@goliapkg/sentori-cli 1.8.0 → 1.10.0

package/LINT.md

@@ -0,0 +1,237 @@
+# Swift and Kotlin lint preview 0.3.0
+
+`sentori lint` is a local quality gate. The existing `sentori-cli` command remains
+available, including `sentori-cli lint`. This preview checks Swift and Kotlin sources. There is no upload, build plugin, or server dependency.
+
+The analyzer is a separate developer tool. Installing the iOS runtime SDK does
+not add SwiftSyntax or change the SDK's supported Swift version.
+
+## Build and run
+
+From a Sentori source checkout, with Node 18+ and the toolchain for each language
+you scan (Swift 6.4; Java 17+ for Kotlin):
+
+```sh
+swift build --package-path sdk/native/ios/Lint -c release --jobs 2
+export SENTORI_LINT_SWIFT="$PWD/sdk/native/ios/Lint/.build/release/sentori-lint-swift"
+# Kotlin analyzer (standalone; no Android SDK or Gradle project needed):
+(cd sdk/native/android/lint && ./gradlew --no-daemon check installDist)
+export SENTORI_LINT_KOTLIN="$PWD/sdk/native/android/lint/build/install/sentori-lint-kotlin/bin/sentori-lint-kotlin"
+bun run --cwd sdk/cli build
+```
+
+The Swift analyzer's only package dependency is the official `swiftlang/swift-syntax`,
+locked to stable 604.0.0. It reads a versioned JSON request on stdin and emits a
+single JSON response on stdout. `sentori-lint-swift --version` prints its version.
+The CLI rejects incompatible, incomplete, or malformed analyzer responses.
+
+After installing `@goliapkg/sentori-cli`, use `sentori lint`. From a source checkout,
+invoke `node /path/to/sentori/sdk/cli/lib/index.js lint`.
+`--swift-analyzer /absolute/path/to/sentori-lint-swift` overrides the environment;
+otherwise the CLI looks for `sentori-lint-swift` on PATH. No binary is downloaded
+automatically. `--kotlin-analyzer /absolute/path/to/sentori-lint-kotlin` similarly
+overrides `SENTORI_LINT_KOTLIN`, then PATH. Keep the entire Gradle `installDist`
+directory together: its launcher needs the jars in the adjacent `lib/` directory.
+The Kotlin analyzer uses the official Kotlin compiler PSI 2.4.21 plus its standard
+library; it neither loads the application's Gradle build nor runs compiler plugins.
+Only analyzers for selected languages are required. Both return findings to the
+CLI, which applies policy, emits text/JSON/SARIF and determines the gate exit code.
+
+Place `sentori-lint.toml` at the repository root. Then:
+
+```sh
+sentori lint
+sentori lint --format sarif > sentori-lint.sarif
+sentori lint --explain SWCON001
+sentori lint --changed HEAD
+sentori lint Sources/Feature
+sentori lint --fix
+```
+
+Files come from Git's tracked and untracked, non-ignored file lists. Paths are
+relative to the Git root, and positional paths are resolved from the working
+directory. Deleted files are omitted; source symlinks are rejected. Generated sources are
+excluded only when explicitly configured. Configured test files participate in function-length checks only; other rules skip them. All `#if`
+branches are analyzed, independent of the platform running the tool. The analyzer
+parses syntax, not types or runtime behavior.
+
+`--fix` delegates formatting to the installed toolchain's `swift format` and
+rescans afterward. It never rewrites forced casts, error handling, or concurrency
+semantics. A scan selecting Kotlin sources rejects `--fix` before modifying any file;
+select Swift paths explicitly to format only those sources. Inspect the resulting source diff before committing it.
+
+Exit codes are **0** for a passing gate, **1** for rule/file count regressions or hard-limit violations,
+and **2** for invalid configuration, parse failures, missing tools, or other
+execution errors. A full scan selecting no Swift or Kotlin files fails explicitly. An empty
+incremental scan succeeds and reports zero files. Both `.swift` and `.kt` files participate; Kotlin scripts (`.kts`) are outside this preview.
+
+## Configuration
+
+This preview supports a strict TOML subset: single-line quoted string values,
+single-line arrays of double-quoted strings, `version = 1`, a `[rules]` table,
+and `[[allow]]` entries. Comments are supported outside strings. Unsupported
+syntax, unknown keys, duplicate keys, and unknown rule IDs fail rather than
+silently changing policy. There is no runtime TOML library dependency.
+
+```toml
+version = 1
+include = ["Sources/**"]
+exclude = []
+tests = ["**/Tests/**", "**/*Tests.swift", "**/*Test.swift"]
+excludePathRegex = ["generated"]
+
+[rules]
+SWSAFE001 = "error"
+SWSAFE002 = "error"
+
+[[allow]]
+rule = "SWCON002"
+path = "Sources/LockedBox.swift"
+reason = "All mutable state is protected by the instance lock; reviewed in PR 123."
+```
+
+Path patterns support `*`, `**`, and `?`, use `/`, and match the entire
+repository-relative path. Brace expansion and character classes are rejected.
+`excludePathRegex` contains case-insensitive JavaScript regular expressions,
+matched anywhere in the repository-relative path. An allowance needs a known
+rule, a relative path pattern, and a nonempty reason. Allowances remain visible
+in text/JSON and as external SARIF suppressions. Source comments cannot suppress
+findings. Safety, concurrency and length rules default to `error`; parameter and Android style policies default to `warn`. The three
+`SWSAFE` rules can be `off` or `warn`;
+the `SWCON` and `KTCON` rules always require a reviewed allowance to bypass the gate.
+`SWAPI001` and `SWAPI002` default to `warn`. Enabled length rules always treat hard-limit
+violations as errors, even when their target checks are configured as warnings.
+
+[The insight example](examples/insight-lint.toml) restricts scanning to its four
+active trees, applies only function-length checks to configured test files, and
+excludes any path containing `generated`, case-insensitively. It deliberately includes no allowances.
+
+## Rules
+
+These are **project policies informed by official documentation**, not claims
+that either language prohibits these language features. `--explain` supplies the official
+reference, section, group, rationale, severity, and fixability for each rule.
+
+| Rule | Check | Baseline permitted |
+| --- | --- | --- |
+| SWSAFE001 | `try!` expressions | Yes |
+| SWSAFE002 | `as!` expressions | Yes |
+| SWCON001 | `nonisolated(unsafe)` modifiers | No |
+| SWCON002 | `@unchecked Sendable` conformances | No |
+| SWCON003 | `Task.detached` / `Swift.Task.detached` calls | No |
+| SWMAINT001 | Function length: target 50, hard limit 200 lines | Target only |
+| SWMAINT002 | File length: target 300, hard limit 500 lines | Target only |
+| KTSAFE001 | Kotlin postfix not-null assertions (`value!!`) | Yes |
+| KTCON001 | Imported/qualified `kotlinx.coroutines.GlobalScope` uses | No |
+| KTCON002 | Imported/qualified `kotlinx.coroutines.runBlocking` calls in main sources | No |
+| KTMAINT001 | Kotlin function length: target 50, hard limit 200 lines | Target only |
+| KTMAINT002 | Kotlin file length: target 300, hard limit 500 lines | Target only |
+| KTAPI001 | More than 5 function/constructor parameters (warning) | If configured as error |
+| KTAPI002 | Explicit non-nullable `Boolean` parameters (warning) | If configured as error |
+| AKS001 | Wildcard imports (warning) | If configured as error |
+| AKS002 | Control-flow braces, with single-line branch exceptions (warning) | If configured as error |
+| AKS003 | ASCII `const val` names outside UPPER_SNAKE_CASE (warning) | If configured as error |
+| SWSAFE003 | Postfix force unwrap expressions (`value!`) | Yes |
+| SWAPI001 | More than 5 explicit declaration parameters (default warning) | If configured as error |
+| SWAPI002 | Explicit `Bool` parameters (default warning) | If configured as error |
+
+The detached-task rule recognizes explicit names, including generic arguments;
+it does not resolve shadowed `Task` names, aliases, or indirect calls. An
+allowance can document a same-spelled unrelated type. Findings use 1-based UTF-16
+columns, including Unicode and CRLF source files. Strings and comments are not
+analyzed as code.
+
+Function length starts at the `func` keyword's physical line and ends at its
+body's closing brace, counting blank lines and comments. Attribute lines before
+`func` are not counted. Named nested/operator functions and test functions are
+included. Initializers, accessors, and closures are not measured by this rule.
+File length counts physical lines, including comments and blanks, without a
+phantom line after the final terminator. LF, CRLF, and lone CR are supported.
+The numeric limits are project policies, not official Swift limits.
+
+Parameter count includes functions, initializers, and subscripts, including
+parameters with defaults and variadics; it excludes closure parameters and
+function-type argument lists. The Bool policy matches `Bool`, `Swift.Bool`, and
+attributed forms such as `inout Bool`, but not optional or collection types,
+aliases, or closure parameters. Force unwraps use expression nodes and never
+count IUO type declarations (`var value: String!`) or logical negation.
+
+Kotlin functions are measured from `fun` through the end of the body, including
+named nested and expression-body functions. Constructors, accessors and lambdas
+are excluded. File and function limits use the same physical-line policy as Swift.
+Configured tests participate only in function length, including its hard limit.
+
+Coroutine checks recognize explicit, aliased and wildcard imports and fully
+qualified names; they do not resolve local shadowing, indirect calls or type aliases.
+Imports themselves are not GlobalScope usages. `!!` checks parse expression nodes,
+so comments and string text do not create debt; code inside string interpolation
+does. Kotlin findings also use 1-based UTF-16 columns with LF, CRLF and lone CR support.
+
+SPM/Gradle integration plugins and server uploads are not part of this preview.
+
+## Baselines
+
+```sh
+sentori lint --baseline sentori-lint-baseline.json --init-baseline
+sentori lint --baseline sentori-lint-baseline.json
+sentori lint --baseline sentori-lint-baseline.json --update-baseline
+```
+
+Initialization requires a nonexistent destination and a successful full scan.
+Resolve or explicitly allow concurrency escape hatches and hard-limit
+violations before initializing.
+Thereafter, updates can only lower existing error counts or remove resolved
+entries; they cannot add files/rules or increase counts. A new file starts at
+zero. Warnings do not fail the gate and are not baseline debt. Partial scans and
+`--changed` cannot initialize/update baselines. Tool or parse errors never write
+a baseline, and rule regressions leave it unchanged.
+
+Length targets participate in the count ratchet. Their hard limits are checked
+independently: a baselined 51-line function growing to 201 lines fails even though
+its rule/file count stays at one. Hard-limit findings never enter a baseline;
+only an explicit allowance with a reason can waive them. JSON findings include
+`measured` and `hardLimitExceeded`; aggregate regressions distinguish `count`
+from `hard-limit`. SARIF preserves these measurements in result properties.
+
+Counts are tracked by rule and file, not diagnostic fingerprint. Replacing one
+finding with another in the same rule/file bucket is therefore not detected.
+Renamed files are treated as new files. Full scans can drop debt for deleted files.
+
+The baseline records the ruleset and a configuration digest. Changing exclusions,
+allowances, or severities requires an explicit policy migration: retain the old
+baseline, initialize a different file under the reviewed new policy, and review
+the count differences before replacing it. `--update-baseline` does not perform
+that migration or accept a policy change silently. Updates use a lock and atomic
+replacement. A lock left by a killed writer must be removed only after confirming
+that writer has exited.
+
+SARIF 2.1.0 output includes **all enabled findings**, including baseline debt;
+a count baseline cannot truthfully mark individual findings as unchanged.
+Aggregate regressions appear in run properties. Consumers should use the CLI
+exit status for the ratchet gate rather than treating every SARIF error-level
+finding as a new violation. JSON includes scanned files, scope completeness,
+findings, allowances, regressions, and whether the baseline can decrease.
+
+## Moving from preview 0.1.0
+
+The 0.2.1 analyzer and CLI use the `swift-quality-v2.1` ruleset. Pair matching
+versions; a mismatched analyzer or a 0.1.0 baseline fails explicitly. Retain the
+old baseline, initialize a separate 0.2.1 baseline, and review the old rule counts
+as well as the new debt before adopting it. This is an explicit policy migration,
+not a way to increase the old rules' allowances unnoticed. Test files now
+participate in function-length checks, so the total scanned-file count increases
+while the previous five rules still exclude configured tests.
+
+Preview 0.2.1 also changes the parameter-count default from the 0.2.0 error
+level to warning. Its ruleset revision rejects old baselines so this policy
+change cannot silently erase error debt. Explicit `error` remains supported.
+
+
+## Moving to preview 0.3.0
+
+Swift's analyzer protocol remains `swift-syntax-604.0.0/swift-quality-v2.1`;
+Kotlin uses `kotlin-2.4.21/kotlin-quality-v1`. The CLI verifies each independently.
+Reports and baselines record the combined ruleset. Retain any 0.2.1 baseline,
+initialize a separate 0.3.0 baseline, and compare the Swift counts before adopting
+it alongside the new Kotlin debt. An old baseline is rejected explicitly; updating
+never silently migrates policies. JSON `language` is `swift`, `kotlin`, or `mixed`.

package/README.md

@@ -7,7 +7,7 @@ machine and does not add runtime work to the application.
 
 ## Install the correct version
 
-This guide requires **CLI 1.8.0**. Check registry availability before updating
+This guide requires **CLI 1.10.0**. Check registry availability before updating
 your build pipeline. The older 1.5.0 package has only the
 `sentori-cli` executable and does not have `init`, `doctor`, `upload all`, ZIP
 packaging or exact-file `verify`. Do not install 1.5.0 and run this guide's commands.
@@ -16,17 +16,17 @@ Use Node **18.17 or newer**; use a maintained Node release for CI. Pin the CLI a
 development dependency and commit the package lock:
 
 ```sh
-npm view @goliapkg/sentori-cli@1.8.0 version
-npm install --save-dev --save-exact @goliapkg/sentori-cli@1.8.0
+npm view @goliapkg/sentori-cli@1.10.0 version
+npm install --save-dev --save-exact @goliapkg/sentori-cli@1.10.0
 npx --no-install sentori --version
 ```
 
-The last command must print `sentori 1.8.0`. If npm cannot find that version, use
+The last command must print `sentori 1.10.0`. If npm cannot find that version, use
 the tested package supplied by the Sentori team, without assuming `latest` has
 these features:
 
 ```sh
-npm install --save-dev --save-exact /absolute/path/goliapkg-sentori-cli-1.8.0.tgz
+npm install --save-dev --save-exact /absolute/path/goliapkg-sentori-cli-1.10.0.tgz
 npx --no-install sentori --version
 ```
 
@@ -49,7 +49,7 @@ package if the local executable is missing. The server maintenance binary
 
 | Value | Meaning |
 | --- | --- |
-| CLI `1.8.0` | Build-tool package version, shown by `sentori --version` |
+| CLI `1.10.0` | Build-tool package version, shown by `sentori --version` |
 | Server version | Running server binary, reported by `sentori doctor` |
 | SDK version | Independently versioned app library; it need not equal the CLI or server |
 | Config `version: 1` | Upload configuration schema, not a product version |
@@ -277,7 +277,7 @@ Native tooling. A Metro map alone does not resolve Hermes bytecode offsets.
 
 | Result | Action |
 | --- | --- |
-| No `sentori` binary / unknown `init` | Check the installed package version; use 1.8.0 or its supplied tarball, with `npx --no-install` |
+| No `sentori` binary / unknown `init` | Check the installed package version; use 1.10.0 or its supplied tarball, with `npx --no-install` |
 | `doctor` rejects ZIP capability | Upgrade/deploy the compatible server; CLI installation cannot enable server support |
 | 401 / `admin_token_required` | Use an API-scope token for the correct project and instance |
 | Local file missing | Build first; resolve paths relative to the configuration file |
@@ -302,7 +302,7 @@ an API token into browser or mobile bundles.
 export SENTORI_API_TOKEN=st_...
 npx --no-install sentori project show --json
 npx --no-install sentori app list --json
-npx --no-install sentori issue list --app <app-uuid> --environment production --json
+npx --no-install sentori issue list --app <app-uuid> --environment production --json --limit 50 --offset 0
 ```
 
 These project/app commands require the CLI release shipped with server 5.1.17;
@@ -349,3 +349,60 @@ or `runs --id` returns zero for passed, one for site failed and two for monitori
 errors, unfinished/cancelled runs or transport errors. `--wait` requires `--app`
 and waits up to 330 seconds. API and invalid-command errors always return two.
 The configuration contract is documented in [the protocol](../../docs/protocol.md#web-monitoring).
+
+Issue lists use offset pagination: `--limit` accepts 1–200 (default 50), and
+`--offset` is a non-negative integer (default 0). JSON output includes `issues`,
+`total`, `limit`, `offset`, and `nextOffset`; request the returned `nextOffset`
+until it is null. These metadata fields and offset support require a server
+with API pagination support. Ordering reflects live impact, so rows can move
+between pages while new events arrive; this is not a snapshot export.
+
+## Issue automation (MCP)
+
+
+```sh
+npx --no-install sentori mcp serve --api-url "$SENTORI_API_URL" --token "$SENTORI_TOKEN"
+```
+
+Then point a MCP-compatible agent (Claude Code config / Cursor / etc.)
+at the spawned stdio server. Use a project `api`-scope token; an SDK ingest
+token cannot read issues.
+
+- `sentori_issue_watch`: durable changes with resumable `cursor`, bounded
+  `limit` and long polling through `waitSeconds` (0–25).
+- `sentori_issue_read`: structured evidence, including missing context,
+  activity and authenticated attachment links.
+- `sentori_issue_bundle`: preserves its Markdown default; also accepts
+  `format: "json"`.
+- `sentori_issue_attachment`: read screenshot images or text/JSON diagnostics
+  from the bundle, with a 1 MiB inline limit.
+- `sentori_issue_list`, `sentori_issue_note`, `sentori_issue_resolve`: ranked
+  triage and investigation/fix writeback.
+
+Persist `nextCursor` only after durably enqueueing the page. An empty page
+is a heartbeat; keep watching. Deduplicate replayed changes by cursor and
+fetch the current bundle before acting. Watch is a change feed, not an
+exclusive work queue. JSON results include MCP `structuredContent`.
+
+The same interfaces work directly over HTTP with bearer authentication,
+without MCP or a browser. See the [machine consumption contract](../../docs/protocol.md#machine-issue-consumption-read-and-watch)
+for replay, errors, evidence limits, and the consumer checkpoint rules.
+
+→ Full reference: `sentori-cli --help`
+→ Recipes: [sentori.golia.jp/docs/recipes/sourcemap-upload](https://sentori.golia.jp/docs/recipes/sourcemap-upload)
+
+
+`sentori verify` and the verification after `sentori upload all` require server
+5.3.0 or newer. They request `GET /v1/releases/{release}/artifacts?verify=true`,
+which rereads stored blobs, compares their SHA256 and byte size, and repeats
+format validation. Inventory metadata alone cannot pass verification. Missing,
+truncated or changed blobs fail verification; rerunning the upload repairs a
+corrupt blob from the original bytes. Verification describes storage at the
+moment of the check and does not prove that an event matches this build.
+
+## Local Swift and Kotlin quality checks
+
+`sentori lint` checks safety, concurrency and structure with standalone SwiftSyntax
+and Kotlin PSI analyzers, a decreasing baseline, and JSON/SARIF reports. See
+[LINT.md](LINT.md) for installation, rule metadata, configuration, and limitations.
+Lint runs locally and does not need a server or API token.

package/examples/insight-lint.toml

@@ -0,0 +1,32 @@
+version = 1
+include = ["insight-ios/**", "insight-android/**", "insight-common-ios/**", "insight-common-android/**"]
+exclude = ["insight-consumer-*/**"]
+# Test files participate in function-length checks only.
+tests = ["insight-common-ios/Tests/**", "**/*Tests.swift", "**/*Test.swift", "**/src/test/**", "**/src/androidTest/**", "insight-common-android/contract/src/**"]
+# Case-insensitive regular expressions matched against repository-relative paths.
+excludePathRegex = ["generated"]
+
+[rules]
+SWSAFE001 = "error"
+SWSAFE002 = "error"
+SWCON001 = "error"
+SWCON002 = "error"
+SWCON003 = "error"
+SWMAINT001 = "error"
+SWMAINT002 = "error"
+SWSAFE003 = "error"
+SWAPI001 = "warn"
+SWAPI002 = "warn"
+KTSAFE001 = "error"
+KTCON001 = "error"
+KTCON002 = "error"
+KTMAINT001 = "error"
+KTMAINT002 = "error"
+KTAPI001 = "warn"
+KTAPI002 = "warn"
+AKS001 = "warn"
+AKS002 = "warn"
+AKS003 = "warn"
+
+# Allowances use [[allow]] entries with rule, path, and a nonempty reason.
+# Add only reviewed exceptions. No source comment can suppress a finding.

package/lib/artifacts.d.ts

@@ -10,6 +10,12 @@ export type ArtifactRow = {
      *  the check existed — "never looked at", not "looked at and
      *  fine". `false` means it stored and will symbolicate nothing. */
     usable?: boolean | null;
+    storageVerification?: {
+        integrity: string;
+        actualContentHash?: string;
+        actualSizeBytes?: number;
+        usable?: boolean | null;
+    };
 };
 export type ArtifactsResponse = {
     /** Additive capability advertisement. Absent on older servers. */
@@ -32,5 +38,6 @@ export declare function fetchArtifacts(opts: {
     apiUrl: string;
     release: string;
     token: string;
+    verify?: boolean;
 }): Promise<ArtifactsResponse>;
 //# sourceMappingURL=artifacts.d.ts.map

package/lib/artifacts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../src/artifacts.ts"],"names":[],"mappings":"AAqBA,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,kEAAkE;IAClE,OAAO,EAAE,IAAI,GAAG,MAAM,CAAA;IACtB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB;;uEAEmE;IACnE,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;CACxB,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,kEAAkE;IAClE,aAAa,CAAC,EAAE;QACd,aAAa,EAAE,MAAM,CAAA;QACrB,gBAAgB,EAAE,MAAM,CAAA;QACxB,mBAAmB,EAAE,MAAM,EAAE,CAAA;QAC7B,YAAY,EAAE,MAAM,EAAE,CAAA;KACvB,CAAA;IACD,OAAO,EAAE,MAAM,CAAA;IACf;;sEAEkE;IAClE,KAAK,EAAE,OAAO,CAAA;IACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7B,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,SAAS,EAAE,WAAW,EAAE,CAAA;CACzB,CAAA;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAkB7B"}
+{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../src/artifacts.ts"],"names":[],"mappings":"AAqBA,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,kEAAkE;IAClE,OAAO,EAAE,IAAI,GAAG,MAAM,CAAA;IACtB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB;;uEAEmE;IACnE,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IACvB,mBAAmB,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;KAAE,CAAA;CAC3H,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,kEAAkE;IAClE,aAAa,CAAC,EAAE;QACd,aAAa,EAAE,MAAM,CAAA;QACrB,gBAAgB,EAAE,MAAM,CAAA;QACxB,mBAAmB,EAAE,MAAM,EAAE,CAAA;QAC7B,YAAY,EAAE,MAAM,EAAE,CAAA;KACvB,CAAA;IACD,OAAO,EAAE,MAAM,CAAA;IACf;;sEAEkE;IAClE,KAAK,EAAE,OAAO,CAAA;IACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7B,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,SAAS,EAAE,WAAW,EAAE,CAAA;CACzB,CAAA;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAkB7B"}

package/lib/artifacts.js

@@ -20,7 +20,7 @@
 // readable. It does not re-group them.
 export async function fetchArtifacts(opts) {
     const url = `${opts.apiUrl.replace(/\/+$/, '')}/v1/releases/` +
-        `${encodeURIComponent(opts.release)}/artifacts`;
+        `${encodeURIComponent(opts.release)}/artifacts${opts.verify ? "?verify=true" : ""}`;
     const resp = await fetch(url, {
         headers: { Authorization: `Bearer ${opts.token}` },
     });

package/lib/artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../src/artifacts.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,EAAE;AACF,qEAAqE;AACrE,iEAAiE;AACjE,iEAAiE;AACjE,+DAA+D;AAC/D,sEAAsE;AACtE,oEAAoE;AACpE,kCAAkC;AAClC,EAAE;AACF,iEAAiE;AACjE,kEAAkE;AAClE,mEAAmE;AACnE,mEAAmE;AACnE,6CAA6C;AAC7C,EAAE;AACF,gEAAgE;AAChE,+DAA+D;AAC/D,4DAA4D;AAC5D,uCAAuC;AAkCvC,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAIpC;IACC,MAAM,GAAG,GACP,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe;QACjD,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAA;IACjD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC5B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE;KACnD,CAAC,CAAA;IACF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;QAChD,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACjF,CAAA;IACH,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAuB,CAAA;IACrD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACxH,MAAM,IAAI,KAAK,CAAC,0GAA0G,CAAC,CAAA;IAC7H,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}
+{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../src/artifacts.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,EAAE;AACF,qEAAqE;AACrE,iEAAiE;AACjE,iEAAiE;AACjE,+DAA+D;AAC/D,sEAAsE;AACtE,oEAAoE;AACpE,kCAAkC;AAClC,EAAE;AACF,iEAAiE;AACjE,kEAAkE;AAClE,mEAAmE;AACnE,mEAAmE;AACnE,6CAA6C;AAC7C,EAAE;AACF,gEAAgE;AAChE,+DAA+D;AAC/D,4DAA4D;AAC5D,uCAAuC;AAmCvC,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAKpC;IACC,MAAM,GAAG,GACP,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe;QACjD,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;IACrF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC5B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE;KACnD,CAAC,CAAA;IACF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;QAChD,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACjF,CAAA;IACH,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAuB,CAAA;IACrD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACxH,MAAM,IAAI,KAAK,CAAC,0GAA0G,CAAC,CAAA;IAC7H,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/lib/compatibility.js

@@ -7,7 +7,7 @@ export function checkCompatibility(result, sourceZip) {
     if (info === undefined) {
         if (sourceZip)
             throw new Error('This server does not advertise source ZIP support. No files were uploaded. Upgrade the Sentori server to a build advertising artifact protocol 1 and sourceBundleFormats: ["zip"], then run sentori doctor. Existing CLI 1.5 pipelines may continue using legacy JSON sources.');
-        return 'Legacy artifact API: server capabilities are not advertised. Source maps, dSYM and mapping uploads remain available; verification still requires matching SHA-256 bytes and usable: true.';
+        return 'Legacy artifact API: server capabilities are not advertised. Source maps, dSYM and mapping uploads remain available; verification requires a server that supplies fresh storageVerification proof; inventory metadata alone cannot pass.';
     }
     if (!info || typeof info.serverVersion !== 'string' || info.artifactProtocol !== 1
         || !Array.isArray(info.sourceBundleFormats) || !Array.isArray(info.verification)

package/lib/compatibility.js.map

@@ -1 +1 @@
-{"version":3,"file":"compatibility.js","sourceRoot":"","sources":["../src/compatibility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAGtC,mFAAmF;AACnF,MAAM,CAAC,MAAM,WAAW,GAAW,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;AAExH,mFAAmF;AACnF,MAAM,UAAU,kBAAkB,CAAC,MAAyB,EAAE,SAAkB;IAC9E,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAA;IACjC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gRAAgR,CAAC,CAAA;QAChT,OAAO,2LAA2L,CAAA;IACpM,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,gBAAgB,KAAK,CAAC;WAC7E,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;WAC7E,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,0LAA0L,CAAC,CAAA;IAC7M,CAAC;IACD,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,CAAC,aAAa,qGAAqG,CAAC,CAAA;IACtN,OAAO,eAAe,WAAW,YAAY,IAAI,CAAC,aAAa,qCAAqC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,GAAG,CAAA;AAC/K,CAAC"}
+{"version":3,"file":"compatibility.js","sourceRoot":"","sources":["../src/compatibility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAGtC,mFAAmF;AACnF,MAAM,CAAC,MAAM,WAAW,GAAW,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;AAExH,mFAAmF;AACnF,MAAM,UAAU,kBAAkB,CAAC,MAAyB,EAAE,SAAkB;IAC9E,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAA;IACjC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gRAAgR,CAAC,CAAA;QAChT,OAAO,0OAA0O,CAAA;IACnP,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,gBAAgB,KAAK,CAAC;WAC7E,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;WAC7E,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,0LAA0L,CAAC,CAAA;IAC7M,CAAC;IACD,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,CAAC,aAAa,qGAAqG,CAAC,CAAA;IACtN,OAAO,eAAe,WAAW,YAAY,IAAI,CAAC,aAAa,qCAAqC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,GAAG,CAAA;AAC/K,CAAC"}

package/lib/index.js

@@ -4,7 +4,7 @@ import { parseArgs } from 'node:util';
 import { runWorkflow, runSourcesPack, WORKFLOW_HELP } from './workflow.js';
 import { checkCompatibility, CLI_VERSION } from './compatibility.js';
 import { listApps, showProject } from './apps.js';
-import { fetchBundle, formatIssueLine, listIssues, noteIssue, resolveIssue, } from './issue.js';
+import { fetchBundle, formatIssueLine, listIssuesPage, noteIssue, resolveIssue, } from './issue.js';
 import { isStrict, lenientFail, stripStrict } from './lenient.js';
 import { runMcpServer } from './mcp.js';
 import { uploadDsym, uploadMapping } from './native-artifacts.js';
@@ -34,6 +34,9 @@ Legacy kind-presence gate (use verify for exact planned files):
       catches the case a local "we ran the upload" ledger cannot:
       the upload step that stopped being called at all.
 
+Local Swift and Kotlin quality gate (fails on regressions or tool errors):
+  sentori lint [paths...] --help
+
 Regression tripwires (design: probes):
   sentori probes sync --release <r> --token <t> [--dir .]
       Statically scans source for sentori.probe('REF') call sites and
@@ -43,7 +46,7 @@ CI triage (the same /api surface an AI agent uses):
   sentori project show [--json]       project selected by the API token
   sentori app list [--json]           apps within that project
   sentori issue list [--status open] [--kind error] [--app <uuid>]
-      [--platform <platform>] [--environment <env>] [--release <release>] [--json]
+      [--platform <platform>] [--environment <env>] [--release <release>] [--limit 50] [--offset 0] [--json]
   sentori issue resolve <issue-id> [--in-release <r>]
   sentori issue note <issue-id> --body "fixed in abc123"
   sentori issue bundle <issue-id>
@@ -454,7 +457,7 @@ async function cmdIssueList(argv) {
     try {
         parsed = parseArgs({
             args: argv,
-            options: { ...ISSUE_OPTS, kind: { type: 'string' }, status: { type: 'string' }, app: { type: 'string' }, platform: { type: 'string' }, environment: { type: 'string' }, release: { type: 'string' }, json: { type: 'boolean' } },
+            options: { ...ISSUE_OPTS, kind: { type: 'string' }, status: { type: 'string' }, app: { type: 'string' }, platform: { type: 'string' }, environment: { type: 'string' }, release: { type: 'string' }, limit: { type: 'string' }, offset: { type: 'string' }, json: { type: 'boolean' } },
         });
     }
     catch (e) {
@@ -469,18 +472,21 @@ async function cmdIssueList(argv) {
     if (!cfg)
         return 2;
     try {
-        const rows = await listIssues(cfg, {
+        const page = await listIssuesPage(cfg, {
             kind: parsed.values.kind,
             status: parsed.values.status ?? 'open',
             app: parsed.values.app,
             platform: parsed.values.platform,
             environment: parsed.values.environment,
             release: parsed.values.release,
+            limit: parsed.values.limit === undefined ? undefined : Number(parsed.values.limit),
+            offset: parsed.values.offset === undefined ? undefined : Number(parsed.values.offset),
         });
         if (parsed.values.json) {
-            console.log(JSON.stringify({ issues: rows }, null, 2));
+            console.log(JSON.stringify(page, null, 2));
             return 0;
         }
+        const rows = page.issues;
         if (rows.length === 0) {
             console.log('(no matching issues)');
             return 0;
@@ -710,6 +716,8 @@ async function main(argv) {
         console.log(HELP);
         return 0;
     }
+    if (argv[0] === 'lint')
+        return (await import('./lint/index.js')).cmdLint(argv.slice(1));
     const [a, b, ...rest] = argv;
     if (a === 'web')
         return runWeb(argv.slice(1));