tracksiy 0.9.0 → 0.10.0

package/README.md

@@ -137,6 +137,8 @@ Labels: `bug`, `feature`, `question`, `blocker`. `npx tracksiy support` prints t
 | `budgets check` | Judge every budget now -- for one release with --release. Exit code 10 if one is crossed. For a deploy to stop on. | read | `budgets_check` |
 | `performance findings` | Routes that got slower after a release and N+1 queries, which Tracksiy raised as issues on its own. | read | `performance_findings` |
 | `monitors timing <slug>` | Where an HTTP monitor's time goes (DNS, connect, server, TTFB, download, page size); how long a job runs and how close to its max runtime. | read | `monitors_timing` |
+| `storage` | What each project holds on the server (events, transactions, source maps, debug files), largest first, with its retention limits. | read | `storage` |
+| `mobile` | How fast the app is on phones: app start (cold/warm) against the window before, per OS and release, and per screen TTID/TTFD and slow/frozen frames, with checks for what the SDK does not report. | read | `mobile` |
 | `issues list` | Recent issues of a project, newest activity first, with the frames that matter inlined. | read | `issues_list` |
 | `issues view <id>` | One issue in enough depth to act on: latest event, stack frames, tags, recent volume. | read | `issues_view` |
 | `issues resolve <ids...>` | Mark issues resolved, optionally fixed in a release so old clients do not reopen them. Records why. | write | `issues_resolve` |
@@ -165,6 +167,7 @@ Labels: `bug`, `feature`, `question`, `blocker`. `npx tracksiy support` prints t
 | `releases list` | What did the last deploys break? Recent releases with their events, issues and the issues they introduced. | read | `releases_list` |
 | `releases health` | Is the app crashing for its users, and did the last release make it worse? Crash-free sessions and users per release. | read | `releases_health` |
 | `releases declare <version>` | Create or update a release idempotently: its commit, URL, and when it was released. Run it from the deploy. | write | `releases_declare` |
+| `releases verdict <version>` | Should the rollout of this release continue? Crash-free vs threshold and the previous build, issues spreading fast, new issues, budgets, regressions. Exit code 10 on fail. | read | `releases_verdict` |
 | `sourcemaps inject <paths...>` | Stamp built JavaScript and its source maps with a debug ID, so errors map to the exact build. Run after the build, before deploying. | write | `sourcemaps_inject` |
 | `sourcemaps upload <paths...>` | Upload built JavaScript and source maps so stack traces show original files and lines. Only missing bytes are sent. | write | `sourcemaps_upload` |
 | `proguard upload <mapping>` | Upload an Android ProGuard/R8 mapping so obfuscated stack traces are readable. | write | `proguard_upload` |

package/dist/tracksiy.mjs

@@ -4,7 +4,7 @@
 import { readFileSync as readFileSync2 } from "node:fs";
 
 // src/version.ts
-var VERSION = true ? "0.9.0" : "0.0.0-dev";
+var VERSION = true ? "0.10.0" : "0.0.0-dev";
 var USER_AGENT = `tracksiy-cli/${VERSION} (node ${process.versions.node}; ${process.platform})`;
 
 // src/core/errors.ts
@@ -81,7 +81,7 @@ var seg = (value) => encodeURIComponent(String(value));
 var IDEMPOTENT = /* @__PURE__ */ new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
 var RETRY_STATUS = /* @__PURE__ */ new Set([429, 502, 503, 504]);
 var MAX_ATTEMPTS = 3;
-var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+var sleep = (ms2) => new Promise((r) => setTimeout(r, ms2));
 var Api = class {
   url;
   hasToken;
@@ -822,7 +822,7 @@ var monitorsList = {
     status: { type: "string", enum: ["all", "up", "down", "never"], description: "Filter by state. Default all." },
     type: { type: "string", enum: ["heartbeat", "get", "ping", "ssl", "ingest"], description: "Only this monitor type." }
   },
-  output: "{summary{total, up, down, never, unalertable}, monitors:[{id, name, project, monitorType, url, upNow, lastCheck, overdue, alertable, checkInUrl, downReason, lastCheckDetail{status, expectedStatus, bytes, truncated, expectedTextFound, forbiddenTextFound, error, ms}}], notes[]}",
+  output: "{summary{total, up, down, never, unalertable}, monitors:[{id, name, slug, project, monitorType, url, upNow, lastCheck, overdue, alertable, checkInUrl, downReason, lastCheckDetail{status, expectedStatus, bytes, truncated, expectedTextFound, forbiddenTextFound, error, ms}}], notes[]}",
   text: (d) => `${kv(d.summary ?? {})}
 
 ${table(d.monitors ?? [], [
@@ -1050,7 +1050,7 @@ var settingsGet = {
   context: "project",
   effect: "read",
   endpoint: { method: "GET", path: "/api/agent/v1/projects/{org}/{project}/settings" },
-  output: "{sourceRoots[], environments[], environmentPolicy, fingerprintRules[], privacyRules[], performanceIssues}",
+  output: "{sourceRoots[], environments[], environmentPolicy, fingerprintRules[], privacyRules[], performanceIssues, storage{maxEventsPerIssue, sourcemapKeepReleases, sourcemapKeepUsedDays}, releaseHealth{crashFreeSessionsMin, minSessions, maxDropPct, velocityPct, velocityMinEvents}}",
   async run(ctx) {
     return ctx.api.get(await projectPath(ctx, "settings"));
   }
@@ -1082,15 +1082,24 @@ var settingsSet = {
     "fingerprint-rule": { type: "list", split: false, value: "type=<glob>,message=<glob>,fingerprint=<name>", description: "Group matching events into one issue. Repeatable; replaces the list." },
     "privacy-rule": { type: "list", split: false, value: "dropHeader=<name> | mask=<email|iban|card_number|tckn|jwt>,field=<path|*>", description: "Scrub before storage. Repeatable; replaces the list." },
     "performance-issues": { type: "boolean", description: "Raise issues on its own for routes slower after a release and N+1 queries (default on). --no-performance-issues turns it off." },
+    "max-events-per-issue": { type: "integer", value: "<n>", description: "Stored events kept per issue: the newest n-1 plus the first (default 1000; 0 keeps all, otherwise at least 10). The issue's count is unaffected. Trimmed hourly." },
+    "sourcemap-keep-releases": { type: "integer", value: "<n>", description: "Source maps kept per release line (<name>@...): the newest n releases (default 10; 0 keeps every release). Pruned nightly." },
+    "sourcemap-keep-used-days": { type: "integer", value: "<days>", description: "Also keep bundles a stack trace used in this many days (default 30; mobile builds also while their release has events or sessions)." },
+    "crash-free-min": { type: "number", value: "<pct>", description: "Release verdict / alert: crash-free sessions under this percentage fail a release (default 99)." },
+    "min-sessions": { type: "integer", value: "<n>", description: "...judged from this many sessions on; below it the verdict is unknown (default 100)." },
+    "max-drop-pct": { type: "number", value: "<points>", description: "...or this many points worse than the previous release of the line (default 0.5)." },
+    "velocity-pct": { type: "number", value: "<pct>", description: "Velocity alert: one issue's events in 30 minutes reaching this % of the release's sessions in the last hour (default 1)." },
+    "velocity-min-events": { type: "integer", value: "<n>", description: "...with at least this many events (default 10)." },
     body: { type: "json", value: "<json|@file|->", description: "The whole declaration; overrides the flags." }
   },
   examples: [
     { command: "tracksiy settings set --environments production,staging --environment-policy drop", description: "local and local1 stop reaching Tracksiy." },
     { command: "tracksiy settings set --fingerprint-rule 'type=ViewException,message=syntax error*,fingerprint=blade-syntax'", description: "Every half-written template is one issue." },
     { command: "tracksiy settings set --source-root /home/admin/web/shop/", description: "Frames carry repoPath." },
-    { command: "tracksiy settings set --source-root 'strip=/var/www/shop/,prepend=backend/,surface=backend'", description: "The server checkout is only the repo's backend/ directory." }
+    { command: "tracksiy settings set --source-root 'strip=/var/www/shop/,prepend=backend/,surface=backend'", description: "The server checkout is only the repo's backend/ directory." },
+    { command: "tracksiy settings set --max-events-per-issue 500 --sourcemap-keep-releases 5", description: "A noisy project keeps less on disk." }
   ],
-  output: "{sourceRoots[], environments[], environmentPolicy, fingerprintRules[], privacyRules[], performanceIssues}",
+  output: "{sourceRoots[], environments[], environmentPolicy, fingerprintRules[], privacyRules[], performanceIssues, storage{maxEventsPerIssue, sourcemapKeepReleases, sourcemapKeepUsedDays}, releaseHealth{crashFreeSessionsMin, minSessions, maxDropPct, velocityPct, velocityMinEvents}}",
   async run(ctx) {
     const path = await projectPath(ctx, "settings");
     const i = ctx.input;
@@ -1102,7 +1111,21 @@ var settingsSet = {
       environmentPolicy: i.environmentPolicy ?? current.environmentPolicy ?? "flag",
       fingerprintRules: pairs(i.fingerprintRule, "fingerprint-rule") ?? current.fingerprintRules ?? [],
       privacyRules: pairs(i.privacyRule, "privacy-rule") ?? current.privacyRules ?? [],
-      performanceIssues: i.performanceIssues ?? current.performanceIssues ?? true
+      performanceIssues: i.performanceIssues ?? current.performanceIssues ?? true,
+      storage: {
+        ...current.storage ?? {},
+        ...i.maxEventsPerIssue !== void 0 ? { maxEventsPerIssue: i.maxEventsPerIssue } : {},
+        ...i.sourcemapKeepReleases !== void 0 ? { sourcemapKeepReleases: i.sourcemapKeepReleases } : {},
+        ...i.sourcemapKeepUsedDays !== void 0 ? { sourcemapKeepUsedDays: i.sourcemapKeepUsedDays } : {}
+      },
+      releaseHealth: {
+        ...current.releaseHealth ?? {},
+        ...i.crashFreeMin !== void 0 ? { crashFreeSessionsMin: i.crashFreeMin } : {},
+        ...i.minSessions !== void 0 ? { minSessions: i.minSessions } : {},
+        ...i.maxDropPct !== void 0 ? { maxDropPct: i.maxDropPct } : {},
+        ...i.velocityPct !== void 0 ? { velocityPct: i.velocityPct } : {},
+        ...i.velocityMinEvents !== void 0 ? { velocityMinEvents: i.velocityMinEvents } : {}
+      }
     };
     return ctx.api.send("PUT", path, next);
   }
@@ -1126,7 +1149,7 @@ var privacyPreview = {
 var fleet_default = [orgs, projects, overview, changes, health, monitorsList, monitorsDeclare, monitorsDelete, monitorsDeleted, performance, queries, notFound, settingsGet, settingsSet, privacyPreview];
 
 // src/commands/perf.ts
-var METRICS = "p50|p75|p95|p99|failure_rate|lcp|fcp|inp|cls|ttfb (transactions); response_p95|ttfb_p95 (HTTP monitors); duration_p95 (heartbeats)";
+var METRICS = "p50|p75|p95|p99|failure_rate|lcp|fcp|inp|cls|ttfb|app_start_cold|app_start_warm|ttid|ttfd|slow_frame_rate|frozen_frame_rate (transactions); response_p95|ttfb_p95 (HTTP monitors); duration_p95 (heartbeats)";
 var BUDGET_KEYS = {
   name: "name",
   transaction: "transaction",
@@ -1141,6 +1164,22 @@ var BUDGET_KEYS = {
   minSamples: "minSamples"
 };
 var NUMERIC = /* @__PURE__ */ new Set(["max", "windowMinutes", "minSamples"]);
+BUDGET_KEYS["window_minutes"] = "windowMinutes";
+BUDGET_KEYS["min_samples"] = "minSamples";
+function normalizeBudget(raw) {
+  const out = {};
+  for (const [key, value] of Object.entries(raw ?? {})) {
+    out[BUDGET_KEYS[key] ?? key] = value;
+  }
+  return out;
+}
+function budgetsBody(body) {
+  const wrapped = Array.isArray(body) ? { budgets: body } : body;
+  if (!wrapped || !Array.isArray(wrapped.budgets)) {
+    throw usageError("bad_value", '--body must be {"budgets": [...]} or a list of budgets.', `e.g. --body '{"budgets": [{"name": "init", "transaction": "GET /api/v1/init", "metric": "p95", "max": 800, "windowMinutes": 60}]}'`);
+  }
+  return { ...wrapped, budgets: wrapped.budgets.map(normalizeBudget) };
+}
 function parseBudget(raw) {
   const out = {};
   for (const part of String(raw).split(/,(?=\s*[\w-]+=)/)) {
@@ -1192,7 +1231,7 @@ var budgetsGet = {
 var budgetsSet = {
   path: ["budgets", "set"],
   summary: "Declare performance budgets: told once when one is crossed and once when it is met again.",
-  description: `The list replaces the stored one, by name (--merge keeps the others). Metrics: ${METRICS}. max is an upper bound: ms, a 0..1 ratio for failure_rate, unitless for cls. Below min-samples the verdict is unknown, never pass. Alerts go through the project's rules with performance on (the default).`,
+  description: `The list replaces the stored one, by name (--merge keeps the others). Metrics: ${METRICS}. max is an upper bound: ms, a 0..1 ratio for failure_rate and the frame rates, unitless for cls. Below min-samples the verdict is unknown, never pass. Alerts go through the project's rules with performance on (the default). --body takes the API's shape, {"budgets": [{"name", "metric", "max", "transaction"?, "op"?, "monitor"? (slug or id), "windowMinutes"?, "minSamples"?}]}, or a bare list; the flag spellings window and min-samples are accepted there too, and --dry-run and --merge apply to it.`,
   context: "project",
   effect: "write",
   idempotent: true,
@@ -1211,23 +1250,27 @@ var budgetsSet = {
   examples: [
     { command: "tracksiy budgets set --budget 'name=init,transaction=GET /api/v1/init,metric=p95,max=800'", description: "Told when the init call's p95 passes 800 ms over an hour." },
     { command: "tracksiy budgets set --merge --budget 'name=inp,op=ui.interaction,metric=inp,max=200,window=1440'", description: "INP p75 over a day, across every route; keeps the other budgets." },
-    { command: "tracksiy budgets set --merge --budget 'name=backup,monitor=db-backup-s3,metric=duration_p95,max=1200000,window=10080,min-samples=3'", description: "Told before the nightly backup gets near its max runtime." }
+    { command: "tracksiy budgets set --merge --budget 'name=backup,monitor=db-backup-s3,metric=duration_p95,max=1200000,window=10080,min-samples=3'", description: "Told before the nightly backup gets near its max runtime." },
+    { command: "tracksiy budgets set --body @tools/tracksiy/budgets.json --dry-run", description: "The whole declaration from a file; shows the changes, writes nothing." },
+    { command: "tracksiy budgets set --merge --budget 'name=site-ttfb,monitor=41,metric=ttfb_p95,max=800'", description: "A monitor by its id (from `monitors list`), for one whose name has spaces." }
   ],
   output: "The stored budgets and `changes` [{name, action}], same shape as `budgets get`.",
   text: budgetsText,
   async run(ctx) {
     const path = await projectPath(ctx, "budgets");
     const i = ctx.input;
-    if (i.body) return ctx.api.send("PUT", path, i.body);
-    if (!i.budget?.length && !i.merge) throw usageError("missing_flag", "No --budget given.", `Pass --budget ... (repeatable), or --body. To delete every budget: --body '{"budgets": []}'.`);
-    let budgets = (i.budget ?? []).map(parseBudget);
+    if (!i.body && !i.budget?.length && !i.merge) throw usageError("missing_flag", "No --budget given.", `Pass --budget ... (repeatable), or --body. To delete every budget: --body '{"budgets": []}'.`);
+    const fromBody = i.body ? budgetsBody(i.body) : void 0;
+    let budgets = fromBody ? fromBody.budgets : (i.budget ?? []).map(parseBudget);
+    if (fromBody && i.budget?.length) budgets = [...budgets, ...i.budget.map(parseBudget)];
     if (i.merge) {
       const current = await ctx.api.get(path);
       const named = new Set(budgets.map((b) => b.name));
       const kept = (current.budgets ?? []).filter((b) => !named.has(b.name)).map((b) => compact({ name: b.name, transaction: b.transaction ?? void 0, op: b.op ?? void 0, monitor: b.monitor ?? void 0, metric: b.metric, max: b.max, windowMinutes: b.windowMinutes, minSamples: b.minSamples }));
       budgets = [...kept, ...budgets];
     }
-    return ctx.api.send("PUT", path, compact({ budgets, dryRun: i.dryRun }));
+    const dryRun = i.dryRun || fromBody?.dryRun || void 0;
+    return ctx.api.send("PUT", path, compact({ budgets, dryRun }));
   }
 };
 var budgetsCheck = {
@@ -1294,7 +1337,7 @@ var monitorsTiming = {
   context: "project",
   effect: "read",
   endpoint: { method: "GET", path: "/api/agent/v1/projects/{org}/{project}/monitors/{slug}/timing" },
-  args: [{ name: "slug", required: true, description: "The monitor's slug (its name)." }],
+  args: [{ name: "slug", required: true, description: "The monitor's slug (its name; quote it when it has spaces), or its id from `monitors list`." }],
   flags: { since: { type: "string", value: TIME, description: "Default 24h for HTTP, 7d for jobs; compared with the window before." } },
   examples: [
     { command: "tracksiy monitors timing home", description: "Is the home page slow at the server, or on the wire?" },
@@ -1317,6 +1360,107 @@ ${table(
 };
 var perf_default = [budgetsGet, budgetsSet, budgetsCheck, findings, monitorsTiming];
 
+// src/commands/storage.ts
+function mb(bytes) {
+  const n = Number(bytes ?? 0);
+  if (n >= 1e9) return `${(n / 1e9).toFixed(2)} GB`;
+  return `${(n / 1e6).toFixed(1)} MB`;
+}
+var storage = {
+  path: ["storage"],
+  summary: "What each project holds on the server (events, transactions, source maps, debug files), largest first, with its retention limits.",
+  description: "Limits are per project: `tracksiy settings set --max-events-per-issue/--sourcemap-keep-releases/--sourcemap-keep-used-days`. Staff tokens also see the server's free disk and database size. Cached ten minutes; --fresh recounts.",
+  context: "org",
+  effect: "read",
+  endpoint: { method: "GET", path: "/api/agent/v1/organizations/{org}/storage" },
+  flags: { fresh: { type: "boolean", description: "Recount instead of the ten-minute cache (a few seconds)." } },
+  examples: [
+    { command: "tracksiy storage", description: "Which project is filling the disk?" },
+    { command: "tracksiy storage --select instance,notes", description: "Free disk and warnings only (staff)." }
+  ],
+  output: "{generatedAt, cached, projects[{project, events{stored, approxBytes, issuesOverCap, largestIssueEvents}, transactions{stored, approxBytes}, sourceMaps{bundles, releases, releaseLines, bytes}, debugFiles{files, bytes}, approxTotalBytes, limits{...}}], instance{diskTotalBytes, diskFreeBytes, diskUsedPct, databaseBytes, uploadsBytes, eventRetentionDays, transactionRetentionDays}|null, notes[]}",
+  text: (d) => `${d.instance ? kv({ disk: `${d.instance.diskUsedPct}% used, ${mb(d.instance.diskFreeBytes)} free`, database: mb(d.instance.databaseBytes), uploads: mb(d.instance.uploadsBytes) }) + "\n\n" : ""}${table(d.projects ?? [], [
+    "project",
+    ["total", (r) => mb(r.approxTotalBytes)],
+    ["events", (r) => `${r.events.stored} (${mb(r.events.approxBytes)})`],
+    ["over cap", (r) => r.events.issuesOverCap],
+    ["transactions", (r) => `${r.transactions.stored} (${mb(r.transactions.approxBytes)})`],
+    ["source maps", (r) => `${r.sourceMaps.bundles} in ${r.sourceMaps.releases} rel (${mb(r.sourceMaps.bytes)})`],
+    ["debug files", (r) => `${r.debugFiles.files} (${mb(r.debugFiles.bytes)})`],
+    ["limits", (r) => `${r.limits.maxEventsPerIssue}/issue, ${r.limits.sourcemapKeepReleases} rel, ${r.limits.sourcemapKeepUsedDays}d`]
+  ])}${(d.notes ?? []).length ? `
+
+${d.notes.join("\n")}` : ""}`,
+  async run(ctx) {
+    return ctx.api.get(await orgPath(ctx, "storage"), { fresh: ctx.input.fresh || void 0 });
+  }
+};
+var storage_default = [storage];
+
+// src/commands/mobile.ts
+var pct = (v) => v === null || v === void 0 ? "-" : `${(Number(v) * 100).toFixed(1)}%`;
+var ms = (v) => v === null || v === void 0 ? "-" : `${v} ms`;
+var mobile = {
+  path: ["mobile"],
+  aliases: [["mobile", "vitals"]],
+  summary: "How fast the app is on phones: app start (cold/warm) against the window before, per OS and release, and per screen TTID/TTFD and slow/frozen frames, with checks for what the SDK does not report.",
+  description: "Read from the measurements the mobile SDKs already send with transactions (sentry-android, sentry-cocoa, sentry_flutter incl. Flutter 10 span streaming, @sentry/react-native); nothing to configure but tracesSampleRate > 0. Budgets take the same metrics: app_start_cold, app_start_warm, ttid, ttfd (p75 ms) and slow_frame_rate, frozen_frame_rate (0..1).",
+  context: "project",
+  effect: "read",
+  endpoint: { method: "GET", path: "/api/agent/v1/projects/{org}/{project}/mobile" },
+  flags: {
+    since: { type: "string", value: TIME, description: "Window start (default 7d), compared with the window before." },
+    release: { type: "string", value: "<version>", description: "Only this release." },
+    os: { type: "string", value: "<name>", description: "Only this OS as the SDK names it: Android, iOS." },
+    sort: { type: "string", enum: ["count", "ttid", "ttfd", "slowFrames", "frozenFrames"], description: "Screen order (default count)." },
+    limit: { type: "integer", value: "<n>", description: "Screens (default 30, at most 100)." }
+  },
+  examples: [
+    { command: "tracksiy mobile --os Android --sort ttid", description: "The slowest Android screens to show." },
+    { command: "tracksiy budgets set --merge --budget 'name=cold start,metric=app_start_cold,max=2000'", description: "Alert when cold start p75 passes 2 s." }
+  ],
+  output: "{transactions, appStart{cold{count,p50,p75,p95}, warm{...}, previousColdP75, previousWarmP75}, byOs[], byRelease[], screens[{name, op, count, ttidP50, ttidP75, ttidP95, ttfdP75, previousTtidP75, slowFrameRate, frozenFrameRate, frames, frameDelayP75, stallP75}], checks[]}",
+  text: (d) => {
+    const s = d.appStart ?? {};
+    const head = kv({
+      transactions: d.transactions,
+      "cold start p75": `${ms(s.cold?.p75)} (before ${ms(s.previousColdP75)}, n=${s.cold?.count ?? 0})`,
+      "warm start p75": `${ms(s.warm?.p75)} (before ${ms(s.previousWarmP75)}, n=${s.warm?.count ?? 0})`
+    });
+    const screens = table(d.screens ?? [], [
+      "name",
+      "count",
+      ["ttid p75", (r) => ms(r.ttidP75)],
+      ["before", (r) => ms(r.previousTtidP75)],
+      ["ttfd p75", (r) => ms(r.ttfdP75)],
+      ["slow", (r) => pct(r.slowFrameRate)],
+      ["frozen", (r) => pct(r.frozenFrameRate)]
+    ]);
+    const releases = table(d.byRelease ?? [], ["release", "transactions", ["cold p75", (r) => ms(r.coldP75)], ["ttid p75", (r) => ms(r.ttidP75)], ["slow", (r) => pct(r.slowFrameRate)]]);
+    const checks = (d.checks ?? []).map((c) => `${c.status.padEnd(7)} ${c.name}: ${c.detail}`).join("\n");
+    return `${head}
+
+Screens:
+${screens}
+
+Releases:
+${releases}
+
+${checks}`;
+  },
+  async run(ctx) {
+    const i = ctx.input;
+    return ctx.api.get(await projectPath(ctx, "mobile"), {
+      since: since(i.since),
+      release: i.release,
+      os: i.os,
+      sort: i.sort,
+      limit: i.limit
+    });
+  }
+};
+var mobile_default = [mobile];
+
 // src/commands/issues.ts
 import { writeFileSync } from "node:fs";
 var FILTERS = {
@@ -1711,7 +1855,7 @@ ${(d.nextSteps ?? []).map((s, n) => `${n + 1}. ${s.action} -- ${s.why}`).join("\
     );
   }
 };
-var sleep2 = (ms) => new Promise((r) => setTimeout(r, ms));
+var sleep2 = (ms2) => new Promise((r) => setTimeout(r, ms2));
 var verify = {
   path: ["projects", "verify"],
   aliases: [["verify"]],
@@ -1785,6 +1929,7 @@ var DECLARE = {
   threshold: { type: "string", value: "<events>/<minutes>", description: "Also alert when an issue gets this many events in this many minutes, e.g. 50/10." },
   uptime: { type: "boolean", description: "Alert when this project's monitors go down (default true)." },
   performance: { type: "boolean", description: "Alert when a performance budget is crossed or met again (default true; see `budgets set`). Rides on the new-issue or uptime rule." },
+  "release-health": { type: "boolean", description: "Alert when a release's crash-free rate drops under the threshold (and recovers), or one issue spreads fast through a release (default true; see `releases verdict`). Rides on the new-issue or uptime rule." },
   "replace-recipients": { type: "boolean", description: "Make the recipient list exactly this one (default: add to it)." },
   body: { type: "json", value: "<json|@file|->", description: "Raw request body; overrides the other flags." }
 };
@@ -1821,6 +1966,7 @@ function declareBody(i) {
     threshold: threshold(i.threshold),
     uptime: i.uptime,
     performance: i.performance,
+    releaseHealth: i.releaseHealth,
     replaceRecipients: i.replaceRecipients
   });
 }
@@ -1834,6 +1980,7 @@ ${table(d.rules ?? [], [
   ["threshold", (r) => r.threshold ? `${r.threshold.events}/${r.threshold.minutes}m` : "-"],
   ["uptime", (r) => r.uptime],
   ["perf", (r) => r.performance],
+  ["release", (r) => r.releaseHealth],
   ["recipients", (r) => (r.recipients ?? []).map((x) => `${x.type}${x.delivery === "digest" ? "(digest)" : ""}`).join(", ")]
 ])}${(d.notes ?? []).length ? `
 
@@ -2133,7 +2280,49 @@ function commitList(values, git = runGit) {
 function runGit(args) {
   return execFileSync("git", args, { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
 }
-var releases_default = [list3, health2, declare];
+var verdict = {
+  path: ["releases", "verdict"],
+  summary: "Should the rollout of this release continue? Crash-free vs threshold and the previous build, issues spreading fast, new issues, budgets, regressions. Exit code 10 on fail.",
+  description: "For a staged rollout step: `--wait 30m` re-asks every minute while the verdict is unknown (too few sessions yet). Unknown passes unless --strict. Thresholds are project settings (`settings set --crash-free-min/--min-sessions/--max-drop-pct/--velocity-pct/--velocity-min-events`). An upload token (project:releases) may run it.",
+  context: "project",
+  effect: "read",
+  endpoint: { method: "GET", path: "/api/agent/v1/projects/{org}/{project}/releases/{version}/verdict" },
+  scopes: ["project:releases", "event:read", "project:read", "project:admin", "org:read"],
+  args: [{ name: "version", required: true, description: "The release, e.g. shop-android@1.4.2+57." }],
+  flags: {
+    wait: { type: "string", value: "<duration>", description: "Keep asking (every 60 s) while the verdict is unknown, up to this long: 30m, 2h." },
+    strict: { type: "boolean", description: "An unknown verdict fails too (exit 10)." }
+  },
+  examples: [
+    { command: "tracksiy releases verdict shop-android@1.4.2+57 --wait 30m && fastlane supply --rollout 0.5", description: "Widen the rollout only if the 10% stage held." }
+  ],
+  output: "{release, previousRelease, verdict, health{sessions, crashed, crashFreeSessionsPct, ...}, previousHealth, newIssues[], velocity[], budgets[], regressions[], checks[{name, status, detail}], rules}",
+  text: (d) => `${kv({ release: d.release, previous: d.previousRelease ?? "-", verdict: d.verdict, sessions: d.health?.sessions, "crash-free %": d.health?.crashFreeSessionsPct ?? "-", "previous crash-free %": d.previousHealth?.crashFreeSessionsPct ?? "-" })}
+
+${table(d.checks ?? [], ["name", "status", "detail"])}${(d.newIssues ?? []).length ? `
+
+New issues:
+${table(d.newIssues, ["short_id", "count", "title"])}` : ""}`,
+  async run(ctx) {
+    const path = await projectPath(ctx, `releases/${seg(ctx.input.version)}/verdict`);
+    const waitSeconds = duration(ctx.input.wait, "wait") ?? 0;
+    const deadline = Date.now() + waitSeconds * 1e3;
+    let data = await ctx.api.get(path);
+    while (data.verdict === "unknown" && Date.now() + 6e4 <= deadline) {
+      await new Promise((r) => setTimeout(r, 6e4));
+      data = await ctx.api.get(path);
+    }
+    if (data.verdict === "fail") {
+      const failed = (data.checks ?? []).filter((c) => c.status === "fail").map((c) => `${c.name}: ${c.detail}`).join(" | ");
+      throw new CheckFailed(`Release ${data.release} failed: ${failed}`, data, "Halt the rollout; `tracksiy releases list` and `tracksiy issues list --release` show what broke.");
+    }
+    if (ctx.input.strict && data.verdict === "unknown") {
+      throw new CheckFailed(`Release ${data.release} could not be judged yet (${data.health?.sessions ?? 0} sessions).`, data, "Wait longer (--wait), or lower releaseHealth.minSessions.");
+    }
+    return data;
+  }
+};
+var releases_default = [list3, health2, declare, verdict];
 
 // src/commands/artifacts.ts
 import { readFile as readFile2, writeFile as writeFile2 } from "node:fs/promises";
@@ -2255,7 +2444,7 @@ function manifestFor(files, chunkSize) {
   });
   return { manifest, chunks };
 }
-var sleep3 = (ms) => new Promise((r) => setTimeout(r, ms));
+var sleep3 = (ms2) => new Promise((r) => setTimeout(r, ms2));
 function packManifest(manifest, maxFiles, maxBytes) {
   const units = [];
   for (const entry of manifest) {
@@ -3591,6 +3780,8 @@ var COMMANDS = [
   ...auth_default,
   ...fleet_default,
   ...perf_default,
+  ...storage_default,
+  ...mobile_default,
   ...issues_default,
   ...projects_default,
   ...alerts_default,
@@ -3604,7 +3795,7 @@ var COMMANDS = [
 ];
 var GROUPS = [
   ["Start", "init auth onboarding describe"],
-  ["Look", "overview changes health orgs projects issues monitors performance queries not-found releases alerts keys artifacts settings privacy-preview"],
+  ["Look", "overview changes health storage orgs projects issues monitors performance mobile queries not-found releases alerts keys artifacts settings privacy-preview"],
   ["Ship", "sourcemaps proguard"],
   ["Manage", "tokens"],
   ["Talk to us", "support"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tracksiy",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Agent-first CLI and MCP server for Tracksiy: errors, uptime, alerts, releases and source maps, from one token.",
   "type": "module",
   "bin": {