@interfere/next 11.0.0-canary.6 → 11.0.0-canary.7

package/README.md

@@ -61,14 +61,7 @@ export default withInterfere(config);
 export { onRequestError, register } from "@interfere/next/instrumentation";
 ```
 
-**3. Mount the ingest route**
-
-```ts
-// app/api/interfere/[[...path]]/route.ts
-export * from "@interfere/next/route-handler";
-```
-
-**4. Add the provider**
+**3. Add the provider**
 
 ```tsx
 // app/layout.tsx
@@ -95,38 +88,24 @@ export default function RootLayout({
 | --- | --- | --- |
 | `INTERFERE_PUBLIC_KEY` | Yes | Surface publishable key in the `interfere_pub_us_*` or `interfere_pub_eu_*` format. Public by design; used for ingestion. |
 | `INTERFERE_API_KEY` | Yes for release metadata | Interfere secret key in the `interfere_secret_us_*` or `interfere_secret_eu_*` format. Server-side build credential; never expose in browser code. |
-| `NEXT_PUBLIC_INTERFERE_ROUTE_PREFIX` | No | Override the proxy route prefix (default: `/api/interfere`). Must match the path you mount the route handler at — e.g. set this to `/__telemetry` and mount the handler at `app/__telemetry/[[...path]]/route.ts`. Read by both the server route handler and the client SDK. |
+| `INTERFERE_API_URL` | No | Override the ingest endpoint in `direct` mode (e.g. a regional endpoint). Defaults to Interfere's endpoint. |
 
 ### Migrating From 0.x
 
 Upgrade all `@interfere/*` SDK packages together. Keep the env var names, but replace old `int_pub_*` / `interfere_pk_*` values with the dashboard's regional publishable key, and replace old `ak_*` / `interfere_ak_*` build keys with the regional Interfere secret key.
 
-## Custom Route Prefix
-
-By default the SDK proxies all telemetry through `/api/interfere`. You can move this to any path by setting `NEXT_PUBLIC_INTERFERE_ROUTE_PREFIX` and mounting the route handler at the matching location.
-
-**Why change it?** A custom prefix lets you avoid ad-blocker deny-lists that target well-known SDK paths, or align with your own API routing conventions.
+## Ingest Endpoint
 
-**1. Set the environment variable**
-
-```env
-NEXT_PUBLIC_INTERFERE_ROUTE_PREFIX=/__telemetry
-```
-
-**2. Mount the route handler at the matching path**
+By default the SDK posts telemetry to Interfere's endpoint. Ingest requests never carry cookies. Set `apiHost` to a subdomain of your own site that resolves to Interfere via a DNS record — this survives ad-blockers with no server-side component:
 
 ```ts
-// app/__telemetry/[[...path]]/route.ts
-export * from "@interfere/next/route-handler";
+// next.config.ts
+export default withInterfere({
+  interfere: { apiHost: "https://in.yourapp.com" },
+});
 ```
 
-**Normalization rules**
-
-| Input | Resolved |
-| --- | --- |
-| `/__telemetry` | `/__telemetry` |
-| `__telemetry/` | `/__telemetry` |
-| *(empty)* or `/` | `/api/interfere` (default) |
+Add a CNAME record pointing your subdomain at the target shown in your dashboard; Interfere provisions the TLS certificate automatically. To target a regional endpoint instead, set `apiHost` (or the `INTERFERE_API_URL` env) to it.
 
 ## Identity Management
 

package/dist/config.d.mts

@@ -3,14 +3,52 @@ import { NextConfig } from "next";
 
 //#region src/config.d.ts
 interface NextConfigWithInterfere extends NextConfig {
-  /**
-   * Reserved for future SDK config. Setting `buildId` here is rejected
-   * loudly — it caused server/client slug drift in 9.x. Override the
-   * commit SHA via the `INTERFERE_SOURCE_ID` env var (set on both build
-   * and runtime envs) instead.
-   */
   interfere?: {
+    /**
+     * Reserved. Setting `buildId` here is rejected loudly — it caused
+     * server/client slug drift in 9.x. Override the commit SHA via the
+     * `INTERFERE_SOURCE_ID` env var (set on both build and runtime envs)
+     * instead.
+     */
     readonly buildId?: never;
+    /**
+     * The endpoint the browser SDK posts telemetry to. Defaults to
+     * Interfere's endpoint. Set it to a subdomain of your own site that
+     * resolves to Interfere via a DNS record (e.g.
+     * `"https://in.yourapp.com"`) to survive ad-blockers, or to a
+     * regional endpoint. Must be a full URL.
+     */
+    readonly apiHost?: string;
+  };
+}
+/**
+ * Interfere-specific build settings, passed as the first argument to
+ * `withInterfere(settings, nextConfig)`. Kept separate from the Next.js
+ * config so SDK options never collide with Next's own keys.
+ */
+interface NextPluginConfig {
+  readonly sourceMaps?: {
+    /**
+     * Delete source maps from the build output after they've been uploaded
+     * to Interfere.
+     *
+     * Defaults to `true`: maps are uploaded so Interfere can symbolicate
+     * stack traces, then removed from the build so your original source is
+     * never shipped to production.
+     *
+     * Set to `false` to keep the maps on disk after upload. Do this when another
+     * tool shares the same Next.js build output and runs its own source-map
+     * upload from `.next` — Interfere's default purge would delete the maps
+     * that tool needs.
+     *
+     * @default true
+     * @example
+     * ```ts
+     * // Keep maps so another source-map uploader can consume them too:
+     * export default withInterfere({ sourceMaps: { purge: false } }, nextConfig);
+     * ```
+     */
+    readonly purge?: boolean;
   };
 }
 interface ResolvedBuildConfig {
@@ -33,6 +71,14 @@ interface ResolvedBuildConfig {
    */
   readonly environment: string | null;
   readonly publicKey: string | null;
+  /**
+   * When `true` (default), the build pipeline deletes source maps from the
+   * build output after uploading them, so they never ship to production.
+   * Resolved from `NextPluginConfig.sourceMaps.purge`; set it `false` to
+   * leave maps on disk for another uploader that shares the same `.next`
+   * output.
+   */
+  readonly purgeSourceMaps: boolean;
   /**
    * Deterministically derived from the leading 16 hex of the commit SHA, so
    * the build step and the collector arrive at the same
@@ -42,10 +88,11 @@ interface ResolvedBuildConfig {
    */
   readonly releaseSlug: ReleaseSlug | null;
 }
-declare function withInterfere(nextConfig?: NextConfigWithInterfere): NextConfig;
+declare function withInterfere(upstream?: NextConfigWithInterfere): NextConfig;
+declare function withInterfere(settings: NextPluginConfig, config: NextConfigWithInterfere): NextConfig;
 interface ProductionCompileContext {
   readonly distDir: string;
   readonly projectDir: string;
 }
 //#endregion
-export { NextConfigWithInterfere, ProductionCompileContext, ResolvedBuildConfig, withInterfere };
+export { NextConfigWithInterfere, NextPluginConfig, ProductionCompileContext, ResolvedBuildConfig, withInterfere };

package/dist/config.mjs

@@ -1 +1 @@
-import{configureBuild}from"./internal/build/configure-build.mjs";import{readInterfereEnv}from"./internal/env.mjs";import{FatalError,log}from"./internal/logger.mjs";import{resolveReleaseSlug}from"./internal/release-slug.mjs";import{readNextMajorVersion,warnIfServerInstrumentationMissing}from"./internal/setup-warnings.mjs";import{omitUndefined}from"@interfere/helpers/omit-undefined";import{LOCAL_DEV_RELEASE_SLUG}from"@interfere/types/releases/slug";import{classifyReleasePipelineError,diagnoseRelease,isInterfereApiKey}from"@interfere/types/sdk/build-diagnostics";import{resolveDeployEnvironment}from"@interfere/types/sdk/deploy-environment";import{PHASE_PRODUCTION_BUILD}from"next/constants.js";const CLIENT_TRACE_METADATA_KEYS=[`traceparent`,`baggage`],DIAGNOSTIC_CONTEXT={publicKeyEnvVar:`INTERFERE_PUBLIC_KEY`};function reportReleaseDiagnostic(code,input){let diagnostic=diagnoseRelease(code,DIAGNOSTIC_CONTEXT,input),lines=[...diagnostic.details];if(diagnostic.severity===`fatal`){log.fatal(diagnostic.title,lines);return}log.warn(diagnostic.title,lines)}function withInterfere(nextConfig={}){let{interfere,env:userEnv,webpack,turbopack,compiler,productionBrowserSourceMaps,...rest}=nextConfig;if(interfere&&`buildId`in interfere&&interfere.buildId!==void 0)return log.fatal(`Removed: interfere.buildId`,["`interfere.buildId` was removed in SDK 10. It only worked at build time, so server-side spans drifted from the bundle's slug.","Override the commit SHA via the `INTERFERE_SOURCE_ID` env var on both build and runtime envs instead."]);let projectDir=process.cwd(),config=resolveBuildConfig(),forceEnable=!!process.env.NEXT_PUBLIC_INTERFERE_FORCE_ENABLE,build=configureBuild({existingWebpack:webpack,existingTurbopack:turbopack,projectDir,values:{__INTERFERE_RELEASE_SLUG__:forceEnable?LOCAL_DEV_RELEASE_SLUG:config.releaseSlug,...config.publicKey&&{__INTERFERE_PROXY_MODE__:!0,__INTERFERE_PUBLIC_KEY__:config.publicKey},...config.environment&&{__INTERFERE_ENVIRONMENT__:config.environment},...forceEnable&&{__INTERFERE_FORCE_ENABLE__:!0}}});if(config.publicKey!==null&&!build.clientInstrumentationApplies)return log.fatal(`Missing instrumentation client`,[`INTERFERE_PUBLIC_KEY is set but no instrumentation-client file was found.`,`Create an instrumentation-client.ts file in your project root or src/ directory.`]);config.publicKey!==null&&warnIfServerInstrumentationMissing(projectDir);let nextMajor=readNextMajorVersion(projectDir),experimental=interfereExperimentalConfig({existing:rest.experimental,instrumentationHook:nextMajor===null||nextMajor<=14,traceMetadata:config.publicKey!==null||forceEnable}),existingHook=compiler?.runAfterProductionCompile,browserSourceMaps=config.apiKey===null?productionBrowserSourceMaps:!0;return config.apiKey!==null&&productionBrowserSourceMaps===!1&&log.warn(`Forcing productionBrowserSourceMaps`,[`withInterfere() requires production source maps to symbolicate errors.`,"Your `productionBrowserSourceMaps: false` was overridden to `true`."]),{...rest,...userEnv?{env:userEnv}:{},compiler:{...omitUndefined(compiler??{}),async runAfterProductionCompile(context){existingHook&&await existingHook(context);try{await runBuildReleasePipeline(context,config)}catch(error){if(error instanceof FatalError)throw error;let message=error instanceof Error?error.message:String(error);log.warn(`Skipping release pipeline`,[`Interfere encountered an unexpected error.`,`Build will continue, but this release's data will be ingested, but ignored as finding when generating insights.`,`Error: ${message}`])}}},...omitUndefined({productionBrowserSourceMaps:browserSourceMaps,turbopack:build.turbopack,webpack:build.webpack}),...experimental?{experimental}:{}}}function interfereExperimentalConfig({existing,instrumentationHook,traceMetadata}){let merged={...existing,...instrumentationHook?{instrumentationHook:!0}:{},...traceMetadata?{clientTraceMetadata:[...new Set([...existing?.clientTraceMetadata??[],...CLIENT_TRACE_METADATA_KEYS])]}:{}};return Object.keys(merged).length>0?merged:void 0}function resolveBuildConfig(){let{apiKey,apiUrl,publicKey}=readInterfereEnv(),{commitSha,slug}=resolveReleaseSlug(),environment=process.env.NEXT_PHASE===PHASE_PRODUCTION_BUILD?resolveDeployEnvironment(process.env):null;return{apiKey:apiKey??null,apiUrl,buildId:commitSha,environment,publicKey:publicKey??null,releaseSlug:slug}}async function runBuildReleasePipeline(context,config){let{apiKey,buildId,releaseSlug}=config;if(!apiKey)return log.fatal(`API key not set`,[`withInterfere() requires an API key to publish release metadata during production builds.`,`Set the INTERFERE_API_KEY environment variable, or remove withInterfere() from your Next.js config.`,`See: https://interfere.com/docs/guides/next-js`]);if(!isInterfereApiKey(apiKey))return reportReleaseDiagnostic(`API_KEY_WRONG_PREFIX`,{apiKey});if(!(buildId&&releaseSlug))return log.fatal(`Commit SHA missing`,[`Could not resolve a commit SHA from environment variables or git.`,"Set `INTERFERE_SOURCE_ID`, ensure your CI exposes its git SHA env var (e.g. `VERCEL_GIT_COMMIT_SHA`, `GITHUB_SHA`), or run inside a git checkout."]);let{runBuildPipeline}=await import(`./internal/build/pipeline.mjs`);try{let result=await runBuildPipeline(context,{...config,apiKey,buildId,releaseSlug});if(!result.ready){log.warn(`Skipping`,[`No source maps found`]);return}log.info(`Completed`,[`https://interfere.com/~/${result.config?.org.slug}/surfaces/${result.config?.surface.slug}`,`Release: ${result.release?.destination.slug??`Unknown`}`,`Build: ${result.buildId}`,`Artifacts: ${result.fileCount} source maps`])}catch(error){let message=error instanceof Error?error.message:String(error);reportReleaseDiagnostic(classifyReleasePipelineError(error),{errorMessage:message});return}}export{withInterfere};
+import{configureBuild}from"./internal/build/configure-build.mjs";import{readInterfereEnv}from"./internal/env.mjs";import{FatalError,log}from"./internal/logger.mjs";import{resolveReleaseSlug}from"./internal/release-slug.mjs";import{readNextMajorVersion,warnIfServerInstrumentationMissing}from"./internal/setup-warnings.mjs";import{API_URL}from"@interfere/constants/api";import{omitUndefined}from"@interfere/helpers/omit-undefined";import{LOCAL_DEV_RELEASE_SLUG}from"@interfere/types/releases/slug";import{classifyReleasePipelineError,diagnoseRelease,isInterfereApiKey}from"@interfere/types/sdk/build-diagnostics";import{resolveDeployEnvironment}from"@interfere/types/sdk/deploy-environment";import{PHASE_PRODUCTION_BUILD}from"next/constants.js";const CLIENT_TRACE_METADATA_KEYS=[`traceparent`,`baggage`],DIAGNOSTIC_CONTEXT={publicKeyEnvVar:`INTERFERE_PUBLIC_KEY`};function reportReleaseDiagnostic(code,input){let diagnostic=diagnoseRelease(code,DIAGNOSTIC_CONTEXT,input),lines=[...diagnostic.details];if(diagnostic.severity===`fatal`){log.fatal(diagnostic.title,lines);return}log.warn(diagnostic.title,lines)}function withInterfere(settingsOrConfig={},maybeConfig){let[settings,nextConfig]=maybeConfig===void 0?[{},settingsOrConfig]:[settingsOrConfig,maybeConfig],{interfere,env:userEnv,webpack,turbopack,compiler,productionBrowserSourceMaps,...rest}=nextConfig;if(interfere&&`buildId`in interfere&&interfere.buildId!==void 0)return log.fatal(`Removed: interfere.buildId`,["`interfere.buildId` was removed in SDK 10. It only worked at build time, so server-side spans drifted from the bundle's slug.","Override the commit SHA via the `INTERFERE_SOURCE_ID` env var on both build and runtime envs instead."]);let projectDir=process.cwd(),config=resolveBuildConfig(settings),apiHost=resolveBrowserApiHost(interfere?.apiHost,config.apiUrl),forceEnable=!!process.env.NEXT_PUBLIC_INTERFERE_FORCE_ENABLE,build=configureBuild({existingWebpack:webpack,existingTurbopack:turbopack,projectDir,values:{__INTERFERE_RELEASE_SLUG__:forceEnable?LOCAL_DEV_RELEASE_SLUG:config.releaseSlug,...config.publicKey&&{__INTERFERE_PUBLIC_KEY__:config.publicKey,...apiHost&&{__INTERFERE_API_URL__:apiHost}},...config.environment&&{__INTERFERE_ENVIRONMENT__:config.environment},...forceEnable&&{__INTERFERE_FORCE_ENABLE__:!0}}});if(config.publicKey!==null&&!build.clientInstrumentationApplies)return log.fatal(`Missing instrumentation client`,[`INTERFERE_PUBLIC_KEY is set but no instrumentation-client file was found.`,`Create an instrumentation-client.ts file in your project root or src/ directory.`]);config.publicKey!==null&&warnIfServerInstrumentationMissing(projectDir);let nextMajor=readNextMajorVersion(projectDir),experimental=interfereExperimentalConfig({existing:rest.experimental,instrumentationHook:nextMajor===null||nextMajor<=14,traceMetadata:config.publicKey!==null||forceEnable}),existingHook=compiler?.runAfterProductionCompile,browserSourceMaps=config.apiKey===null?productionBrowserSourceMaps:!0;return config.apiKey!==null&&productionBrowserSourceMaps===!1&&log.warn(`Forcing productionBrowserSourceMaps`,[`withInterfere() requires production source maps to symbolicate errors.`,"Your `productionBrowserSourceMaps: false` was overridden to `true`."]),{...rest,...userEnv?{env:userEnv}:{},compiler:{...omitUndefined(compiler??{}),async runAfterProductionCompile(context){existingHook&&await existingHook(context);try{await runBuildReleasePipeline(context,config)}catch(error){if(error instanceof FatalError)throw error;let message=error instanceof Error?error.message:String(error);log.warn(`Skipping release pipeline`,[`Interfere encountered an unexpected error.`,`Build will continue, but this release's data will be ingested, but ignored as finding when generating insights.`,`Error: ${message}`])}}},...omitUndefined({productionBrowserSourceMaps:browserSourceMaps,turbopack:build.turbopack,webpack:build.webpack}),...experimental?{experimental}:{}}}function interfereExperimentalConfig({existing,instrumentationHook,traceMetadata}){let merged={...existing,...instrumentationHook?{instrumentationHook:!0}:{},...traceMetadata?{clientTraceMetadata:[...new Set([...existing?.clientTraceMetadata??[],...CLIENT_TRACE_METADATA_KEYS])]}:{}};return Object.keys(merged).length>0?merged:void 0}function resolveBrowserApiHost(apiHost,apiUrl){let host=apiHost??apiUrl;if(host!==API_URL)return normalizeHost(host)}function normalizeHost(host){try{return new URL(host).origin}catch{return log.fatal(`Invalid apiHost`,[`interfere.apiHost must be a full URL, e.g. "https://in.yourapp.com".`,`Received: ${host}`])}}function resolveBuildConfig(settings){let{apiKey,apiUrl,publicKey}=readInterfereEnv(),{commitSha,slug}=resolveReleaseSlug(),environment=process.env.NEXT_PHASE===PHASE_PRODUCTION_BUILD?resolveDeployEnvironment(process.env):null;return{apiKey:apiKey??null,apiUrl,buildId:commitSha,environment,publicKey:publicKey??null,purgeSourceMaps:settings.sourceMaps?.purge??!0,releaseSlug:slug}}async function runBuildReleasePipeline(context,config){let{apiKey,buildId,releaseSlug}=config;if(!apiKey)return log.fatal(`API key not set`,[`withInterfere() requires an API key to publish release metadata during production builds.`,`Set the INTERFERE_API_KEY environment variable, or remove withInterfere() from your Next.js config.`,`See: https://interfere.com/docs/guides/next-js`]);if(!isInterfereApiKey(apiKey))return reportReleaseDiagnostic(`API_KEY_WRONG_PREFIX`,{apiKey});if(!(buildId&&releaseSlug))return log.fatal(`Commit SHA missing`,[`Could not resolve a commit SHA from environment variables or git.`,"Set `INTERFERE_SOURCE_ID`, ensure your CI exposes its git SHA env var (e.g. `VERCEL_GIT_COMMIT_SHA`, `GITHUB_SHA`), or run inside a git checkout."]);let{runBuildPipeline}=await import(`./internal/build/pipeline.mjs`);try{let result=await runBuildPipeline(context,{...config,apiKey,buildId,releaseSlug});if(!result.ready){log.warn(`Skipping`,[`No source maps found`]);return}log.info(`Completed`,[`https://interfere.com/~/${result.config?.org.slug}/surfaces/${result.config?.surface.slug}`,`Release: ${result.release?.destination.slug??`Unknown`}`,`Build: ${result.buildId}`,`Artifacts: ${result.fileCount} source maps`])}catch(error){let message=error instanceof Error?error.message:String(error);reportReleaseDiagnostic(classifyReleasePipelineError(error),{errorMessage:message});return}}export{withInterfere};

package/dist/internal/build/configure-build.d.mts

@@ -2,9 +2,9 @@ import { NextConfig } from "next";
 
 //#region src/internal/build/configure-build.d.ts
 interface InterfereInjectedValues {
+  readonly __INTERFERE_API_URL__?: string;
   readonly __INTERFERE_ENVIRONMENT__?: string;
   readonly __INTERFERE_FORCE_ENABLE__?: boolean;
-  readonly __INTERFERE_PROXY_MODE__?: boolean;
   readonly __INTERFERE_PUBLIC_KEY__?: string;
   readonly __INTERFERE_RELEASE_SLUG__: string | null;
 }

package/dist/internal/build/pipeline.mjs

@@ -1 +1 @@
-import{detectActiveBundler}from"./detect-bundler.mjs";import{resolveReleaseRequest}from"./release/index.mjs";import{discoverSourceMaps}from"./source-maps/discover.mjs";import{uploadSourceMaps}from"./source-maps/upload.mjs";import{cleanupSourceMaps}from"./source-maps/index.mjs";import{releaseSlugSchema}from"@interfere/types/releases/slug";import{HTTPClient,Interfere}from"@interfere/sdk";async function timed(fn){let start=performance.now();return[await fn(),Math.round(performance.now()-start)]}async function runBuildPipeline(context,metadata){let{apiUrl,apiKey}=metadata,httpClient=new HTTPClient;httpClient.addHook(`beforeRequest`,request=>{let nextRequest=new Request(request);return nextRequest.headers.set(`Authorization`,`Bearer ${apiKey}`),nextRequest});let sdk=new Interfere({serverURL:apiUrl,httpClient}),security={apiKey},start=performance.now(),bundler=detectActiveBundler(),[{discovered,config},discoverMs]=await timed(async()=>{let[discovered,config]=await Promise.all([discoverSourceMaps({bundler,projectDir:context.projectDir,distDir:context.distDir}),sdk.releases.getConfig(security)]);return{discovered,config}});if(discovered.files.length===0)return{ready:!1,reason:`no_source_maps`,fileCount:0};let releaseRequest=resolveReleaseRequest(metadata.buildId,metadata.environment,metadata.releaseSlug,config),[release,createReleaseMs]=await timed(()=>sdk.releases.create(security,releaseRequest)),releaseSlug=releaseSlugSchema.parse(release.destination.slug),buildId=release.build.hash??metadata.buildId,[{totalBytes},uploadMs]=await timed(()=>uploadSourceMaps({apiUrl,bundler,discovered,httpClient,releaseSlug})),[,preflightMs]=await timed(()=>sdk.releases.preflight(security,{releaseSlug})),[,cleanupMs]=await timed(()=>cleanupSourceMaps(discovered.files)),timing={discover:discoverMs,createRelease:createReleaseMs,upload:uploadMs,preflight:preflightMs,cleanup:cleanupMs,total:Math.round(performance.now()-start),fileCount:discovered.files.length,totalBytes};return{ready:!0,fileCount:discovered.files.length,release:{...release,destination:{...release.destination,slug:releaseSlug}},config,buildId,timing}}export{runBuildPipeline};
+import{detectActiveBundler}from"./detect-bundler.mjs";import{resolveReleaseRequest}from"./release/index.mjs";import{discoverSourceMaps}from"./source-maps/discover.mjs";import{uploadSourceMaps}from"./source-maps/upload.mjs";import{cleanupSourceMaps}from"./source-maps/index.mjs";import{releaseSlugSchema}from"@interfere/types/releases/slug";import{HTTPClient,Interfere}from"@interfere/sdk";async function timed(fn){let start=performance.now();return[await fn(),Math.round(performance.now()-start)]}async function runBuildPipeline(context,metadata){let{apiUrl,apiKey}=metadata,httpClient=new HTTPClient;httpClient.addHook(`beforeRequest`,request=>{let nextRequest=new Request(request);return nextRequest.headers.set(`Authorization`,`Bearer ${apiKey}`),nextRequest});let sdk=new Interfere({serverURL:apiUrl,httpClient}),security={apiKey},start=performance.now(),bundler=detectActiveBundler(),[{discovered,config},discoverMs]=await timed(async()=>{let[discovered,config]=await Promise.all([discoverSourceMaps({bundler,projectDir:context.projectDir,distDir:context.distDir}),sdk.releases.getConfig(security)]);return{discovered,config}});if(discovered.files.length===0)return{ready:!1,reason:`no_source_maps`,fileCount:0};let releaseRequest=resolveReleaseRequest(metadata.buildId,metadata.environment,metadata.releaseSlug,config),[release,createReleaseMs]=await timed(()=>sdk.releases.create(security,releaseRequest)),releaseSlug=releaseSlugSchema.parse(release.destination.slug),buildId=release.build.hash??metadata.buildId,[{totalBytes},uploadMs]=await timed(()=>uploadSourceMaps({apiUrl,bundler,discovered,httpClient,releaseSlug})),[,preflightMs]=await timed(()=>sdk.releases.preflight(security,{releaseSlug})),[,cleanupMs]=await timed(async()=>{metadata.purgeSourceMaps&&await cleanupSourceMaps(discovered.files)}),timing={discover:discoverMs,createRelease:createReleaseMs,upload:uploadMs,preflight:preflightMs,cleanup:cleanupMs,total:Math.round(performance.now()-start),fileCount:discovered.files.length,totalBytes};return{ready:!0,fileCount:discovered.files.length,release:{...release,destination:{...release.destination,slug:releaseSlug}},config,buildId,timing}}export{runBuildPipeline};

package/dist/internal/build/source-maps/discover-webpack.d.mts

@@ -1,41 +1,7 @@
 import { SourceMapFile } from "./discover.mjs";
 
 //#region src/internal/build/source-maps/discover-webpack.d.ts
-/**
- * Inserts a `//# debugId=…` comment into the chunk. Idempotent: if a
- * spec-compliant comment is already present (e.g. webpack 5.104+ with
- * `SourceMapDevToolPlugin({ debugIds: true })`, turbopack with
- * `experimental.turbopack.debugIds`, or any other tool) it's
- * overwritten with the supplied debugId — callers that read the
- * existing id via `readDebugIdFromJs` first get an idempotent no-op.
- *
- * Otherwise the comment is appended just before the existing
- * `//# sourceMappingURL=…` line so the browser still resolves the map.
- */
-declare function injectDebugIdIntoJs(content: string, debugId: string): string;
-/**
- * Adds `debugId` to the source-map JSON. Idempotent: writes both
- * `debugId` (TC39 spec field) and `debug_id` (legacy variant some
- * older Sentry tooling emits) so manifests stay readable across the
- * ecosystem. Re-running with the same id produces identical output.
- */
 declare function injectDebugIdIntoMap(content: string, debugId: string): string;
-/**
- * Webpack-mode discovery: walks the dist tree, parses each `.js`
- * chunk's `//# sourceMappingURL=…` comment to find its paired `.map`,
- * and ensures both carry the same `debugId`.
- *
- * Idempotent w.r.t. debug-id state on disk:
- * - If the chunk already carries a `//# debugId=…` comment (webpack
- *   5.104+ with `SourceMapDevToolPlugin({ debugIds: true })`, or a
- *   third-party tool that already injected one) we reuse it.
- * - Otherwise we generate a fresh UUID and inject it into both files.
- *
- * The "reuse if present" branch matches the strategy in Sentry's
- * webpack plugin (`addDebugIdToBundleSource` in
- * `bundler-plugin-core/src/debug-id-upload.ts`) and means our
- * discovery works transparently when bundlers natively emit debugIds.
- */
 declare function discoverWebpack(opts: {
   projectDir: string;
   distDir: string;
@@ -44,4 +10,4 @@ declare function discoverWebpack(opts: {
   sourceFileCount: number;
 }>;
 //#endregion
-export { discoverWebpack, injectDebugIdIntoJs, injectDebugIdIntoMap };
+export { discoverWebpack, injectDebugIdIntoMap };

package/dist/internal/build/source-maps/discover-webpack.mjs

@@ -1 +1 @@
-import{resolveDistDir,toPublicPath,walkDistTrees}from"./paths.mjs";import{relative}from"node:path";import{createHash,randomUUID}from"node:crypto";import{readFile,writeFile}from"node:fs/promises";const SOURCEMAPPING_RE=/\/\/[#@]\s*sourceMappingURL=(\S+)\s*$/,SPEC_LAST_DEBUG_ID_RE=/\/\/# debugId=([a-fA-F0-9-]+)(?![\s\S]*\/\/# debugId=)/m;function readDebugIdFromJs(content){return SPEC_LAST_DEBUG_ID_RE.exec(content)?.[1]??null}function injectDebugIdIntoJs(content,debugId){let debugIdComment=`//# debugId=${debugId}`;if(SPEC_LAST_DEBUG_ID_RE.test(content))return content.replace(SPEC_LAST_DEBUG_ID_RE,debugIdComment);let match=SOURCEMAPPING_RE.exec(content);return match?`${content.slice(0,match.index).trimEnd()}\n${debugIdComment}\n${match[0]}`:`${content}\n${debugIdComment}`}function injectDebugIdIntoMap(content,debugId){let json=JSON.parse(content);return json.debugId=debugId,JSON.stringify(json)}async function discoverWebpack(opts){let absDistDir=resolveDistDir(opts.projectDir,opts.distDir),relDistDir=relative(opts.projectDir,absDistDir),jsPaths=await walkDistTrees(absDistDir,`.js`),pairs=new Map;for(let jsAbs of jsPaths){let content=await readFile(jsAbs,`utf8`),match=SOURCEMAPPING_RE.exec(content);if(!match?.[1])continue;let mapAbs=`${jsAbs.slice(0,jsAbs.lastIndexOf(`/`)+1)}${decodeURIComponent(match[1])}`,jsPublic=toPublicPath(relative(opts.projectDir,jsAbs),relDistDir),mapPublic=toPublicPath(relative(opts.projectDir,mapAbs),relDistDir);pairs.set(mapPublic,{mapAbs,jsAbs,jsPublic,jsContent:content,existingDebugId:readDebugIdFromJs(content)})}return{files:(await Promise.all(Array.from(pairs.entries(),async([mapPublic,pair])=>{let mapContent=await readFile(pair.mapAbs,`utf8`).catch(()=>null);if(mapContent===null)return null;let debugId=pair.existingDebugId??randomUUID();if(!pair.existingDebugId){let injectedJs=injectDebugIdIntoJs(pair.jsContent,debugId);await writeFile(pair.jsAbs,injectedJs,`utf8`)}let finalMap=JSON.parse(mapContent).debugId===debugId?mapContent:injectDebugIdIntoMap(mapContent,debugId);return finalMap!==mapContent&&await writeFile(pair.mapAbs,finalMap,`utf8`),{absolute:pair.mapAbs,path:mapPublic,content:finalMap,hash:createHash(`sha256`).update(finalMap).digest(`hex`),debugId,chunkUrl:pair.jsPublic}}))).filter(f=>f!==null),sourceFileCount:pairs.size}}export{discoverWebpack,injectDebugIdIntoJs,injectDebugIdIntoMap};
+import{resolveDistDir,toPublicPath,walkDistTrees}from"./paths.mjs";import{relative}from"node:path";import{createHash,randomUUID}from"node:crypto";import{readFile,writeFile}from"node:fs/promises";import{injectDebugIdIntoJs,readDebugIdFromJs}from"@interfere/types/data/source-maps";const SOURCEMAPPING_RE=/\/\/[#@]\s*sourceMappingURL=(\S+)\s*$/;function injectDebugIdIntoMap(content,debugId){let json=JSON.parse(content);return json.debugId=debugId,JSON.stringify(json)}async function discoverWebpack(opts){let absDistDir=resolveDistDir(opts.projectDir,opts.distDir),relDistDir=relative(opts.projectDir,absDistDir),jsPaths=await walkDistTrees(absDistDir,`.js`),pairs=new Map;for(let jsAbs of jsPaths){let content=await readFile(jsAbs,`utf8`),match=SOURCEMAPPING_RE.exec(content);if(!match?.[1])continue;let mapAbs=`${jsAbs.slice(0,jsAbs.lastIndexOf(`/`)+1)}${decodeURIComponent(match[1])}`,jsPublic=toPublicPath(relative(opts.projectDir,jsAbs),relDistDir),mapPublic=toPublicPath(relative(opts.projectDir,mapAbs),relDistDir);pairs.set(mapPublic,{mapAbs,jsAbs,jsPublic,jsContent:content,existingDebugId:readDebugIdFromJs(content)})}return{files:(await Promise.all(Array.from(pairs.entries(),async([mapPublic,pair])=>{let mapContent=await readFile(pair.mapAbs,`utf8`).catch(()=>null);if(mapContent===null)return null;let debugId=pair.existingDebugId??randomUUID();if(!pair.existingDebugId){let injectedJs=injectDebugIdIntoJs(pair.jsContent,debugId);await writeFile(pair.jsAbs,injectedJs,`utf8`)}let finalMap=JSON.parse(mapContent).debugId===debugId?mapContent:injectDebugIdIntoMap(mapContent,debugId);return finalMap!==mapContent&&await writeFile(pair.mapAbs,finalMap,`utf8`),{absolute:pair.mapAbs,path:mapPublic,content:finalMap,hash:createHash(`sha256`).update(finalMap).digest(`hex`),debugId,chunkUrl:pair.jsPublic}}))).filter(f=>f!==null),sourceFileCount:pairs.size}}export{discoverWebpack,injectDebugIdIntoMap};

package/dist/internal/build/source-maps/discover.d.mts

@@ -1,16 +1,10 @@
 import { NextBuildBundler } from "../detect-bundler.mjs";
-import { injectDebugIdIntoJs, injectDebugIdIntoMap } from "./discover-webpack.mjs";
+import { injectDebugIdIntoMap } from "./discover-webpack.mjs";
+import { injectDebugIdIntoJs } from "@interfere/types/data/source-maps";
 
 //#region src/internal/build/source-maps/discover.d.ts
 interface SourceMapFile {
   readonly absolute: string;
-  /**
-   * Public URL the runtime will load this chunk from. ALWAYS populated
-   * for both bundlers — turbopack discovery walks JS chunks (in addition
-   * to .map files) so it can record this. Lifted onto the manifest as
-   * `chunkUrl`; server-side suffix-matching pairs `frame.fileName` to
-   * this field by content-hashed filename.
-   */
   readonly chunkUrl: string;
   readonly content: string;
   readonly debugId: string;
@@ -21,13 +15,6 @@ interface DiscoveryResult {
   readonly files: SourceMapFile[];
   readonly sourceFileCount: number;
 }
-/**
- * Single entry point for source-map discovery. The pipeline calls this
- * with the active bundler from `detectActiveBundler()`; new bundlers (e.g.
- * rspack) drop in here as additional cases without touching the pipeline.
- * Other manifest bundlers (for Vite, CLI, etc.) live outside the Next
- * build pipeline and should use their own discovery implementation.
- */
 declare function discoverSourceMaps(opts: {
   bundler: NextBuildBundler;
   projectDir: string;

package/dist/internal/build/source-maps/discover.mjs

@@ -1 +1 @@
-import{normalizeDistDir}from"./paths.mjs";import{discoverTurbopack}from"./discover-turbopack.mjs";import{discoverWebpack,injectDebugIdIntoJs,injectDebugIdIntoMap}from"./discover-webpack.mjs";async function discoverSourceMaps(opts){let distDir=normalizeDistDir(opts.distDir);switch(opts.bundler){case`webpack`:return discoverWebpack({projectDir:opts.projectDir,distDir});case`turbopack`:return discoverTurbopack({projectDir:opts.projectDir,distDir})}}export{discoverSourceMaps,injectDebugIdIntoJs,injectDebugIdIntoMap};
+import{normalizeDistDir}from"./paths.mjs";import{discoverTurbopack}from"./discover-turbopack.mjs";import{discoverWebpack,injectDebugIdIntoMap}from"./discover-webpack.mjs";import{injectDebugIdIntoJs}from"@interfere/types/data/source-maps";async function discoverSourceMaps(opts){let distDir=normalizeDistDir(opts.distDir);switch(opts.bundler){case`webpack`:return discoverWebpack({projectDir:opts.projectDir,distDir});case`turbopack`:return discoverTurbopack({projectDir:opts.projectDir,distDir})}}export{discoverSourceMaps,injectDebugIdIntoJs,injectDebugIdIntoMap};

package/dist/package.mjs

@@ -1 +1 @@
-var name=`@interfere/next`,version=`11.0.0-canary.6`;export{name,version};
+var name=`@interfere/next`,version=`11.0.0-canary.7`;export{name,version};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@interfere/next",
-  "version": "11.0.0-canary.6",
+  "version": "11.0.0-canary.7",
   "license": "MIT",
   "description": "Build software that never breaks.",
   "keywords": [
@@ -77,11 +77,6 @@
       "types": "./dist/provider.d.mts",
       "default": "./dist/provider.mjs"
     },
-    "./route-handler": {
-      "monorepo": "./src/route-handler.ts",
-      "types": "./dist/route-handler.d.mts",
-      "default": "./dist/route-handler.mjs"
-    },
     "./server": {
       "monorepo": "./src/server.ts",
       "types": "./dist/server.d.mts",
@@ -98,11 +93,11 @@
     "typecheck": "tsgo --noEmit"
   },
   "dependencies": {
-    "@interfere/constants": "^9.0.2-canary.2",
-    "@interfere/helpers": "^9.0.1-canary.1",
-    "@interfere/react": "^11.0.0-canary.6",
-    "@interfere/sdk": "^11.0.0-canary.6",
-    "@interfere/types": "^10.0.0-canary.5",
+    "@interfere/constants": "^9.0.2-canary.3",
+    "@interfere/helpers": "^9.0.1-canary.2",
+    "@interfere/react": "^11.0.0-canary.7",
+    "@interfere/sdk": "^11.0.0-canary.7",
+    "@interfere/types": "^10.0.0-canary.6",
     "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/api-logs": "^0.219.0",
     "@opentelemetry/baggage-span-processor": "^0.5.0",
@@ -138,12 +133,12 @@
     }
   },
   "devDependencies": {
-    "@interfere/test-utils": "^9.0.1-canary.0",
-    "@interfere/typescript-config": "^9.0.1-canary.0",
-    "@types/node": "^26.0.0",
+    "@interfere/test-utils": "^9.0.1-canary.1",
+    "@interfere/typescript-config": "^9.0.1-canary.1",
+    "@types/node": "^26.1.0",
     "@types/react": "19.2.17",
     "@types/react-dom": "19.2.3",
-    "@typescript/native-preview": "7.0.0-dev.20260623.1",
+    "@typescript/native-preview": "7.0.0-dev.20260701.1",
     "@vitest/browser": "4.1.9",
     "@vitest/browser-playwright": "4.1.9",
     "@vitest/coverage-v8": "4.1.9",

package/dist/internal/route/handle-get.d.mts

@@ -1,17 +0,0 @@
-//#region src/internal/route/handle-get.d.ts
-/**
- * Generic GET proxy. SDK 10.x routes `GET /v2/config` (and any future
- * GET-based endpoints) through here; SDK 9.x clients still hit
- * `GET /v1/config` and get the same delegated response on the collector
- * side.
- *
- * `/sw` is special-cased to serve the SDK's bundled service-worker
- * script directly out of the customer's Next.js process. `SW_SCRIPT`
- * is a string export emitted at @interfere/react build time
- * (`scripts/build-sw.ts`); on Node runtime the customer resolves it
- * via `node_modules`, on Edge runtime the customer's Next.js bundler
- * inlines it into the Edge worker. Either way, no `fs.readFileSync`.
- */
-declare function handleGet(request: Request): Promise<Response>;
-//#endregion
-export { handleGet };

package/dist/internal/route/handle-get.mjs

@@ -1 +0,0 @@
-import{log}from"../logger.mjs";import{extractSubPath,formatProxyError,forwardToCollector,hasPublicKeyCredential,notConfiguredResponse,resolveAuthenticatedEnv}from"./proxy.mjs";import{SW_SCRIPT}from"@interfere/react/sw";const SW_HEADERS={"content-type":`application/javascript; charset=utf-8`,"service-worker-allowed":`/`,"cache-control":`public, max-age=3600`};async function handleGet(request){let subPath=extractSubPath(request);if(subPath===`/sw`)return new Response(SW_SCRIPT,{status:200,headers:SW_HEADERS});let env=resolveAuthenticatedEnv();if(!hasPublicKeyCredential(request,env.publicKey))return notConfiguredResponse();try{return await forwardToCollector(request,env,subPath)}catch(error){let detail=formatProxyError(error);return log.error(`Proxy ${request.method} ${subPath} failed`,detail.lines),Response.json({code:`INTERFERE_PROXY_ERROR`,message:detail.message},{status:502})}}export{handleGet};

package/dist/internal/route/handle-post.d.mts

@@ -1,15 +0,0 @@
-//#region src/internal/route/handle-post.d.ts
-/**
- * Generic POST proxy. SDK 10.x routes everything through here:
- *
- *   - `/v2/sink` (OTLP traces / metrics / logs)
- *   - `/v2/replay/upload/:sessionId`
- *   - `/v1/session*` (session sync + identify)
- *
- * No envelope-aware special-casing — that endpoint (`/v1/ingest`) was
- * 9.x-only and is not produced by 10.x. Customers on 9.x post directly
- * to the collector through the same proxy without touching this file.
- */
-declare function handlePost(request: Request): Promise<Response>;
-//#endregion
-export { handlePost };

package/dist/internal/route/handle-post.mjs

@@ -1 +0,0 @@
-import{log}from"../logger.mjs";import{extractSubPath,formatProxyError,forwardToCollector,hasPublicKeyCredential,notConfiguredResponse,resolveAuthenticatedEnv}from"./proxy.mjs";async function handlePost(request){let env=resolveAuthenticatedEnv();if(!hasPublicKeyCredential(request,env.publicKey))return notConfiguredResponse();let subPath=extractSubPath(request);try{return await forwardToCollector(request,env,subPath)}catch(error){let detail=formatProxyError(error);return log.error(`Proxy ${request.method} ${subPath} failed`,detail.lines),Response.json({code:`INTERFERE_PROXY_ERROR`,message:detail.message},{status:502})}}export{handlePost};

package/dist/internal/route/proxy.d.mts

@@ -1,20 +0,0 @@
-import { InterfereEnv } from "../env.mjs";
-
-//#region src/internal/route/proxy.d.ts
-interface AuthenticatedEnv {
-  apiUrl: string;
-  publicKey: string | null;
-  release: InterfereEnv["release"];
-}
-declare function resolveAuthenticatedEnv(): AuthenticatedEnv;
-/** True when the proxy can attach a publishable key from env or the request. */
-declare function hasPublicKeyCredential(request: Request, envPublicKey: string | null): boolean;
-declare function notConfiguredResponse(): Response;
-declare function extractSubPath(request: Request): string;
-declare function formatProxyError(error: unknown): {
-  message: string;
-  lines: string[];
-};
-declare function forwardToCollector(request: Request, env: AuthenticatedEnv, subPath: string): Promise<Response>;
-//#endregion
-export { AuthenticatedEnv, extractSubPath, formatProxyError, forwardToCollector, hasPublicKeyCredential, notConfiguredResponse, resolveAuthenticatedEnv };

package/dist/internal/route/proxy.mjs

@@ -1 +0,0 @@
-import{readInterfereEnv}from"../env.mjs";import{log}from"../logger.mjs";import{omitUndefined}from"@interfere/helpers/omit-undefined";import{resolveRoutePrefix}from"@interfere/constants/route-prefix";import{extractCountryHeader}from"@interfere/types/sdk/geo";const STRIPPED_AUTH_HEADERS=[`authorization`,`x-api-key`,`x-interfere-api-key`],STRIPPED_TRANSPORT_HEADERS=[`host`,`content-length`,`connection`,`keep-alive`,`transfer-encoding`,`te`,`trailer`,`upgrade`,`proxy-authenticate`,`proxy-authorization`];function forwardedHeaders(request){let headers=new Headers(request.headers);for(let name of STRIPPED_AUTH_HEADERS)headers.delete(name);for(let name of STRIPPED_TRANSPORT_HEADERS)headers.delete(name);return headers}function resolveAuthenticatedEnv(){let env=readInterfereEnv();return{apiUrl:env.apiUrl,publicKey:env.publicKey,release:env.release}}function hasPublicKeyCredential(request,envPublicKey){return envPublicKey?!0:new URL(request.url).searchParams.has(`pk`)}function notConfiguredResponse(){return log.warn(`Not configured`,[`INTERFERE_PUBLIC_KEY is not set and the request has no ?pk= query param. The proxy route will return 503.`]),Response.json({code:`INTERFERE_NOT_CONFIGURED`,message:`INTERFERE_PUBLIC_KEY is required.`},{status:503})}function extractSubPath(request){let prefix=resolveRoutePrefix(),url=new URL(request.url),idx=url.pathname.indexOf(prefix);if(idx===-1)return`/`;let remainder=url.pathname.slice(idx+prefix.length);return remainder===``?`/`:remainder.startsWith(`/`)?remainder:`/${remainder}`}function formatProxyError(error){if(!(error instanceof Error))return{message:String(error),lines:[String(error)]};let lines=[`${error.name}: ${error.message}`];if(`cause`in error&&error.cause){let cause=error.cause instanceof Error?error.cause.message:String(error.cause);lines.push(`cause: ${cause}`)}return`code`in error&&typeof error.code==`string`&&lines.push(`code: ${error.code}`),{message:`${error.name}: ${error.message}`,lines}}function buildUpstreamUrl(apiUrl,subPath,request,publicKey){let incoming=new URL(request.url),upstream=new URL(`${apiUrl}${subPath}`);for(let[key,value]of incoming.searchParams)upstream.searchParams.append(key,value);return publicKey&&!upstream.searchParams.has(`pk`)&&upstream.searchParams.set(`pk`,publicKey),upstream.toString()}async function forwardToCollector(request,env,subPath){let url=buildUpstreamUrl(env.apiUrl,subPath,request,env.publicKey),body=request.method!==`GET`&&request.method!==`HEAD`?new Uint8Array(await request.arrayBuffer()):void 0,headers=forwardedHeaders(request);headers.has(`content-type`)||headers.set(`content-type`,`application/json`);let country=extractCountryHeader(request);country!==null&&headers.set(`x-country-code`,country);let upstream=await fetch(url,{...omitUndefined({body}),method:request.method,headers,signal:AbortSignal.timeout(1e4)});if(!upstream.ok){let text=await upstream.text().catch(()=>``);return upstream.status>=500?(log.error(`Upstream ${upstream.status} for ${request.method} ${subPath}`,[text]),Response.json({code:`INTERFERE_UPSTREAM_ERROR`,message:text},{status:upstream.status})):upstream.status>=400?(log.warn(`Upstream ${upstream.status} for ${request.method} ${subPath}`,[text]),Response.json({code:`INTERFERE_UPSTREAM_WARNING`,message:text},{status:upstream.status})):(log.error(`Upstream ${upstream.status} for ${request.method} ${subPath}`,[text]),Response.json({code:`INTERFERE_UPSTREAM_ERROR`,message:text},{status:upstream.status}))}return new Response(upstream.body,{status:upstream.status,headers:{"content-type":upstream.headers.get(`content-type`)??`application/json`}})}export{extractSubPath,formatProxyError,forwardToCollector,hasPublicKeyCredential,notConfiguredResponse,resolveAuthenticatedEnv};

package/dist/route-handler.d.mts

@@ -1,12 +0,0 @@
-//#region src/route-handler.d.ts
-/**
- * Customers consume this module via `export * from "@interfere/next/route-handler"`
- * so any HTTP method we add later (PATCH, DELETE, …) is picked up
- * without a customer file change. Do NOT add non-method exports here —
- * `route-handler.lint.test.ts` will fail the build if you do.
- */
-declare function GET(request: Request): Promise<Response>;
-declare function POST(request: Request): Promise<Response>;
-declare function OPTIONS(): Response;
-//#endregion
-export { GET, OPTIONS, POST };

package/dist/route-handler.mjs

@@ -1 +0,0 @@
-import{isEnabledOnServer}from"./internal/env.mjs";import{handleGet}from"./internal/route/handle-get.mjs";import{handlePost}from"./internal/route/handle-post.mjs";const DISABLED=()=>new Response(null,{status:204});async function GET(request){return isEnabledOnServer()?await handleGet(request):DISABLED()}function POST(request){return isEnabledOnServer()?handlePost(request):Promise.resolve(DISABLED())}const CORS_HEADERS={"Access-Control-Allow-Origin":`*`,"Access-Control-Allow-Methods":`GET, POST, OPTIONS`,"Access-Control-Allow-Headers":`Content-Type`,"Access-Control-Max-Age":`86400`};function OPTIONS(){return new Response(null,{status:200,headers:CORS_HEADERS})}export{GET,OPTIONS,POST};