@posthog/plugin-utils 1.1.2 → 1.1.3

package/LICENSE

@@ -327,12 +327,12 @@ SOFTWARE.
 
 ---
 
-Some files in this codebase contain code from MCPCat/mcpcat-typescript-sdk.
+Some files in this codebase contain code from agentcathq/agentcat-typescript-sdk (formerly MCPCat/mcpcat-typescript-sdk).
 In such cases it is explicitly stated in the file header. This license only applies to the relevant code in such cases.
 
 MIT License
 
-Copyright (c) 2025 MCPcat
+Copyright (c) 2025 AgentCat, Inc. (formerly MCPcat)
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/dist/chunk-ids.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Returns the minified chunk-id IIFE the SDK reads at runtime to map an
+ * error's stack back to a chunk id.
+ *
+ * Byte-for-byte contract with posthog-cli (`CODE_SNIPPET_TEMPLATE` in
+ * cli/src/sourcemaps/constant.rs): the CLI recognizes and removes previously
+ * injected snippets by exact substring match, so any change here must ship in
+ * the CLI constants too. Covered by a parity test in chunk-ids.spec.ts.
+ */
+export declare function createChunkIdSnippet(chunkId: string): string;
+/**
+ * Returns the comment posthog-cli discovers chunk ids from at upload time
+ * (`CHUNKID_COMMENT_PREFIX` in cli/src/sourcemaps/constant.rs), including the
+ * leading newline the CLI's exact-match removal expects.
+ */
+export declare function createChunkIdComment(chunkId: string): string;
+/**
+ * Mints a fresh random chunk id: a new id per chunk, per build.
+ */
+export declare function createChunkId(): string;
+/**
+ * Extracts the chunk id from source that already carries one, using the same
+ * detection the CLI uses: a `//# chunkId=` comment at the start of a line.
+ * The injected IIFE is deliberately not matched — its marker text can appear
+ * inside string literals of bundled code (docs strings, bundled PostHog
+ * tooling), and the CLI only ever reads the line-anchored comment. Keeping the
+ * two in sync guarantees this returning an id ⟺ the CLI finding one.
+ */
+export declare function determineChunkIdFromSource(code: string): string | undefined;
+//# sourceMappingURL=chunk-ids.d.ts.map

package/dist/chunk-ids.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chunk-ids.d.ts","sourceRoot":"","sources":["../src/chunk-ids.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AASD;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAa3E"}

package/dist/chunk-ids.js

@@ -0,0 +1,64 @@
+"use strict";
+var __webpack_require__ = {};
+(()=>{
+    __webpack_require__.d = (exports1, definition)=>{
+        for(var key in definition)if (__webpack_require__.o(definition, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
+            enumerable: true,
+            get: definition[key]
+        });
+    };
+})();
+(()=>{
+    __webpack_require__.o = (obj, prop)=>Object.prototype.hasOwnProperty.call(obj, prop);
+})();
+(()=>{
+    __webpack_require__.r = (exports1)=>{
+        if ('undefined' != typeof Symbol && Symbol.toStringTag) Object.defineProperty(exports1, Symbol.toStringTag, {
+            value: 'Module'
+        });
+        Object.defineProperty(exports1, '__esModule', {
+            value: true
+        });
+    };
+})();
+var __webpack_exports__ = {};
+__webpack_require__.r(__webpack_exports__);
+__webpack_require__.d(__webpack_exports__, {
+    createChunkIdSnippet: ()=>createChunkIdSnippet,
+    createChunkId: ()=>createChunkId,
+    createChunkIdComment: ()=>createChunkIdComment,
+    determineChunkIdFromSource: ()=>determineChunkIdFromSource
+});
+const external_crypto_namespaceObject = require("crypto");
+function createChunkIdSnippet(chunkId) {
+    return `!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._posthogChunkIds=e._posthogChunkIds||{},e._posthogChunkIds[n]="${chunkId}")}catch(e){}}();`;
+}
+function createChunkIdComment(chunkId) {
+    return `\n//# chunkId=${chunkId}`;
+}
+function createChunkId() {
+    return external_crypto_namespaceObject.randomUUID();
+}
+const COMMENT_REGEX = /^\/\/# chunkId=(\S{1,128})/;
+const COMMENT_MARKER = '//# chunkId=';
+const WINDOW = 256;
+function determineChunkIdFromSource(code) {
+    for(let at = code.indexOf(COMMENT_MARKER); -1 !== at; at = code.indexOf(COMMENT_MARKER, at + COMMENT_MARKER.length)){
+        if (0 !== at && '\n' !== code[at - 1]) continue;
+        const match = COMMENT_REGEX.exec(code.slice(at, at + WINDOW));
+        if (match) return match[1];
+    }
+}
+exports.createChunkId = __webpack_exports__.createChunkId;
+exports.createChunkIdComment = __webpack_exports__.createChunkIdComment;
+exports.createChunkIdSnippet = __webpack_exports__.createChunkIdSnippet;
+exports.determineChunkIdFromSource = __webpack_exports__.determineChunkIdFromSource;
+for(var __webpack_i__ in __webpack_exports__)if (-1 === [
+    "createChunkId",
+    "createChunkIdComment",
+    "createChunkIdSnippet",
+    "determineChunkIdFromSource"
+].indexOf(__webpack_i__)) exports[__webpack_i__] = __webpack_exports__[__webpack_i__];
+Object.defineProperty(exports, '__esModule', {
+    value: true
+});

package/dist/chunk-ids.mjs

@@ -0,0 +1,21 @@
+import { randomUUID } from "crypto";
+function createChunkIdSnippet(chunkId) {
+    return `!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._posthogChunkIds=e._posthogChunkIds||{},e._posthogChunkIds[n]="${chunkId}")}catch(e){}}();`;
+}
+function createChunkIdComment(chunkId) {
+    return `\n//# chunkId=${chunkId}`;
+}
+function createChunkId() {
+    return randomUUID();
+}
+const COMMENT_REGEX = /^\/\/# chunkId=(\S{1,128})/;
+const COMMENT_MARKER = '//# chunkId=';
+const WINDOW = 256;
+function determineChunkIdFromSource(code) {
+    for(let at = code.indexOf(COMMENT_MARKER); -1 !== at; at = code.indexOf(COMMENT_MARKER, at + COMMENT_MARKER.length)){
+        if (0 !== at && '\n' !== code[at - 1]) continue;
+        const match = COMMENT_REGEX.exec(code.slice(at, at + WINDOW));
+        if (match) return match[1];
+    }
+}
+export { createChunkId, createChunkIdComment, createChunkIdSnippet, determineChunkIdFromSource };

package/dist/cli.d.ts

@@ -1,12 +1,18 @@
 import { ResolvedPluginConfig } from './config';
 /**
- * Build CLI arguments for `posthog-cli sourcemap process`.
+ * `process` injects chunk ids into the built files on disk and uploads them.
+ * `upload` only reads the files, expecting chunk ids to already be present
+ * (e.g. injected in-memory by a bundler plugin before the files were written).
+ */
+export type SourcemapCliCommand = 'process' | 'upload';
+/**
+ * Build CLI arguments for `posthog-cli sourcemap <command>`.
  */
 export declare function buildSourcemapCliArgs(config: ResolvedPluginConfig, mode: {
     stdin: true;
 } | {
     directory: string;
-}): string[];
+}, command?: SourcemapCliCommand): string[];
 /**
  * Build environment variables for CLI invocation.
  * Plugin config values override any existing process.env values.
@@ -15,9 +21,11 @@ export declare function buildCliEnv(config: ResolvedPluginConfig): NodeJS.Proces
 /**
  * Spawn the PostHog CLI for sourcemap processing via stdin (file list).
  */
-export declare function runSourcemapCli(config: ResolvedPluginConfig, options: {
+export declare function runSourcemapCli(config: ResolvedPluginConfig, options: ({
     filePaths: string[];
 } | {
     directory: string;
+}) & {
+    command?: SourcemapCliCommand;
 }): Promise<void>;
 //# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AAG/C;;GAEG;AACH,wBAAgB,qBAAqB,CACjC,MAAM,EAAE,oBAAoB,EAC5B,IAAI,EAAE;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GAC9C,MAAM,EAAE,CA8BV;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,CAAC,UAAU,CAQ3E;AAED;;GAEG;AACH,wBAAsB,eAAe,CACjC,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE;IAAE,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GACzD,OAAO,CAAC,IAAI,CAAC,CAgBf"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AAG/C;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,QAAQ,CAAA;AAEtD;;GAEG;AACH,wBAAgB,qBAAqB,CACjC,MAAM,EAAE,oBAAoB,EAC5B,IAAI,EAAE;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,EAC7C,OAAO,GAAE,mBAA+B,GACzC,MAAM,EAAE,CAkCV;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,CAAC,UAAU,CAQ3E;AAED;;GAEG;AACH,wBAAsB,eAAe,CACjC,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE,CAAC;IAAE,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG;IAAE,OAAO,CAAC,EAAE,mBAAmB,CAAA;CAAE,GAC/F,OAAO,CAAC,IAAI,CAAC,CAgBf"}

package/dist/cli.js

@@ -29,17 +29,17 @@ __webpack_require__.d(__webpack_exports__, {
     buildSourcemapCliArgs: ()=>buildSourcemapCliArgs
 });
 const external_spawn_local_js_namespaceObject = require("./spawn-local.js");
-function buildSourcemapCliArgs(config, mode) {
+function buildSourcemapCliArgs(config, mode, command = 'process') {
     const args = [
         'sourcemap',
-        'process'
+        command
     ];
     if ('stdin' in mode) args.push('--stdin');
     else args.push('--directory', mode.directory);
     if (config.sourcemaps.releaseName) args.push('--release-name', config.sourcemaps.releaseName);
     if (config.sourcemaps.releaseVersion) args.push('--release-version', config.sourcemaps.releaseVersion);
     if (void 0 !== config.sourcemaps.build && '' !== config.sourcemaps.build) args.push('--build', config.sourcemaps.build);
-    if (config.sourcemaps.deleteAfterUpload) args.push('--delete-after');
+    if (config.sourcemaps.deleteAfterUpload && 'process' === command) args.push('--delete-after');
     if (config.sourcemaps.batchSize) args.push('--batch-size', config.sourcemaps.batchSize.toString());
     return args;
 }
@@ -58,7 +58,7 @@ async function runSourcemapCli(config, options) {
     } : {
         directory: options.directory
     };
-    const args = buildSourcemapCliArgs(config, mode);
+    const args = buildSourcemapCliArgs(config, mode, options.command ?? 'process');
     const env = buildCliEnv(config);
     const spawnOptions = {
         cwd: process.cwd(),

package/dist/cli.mjs

@@ -1,15 +1,15 @@
 import { spawnLocal } from "./spawn-local.mjs";
-function buildSourcemapCliArgs(config, mode) {
+function buildSourcemapCliArgs(config, mode, command = 'process') {
     const args = [
         'sourcemap',
-        'process'
+        command
     ];
     if ('stdin' in mode) args.push('--stdin');
     else args.push('--directory', mode.directory);
     if (config.sourcemaps.releaseName) args.push('--release-name', config.sourcemaps.releaseName);
     if (config.sourcemaps.releaseVersion) args.push('--release-version', config.sourcemaps.releaseVersion);
     if (void 0 !== config.sourcemaps.build && '' !== config.sourcemaps.build) args.push('--build', config.sourcemaps.build);
-    if (config.sourcemaps.deleteAfterUpload) args.push('--delete-after');
+    if (config.sourcemaps.deleteAfterUpload && 'process' === command) args.push('--delete-after');
     if (config.sourcemaps.batchSize) args.push('--batch-size', config.sourcemaps.batchSize.toString());
     return args;
 }
@@ -28,7 +28,7 @@ async function runSourcemapCli(config, options) {
     } : {
         directory: options.directory
     };
-    const args = buildSourcemapCliArgs(config, mode);
+    const args = buildSourcemapCliArgs(config, mode, options.command ?? 'process');
     const env = buildCliEnv(config);
     const spawnOptions = {
         cwd: process.cwd(),

package/dist/index.d.ts

@@ -2,4 +2,5 @@ export * from './spawn-local';
 export { resolveBinaryPath, buildLocalBinaryPaths } from './utils';
 export * from './config';
 export * from './cli';
+export * from './chunk-ids';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AAClE,cAAc,UAAU,CAAA;AACxB,cAAc,OAAO,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AAClE,cAAc,UAAU,CAAA;AACxB,cAAc,OAAO,CAAA;AACrB,cAAc,aAAa,CAAA"}

package/dist/index.js

@@ -1,5 +1,8 @@
 "use strict";
 var __webpack_modules__ = {
+    "./chunk-ids": function(module) {
+        module.exports = require("./chunk-ids.js");
+    },
     "./cli": function(module) {
         module.exports = require("./cli.js");
     },
@@ -91,6 +94,16 @@ var __webpack_exports__ = {};
         return _cli__WEBPACK_IMPORTED_MODULE_3__[key];
     }).bind(0, __WEBPACK_IMPORT_KEY__);
     __webpack_require__.d(__webpack_exports__, __WEBPACK_REEXPORT_OBJECT__);
+    var _chunk_ids__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__("./chunk-ids");
+    var __WEBPACK_REEXPORT_OBJECT__ = {};
+    for(var __WEBPACK_IMPORT_KEY__ in _chunk_ids__WEBPACK_IMPORTED_MODULE_4__)if ([
+        "buildLocalBinaryPaths",
+        "resolveBinaryPath",
+        "default"
+    ].indexOf(__WEBPACK_IMPORT_KEY__) < 0) __WEBPACK_REEXPORT_OBJECT__[__WEBPACK_IMPORT_KEY__] = (function(key) {
+        return _chunk_ids__WEBPACK_IMPORTED_MODULE_4__[key];
+    }).bind(0, __WEBPACK_IMPORT_KEY__);
+    __webpack_require__.d(__webpack_exports__, __WEBPACK_REEXPORT_OBJECT__);
 })();
 exports.buildLocalBinaryPaths = __webpack_exports__.buildLocalBinaryPaths;
 exports.resolveBinaryPath = __webpack_exports__.resolveBinaryPath;

package/dist/index.mjs

@@ -2,4 +2,5 @@ import { buildLocalBinaryPaths, resolveBinaryPath } from "./utils.mjs";
 export * from "./spawn-local.mjs";
 export * from "./config.mjs";
 export * from "./cli.mjs";
+export * from "./chunk-ids.mjs";
 export { buildLocalBinaryPaths, resolveBinaryPath };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@posthog/plugin-utils",
-  "version": "1.1.2",
+  "version": "1.1.3",
   "bugs": {
     "url": "https://github.com/PostHog/posthog-js/issues"
   },

package/src/chunk-ids.ts

@@ -0,0 +1,60 @@
+import * as crypto from 'crypto'
+
+/**
+ * Returns the minified chunk-id IIFE the SDK reads at runtime to map an
+ * error's stack back to a chunk id.
+ *
+ * Byte-for-byte contract with posthog-cli (`CODE_SNIPPET_TEMPLATE` in
+ * cli/src/sourcemaps/constant.rs): the CLI recognizes and removes previously
+ * injected snippets by exact substring match, so any change here must ship in
+ * the CLI constants too. Covered by a parity test in chunk-ids.spec.ts.
+ */
+export function createChunkIdSnippet(chunkId: string): string {
+    return `!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._posthogChunkIds=e._posthogChunkIds||{},e._posthogChunkIds[n]="${chunkId}")}catch(e){}}();`
+}
+
+/**
+ * Returns the comment posthog-cli discovers chunk ids from at upload time
+ * (`CHUNKID_COMMENT_PREFIX` in cli/src/sourcemaps/constant.rs), including the
+ * leading newline the CLI's exact-match removal expects.
+ */
+export function createChunkIdComment(chunkId: string): string {
+    return `\n//# chunkId=${chunkId}`
+}
+
+/**
+ * Mints a fresh random chunk id: a new id per chunk, per build.
+ */
+export function createChunkId(): string {
+    return crypto.randomUUID()
+}
+
+// Anchored with a bounded quantifier and only ever run against a fixed-size
+// window: an unbounded regex over the whole bundle is quadratic on adversarial
+// input (a match attempt per marker occurrence, each scanning ahead).
+const COMMENT_REGEX = /^\/\/# chunkId=(\S{1,128})/
+const COMMENT_MARKER = '//# chunkId='
+const WINDOW = 256
+
+/**
+ * Extracts the chunk id from source that already carries one, using the same
+ * detection the CLI uses: a `//# chunkId=` comment at the start of a line.
+ * The injected IIFE is deliberately not matched — its marker text can appear
+ * inside string literals of bundled code (docs strings, bundled PostHog
+ * tooling), and the CLI only ever reads the line-anchored comment. Keeping the
+ * two in sync guarantees this returning an id ⟺ the CLI finding one.
+ */
+export function determineChunkIdFromSource(code: string): string | undefined {
+    for (
+        let at = code.indexOf(COMMENT_MARKER);
+        at !== -1;
+        at = code.indexOf(COMMENT_MARKER, at + COMMENT_MARKER.length)
+    ) {
+        if (at !== 0 && code[at - 1] !== '\n') continue
+        const match = COMMENT_REGEX.exec(code.slice(at, at + WINDOW))
+        if (match) {
+            return match[1]
+        }
+    }
+    return undefined
+}

package/src/cli.ts

@@ -2,13 +2,21 @@ import { ResolvedPluginConfig } from './config'
 import { spawnLocal } from './spawn-local'
 
 /**
- * Build CLI arguments for `posthog-cli sourcemap process`.
+ * `process` injects chunk ids into the built files on disk and uploads them.
+ * `upload` only reads the files, expecting chunk ids to already be present
+ * (e.g. injected in-memory by a bundler plugin before the files were written).
+ */
+export type SourcemapCliCommand = 'process' | 'upload'
+
+/**
+ * Build CLI arguments for `posthog-cli sourcemap <command>`.
  */
 export function buildSourcemapCliArgs(
     config: ResolvedPluginConfig,
-    mode: { stdin: true } | { directory: string }
+    mode: { stdin: true } | { directory: string },
+    command: SourcemapCliCommand = 'process'
 ): string[] {
-    const args = ['sourcemap', 'process']
+    const args = ['sourcemap', command]
 
     if ('stdin' in mode) {
         args.push('--stdin')
@@ -28,7 +36,11 @@ export function buildSourcemapCliArgs(
         args.push('--build', config.sourcemaps.build)
     }
 
-    if (config.sourcemaps.deleteAfterUpload) {
+    // On `upload` the caller owns map deletion: `--delete-after` also rewrites
+    // the .js files (stripping sourcemap references), and callers pick `upload`
+    // precisely because the written files must not change — e.g. Subresource
+    // Integrity hashes were already computed from them.
+    if (config.sourcemaps.deleteAfterUpload && command === 'process') {
         args.push('--delete-after')
     }
 
@@ -58,10 +70,10 @@ export function buildCliEnv(config: ResolvedPluginConfig): NodeJS.ProcessEnv {
  */
 export async function runSourcemapCli(
     config: ResolvedPluginConfig,
-    options: { filePaths: string[] } | { directory: string }
+    options: ({ filePaths: string[] } | { directory: string }) & { command?: SourcemapCliCommand }
 ): Promise<void> {
     const mode = 'filePaths' in options ? { stdin: true as const } : { directory: options.directory }
-    const args = buildSourcemapCliArgs(config, mode)
+    const args = buildSourcemapCliArgs(config, mode, options.command ?? 'process')
     const env = buildCliEnv(config)
 
     const spawnOptions: Parameters<typeof spawnLocal>[2] = {

package/src/index.ts

@@ -2,3 +2,4 @@ export * from './spawn-local'
 export { resolveBinaryPath, buildLocalBinaryPaths } from './utils'
 export * from './config'
 export * from './cli'
+export * from './chunk-ids'