@goliapkg/sentori-cli 0.5.3 → 1.0.0

package/lib/probes.js

@@ -0,0 +1,75 @@
+// `sentori-cli probes sync` — the tripwire registry scan
+// (design.md §2). Statically scans source for `sentori.probe('REF')`
+// / `probe("REF")` call sites and registers the refs against a
+// release, so the server can tell a silent probe (fix holding) from
+// deleted code.
+import { readdirSync, readFileSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+const PROBE_RE = /\bprobe\(\s*['"`]([^'"`]{1,200})['"`]/g;
+const SCAN_EXTS = new Set(['.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs']);
+const SKIP_DIRS = new Set(['node_modules', '.git', 'lib', 'dist', 'build', '.expo']);
+const MAX_FILES = 20_000;
+export function scanProbes(root) {
+    const refs = new Set();
+    let seen = 0;
+    const walk = (dir) => {
+        if (seen > MAX_FILES)
+            return;
+        let entries;
+        try {
+            entries = readdirSync(dir);
+        }
+        catch {
+            return;
+        }
+        for (const name of entries) {
+            if (SKIP_DIRS.has(name))
+                continue;
+            const p = join(dir, name);
+            let st;
+            try {
+                st = statSync(p);
+            }
+            catch {
+                continue;
+            }
+            if (st.isDirectory()) {
+                walk(p);
+            }
+            else if (st.isFile()) {
+                const dot = name.lastIndexOf('.');
+                if (dot === -1 || !SCAN_EXTS.has(name.slice(dot)))
+                    continue;
+                seen += 1;
+                try {
+                    const text = readFileSync(p, 'utf8');
+                    for (const m of text.matchAll(PROBE_RE)) {
+                        const ref = m[1];
+                        if (ref)
+                            refs.add(ref);
+                    }
+                }
+                catch {
+                    // unreadable file — skip
+                }
+            }
+        }
+    };
+    walk(root);
+    return [...refs].sort();
+}
+export async function syncProbes(opts) {
+    const resp = await fetch(`${opts.apiUrl.replace(/\/+$/, '')}/api/probes:sync`, {
+        method: 'POST',
+        headers: {
+            Authorization: `Bearer ${opts.token}`,
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify({ release: opts.release, refs: opts.refs }),
+    });
+    if (!resp.ok) {
+        throw new Error(`probes:sync ${resp.status} ${await resp.text().catch(() => '')}`);
+    }
+    return (await resp.json());
+}
+//# sourceMappingURL=probes.js.map

package/lib/probes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probes.js","sourceRoot":"","sources":["../src/probes.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,qEAAqE;AACrE,+DAA+D;AAC/D,oEAAoE;AACpE,gBAAgB;AAEhB,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,MAAM,QAAQ,GAAG,wCAAwC,CAAA;AACzD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;AACzE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;AACpF,MAAM,SAAS,GAAG,MAAM,CAAA;AAExB,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;QACjC,IAAI,IAAI,GAAG,SAAS;YAAE,OAAM;QAC5B,IAAI,OAAiB,CAAA;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAM;QACR,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAQ;YACjC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;YACzB,IAAI,EAAE,CAAA;YACN,IAAI,CAAC;gBACH,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;YACD,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBACrB,IAAI,CAAC,CAAC,CAAC,CAAA;YACT,CAAC;iBAAM,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;gBACjC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAAE,SAAQ;gBAC3D,IAAI,IAAI,CAAC,CAAA;gBACT,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;oBACpC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACxC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;wBAChB,IAAI,GAAG;4BAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;oBACxB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,yBAAyB;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAA;IACD,IAAI,CAAC,IAAI,CAAC,CAAA;IACV,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAKhC;IACC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,kBAAkB,EAAE;QAC7E,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;YACrC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;KACjE,CAAC,CAAA;IACF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,MAAM,IAAI,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IACpF,CAAC;IACD,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA2B,CAAA;AACtD,CAAC"}

package/lib/push.d.ts

@@ -0,0 +1,42 @@
+export type PushClientConfig = {
+    apiUrl: string;
+    projectId: string;
+    token: string;
+};
+type AdminCredentialRow = {
+    provider: string;
+    config: Record<string, unknown>;
+    updatedAt: string;
+};
+type Ticket = {
+    id: string;
+    status: 'queued' | 'sent' | 'failed';
+    providerOutcome?: string | null;
+    error?: string | null;
+    retryCount: number;
+    createdAt: string;
+    sentAt?: string | null;
+};
+/** Parse a CLI flag value that may be `@file.json` (read from disk
+ *  and parse) or a literal JSON string. */
+export declare function parseJsonArg(raw: string, kind: string): unknown;
+export declare function pushCredsList(cfg: PushClientConfig): Promise<AdminCredentialRow[]>;
+export declare function pushCredsSet(cfg: PushClientConfig, provider: string, config: unknown, secret: unknown): Promise<{
+    ok: boolean;
+}>;
+export declare function pushCredsDelete(cfg: PushClientConfig, provider: string): Promise<void>;
+export type SendOpts = {
+    to: string;
+    title?: string;
+    body?: string;
+    data?: unknown;
+    priority?: 'high' | 'normal';
+    ttl?: number;
+    idempotencyKey?: string;
+};
+export declare function pushSend(cfg: PushClientConfig, opts: SendOpts): Promise<Ticket>;
+export declare function pushReceipt(cfg: PushClientConfig, sendId: string): Promise<{
+    ticket: Ticket;
+}>;
+export {};
+//# sourceMappingURL=push.d.ts.map

package/lib/push.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.d.ts","sourceRoot":"","sources":["../src/push.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AAED,KAAK,kBAAkB,GAAG;IACxB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,KAAK,MAAM,GAAG;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAA;IACpC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB,CAAA;AA+BD;2CAC2C;AAC3C,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAe/D;AAID,wBAAsB,aAAa,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAKxF;AAED,wBAAsB,YAAY,CAChC,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,OAAO,GACd,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAA;CAAE,CAAC,CAc1B;AAED,wBAAsB,eAAe,CACnC,GAAG,EAAE,gBAAgB,EACrB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CASf;AAID,MAAM,MAAM,QAAQ,GAAG;IACrB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAA;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB,CAAA;AAED,wBAAsB,QAAQ,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAuBrF;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,gBAAgB,EACrB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAK7B"}

package/lib/push.js

@@ -0,0 +1,92 @@
+// v2.12 — `sentori-cli push *` commands.
+//
+// Wraps the v2.7 admin REST + v2.7 ingest endpoints so operators can
+// drive credential CRUD, ad-hoc sends, and receipt lookups from the
+// terminal without touching curl.
+//
+// `push send`     POST /v1/push/send         (ingest Bearer)
+// `push receipt`  GET  /v1/push/receipts/:id (ingest Bearer)
+// `push creds list`    GET    /admin/api/projects/:id/push/credentials   (admin Bearer)
+// `push creds set`     PUT    /admin/api/projects/:id/push/credentials   (admin Bearer)
+// `push creds delete`  DELETE /admin/api/projects/:id/push/credentials/:provider
+import { readFileSync } from 'node:fs';
+const VALID_PROVIDERS = new Set(['apns', 'fcm', 'webpush', 'hcm', 'mipush']);
+function joinUrl(base, path) {
+    return `${base.replace(/\/+$/, '')}${path}`;
+}
+async function bearerFetch(url, token, init) {
+    const resp = await fetch(url, {
+        ...init,
+        headers: {
+            Authorization: `Bearer ${token}`,
+            'Content-Type': 'application/json',
+            ...(init?.headers ?? {}),
+        },
+    });
+    if (!resp.ok) {
+        const detail = await resp.text().catch(() => '');
+        throw new Error(`${resp.status} ${resp.statusText}${detail ? ` — ${detail.slice(0, 300)}` : ''}`);
+    }
+    const txt = await resp.text();
+    return (txt ? JSON.parse(txt) : null);
+}
+/** Parse a CLI flag value that may be `@file.json` (read from disk
+ *  and parse) or a literal JSON string. */
+export function parseJsonArg(raw, kind) {
+    if (raw.startsWith('@')) {
+        const path = raw.slice(1);
+        const body = readFileSync(path, 'utf-8');
+        try {
+            return JSON.parse(body);
+        }
+        catch (e) {
+            throw new Error(`${kind} file ${path} is not valid JSON: ${e.message}`);
+        }
+    }
+    try {
+        return JSON.parse(raw);
+    }
+    catch (e) {
+        throw new Error(`${kind} arg is not valid JSON: ${e.message}`);
+    }
+}
+// ── credential CRUD ───────────────────────────────────────────────
+export async function pushCredsList(cfg) {
+    return bearerFetch(joinUrl(cfg.apiUrl, `/admin/api/projects/${cfg.projectId}/push/credentials`), cfg.token);
+}
+export async function pushCredsSet(cfg, provider, config, secret) {
+    if (!VALID_PROVIDERS.has(provider)) {
+        throw new Error(`invalid provider '${provider}'; expected one of ${[...VALID_PROVIDERS].join('/')}`);
+    }
+    return bearerFetch(joinUrl(cfg.apiUrl, `/admin/api/projects/${cfg.projectId}/push/credentials`), cfg.token, {
+        body: JSON.stringify({ provider, config, secret }),
+        method: 'PUT',
+    });
+}
+export async function pushCredsDelete(cfg, provider) {
+    await bearerFetch(joinUrl(cfg.apiUrl, `/admin/api/projects/${cfg.projectId}/push/credentials/${provider}`), cfg.token, { method: 'DELETE' });
+}
+export async function pushSend(cfg, opts) {
+    const payload = {
+        to: opts.to,
+        title: opts.title,
+        body: opts.body,
+        data: opts.data,
+        idempotencyKey: opts.idempotencyKey,
+    };
+    if (opts.priority || opts.ttl != null) {
+        payload.options = { priority: opts.priority, ttl: opts.ttl };
+    }
+    const resp = await bearerFetch(joinUrl(cfg.apiUrl, '/v1/push/send'), cfg.token, {
+        body: JSON.stringify(payload),
+        method: 'POST',
+    });
+    if (!resp.tickets?.length) {
+        throw new Error('server returned no tickets');
+    }
+    return resp.tickets[0];
+}
+export async function pushReceipt(cfg, sendId) {
+    return bearerFetch(joinUrl(cfg.apiUrl, `/v1/push/receipts/${encodeURIComponent(sendId)}`), cfg.token);
+}
+//# sourceMappingURL=push.js.map

package/lib/push.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.js","sourceRoot":"","sources":["../src/push.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,EAAE;AACF,qEAAqE;AACrE,oEAAoE;AACpE,kCAAkC;AAClC,EAAE;AACF,6DAA6D;AAC7D,6DAA6D;AAC7D,wFAAwF;AACxF,wFAAwF;AACxF,iFAAiF;AAEjF,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAwBtC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAA;AAE5E,SAAS,OAAO,CAAC,IAAY,EAAE,IAAY;IACzC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAA;AAC7C,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAW,EACX,KAAa,EACb,IAAkB;IAElB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC5B,GAAG,IAAI;QACP,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,cAAc,EAAE,kBAAkB;YAClC,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;SACzB;KACF,CAAC,CAAA;IACF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;QAChD,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACjF,CAAA;IACH,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;IAC7B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAM,CAAA;AAC5C,CAAC;AAED;2CAC2C;AAC3C,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,IAAY;IACpD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACzB,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACxC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACzB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,SAAS,IAAI,uBAAwB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;QACpF,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACxB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,2BAA4B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;IAC3E,CAAC;AACH,CAAC;AAED,qEAAqE;AAErE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAqB;IACvD,OAAO,WAAW,CAChB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,uBAAuB,GAAG,CAAC,SAAS,mBAAmB,CAAC,EAC5E,GAAG,CAAC,KAAK,CACV,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAqB,EACrB,QAAgB,EAChB,MAAe,EACf,MAAe;IAEf,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,qBAAqB,QAAQ,sBAAsB,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACpF,CAAA;IACH,CAAC;IACD,OAAO,WAAW,CAChB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,uBAAuB,GAAG,CAAC,SAAS,mBAAmB,CAAC,EAC5E,GAAG,CAAC,KAAK,EACT;QACE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAClD,MAAM,EAAE,KAAK;KACd,CACF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAqB,EACrB,QAAgB;IAEhB,MAAM,WAAW,CACf,OAAO,CACL,GAAG,CAAC,MAAM,EACV,uBAAuB,GAAG,CAAC,SAAS,qBAAqB,QAAQ,EAAE,CACpE,EACD,GAAG,CAAC,KAAK,EACT,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAA;AACH,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAqB,EAAE,IAAc;IAClE,MAAM,OAAO,GAA4B;QACvC,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAA;IACD,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;QACtC,OAAO,CAAC,OAAO,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAA;IAC9D,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,WAAW,CAC5B,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,EACpC,GAAG,CAAC,KAAK,EACT;QACE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAC7B,MAAM,EAAE,MAAM;KACf,CACF,CAAA;IACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAA;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAqB,EACrB,MAAc;IAEd,OAAO,WAAW,CAChB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,qBAAqB,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,EACtE,GAAG,CAAC,KAAK,CACV,CAAA;AACH,CAAC"}

package/lib/react-native.d.ts

@@ -0,0 +1,25 @@
+/** Resolve `react-native/scripts/compose-source-maps.js` from the
+ *  current project's node_modules. Returns null if react-native isn't
+ *  installed or the version doesn't ship that script. */
+export declare function resolveComposeScript(fromDir?: string): null | string;
+/** Compose a Metro packager source map + a Hermes source map into a
+ *  single map (a temp file the caller is responsible for deleting).
+ *  Throws if react-native's compose script can't be found or fails. */
+export declare function composeSourceMaps(metroMap: string, hermesMap: string): string;
+export type RnUploadOptions = {
+    apiUrl: string;
+    /** Optional bundle file (.jsbundle / .bundle) to upload alongside the map. */
+    bundle?: string;
+    dryRun?: boolean;
+    hermesMap: string;
+    metroMap: string;
+    release: string;
+    token: string;
+};
+/** Compose the Metro + Hermes maps, then upload the result (and the
+ *  bundle, if given). Cleans up the temp composed map. */
+export declare function reactNativeUpload(opts: RnUploadOptions): Promise<{
+    files: string[];
+    uploaded?: number;
+}>;
+//# sourceMappingURL=react-native.d.ts.map

package/lib/react-native.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"react-native.d.ts","sourceRoot":"","sources":["../src/react-native.ts"],"names":[],"mappings":"AASA;;yDAEyD;AACzD,wBAAgB,oBAAoB,CAAC,OAAO,SAAgB,GAAG,IAAI,GAAG,MAAM,CAc3E;AAED;;uEAEuE;AACvE,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAkB7E;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AAED;0DAC0D;AAC1D,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC;IACtE,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB,CAAC,CA0BD"}

package/lib/react-native.js

@@ -0,0 +1,82 @@
+import { spawnSync } from 'node:child_process';
+import { existsSync, mkdtempSync, rmSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { uploadArtifact } from './upload.js';
+import { basename } from 'node:path';
+/** Resolve `react-native/scripts/compose-source-maps.js` from the
+ *  current project's node_modules. Returns null if react-native isn't
+ *  installed or the version doesn't ship that script. */
+export function resolveComposeScript(fromDir = process.cwd()) {
+    const req = createRequire(join(fromDir, 'noop.js'));
+    for (const id of [
+        'react-native/scripts/compose-source-maps.js',
+        '@react-native/community-cli-plugin/dist/utils/composeSourceMaps.js',
+    ]) {
+        try {
+            const p = req.resolve(id);
+            if (existsSync(p))
+                return p;
+        }
+        catch {
+            // try next
+        }
+    }
+    return null;
+}
+/** Compose a Metro packager source map + a Hermes source map into a
+ *  single map (a temp file the caller is responsible for deleting).
+ *  Throws if react-native's compose script can't be found or fails. */
+export function composeSourceMaps(metroMap, hermesMap) {
+    for (const p of [metroMap, hermesMap]) {
+        if (!existsSync(p))
+            throw new Error(`no such file: ${p}`);
+    }
+    const script = resolveComposeScript();
+    if (!script) {
+        throw new Error("couldn't find react-native's compose-source-maps.js — install react-native, or " +
+            'compose the maps yourself and use `sentori-cli upload sourcemap <composed.map>`');
+    }
+    const out = join(mkdtempSync(join(tmpdir(), 'sentori-rn-')), 'composed.map');
+    const r = spawnSync('node', [script, metroMap, hermesMap, '-o', out], { stdio: 'inherit' });
+    if (r.status !== 0) {
+        throw new Error(`compose-source-maps.js exited with ${r.status ?? 'signal'}`);
+    }
+    if (!existsSync(out))
+        throw new Error('compose-source-maps.js produced no output');
+    return out;
+}
+/** Compose the Metro + Hermes maps, then upload the result (and the
+ *  bundle, if given). Cleans up the temp composed map. */
+export async function reactNativeUpload(opts) {
+    const composed = composeSourceMaps(opts.metroMap, opts.hermesMap);
+    try {
+        const paths = [composed, ...(opts.bundle ? [opts.bundle] : [])];
+        if (opts.dryRun)
+            return { files: paths };
+        let uploaded = 0;
+        for (const p of paths) {
+            await uploadArtifact({
+                apiUrl: opts.apiUrl,
+                token: opts.token,
+                release: opts.release,
+                kind: 'sourcemap',
+                path: p,
+                name: basename(p),
+            });
+            uploaded += 1;
+        }
+        return { files: paths, uploaded };
+    }
+    finally {
+        try {
+            rmSync(composed, { force: true });
+            rmSync(join(composed, '..'), { force: true, recursive: true });
+        }
+        catch {
+            // best-effort cleanup
+        }
+    }
+}
+//# sourceMappingURL=react-native.js.map

package/lib/react-native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"react-native.js","sourceRoot":"","sources":["../src/react-native.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAEpC;;yDAEyD;AACzD,MAAM,UAAU,oBAAoB,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE;IAC1D,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAA;IACnD,KAAK,MAAM,EAAE,IAAI;QACf,6CAA6C;QAC7C,oEAAoE;KACrE,EAAE,CAAC;QACF,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YACzB,IAAI,UAAU,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAA;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,WAAW;QACb,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;uEAEuE;AACvE,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,SAAiB;IACnE,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAA;IAC3D,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAA;IACrC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,iFAAiF;YAC/E,iFAAiF,CACpF,CAAA;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,EAAE,cAAc,CAAC,CAAA;IAC5E,MAAM,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;IAC3F,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC,CAAA;IAC/E,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;IAClF,OAAO,GAAG,CAAA;AACZ,CAAC;AAaD;0DAC0D;AAC1D,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAqB;IAI3D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;IACjE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC/D,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;QACxC,IAAI,QAAQ,GAAG,CAAC,CAAA;QAChB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,cAAc,CAAC;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,CAAC;gBACP,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;aAClB,CAAC,CAAA;YACF,QAAQ,IAAI,CAAC,CAAA;QACf,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAA;IACnC,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACjC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;AACH,CAAC"}

package/lib/source-bundle.d.ts

@@ -0,0 +1,28 @@
+import type { AdminUpload } from './native-artifacts.js';
+export type SourceBundleUploadOptions = AdminUpload & {
+    /** v1.4 W26 — optional module label so polyrepo apps (main +
+     *  watch ext + share ext etc.) can upload multiple bundles per
+     *  (release, platform). Empty/undefined → unlabelled single
+     *  bundle (v1.3 W15 behaviour). */
+    module?: string;
+    /** Pre-built tar.gz archive of the project's source tree. */
+    path: string;
+    platform: 'android' | 'ios';
+};
+export type SourceBundleUploadResult = {
+    contentHash: string;
+    kind: string;
+    sizeBytes: number;
+};
+export declare function uploadSourceBundle(opts: SourceBundleUploadOptions): Promise<SourceBundleUploadResult>;
+/** Walk `dir`, pick platform-relevant source files, and tar.gz them
+ *  into a temp file. Caller is responsible for invoking `cleanup()`.
+ *  Uses the system `tar` binary; that's portable enough on macOS +
+ *  Linux + WSL, which covers every realistic CI environment Sentori
+ *  ships to. Native Windows CI without WSL would need to gzip the
+ *  archive themselves (the pre-built-path mode still works). */
+export declare function buildSourceBundleFromDir(dir: string, platform: 'android' | 'ios'): Promise<{
+    cleanup: () => Promise<void>;
+    path: string;
+}>;
+//# sourceMappingURL=source-bundle.d.ts.map

package/lib/source-bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-bundle.d.ts","sourceRoot":"","sources":["../src/source-bundle.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAyBxD,MAAM,MAAM,yBAAyB,GAAG,WAAW,GAAG;IACpD;;;uCAGmC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,SAAS,GAAG,KAAK,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG;IACrC,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,wBAAwB,CAAC,CA6BnC;AAuDD;;;;;gEAKgE;AAChE,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,SAAS,GAAG,KAAK,GAC1B,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAuCzD"}

package/lib/source-bundle.js

@@ -0,0 +1,193 @@
+// v1.2 W3.a — `sentori-cli upload source-bundle`.
+//
+// Uploads a pre-built `*.tar.gz` archive of the project's source tree
+// for one platform. Server stores it under
+// `release_artifacts` with `kind = source_bundle_<platform>`; on
+// click-frame, the dashboard's FrameSourceDrawer pulls the matching
+// source file out of the archive and shows ±N lines.
+//
+// We intentionally keep the CLI side small: the operator (or CI)
+// already knows how to build a tarball. v1.3 may add an
+// auto-bundle-from-directory mode; for now you do:
+//
+//   tar -czf ios-source.tar.gz Sources/
+//   sentori-cli upload source-bundle --project <uuid> \
+//     --release myapp@1.0.0 --platform ios --path ios-source.tar.gz
+import { spawnSync } from 'node:child_process';
+import { mkdtemp, readFile, readdir, stat, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join, relative, sep as pathSep } from 'node:path';
+const PLATFORMS = new Set(['ios', 'android']);
+/** v1.2 W3.d — per-platform file extensions the CLI bundles when
+ *  `--from-dir` mode picks files from a project tree. Kept narrow on
+ *  purpose: source-bundle is only useful for native source viewing,
+ *  and including non-source files would balloon the archive without
+ *  helping the lookup path. */
+const EXTENSIONS = {
+    android: ['.kt', '.java'],
+    ios: ['.swift', '.m', '.mm', '.h', '.hpp'],
+};
+const SKIP_DIRS = new Set([
+    '.git',
+    'node_modules',
+    'Pods',
+    'build',
+    'DerivedData',
+    '.gradle',
+    '.build',
+    'target',
+]);
+export async function uploadSourceBundle(opts) {
+    if (!PLATFORMS.has(opts.platform)) {
+        throw new Error(`--platform must be 'ios' or 'android' (got '${opts.platform}')`);
+    }
+    if (!opts.release) {
+        throw new Error('--release is required for source-bundle uploads');
+    }
+    // v1.2 W3.d: when `opts.path` is a directory, bundle it on the fly
+    // instead of requiring the operator to pre-build the archive.
+    let archivePath = opts.path;
+    let cleanup;
+    try {
+        const st = await stat(opts.path);
+        if (st.isDirectory()) {
+            const built = await buildSourceBundleFromDir(opts.path, opts.platform);
+            archivePath = built.path;
+            cleanup = built.cleanup;
+        }
+    }
+    catch (e) {
+        if (e.code !== 'ENOENT')
+            throw e;
+        throw new Error(`source path not found: ${opts.path}`);
+    }
+    try {
+        return await uploadPrebuiltTarGz({ ...opts, path: archivePath });
+    }
+    finally {
+        if (cleanup)
+            await cleanup();
+    }
+}
+async function uploadPrebuiltTarGz(opts) {
+    const body = await readFile(opts.path);
+    if (body.length === 0)
+        throw new Error(`empty archive: ${opts.path}`);
+    // Same gzip magic check the server enforces. Failing early here
+    // saves a network round-trip when an operator accidentally points
+    // at a raw .tar.
+    if (body.length < 2 || body[0] !== 0x1f || body[1] !== 0x8b) {
+        throw new Error(`${opts.path} does not look like a gzip stream (expected 1f 8b magic) — ` +
+            `did you mean to gzip it first? \`tar -czf <out>.tar.gz <dir>/\``);
+    }
+    if (!opts.release)
+        throw new Error('--release is required for source-bundle uploads');
+    const base = opts.apiUrl.replace(/\/+$/, '');
+    const q = new URLSearchParams();
+    q.set('release', opts.release);
+    q.set('platform', opts.platform);
+    if (opts.module)
+        q.set('module', opts.module);
+    const url = `${base}/admin/api/projects/${encodeURIComponent(opts.projectId)}/source-bundles?${q.toString()}`;
+    const resp = await fetch(url, {
+        body,
+        headers: {
+            Authorization: `Bearer ${opts.token}`,
+            'Content-Type': 'application/gzip',
+        },
+        method: 'POST',
+    });
+    if (!resp.ok) {
+        let detail = '';
+        try {
+            detail = await resp.text();
+        }
+        catch {
+            // ignore
+        }
+        throw new Error(`${resp.status} ${resp.statusText}${detail ? ` — ${detail.slice(0, 300)}` : ''}`);
+    }
+    const parsed = await resp.json();
+    if (!parsed ||
+        typeof parsed !== 'object' ||
+        typeof parsed.contentHash !== 'string') {
+        throw new Error(`unexpected response shape: ${JSON.stringify(parsed)}`);
+    }
+    const r = parsed;
+    return { contentHash: r.contentHash, kind: r.kind, sizeBytes: r.sizeBytes };
+}
+/** Walk `dir`, pick platform-relevant source files, and tar.gz them
+ *  into a temp file. Caller is responsible for invoking `cleanup()`.
+ *  Uses the system `tar` binary; that's portable enough on macOS +
+ *  Linux + WSL, which covers every realistic CI environment Sentori
+ *  ships to. Native Windows CI without WSL would need to gzip the
+ *  archive themselves (the pre-built-path mode still works). */
+export async function buildSourceBundleFromDir(dir, platform) {
+    const exts = EXTENSIONS[platform];
+    const files = [];
+    await walk(dir, dir, exts, files);
+    if (files.length === 0) {
+        throw new Error(`no ${platform} source files (${exts.join(', ')}) found under ${dir} — ` +
+            `pass --platform with the right value or check your source layout`);
+    }
+    files.sort();
+    // Write the file list to a temp file, then have tar consume it via
+    // -T —. Avoids the per-arg shell length cap on huge projects.
+    const tmp = await mkdtemp(join(tmpdir(), 'sentori-srcbun-'));
+    const listPath = join(tmp, 'files.txt');
+    const archivePath = join(tmp, `${platform}-source.tar.gz`);
+    await writeFile(listPath, files.join('\n'));
+    const r = spawnSync('tar', ['-czf', archivePath, '-C', dir, '-T', listPath]);
+    if (r.status !== 0) {
+        throw new Error(`tar failed (status ${r.status}): ${(r.stderr ?? '').toString().slice(0, 300)}`);
+    }
+    return {
+        cleanup: async () => {
+            try {
+                await readdir(tmp).then(async (entries) => {
+                    for (const e of entries) {
+                        await unlinkIfExists(join(tmp, e));
+                    }
+                });
+                await unlinkIfExists(tmp, true);
+            }
+            catch {
+                // best-effort cleanup
+            }
+        },
+        path: archivePath,
+    };
+}
+async function walk(root, dir, exts, out) {
+    const entries = await readdir(dir, { withFileTypes: true });
+    for (const e of entries) {
+        if (e.name.startsWith('.') && e.isDirectory() && e.name !== '.') {
+            // Hidden directory: skip (.git, .gradle, .build…). The known
+            // ones are listed in SKIP_DIRS for clarity, but any leading-dot
+            // dir is also skipped as a safety net.
+            continue;
+        }
+        if (SKIP_DIRS.has(e.name))
+            continue;
+        const full = join(dir, e.name);
+        if (e.isDirectory()) {
+            await walk(root, full, exts, out);
+        }
+        else if (e.isFile()) {
+            const lower = e.name.toLowerCase();
+            if (exts.some((ext) => lower.endsWith(ext))) {
+                out.push(relative(root, full).split(pathSep).join('/'));
+            }
+        }
+    }
+}
+async function unlinkIfExists(path, isDir = false) {
+    const { rm } = await import('node:fs/promises');
+    try {
+        await rm(path, { force: true, recursive: isDir });
+    }
+    catch {
+        // ignore
+    }
+}
+//# sourceMappingURL=source-bundle.js.map

package/lib/source-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-bundle.js","sourceRoot":"","sources":["../src/source-bundle.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,sEAAsE;AACtE,2CAA2C;AAC3C,iEAAiE;AACjE,oEAAoE;AACpE,qDAAqD;AACrD,EAAE;AACF,iEAAiE;AACjE,wDAAwD;AACxD,mDAAmD;AACnD,EAAE;AACF,wCAAwC;AACxC,wDAAwD;AACxD,oEAAoE;AAEpE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC9E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,OAAO,EAAE,MAAM,WAAW,CAAA;AAI1D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAA;AAE7C;;;;+BAI+B;AAC/B,MAAM,UAAU,GAAwC;IACtD,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;IACzB,GAAG,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC;CAC3C,CAAA;AAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,MAAM;IACN,cAAc;IACd,MAAM;IACN,OAAO;IACP,aAAa;IACb,SAAS;IACT,QAAQ;IACR,QAAQ;CACT,CAAC,CAAA;AAmBF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAA+B;IAE/B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAA;IACnF,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IACpE,CAAC;IAED,mEAAmE;IACnE,8DAA8D;IAC9D,IAAI,WAAW,GAAG,IAAI,CAAC,IAAI,CAAA;IAC3B,IAAI,OAA0C,CAAA;IAC9C,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;YACtE,WAAW,GAAG,KAAK,CAAC,IAAI,CAAA;YACxB,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;QACzB,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,CAAC,CAAA;QAC3D,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IACxD,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;IAClE,CAAC;YAAS,CAAC;QACT,IAAI,OAAO;YAAE,MAAM,OAAO,EAAE,CAAA;IAC9B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,IAA+B;IAE/B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IACrE,gEAAgE;IAChE,kEAAkE;IAClE,iBAAiB;IACjB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,IAAI,6DAA6D;YACvE,iEAAiE,CACpE,CAAA;IACH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IACrF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC5C,MAAM,CAAC,GAAG,IAAI,eAAe,EAAE,CAAA;IAC/B,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IAC9B,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;IAChC,IAAI,IAAI,CAAC,MAAM;QAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,GAAG,IAAI,uBAAuB,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAA;IAE7G,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC5B,IAAI;QACJ,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;YACrC,cAAc,EAAE,kBAAkB;SACnC;QACD,MAAM,EAAE,MAAM;KACf,CAAC,CAAA;IACF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACjF,CAAA;IACH,CAAC;IACD,MAAM,MAAM,GAAY,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;IACzC,IACE,CAAC,MAAM;QACP,OAAO,MAAM,KAAK,QAAQ;QAC1B,OAAQ,MAAoC,CAAC,WAAW,KAAK,QAAQ,EACrE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACzE,CAAC;IACD,MAAM,CAAC,GAAG,MAAkE,CAAA;IAC5E,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAA;AAC7E,CAAC;AAED;;;;;gEAKgE;AAChE,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,GAAW,EACX,QAA2B;IAE3B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IACjC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,MAAM,QAAQ,kBAAkB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,GAAG,KAAK;YACtE,kEAAkE,CACrE,CAAA;IACH,CAAC;IACD,KAAK,CAAC,IAAI,EAAE,CAAA;IAEZ,mEAAmE;IACnE,8DAA8D;IAC9D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAA;IAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;IACvC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,gBAAgB,CAAC,CAAA;IAC1D,MAAM,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAC3C,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;IAC5E,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,sBAAsB,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAChF,CAAA;IACH,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;oBACxC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;wBACxB,MAAM,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA;oBACpC,CAAC;gBACH,CAAC,CAAC,CAAA;gBACF,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;QACH,CAAC;QACD,IAAI,EAAE,WAAW;KAClB,CAAA;AACH,CAAC;AAED,KAAK,UAAU,IAAI,CACjB,IAAY,EACZ,GAAW,EACX,IAAc,EACd,GAAa;IAEb,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;YAChE,6DAA6D;YAC7D,gEAAgE;YAChE,uCAAuC;YACvC,SAAQ;QACV,CAAC;QACD,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAQ;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;QACnC,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;YAClC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC5C,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;YACzD,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,KAAK,GAAG,KAAK;IACvD,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;IAC/C,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC"}

package/lib/upload.d.ts

@@ -0,0 +1,13 @@
+export type UploadOpts = {
+    apiUrl: string;
+    token: string;
+    release: string;
+    kind: 'dsym' | 'proguard' | 'sourcemap';
+    path: string;
+    /** Override the stored artifact name (defaults to the filename). */
+    name?: string;
+};
+export declare function uploadArtifact(opts: UploadOpts): Promise<{
+    id: string;
+}>;
+//# sourceMappingURL=upload.d.ts.map

package/lib/upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.d.ts","sourceRoot":"","sources":["../src/upload.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,UAAU,GAAG;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,WAAW,CAAA;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,oEAAoE;IACpE,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,CAAA;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAuB9E"}

package/lib/upload.js

@@ -0,0 +1,28 @@
+// Unified symbolication-artifact upload: sourcemap / dsym / proguard
+// all land on `POST /v1/releases/{release}/artifacts` (multipart
+// `kind` + `file`), authenticated with an api-scope token. A late
+// upload triggers retro-symbolication server-side, which is what
+// makes the lenient exit-0 contract honest — nothing is lost
+// forever.
+import { readFileSync } from 'node:fs';
+import { basename } from 'node:path';
+export async function uploadArtifact(opts) {
+    const bytes = readFileSync(opts.path);
+    if (bytes.length === 0)
+        throw new Error(`empty file: ${opts.path}`);
+    const form = new FormData();
+    form.append('kind', opts.kind);
+    form.append('file', new Blob([new Uint8Array(bytes)]), opts.name ?? basename(opts.path));
+    const url = `${opts.apiUrl.replace(/\/+$/, '')}/v1/releases/${encodeURIComponent(opts.release)}/artifacts`;
+    const resp = await fetch(url, {
+        method: 'POST',
+        headers: { Authorization: `Bearer ${opts.token}` },
+        body: form,
+    });
+    if (!resp.ok) {
+        const detail = await resp.text().catch(() => '');
+        throw new Error(`${resp.status} ${resp.statusText}${detail ? ` — ${detail.slice(0, 200)}` : ''}`);
+    }
+    return (await resp.json());
+}
+//# sourceMappingURL=upload.js.map

package/lib/upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.js","sourceRoot":"","sources":["../src/upload.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,iEAAiE;AACjE,kEAAkE;AAClE,iEAAiE;AACjE,6DAA6D;AAC7D,WAAW;AAEX,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAYpC,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAgB;IACnD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IAEnE,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAA;IAC3B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,CAAC,MAAM,CACT,MAAM,EACN,IAAI,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EACjC,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CACjC,CAAA;IAED,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAA;IAC1G,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC5B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE;QAClD,IAAI,EAAE,IAAI;KACX,CAAC,CAAA;IACF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;QAChD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACnG,CAAC;IACD,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAmB,CAAA;AAC9C,CAAC"}