAE,MAAM;KACf,CAAC,CAAA;IACF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACjF,CAAA;IACH,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;IAC7B,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACrC,CAAC;AAMD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC;IACrB,OAAO;IACP,UAAU;IACV,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,SAAS;CACV,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,CAAC,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAA;IAClD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,EAAE,CAAA;IAC1C,MAAM,GAAG,GAAgB,EAAE,CAAA;IAC3B,0BAA0B;IAC1B,8EAA8E;IAC9E,MAAM,EAAE,GAAG,0DAA0D,CAAA;IACrE,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvB,IAAI,CAAC,CAAC;YAAE,SAAQ;QAChB,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAgD,CAAA;QAChF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAQ;QAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACvE,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;wCAEwC;AACxC,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,EAAE,CAAA;IACN,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,EAAE;QAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAA;IACvD,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,QAAQ,CAAC;aACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;aACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;QACrD,OAAO,CAAC,IAAI,CAAC,CAAA;IACf,CAAC;AACH,CAAC;AAaD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAuB;IACtD,MAAM,MAAM,GAAgB,EAAE,CAAA;IAC9B,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,oDAAoD;QACpD,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QAC9E,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC,CAAA;IAC3F,CAAC;SAAM,CAAC;QACN,+BAA+B;QAC/B,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,oEAAoE;gBAClE,6DAA6D,CAChE,CAAA;QACH,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAA;IACvB,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC5C,MAAM,CAAC,GAAG,IAAI,eAAe,EAAE,CAAA;IAC/B,IAAI,IAAI,CAAC,OAAO;QAAE,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IAChD,IAAI,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;QAC/D,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAA;IACpF,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAA;IACvB,MAAM,GAAG,GAAG,GAAG,IAAI,uBAAuB,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;IAEzG,MAAM,QAAQ,GAAwC,EAAE,CAAA;IACxD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACnC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE;YACrC,gBAAgB,EAAE,CAAC,CAAC,IAAI;YACxB,oBAAoB,EAAE,CAAC,CAAC,OAAO;SAChC,CAAC,CAAA;QACF,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;IACrD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;AAC7B,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAA0B;IAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAA;IAC5C,IAAI,GAAG,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QAC5C,+DAA+D;QAC/D,OAAO,CAAC,IAAI,CAAC,sDAAsD,GAAG,qBAAqB,CAAC,CAAA;IAC9F,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IAE1E,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC5C,MAAM,CAAC,GAAG,IAAI,eAAe,EAAE,CAAA;IAC/B,IAAI,IAAI,CAAC,OAAO;QAAE,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IAChD,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAA;IACvB,MAAM,GAAG,GAAG,GAAG,IAAI,uBAAuB,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;IAC5G,MAAM,OAAO,GAA2B,EAAE,CAAA;IAC1C,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,OAAO,CAAA;IAC9D,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;AACjD,CAAC"}

package/lib/push.d.ts

@@ -0,0 +1,42 @@
+export type PushClientConfig = {
+    apiUrl: string;
+    projectId: string;
+    token: string;
+};
+type AdminCredentialRow = {
+    provider: string;
+    config: Record<string, unknown>;
+    updatedAt: string;
+};
+type Ticket = {
+    id: string;
+    status: 'queued' | 'sent' | 'failed';
+    providerOutcome?: string | null;
+    error?: string | null;
+    retryCount: number;
+    createdAt: string;
+    sentAt?: string | null;
+};
+/** Parse a CLI flag value that may be `@file.json` (read from disk
+ *  and parse) or a literal JSON string. */
+export declare function parseJsonArg(raw: string, kind: string): unknown;
+export declare function pushCredsList(cfg: PushClientConfig): Promise<AdminCredentialRow[]>;
+export declare function pushCredsSet(cfg: PushClientConfig, provider: string, config: unknown, secret: unknown): Promise<{
+    ok: boolean;
+}>;
+export declare function pushCredsDelete(cfg: PushClientConfig, provider: string): Promise<void>;
+export type SendOpts = {
+    to: string;
+    title?: string;
+    body?: string;
+    data?: unknown;
+    priority?: 'high' | 'normal';
+    ttl?: number;
+    idempotencyKey?: string;
+};
+export declare function pushSend(cfg: PushClientConfig, opts: SendOpts): Promise<Ticket>;
+export declare function pushReceipt(cfg: PushClientConfig, sendId: string): Promise<{
+    ticket: Ticket;
+}>;
+export {};
+//# sourceMappingURL=push.d.ts.map

package/lib/push.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.d.ts","sourceRoot":"","sources":["../src/push.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AAED,KAAK,kBAAkB,GAAG;IACxB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,KAAK,MAAM,GAAG;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAA;IACpC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB,CAAA;AA+BD;2CAC2C;AAC3C,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAe/D;AAID,wBAAsB,aAAa,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAKxF;AAED,wBAAsB,YAAY,CAChC,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,OAAO,GACd,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAA;CAAE,CAAC,CAc1B;AAED,wBAAsB,eAAe,CACnC,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CASf;AAID,MAAM,MAAM,QAAQ,GAAG;IACrB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAA;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB,CAAA;AAED,wBAAsB,QAAQ,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAuBrF;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,gBAAgB,EACrB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAK7B"}

package/lib/push.js

@@ -0,0 +1,92 @@
+// v2.12 — `sentori-cli push *` commands.
+//
+// Wraps the v2.7 admin REST + v2.7 ingest endpoints so operators can
+// drive credential CRUD, ad-hoc sends, and receipt lookups from the
+// terminal without touching curl.
+//
+// `push send`     POST /v1/push/send         (ingest Bearer)
+// `push receipt`  GET  /v1/push/receipts/:id (ingest Bearer)
+// `push creds list`    GET    /admin/api/projects/:id/push/credentials   (admin Bearer)
+// `push creds set`     PUT    /admin/api/projects/:id/push/credentials   (admin Bearer)
+// `push creds delete`  DELETE /admin/api/projects/:id/push/credentials/:provider
+import { readFileSync } from 'node:fs';
+const VALID_PROVIDERS = new Set(['apns', 'fcm', 'webpush', 'hcm', 'mipush']);
+function joinUrl(base, path) {
+    return `${base.replace(/\/+$/, '')}${path}`;
+}
+async function bearerFetch(url, token, init) {
+    const resp = await fetch(url, {
+        ...init,
+        headers: {
+            Authorization: `Bearer ${token}`,
+            'Content-Type': 'application/json',
+            ...(init?.headers ?? {}),
+        },
+    });
+    if (!resp.ok) {
+        const detail = await resp.text().catch(() => '');
+        throw new Error(`${resp.status} ${resp.statusText}${detail ? ` — ${detail.slice(0, 300)}` : ''}`);
+    }
+    const txt = await resp.text();
+    return (txt ? JSON.parse(txt) : null);
+}
+/** Parse a CLI flag value that may be `@file.json` (read from disk
+ *  and parse) or a literal JSON string. */
+export function parseJsonArg(raw, kind) {
+    if (raw.startsWith('@')) {
+        const path = raw.slice(1);
+        const body = readFileSync(path, 'utf-8');
+        try {
+            return JSON.parse(body);
+        }
+        catch (e) {
+            throw new Error(`${kind} file ${path} is not valid JSON: ${e.message}`);
+        }
+    }
+    try {
+        return JSON.parse(raw);
+    }
+    catch (e) {
+        throw new Error(`${kind} arg is not valid JSON: ${e.message}`);
+    }
+}
+// ── credential CRUD ───────────────────────────────────────────────
+export async function pushCredsList(cfg) {
+    return bearerFetch(joinUrl(cfg.apiUrl, `/admin/api/projects/${cfg.projectId}/push/credentials`), cfg.token);
+}
+export async function pushCredsSet(cfg, provider, config, secret) {
+    if (!VALID_PROVIDERS.has(provider)) {
+        throw new Error(`invalid provider '${provider}'; expected one of ${[...VALID_PROVIDERS].join('/')}`);
+    }
+    return bearerFetch(joinUrl(cfg.apiUrl, `/admin/api/projects/${cfg.projectId}/push/credentials`), cfg.token, {
+        body: JSON.stringify({ provider, config, secret }),
+        method: 'PUT',
+    });
+}
+export async function pushCredsDelete(cfg, provider) {
+    await bearerFetch(joinUrl(cfg.apiUrl, `/admin/api/projects/${cfg.projectId}/push/credentials/${provider}`), cfg.token, { method: 'DELETE' });
+}
+export async function pushSend(cfg, opts) {
+    const payload = {
+        to: opts.to,
+        title: opts.title,
+        body: opts.body,
+        data: opts.data,
+        idempotencyKey: opts.idempotencyKey,
+    };
+    if (opts.priority || opts.ttl != null) {
+        payload.options = { priority: opts.priority, ttl: opts.ttl };
+    }
+    const resp = await bearerFetch(joinUrl(cfg.apiUrl, '/v1/push/send'), cfg.token, {
+        body: JSON.stringify(payload),
+        method: 'POST',
+    });
+    if (!resp.tickets?.length) {
+        throw new Error('server returned no tickets');
+    }
+    return resp.tickets[0];
+}
+export async function pushReceipt(cfg, sendId) {
+    return bearerFetch(joinUrl(cfg.apiUrl, `/v1/push/receipts/${encodeURIComponent(sendId)}`), cfg.token);
+}
+//# sourceMappingURL=push.js.map

package/lib/push.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.js","sourceRoot":"","sources":["../src/push.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,EAAE;AACF,qEAAqE;AACrE,oEAAoE;AACpE,kCAAkC;AAClC,EAAE;AACF,6DAA6D;AAC7D,6DAA6D;AAC7D,wFAAwF;AACxF,wFAAwF;AACxF,iFAAiF;AAEjF,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAwBtC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAA;AAE5E,SAAS,OAAO,CAAC,IAAY,EAAE,IAAY;IACzC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAA;AAC7C,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAW,EACX,KAAa,EACb,IAAkB;IAElB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC5B,GAAG,IAAI;QACP,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,cAAc,EAAE,kBAAkB;YAClC,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;SACzB;KACF,CAAC,CAAA;IACF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;QAChD,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACjF,CAAA;IACH,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;IAC7B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAM,CAAA;AAC5C,CAAC;AAED;2CAC2C;AAC3C,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,IAAY;IACpD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACzB,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACxC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACzB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,SAAS,IAAI,uBAAwB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;QACpF,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACxB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,2BAA4B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;IAC3E,CAAC;AACH,CAAC;AAED,qEAAqE;AAErE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAqB;IACvD,OAAO,WAAW,CAChB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,uBAAuB,GAAG,CAAC,SAAS,mBAAmB,CAAC,EAC5E,GAAG,CAAC,KAAK,CACV,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAqB,EACrB,QAAgB,EAChB,MAAe,EACf,MAAe;IAEf,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,qBAAqB,QAAQ,sBAAsB,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACpF,CAAA;IACH,CAAC;IACD,OAAO,WAAW,CAChB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,uBAAuB,GAAG,CAAC,SAAS,mBAAmB,CAAC,EAC5E,GAAG,CAAC,KAAK,EACT;QACE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAClD,MAAM,EAAE,KAAK;KACd,CACF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAqB,EACrB,QAAgB;IAEhB,MAAM,WAAW,CACf,OAAO,CACL,GAAG,CAAC,MAAM,EACV,uBAAuB,GAAG,CAAC,SAAS,qBAAqB,QAAQ,EAAE,CACpE,EACD,GAAG,CAAC,KAAK,EACT,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAA;AACH,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAqB,EAAE,IAAc;IAClE,MAAM,OAAO,GAA4B;QACvC,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAA;IACD,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;QACtC,OAAO,CAAC,OAAO,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAA;IAC9D,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,WAAW,CAC5B,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,EACpC,GAAG,CAAC,KAAK,EACT;QACE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAC7B,MAAM,EAAE,MAAM;KACf,CACF,CAAA;IACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAA;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAqB,EACrB,MAAc;IAEd,OAAO,WAAW,CAChB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,qBAAqB,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,EACtE,GAAG,CAAC,KAAK,CACV,CAAA;AACH,CAAC"}

package/lib/react-native.d.ts

@@ -0,0 +1,25 @@
+/** Resolve `react-native/scripts/compose-source-maps.js` from the
+ *  current project's node_modules. Returns null if react-native isn't
+ *  installed or the version doesn't ship that script. */
+export declare function resolveComposeScript(fromDir?: string): null | string;
+/** Compose a Metro packager source map + a Hermes source map into a
+ *  single map (a temp file the caller is responsible for deleting).
+ *  Throws if react-native's compose script can't be found or fails. */
+export declare function composeSourceMaps(metroMap: string, hermesMap: string): string;
+export type RnUploadOptions = {
+    apiUrl: string;
+    /** Optional bundle file (.jsbundle / .bundle) to upload alongside the map. */
+    bundle?: string;
+    dryRun?: boolean;
+    hermesMap: string;
+    metroMap: string;
+    release: string;
+    token: string;
+};
+/** Compose the Metro + Hermes maps, then upload the result (and the
+ *  bundle, if given). Cleans up the temp composed map. */
+export declare function reactNativeUpload(opts: RnUploadOptions): Promise<{
+    files: string[];
+    uploaded?: number;
+}>;
+//# sourceMappingURL=react-native.d.ts.map

package/lib/react-native.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"react-native.d.ts","sourceRoot":"","sources":["../src/react-native.ts"],"names":[],"mappings":"AAQA;;yDAEyD;AACzD,wBAAgB,oBAAoB,CAAC,OAAO,SAAgB,GAAG,IAAI,GAAG,MAAM,CAc3E;AAED;;uEAEuE;AACvE,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAkB7E;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AAED;0DAC0D;AAC1D,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC;IACtE,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB,CAAC,CAoBD"}

package/lib/react-native.js

@@ -0,0 +1,74 @@
+import { spawnSync } from 'node:child_process';
+import { existsSync, mkdtempSync, rmSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { uploadSourcemaps } from './upload.js';
+/** Resolve `react-native/scripts/compose-source-maps.js` from the
+ *  current project's node_modules. Returns null if react-native isn't
+ *  installed or the version doesn't ship that script. */
+export function resolveComposeScript(fromDir = process.cwd()) {
+    const req = createRequire(join(fromDir, 'noop.js'));
+    for (const id of [
+        'react-native/scripts/compose-source-maps.js',
+        '@react-native/community-cli-plugin/dist/utils/composeSourceMaps.js',
+    ]) {
+        try {
+            const p = req.resolve(id);
+            if (existsSync(p))
+                return p;
+        }
+        catch {
+            // try next
+        }
+    }
+    return null;
+}
+/** Compose a Metro packager source map + a Hermes source map into a
+ *  single map (a temp file the caller is responsible for deleting).
+ *  Throws if react-native's compose script can't be found or fails. */
+export function composeSourceMaps(metroMap, hermesMap) {
+    for (const p of [metroMap, hermesMap]) {
+        if (!existsSync(p))
+            throw new Error(`no such file: ${p}`);
+    }
+    const script = resolveComposeScript();
+    if (!script) {
+        throw new Error("couldn't find react-native's compose-source-maps.js — install react-native, or " +
+            'compose the maps yourself and use `sentori-cli upload sourcemap <composed.map>`');
+    }
+    const out = join(mkdtempSync(join(tmpdir(), 'sentori-rn-')), 'composed.map');
+    const r = spawnSync('node', [script, metroMap, hermesMap, '-o', out], { stdio: 'inherit' });
+    if (r.status !== 0) {
+        throw new Error(`compose-source-maps.js exited with ${r.status ?? 'signal'}`);
+    }
+    if (!existsSync(out))
+        throw new Error('compose-source-maps.js produced no output');
+    return out;
+}
+/** Compose the Metro + Hermes maps, then upload the result (and the
+ *  bundle, if given). Cleans up the temp composed map. */
+export async function reactNativeUpload(opts) {
+    const composed = composeSourceMaps(opts.metroMap, opts.hermesMap);
+    try {
+        const paths = [composed, ...(opts.bundle ? [opts.bundle] : [])];
+        const r = await uploadSourcemaps({
+            apiUrl: opts.apiUrl,
+            dryRun: opts.dryRun,
+            paths,
+            release: opts.release,
+            token: opts.token,
+        });
+        return { files: r.files, uploaded: r.uploaded };
+    }
+    finally {
+        try {
+            rmSync(composed, { force: true });
+            rmSync(join(composed, '..'), { force: true, recursive: true });
+        }
+        catch {
+            // best-effort cleanup
+        }
+    }
+}
+//# sourceMappingURL=react-native.js.map

package/lib/react-native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"react-native.js","sourceRoot":"","sources":["../src/react-native.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9C;;yDAEyD;AACzD,MAAM,UAAU,oBAAoB,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE;IAC1D,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAA;IACnD,KAAK,MAAM,EAAE,IAAI;QACf,6CAA6C;QAC7C,oEAAoE;KACrE,EAAE,CAAC;QACF,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YACzB,IAAI,UAAU,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAA;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,WAAW;QACb,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;uEAEuE;AACvE,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,SAAiB;IACnE,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAA;IAC3D,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAA;IACrC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,iFAAiF;YAC/E,iFAAiF,CACpF,CAAA;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,EAAE,cAAc,CAAC,CAAA;IAC5E,MAAM,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;IAC3F,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC,CAAA;IAC/E,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;IAClF,OAAO,GAAG,CAAA;AACZ,CAAC;AAaD;0DAC0D;AAC1D,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAqB;IAI3D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;IACjE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC/D,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAAC;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAA;QACF,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;IACjD,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACjC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;AACH,CAAC"}

package/lib/source-bundle.d.ts

@@ -0,0 +1,28 @@
+import type { AdminUpload } from './native-artifacts.js';
+export type SourceBundleUploadOptions = AdminUpload & {
+    /** v1.4 W26 — optional module label so polyrepo apps (main +
+     *  watch ext + share ext etc.) can upload multiple bundles per
+     *  (release, platform). Empty/undefined → unlabelled single
+     *  bundle (v1.3 W15 behaviour). */
+    module?: string;
+    /** Pre-built tar.gz archive of the project's source tree. */
+    path: string;
+    platform: 'android' | 'ios';
+};
+export type SourceBundleUploadResult = {
+    contentHash: string;
+    kind: string;
+    sizeBytes: number;
+};
+export declare function uploadSourceBundle(opts: SourceBundleUploadOptions): Promise<SourceBundleUploadResult>;
+/** Walk `dir`, pick platform-relevant source files, and tar.gz them
+ *  into a temp file. Caller is responsible for invoking `cleanup()`.
+ *  Uses the system `tar` binary; that's portable enough on macOS +
+ *  Linux + WSL, which covers every realistic CI environment Sentori
+ *  ships to. Native Windows CI without WSL would need to gzip the
+ *  archive themselves (the pre-built-path mode still works). */
+export declare function buildSourceBundleFromDir(dir: string, platform: 'android' | 'ios'): Promise<{
+    cleanup: () => Promise<void>;
+    path: string;
+}>;
+//# sourceMappingURL=source-bundle.d.ts.map

package/lib/source-bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-bundle.d.ts","sourceRoot":"","sources":["../src/source-bundle.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAyBxD,MAAM,MAAM,yBAAyB,GAAG,WAAW,GAAG;IACpD;;;uCAGmC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,SAAS,GAAG,KAAK,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG;IACrC,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,wBAAwB,CAAC,CA6BnC;AAuDD;;;;;gEAKgE;AAChE,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,SAAS,GAAG,KAAK,GAC1B,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAuCzD"}

package/lib/source-bundle.js

@@ -0,0 +1,193 @@
+// v1.2 W3.a — `sentori-cli upload source-bundle`.
+//
+// Uploads a pre-built `*.tar.gz` archive of the project's source tree
+// for one platform. Server stores it under
+// `release_artifacts` with `kind = source_bundle_<platform>`; on
+// click-frame, the dashboard's FrameSourceDrawer pulls the matching
+// source file out of the archive and shows ±N lines.
+//
+// We intentionally keep the CLI side small: the operator (or CI)
+// already knows how to build a tarball. v1.3 may add an
+// auto-bundle-from-directory mode; for now you do:
+//
+//   tar -czf ios-source.tar.gz Sources/
+//   sentori-cli upload source-bundle --project <uuid> \
+//     --release myapp@1.0.0 --platform ios --path ios-source.tar.gz
+import { spawnSync } from 'node:child_process';
+import { mkdtemp, readFile, readdir, stat, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join, relative, sep as pathSep } from 'node:path';
+const PLATFORMS = new Set(['ios', 'android']);
+/** v1.2 W3.d — per-platform file extensions the CLI bundles when
+ *  `--from-dir` mode picks files from a project tree. Kept narrow on
+ *  purpose: source-bundle is only useful for native source viewing,
+ *  and including non-source files would balloon the archive without
+ *  helping the lookup path. */
+const EXTENSIONS = {
+    android: ['.kt', '.java'],
+    ios: ['.swift', '.m', '.mm', '.h', '.hpp'],
+};
+const SKIP_DIRS = new Set([
+    '.git',
+    'node_modules',
+    'Pods',
+    'build',
+    'DerivedData',
+    '.gradle',
+    '.build',
+    'target',
+]);
+export async function uploadSourceBundle(opts) {
+    if (!PLATFORMS.has(opts.platform)) {
+        throw new Error(`--platform must be 'ios' or 'android' (got '${opts.platform}')`);
+    }
+    if (!opts.release) {
+        throw new Error('--release is required for source-bundle uploads');
+    }
+    // v1.2 W3.d: when `opts.path` is a directory, bundle it on the fly
+    // instead of requiring the operator to pre-build the archive.
+    let archivePath = opts.path;
+    let cleanup;
+    try {
+        const st = await stat(opts.path);
+        if (st.isDirectory()) {
+            const built = await buildSourceBundleFromDir(opts.path, opts.platform);
+            archivePath = built.path;
+            cleanup = built.cleanup;
+        }
+    }
+    catch (e) {
+        if (e.code !== 'ENOENT')
+            throw e;
+        throw new Error(`source path not found: ${opts.path}`);
+    }
+    try {
+        return await uploadPrebuiltTarGz({ ...opts, path: archivePath });
+    }
+    finally {
+        if (cleanup)
+            await cleanup();
+    }
+}
+async function uploadPrebuiltTarGz(opts) {
+    const body = await readFile(opts.path);
+    if (body.length === 0)
+        throw new Error(`empty archive: ${opts.path}`);
+    // Same gzip magic check the server enforces. Failing early here
+    // saves a network round-trip when an operator accidentally points
+    // at a raw .tar.
+    if (body.length < 2 || body[0] !== 0x1f || body[1] !== 0x8b) {
+        throw new Error(`${opts.path} does not look like a gzip stream (expected 1f 8b magic) — ` +
+            `did you mean to gzip it first? \`tar -czf <out>.tar.gz <dir>/\``);
+    }
+    if (!opts.release)
+        throw new Error('--release is required for source-bundle uploads');
+    const base = opts.apiUrl.replace(/\/+$/, '');
+    const q = new URLSearchParams();
+    q.set('release', opts.release);
+    q.set('platform', opts.platform);
+    if (opts.module)
+        q.set('module', opts.module);
+    const url = `${base}/admin/api/projects/${encodeURIComponent(opts.projectId)}/source-bundles?${q.toString()}`;
+    const resp = await fetch(url, {
+        body,
+        headers: {
+            Authorization: `Bearer ${opts.token}`,
+            'Content-Type': 'application/gzip',
+        },
+        method: 'POST',
+    });
+    if (!resp.ok) {
+        let detail = '';
+        try {
+            detail = await resp.text();
+        }
+        catch {
+            // ignore
+        }
+        throw new Error(`${resp.status} ${resp.statusText}${detail ? ` — ${detail.slice(0, 300)}` : ''}`);
+    }
+    const parsed = await resp.json();
+    if (!parsed ||
+        typeof parsed !== 'object' ||
+        typeof parsed.contentHash !== 'string') {
+        throw new Error(`unexpected response shape: ${JSON.stringify(parsed)}`);
+    }
+    const r = parsed;
+    return { contentHash: r.contentHash, kind: r.kind, sizeBytes: r.sizeBytes };
+}
+/** Walk `dir`, pick platform-relevant source files, and tar.gz them
+ *  into a temp file. Caller is responsible for invoking `cleanup()`.
+ *  Uses the system `tar` binary; that's portable enough on macOS +
+ *  Linux + WSL, which covers every realistic CI environment Sentori
+ *  ships to. Native Windows CI without WSL would need to gzip the
+ *  archive themselves (the pre-built-path mode still works). */
+export async function buildSourceBundleFromDir(dir, platform) {
+    const exts = EXTENSIONS[platform];
+    const files = [];
+    await walk(dir, dir, exts, files);
+    if (files.length === 0) {
+        throw new Error(`no ${platform} source files (${exts.join(', ')}) found under ${dir} — ` +
+            `pass --platform with the right value or check your source layout`);
+    }
+    files.sort();
+    // Write the file list to a temp file, then have tar consume it via
+    // -T —. Avoids the per-arg shell length cap on huge projects.
+    const tmp = await mkdtemp(join(tmpdir(), 'sentori-srcbun-'));
+    const listPath = join(tmp, 'files.txt');
+    const archivePath = join(tmp, `${platform}-source.tar.gz`);
+    await writeFile(listPath, files.join('\n'));
+    const r = spawnSync('tar', ['-czf', archivePath, '-C', dir, '-T', listPath]);
+    if (r.status !== 0) {
+        throw new Error(`tar failed (status ${r.status}): ${(r.stderr ?? '').toString().slice(0, 300)}`);
+    }
+    return {
+        cleanup: async () => {
+            try {
+                await readdir(tmp).then(async (entries) => {
+                    for (const e of entries) {
+                        await unlinkIfExists(join(tmp, e));
+                    }
+                });
+                await unlinkIfExists(tmp, true);
+            }
+            catch {
+                // best-effort cleanup
+            }
+        },
+        path: archivePath,
+    };
+}
+async function walk(root, dir, exts, out) {
+    const entries = await readdir(dir, { withFileTypes: true });
+    for (const e of entries) {
+        if (e.name.startsWith('.') && e.isDirectory() && e.name !== '.') {
+            // Hidden directory: skip (.git, .gradle, .build…). The known
+            // ones are listed in SKIP_DIRS for clarity, but any leading-dot
+            // dir is also skipped as a safety net.
+            continue;
+        }
+        if (SKIP_DIRS.has(e.name))
+            continue;
+        const full = join(dir, e.name);
+        if (e.isDirectory()) {
+            await walk(root, full, exts, out);
+        }
+        else if (e.isFile()) {
+            const lower = e.name.toLowerCase();
+            if (exts.some((ext) => lower.endsWith(ext))) {
+                out.push(relative(root, full).split(pathSep).join('/'));
+            }
+        }
+    }
+}
+async function unlinkIfExists(path, isDir = false) {
+    const { rm } = await import('node:fs/promises');
+    try {
+        await rm(path, { force: true, recursive: isDir });
+    }
+    catch {
+        // ignore
+    }
+}
+//# sourceMappingURL=source-bundle.js.map