Session 04ua0Bm4hzVq

/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/package.json
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/AGENTS.md
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/.lore.md
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/apps/local/package.json
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/apps/cli-docs/package.json
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/codemods/sentry-v3-to-v4/package.json
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/package.json
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/...

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/AGENTS.md</path>
<type>file</type>
<content>
1: # Jared (Outpost agent)
2: 
3: Autonomous GitHub coding agent. Work in `/workspace/repo`.
4: 
5: ## Model tiers
6: 
7: The primary model is chosen per event (see `src/agents/models.ts`): heavy for
8: code-producing situations, cheaper for lightweight ones.
9: 
10: | Role | Subagent | Model |
11: | --- | --- | --- |
12: | Triage / plan / review (heavy) | (primary Jared) | Claude Opus 4.8 |
13: | Triage / plan / review (light) | (primary Jared) | xAI Grok 4.3 |
14: | Explore | `explore` | OpenAI gpt-5-mini |
15: | Implement | `implement` | Moonshot kimi-k2.7-code |
16: | Ship (commit/push/PR) | `ship` | xAI Grok (`grok-build-0.1`) |
17: 
18: Pipeline: triage → explore → plan → implement → review → ship.
19: (`worker` is a deprecated alias of `implement`.)
20: 
21: Operators also talk to Jared directly from the Outpost dashboard. ...

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/AGENTS.md</path>
<type>file</type>
<content>
1: # AGENTS.md
2: 
3: Guidelines for AI agents working in this codebase.
4: 
5: ## Project Overview
6: 
7: **Sentry CLI** is a command-line interface for [Sentry](https://sentry.io), built with Node.js, [pnpm](https://pnpm.io), and [Stricli](https://bloomberg.github.io/stricli/). It lives in `packages/cli` of a pnpm workspace; the docs site lives in `apps/cli-docs`. ...

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/CONTRIBUTING.md</path>
<type>file</type>
<content>
1: # Contributing to Sentry CLI
2: 
3: This guide documents the patterns and conventions used in this CLI for consistency.
4: 
5: ## Command Patterns
6: 
7: We follow [gh CLI](https://cli.github.com/) conventions for best-in-class developer experience.
8: 
9: ### List Commands
10: 
11: List commands use **optional positional arguments** for context with smart auto-detection.
12: 
13: ```bash
14: sentry org list [--limit N] [--json]
15: sentry project list [org] [--limit N] [--json]
16: sentry issue list [<org>/<project>] [--json]
17: ```
18: 
19: **Target syntax**:
20: - `<org>/<project>` - Explicit organization and project (e.g., `my-org/frontend`)
21: - `<org>/` - All projects in the specified organization
22: - `<project>` - Search for project by name across all accessible organizations
23: - *(omit)* - ...

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/package.json</path>
<type>file</type>
<content>
1: {
2:   "name": "toolkit-cli-workspace",
3:   "version": "0.0.0",
4:   "private": true,
5:   "type": "module",
6:   "packageManager": "pnpm@10.11.0",
7:   "engines": {
8:     "node": ">=20.0"
9:   },
10:   "scripts": {
11:     "tsx": "pnpm --filter sentry run tsx",
12:     "cli": "pnpm --filter sentry run cli",
13:     "dev": "pnpm --filter sentry run dev",
14:     "build": "pnpm --filter sentry run build",
15:     "build:all": "pnpm --filter sentry run build:all",
16:     "bundle": "pnpm --filter sentry run bundle",
17:     "typecheck": "pnpm --filter sentry run typecheck",
18:     "lint": "pnpm --filter sentry run lint",
19:     "lint:fix": "pnpm --filter sentry run lint:fix",
20:     "test": "pnpm --filter sentry run test",
21:     "test:unit": "pnpm --filter sentry run test:unit",
22:     "test:changed": "pnpm --filter ...

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/package.json</path>
<type>file</type>
<content>
1: {
2:   "name": "sentry",
3:   "version": "0.45.0-dev.0",
4:   "description": "Sentry CLI - A command-line interface for using Sentry built by robots and humans for robots and humans",
5:   "repository": {
6:     "type": "git",
7:     "url": "git+https://github.com/getsentry/cli.git"
8:   },
9:   "main": "./dist/index.cjs",
10:   "type": "module",
11:   "types": "./dist/index.d.cts",
12:   "exports": {
13:     ".": {
14:       "import": {
15:         "types": "./dist/index.d.mts",
16:         "default": "./dist/index.mjs"
17:       },
18:       "require": {
19:         "types": "./dist/index.d.cts",
20:         "default": "./dist/index.cjs"
21:       }
22:     }
23:   },
24:   "bin": {
25:     "sentry": "./dist/bin.cjs"
26:   },
27:   "files": [
28:     "dist/bin.cjs",
29:     "dist/index.cjs",
30:     ...

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/.lore.md</path>
<type>file</type>
<content>
1: <!-- Managed by lore (https://github.com/BYK/loreai) — manual edits are imported on next session. -->
2: 
3: ## Long-term Knowledge
4: 
5: ### Architecture
6: 
7: <!-- lore:01a02357-f0a8-7fdb-9e9d-b0710cfe65c9 -->
8: * **API output binary and HTTP contracts**: Always preserve strict output-mode and binary-safety contracts. `sentry api` must preserve `rawApiRequest()` status text; empty textual non-2xx bodies must produce an HTTP status/request fallback, and JSON mode must expose `{status, statusText, body}` so empty success and error responses are distinguishable. Binary `Uint8Array` successes bypass formatters and remain raw; binary errors emit only status/content-type/byte-count summaries, never bytes or JSON coercion. Prompts must never block scripted runs or interleave with stdout JSON.
9: 
10: <!-- ...

/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/.git

# branch.oid c6030fbf4d0c190f037c86d832edb6680d3e54ab
# branch.head feat/toolkit-bridge-upgrade
# branch.upstream origin/feat/toolkit-bridge-upgrade
# branch.ab +0 -0
c6030fbf4d0c190f037c86d832edb6680d3e54ab
ec83887a16f780f32fba4b7d710bad262dba3a22
c6030fbf4d0c190f037c86d832edb6680d3e54ab
M	packages/cli/src/commands/cli/upgrade.ts
M	packages/cli/src/lib/binary.ts
M	packages/cli/src/lib/delta-upgrade.ts
M	packages/cli/src/lib/ghcr.ts
M	packages/cli/src/lib/release-notes.ts
M	packages/cli/src/lib/upgrade.ts
M	packages/cli/src/lib/version-check.ts
M	packages/cli/test/commands/cli.test.ts
M	packages/cli/test/commands/cli/upgrade.test.ts
M	packages/cli/test/lib/binary.test.ts
M	packages/cli/test/lib/delta-upgrade.mocked.test.ts
M	packages/cli/test/lib/delta-upgrade.test.ts
M	packages/cli/test/lib/ghcr.test.ts
M	packages/cli/test/lib/release-notes.test.ts
M	packages/cli/test/lib/upgrade.test.ts
M	packages/cli/test/lib/version-check.test.ts
 packages/cli/src/commands/cli/upgrade.ts           ...

...output truncated...

Full output saved to: /home/byk/.local/share/opencode/tool-output/tool_0892ce862001Tsru24NbYs8tgQ

     // separator (e.g. `/custom/bin//`) that would break the startsWith checks.
     paths.push(join(xdgBinHome, ".") + sep);
   }
   return paths;
 }
 
 /**
  * Memoized known curl paths. Computed lazily (not at module load) to avoid TDZ
  * issues from circular imports — `KNOWN_CURL_DIRS` must be fully initialized
  * before access.
  */
 let _knownCurlPaths: string[] | undefined;
 function getKnownCurlPaths(): string[] {
   _knownCurlPaths ??= buildKnownCurlPaths(homedir(), process.env);
   return _knownCurlPaths;
 }
 
 /**
  * Get file paths for curl-installed binary.
  *
  * Priority for determining install path:
  * 1. Stored install path from DB (if method is curl AND its directory still
  *    exists — a stale path whose directory was purged is skipped)
  * 2. process.execPath if it's in a known curl install location
  * 3. ...

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/src/lib/binary.ts</path>
<type>file</type>
<content>
1: /**
2:  * Binary Management
3:  *
4:  * Shared utilities for installing, replacing, and managing the CLI binary.
5:  * Used by both `setup --install` (fresh installs) and `upgrade` (self-updates).
6:  */
7: 
8: import { spawnSync } from "node:child_process";
9: import {
10:   existsSync,
11:   mkdirSync,
12:   readFileSync,
13:   renameSync,
14:   unlinkSync,
15:   writeFileSync,
16: } from "node:fs";
17: import { chmod, copyFile, mkdir, realpath, unlink } from "node:fs/promises";
18: import { delimiter, dirname, isAbsolute, join, resolve, sep } from "node:path";
19: import { compare as semverCompare } from "semver";
20: import { getUserAgent } from "./constants.js";
21: import {
22:   buildTlsErrorDetail,
23:   customFetch,
24:   isTlsCertError,
25: } from "./custom-ca.js";
26: import { stringifyUnknown, ...

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/src/commands/cli/upgrade.ts</path>
<type>file</type>
<content>
1: /**
2:  * sentry cli upgrade
3:  *
4:  * Self-update the Sentry CLI to the latest or a specific version.
5:  * After upgrading, spawns the NEW binary with `cli setup` to update
6:  * completions, agent skills, and record installation metadata.
7:  *
8:  * Supports two release channels:
9:  * - stable (default): tracks the latest GitHub release
10:  * - nightly: tracks the rolling nightly prerelease built from main
11:  *
12:  * The channel can be set via --channel or by passing "nightly"/"stable"
13:  * as the version argument. The choice is persisted in the local database
14:  * so that subsequent bare `sentry cli upgrade` calls use the same channel. ...

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/src/commands/cli/upgrade.ts</path>
<type>file</type>
<content>
701:     try {
702:       await runSetupOnNewBinary({
703:         binaryPath: downloadResult.tempBinaryPath,
704:         method,
705:         channel,
706:         install: true,
707:         installDir,
708:         ensureAuthScopes: !json,
709:         noAgentSkills,
710:       });
711:     } finally {
712:       releaseLock(downloadResult.lockPath);
713:     }
714:   } else {
715:     // Package managers replace their PATH entry in place. Resolve it after the
716:     // install so setup runs with the new CLI, not Node's process.execPath or a
717:     // removed Homebrew keg path.
718:     await runSetupOnNewBinary({
719:       binaryPath: resolveUpdatedCliPath(execPath, entryPath, pathEnv),
720:       method,
721:       channel,
722:       install: false,
723:       ensureAuthScopes: !json,
724: ...

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/src/lib/upgrade.ts</path>
<type>file</type>
<content>
1: /**
2:  * Upgrade Module
3:  *
4:  * Detects how the CLI was installed and provides self-upgrade functionality.
5:  * Binary management helpers (download URLs, locking, replacement) live in
6:  * binary.ts and are shared with the setup --install flow.
7:  */
8: 
9: import { spawn } from "node:child_process";
10: import {
11:   chmodSync,
12:   closeSync,
13:   existsSync,
14:   openSync,
15:   realpathSync,
16:   statSync,
17:   unlinkSync,
18:   writeSync,
19: } from "node:fs";
20: import { writeFile } from "node:fs/promises";
21: import { homedir } from "node:os";
22: import { dirname, isAbsolute, join, sep } from "node:path";
23: import { setTimeout } from "node:timers/promises";
24: import { valid as semverValid } from "semver";
25: import {
26:   acquireLock,
27:   cleanupOldBinary,
28:   ...

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/src/lib/upgrade.ts</path>
<type>file</type>
<content>
486: export async function fetchLatestFromGitHubWithSource(
487:   signal?: AbortSignal,
488:   sources: readonly UpgradeSource[] = UPGRADE_SOURCES
489: ): Promise<ResolvedUpgradeVersion> {
490:   const resolved = await resolveUpgradeSource({
491:     getProbeUrl: getGitHubLatestReleaseUrl,
492:     signal,
493:     sources,
494:   });
495:   let response = resolved.response;
496:   const visitedPages = new Set([getGitHubLatestReleaseUrl(resolved.source)]);
497:   const versions: string[] = [];
498:   while (true) {
499:     const data = (await response.json()) as
500:       | { tag_name?: string }
501:       | Array<{ tag_name?: string; draft?: boolean; prerelease?: boolean }>;
502:     versions.push(...extractReleaseVersions(data, resolved.source));
503:     const nextPage = ...

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/src/lib/upgrade.ts</path>
<type>file</type>
<content>
1036:   // See: https://github.com/oven-sh/bun/issues/13237
1037:   const body = await response.arrayBuffer();
1038:   await writeFile(destPath, new Uint8Array(body));
1039: }
1040: 
1041: /**
1042:  * Max probe attempts before giving up. Six probes run with five sleeps
1043:  * in between, yielding ~3.1s total wall-clock budget (see backoff table
1044:  * on {@link waitForBinaryVisible}).
1045:  */
1046: const VERIFY_MAX_ATTEMPTS = 6;
1047: 
1048: /** Base delay (ms) between verify attempts. Doubles each retry. */
1049: const VERIFY_BASE_DELAY_MS = 100;
1050: 
1051: /**
1052:  * Stat the downloaded file, tolerating absence.
1053:  *
1054:  * Returns the file size when the path is present, a regular file, and
1055:  * has non-zero size. Returns `null` otherwise so the caller can poll. ...

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/src/lib/ghcr.ts</path>
<type>file</type>
<content>
1: /**
2:  * GHCR (GitHub Container Registry) Client
3:  *
4:  * Encapsulates the OCI download protocol for fetching nightly CLI binaries
5:  * from ghcr.io/getsentry/cli. Nightly builds are pushed as OCI artifacts
6:  * via ORAS with the version baked into the manifest annotation.
7:  *
8:  * Key design decisions:
9:  * - Anonymous access: nightly package is public; no token needed beyond the
10:  *   standard ghcr.io anonymous token exchange.
11:  * - Version discovery from manifest annotation: `annotations.version` in the
12:  *   OCI manifest holds the nightly version. Checking the latest version only
13:  *   requires a token exchange + manifest fetch (2 HTTP requests total).
14:  * - Redirect quirk: ghcr.io blob downloads return 307 to Azure Blob Storage. ...

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/src/lib/release-notes.ts</path>
<type>file</type>
<content>
1: /**
2:  * Release Notes Parser & Aggregation
3:  *
4:  * Extracts user-facing changelog entries from GitHub Release bodies (stable)
5:  * or conventional commit messages (nightly). Uses `marked.lexer()` for
6:  * AST-based section extraction and produces structured data that can be
7:  * re-serialized as filtered markdown for rendering via `renderMarkdown()`. ...

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/src/lib/delta-upgrade.ts</path>
<type>file</type>
<content>
1: /** Delta upgrade discovery and application backed by binpatch. */
2: 
3: import { join } from "node:path";
4: // biome-ignore lint/performance/noNamespaceImport: Sentry SDK recommends namespace import
5: import * as Sentry from "@sentry/node-core/light";
6: import {
7:   applyPatchChainInMemory,
8:   extractStableChain as binpatchExtractStableChain,
9:   filterAndSortChainTags as binpatchFilterAndSortChainTags,
10:   validateChainStep as binpatchValidateChainStep,
11:   type DeltaTelemetry,
12:   type DeltaUnavailableReason,
13:   type ExtractStableChainOpts,
14:   type GitHubRelease,
15:   getPatchFromVersion,
16:   getPatchTargetSha256,
17:   ghcrSource,
18:   githubReleaseSource,
19:   type InstrumentHook,
20:   MAX_NIGHTLY_CHAIN_DEPTH,
21:   makeCache,
22:   OciClient,
23:   type OciManifest,
24: ...

No files found

Found 3 matches
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/pnpm-lock.yaml:
  Line 221:       binpatch:

  Line 2696:   binpatch@0.4.2:

  Line 7801:   binpatch@0.4.2: {}

Found 100 matches (more matches available)
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/test/lib/delta-upgrade.mocked.test.ts:
  Line 92: describe("resolveStableDelta", () => {

  Line 93:   test("resolves and applies a stable delta patch", async () => {

  Line 174:   test("returns null when no chain is available", async () => {

  Line 198: describe("resolveNightlyDelta", () => {

  Line 199:   test("returns null when nightly manifest has no .gz layer", async () => {

  Line 255:   test("returns null when no patch chain exists", async () => {

  Line 315: describe("attemptDeltaUpgrade", () => {

  Line 316:   test("returns null for cross-channel upgrade (stable → nightly)", async () => {

  Line 326:   test("returns null when stable chain resolution fails", async () => {

  Line 346:   test("catches errors from patch application and returns null", async () => {

  Line 418:   test("returns DeltaResult with ...

diff --git a/packages/cli/test/commands/cli.test.ts b/packages/cli/test/commands/cli.test.ts
index cd1514eb0..187ae70f4 100644
--- a/packages/cli/test/commands/cli.test.ts
+++ b/packages/cli/test/commands/cli.test.ts
@@ -102,135 +102,138 @@ describe("feedbackCommand.func", () => {
   });
 });
 
 // Test the upgrade command func
 describe("upgradeCommand.func", () => {
   let originalFetch: typeof globalThis.fetch;
   let restoreStderr: (() => void) | undefined;
 
   beforeEach(() => {
     originalFetch = globalThis.fetch;
   });
 
   afterEach(() => {
     restoreStderr?.();
     restoreStderr = undefined;
     globalThis.fetch = originalFetch;
   });
 
   // Note: We skip testing "unknown installation method" case because
   // detectInstallationMethod() runs actual shell commands (npm list, etc.)
   // which can be slow/flaky in CI. The unknown method handling is tested
   // indirectly through the upgrade.ts unit tests in lib/upgrade.test.ts. ...

diff --git a/packages/cli/test/lib/delta-upgrade.mocked.test.ts b/packages/cli/test/lib/delta-upgrade.mocked.test.ts
index cd0a2fddc..f6186ab59 100644
--- a/packages/cli/test/lib/delta-upgrade.mocked.test.ts
+++ b/packages/cli/test/lib/delta-upgrade.mocked.test.ts
@@ -82,65 +82,65 @@ function tempFile(name: string): string {
   return join(
     tmpdir(),
     `delta-iso-${Date.now()}-${Math.random().toString(36).slice(2)}-${name}`
   );
 }
 
 // ============================================================================
 // resolveStableDelta
 // ============================================================================
 
 describe("resolveStableDelta", () => {
   test("resolves and applies a stable delta patch", async () => {
     // Create a "current binary" to patch from
     const oldBinaryPath = tempFile("old-binary.bin");
     const destPath = tempFile("patched-binary.bin");
     writeFileSync(oldBinaryPath, Buffer.from("old binary content for testing"));
 
     // Set up ...

...output truncated...

Full output saved to: /home/byk/.local/share/opencode/tool-output/tool_0892f316c001iqh1nottw71HnV

 
@@ -276,20 +282,164 @@ describe("extractNightlyTimestamp", () => {
   });
 });
 
 // ──────────────────── countListItems ────────────────────────────────────────
 
 describe("countListItems", () => {
   test("counts items in a simple list", () => {
     const tokens = marked.lexer("- item 1\n- item 2\n- item 3");
     expect(countListItems(tokens)).toBe(3);
   });
 
   test("returns 0 for non-list content", () => {
     const tokens = marked.lexer("Just a paragraph.");
     expect(countListItems(tokens)).toBe(0);
   });
 
   test("returns 0 for empty token array", () => {
     expect(countListItems([])).toBe(0);
   });
 });
+
+describe("fetchChangelog source affinity", () => {
+  const toolkitSource = UPGRADE_SOURCES[0]!;
+  const legacySource = UPGRADE_SOURCES[1]!;
+  let originalFetch: typeof globalThis.fetch;
+
+  beforeEach(() => {
+    originalFetch = ...

Found 100 matches (more matches available)
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/test/lib/upgrade.test.ts:
  Line 170:   test("parses valid methods", () => {

  Line 179:   test("parses case-insensitively", () => {

  Line 185:   test("throws on invalid method", () => {

  Line 193:   test("selects the latest CLI-prefixed Toolkit release", async () => {

  Line 214:   test("follows Toolkit release pagination to find the latest CLI release", async () => {

  Line 245:   test("selects the highest CLI SemVer across Toolkit release pages", async () => {

  Line 265:   test("rejects GitHub release pagination outside the selected source", async () => {

  Line 283:   test("classifies malformed GitHub release pagination as a network error", async () => {

  Line 300:   test("rejects cyclic GitHub release pagination", async () => {

  Line 318:   test("falls back to the legacy latest release only on Toolkit HTTP ...

Found 100 matches (more matches available)
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/test/lib/upgrade.test.ts:
  Line 136:   downloadBinaryToTemp,

  Line 193:   test("selects the latest CLI-prefixed Toolkit release", async () => {

  Line 214:   test("follows Toolkit release pagination to find the latest CLI release", async () => {

  Line 245:   test("selects the highest CLI SemVer across Toolkit release pages", async () => {

  Line 265:   test("rejects GitHub release pagination outside the selected source", async () => {

  Line 318:   test("falls back to the legacy latest release only on Toolkit HTTP 404", async () => {

  Line 403:       "No CLI upgrade source was found: every source returned HTTP 404"

  Line 530:   test("creates error with default message for offline_cache_miss", () => {

  Line 531:     const error = new UpgradeError("offline_cache_miss");

  Line 532:     ...

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/test/lib/upgrade.test.ts</path>
<type>file</type>
<content>
1600: 
1601:   beforeEach(() => {
1602:     // Redirect getCurlInstallPaths() to temp dir instead of ~/.sentry/bin/
1603:     clearInstallInfo();
1604:     mkdirSync(upgradeBinDir, { recursive: true });
1605:     setInstallInfo({
1606:       method: "curl",
1607:       path: upgradeInstallPath,
1608:       version: "0.0.0",
1609:     });
1610:   });
1611: 
1612:   afterEach(async () => {
1613:     globalThis.fetch = originalFetch;
1614:     // Clean up test files - get fresh paths in case DB changed
1615:     const paths = getTestPaths();
1616:     for (const path of [
1617:       paths.installPath,
1618:       paths.tempPath,
1619:       paths.oldPath,
1620:       paths.lockPath,
1621:     ]) {
1622:       try {
1623:         await unlink(path);
1624:       } catch {
1625:         // Ignore
1626:       ...

Found 23 matches
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/test/lib/upgrade.test.ts:
  Line 265:   test("rejects GitHub release pagination outside the selected source", async () => {

  Line 702:   test("probes prefixed Toolkit tags and retains the selected source", async () => {

  Line 780:   test("does not fall back from an explicit selected source", async () => {

  Line 1284:       "https://github.com/getsentry/toolkit/releases/download/"


/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/test/lib/ghcr.test.ts:
  Line 96:   test("uses the selected source's GHCR repository", async () => {

  Line 192:   test("uses the selected source's GHCR repository", async () => {


/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/test/lib/delta-upgrade.test.ts:
  Line 951:     const ...

/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/test/lib/install-script.test.ts
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/test/commands/cli/uninstall.test.ts
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/test/lib/db/install-info.test.ts
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/src/lib/db/install-info.ts
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/src/commands/cli/uninstall.ts

/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/install
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/src/lib/db/install-info.ts
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/test/lib/install-script.test.ts
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/test/lib/db/install-info.test.ts

e05cef2018d3fb6ddde9dcc1a4d7c47c0db3b3da
e05cef2018d3fb6ddde9dcc1a4d7c47c0db3b3da

diff --git a/packages/cli/src/lib/ghcr.ts b/packages/cli/src/lib/ghcr.ts
index 43d6deb7e..f556b35fc 100644
--- a/packages/cli/src/lib/ghcr.ts
+++ b/packages/cli/src/lib/ghcr.ts
@@ -1,520 +1,556 @@
 /**
  * GHCR (GitHub Container Registry) Client
  *
  * Encapsulates the OCI download protocol for fetching nightly CLI binaries
  * from ghcr.io/getsentry/cli. Nightly builds are pushed as OCI artifacts
  * via ORAS with the version baked into the manifest annotation.
  *
  * Key design decisions:
  * - Anonymous access: nightly package is public; no token needed beyond the
  *   standard ghcr.io anonymous token exchange.
  * - Version discovery from manifest annotation: `annotations.version` in the
  *   OCI manifest holds the nightly version. Checking the latest version only
  *   requires a token exchange + manifest fetch (2 HTTP requests total).
  * - Redirect quirk: ghcr.io blob downloads return 307 to Azure Blob Storage. ...

Found 1 matches
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/src/lib/custom-ca.ts:
  Line 305: export function customFetch(

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/src/lib/custom-ca.ts</path>
<type>file</type>
<content>
270:     );
271:   }
272: 
273:   return (
274:     `TLS certificate verification failed: ${cause}\n\n` +
275:     "  This usually means your network uses a TLS-intercepting proxy\n" +
276:     "  (corporate firewall, VPN) with a private certificate authority.\n\n" +
277:     "  To fix this, point the CLI to your CA certificate bundle:\n" +
278:     "    sentry cli defaults ca-cert /path/to/corporate-ca.pem\n\n" +
279:     "  Or set the NODE_EXTRA_CA_CERTS environment variable:\n" +
280:     "    export NODE_EXTRA_CA_CERTS=/path/to/corporate-ca.pem"
281:   );
282: }
283: 
284: /**
285:  * Get the combined CA certificate PEM string for Node.js `http.request()`.
286:  * Returns undefined when no custom CAs are configured. ...

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade</path>
<type>directory</type>
<entries>
.craft.yml
.git
.github/
.gitignore
.lore.md
.nojekyll
.npmrc
AGENTS.md
apps/
CHANGELOG.md
codemods/
docs/
LICENSE.md
node_modules/
package.json
packages/
pnpm-lock.yaml
pnpm-workspace.yaml
README.md

(19 entries)
</entries>

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/node_modules</path>
<type>directory</type>
<entries>
.modules.yaml
.pnpm-workspace-state.json
.pnpm/

(3 entries)
</entries>

No files found

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/node_modules/.pnpm</path>
<type>directory</type>
<entries>
@a2a-js+sdk@0.3.14_express@5.2.1/
@ai-sdk+provider-utils@2.2.8_zod@4.4.3/
@ai-sdk+provider-utils@3.0.30_zod@4.4.3/
@ai-sdk+provider-utils@4.0.40_zod@4.4.3/
@ai-sdk+provider-utils@5.0.13_zod@4.4.3/
@ai-sdk+provider@1.1.3/
@ai-sdk+provider@2.0.3/
@ai-sdk+provider@3.0.14/
@ai-sdk+provider@4.0.4/
@ai-sdk+ui-utils@1.2.11_zod@4.4.3/
@alcalzone+ansi-tokenize@0.3.0/
@anthropic-ai+sdk@0.39.0/
@apm-js-collab+code-transformer-bundler-plugins@0.5.0/
@apm-js-collab+code-transformer-bundler-plugins@0.7.3/
@apm-js-collab+code-transformer@0.15.0/
@apm-js-collab+code-transformer@0.18.1/
@apm-js-collab+tracing-hooks@0.10.1/
@apm-js-collab+tracing-hooks@0.13.0/
@astrojs+compiler-binding-linux-x64-gnu@0.3.2/
@astrojs+compiler-binding-linux-x64-musl@0.3.2/
@astrojs+compiler-binding@0.3.2_@emnapi+core@1.10.0_@emnapi+runtime@1.10.0/
@astrojs...

No files found

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/node_modules/.pnpm</path>
<type>directory</type>
<entries>
@types+hast@3.0.5/
@types+http-cache-semantics@4.2.0/
@types+js-yaml@4.0.9/
@types+mdast@4.0.4/
@types+mdx@2.0.14/
@types+ms@2.1.0/
@types+nlcst@2.0.3/
@types+node-fetch@2.6.13/
@types+node@18.19.130/
@types+node@22.20.1/
@types+node@24.13.3/
@types+picomatch@4.0.3/
@types+pngjs@6.0.5/
@types+qrcode-terminal@0.12.2/
@types+react@19.2.18/
@types+sax@1.2.7/
@types+semver@7.8.0/
@types+unist@2.0.11/
@types+unist@3.0.3/
@ungap+structured-clone@1.3.3/
@vercel+analytics@2.0.1_react@19.2.8/
@vercel+speed-insights@2.0.0_react@19.2.8/
@vitest+coverage-v8@4.1.10_vitest@4.1.10/
@vitest+expect@4.1.10/
@vitest+mocker@4.1.10_vite@8.0.16_@types+node@22.20.1_esbuild@0.28.1_tsx@4.23.5_yaml@2.9.0_/
@vitest+pretty-format@4.1.10/
@vitest+runner@4.1.10/
@vitest+snapshot@4.1.10/
@vitest+spy@4.1.10/
@vitest+utils@4.1.10/
@workflow+serde@4.1....

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/node_modules/.pnpm</path>
<type>directory</type>
<entries>
bare-events@2.9.1/
bare-fs@4.7.4/
bare-path@3.1.1/
bare-stream@2.13.3_bare-events@2.9.1/
bare-url@2.4.5/
baseline-browser-mapping@2.10.43/
bcp-47-match@2.0.3/
bcp-47@2.1.1/
binpatch@0.4.2/
binpunch@1.0.0/
blake3-wasm@2.1.5/
body-parser@2.3.0/
boolbase@1.0.0/
brace-expansion@5.0.9/
browserslist@4.28.6/
bytes@3.1.2/
call-bind-apply-helpers@1.0.2/
call-bound@1.0.4/
caniuse-lite@1.0.30001805/
canonicalize@1.0.8/
ccount@2.0.1/
chai@6.2.2/
chalk@4.1.2/
chalk@5.6.2/
character-entities-html4@2.1.0/
character-entities-legacy@3.0.0/
character-entities@2.0.2/
character-reference-invalid@2.0.1/
chat@4.35.0_zod@4.4.3/
chokidar@5.0.0/
ci-info@4.4.0/
citty@0.2.2/
cjs-module-lexer@2.2.0/
cli-boxes@4.0.1/
cli-cursor@4.0.0/
cli-highlight@2.1.11/
cli-spinners@2.9.2/
cli-truncate@6.1.1/
cliui@7.0.4/
clsx@2.1.1/

(Showing 40 of 872 ...

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/node_modules/.pnpm/binpatch@0.4.2/node_modules/binpatch</path>
<type>directory</type>
<entries>
dist/
LICENSE
package.json
README.md

(4 entries)
</entries>

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/node_modules/.pnpm/binpatch@0.4.2/node_modules/binpatch/dist</path>
<type>directory</type>
<entries>
index.d.ts
index.js
index.js.map

(3 entries)
</entries>

Found 36 matches
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/node_modules/.pnpm/binpatch@0.4.2/node_modules/binpatch/dist/index.js:
  Line 363:   return hasher.digest("hex");

  Line 440:         expectedSha256: chain.expectedSha256,

  Line 510:   let expectedSha256 = "";

  Line 512:     if (meta.toVersion === targetVersion && meta.expectedSha256) {

  Line 513:       expectedSha256 = meta.expectedSha256;

  Line 517:   if (!expectedSha256) return null;

  Line 540:   return { patches, totalSize, expectedSha256 };

  Line 610: function makeCache(cacheDir) {

  Line 633:       offline_cache_miss: "Cannot update offline \u2014 no pre-downloaded patch is available."

  Line 654: async function resolveAndApply(opts) {

  Line 662:     offline,

  Line 679:   if (offline) {

  Line 734:   if (sha256 !== chain.expectedSha256) {

  Line 736:       `SHA-256 mismatch after patching: got ${sha256}, expected ...

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/node_modules/.pnpm/binpatch@0.4.2/node_modules/binpatch/dist/index.js</path>
<type>file</type>
<content>
400:     await reader.close();
401:   }
402: }
403: function applyPatch(oldPath, patchData, destPath) {
404:   return applyPatchChainInMemory(oldPath, [patchData], destPath);
405: }
406: var CACHE_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1e3;
407: var MAX_CHAIN_WALK_DEPTH = 10;
408: function sanitizeVersion(version) {
409:   return version.replace(/[^a-zA-Z0-9.-]/g, "_");
410: }
411: function patchFileName(fromVersion, toVersion) {
412:   return `${sanitizeVersion(fromVersion)}-${sanitizeVersion(toVersion)}.patch`;
413: }
414: function chainFileName(fromVersion, toVersion) {
415:   return `chain-${sanitizeVersion(fromVersion)}-${sanitizeVersion(toVersion)}.json`;
416: }
417: function isNotFound(err) {
418:   return err instanceof Error && "code" in err && err.code === ...

 DEPRECATED  `test.poolOptions` was removed in Vitest 4. All previous `poolOptions` are now top-level options. Please, refer to the migration guide: https://vitest.dev/guide/migration#pool-rework

 RUN  v4.1.10 /home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli

[warn] [delta-upgrade] Delta upgrade failed (Patch too small: 4 bytes (need at least 32)), falling back to full download

 Test Files  9 passed (9)
      Tests  485 passed (485)
   Start at  02:42:56
   Duration  11.98s (transform 11.00s, setup 433ms, import 18.99s, tests 9.85s, environment 1ms)

diff --git a/packages/cli/test/lib/upgrade.test.ts b/packages/cli/test/lib/upgrade.test.ts
index 7c6f63a4b..cb3daa43c 100644
--- a/packages/cli/test/lib/upgrade.test.ts
+++ b/packages/cli/test/lib/upgrade.test.ts
@@ -122,0 +123 @@ import {
+  UPGRADE_SOURCES,
@@ -142,0 +144 @@ const {
+  resolveExistingUpgradeVersion,
@@ -191,7 +193,32 @@ describe("fetchLatestFromGitHub", () => {
-  test("returns version from GitHub API", async () => {
-    mockFetch(
-      async () =>
-        new Response(
-          JSON.stringify({
-            tag_name: "v1.2.3",
-          }),
+  test("selects the latest CLI-prefixed Toolkit release", async () => {
+    const requests: string[] = [];
+    mockFetch(async (url) => {
+      requests.push(String(url));
+      return new Response(
+        JSON.stringify([
+          { tag_name: "mcp@9.0.0" },
+          { tag_name: "cli@not-a-version" },
+          { tag_name: "cli@1.2.3" },
+          { tag_name: "cli@1.3.0" },
+        ]),
+        { status: 200 ...

(no output)

c6030fbf4 (HEAD -> feat/toolkit-bridge-upgrade, origin/feat/toolkit-bridge-upgrade) fix(cli): bind nightly manifests to versions
b6484e0fb fix(cli): validate resolved upgrade metadata
c8c815bbe fix(cli): validate GitHub release pagination
5ffa5cd0f fix(cli): harden upgrade source resolution
dbee7e9f2 test(cli): update toolkit upgrade fixtures
723375b6c fix(cli): address upgrade review findings
9c874298e fix(cli): address toolkit bridge review
04867eaf9 feat(cli): add toolkit upgrade bridge
# branch.oid c6030fbf4d0c190f037c86d832edb6680d3e54ab
# branch.head feat/toolkit-bridge-upgrade
# branch.upstream origin/feat/toolkit-bridge-upgrade
# branch.ab +0 -0
c6030fbf4d0c190f037c86d832edb6680d3e54ab
cf038bf6ee6a8295fdff38c4e32ebc135daf9c4f4daf566505e61b347ba23722  -

b6484e0fb fix(cli): validate resolved upgrade metadata
 packages/cli/src/commands/cli/upgrade.ts       | 16 +++----
 packages/cli/src/lib/ghcr.ts                   | 10 ++++
 packages/cli/src/lib/release-notes.ts          | 20 ++++----
 packages/cli/src/lib/upgrade.ts                | 18 +++----
 packages/cli/test/commands/cli/upgrade.test.ts | 65 ++++++++++++++++++++++----
 packages/cli/test/lib/ghcr.test.ts             | 12 +++++
 packages/cli/test/lib/release-notes.test.ts    |  7 +++
 packages/cli/test/lib/upgrade.test.ts          | 20 ++++++++
 8 files changed, 131 insertions(+), 37 deletions(-)
commit b6484e0fb1eb0f8bce68272d538f5c3b26cd5bd5
Author:     Burak Yigit Kaya <byk@sentry.io>
AuthorDate: Thu Sep 10 02:19:10 2026 +0000
Commit:     Burak Yigit Kaya <byk@sentry.io>
CommitDate: Thu Sep 10 02:19:10 2026 +0000

    fix(cli): validate resolved upgrade metadata

diff --git a/packages/cli/src/lib/ghcr.ts b/packages/cli/src/lib/ghcr.ts
index 313ecced2..f556b35fc 100644
--- ...

Found 15 matches
/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/test/lib/ghcr.test.ts:
  Line 302:     const response = await downloadNightlyBlob("token", "sha256:abc123");

  Line 329:     const response = await downloadNightlyBlob(

  Line 351:     await downloadNightlyBlob("token", "sha256:xyz");

  Line 358:     await expect(downloadNightlyBlob("token", "sha256:abc")).rejects.toThrow(

  Line 361:     await expect(downloadNightlyBlob("token", "sha256:abc")).rejects.toThrow(

  Line 377:     const error = await downloadNightlyBlob("token", "sha256:abc").catch(

  Line 387:     const error = await downloadNightlyBlob("token", "sha256:abc").catch(

  Line 399:     const error = await downloadNightlyBlob("token", "sha256:abc").catch(

  Line 417:     const error = await downloadNightlyBlob("token", "sha256:abc").catch(

  Line 608:     const result = await downloadLayerBlob("token", "sha256:abc123");

  Line 617:   ...

<path>/home/byk/.local/share/opencode/worktree/0e8c2f3bbe145a3280d6fb6ed900a5121f382cf0/toolkit-bridge-upgrade/packages/cli/test/lib/ghcr.test.ts</path>
<type>file</type>
<content>
280:   test("throws UpgradeError when layer has no annotations", () => {
281:     const manifest = makeManifest({
282:       layers: [
283:         {
284:           digest: "sha256:noannotations",
285:           mediaType: "application/octet-stream",
286:           size: 100,
287:           // no annotations
288:         },
289:       ],
290:     });
291:     expect(() => findLayerByFilename(manifest, "sentry-linux-x64.gz")).toThrow(
292:       UpgradeError
293:     );
294:   });
295: });
296: 
297: describe("downloadNightlyBlob", () => {
298:   test("returns response directly when status is 200 (no redirect)", async () => {
299:     const binaryContent = new Uint8Array([1, 2, 3, 4]);
300:     mockFetch(async () => new Response(binaryContent, { status: 200 }));
301: 
302:     const response = await ...

# branch.oid c6030fbf4d0c190f037c86d832edb6680d3e54ab
# branch.head feat/toolkit-bridge-upgrade
# branch.upstream origin/feat/toolkit-bridge-upgrade
# branch.ab +0 -0
1 .M N... 100644 100644 100644 941ddb084da2f91b46bc646726202af50a87b3ee 941ddb084da2f91b46bc646726202af50a87b3ee packages/cli/test/commands/cli/upgrade.test.ts
1 .M N... 100644 100644 100644 c6f1035ded2172154fff5aef477f99d0866f07d6 c6f1035ded2172154fff5aef477f99d0866f07d6 packages/cli/test/lib/ghcr.test.ts
1 .M N... 100644 100644 100644 859d39a6112e341a3f8e0c060ef46a6b6d4deb96 859d39a6112e341a3f8e0c060ef46a6b6d4deb96 packages/cli/test/lib/release-notes.test.ts
c6030fbf4d0c190f037c86d832edb6680d3e54ab
cf038bf6ee6a8295fdff38c4e32ebc135daf9c4f4daf566505e61b347ba23722  -

diff --git a/packages/cli/test/commands/cli/upgrade.test.ts b/packages/cli/test/commands/cli/upgrade.test.ts
index 941ddb084..8a1e0b20a 100644
--- a/packages/cli/test/commands/cli/upgrade.test.ts
+++ b/packages/cli/test/commands/cli/upgrade.test.ts
@@ -360,11 +360,6 @@ describe("sentry cli upgrade", () => {
       mockFetch(async (url) => {
         const request = String(url);
         requests.push(request);
-        if (request.includes("getsentry/toolkit/releases?per_page=100")) {
-          return new Response(JSON.stringify([{ tag_name: "cli@99.99.99" }]), {
-            status: 200,
-          });
-        }
         if (
           request.includes("getsentry/toolkit/releases/tags/cli%4088.88.88")
         ) {
@@ -402,6 +397,9 @@ describe("sentry cli upgrade", () => {
       expect(requests).not.toContain(
         "https://api.github.com/repos/getsentry/toolkit/releases?per_page=30"
       );
+      expect(requests.every((request) => ...