@posthog/plugin-utils 1.1.1 → 1.1.3

package/LICENSE

@@ -219,8 +219,8 @@ limitations under the License.
 
 ---
 
-Some files in this codebase contain code from getsentry/sentry-javascript or getsentry/sentry-react-native by Software, Inc. dba Sentry.
-In such cases it is explicitly stated in the file header. This license only applies to the relevant code in such cases. 
+Some files in this codebase contain code from getsentry/sentry-javascript.
+In such cases it is explicitly stated in the file header. This license only applies to the relevant code in such cases.
 
 MIT License
 
@@ -246,6 +246,33 @@ SOFTWARE.
 
 ---
 
+Some files in this codebase contain code from getsentry/sentry-react-native.
+In such cases it is explicitly stated in the file header. This license only applies to the relevant code in such cases.
+
+The MIT License (MIT)
+
+Copyright (c) 2017 Sentry
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+---
+
 Some files in this codebase contain code from facebook/metro by Meta Platforms, Inc. and affiliates.
 In such cases it is explicitly stated in the file header. This license only applies to the relevant code in such cases. 
 
@@ -297,3 +324,30 @@ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
+
+---
+
+Some files in this codebase contain code from agentcathq/agentcat-typescript-sdk (formerly MCPCat/mcpcat-typescript-sdk).
+In such cases it is explicitly stated in the file header. This license only applies to the relevant code in such cases.
+
+MIT License
+
+Copyright (c) 2025 AgentCat, Inc. (formerly MCPcat)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/chunk-ids.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Returns the minified chunk-id IIFE the SDK reads at runtime to map an
+ * error's stack back to a chunk id.
+ *
+ * Byte-for-byte contract with posthog-cli (`CODE_SNIPPET_TEMPLATE` in
+ * cli/src/sourcemaps/constant.rs): the CLI recognizes and removes previously
+ * injected snippets by exact substring match, so any change here must ship in
+ * the CLI constants too. Covered by a parity test in chunk-ids.spec.ts.
+ */
+export declare function createChunkIdSnippet(chunkId: string): string;
+/**
+ * Returns the comment posthog-cli discovers chunk ids from at upload time
+ * (`CHUNKID_COMMENT_PREFIX` in cli/src/sourcemaps/constant.rs), including the
+ * leading newline the CLI's exact-match removal expects.
+ */
+export declare function createChunkIdComment(chunkId: string): string;
+/**
+ * Mints a fresh random chunk id: a new id per chunk, per build.
+ */
+export declare function createChunkId(): string;
+/**
+ * Extracts the chunk id from source that already carries one, using the same
+ * detection the CLI uses: a `//# chunkId=` comment at the start of a line.
+ * The injected IIFE is deliberately not matched — its marker text can appear
+ * inside string literals of bundled code (docs strings, bundled PostHog
+ * tooling), and the CLI only ever reads the line-anchored comment. Keeping the
+ * two in sync guarantees this returning an id ⟺ the CLI finding one.
+ */
+export declare function determineChunkIdFromSource(code: string): string | undefined;
+//# sourceMappingURL=chunk-ids.d.ts.map

package/dist/chunk-ids.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chunk-ids.d.ts","sourceRoot":"","sources":["../src/chunk-ids.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AASD;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAa3E"}

package/dist/chunk-ids.js

@@ -0,0 +1,64 @@
+"use strict";
+var __webpack_require__ = {};
+(()=>{
+    __webpack_require__.d = (exports1, definition)=>{
+        for(var key in definition)if (__webpack_require__.o(definition, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
+            enumerable: true,
+            get: definition[key]
+        });
+    };
+})();
+(()=>{
+    __webpack_require__.o = (obj, prop)=>Object.prototype.hasOwnProperty.call(obj, prop);
+})();
+(()=>{
+    __webpack_require__.r = (exports1)=>{
+        if ('undefined' != typeof Symbol && Symbol.toStringTag) Object.defineProperty(exports1, Symbol.toStringTag, {
+            value: 'Module'
+        });
+        Object.defineProperty(exports1, '__esModule', {
+            value: true
+        });
+    };
+})();
+var __webpack_exports__ = {};
+__webpack_require__.r(__webpack_exports__);
+__webpack_require__.d(__webpack_exports__, {
+    createChunkIdSnippet: ()=>createChunkIdSnippet,
+    createChunkId: ()=>createChunkId,
+    createChunkIdComment: ()=>createChunkIdComment,
+    determineChunkIdFromSource: ()=>determineChunkIdFromSource
+});
+const external_crypto_namespaceObject = require("crypto");
+function createChunkIdSnippet(chunkId) {
+    return `!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._posthogChunkIds=e._posthogChunkIds||{},e._posthogChunkIds[n]="${chunkId}")}catch(e){}}();`;
+}
+function createChunkIdComment(chunkId) {
+    return `\n//# chunkId=${chunkId}`;
+}
+function createChunkId() {
+    return external_crypto_namespaceObject.randomUUID();
+}
+const COMMENT_REGEX = /^\/\/# chunkId=(\S{1,128})/;
+const COMMENT_MARKER = '//# chunkId=';
+const WINDOW = 256;
+function determineChunkIdFromSource(code) {
+    for(let at = code.indexOf(COMMENT_MARKER); -1 !== at; at = code.indexOf(COMMENT_MARKER, at + COMMENT_MARKER.length)){
+        if (0 !== at && '\n' !== code[at - 1]) continue;
+        const match = COMMENT_REGEX.exec(code.slice(at, at + WINDOW));
+        if (match) return match[1];
+    }
+}
+exports.createChunkId = __webpack_exports__.createChunkId;
+exports.createChunkIdComment = __webpack_exports__.createChunkIdComment;
+exports.createChunkIdSnippet = __webpack_exports__.createChunkIdSnippet;
+exports.determineChunkIdFromSource = __webpack_exports__.determineChunkIdFromSource;
+for(var __webpack_i__ in __webpack_exports__)if (-1 === [
+    "createChunkId",
+    "createChunkIdComment",
+    "createChunkIdSnippet",
+    "determineChunkIdFromSource"
+].indexOf(__webpack_i__)) exports[__webpack_i__] = __webpack_exports__[__webpack_i__];
+Object.defineProperty(exports, '__esModule', {
+    value: true
+});

package/dist/chunk-ids.mjs

@@ -0,0 +1,21 @@
+import { randomUUID } from "crypto";
+function createChunkIdSnippet(chunkId) {
+    return `!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._posthogChunkIds=e._posthogChunkIds||{},e._posthogChunkIds[n]="${chunkId}")}catch(e){}}();`;
+}
+function createChunkIdComment(chunkId) {
+    return `\n//# chunkId=${chunkId}`;
+}
+function createChunkId() {
+    return randomUUID();
+}
+const COMMENT_REGEX = /^\/\/# chunkId=(\S{1,128})/;
+const COMMENT_MARKER = '//# chunkId=';
+const WINDOW = 256;
+function determineChunkIdFromSource(code) {
+    for(let at = code.indexOf(COMMENT_MARKER); -1 !== at; at = code.indexOf(COMMENT_MARKER, at + COMMENT_MARKER.length)){
+        if (0 !== at && '\n' !== code[at - 1]) continue;
+        const match = COMMENT_REGEX.exec(code.slice(at, at + WINDOW));
+        if (match) return match[1];
+    }
+}
+export { createChunkId, createChunkIdComment, createChunkIdSnippet, determineChunkIdFromSource };

package/dist/cli.d.ts

@@ -1,12 +1,18 @@
 import { ResolvedPluginConfig } from './config';
 /**
- * Build CLI arguments for `posthog-cli sourcemap process`.
+ * `process` injects chunk ids into the built files on disk and uploads them.
+ * `upload` only reads the files, expecting chunk ids to already be present
+ * (e.g. injected in-memory by a bundler plugin before the files were written).
+ */
+export type SourcemapCliCommand = 'process' | 'upload';
+/**
+ * Build CLI arguments for `posthog-cli sourcemap <command>`.
  */
 export declare function buildSourcemapCliArgs(config: ResolvedPluginConfig, mode: {
     stdin: true;
 } | {
     directory: string;
-}): string[];
+}, command?: SourcemapCliCommand): string[];
 /**
  * Build environment variables for CLI invocation.
  * Plugin config values override any existing process.env values.
@@ -15,9 +21,11 @@ export declare function buildCliEnv(config: ResolvedPluginConfig): NodeJS.Proces
 /**
  * Spawn the PostHog CLI for sourcemap processing via stdin (file list).
  */
-export declare function runSourcemapCli(config: ResolvedPluginConfig, options: {
+export declare function runSourcemapCli(config: ResolvedPluginConfig, options: ({
     filePaths: string[];
 } | {
     directory: string;
+}) & {
+    command?: SourcemapCliCommand;
 }): Promise<void>;
 //# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AAG/C;;GAEG;AACH,wBAAgB,qBAAqB,CACjC,MAAM,EAAE,oBAAoB,EAC5B,IAAI,EAAE;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GAC9C,MAAM,EAAE,CA8BV;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,CAAC,UAAU,CAQ3E;AAED;;GAEG;AACH,wBAAsB,eAAe,CACjC,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE;IAAE,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GACzD,OAAO,CAAC,IAAI,CAAC,CAgBf"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AAG/C;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,QAAQ,CAAA;AAEtD;;GAEG;AACH,wBAAgB,qBAAqB,CACjC,MAAM,EAAE,oBAAoB,EAC5B,IAAI,EAAE;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,EAC7C,OAAO,GAAE,mBAA+B,GACzC,MAAM,EAAE,CAkCV;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,CAAC,UAAU,CAQ3E;AAED;;GAEG;AACH,wBAAsB,eAAe,CACjC,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE,CAAC;IAAE,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG;IAAE,OAAO,CAAC,EAAE,mBAAmB,CAAA;CAAE,GAC/F,OAAO,CAAC,IAAI,CAAC,CAgBf"}

package/dist/cli.js

@@ -29,17 +29,17 @@ __webpack_require__.d(__webpack_exports__, {
     buildSourcemapCliArgs: ()=>buildSourcemapCliArgs
 });
 const external_spawn_local_js_namespaceObject = require("./spawn-local.js");
-function buildSourcemapCliArgs(config, mode) {
+function buildSourcemapCliArgs(config, mode, command = 'process') {
     const args = [
         'sourcemap',
-        'process'
+        command
     ];
     if ('stdin' in mode) args.push('--stdin');
     else args.push('--directory', mode.directory);
     if (config.sourcemaps.releaseName) args.push('--release-name', config.sourcemaps.releaseName);
     if (config.sourcemaps.releaseVersion) args.push('--release-version', config.sourcemaps.releaseVersion);
     if (void 0 !== config.sourcemaps.build && '' !== config.sourcemaps.build) args.push('--build', config.sourcemaps.build);
-    if (config.sourcemaps.deleteAfterUpload) args.push('--delete-after');
+    if (config.sourcemaps.deleteAfterUpload && 'process' === command) args.push('--delete-after');
     if (config.sourcemaps.batchSize) args.push('--batch-size', config.sourcemaps.batchSize.toString());
     return args;
 }
@@ -58,7 +58,7 @@ async function runSourcemapCli(config, options) {
     } : {
         directory: options.directory
     };
-    const args = buildSourcemapCliArgs(config, mode);
+    const args = buildSourcemapCliArgs(config, mode, options.command ?? 'process');
     const env = buildCliEnv(config);
     const spawnOptions = {
         cwd: process.cwd(),

package/dist/cli.mjs

@@ -1,15 +1,15 @@
 import { spawnLocal } from "./spawn-local.mjs";
-function buildSourcemapCliArgs(config, mode) {
+function buildSourcemapCliArgs(config, mode, command = 'process') {
     const args = [
         'sourcemap',
-        'process'
+        command
     ];
     if ('stdin' in mode) args.push('--stdin');
     else args.push('--directory', mode.directory);
     if (config.sourcemaps.releaseName) args.push('--release-name', config.sourcemaps.releaseName);
     if (config.sourcemaps.releaseVersion) args.push('--release-version', config.sourcemaps.releaseVersion);
     if (void 0 !== config.sourcemaps.build && '' !== config.sourcemaps.build) args.push('--build', config.sourcemaps.build);
-    if (config.sourcemaps.deleteAfterUpload) args.push('--delete-after');
+    if (config.sourcemaps.deleteAfterUpload && 'process' === command) args.push('--delete-after');
     if (config.sourcemaps.batchSize) args.push('--batch-size', config.sourcemaps.batchSize.toString());
     return args;
 }
@@ -28,7 +28,7 @@ async function runSourcemapCli(config, options) {
     } : {
         directory: options.directory
     };
-    const args = buildSourcemapCliArgs(config, mode);
+    const args = buildSourcemapCliArgs(config, mode, options.command ?? 'process');
     const env = buildCliEnv(config);
     const spawnOptions = {
         cwd: process.cwd(),

package/dist/index.d.ts

@@ -2,4 +2,5 @@ export * from './spawn-local';
 export { resolveBinaryPath, buildLocalBinaryPaths } from './utils';
 export * from './config';
 export * from './cli';
+export * from './chunk-ids';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AAClE,cAAc,UAAU,CAAA;AACxB,cAAc,OAAO,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AAClE,cAAc,UAAU,CAAA;AACxB,cAAc,OAAO,CAAA;AACrB,cAAc,aAAa,CAAA"}

package/dist/index.js

@@ -1,5 +1,8 @@
 "use strict";
 var __webpack_modules__ = {
+    "./chunk-ids": function(module) {
+        module.exports = require("./chunk-ids.js");
+    },
     "./cli": function(module) {
         module.exports = require("./cli.js");
     },
@@ -91,6 +94,16 @@ var __webpack_exports__ = {};
         return _cli__WEBPACK_IMPORTED_MODULE_3__[key];
     }).bind(0, __WEBPACK_IMPORT_KEY__);
     __webpack_require__.d(__webpack_exports__, __WEBPACK_REEXPORT_OBJECT__);
+    var _chunk_ids__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__("./chunk-ids");
+    var __WEBPACK_REEXPORT_OBJECT__ = {};
+    for(var __WEBPACK_IMPORT_KEY__ in _chunk_ids__WEBPACK_IMPORTED_MODULE_4__)if ([
+        "buildLocalBinaryPaths",
+        "resolveBinaryPath",
+        "default"
+    ].indexOf(__WEBPACK_IMPORT_KEY__) < 0) __WEBPACK_REEXPORT_OBJECT__[__WEBPACK_IMPORT_KEY__] = (function(key) {
+        return _chunk_ids__WEBPACK_IMPORTED_MODULE_4__[key];
+    }).bind(0, __WEBPACK_IMPORT_KEY__);
+    __webpack_require__.d(__webpack_exports__, __WEBPACK_REEXPORT_OBJECT__);
 })();
 exports.buildLocalBinaryPaths = __webpack_exports__.buildLocalBinaryPaths;
 exports.resolveBinaryPath = __webpack_exports__.resolveBinaryPath;

package/dist/index.mjs

@@ -2,4 +2,5 @@ import { buildLocalBinaryPaths, resolveBinaryPath } from "./utils.mjs";
 export * from "./spawn-local.mjs";
 export * from "./config.mjs";
 export * from "./cli.mjs";
+export * from "./chunk-ids.mjs";
 export { buildLocalBinaryPaths, resolveBinaryPath };

package/package.json

@@ -1,6 +1,9 @@
 {
   "name": "@posthog/plugin-utils",
-  "version": "1.1.1",
+  "version": "1.1.3",
+  "bugs": {
+    "url": "https://github.com/PostHog/posthog-js/issues"
+  },
   "description": "Shared CLI and sourcemap utilities for PostHog build plugins",
   "license": "MIT",
   "repository": {

package/src/chunk-ids.ts

@@ -0,0 +1,60 @@
+import * as crypto from 'crypto'
+
+/**
+ * Returns the minified chunk-id IIFE the SDK reads at runtime to map an
+ * error's stack back to a chunk id.
+ *
+ * Byte-for-byte contract with posthog-cli (`CODE_SNIPPET_TEMPLATE` in
+ * cli/src/sourcemaps/constant.rs): the CLI recognizes and removes previously
+ * injected snippets by exact substring match, so any change here must ship in
+ * the CLI constants too. Covered by a parity test in chunk-ids.spec.ts.
+ */
+export function createChunkIdSnippet(chunkId: string): string {
+    return `!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._posthogChunkIds=e._posthogChunkIds||{},e._posthogChunkIds[n]="${chunkId}")}catch(e){}}();`
+}
+
+/**
+ * Returns the comment posthog-cli discovers chunk ids from at upload time
+ * (`CHUNKID_COMMENT_PREFIX` in cli/src/sourcemaps/constant.rs), including the
+ * leading newline the CLI's exact-match removal expects.
+ */
+export function createChunkIdComment(chunkId: string): string {
+    return `\n//# chunkId=${chunkId}`
+}
+
+/**
+ * Mints a fresh random chunk id: a new id per chunk, per build.
+ */
+export function createChunkId(): string {
+    return crypto.randomUUID()
+}
+
+// Anchored with a bounded quantifier and only ever run against a fixed-size
+// window: an unbounded regex over the whole bundle is quadratic on adversarial
+// input (a match attempt per marker occurrence, each scanning ahead).
+const COMMENT_REGEX = /^\/\/# chunkId=(\S{1,128})/
+const COMMENT_MARKER = '//# chunkId='
+const WINDOW = 256
+
+/**
+ * Extracts the chunk id from source that already carries one, using the same
+ * detection the CLI uses: a `//# chunkId=` comment at the start of a line.
+ * The injected IIFE is deliberately not matched — its marker text can appear
+ * inside string literals of bundled code (docs strings, bundled PostHog
+ * tooling), and the CLI only ever reads the line-anchored comment. Keeping the
+ * two in sync guarantees this returning an id ⟺ the CLI finding one.
+ */
+export function determineChunkIdFromSource(code: string): string | undefined {
+    for (
+        let at = code.indexOf(COMMENT_MARKER);
+        at !== -1;
+        at = code.indexOf(COMMENT_MARKER, at + COMMENT_MARKER.length)
+    ) {
+        if (at !== 0 && code[at - 1] !== '\n') continue
+        const match = COMMENT_REGEX.exec(code.slice(at, at + WINDOW))
+        if (match) {
+            return match[1]
+        }
+    }
+    return undefined
+}

package/src/cli.ts

@@ -2,13 +2,21 @@ import { ResolvedPluginConfig } from './config'
 import { spawnLocal } from './spawn-local'
 
 /**
- * Build CLI arguments for `posthog-cli sourcemap process`.
+ * `process` injects chunk ids into the built files on disk and uploads them.
+ * `upload` only reads the files, expecting chunk ids to already be present
+ * (e.g. injected in-memory by a bundler plugin before the files were written).
+ */
+export type SourcemapCliCommand = 'process' | 'upload'
+
+/**
+ * Build CLI arguments for `posthog-cli sourcemap <command>`.
  */
 export function buildSourcemapCliArgs(
     config: ResolvedPluginConfig,
-    mode: { stdin: true } | { directory: string }
+    mode: { stdin: true } | { directory: string },
+    command: SourcemapCliCommand = 'process'
 ): string[] {
-    const args = ['sourcemap', 'process']
+    const args = ['sourcemap', command]
 
     if ('stdin' in mode) {
         args.push('--stdin')
@@ -28,7 +36,11 @@ export function buildSourcemapCliArgs(
         args.push('--build', config.sourcemaps.build)
     }
 
-    if (config.sourcemaps.deleteAfterUpload) {
+    // On `upload` the caller owns map deletion: `--delete-after` also rewrites
+    // the .js files (stripping sourcemap references), and callers pick `upload`
+    // precisely because the written files must not change — e.g. Subresource
+    // Integrity hashes were already computed from them.
+    if (config.sourcemaps.deleteAfterUpload && command === 'process') {
         args.push('--delete-after')
     }
 
@@ -58,10 +70,10 @@ export function buildCliEnv(config: ResolvedPluginConfig): NodeJS.ProcessEnv {
  */
 export async function runSourcemapCli(
     config: ResolvedPluginConfig,
-    options: { filePaths: string[] } | { directory: string }
+    options: ({ filePaths: string[] } | { directory: string }) & { command?: SourcemapCliCommand }
 ): Promise<void> {
     const mode = 'filePaths' in options ? { stdin: true as const } : { directory: options.directory }
-    const args = buildSourcemapCliArgs(config, mode)
+    const args = buildSourcemapCliArgs(config, mode, options.command ?? 'process')
     const env = buildCliEnv(config)
 
     const spawnOptions: Parameters<typeof spawnLocal>[2] = {

package/src/index.ts

@@ -2,3 +2,4 @@ export * from './spawn-local'
 export { resolveBinaryPath, buildLocalBinaryPaths } from './utils'
 export * from './config'
 export * from './cli'
+export * from './chunk-ids'