@spotlightjs/spotlight 4.6.0 → 4.7.1

package/dist/server/cli/help.js

@@ -1,5 +1,14 @@
+;
+!function() {
+  try {
+    var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {}, n = new e.Error().stack;
+    n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "e9690808-fca0-4d98-bfa6-5a55512c8693", e._sentryDebugIdIdentifier = "sentry-dbid-e9690808-fca0-4d98-bfa6-5a55512c8693");
+  } catch (e2) {
+  }
+}();
 import { EVERYTHING_MAGIC_WORDS, NAME_TO_TYPE_MAPPING } from "./tail.js";
 import { AVAILABLE_FORMATTERS } from "../formatters/types.js";
+import "../../_virtual/_sentry-release-injection-file.js";
 function showHelp() {
   console.log(`
 Spotlight Sidecar - Development proxy server for Spotlight
@@ -18,6 +27,12 @@ Options:
   -d, --debug            Enable debug logging
   -f, --format <format>  Output format for tail command (default: human)
                          Available formats: ${[...AVAILABLE_FORMATTERS].join(", ")}
+  -A, --allowed-origin <origin>
+                         Additional origins to allow for CORS requests.
+                         Can be specified multiple times or comma-separated.
+                         Accepts full origins (https://example.com:443) for
+                         strict matching or plain domains (myapp.local) to
+                         allow any protocol/port.
   -h, --help             Show this help message
 
 Examples:
@@ -29,6 +44,8 @@ Examples:
   spotlight mcp                      # Start in MCP mode
   spotlight --port 3000              # Start on port 3000
   spotlight -p 3000 -d               # Start on port 3000 with debug logging
+  spotlight -A myapp.local           # Allow requests from myapp.local
+  spotlight -A https://tunnel.ngrok.io -A dev.local  # Multiple origins
 `);
   process.exit(0);
 }

package/dist/server/cli/help.js.map

@@ -1 +1 @@
-{"version":3,"file":"help.js","sources":["../../../src/server/cli/help.ts"],"sourcesContent":["import { EVERYTHING_MAGIC_WORDS, NAME_TO_TYPE_MAPPING } from \"../cli/tail.ts\";\nimport { AVAILABLE_FORMATTERS } from \"../formatters/types.ts\";\n\nexport default function showHelp() {\n  console.log(`\nSpotlight Sidecar - Development proxy server for Spotlight\n\nUsage: spotlight [command] [options]\n\nCommands:\n  tail [types...]      Tail Sentry events (default: everything)\n                       Available types: ${[...Object.keys(NAME_TO_TYPE_MAPPING)].join(\", \")}\n                       Magic words: ${[...EVERYTHING_MAGIC_WORDS].join(\", \")}\n  mcp                  Start in MCP (Model Context Protocol) mode\n  help                 Show this help message\n\nOptions:\n  -p, --port <port>      Port to listen on (default: 8969, or 0 for random)\n  -d, --debug            Enable debug logging\n  -f, --format <format>  Output format for tail command (default: human)\n                         Available formats: ${[...AVAILABLE_FORMATTERS].join(\", \")}\n  -h, --help             Show this help message\n\nExamples:\n  spotlight                          # Start on default port 8969\n  spotlight tail                     # Tail all event types (human format)\n  spotlight tail errors              # Tail only errors\n  spotlight tail errors logs         # Tail errors and logs\n  spotlight tail --format json       # Explicitly use json format\n  spotlight mcp                      # Start in MCP mode\n  spotlight --port 3000              # Start on port 3000\n  spotlight -p 3000 -d               # Start on port 3000 with debug logging\n`);\n  process.exit(0);\n}\n"],"names":[],"mappings":";;AAGA,SAAwB,WAAW;AACjC,UAAQ,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,0CAO4B,CAAC,GAAG,OAAO,KAAK,oBAAoB,CAAC,EAAE,KAAK,IAAI,CAAC;AAAA,sCACrD,CAAC,GAAG,sBAAsB,EAAE,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,8CAQ9B,CAAC,GAAG,oBAAoB,EAAE,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAYjF;AACC,UAAQ,KAAK,CAAC;AAChB;"}
+{"version":3,"file":"help.js","sources":["../../../src/server/cli/help.ts"],"sourcesContent":["import { EVERYTHING_MAGIC_WORDS, NAME_TO_TYPE_MAPPING } from \"../cli/tail.ts\";\nimport { AVAILABLE_FORMATTERS } from \"../formatters/types.ts\";\n\nexport default function showHelp() {\n  console.log(`\nSpotlight Sidecar - Development proxy server for Spotlight\n\nUsage: spotlight [command] [options]\n\nCommands:\n  tail [types...]      Tail Sentry events (default: everything)\n                       Available types: ${[...Object.keys(NAME_TO_TYPE_MAPPING)].join(\", \")}\n                       Magic words: ${[...EVERYTHING_MAGIC_WORDS].join(\", \")}\n  mcp                  Start in MCP (Model Context Protocol) mode\n  help                 Show this help message\n\nOptions:\n  -p, --port <port>      Port to listen on (default: 8969, or 0 for random)\n  -d, --debug            Enable debug logging\n  -f, --format <format>  Output format for tail command (default: human)\n                         Available formats: ${[...AVAILABLE_FORMATTERS].join(\", \")}\n  -A, --allowed-origin <origin>\n                         Additional origins to allow for CORS requests.\n                         Can be specified multiple times or comma-separated.\n                         Accepts full origins (https://example.com:443) for\n                         strict matching or plain domains (myapp.local) to\n                         allow any protocol/port.\n  -h, --help             Show this help message\n\nExamples:\n  spotlight                          # Start on default port 8969\n  spotlight tail                     # Tail all event types (human format)\n  spotlight tail errors              # Tail only errors\n  spotlight tail errors logs         # Tail errors and logs\n  spotlight tail --format json       # Explicitly use json format\n  spotlight mcp                      # Start in MCP mode\n  spotlight --port 3000              # Start on port 3000\n  spotlight -p 3000 -d               # Start on port 3000 with debug logging\n  spotlight -A myapp.local           # Allow requests from myapp.local\n  spotlight -A https://tunnel.ngrok.io -A dev.local  # Multiple origins\n`);\n  process.exit(0);\n}\n"],"names":[],"mappings":";;;;;;;;;;;AAGA,SAAwB,WAAW;AACjC,UAAQ,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,0CAO4B,CAAC,GAAG,OAAO,KAAK,oBAAoB,CAAC,EAAE,KAAK,IAAI,CAAC;AAAA,sCACrD,CAAC,GAAG,sBAAsB,EAAE,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,8CAQ9B,CAAC,GAAG,oBAAoB,EAAE,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAoBjF;AACC,UAAQ,KAAK,CAAC;AAChB;"}

package/dist/server/cli/mcp.d.ts

@@ -1,2 +1,2 @@
 import { CLIHandlerOptions } from '../types/cli.ts';
-export default function mcp({ port, basePath, filesToServe }: CLIHandlerOptions): Promise<import('http').Server<typeof import('http').IncomingMessage, typeof import('http').ServerResponse> | undefined>;
+export default function mcp({ port, basePath, filesToServe, allowedOrigins }: CLIHandlerOptions): Promise<import('http').Server<typeof import('http').IncomingMessage, typeof import('http').ServerResponse> | undefined>;

package/dist/server/cli/mcp.js

@@ -1,3 +1,11 @@
+;
+!function() {
+  try {
+    var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {}, n = new e.Error().stack;
+    n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "76ae9be3-3fab-4851-89d6-2ad159f12870", e._sentryDebugIdIdentifier = "sentry-dbid-76ae9be3-3fab-4851-89d6-2ad159f12870");
+  } catch (e2) {
+  }
+}();
 import { Client } from "../../node_modules/.pnpm/@modelcontextprotocol_sdk@1.16.0/node_modules/@modelcontextprotocol/sdk/dist/esm/client/index.js";
 import { StdioServerTransport } from "../../node_modules/.pnpm/@modelcontextprotocol_sdk@1.16.0/node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js";
 import { captureException } from "@sentry/node";
@@ -5,12 +13,15 @@ import { startStdioServer, ServerType } from "mcp-proxy";
 import { logger } from "../logger.js";
 import { startServer, setShutdownHandlers } from "../main.js";
 import { createMCPInstance } from "../mcp/mcp.js";
+import { normalizeAllowedOrigins } from "../utils/cors.js";
 import { isSidecarRunning } from "../utils/extras.js";
-async function startServerWithStdioMCP(port, basePath, filesToServe) {
+import "../../_virtual/_sentry-release-injection-file.js";
+async function startServerWithStdioMCP(port, basePath, filesToServe, normalizedAllowedOrigins) {
   const serverInstance = await startServer({
     port,
     basePath,
-    filesToServe
+    filesToServe,
+    normalizedAllowedOrigins
   });
   setShutdownHandlers(serverInstance);
   logger.info("Starting MCP over stdio too...");
@@ -23,7 +34,7 @@ async function startServerWithStdioMCP(port, basePath, filesToServe) {
   process.on("SIGTERM", shutdownMcp);
   return serverInstance;
 }
-async function startMCPStdioHTTPProxy(port, basePath, filesToServe) {
+async function startMCPStdioHTTPProxy(port, basePath, filesToServe, normalizedAllowedOrigins) {
   let intentionalShutdown = false;
   let client = null;
   let server = null;
@@ -77,26 +88,27 @@ async function startMCPStdioHTTPProxy(port, basePath, filesToServe) {
     process.off("SIGTERM", shutdown);
     process.stdin.resume();
     try {
-      await startMCPStdioHTTPProxy(port, basePath, filesToServe);
+      await startMCPStdioHTTPProxy(port, basePath, filesToServe, normalizedAllowedOrigins);
       logger.info("Connection restored");
     } catch (_err) {
       try {
-        return await startServerWithStdioMCP(port, basePath, filesToServe);
+        return await startServerWithStdioMCP(port, basePath, filesToServe, normalizedAllowedOrigins);
       } catch (_err2) {
         logger.error("Failed to restart sidecar server after MCP stdio proxy closed.");
         captureException(_err2);
-        await startMCPStdioHTTPProxy(port, basePath, filesToServe);
+        await startMCPStdioHTTPProxy(port, basePath, filesToServe, normalizedAllowedOrigins);
       }
     }
   };
 }
-async function mcp({ port, basePath, filesToServe }) {
+async function mcp({ port, basePath, filesToServe, allowedOrigins }) {
+  const normalizedAllowedOrigins = allowedOrigins ? normalizeAllowedOrigins(allowedOrigins) : void 0;
   if (port > 0 && await isSidecarRunning(port)) {
     logger.info("Connecting to existing MCP instance with stdio proxy...");
-    await startMCPStdioHTTPProxy(port, basePath, filesToServe);
+    await startMCPStdioHTTPProxy(port, basePath, filesToServe, normalizedAllowedOrigins);
     logger.info(`Connected to existing MCP instance on port ${port}`);
   } else {
-    return await startServerWithStdioMCP(port, basePath, filesToServe);
+    return await startServerWithStdioMCP(port, basePath, filesToServe, normalizedAllowedOrigins);
   }
 }
 export {

package/dist/server/cli/mcp.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.js","sources":["../../../src/server/cli/mcp.ts"],"sourcesContent":["import { Client } from \"@modelcontextprotocol/sdk/client/index.js\";\nimport { StdioServerTransport } from \"@modelcontextprotocol/sdk/server/stdio.js\";\nimport { captureException } from \"@sentry/node\";\nimport { ServerType as ProxyServerType, startStdioServer } from \"mcp-proxy\";\nimport { logger } from \"../logger.ts\";\nimport { setShutdownHandlers, startServer } from \"../main.ts\";\nimport { createMCPInstance } from \"../mcp/mcp.ts\";\nimport type { CLIHandlerOptions } from \"../types/cli.ts\";\nimport { isSidecarRunning } from \"../utils/extras.ts\";\n\nasync function startServerWithStdioMCP(\n  port: CLIHandlerOptions[\"port\"],\n  basePath: CLIHandlerOptions[\"basePath\"],\n  filesToServe: CLIHandlerOptions[\"filesToServe\"],\n) {\n  const serverInstance = await startServer({\n    port,\n    basePath,\n    filesToServe,\n  });\n  setShutdownHandlers(serverInstance);\n\n  logger.info(\"Starting MCP over stdio too...\");\n  const mcpInstance = createMCPInstance();\n  await mcpInstance.connect(new StdioServerTransport());\n\n  const shutdownMcp = () => {\n    mcpInstance.close();\n  };\n\n  process.on(\"SIGINT\", shutdownMcp);\n  process.on(\"SIGTERM\", shutdownMcp);\n\n  return serverInstance;\n}\n\nasync function startMCPStdioHTTPProxy(\n  port: CLIHandlerOptions[\"port\"],\n  basePath: CLIHandlerOptions[\"basePath\"],\n  filesToServe: CLIHandlerOptions[\"filesToServe\"],\n) {\n  let intentionalShutdown = false;\n  let client: Client | null = null;\n  let server: Awaited<ReturnType<typeof startStdioServer>> | null = null;\n\n  const shutdown = async () => {\n    if (intentionalShutdown) {\n      // If we get the signal again, exit immediately\n      logger.info(\"Bye.\");\n      process.exit(0);\n    }\n\n    intentionalShutdown = true;\n    logger.info(\"Shutting down MCP stdio proxy...\");\n\n    if (client) {\n      await client.close();\n    }\n    if (server) {\n      await server.close();\n    }\n  };\n\n  // Set up signal handlers for graceful shutdown\n  process.on(\"SIGINT\", shutdown);\n  process.on(\"SIGTERM\", shutdown);\n\n  server = await startStdioServer({\n    // We need to hook into `initStreamClient` as the returned object from startStdioServer\n    // is not a meta proxy object giving access to both the server and the client. It just\n    // returns the StdioServerTransport instance without a way to access the client or its errors.\n    // TODO: We should probably upstream a fix for this to close the server or bubble the errors\n    initStreamClient: () => {\n      client = new Client({\n        name: \"Spotlight Sidecar (stdio proxy)\",\n        version: \"1.0.0\",\n      });\n      client.onerror = async (err: Error) => {\n        if (\n          err.message.startsWith(\"Maximum reconnection attempts\") ||\n          /disconnected|fetch failed|connection closed/i.test(err.message)\n        ) {\n          if (client) await client.close();\n          if (server) await server.close();\n        } else if (!/conflict/i.test(err.message)) {\n          captureException(err);\n          logger.error(`MCP stdio proxy error: ${err.name}: ${err.message}`);\n        }\n      };\n      return Promise.resolve(client);\n    },\n    serverType: ProxyServerType.HTTPStream,\n    url: `http://localhost:${port}/mcp`,\n  });\n  server.onclose = async () => {\n    // If this is an intentional shutdown, don't restart\n    if (intentionalShutdown) {\n      logger.info(\"MCP stdio proxy server closed.\");\n      return;\n    }\n\n    logger.info(\"MCP stdio proxy server closed unexpectedly. Attempting to restart...\");\n    process.off(\"SIGINT\", shutdown);\n    process.off(\"SIGTERM\", shutdown);\n    // We need to manually resume stdin as `StdioServerTransport` pauses it on\n    // close but does not `resume` it when a new instance is created. Probably\n    // a bug in https://github.com/modelcontextprotocol/typescript-sdk/blob/main/src/server/stdio.ts\n    process.stdin.resume();\n\n    try {\n      await startMCPStdioHTTPProxy(port, basePath, filesToServe);\n      logger.info(\"Connection restored\");\n    } catch (_err) {\n      try {\n        return await startServerWithStdioMCP(port, basePath, filesToServe);\n      } catch (_err2) {\n        logger.error(\"Failed to restart sidecar server after MCP stdio proxy closed.\");\n        captureException(_err2);\n        await startMCPStdioHTTPProxy(port, basePath, filesToServe);\n      }\n    }\n  };\n}\n\nexport default async function mcp({ port, basePath, filesToServe }: CLIHandlerOptions) {\n  if (port > 0 && (await isSidecarRunning(port))) {\n    logger.info(\"Connecting to existing MCP instance with stdio proxy...\");\n    await startMCPStdioHTTPProxy(port, basePath, filesToServe);\n    logger.info(`Connected to existing MCP instance on port ${port}`);\n  } else {\n    return await startServerWithStdioMCP(port, basePath, filesToServe);\n  }\n}\n"],"names":["ProxyServerType"],"mappings":";;;;;;;;AAUA,eAAe,wBACb,MACA,UACA,cACA;AACA,QAAM,iBAAiB,MAAM,YAAY;AAAA,IACvC;AAAA,IACA;AAAA,IACA;AAAA,EAAA,CACD;AACD,sBAAoB,cAAc;AAElC,SAAO,KAAK,gCAAgC;AAC5C,QAAM,cAAc,kBAAA;AACpB,QAAM,YAAY,QAAQ,IAAI,sBAAsB;AAEpD,QAAM,cAAc,MAAM;AACxB,gBAAY,MAAA;AAAA,EACd;AAEA,UAAQ,GAAG,UAAU,WAAW;AAChC,UAAQ,GAAG,WAAW,WAAW;AAEjC,SAAO;AACT;AAEA,eAAe,uBACb,MACA,UACA,cACA;AACA,MAAI,sBAAsB;AAC1B,MAAI,SAAwB;AAC5B,MAAI,SAA8D;AAElE,QAAM,WAAW,YAAY;AAC3B,QAAI,qBAAqB;AAEvB,aAAO,KAAK,MAAM;AAClB,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,0BAAsB;AACtB,WAAO,KAAK,kCAAkC;AAE9C,QAAI,QAAQ;AACV,YAAM,OAAO,MAAA;AAAA,IACf;AACA,QAAI,QAAQ;AACV,YAAM,OAAO,MAAA;AAAA,IACf;AAAA,EACF;AAGA,UAAQ,GAAG,UAAU,QAAQ;AAC7B,UAAQ,GAAG,WAAW,QAAQ;AAE9B,WAAS,MAAM,iBAAiB;AAAA;AAAA;AAAA;AAAA;AAAA,IAK9B,kBAAkB,MAAM;AACtB,eAAS,IAAI,OAAO;AAAA,QAClB,MAAM;AAAA,QACN,SAAS;AAAA,MAAA,CACV;AACD,aAAO,UAAU,OAAO,QAAe;AACrC,YACE,IAAI,QAAQ,WAAW,+BAA+B,KACtD,+CAA+C,KAAK,IAAI,OAAO,GAC/D;AACA,cAAI,OAAQ,OAAM,OAAO,MAAA;AACzB,cAAI,OAAQ,OAAM,OAAO,MAAA;AAAA,QAC3B,WAAW,CAAC,YAAY,KAAK,IAAI,OAAO,GAAG;AACzC,2BAAiB,GAAG;AACpB,iBAAO,MAAM,0BAA0B,IAAI,IAAI,KAAK,IAAI,OAAO,EAAE;AAAA,QACnE;AAAA,MACF;AACA,aAAO,QAAQ,QAAQ,MAAM;AAAA,IAC/B;AAAA,IACA,YAAYA,WAAgB;AAAA,IAC5B,KAAK,oBAAoB,IAAI;AAAA,EAAA,CAC9B;AACD,SAAO,UAAU,YAAY;AAE3B,QAAI,qBAAqB;AACvB,aAAO,KAAK,gCAAgC;AAC5C;AAAA,IACF;AAEA,WAAO,KAAK,sEAAsE;AAClF,YAAQ,IAAI,UAAU,QAAQ;AAC9B,YAAQ,IAAI,WAAW,QAAQ;AAI/B,YAAQ,MAAM,OAAA;AAEd,QAAI;AACF,YAAM,uBAAuB,MAAM,UAAU,YAAY;AACzD,aAAO,KAAK,qBAAqB;AAAA,IACnC,SAAS,MAAM;AACb,UAAI;AACF,eAAO,MAAM,wBAAwB,MAAM,UAAU,YAAY;AAAA,MACnE,SAAS,OAAO;AACd,eAAO,MAAM,gEAAgE;AAC7E,yBAAiB,KAAK;AACtB,cAAM,uBAAuB,MAAM,UAAU,YAAY;AAAA,MAC3D;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAA8B,IAAI,EAAE,MAAM,UAAU,gBAAmC;AACrF,MAAI,OAAO,KAAM,MAAM,iBAAiB,IAAI,GAAI;AAC9C,WAAO,KAAK,yDAAyD;AACrE,UAAM,uBAAuB,MAAM,UAAU,YAAY;AACzD,WAAO,KAAK,8CAA8C,IAAI,EAAE;AAAA,EAClE,OAAO;AACL,WAAO,MAAM,wBAAwB,MAAM,UAAU,YAAY;AAAA,EACnE;AACF;"}
+{"version":3,"file":"mcp.js","sources":["../../../src/server/cli/mcp.ts"],"sourcesContent":["import { Client } from \"@modelcontextprotocol/sdk/client/index.js\";\nimport { StdioServerTransport } from \"@modelcontextprotocol/sdk/server/stdio.js\";\nimport { captureException } from \"@sentry/node\";\nimport { ServerType as ProxyServerType, startStdioServer } from \"mcp-proxy\";\nimport { logger } from \"../logger.ts\";\nimport { setShutdownHandlers, startServer } from \"../main.ts\";\nimport { createMCPInstance } from \"../mcp/mcp.ts\";\nimport type { CLIHandlerOptions } from \"../types/cli.ts\";\nimport type { NormalizedAllowedOrigins } from \"../utils/cors.ts\";\nimport { normalizeAllowedOrigins } from \"../utils/cors.ts\";\nimport { isSidecarRunning } from \"../utils/extras.ts\";\n\nasync function startServerWithStdioMCP(\n  port: CLIHandlerOptions[\"port\"],\n  basePath: CLIHandlerOptions[\"basePath\"],\n  filesToServe: CLIHandlerOptions[\"filesToServe\"],\n  normalizedAllowedOrigins: NormalizedAllowedOrigins | undefined,\n) {\n  const serverInstance = await startServer({\n    port,\n    basePath,\n    filesToServe,\n    normalizedAllowedOrigins,\n  });\n  setShutdownHandlers(serverInstance);\n\n  logger.info(\"Starting MCP over stdio too...\");\n  const mcpInstance = createMCPInstance();\n  await mcpInstance.connect(new StdioServerTransport());\n\n  const shutdownMcp = () => {\n    mcpInstance.close();\n  };\n\n  process.on(\"SIGINT\", shutdownMcp);\n  process.on(\"SIGTERM\", shutdownMcp);\n\n  return serverInstance;\n}\n\nasync function startMCPStdioHTTPProxy(\n  port: CLIHandlerOptions[\"port\"],\n  basePath: CLIHandlerOptions[\"basePath\"],\n  filesToServe: CLIHandlerOptions[\"filesToServe\"],\n  normalizedAllowedOrigins: NormalizedAllowedOrigins | undefined,\n) {\n  let intentionalShutdown = false;\n  let client: Client | null = null;\n  let server: Awaited<ReturnType<typeof startStdioServer>> | null = null;\n\n  const shutdown = async () => {\n    if (intentionalShutdown) {\n      // If we get the signal again, exit immediately\n      logger.info(\"Bye.\");\n      process.exit(0);\n    }\n\n    intentionalShutdown = true;\n    logger.info(\"Shutting down MCP stdio proxy...\");\n\n    if (client) {\n      await client.close();\n    }\n    if (server) {\n      await server.close();\n    }\n  };\n\n  // Set up signal handlers for graceful shutdown\n  process.on(\"SIGINT\", shutdown);\n  process.on(\"SIGTERM\", shutdown);\n\n  server = await startStdioServer({\n    // We need to hook into `initStreamClient` as the returned object from startStdioServer\n    // is not a meta proxy object giving access to both the server and the client. It just\n    // returns the StdioServerTransport instance without a way to access the client or its errors.\n    // TODO: We should probably upstream a fix for this to close the server or bubble the errors\n    initStreamClient: () => {\n      client = new Client({\n        name: \"Spotlight Sidecar (stdio proxy)\",\n        version: \"1.0.0\",\n      });\n      client.onerror = async (err: Error) => {\n        if (\n          err.message.startsWith(\"Maximum reconnection attempts\") ||\n          /disconnected|fetch failed|connection closed/i.test(err.message)\n        ) {\n          if (client) await client.close();\n          if (server) await server.close();\n        } else if (!/conflict/i.test(err.message)) {\n          captureException(err);\n          logger.error(`MCP stdio proxy error: ${err.name}: ${err.message}`);\n        }\n      };\n      return Promise.resolve(client);\n    },\n    serverType: ProxyServerType.HTTPStream,\n    url: `http://localhost:${port}/mcp`,\n  });\n  server.onclose = async () => {\n    // If this is an intentional shutdown, don't restart\n    if (intentionalShutdown) {\n      logger.info(\"MCP stdio proxy server closed.\");\n      return;\n    }\n\n    logger.info(\"MCP stdio proxy server closed unexpectedly. Attempting to restart...\");\n    process.off(\"SIGINT\", shutdown);\n    process.off(\"SIGTERM\", shutdown);\n    // We need to manually resume stdin as `StdioServerTransport` pauses it on\n    // close but does not `resume` it when a new instance is created. Probably\n    // a bug in https://github.com/modelcontextprotocol/typescript-sdk/blob/main/src/server/stdio.ts\n    process.stdin.resume();\n\n    try {\n      await startMCPStdioHTTPProxy(port, basePath, filesToServe, normalizedAllowedOrigins);\n      logger.info(\"Connection restored\");\n    } catch (_err) {\n      try {\n        return await startServerWithStdioMCP(port, basePath, filesToServe, normalizedAllowedOrigins);\n      } catch (_err2) {\n        logger.error(\"Failed to restart sidecar server after MCP stdio proxy closed.\");\n        captureException(_err2);\n        await startMCPStdioHTTPProxy(port, basePath, filesToServe, normalizedAllowedOrigins);\n      }\n    }\n  };\n}\n\nexport default async function mcp({ port, basePath, filesToServe, allowedOrigins }: CLIHandlerOptions) {\n  // Normalize allowed origins once at startup\n  const normalizedAllowedOrigins = allowedOrigins ? normalizeAllowedOrigins(allowedOrigins) : undefined;\n\n  if (port > 0 && (await isSidecarRunning(port))) {\n    logger.info(\"Connecting to existing MCP instance with stdio proxy...\");\n    await startMCPStdioHTTPProxy(port, basePath, filesToServe, normalizedAllowedOrigins);\n    logger.info(`Connected to existing MCP instance on port ${port}`);\n  } else {\n    return await startServerWithStdioMCP(port, basePath, filesToServe, normalizedAllowedOrigins);\n  }\n}\n"],"names":["ProxyServerType"],"mappings":";;;;;;;;;;;;;;;;;;AAYA,eAAe,wBACb,MACA,UACA,cACA,0BACA;AACA,QAAM,iBAAiB,MAAM,YAAY;AAAA,IACvC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EAAA,CACD;AACD,sBAAoB,cAAc;AAElC,SAAO,KAAK,gCAAgC;AAC5C,QAAM,cAAc,kBAAA;AACpB,QAAM,YAAY,QAAQ,IAAI,sBAAsB;AAEpD,QAAM,cAAc,MAAM;AACxB,gBAAY,MAAA;AAAA,EACd;AAEA,UAAQ,GAAG,UAAU,WAAW;AAChC,UAAQ,GAAG,WAAW,WAAW;AAEjC,SAAO;AACT;AAEA,eAAe,uBACb,MACA,UACA,cACA,0BACA;AACA,MAAI,sBAAsB;AAC1B,MAAI,SAAwB;AAC5B,MAAI,SAA8D;AAElE,QAAM,WAAW,YAAY;AAC3B,QAAI,qBAAqB;AAEvB,aAAO,KAAK,MAAM;AAClB,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,0BAAsB;AACtB,WAAO,KAAK,kCAAkC;AAE9C,QAAI,QAAQ;AACV,YAAM,OAAO,MAAA;AAAA,IACf;AACA,QAAI,QAAQ;AACV,YAAM,OAAO,MAAA;AAAA,IACf;AAAA,EACF;AAGA,UAAQ,GAAG,UAAU,QAAQ;AAC7B,UAAQ,GAAG,WAAW,QAAQ;AAE9B,WAAS,MAAM,iBAAiB;AAAA;AAAA;AAAA;AAAA;AAAA,IAK9B,kBAAkB,MAAM;AACtB,eAAS,IAAI,OAAO;AAAA,QAClB,MAAM;AAAA,QACN,SAAS;AAAA,MAAA,CACV;AACD,aAAO,UAAU,OAAO,QAAe;AACrC,YACE,IAAI,QAAQ,WAAW,+BAA+B,KACtD,+CAA+C,KAAK,IAAI,OAAO,GAC/D;AACA,cAAI,OAAQ,OAAM,OAAO,MAAA;AACzB,cAAI,OAAQ,OAAM,OAAO,MAAA;AAAA,QAC3B,WAAW,CAAC,YAAY,KAAK,IAAI,OAAO,GAAG;AACzC,2BAAiB,GAAG;AACpB,iBAAO,MAAM,0BAA0B,IAAI,IAAI,KAAK,IAAI,OAAO,EAAE;AAAA,QACnE;AAAA,MACF;AACA,aAAO,QAAQ,QAAQ,MAAM;AAAA,IAC/B;AAAA,IACA,YAAYA,WAAgB;AAAA,IAC5B,KAAK,oBAAoB,IAAI;AAAA,EAAA,CAC9B;AACD,SAAO,UAAU,YAAY;AAE3B,QAAI,qBAAqB;AACvB,aAAO,KAAK,gCAAgC;AAC5C;AAAA,IACF;AAEA,WAAO,KAAK,sEAAsE;AAClF,YAAQ,IAAI,UAAU,QAAQ;AAC9B,YAAQ,IAAI,WAAW,QAAQ;AAI/B,YAAQ,MAAM,OAAA;AAEd,QAAI;AACF,YAAM,uBAAuB,MAAM,UAAU,cAAc,wBAAwB;AACnF,aAAO,KAAK,qBAAqB;AAAA,IACnC,SAAS,MAAM;AACb,UAAI;AACF,eAAO,MAAM,wBAAwB,MAAM,UAAU,cAAc,wBAAwB;AAAA,MAC7F,SAAS,OAAO;AACd,eAAO,MAAM,gEAAgE;AAC7E,yBAAiB,KAAK;AACtB,cAAM,uBAAuB,MAAM,UAAU,cAAc,wBAAwB;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAA8B,IAAI,EAAE,MAAM,UAAU,cAAc,kBAAqC;AAErG,QAAM,2BAA2B,iBAAiB,wBAAwB,cAAc,IAAI;AAE5F,MAAI,OAAO,KAAM,MAAM,iBAAiB,IAAI,GAAI;AAC9C,WAAO,KAAK,yDAAyD;AACrE,UAAM,uBAAuB,MAAM,UAAU,cAAc,wBAAwB;AACnF,WAAO,KAAK,8CAA8C,IAAI,EAAE;AAAA,EAClE,OAAO;AACL,WAAO,MAAM,wBAAwB,MAAM,UAAU,cAAc,wBAAwB;AAAA,EAC7F;AACF;"}

package/dist/server/cli/run.d.ts

@@ -1,2 +1,2 @@
 import { CLIHandlerOptions } from '../types/cli.ts';
-export default function run({ port, cmdArgs, basePath, filesToServe, format }: CLIHandlerOptions): Promise<void>;
+export default function run({ port, cmdArgs, basePath, filesToServe, format, allowedOrigins, }: CLIHandlerOptions): Promise<void>;

package/dist/server/cli/run.js

@@ -1,17 +1,30 @@
+;
+!function() {
+  try {
+    var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {}, n = new e.Error().stack;
+    n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "47ea9082-13e7-493c-ae81-4aadefdf848c", e._sentryDebugIdIdentifier = "sentry-dbid-47ea9082-13e7-493c-ae81-4aadefdf848c");
+  } catch (e2) {
+  }
+}();
 import { spawn } from "node:child_process";
 import { readFileSync } from "node:fs";
 import * as path from "node:path";
 import * as readline from "node:readline";
+import { metrics } from "@sentry/node";
 import { Searcher } from "fast-fuzzy";
 import { uuidv7 } from "uuidv7";
 import { SENTRY_CONTENT_TYPE } from "../../shared/constants.js";
+import "../../_virtual/_sentry-release-injection-file.js";
 import { logger } from "../logger.js";
 import { detectDockerCompose, buildDockerComposeCommand } from "../utils/docker-compose.js";
 import { getSpotlightURL } from "../utils/extras.js";
 import { getBuffer } from "../utils/getBuffer.js";
 import { EventContainer } from "../utils/eventContainer.js";
+import "node:dns/promises";
+import "node:net";
+import "node:os";
 import tail from "./tail.js";
-const SPOTLIGHT_VERSION = "4.6.0";
+const SPOTLIGHT_VERSION = "4.7.1";
 const LOCALHOST_HOST = "localhost";
 const DOCKER_HOST = "host.docker.internal";
 function detectPackageJson() {
@@ -85,7 +98,14 @@ function createLogEnvelope(level, body, timestamp) {
   return Buffer.from(`${parts.join("\n")}
 `, "utf-8");
 }
-async function run({ port, cmdArgs, basePath, filesToServe, format }) {
+async function run({
+  port,
+  cmdArgs,
+  basePath,
+  filesToServe,
+  format,
+  allowedOrigins
+}) {
   let relayStdioAsLogs = true;
   const fuzzySearcher = new Searcher([], {
     threshold: 0.8,
@@ -115,7 +135,7 @@ async function run({ port, cmdArgs, basePath, filesToServe, format }) {
     }
     return true;
   };
-  const serverInstance = await tail({ port, cmdArgs: [], basePath, filesToServe, format }, logChecker);
+  const serverInstance = await tail({ port, cmdArgs: [], basePath, filesToServe, format, allowedOrigins }, logChecker);
   if (!serverInstance) {
     logger.error("Failed to start Spotlight sidecar server.");
     logger.error(`The port ${port} might already be in use — most likely by another Spotlight instance.`);
@@ -145,10 +165,12 @@ async function run({ port, cmdArgs, basePath, filesToServe, format }) {
         process.exit(1);
       }
       const choice = await promptUserChoice();
+      metrics.count("cli.run.prompt_choice", 1, { attributes: { choice } });
       if (choice === "docker") {
         logger.info(
           `Detected Docker Compose project with ${dockerCompose.serviceNames.length} service(s): ${dockerCompose.serviceNames.join(", ")}`
         );
+        metrics.count("cli.run.autodetect", 1, { attributes: { type: "docker-compose" } });
         env.SENTRY_SPOTLIGHT = getSpotlightURL(actualServerPort, DOCKER_HOST);
         const command = buildDockerComposeCommand(dockerCompose);
         cmdArgs = command.cmdArgs;
@@ -156,6 +178,7 @@ async function run({ port, cmdArgs, basePath, filesToServe, format }) {
         delete env.COMPOSE_FILE;
       } else {
         logger.info(`Using package.json script: ${packageJson.scriptName}`);
+        metrics.count("cli.run.autodetect", 1, { attributes: { type: "package-json" } });
         cmdArgs = [packageJson.scriptCommand];
         shell = true;
         env.PATH = path.resolve("./node_modules/.bin") + path.delimiter + env.PATH;
@@ -164,6 +187,7 @@ async function run({ port, cmdArgs, basePath, filesToServe, format }) {
       logger.info(
         `Detected Docker Compose project with ${dockerCompose.serviceNames.length} service(s): ${dockerCompose.serviceNames.join(", ")}`
       );
+      metrics.count("cli.run.autodetect", 1, { attributes: { type: "docker-compose" } });
       env.SENTRY_SPOTLIGHT = getSpotlightURL(actualServerPort, DOCKER_HOST);
       const command = buildDockerComposeCommand(dockerCompose);
       cmdArgs = command.cmdArgs;
@@ -171,6 +195,7 @@ async function run({ port, cmdArgs, basePath, filesToServe, format }) {
       delete env.COMPOSE_FILE;
     } else if (packageJson) {
       logger.info(`Using package.json script: ${packageJson.scriptName}`);
+      metrics.count("cli.run.autodetect", 1, { attributes: { type: "package-json" } });
       cmdArgs = [packageJson.scriptCommand];
       shell = true;
       env.PATH = path.resolve("./node_modules/.bin") + path.delimiter + env.PATH;

package/dist/server/cli/run.js.map

@@ -1 +1 @@
-{"version":3,"file":"run.js","sources":["../../../src/server/cli/run.ts"],"sourcesContent":["import { spawn } from \"node:child_process\";\nimport { readFileSync } from \"node:fs\";\nimport type { AddressInfo } from \"node:net\";\nimport * as path from \"node:path\";\nimport * as readline from \"node:readline\";\nimport type { SerializedLog } from \"@sentry/core\";\nimport { Searcher } from \"fast-fuzzy\";\nimport { uuidv7 } from \"uuidv7\";\nimport { SENTRY_CONTENT_TYPE } from \"../constants.ts\";\nimport { logger } from \"../logger.ts\";\nimport type { SentryLogEvent } from \"../parser/types.ts\";\nimport type { CLIHandlerOptions } from \"../types/cli.ts\";\nimport { buildDockerComposeCommand, detectDockerCompose } from \"../utils/docker-compose.ts\";\nimport { getSpotlightURL } from \"../utils/extras.ts\";\nimport { EventContainer, getBuffer } from \"../utils/index.ts\";\nimport tail, { type OnItemCallback } from \"./tail.ts\";\n\nconst SPOTLIGHT_VERSION = process.env.npm_package_version || \"unknown\";\n\n// Environment variable host configurations\nconst LOCALHOST_HOST = \"localhost\";\nconst DOCKER_HOST = \"host.docker.internal\";\n\n/**\n * Detect if there's a package.json with runnable scripts\n */\nfunction detectPackageJson(): { scriptName: string; scriptCommand: string } | null {\n  try {\n    const scripts = JSON.parse(readFileSync(\"./package.json\", \"utf-8\")).scripts;\n    const scriptName = [\"dev\", \"develop\", \"serve\", \"start\"].find(name => scripts[name]);\n    if (!scriptName || !scripts[scriptName]) {\n      return null;\n    }\n    return { scriptName, scriptCommand: scripts[scriptName] };\n  } catch {\n    // pass\n  }\n  return null;\n}\n\n/**\n * Prompt the user to choose between Docker Compose and package.json\n */\nasync function promptUserChoice(): Promise<\"docker\" | \"package\"> {\n  const rl = readline.createInterface({\n    input: process.stdin,\n    output: process.stdout,\n  });\n\n  return new Promise(resolve => {\n    console.log(\"\\n⚠️  Both Docker Compose and package.json detected!\");\n    console.log(\"\\nWhich would you like to use?\");\n    console.log(\"  1) docker compose\");\n    console.log(\"  2) package.json\");\n\n    rl.question(\"Enter your choice (1 or 2): \", answer => {\n      rl.close();\n      const choice = answer.trim();\n      const selected = choice === \"2\" ? \"package\" : \"docker\";\n      logger.info(`Selected: ${selected === \"docker\" ? \"Docker compose\" : \"package.json\"}`);\n      resolve(selected);\n    });\n  });\n}\n\nfunction createLogEnvelope(level: \"info\" | \"error\", body: string, timestamp: number): Buffer {\n  const envelopeHeader = {\n    sdk: {\n      name: \"sentry.spotlight.stdio\",\n      version: SPOTLIGHT_VERSION,\n    },\n  };\n\n  const logItem: SerializedLog = {\n    timestamp,\n    level,\n    body,\n    attributes: {},\n  };\n\n  const logPayload: SentryLogEvent = {\n    type: \"log\",\n    event_id: uuidv7(),\n    timestamp,\n    items: [\n      {\n        ...logItem,\n        id: uuidv7(),\n        severity_number: level === \"error\" ? 17 : 9, // ERROR=17, INFO=9 per OpenTelemetry spec\n        sdk: undefined,\n      },\n    ],\n  };\n\n  const payloadJson = JSON.stringify(logPayload);\n  const payloadBuffer = Buffer.from(payloadJson, \"utf-8\");\n\n  const itemHeader = {\n    type: \"log\",\n    length: payloadBuffer.length, // Use byte length, not string length\n    item_count: 1,\n    content_type: \"application/json\",\n  };\n\n  const parts = [JSON.stringify(envelopeHeader), JSON.stringify(itemHeader), payloadJson];\n\n  return Buffer.from(`${parts.join(\"\\n\")}\\n`, \"utf-8\");\n}\n\nexport default async function run({ port, cmdArgs, basePath, filesToServe, format }: CLIHandlerOptions) {\n  let relayStdioAsLogs = true;\n\n  const fuzzySearcher = new Searcher([] as string[], {\n    threshold: 0.8,\n    ignoreCase: false,\n  });\n\n  const logChecker: OnItemCallback = (type, item, envelopeHeader) => {\n    if (type !== \"log\") return true;\n\n    const [, payload] = item;\n    const logEvent = payload as SentryLogEvent;\n\n    if (logEvent.items && logEvent.items.length > 0) {\n      for (const logItem of logEvent.items) {\n        // Check if this is a stdio log from Spotlight itself\n        if (envelopeHeader.sdk?.name === \"sentry.spotlight.stdio\") {\n          continue;\n        }\n\n        if (!relayStdioAsLogs) continue;\n\n        const logBody = typeof logItem.body === \"string\" ? logItem.body : String(logItem.body);\n        const trimmedBody = logBody.trim();\n\n        if (trimmedBody) {\n          const matches = fuzzySearcher.search(trimmedBody);\n          if (matches.length > 0) {\n            logger.debug(\"Detected Sentry logging in the process, disabling stdio relay\");\n            relayStdioAsLogs = false;\n            return false;\n          }\n        }\n      }\n    }\n\n    return true;\n  };\n\n  const serverInstance = await tail({ port, cmdArgs: [], basePath, filesToServe, format }, logChecker);\n  if (!serverInstance) {\n    logger.error(\"Failed to start Spotlight sidecar server.\");\n    logger.error(`The port ${port} might already be in use — most likely by another Spotlight instance.`);\n    process.exit(1);\n  }\n\n  // We *MUST* have an instance address and a port here\n  // as not having that indicates either the server did not start\n  // or started in a weird manner (like over a unix socket)\n  const actualServerPort = (serverInstance.address() as AddressInfo).port;\n  const spotlightUrl = getSpotlightURL(actualServerPort, LOCALHOST_HOST);\n  let shell = false;\n  let stdin: string | undefined = undefined;\n  const env = {\n    ...process.env,\n    SENTRY_SPOTLIGHT: spotlightUrl,\n    // We need the one below for Next.js projects -- they only allow NEXT_PUBLIC_ prefixed env vars\n    // on frontend code\n    NEXT_PUBLIC_SENTRY_SPOTLIGHT: spotlightUrl,\n    // This is not supported in all SDKs but worth adding\n    // for the ones that support it\n    SENTRY_TRACES_SAMPLE_RATE: \"1\",\n  } as {\n    PATH: string;\n    SENTRY_SPOTLIGHT: string;\n    NEXT_PUBLIC_SENTRY_SPOTLIGHT: string;\n    SENTRY_TRACES_SAMPLE_RATE: string;\n    [key: string]: string;\n  };\n  if (cmdArgs.length === 0) {\n    const dockerCompose = detectDockerCompose();\n    const packageJson = detectPackageJson();\n\n    // If both Docker Compose and package.json are detected, ask the user which one to use\n    if (dockerCompose && packageJson) {\n      if (!process.stdin.isTTY) {\n        logger.error(\"Both Docker Compose and package.json detected, but cannot prompt in non-interactive mode.\");\n        logger.error(\"Please specify a command explicitly or run in an interactive terminal.\");\n        process.exit(1);\n      }\n      const choice = await promptUserChoice();\n\n      if (choice === \"docker\") {\n        logger.info(\n          `Detected Docker Compose project with ${dockerCompose.serviceNames.length} service(s): ${dockerCompose.serviceNames.join(\", \")}`,\n        );\n        // Use host.docker.internal for backend services to access the host machine\n        env.SENTRY_SPOTLIGHT = getSpotlightURL(actualServerPort, DOCKER_HOST);\n        const command = buildDockerComposeCommand(dockerCompose);\n        cmdArgs = command.cmdArgs;\n        stdin = command.stdin;\n        // Always unset COMPOSE_FILE to avoid conflicts with explicit -f flags\n        delete env.COMPOSE_FILE;\n      } else {\n        logger.info(`Using package.json script: ${packageJson.scriptName}`);\n        cmdArgs = [packageJson.scriptCommand];\n        shell = true;\n        env.PATH = path.resolve(\"./node_modules/.bin\") + path.delimiter + env.PATH;\n      }\n    } else if (dockerCompose) {\n      logger.info(\n        `Detected Docker Compose project with ${dockerCompose.serviceNames.length} service(s): ${dockerCompose.serviceNames.join(\", \")}`,\n      );\n      // Use host.docker.internal for backend services to access the host machine\n      env.SENTRY_SPOTLIGHT = getSpotlightURL(actualServerPort, DOCKER_HOST);\n\n      const command = buildDockerComposeCommand(dockerCompose);\n      cmdArgs = command.cmdArgs;\n      stdin = command.stdin;\n      // Always unset COMPOSE_FILE to avoid conflicts with explicit -f flags\n      delete env.COMPOSE_FILE;\n    } else if (packageJson) {\n      logger.info(`Using package.json script: ${packageJson.scriptName}`);\n      cmdArgs = [packageJson.scriptCommand];\n      shell = true;\n      env.PATH = path.resolve(\"./node_modules/.bin\") + path.delimiter + env.PATH;\n    }\n  }\n  if (cmdArgs.length === 0) {\n    logger.error(\"Error: No command specified to run and could not infer the command automatically.\");\n    process.exit(1);\n  }\n  const cmdStr = cmdArgs.join(\" \");\n  logger.info(`Starting command: ${cmdStr}`);\n  // When we have Docker Compose override YAML (for -f -), we need to pipe stdin\n  // Otherwise, inherit stdin to relay user input to the downstream process\n  const stdinMode: \"pipe\" | \"inherit\" = stdin ? \"pipe\" : \"inherit\";\n  const runCmd = spawn(cmdArgs[0], cmdArgs.slice(1), {\n    cwd: process.cwd(),\n    env,\n    shell,\n    windowsVerbatimArguments: true,\n    windowsHide: true,\n    stdio: [stdinMode, \"pipe\", \"pipe\"],\n  });\n\n  const { stdout, stderr } = runCmd;\n  if (!stdout || !stderr) {\n    logger.error(\"Failed to create process streams\");\n    process.exit(1);\n  }\n\n  // If our command has a stdin input _and_ we can send to stdin, write and close\n  if (stdin) {\n    if (!runCmd.stdin) {\n      logger.error(\"Failed to pipe Docker Compose override: stdin is not available\");\n      process.exit(1);\n    }\n    runCmd.stdin.write(stdin);\n    runCmd.stdin.end();\n  }\n\n  const processLogLine = (line: string, level: \"info\" | \"error\") => {\n    if (!relayStdioAsLogs) return;\n    const trimmedLine = line.trim();\n    if (!trimmedLine) return;\n\n    fuzzySearcher.add(trimmedLine);\n\n    const timestamp = Date.now() / 1000;\n    const envelopeBuffer = createLogEnvelope(level, trimmedLine, timestamp);\n\n    const container = new EventContainer(SENTRY_CONTENT_TYPE, envelopeBuffer);\n    // Add to buffer - this will automatically trigger all subscribers\n    // including the onEnvelope callback registered in tail()\n    getBuffer().put(container);\n  };\n\n  let stdoutBuffer = \"\";\n  let stderrBuffer = \"\";\n\n  // Stream stdout as info-level logs\n  stdout.on(\"data\", (data: Buffer) => {\n    stdoutBuffer += data.toString();\n    const lines = stdoutBuffer.split(\"\\n\");\n    // Keep the last partial line in the buffer\n    stdoutBuffer = lines.pop() || \"\";\n\n    for (const line of lines) {\n      processLogLine(line, \"info\");\n    }\n  });\n\n  // Stream stderr as error-level logs\n  stderr.on(\"data\", (data: Buffer) => {\n    stderrBuffer += data.toString();\n    const lines = stderrBuffer.split(\"\\n\");\n    // Keep the last partial line in the buffer\n    stderrBuffer = lines.pop() || \"\";\n\n    for (const line of lines) {\n      processLogLine(line, \"error\");\n    }\n  });\n\n  runCmd.on(\"error\", err => {\n    logger.error(`Failed to run ${cmdStr}:`);\n    logger.error(err);\n    process.exit(1);\n  });\n\n  runCmd.on(\"close\", code => {\n    // Handle any remaining buffered lines\n    if (stdoutBuffer.trim()) {\n      processLogLine(stdoutBuffer, \"info\");\n    }\n    if (stderrBuffer.trim()) {\n      processLogLine(stderrBuffer, \"error\");\n    }\n\n    if (!code) {\n      logger.error(`${cmdStr} exited, terminating.`);\n    } else {\n      logger.error(`${cmdStr} exited with code ${code}.`);\n    }\n    process.exit(code);\n  });\n  const killRunCmd = () => {\n    if (runCmd.killed) return;\n    stdout.destroy();\n    stderr.destroy();\n    runCmd.kill();\n  };\n  runCmd.on(\"spawn\", () => {\n    runCmd.removeAllListeners(\"spawn\");\n    runCmd.removeAllListeners(\"error\");\n    process.on(\"SIGINT\", killRunCmd);\n    process.on(\"SIGTERM\", killRunCmd);\n    process.on(\"beforeExit\", killRunCmd);\n  });\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;AAiBA,MAAM,oBAAoB;AAG1B,MAAM,iBAAiB;AACvB,MAAM,cAAc;AAKpB,SAAS,oBAA0E;AACjF,MAAI;AACF,UAAM,UAAU,KAAK,MAAM,aAAa,kBAAkB,OAAO,CAAC,EAAE;AACpE,UAAM,aAAa,CAAC,OAAO,WAAW,SAAS,OAAO,EAAE,KAAK,CAAA,SAAQ,QAAQ,IAAI,CAAC;AAClF,QAAI,CAAC,cAAc,CAAC,QAAQ,UAAU,GAAG;AACvC,aAAO;AAAA,IACT;AACA,WAAO,EAAE,YAAY,eAAe,QAAQ,UAAU,EAAA;AAAA,EACxD,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAKA,eAAe,mBAAkD;AAC/D,QAAM,KAAK,SAAS,gBAAgB;AAAA,IAClC,OAAO,QAAQ;AAAA,IACf,QAAQ,QAAQ;AAAA,EAAA,CACjB;AAED,SAAO,IAAI,QAAQ,CAAA,YAAW;AAC5B,YAAQ,IAAI,sDAAsD;AAClE,YAAQ,IAAI,gCAAgC;AAC5C,YAAQ,IAAI,qBAAqB;AACjC,YAAQ,IAAI,mBAAmB;AAE/B,OAAG,SAAS,gCAAgC,CAAA,WAAU;AACpD,SAAG,MAAA;AACH,YAAM,SAAS,OAAO,KAAA;AACtB,YAAM,WAAW,WAAW,MAAM,YAAY;AAC9C,aAAO,KAAK,aAAa,aAAa,WAAW,mBAAmB,cAAc,EAAE;AACpF,cAAQ,QAAQ;AAAA,IAClB,CAAC;AAAA,EACH,CAAC;AACH;AAEA,SAAS,kBAAkB,OAAyB,MAAc,WAA2B;AAC3F,QAAM,iBAAiB;AAAA,IACrB,KAAK;AAAA,MACH,MAAM;AAAA,MACN,SAAS;AAAA,IAAA;AAAA,EACX;AAGF,QAAM,UAAyB;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,CAAA;AAAA,EAAC;AAGf,QAAM,aAA6B;AAAA,IACjC,MAAM;AAAA,IACN,UAAU,OAAA;AAAA,IACV;AAAA,IACA,OAAO;AAAA,MACL;AAAA,QACE,GAAG;AAAA,QACH,IAAI,OAAA;AAAA,QACJ,iBAAiB,UAAU,UAAU,KAAK;AAAA;AAAA,QAC1C,KAAK;AAAA,MAAA;AAAA,IACP;AAAA,EACF;AAGF,QAAM,cAAc,KAAK,UAAU,UAAU;AAC7C,QAAM,gBAAgB,OAAO,KAAK,aAAa,OAAO;AAEtD,QAAM,aAAa;AAAA,IACjB,MAAM;AAAA,IACN,QAAQ,cAAc;AAAA;AAAA,IACtB,YAAY;AAAA,IACZ,cAAc;AAAA,EAAA;AAGhB,QAAM,QAAQ,CAAC,KAAK,UAAU,cAAc,GAAG,KAAK,UAAU,UAAU,GAAG,WAAW;AAEtF,SAAO,OAAO,KAAK,GAAG,MAAM,KAAK,IAAI,CAAC;AAAA,GAAM,OAAO;AACrD;AAEA,eAA8B,IAAI,EAAE,MAAM,SAAS,UAAU,cAAc,UAA6B;AACtG,MAAI,mBAAmB;AAEvB,QAAM,gBAAgB,IAAI,SAAS,IAAgB;AAAA,IACjD,WAAW;AAAA,IACX,YAAY;AAAA,EAAA,CACb;AAED,QAAM,aAA6B,CAAC,MAAM,MAAM,mBAAmB;AACjE,QAAI,SAAS,MAAO,QAAO;AAE3B,UAAM,CAAA,EAAG,OAAO,IAAI;AACpB,UAAM,WAAW;AAEjB,QAAI,SAAS,SAAS,SAAS,MAAM,SAAS,GAAG;AAC/C,iBAAW,WAAW,SAAS,OAAO;AAEpC,YAAI,eAAe,KAAK,SAAS,0BAA0B;AACzD;AAAA,QACF;AAEA,YAAI,CAAC,iBAAkB;AAEvB,cAAM,UAAU,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO,OAAO,QAAQ,IAAI;AACrF,cAAM,cAAc,QAAQ,KAAA;AAE5B,YAAI,aAAa;AACf,gBAAM,UAAU,cAAc,OAAO,WAAW;AAChD,cAAI,QAAQ,SAAS,GAAG;AACtB,mBAAO,MAAM,+DAA+D;AAC5E,+BAAmB;AACnB,mBAAO;AAAA,UACT;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAEA,QAAM,iBAAiB,MAAM,KAAK,EAAE,MAAM,SAAS,CAAA,GAAI,UAAU,cAAc,OAAA,GAAU,UAAU;AACnG,MAAI,CAAC,gBAAgB;AACnB,WAAO,MAAM,2CAA2C;AACxD,WAAO,MAAM,YAAY,IAAI,uEAAuE;AACpG,YAAQ,KAAK,CAAC;AAAA,EAChB;AAKA,QAAM,mBAAoB,eAAe,QAAA,EAA0B;AACnE,QAAM,eAAe,gBAAgB,kBAAkB,cAAc;AACrE,MAAI,QAAQ;AACZ,MAAI,QAA4B;AAChC,QAAM,MAAM;AAAA,IACV,GAAG,QAAQ;AAAA,IACX,kBAAkB;AAAA;AAAA;AAAA,IAGlB,8BAA8B;AAAA;AAAA;AAAA,IAG9B,2BAA2B;AAAA,EAAA;AAQ7B,MAAI,QAAQ,WAAW,GAAG;AACxB,UAAM,gBAAgB,oBAAA;AACtB,UAAM,cAAc,kBAAA;AAGpB,QAAI,iBAAiB,aAAa;AAChC,UAAI,CAAC,QAAQ,MAAM,OAAO;AACxB,eAAO,MAAM,2FAA2F;AACxG,eAAO,MAAM,wEAAwE;AACrF,gBAAQ,KAAK,CAAC;AAAA,MAChB;AACA,YAAM,SAAS,MAAM,iBAAA;AAErB,UAAI,WAAW,UAAU;AACvB,eAAO;AAAA,UACL,wCAAwC,cAAc,aAAa,MAAM,gBAAgB,cAAc,aAAa,KAAK,IAAI,CAAC;AAAA,QAAA;AAGhI,YAAI,mBAAmB,gBAAgB,kBAAkB,WAAW;AACpE,cAAM,UAAU,0BAA0B,aAAa;AACvD,kBAAU,QAAQ;AAClB,gBAAQ,QAAQ;AAEhB,eAAO,IAAI;AAAA,MACb,OAAO;AACL,eAAO,KAAK,8BAA8B,YAAY,UAAU,EAAE;AAClE,kBAAU,CAAC,YAAY,aAAa;AACpC,gBAAQ;AACR,YAAI,OAAO,KAAK,QAAQ,qBAAqB,IAAI,KAAK,YAAY,IAAI;AAAA,MACxE;AAAA,IACF,WAAW,eAAe;AACxB,aAAO;AAAA,QACL,wCAAwC,cAAc,aAAa,MAAM,gBAAgB,cAAc,aAAa,KAAK,IAAI,CAAC;AAAA,MAAA;AAGhI,UAAI,mBAAmB,gBAAgB,kBAAkB,WAAW;AAEpE,YAAM,UAAU,0BAA0B,aAAa;AACvD,gBAAU,QAAQ;AAClB,cAAQ,QAAQ;AAEhB,aAAO,IAAI;AAAA,IACb,WAAW,aAAa;AACtB,aAAO,KAAK,8BAA8B,YAAY,UAAU,EAAE;AAClE,gBAAU,CAAC,YAAY,aAAa;AACpC,cAAQ;AACR,UAAI,OAAO,KAAK,QAAQ,qBAAqB,IAAI,KAAK,YAAY,IAAI;AAAA,IACxE;AAAA,EACF;AACA,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO,MAAM,mFAAmF;AAChG,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,SAAS,QAAQ,KAAK,GAAG;AAC/B,SAAO,KAAK,qBAAqB,MAAM,EAAE;AAGzC,QAAM,YAAgC,QAAQ,SAAS;AACvD,QAAM,SAAS,MAAM,QAAQ,CAAC,GAAG,QAAQ,MAAM,CAAC,GAAG;AAAA,IACjD,KAAK,QAAQ,IAAA;AAAA,IACb;AAAA,IACA;AAAA,IACA,0BAA0B;AAAA,IAC1B,aAAa;AAAA,IACb,OAAO,CAAC,WAAW,QAAQ,MAAM;AAAA,EAAA,CAClC;AAED,QAAM,EAAE,QAAQ,OAAA,IAAW;AAC3B,MAAI,CAAC,UAAU,CAAC,QAAQ;AACtB,WAAO,MAAM,kCAAkC;AAC/C,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,MAAI,OAAO;AACT,QAAI,CAAC,OAAO,OAAO;AACjB,aAAO,MAAM,gEAAgE;AAC7E,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,WAAO,MAAM,MAAM,KAAK;AACxB,WAAO,MAAM,IAAA;AAAA,EACf;AAEA,QAAM,iBAAiB,CAAC,MAAc,UAA4B;AAChE,QAAI,CAAC,iBAAkB;AACvB,UAAM,cAAc,KAAK,KAAA;AACzB,QAAI,CAAC,YAAa;AAElB,kBAAc,IAAI,WAAW;AAE7B,UAAM,YAAY,KAAK,IAAA,IAAQ;AAC/B,UAAM,iBAAiB,kBAAkB,OAAO,aAAa,SAAS;AAEtE,UAAM,YAAY,IAAI,eAAe,qBAAqB,cAAc;AAGxE,cAAA,EAAY,IAAI,SAAS;AAAA,EAC3B;AAEA,MAAI,eAAe;AACnB,MAAI,eAAe;AAGnB,SAAO,GAAG,QAAQ,CAAC,SAAiB;AAClC,oBAAgB,KAAK,SAAA;AACrB,UAAM,QAAQ,aAAa,MAAM,IAAI;AAErC,mBAAe,MAAM,SAAS;AAE9B,eAAW,QAAQ,OAAO;AACxB,qBAAe,MAAM,MAAM;AAAA,IAC7B;AAAA,EACF,CAAC;AAGD,SAAO,GAAG,QAAQ,CAAC,SAAiB;AAClC,oBAAgB,KAAK,SAAA;AACrB,UAAM,QAAQ,aAAa,MAAM,IAAI;AAErC,mBAAe,MAAM,SAAS;AAE9B,eAAW,QAAQ,OAAO;AACxB,qBAAe,MAAM,OAAO;AAAA,IAC9B;AAAA,EACF,CAAC;AAED,SAAO,GAAG,SAAS,CAAA,QAAO;AACxB,WAAO,MAAM,iBAAiB,MAAM,GAAG;AACvC,WAAO,MAAM,GAAG;AAChB,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AAED,SAAO,GAAG,SAAS,CAAA,SAAQ;AAEzB,QAAI,aAAa,QAAQ;AACvB,qBAAe,cAAc,MAAM;AAAA,IACrC;AACA,QAAI,aAAa,QAAQ;AACvB,qBAAe,cAAc,OAAO;AAAA,IACtC;AAEA,QAAI,CAAC,MAAM;AACT,aAAO,MAAM,GAAG,MAAM,uBAAuB;AAAA,IAC/C,OAAO;AACL,aAAO,MAAM,GAAG,MAAM,qBAAqB,IAAI,GAAG;AAAA,IACpD;AACA,YAAQ,KAAK,IAAI;AAAA,EACnB,CAAC;AACD,QAAM,aAAa,MAAM;AACvB,QAAI,OAAO,OAAQ;AACnB,WAAO,QAAA;AACP,WAAO,QAAA;AACP,WAAO,KAAA;AAAA,EACT;AACA,SAAO,GAAG,SAAS,MAAM;AACvB,WAAO,mBAAmB,OAAO;AACjC,WAAO,mBAAmB,OAAO;AACjC,YAAQ,GAAG,UAAU,UAAU;AAC/B,YAAQ,GAAG,WAAW,UAAU;AAChC,YAAQ,GAAG,cAAc,UAAU;AAAA,EACrC,CAAC;AACH;"}
+{"version":3,"file":"run.js","sources":["../../../src/server/cli/run.ts"],"sourcesContent":["import { spawn } from \"node:child_process\";\nimport { readFileSync } from \"node:fs\";\nimport type { AddressInfo } from \"node:net\";\nimport * as path from \"node:path\";\nimport * as readline from \"node:readline\";\nimport type { SerializedLog } from \"@sentry/core\";\nimport { metrics } from \"@sentry/node\";\nimport { Searcher } from \"fast-fuzzy\";\nimport { uuidv7 } from \"uuidv7\";\nimport { SENTRY_CONTENT_TYPE } from \"../constants.ts\";\nimport { logger } from \"../logger.ts\";\nimport type { SentryLogEvent } from \"../parser/types.ts\";\nimport type { CLIHandlerOptions } from \"../types/cli.ts\";\nimport { buildDockerComposeCommand, detectDockerCompose } from \"../utils/docker-compose.ts\";\nimport { getSpotlightURL } from \"../utils/extras.ts\";\nimport { EventContainer, getBuffer } from \"../utils/index.ts\";\nimport tail, { type OnItemCallback } from \"./tail.ts\";\n\nconst SPOTLIGHT_VERSION = process.env.npm_package_version || \"unknown\";\n\n// Environment variable host configurations\nconst LOCALHOST_HOST = \"localhost\";\nconst DOCKER_HOST = \"host.docker.internal\";\n\n/**\n * Detect if there's a package.json with runnable scripts\n */\nfunction detectPackageJson(): { scriptName: string; scriptCommand: string } | null {\n  try {\n    const scripts = JSON.parse(readFileSync(\"./package.json\", \"utf-8\")).scripts;\n    const scriptName = [\"dev\", \"develop\", \"serve\", \"start\"].find(name => scripts[name]);\n    if (!scriptName || !scripts[scriptName]) {\n      return null;\n    }\n    return { scriptName, scriptCommand: scripts[scriptName] };\n  } catch {\n    // pass\n  }\n  return null;\n}\n\n/**\n * Prompt the user to choose between Docker Compose and package.json\n */\nasync function promptUserChoice(): Promise<\"docker\" | \"package\"> {\n  const rl = readline.createInterface({\n    input: process.stdin,\n    output: process.stdout,\n  });\n\n  return new Promise(resolve => {\n    console.log(\"\\n⚠️  Both Docker Compose and package.json detected!\");\n    console.log(\"\\nWhich would you like to use?\");\n    console.log(\"  1) docker compose\");\n    console.log(\"  2) package.json\");\n\n    rl.question(\"Enter your choice (1 or 2): \", answer => {\n      rl.close();\n      const choice = answer.trim();\n      const selected = choice === \"2\" ? \"package\" : \"docker\";\n      logger.info(`Selected: ${selected === \"docker\" ? \"Docker compose\" : \"package.json\"}`);\n      resolve(selected);\n    });\n  });\n}\n\nfunction createLogEnvelope(level: \"info\" | \"error\", body: string, timestamp: number): Buffer {\n  const envelopeHeader = {\n    sdk: {\n      name: \"sentry.spotlight.stdio\",\n      version: SPOTLIGHT_VERSION,\n    },\n  };\n\n  const logItem: SerializedLog = {\n    timestamp,\n    level,\n    body,\n    attributes: {},\n  };\n\n  const logPayload: SentryLogEvent = {\n    type: \"log\",\n    event_id: uuidv7(),\n    timestamp,\n    items: [\n      {\n        ...logItem,\n        id: uuidv7(),\n        severity_number: level === \"error\" ? 17 : 9, // ERROR=17, INFO=9 per OpenTelemetry spec\n        sdk: undefined,\n      },\n    ],\n  };\n\n  const payloadJson = JSON.stringify(logPayload);\n  const payloadBuffer = Buffer.from(payloadJson, \"utf-8\");\n\n  const itemHeader = {\n    type: \"log\",\n    length: payloadBuffer.length, // Use byte length, not string length\n    item_count: 1,\n    content_type: \"application/json\",\n  };\n\n  const parts = [JSON.stringify(envelopeHeader), JSON.stringify(itemHeader), payloadJson];\n\n  return Buffer.from(`${parts.join(\"\\n\")}\\n`, \"utf-8\");\n}\n\nexport default async function run({\n  port,\n  cmdArgs,\n  basePath,\n  filesToServe,\n  format,\n  allowedOrigins,\n}: CLIHandlerOptions) {\n  let relayStdioAsLogs = true;\n\n  const fuzzySearcher = new Searcher([] as string[], {\n    threshold: 0.8,\n    ignoreCase: false,\n  });\n\n  const logChecker: OnItemCallback = (type, item, envelopeHeader) => {\n    if (type !== \"log\") return true;\n\n    const [, payload] = item;\n    const logEvent = payload as SentryLogEvent;\n\n    if (logEvent.items && logEvent.items.length > 0) {\n      for (const logItem of logEvent.items) {\n        // Check if this is a stdio log from Spotlight itself\n        if (envelopeHeader.sdk?.name === \"sentry.spotlight.stdio\") {\n          continue;\n        }\n\n        if (!relayStdioAsLogs) continue;\n\n        const logBody = typeof logItem.body === \"string\" ? logItem.body : String(logItem.body);\n        const trimmedBody = logBody.trim();\n\n        if (trimmedBody) {\n          const matches = fuzzySearcher.search(trimmedBody);\n          if (matches.length > 0) {\n            logger.debug(\"Detected Sentry logging in the process, disabling stdio relay\");\n            relayStdioAsLogs = false;\n            return false;\n          }\n        }\n      }\n    }\n\n    return true;\n  };\n\n  const serverInstance = await tail({ port, cmdArgs: [], basePath, filesToServe, format, allowedOrigins }, logChecker);\n  if (!serverInstance) {\n    logger.error(\"Failed to start Spotlight sidecar server.\");\n    logger.error(`The port ${port} might already be in use — most likely by another Spotlight instance.`);\n    process.exit(1);\n  }\n\n  // We *MUST* have an instance address and a port here\n  // as not having that indicates either the server did not start\n  // or started in a weird manner (like over a unix socket)\n  const actualServerPort = (serverInstance.address() as AddressInfo).port;\n  const spotlightUrl = getSpotlightURL(actualServerPort, LOCALHOST_HOST);\n  let shell = false;\n  let stdin: string | undefined = undefined;\n  const env = {\n    ...process.env,\n    SENTRY_SPOTLIGHT: spotlightUrl,\n    // We need the one below for Next.js projects -- they only allow NEXT_PUBLIC_ prefixed env vars\n    // on frontend code\n    NEXT_PUBLIC_SENTRY_SPOTLIGHT: spotlightUrl,\n    // This is not supported in all SDKs but worth adding\n    // for the ones that support it\n    SENTRY_TRACES_SAMPLE_RATE: \"1\",\n  } as {\n    PATH: string;\n    SENTRY_SPOTLIGHT: string;\n    NEXT_PUBLIC_SENTRY_SPOTLIGHT: string;\n    SENTRY_TRACES_SAMPLE_RATE: string;\n    [key: string]: string;\n  };\n  if (cmdArgs.length === 0) {\n    const dockerCompose = detectDockerCompose();\n    const packageJson = detectPackageJson();\n\n    // If both Docker Compose and package.json are detected, ask the user which one to use\n    if (dockerCompose && packageJson) {\n      if (!process.stdin.isTTY) {\n        logger.error(\"Both Docker Compose and package.json detected, but cannot prompt in non-interactive mode.\");\n        logger.error(\"Please specify a command explicitly or run in an interactive terminal.\");\n        process.exit(1);\n      }\n      const choice = await promptUserChoice();\n      metrics.count(\"cli.run.prompt_choice\", 1, { attributes: { choice } });\n\n      if (choice === \"docker\") {\n        logger.info(\n          `Detected Docker Compose project with ${dockerCompose.serviceNames.length} service(s): ${dockerCompose.serviceNames.join(\", \")}`,\n        );\n        metrics.count(\"cli.run.autodetect\", 1, { attributes: { type: \"docker-compose\" } });\n        // Use host.docker.internal for backend services to access the host machine\n        env.SENTRY_SPOTLIGHT = getSpotlightURL(actualServerPort, DOCKER_HOST);\n        const command = buildDockerComposeCommand(dockerCompose);\n        cmdArgs = command.cmdArgs;\n        stdin = command.stdin;\n        // Always unset COMPOSE_FILE to avoid conflicts with explicit -f flags\n        // biome-ignore lint/performance/noDelete: need to remove env var entirely\n        delete env.COMPOSE_FILE;\n      } else {\n        logger.info(`Using package.json script: ${packageJson.scriptName}`);\n        metrics.count(\"cli.run.autodetect\", 1, { attributes: { type: \"package-json\" } });\n        cmdArgs = [packageJson.scriptCommand];\n        shell = true;\n        env.PATH = path.resolve(\"./node_modules/.bin\") + path.delimiter + env.PATH;\n      }\n    } else if (dockerCompose) {\n      logger.info(\n        `Detected Docker Compose project with ${dockerCompose.serviceNames.length} service(s): ${dockerCompose.serviceNames.join(\", \")}`,\n      );\n      metrics.count(\"cli.run.autodetect\", 1, { attributes: { type: \"docker-compose\" } });\n      // Use host.docker.internal for backend services to access the host machine\n      env.SENTRY_SPOTLIGHT = getSpotlightURL(actualServerPort, DOCKER_HOST);\n\n      const command = buildDockerComposeCommand(dockerCompose);\n      cmdArgs = command.cmdArgs;\n      stdin = command.stdin;\n      // Always unset COMPOSE_FILE to avoid conflicts with explicit -f flags\n      // biome-ignore lint/performance/noDelete: need to remove env var entirely\n      delete env.COMPOSE_FILE;\n    } else if (packageJson) {\n      logger.info(`Using package.json script: ${packageJson.scriptName}`);\n      metrics.count(\"cli.run.autodetect\", 1, { attributes: { type: \"package-json\" } });\n      cmdArgs = [packageJson.scriptCommand];\n      shell = true;\n      env.PATH = path.resolve(\"./node_modules/.bin\") + path.delimiter + env.PATH;\n    }\n  }\n  if (cmdArgs.length === 0) {\n    logger.error(\"Error: No command specified to run and could not infer the command automatically.\");\n    process.exit(1);\n  }\n  const cmdStr = cmdArgs.join(\" \");\n  logger.info(`Starting command: ${cmdStr}`);\n  // When we have Docker Compose override YAML (for -f -), we need to pipe stdin\n  // Otherwise, inherit stdin to relay user input to the downstream process\n  const stdinMode: \"pipe\" | \"inherit\" = stdin ? \"pipe\" : \"inherit\";\n  const runCmd = spawn(cmdArgs[0], cmdArgs.slice(1), {\n    cwd: process.cwd(),\n    env,\n    shell,\n    windowsVerbatimArguments: true,\n    windowsHide: true,\n    stdio: [stdinMode, \"pipe\", \"pipe\"],\n  });\n\n  const { stdout, stderr } = runCmd;\n  if (!stdout || !stderr) {\n    logger.error(\"Failed to create process streams\");\n    process.exit(1);\n  }\n\n  // If our command has a stdin input _and_ we can send to stdin, write and close\n  if (stdin) {\n    if (!runCmd.stdin) {\n      logger.error(\"Failed to pipe Docker Compose override: stdin is not available\");\n      process.exit(1);\n    }\n    runCmd.stdin.write(stdin);\n    runCmd.stdin.end();\n  }\n\n  const processLogLine = (line: string, level: \"info\" | \"error\") => {\n    if (!relayStdioAsLogs) return;\n    const trimmedLine = line.trim();\n    if (!trimmedLine) return;\n\n    fuzzySearcher.add(trimmedLine);\n\n    const timestamp = Date.now() / 1000;\n    const envelopeBuffer = createLogEnvelope(level, trimmedLine, timestamp);\n\n    const container = new EventContainer(SENTRY_CONTENT_TYPE, envelopeBuffer);\n    // Add to buffer - this will automatically trigger all subscribers\n    // including the onEnvelope callback registered in tail()\n    getBuffer().put(container);\n  };\n\n  let stdoutBuffer = \"\";\n  let stderrBuffer = \"\";\n\n  // Stream stdout as info-level logs\n  stdout.on(\"data\", (data: Buffer) => {\n    stdoutBuffer += data.toString();\n    const lines = stdoutBuffer.split(\"\\n\");\n    // Keep the last partial line in the buffer\n    stdoutBuffer = lines.pop() || \"\";\n\n    for (const line of lines) {\n      processLogLine(line, \"info\");\n    }\n  });\n\n  // Stream stderr as error-level logs\n  stderr.on(\"data\", (data: Buffer) => {\n    stderrBuffer += data.toString();\n    const lines = stderrBuffer.split(\"\\n\");\n    // Keep the last partial line in the buffer\n    stderrBuffer = lines.pop() || \"\";\n\n    for (const line of lines) {\n      processLogLine(line, \"error\");\n    }\n  });\n\n  runCmd.on(\"error\", err => {\n    logger.error(`Failed to run ${cmdStr}:`);\n    logger.error(err);\n    process.exit(1);\n  });\n\n  runCmd.on(\"close\", code => {\n    // Handle any remaining buffered lines\n    if (stdoutBuffer.trim()) {\n      processLogLine(stdoutBuffer, \"info\");\n    }\n    if (stderrBuffer.trim()) {\n      processLogLine(stderrBuffer, \"error\");\n    }\n\n    if (!code) {\n      logger.error(`${cmdStr} exited, terminating.`);\n    } else {\n      logger.error(`${cmdStr} exited with code ${code}.`);\n    }\n    process.exit(code);\n  });\n  const killRunCmd = () => {\n    if (runCmd.killed) return;\n    stdout.destroy();\n    stderr.destroy();\n    runCmd.kill();\n  };\n  runCmd.on(\"spawn\", () => {\n    runCmd.removeAllListeners(\"spawn\");\n    runCmd.removeAllListeners(\"error\");\n    process.on(\"SIGINT\", killRunCmd);\n    process.on(\"SIGTERM\", killRunCmd);\n    process.on(\"beforeExit\", killRunCmd);\n  });\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAkBA,MAAM,oBAAoB;AAG1B,MAAM,iBAAiB;AACvB,MAAM,cAAc;AAKpB,SAAS,oBAA0E;AACjF,MAAI;AACF,UAAM,UAAU,KAAK,MAAM,aAAa,kBAAkB,OAAO,CAAC,EAAE;AACpE,UAAM,aAAa,CAAC,OAAO,WAAW,SAAS,OAAO,EAAE,KAAK,CAAA,SAAQ,QAAQ,IAAI,CAAC;AAClF,QAAI,CAAC,cAAc,CAAC,QAAQ,UAAU,GAAG;AACvC,aAAO;AAAA,IACT;AACA,WAAO,EAAE,YAAY,eAAe,QAAQ,UAAU,EAAA;AAAA,EACxD,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAKA,eAAe,mBAAkD;AAC/D,QAAM,KAAK,SAAS,gBAAgB;AAAA,IAClC,OAAO,QAAQ;AAAA,IACf,QAAQ,QAAQ;AAAA,EAAA,CACjB;AAED,SAAO,IAAI,QAAQ,CAAA,YAAW;AAC5B,YAAQ,IAAI,sDAAsD;AAClE,YAAQ,IAAI,gCAAgC;AAC5C,YAAQ,IAAI,qBAAqB;AACjC,YAAQ,IAAI,mBAAmB;AAE/B,OAAG,SAAS,gCAAgC,CAAA,WAAU;AACpD,SAAG,MAAA;AACH,YAAM,SAAS,OAAO,KAAA;AACtB,YAAM,WAAW,WAAW,MAAM,YAAY;AAC9C,aAAO,KAAK,aAAa,aAAa,WAAW,mBAAmB,cAAc,EAAE;AACpF,cAAQ,QAAQ;AAAA,IAClB,CAAC;AAAA,EACH,CAAC;AACH;AAEA,SAAS,kBAAkB,OAAyB,MAAc,WAA2B;AAC3F,QAAM,iBAAiB;AAAA,IACrB,KAAK;AAAA,MACH,MAAM;AAAA,MACN,SAAS;AAAA,IAAA;AAAA,EACX;AAGF,QAAM,UAAyB;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,CAAA;AAAA,EAAC;AAGf,QAAM,aAA6B;AAAA,IACjC,MAAM;AAAA,IACN,UAAU,OAAA;AAAA,IACV;AAAA,IACA,OAAO;AAAA,MACL;AAAA,QACE,GAAG;AAAA,QACH,IAAI,OAAA;AAAA,QACJ,iBAAiB,UAAU,UAAU,KAAK;AAAA;AAAA,QAC1C,KAAK;AAAA,MAAA;AAAA,IACP;AAAA,EACF;AAGF,QAAM,cAAc,KAAK,UAAU,UAAU;AAC7C,QAAM,gBAAgB,OAAO,KAAK,aAAa,OAAO;AAEtD,QAAM,aAAa;AAAA,IACjB,MAAM;AAAA,IACN,QAAQ,cAAc;AAAA;AAAA,IACtB,YAAY;AAAA,IACZ,cAAc;AAAA,EAAA;AAGhB,QAAM,QAAQ,CAAC,KAAK,UAAU,cAAc,GAAG,KAAK,UAAU,UAAU,GAAG,WAAW;AAEtF,SAAO,OAAO,KAAK,GAAG,MAAM,KAAK,IAAI,CAAC;AAAA,GAAM,OAAO;AACrD;AAEA,eAA8B,IAAI;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAsB;AACpB,MAAI,mBAAmB;AAEvB,QAAM,gBAAgB,IAAI,SAAS,IAAgB;AAAA,IACjD,WAAW;AAAA,IACX,YAAY;AAAA,EAAA,CACb;AAED,QAAM,aAA6B,CAAC,MAAM,MAAM,mBAAmB;AACjE,QAAI,SAAS,MAAO,QAAO;AAE3B,UAAM,CAAA,EAAG,OAAO,IAAI;AACpB,UAAM,WAAW;AAEjB,QAAI,SAAS,SAAS,SAAS,MAAM,SAAS,GAAG;AAC/C,iBAAW,WAAW,SAAS,OAAO;AAEpC,YAAI,eAAe,KAAK,SAAS,0BAA0B;AACzD;AAAA,QACF;AAEA,YAAI,CAAC,iBAAkB;AAEvB,cAAM,UAAU,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO,OAAO,QAAQ,IAAI;AACrF,cAAM,cAAc,QAAQ,KAAA;AAE5B,YAAI,aAAa;AACf,gBAAM,UAAU,cAAc,OAAO,WAAW;AAChD,cAAI,QAAQ,SAAS,GAAG;AACtB,mBAAO,MAAM,+DAA+D;AAC5E,+BAAmB;AACnB,mBAAO;AAAA,UACT;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAEA,QAAM,iBAAiB,MAAM,KAAK,EAAE,MAAM,SAAS,IAAI,UAAU,cAAc,QAAQ,eAAA,GAAkB,UAAU;AACnH,MAAI,CAAC,gBAAgB;AACnB,WAAO,MAAM,2CAA2C;AACxD,WAAO,MAAM,YAAY,IAAI,uEAAuE;AACpG,YAAQ,KAAK,CAAC;AAAA,EAChB;AAKA,QAAM,mBAAoB,eAAe,QAAA,EAA0B;AACnE,QAAM,eAAe,gBAAgB,kBAAkB,cAAc;AACrE,MAAI,QAAQ;AACZ,MAAI,QAA4B;AAChC,QAAM,MAAM;AAAA,IACV,GAAG,QAAQ;AAAA,IACX,kBAAkB;AAAA;AAAA;AAAA,IAGlB,8BAA8B;AAAA;AAAA;AAAA,IAG9B,2BAA2B;AAAA,EAAA;AAQ7B,MAAI,QAAQ,WAAW,GAAG;AACxB,UAAM,gBAAgB,oBAAA;AACtB,UAAM,cAAc,kBAAA;AAGpB,QAAI,iBAAiB,aAAa;AAChC,UAAI,CAAC,QAAQ,MAAM,OAAO;AACxB,eAAO,MAAM,2FAA2F;AACxG,eAAO,MAAM,wEAAwE;AACrF,gBAAQ,KAAK,CAAC;AAAA,MAChB;AACA,YAAM,SAAS,MAAM,iBAAA;AACrB,cAAQ,MAAM,yBAAyB,GAAG,EAAE,YAAY,EAAE,OAAA,GAAU;AAEpE,UAAI,WAAW,UAAU;AACvB,eAAO;AAAA,UACL,wCAAwC,cAAc,aAAa,MAAM,gBAAgB,cAAc,aAAa,KAAK,IAAI,CAAC;AAAA,QAAA;AAEhI,gBAAQ,MAAM,sBAAsB,GAAG,EAAE,YAAY,EAAE,MAAM,iBAAA,GAAoB;AAEjF,YAAI,mBAAmB,gBAAgB,kBAAkB,WAAW;AACpE,cAAM,UAAU,0BAA0B,aAAa;AACvD,kBAAU,QAAQ;AAClB,gBAAQ,QAAQ;AAGhB,eAAO,IAAI;AAAA,MACb,OAAO;AACL,eAAO,KAAK,8BAA8B,YAAY,UAAU,EAAE;AAClE,gBAAQ,MAAM,sBAAsB,GAAG,EAAE,YAAY,EAAE,MAAM,eAAA,GAAkB;AAC/E,kBAAU,CAAC,YAAY,aAAa;AACpC,gBAAQ;AACR,YAAI,OAAO,KAAK,QAAQ,qBAAqB,IAAI,KAAK,YAAY,IAAI;AAAA,MACxE;AAAA,IACF,WAAW,eAAe;AACxB,aAAO;AAAA,QACL,wCAAwC,cAAc,aAAa,MAAM,gBAAgB,cAAc,aAAa,KAAK,IAAI,CAAC;AAAA,MAAA;AAEhI,cAAQ,MAAM,sBAAsB,GAAG,EAAE,YAAY,EAAE,MAAM,iBAAA,GAAoB;AAEjF,UAAI,mBAAmB,gBAAgB,kBAAkB,WAAW;AAEpE,YAAM,UAAU,0BAA0B,aAAa;AACvD,gBAAU,QAAQ;AAClB,cAAQ,QAAQ;AAGhB,aAAO,IAAI;AAAA,IACb,WAAW,aAAa;AACtB,aAAO,KAAK,8BAA8B,YAAY,UAAU,EAAE;AAClE,cAAQ,MAAM,sBAAsB,GAAG,EAAE,YAAY,EAAE,MAAM,eAAA,GAAkB;AAC/E,gBAAU,CAAC,YAAY,aAAa;AACpC,cAAQ;AACR,UAAI,OAAO,KAAK,QAAQ,qBAAqB,IAAI,KAAK,YAAY,IAAI;AAAA,IACxE;AAAA,EACF;AACA,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO,MAAM,mFAAmF;AAChG,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,SAAS,QAAQ,KAAK,GAAG;AAC/B,SAAO,KAAK,qBAAqB,MAAM,EAAE;AAGzC,QAAM,YAAgC,QAAQ,SAAS;AACvD,QAAM,SAAS,MAAM,QAAQ,CAAC,GAAG,QAAQ,MAAM,CAAC,GAAG;AAAA,IACjD,KAAK,QAAQ,IAAA;AAAA,IACb;AAAA,IACA;AAAA,IACA,0BAA0B;AAAA,IAC1B,aAAa;AAAA,IACb,OAAO,CAAC,WAAW,QAAQ,MAAM;AAAA,EAAA,CAClC;AAED,QAAM,EAAE,QAAQ,OAAA,IAAW;AAC3B,MAAI,CAAC,UAAU,CAAC,QAAQ;AACtB,WAAO,MAAM,kCAAkC;AAC/C,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,MAAI,OAAO;AACT,QAAI,CAAC,OAAO,OAAO;AACjB,aAAO,MAAM,gEAAgE;AAC7E,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,WAAO,MAAM,MAAM,KAAK;AACxB,WAAO,MAAM,IAAA;AAAA,EACf;AAEA,QAAM,iBAAiB,CAAC,MAAc,UAA4B;AAChE,QAAI,CAAC,iBAAkB;AACvB,UAAM,cAAc,KAAK,KAAA;AACzB,QAAI,CAAC,YAAa;AAElB,kBAAc,IAAI,WAAW;AAE7B,UAAM,YAAY,KAAK,IAAA,IAAQ;AAC/B,UAAM,iBAAiB,kBAAkB,OAAO,aAAa,SAAS;AAEtE,UAAM,YAAY,IAAI,eAAe,qBAAqB,cAAc;AAGxE,cAAA,EAAY,IAAI,SAAS;AAAA,EAC3B;AAEA,MAAI,eAAe;AACnB,MAAI,eAAe;AAGnB,SAAO,GAAG,QAAQ,CAAC,SAAiB;AAClC,oBAAgB,KAAK,SAAA;AACrB,UAAM,QAAQ,aAAa,MAAM,IAAI;AAErC,mBAAe,MAAM,SAAS;AAE9B,eAAW,QAAQ,OAAO;AACxB,qBAAe,MAAM,MAAM;AAAA,IAC7B;AAAA,EACF,CAAC;AAGD,SAAO,GAAG,QAAQ,CAAC,SAAiB;AAClC,oBAAgB,KAAK,SAAA;AACrB,UAAM,QAAQ,aAAa,MAAM,IAAI;AAErC,mBAAe,MAAM,SAAS;AAE9B,eAAW,QAAQ,OAAO;AACxB,qBAAe,MAAM,OAAO;AAAA,IAC9B;AAAA,EACF,CAAC;AAED,SAAO,GAAG,SAAS,CAAA,QAAO;AACxB,WAAO,MAAM,iBAAiB,MAAM,GAAG;AACvC,WAAO,MAAM,GAAG;AAChB,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AAED,SAAO,GAAG,SAAS,CAAA,SAAQ;AAEzB,QAAI,aAAa,QAAQ;AACvB,qBAAe,cAAc,MAAM;AAAA,IACrC;AACA,QAAI,aAAa,QAAQ;AACvB,qBAAe,cAAc,OAAO;AAAA,IACtC;AAEA,QAAI,CAAC,MAAM;AACT,aAAO,MAAM,GAAG,MAAM,uBAAuB;AAAA,IAC/C,OAAO;AACL,aAAO,MAAM,GAAG,MAAM,qBAAqB,IAAI,GAAG;AAAA,IACpD;AACA,YAAQ,KAAK,IAAI;AAAA,EACnB,CAAC;AACD,QAAM,aAAa,MAAM;AACvB,QAAI,OAAO,OAAQ;AACnB,WAAO,QAAA;AACP,WAAO,QAAA;AACP,WAAO,KAAA;AAAA,EACT;AACA,SAAO,GAAG,SAAS,MAAM;AACvB,WAAO,mBAAmB,OAAO;AACjC,WAAO,mBAAmB,OAAO;AACjC,YAAQ,GAAG,UAAU,UAAU;AAC/B,YAAQ,GAAG,WAAW,UAAU;AAChC,YAAQ,GAAG,cAAc,UAAU;AAAA,EACrC,CAAC;AACH;"}

package/dist/server/cli/server.d.ts

@@ -1,2 +1,2 @@
 import { CLIHandlerOptions } from '../types/cli.ts';
-export default function server({ port, basePath, filesToServe }: CLIHandlerOptions): Promise<import('http').Server<typeof import('http').IncomingMessage, typeof import('http').ServerResponse> | undefined>;
+export default function server({ port, basePath, filesToServe, allowedOrigins }: CLIHandlerOptions): Promise<import('http').Server<typeof import('http').IncomingMessage, typeof import('http').ServerResponse> | undefined>;

package/dist/server/cli/server.js

@@ -1,10 +1,20 @@
+;
+!function() {
+  try {
+    var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {}, n = new e.Error().stack;
+    n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "b0df70d8-9df1-45bb-8915-b98805fbbb55", e._sentryDebugIdIdentifier = "sentry-dbid-b0df70d8-9df1-45bb-8915-b98805fbbb55");
+  } catch (e2) {
+  }
+}();
 import { setupSpotlight } from "../main.js";
-async function server({ port, basePath, filesToServe }) {
+import "../../_virtual/_sentry-release-injection-file.js";
+async function server({ port, basePath, filesToServe, allowedOrigins }) {
   return await setupSpotlight({
     port,
     basePath,
     filesToServe,
-    isStandalone: true
+    isStandalone: true,
+    allowedOrigins
   });
 }
 export {

package/dist/server/cli/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sources":["../../../src/server/cli/server.ts"],"sourcesContent":["import { setupSpotlight } from \"../main.ts\";\nimport type { CLIHandlerOptions } from \"../types/cli.ts\";\n\nexport default async function server({ port, basePath, filesToServe }: CLIHandlerOptions) {\n  return await setupSpotlight({\n    port,\n    basePath,\n    filesToServe,\n    isStandalone: true,\n  });\n}\n"],"names":[],"mappings":";AAGA,eAA8B,OAAO,EAAE,MAAM,UAAU,gBAAmC;AACxF,SAAO,MAAM,eAAe;AAAA,IAC1B;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc;AAAA,EAAA,CACf;AACH;"}
+{"version":3,"file":"server.js","sources":["../../../src/server/cli/server.ts"],"sourcesContent":["import { setupSpotlight } from \"../main.ts\";\nimport type { CLIHandlerOptions } from \"../types/cli.ts\";\n\nexport default async function server({ port, basePath, filesToServe, allowedOrigins }: CLIHandlerOptions) {\n  return await setupSpotlight({\n    port,\n    basePath,\n    filesToServe,\n    isStandalone: true,\n    allowedOrigins,\n  });\n}\n"],"names":[],"mappings":";;;;;;;;;;AAGA,eAA8B,OAAO,EAAE,MAAM,UAAU,cAAc,kBAAqC;AACxG,SAAO,MAAM,eAAe;AAAA,IAC1B;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc;AAAA,IACd;AAAA,EAAA,CACD;AACH;"}

package/dist/server/cli/tail.d.ts

@@ -5,4 +5,4 @@ export type OnItemCallback = (type: string, item: ParsedEnvelope["envelope"][1][
 export declare const NAME_TO_TYPE_MAPPING: Record<string, string[]>;
 export declare const EVERYTHING_MAGIC_WORDS: Set<string>;
 export declare const SUPPORTED_TAIL_ARGS: Set<string>;
-export default function tail({ port, cmdArgs, basePath, filesToServe, format }: CLIHandlerOptions, onItem?: OnItemCallback): Promise<ServerType | undefined>;
+export default function tail({ port, cmdArgs, basePath, filesToServe, format, allowedOrigins }: CLIHandlerOptions, onItem?: OnItemCallback): Promise<ServerType | undefined>;

package/dist/server/cli/tail.js

@@ -1,6 +1,16 @@
+;
+!function() {
+  try {
+    var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {}, n = new e.Error().stack;
+    n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "f35053fc-26c9-45cd-b2da-1b59b921e9cb", e._sentryDebugIdIdentifier = "sentry-dbid-f35053fc-26c9-45cd-b2da-1b59b921e9cb");
+  } catch (e2) {
+  }
+}();
 import { captureException } from "@sentry/core";
+import { metrics } from "@sentry/node";
 import { EventSource } from "eventsource";
 import { SENTRY_CONTENT_TYPE } from "../../shared/constants.js";
+import "../../_virtual/_sentry-release-injection-file.js";
 import { applyFormatter } from "../formatters/index.js";
 import { logger } from "../logger.js";
 import { setupSpotlight } from "../main.js";
@@ -8,6 +18,9 @@ import { getSpotlightURL } from "../utils/extras.js";
 import { getBuffer } from "../utils/getBuffer.js";
 import "../parser/helpers.js";
 import "uuidv7";
+import "node:dns/promises";
+import "node:net";
+import "node:os";
 import { formatters } from "../formatters/human/index.js";
 import { formatters as formatters$1 } from "../formatters/json/index.js";
 import { formatters as formatters$2 } from "../formatters/logfmt/index.js";
@@ -36,7 +49,7 @@ const connectUpstream = async (port) => new Promise((resolve, reject) => {
   client.onerror = reject;
   client.onopen = () => resolve(client);
 });
-async function tail({ port, cmdArgs, basePath, filesToServe, format = "logfmt" }, onItem) {
+async function tail({ port, cmdArgs, basePath, filesToServe, format = "logfmt", allowedOrigins }, onItem) {
   const eventTypes = cmdArgs.length > 0 ? cmdArgs.map((arg) => arg.toLowerCase()) : ["everything"];
   for (const eventType of eventTypes) {
     if (!SUPPORTED_TAIL_ARGS.has(eventType)) {
@@ -45,6 +58,9 @@ async function tail({ port, cmdArgs, basePath, filesToServe, format = "logfmt" }
       process.exit(1);
     }
   }
+  for (const eventType of eventTypes) {
+    metrics.count("cli.tail.event_type", 1, { attributes: { type: eventType } });
+  }
   const formatter = FORMATTERS[format];
   const types = eventTypes.some((type) => EVERYTHING_MAGIC_WORDS.has(type)) ? SUPPORTED_ENVELOPE_TYPES : /* @__PURE__ */ new Set([...eventTypes.flatMap((type) => NAME_TO_TYPE_MAPPING[type] || [])]);
   const onEnvelope = (envelope) => {
@@ -79,7 +95,7 @@ async function tail({ port, cmdArgs, basePath, filesToServe, format = "logfmt" }
       process.exit(1);
     }
   }
-  const serverInstance = await setupSpotlight({ port, filesToServe, basePath, isStandalone: true });
+  const serverInstance = await setupSpotlight({ port, filesToServe, basePath, isStandalone: true, allowedOrigins });
   getBuffer().subscribe((container) => {
     const parsedEnvelope = container.getParsedEnvelope();
     if (parsedEnvelope) {

package/dist/server/cli/tail.js.map

@@ -1 +1 @@
-{"version":3,"file":"tail.js","sources":["../../../src/server/cli/tail.ts"],"sourcesContent":["import type { ServerType } from \"@hono/node-server\";\nimport { captureException } from \"@sentry/core\";\nimport { EventSource } from \"eventsource\";\nimport { SENTRY_CONTENT_TYPE } from \"../constants.ts\";\nimport {\n  type FormatterRegistry,\n  type FormatterType,\n  applyFormatter,\n  humanFormatters,\n  jsonFormatters,\n  logfmtFormatters,\n  mdFormatters,\n} from \"../formatters/index.ts\";\nimport { logger } from \"../logger.ts\";\nimport { setupSpotlight } from \"../main.ts\";\nimport type { ParsedEnvelope } from \"../parser/index.ts\";\nimport type { CLIHandlerOptions } from \"../types/cli.ts\";\nimport { getSpotlightURL } from \"../utils/extras.ts\";\nimport { getBuffer } from \"../utils/index.ts\";\n\nexport type OnItemCallback = (\n  type: string,\n  item: ParsedEnvelope[\"envelope\"][1][number],\n  envelopeHeader: ParsedEnvelope[\"envelope\"][0],\n) => boolean;\nexport const NAME_TO_TYPE_MAPPING: Record<string, string[]> = Object.freeze({\n  traces: [\"transaction\", \"span\"],\n  // profiles: [\"profile\"],\n  logs: [\"log\"],\n  attachments: [\"attachment\"],\n  errors: [\"event\"],\n  // sessions: [\"session\"],\n  // replays: [\"replay_video\"],\n  // client_report\n});\n\nconst SUPPORTED_ENVELOPE_TYPES = new Set(Object.values(NAME_TO_TYPE_MAPPING).flat());\nexport const EVERYTHING_MAGIC_WORDS = new Set([\"everything\", \"all\", \"*\"]);\nexport const SUPPORTED_TAIL_ARGS = new Set([...Object.keys(NAME_TO_TYPE_MAPPING), ...EVERYTHING_MAGIC_WORDS]);\n\nconst FORMATTERS: Record<FormatterType, FormatterRegistry> = {\n  md: mdFormatters,\n  logfmt: logfmtFormatters,\n  json: jsonFormatters,\n  human: humanFormatters,\n};\n\nconst connectUpstream = async (port: number) =>\n  new Promise<EventSource>((resolve, reject) => {\n    const client = new EventSource(getSpotlightURL(port));\n    client.onerror = reject;\n    client.onopen = () => resolve(client);\n  });\n\nexport default async function tail(\n  { port, cmdArgs, basePath, filesToServe, format = \"logfmt\" }: CLIHandlerOptions,\n  onItem?: OnItemCallback,\n): Promise<ServerType | undefined> {\n  const eventTypes = cmdArgs.length > 0 ? cmdArgs.map(arg => arg.toLowerCase()) : [\"everything\"];\n  for (const eventType of eventTypes) {\n    if (!SUPPORTED_TAIL_ARGS.has(eventType)) {\n      logger.error(`Error: Unsupported argument \"${eventType}\".`);\n      logger.error(`Supported arguments are: ${[...SUPPORTED_TAIL_ARGS].join(\", \")}`);\n      process.exit(1);\n    }\n  }\n\n  const formatter = FORMATTERS[format];\n  const types = eventTypes.some(type => EVERYTHING_MAGIC_WORDS.has(type))\n    ? SUPPORTED_ENVELOPE_TYPES\n    : new Set([...eventTypes.flatMap(type => NAME_TO_TYPE_MAPPING[type] || [])]);\n  const onEnvelope: (envelope: ParsedEnvelope[\"envelope\"]) => void = envelope => {\n    const [envelopeHeader, items] = envelope;\n    const formatted: string[] = [];\n\n    for (const item of items) {\n      const [{ type }, payload] = item;\n\n      if (!type || !types.has(type)) {\n        // Skip if not a type we're interested in\n        continue;\n      }\n\n      // Check if this event type is supported by the formatter\n      if (!(type in formatter)) {\n        continue;\n      }\n\n      if (onItem && !onItem(type, item, envelopeHeader)) {\n        continue;\n      }\n\n      formatted.push(...applyFormatter(formatter, type as keyof FormatterRegistry, payload, envelopeHeader));\n    }\n\n    if (formatted.length > 0) {\n      console.log(formatted.join(\"\\n\"));\n    }\n  };\n\n  // try to connect to an already existing server first\n  try {\n    const client = await connectUpstream(port);\n    client.addEventListener(SENTRY_CONTENT_TYPE, event => onEnvelope!(JSON.parse(event.data)));\n    // Early return - don't start our own server if we can connect to an upstream one\n    return undefined;\n  } catch (err) {\n    // if we fail, fine then we'll start our own\n    if (err instanceof Error && !err.message?.includes(port.toString())) {\n      captureException(err);\n      logger.error(\"Error when trying to connect to upstream sidecar:\");\n      logger.error(err);\n      process.exit(1);\n    }\n  }\n\n  const serverInstance = await setupSpotlight({ port, filesToServe, basePath, isStandalone: true });\n\n  // Subscribe the onEnvelope callback to the message buffer\n  // This ensures it gets called whenever any envelope is added to the buffer\n  getBuffer().subscribe(container => {\n    const parsedEnvelope = container.getParsedEnvelope();\n    if (parsedEnvelope) {\n      onEnvelope(parsedEnvelope.envelope);\n    }\n  });\n\n  return serverInstance;\n}\n"],"names":["mdFormatters","logfmtFormatters","jsonFormatters","humanFormatters"],"mappings":";;;;;;;;;;;;;;AAyBO,MAAM,uBAAiD,OAAO,OAAO;AAAA,EAC1E,QAAQ,CAAC,eAAe,MAAM;AAAA;AAAA,EAE9B,MAAM,CAAC,KAAK;AAAA,EACZ,aAAa,CAAC,YAAY;AAAA,EAC1B,QAAQ,CAAC,OAAO;AAAA;AAAA;AAAA;AAIlB,CAAC;AAED,MAAM,2BAA2B,IAAI,IAAI,OAAO,OAAO,oBAAoB,EAAE,MAAM;AAC5E,MAAM,yBAAyB,oBAAI,IAAI,CAAC,cAAc,OAAO,GAAG,CAAC;AACjE,MAAM,sBAAsB,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,oBAAoB,GAAG,GAAG,sBAAsB,CAAC;AAE5G,MAAM,aAAuD;AAAA,EAC3D,IAAIA;AAAAA,EACJ,QAAQC;AAAAA,EACR,MAAMC;AAAAA,EACN,OAAOC;AACT;AAEA,MAAM,kBAAkB,OAAO,SAC7B,IAAI,QAAqB,CAAC,SAAS,WAAW;AAC5C,QAAM,SAAS,IAAI,YAAY,gBAAgB,IAAI,CAAC;AACpD,SAAO,UAAU;AACjB,SAAO,SAAS,MAAM,QAAQ,MAAM;AACtC,CAAC;AAEH,eAA8B,KAC5B,EAAE,MAAM,SAAS,UAAU,cAAc,SAAS,SAAA,GAClD,QACiC;AACjC,QAAM,aAAa,QAAQ,SAAS,IAAI,QAAQ,IAAI,CAAA,QAAO,IAAI,aAAa,IAAI,CAAC,YAAY;AAC7F,aAAW,aAAa,YAAY;AAClC,QAAI,CAAC,oBAAoB,IAAI,SAAS,GAAG;AACvC,aAAO,MAAM,gCAAgC,SAAS,IAAI;AAC1D,aAAO,MAAM,4BAA4B,CAAC,GAAG,mBAAmB,EAAE,KAAK,IAAI,CAAC,EAAE;AAC9E,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,YAAY,WAAW,MAAM;AACnC,QAAM,QAAQ,WAAW,KAAK,CAAA,SAAQ,uBAAuB,IAAI,IAAI,CAAC,IAClE,2BACA,oBAAI,IAAI,CAAC,GAAG,WAAW,QAAQ,CAAA,SAAQ,qBAAqB,IAAI,KAAK,CAAA,CAAE,CAAC,CAAC;AAC7E,QAAM,aAA6D,CAAA,aAAY;AAC7E,UAAM,CAAC,gBAAgB,KAAK,IAAI;AAChC,UAAM,YAAsB,CAAA;AAE5B,eAAW,QAAQ,OAAO;AACxB,YAAM,CAAC,EAAE,QAAQ,OAAO,IAAI;AAE5B,UAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,GAAG;AAE7B;AAAA,MACF;AAGA,UAAI,EAAE,QAAQ,YAAY;AACxB;AAAA,MACF;AAEA,UAAI,UAAU,CAAC,OAAO,MAAM,MAAM,cAAc,GAAG;AACjD;AAAA,MACF;AAEA,gBAAU,KAAK,GAAG,eAAe,WAAW,MAAiC,SAAS,cAAc,CAAC;AAAA,IACvG;AAEA,QAAI,UAAU,SAAS,GAAG;AACxB,cAAQ,IAAI,UAAU,KAAK,IAAI,CAAC;AAAA,IAClC;AAAA,EACF;AAGA,MAAI;AACF,UAAM,SAAS,MAAM,gBAAgB,IAAI;AACzC,WAAO,iBAAiB,qBAAqB,CAAA,UAAS,WAAY,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC;AAEzF,WAAO;AAAA,EACT,SAAS,KAAK;AAEZ,QAAI,eAAe,SAAS,CAAC,IAAI,SAAS,SAAS,KAAK,SAAA,CAAU,GAAG;AACnE,uBAAiB,GAAG;AACpB,aAAO,MAAM,mDAAmD;AAChE,aAAO,MAAM,GAAG;AAChB,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,iBAAiB,MAAM,eAAe,EAAE,MAAM,cAAc,UAAU,cAAc,MAAM;AAIhG,YAAA,EAAY,UAAU,CAAA,cAAa;AACjC,UAAM,iBAAiB,UAAU,kBAAA;AACjC,QAAI,gBAAgB;AAClB,iBAAW,eAAe,QAAQ;AAAA,IACpC;AAAA,EACF,CAAC;AAED,SAAO;AACT;"}
+{"version":3,"file":"tail.js","sources":["../../../src/server/cli/tail.ts"],"sourcesContent":["import type { ServerType } from \"@hono/node-server\";\nimport { captureException } from \"@sentry/core\";\nimport { metrics } from \"@sentry/node\";\nimport { EventSource } from \"eventsource\";\nimport { SENTRY_CONTENT_TYPE } from \"../constants.ts\";\nimport {\n  type FormatterRegistry,\n  type FormatterType,\n  applyFormatter,\n  humanFormatters,\n  jsonFormatters,\n  logfmtFormatters,\n  mdFormatters,\n} from \"../formatters/index.ts\";\nimport { logger } from \"../logger.ts\";\nimport { setupSpotlight } from \"../main.ts\";\nimport type { ParsedEnvelope } from \"../parser/index.ts\";\nimport type { CLIHandlerOptions } from \"../types/cli.ts\";\nimport { getSpotlightURL } from \"../utils/extras.ts\";\nimport { getBuffer } from \"../utils/index.ts\";\n\nexport type OnItemCallback = (\n  type: string,\n  item: ParsedEnvelope[\"envelope\"][1][number],\n  envelopeHeader: ParsedEnvelope[\"envelope\"][0],\n) => boolean;\nexport const NAME_TO_TYPE_MAPPING: Record<string, string[]> = Object.freeze({\n  traces: [\"transaction\", \"span\"],\n  // profiles: [\"profile\"],\n  logs: [\"log\"],\n  attachments: [\"attachment\"],\n  errors: [\"event\"],\n  // sessions: [\"session\"],\n  // replays: [\"replay_video\"],\n  // client_report\n});\n\nconst SUPPORTED_ENVELOPE_TYPES = new Set(Object.values(NAME_TO_TYPE_MAPPING).flat());\nexport const EVERYTHING_MAGIC_WORDS = new Set([\"everything\", \"all\", \"*\"]);\nexport const SUPPORTED_TAIL_ARGS = new Set([...Object.keys(NAME_TO_TYPE_MAPPING), ...EVERYTHING_MAGIC_WORDS]);\n\nconst FORMATTERS: Record<FormatterType, FormatterRegistry> = {\n  md: mdFormatters,\n  logfmt: logfmtFormatters,\n  json: jsonFormatters,\n  human: humanFormatters,\n};\n\nconst connectUpstream = async (port: number) =>\n  new Promise<EventSource>((resolve, reject) => {\n    const client = new EventSource(getSpotlightURL(port));\n    client.onerror = reject;\n    client.onopen = () => resolve(client);\n  });\n\nexport default async function tail(\n  { port, cmdArgs, basePath, filesToServe, format = \"logfmt\", allowedOrigins }: CLIHandlerOptions,\n  onItem?: OnItemCallback,\n): Promise<ServerType | undefined> {\n  const eventTypes = cmdArgs.length > 0 ? cmdArgs.map(arg => arg.toLowerCase()) : [\"everything\"];\n  for (const eventType of eventTypes) {\n    if (!SUPPORTED_TAIL_ARGS.has(eventType)) {\n      logger.error(`Error: Unsupported argument \"${eventType}\".`);\n      logger.error(`Supported arguments are: ${[...SUPPORTED_TAIL_ARGS].join(\", \")}`);\n      process.exit(1);\n    }\n  }\n\n  // Track which event types users tail\n  for (const eventType of eventTypes) {\n    metrics.count(\"cli.tail.event_type\", 1, { attributes: { type: eventType } });\n  }\n\n  const formatter = FORMATTERS[format];\n  const types = eventTypes.some(type => EVERYTHING_MAGIC_WORDS.has(type))\n    ? SUPPORTED_ENVELOPE_TYPES\n    : new Set([...eventTypes.flatMap(type => NAME_TO_TYPE_MAPPING[type] || [])]);\n  const onEnvelope: (envelope: ParsedEnvelope[\"envelope\"]) => void = envelope => {\n    const [envelopeHeader, items] = envelope;\n    const formatted: string[] = [];\n\n    for (const item of items) {\n      const [{ type }, payload] = item;\n\n      if (!type || !types.has(type)) {\n        // Skip if not a type we're interested in\n        continue;\n      }\n\n      // Check if this event type is supported by the formatter\n      if (!(type in formatter)) {\n        continue;\n      }\n\n      if (onItem && !onItem(type, item, envelopeHeader)) {\n        continue;\n      }\n\n      formatted.push(...applyFormatter(formatter, type as keyof FormatterRegistry, payload, envelopeHeader));\n    }\n\n    if (formatted.length > 0) {\n      console.log(formatted.join(\"\\n\"));\n    }\n  };\n\n  // try to connect to an already existing server first\n  try {\n    const client = await connectUpstream(port);\n    client.addEventListener(SENTRY_CONTENT_TYPE, event => onEnvelope!(JSON.parse(event.data)));\n    // Early return - don't start our own server if we can connect to an upstream one\n    return undefined;\n  } catch (err) {\n    // if we fail, fine then we'll start our own\n    if (err instanceof Error && !err.message?.includes(port.toString())) {\n      captureException(err);\n      logger.error(\"Error when trying to connect to upstream sidecar:\");\n      logger.error(err);\n      process.exit(1);\n    }\n  }\n\n  const serverInstance = await setupSpotlight({ port, filesToServe, basePath, isStandalone: true, allowedOrigins });\n\n  // Subscribe the onEnvelope callback to the message buffer\n  // This ensures it gets called whenever any envelope is added to the buffer\n  getBuffer().subscribe(container => {\n    const parsedEnvelope = container.getParsedEnvelope();\n    if (parsedEnvelope) {\n      onEnvelope(parsedEnvelope.envelope);\n    }\n  });\n\n  return serverInstance;\n}\n"],"names":["mdFormatters","logfmtFormatters","jsonFormatters","humanFormatters"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AA0BO,MAAM,uBAAiD,OAAO,OAAO;AAAA,EAC1E,QAAQ,CAAC,eAAe,MAAM;AAAA;AAAA,EAE9B,MAAM,CAAC,KAAK;AAAA,EACZ,aAAa,CAAC,YAAY;AAAA,EAC1B,QAAQ,CAAC,OAAO;AAAA;AAAA;AAAA;AAIlB,CAAC;AAED,MAAM,2BAA2B,IAAI,IAAI,OAAO,OAAO,oBAAoB,EAAE,MAAM;AAC5E,MAAM,yBAAyB,oBAAI,IAAI,CAAC,cAAc,OAAO,GAAG,CAAC;AACjE,MAAM,sBAAsB,oBAAI,IAAI,CAAC,GAAG,OAAO,KAAK,oBAAoB,GAAG,GAAG,sBAAsB,CAAC;AAE5G,MAAM,aAAuD;AAAA,EAC3D,IAAIA;AAAAA,EACJ,QAAQC;AAAAA,EACR,MAAMC;AAAAA,EACN,OAAOC;AACT;AAEA,MAAM,kBAAkB,OAAO,SAC7B,IAAI,QAAqB,CAAC,SAAS,WAAW;AAC5C,QAAM,SAAS,IAAI,YAAY,gBAAgB,IAAI,CAAC;AACpD,SAAO,UAAU;AACjB,SAAO,SAAS,MAAM,QAAQ,MAAM;AACtC,CAAC;AAEH,eAA8B,KAC5B,EAAE,MAAM,SAAS,UAAU,cAAc,SAAS,UAAU,eAAA,GAC5D,QACiC;AACjC,QAAM,aAAa,QAAQ,SAAS,IAAI,QAAQ,IAAI,CAAA,QAAO,IAAI,aAAa,IAAI,CAAC,YAAY;AAC7F,aAAW,aAAa,YAAY;AAClC,QAAI,CAAC,oBAAoB,IAAI,SAAS,GAAG;AACvC,aAAO,MAAM,gCAAgC,SAAS,IAAI;AAC1D,aAAO,MAAM,4BAA4B,CAAC,GAAG,mBAAmB,EAAE,KAAK,IAAI,CAAC,EAAE;AAC9E,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AAGA,aAAW,aAAa,YAAY;AAClC,YAAQ,MAAM,uBAAuB,GAAG,EAAE,YAAY,EAAE,MAAM,UAAA,GAAa;AAAA,EAC7E;AAEA,QAAM,YAAY,WAAW,MAAM;AACnC,QAAM,QAAQ,WAAW,KAAK,CAAA,SAAQ,uBAAuB,IAAI,IAAI,CAAC,IAClE,2BACA,oBAAI,IAAI,CAAC,GAAG,WAAW,QAAQ,CAAA,SAAQ,qBAAqB,IAAI,KAAK,CAAA,CAAE,CAAC,CAAC;AAC7E,QAAM,aAA6D,CAAA,aAAY;AAC7E,UAAM,CAAC,gBAAgB,KAAK,IAAI;AAChC,UAAM,YAAsB,CAAA;AAE5B,eAAW,QAAQ,OAAO;AACxB,YAAM,CAAC,EAAE,QAAQ,OAAO,IAAI;AAE5B,UAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,GAAG;AAE7B;AAAA,MACF;AAGA,UAAI,EAAE,QAAQ,YAAY;AACxB;AAAA,MACF;AAEA,UAAI,UAAU,CAAC,OAAO,MAAM,MAAM,cAAc,GAAG;AACjD;AAAA,MACF;AAEA,gBAAU,KAAK,GAAG,eAAe,WAAW,MAAiC,SAAS,cAAc,CAAC;AAAA,IACvG;AAEA,QAAI,UAAU,SAAS,GAAG;AACxB,cAAQ,IAAI,UAAU,KAAK,IAAI,CAAC;AAAA,IAClC;AAAA,EACF;AAGA,MAAI;AACF,UAAM,SAAS,MAAM,gBAAgB,IAAI;AACzC,WAAO,iBAAiB,qBAAqB,CAAA,UAAS,WAAY,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC;AAEzF,WAAO;AAAA,EACT,SAAS,KAAK;AAEZ,QAAI,eAAe,SAAS,CAAC,IAAI,SAAS,SAAS,KAAK,SAAA,CAAU,GAAG;AACnE,uBAAiB,GAAG;AACpB,aAAO,MAAM,mDAAmD;AAChE,aAAO,MAAM,GAAG;AAChB,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,iBAAiB,MAAM,eAAe,EAAE,MAAM,cAAc,UAAU,cAAc,MAAM,gBAAgB;AAIhH,YAAA,EAAY,UAAU,CAAA,cAAa;AACjC,UAAM,iBAAiB,UAAU,kBAAA;AACjC,QAAI,gBAAgB;AAClB,iBAAW,eAAe,QAAQ;AAAA,IACpC;AAAA,EACF,CAAC;AAED,SAAO;AACT;"}

package/dist/server/cli.d.ts

@@ -7,6 +7,7 @@ export type CLIArgs = {
     format: FormatterType;
     cmd: string | undefined;
     cmdArgs: string[];
+    allowedOrigins: string[];
 };
 export declare function parseCLIArgs(): CLIArgs;
 export declare const CLI_CMD_MAP: Map<string | undefined, CLIHandler>;

package/dist/server/cli.js

@@ -1,4 +1,13 @@
+;
+!function() {
+  try {
+    var e = "undefined" != typeof window ? window : "undefined" != typeof global ? global : "undefined" != typeof globalThis ? globalThis : "undefined" != typeof self ? self : {}, n = new e.Error().stack;
+    n && (e._sentryDebugIds = e._sentryDebugIds || {}, e._sentryDebugIds[n] = "f472fd05-2531-4511-be93-cb96646f13eb", e._sentryDebugIdIdentifier = "sentry-dbid-f472fd05-2531-4511-be93-cb96646f13eb");
+  } catch (e2) {
+  }
+}();
 import { parseArgs } from "node:util";
+import { metrics } from "@sentry/node";
 import showHelp from "./cli/help.js";
 import mcp from "./cli/mcp.js";
 import run from "./cli/run.js";
@@ -7,6 +16,7 @@ import tail from "./cli/tail.js";
 import { DEFAULT_PORT } from "./constants.js";
 import { AVAILABLE_FORMATTERS } from "./formatters/types.js";
 import { enableDebugLogging, logger } from "./logger.js";
+import "../_virtual/_sentry-release-injection-file.js";
 const MAGIC_PORT_FOR_DYNAMIC_ASSIGNMENT = 0;
 const PARSE_ARGS_CONFIG = {
   options: {
@@ -25,6 +35,12 @@ const PARSE_ARGS_CONFIG = {
       short: "f",
       default: "human"
     },
+    "allowed-origin": {
+      type: "string",
+      short: "A",
+      multiple: true,
+      default: []
+    },
     // Deprecated -- use the positional `mcp` argument instead
     "stdio-mcp": {
       type: "boolean",
@@ -77,13 +93,16 @@ function parseCLIArgs() {
     console.error(`Valid formats are: ${AVAILABLE_FORMATTERS.join(", ")}`);
     process.exit(1);
   }
+  const allowedOriginInput = values["allowed-origin"];
+  const allowedOrigins = allowedOriginInput.flatMap((origin) => origin.split(",").map((o) => o.trim())).filter(Boolean);
   const result = {
     debug: values.debug,
     help: values.help,
     format,
     port,
     cmd: positionals[0],
-    cmdArgs: cmdArgs ?? positionals.slice(1)
+    cmdArgs: cmdArgs ?? positionals.slice(1),
+    allowedOrigins
   };
   return result;
 }
@@ -99,18 +118,25 @@ async function main({
   basePath,
   filesToServe
 } = {}) {
-  let { cmd, cmdArgs, help, port, debug, format } = parseCLIArgs();
+  let { cmd, cmdArgs, help, port, debug, format, allowedOrigins } = parseCLIArgs();
   if (debug || process.env.SPOTLIGHT_DEBUG) {
     enableDebugLogging(true);
   }
-  const spotlightVersion = "4.6.0";
+  const spotlightVersion = "4.7.1";
   logger.info(`Spotlight by Sentry - v${spotlightVersion}`);
+  metrics.count("cli.invocation", 1, {
+    attributes: {
+      command: cmd || "server",
+      format,
+      debug: String(debug)
+    }
+  });
   if (help) {
     cmd = "help";
     cmdArgs = [];
   }
   const handler = CLI_CMD_MAP.get(cmd) || showHelp;
-  return await handler({ cmd, cmdArgs, port, help, debug, format, basePath, filesToServe });
+  return await handler({ cmd, cmdArgs, port, help, debug, format, basePath, filesToServe, allowedOrigins });
 }
 export {
   CLI_CMD_MAP,