feat: add send-event and send-envelope commands with DSN auth by BYK · Pull Request #921 · getsentry/cli

BYK · 2026-05-05T16:36:05Z

Summary

Implements sentry event send for old sentry-cli parity. Ref #600.

This is the first command in the new CLI that authenticates via a DSN (not a Bearer token), so no sentry auth login is needed — provide a DSN from --dsn, SENTRY_DSN env var, or auto-detection.

Command structure

sentry event send       ← canonical (under the event group)

sentry send-event       ← hidden backward-compat alias
sentry send-envelope    ← hidden deprecation shim → suggests event send --raw

`sentry event send`

Send a Sentry event from CLI flags or a JSON file:

# From flags
sentry event send -m "Something went wrong" -l error --tag env:prod

# From JSON file
sentry event send ./event.json

# Raw mode (send bytes as-is — also supports pre-built envelopes)
sentry event send --raw ./captured.envelope

Supports all flags from old sentry-cli send-event: --message, --level, --release, --env, --tag, --extra, --user, --fingerprint, --timestamp, --dist, --platform, --no-environ.

Design decisions

event send under the event group — follows the mutation pattern (project create, issue resolve, release create). Discoverable via sentry event --help.
send-envelope deprecated — envelopes are a low-level concept; the --raw flag on event send covers the use case. Running sentry send-envelope now throws with a clear message suggesting sentry event send --raw <file>.
DSN auth — auth: "dsn" on buildCommand skips the token guard entirely. DSN is resolved from --dsn flag or SENTRY_DSN env var.

Shared infrastructure

src/lib/envelope/transport.ts — requireDsn(), buildEnvelopeUrl(), sendEnvelopeRequest(), readFileBytes()
src/lib/envelope/event-builder.ts — buildEventFromFlags() constructs a Sentry Event from CLI flags
Uses @sentry/core for envelope creation/serialization and DSN parsing

Implements sentry send-event and sentry send-envelope — the first commands that authenticate via a DSN (not a Bearer token), matching the old sentry-cli behaviour. Architecture: - src/lib/envelope/transport.ts: shared DSN-based envelope sender using @sentry/core (makeDsn, getEnvelopeEndpointWithUrlEncodedAuth, serializeEnvelope) — no new dependencies - src/lib/envelope/event-builder.ts: builds a Sentry Event from CLI flags (message, level, tags, extras, user, fingerprint, etc.) - auth: 'dsn' in buildCommand: skips Bearer token guard and RC URL check for DSN-only commands send-event flags (matching old CLI): --dsn, -m/--message, -l/--level, -r/--release, -E/--env, -t/--tag (variadic), -e/--extra (variadic), -u/--user (variadic), -f/--fingerprint (variadic), --dist, --platform, --timestamp, --no-environ, --raw send-envelope flags: --dsn, --raw (send bytes without parsing) Tests: 48 new tests across 4 files (TDD — tests written first) - transport: URL construction, auth params, error handling - event-builder: parseKeyValue, parseUserFields, buildEventFromFlags - send-event command: inline, file, JSON output, missing DSN - send-envelope command: valid file, raw mode, invalid envelope, multiple files, missing DSN

github-actions · 2026-05-05T16:37:03Z

PR Preview Action v1.8.1
🚀 View preview at https://cli.sentry.dev/_preview/pr-921/
Built to branch `gh-pages` at 2026-05-11 17:45 UTC. Preview will be ready when the GitHub Pages deployment is complete.

github-actions · 2026-05-05T16:37:32Z

Codecov Results 📊

✅ 6907 passed | Total: 6907 | Pass Rate: 100% | Execution Time: 0ms

📊 Comparison with Base Branch

Metric	Change
Total Tests	📈 +51
Passed Tests	📈 +51
Failed Tests	—
Skipped Tests	—

All tests are passing successfully.

✅ Patch coverage is 82.00%. Project has 14399 uncovered lines.
❌ Project coverage is 76.68%. Comparing base (base) to head (head).

Files with missing lines (4)

File	Patch %	Lines
src/commands/event/send.ts	78.19%	⚠️ 53 Missing
src/lib/envelope/event-builder.ts	78.48%	⚠️ 17 Missing
src/lib/envelope/transport.ts	85.14%	⚠️ 11 Missing
src/commands/send-envelope.ts	96.00%	⚠️ 2 Missing

Coverage diff

@@            Coverage Diff             @@
##          main       #PR       +/-##
==========================================
- Coverage    77.04%    76.68%    -0.36%
==========================================
  Files          319       324        +5
  Lines        60950     61734      +784
  Branches         0         0         —
==========================================
+ Hits         46956     47335      +379
- Misses       13994     14399      +405
- Partials         0         0         —

Generated by Codecov Action

sentry send event -- canonical new interface sentry send envelope sentry send-event -- hidden bw-compat alias (old sentry-cli) sentry send-envelope -- hidden bw-compat alias (old sentry-cli)

- parseTimestamp now throws ValidationError on invalid input instead of silently falling back to Date.now() (Seer/Cursor) - Environ spread order fixed: process.env goes first so user --extra environ:val correctly overrides it (Cursor) - Raw mode no longer reads file twice: decode bytes in-memory instead of re-reading (Cursor) - Fixed --raw help text: sends raw bytes directly, not 'inside an envelope' (Sentry) - send-envelope now errors when no files provided (Sentry) - send-event --raw in inline mode now throws ValidationError (Sentry)

BYK · 2026-05-05T17:20:44Z

Fixed all 6 bot findings in 7e33546:

Invalid --timestamp now throws ValidationError (Cursor/Seer)
environ spread order fixed so user --extra environ:val is not overwritten (Cursor)
Raw mode decodes bytes in-memory instead of re-reading file (Cursor)
--raw help text corrected (Sentry)
send-envelope now errors when no files provided (Sentry)
send-event --raw in inline mode now throws ValidationError (Sentry)

- Remove undocumented DSN auto-detection claim from send-event.ts module comment and requireDsn error message (only --dsn and SENTRY_DSN are actually supported) - Use Number.isFinite instead of !Number.isNaN to reject Infinity and -Infinity as timestamp values

- parseTimestamp: remove && num > 0 guard — epoch-0 and negative timestamps are valid; the old guard silently corrupted them to year 2000 / year 3600 via Date.parse fallthrough - resolveDsn: trim whitespace from --dsn flag and SENTRY_DSN env var (leading space / trailing newline from shell caused confusing error) - transport test: use .toThrow(ValidationError) not bare .toThrow() - send.md: remove false claim that DSN auto-detects from project files - buildFilePayload + send-envelope: wrap Bun.file reads in try/catch, surface ENOENT and parse errors as ValidationError not raw stacks - Document that --message is ignored when file args are provided - Add tests: ENOENT → ValidationError, --raw without file → error, no files for send-envelope → ValidationError, DSN whitespace trim, whitespace trim for SENTRY_DSN env var

…eation in try/catch - Centralise ENOENT/IO error handling into shared readFileBytes() in transport.ts - Removes duplicated file-reading error block from both send-event.ts and send-envelope.ts - Wrap makeDsn() call in try/catch to guard against future SDK internal throws - Wrap createEventEnvelope()+serializeEnvelope() in try/catch with descriptive ValidationError Addresses Sentry Seer findings (medium) and Cursor Bugbot finding (low) on PR #921.

…atch Mirrors the file-based path's error handling — catches any internal SDK errors and re-throws as ValidationError.

Calling buildEnvelopeUrl(dsn) before the file read loop ensures invalid DSNs are caught upfront rather than after unnecessary I/O, consistent with send-event's behavior.

getEnvelopeEndpointWithUrlEncodedAuth appends /<version> internally, so passing 'sentry-cli/dev' produced the malformed identifier sentry_client=sentry-cli/dev/dev on every envelope request. Now passes bare name 'sentry-cli' and lets the SDK append '/dev'.

…r message - makeDsn may throw SentryError internally; wrap in try/catch for safety - requireDsn error message now uses canonical 'sentry send event' instead of hardcoded 'sentry send-event' (wrong for send-envelope callers)

- Canonical command is now 'sentry event send' under the event route - send-envelope is now a deprecation shim suggesting 'sentry event send --raw' - send-event remains as a hidden backward-compat alias - Removed the 'send' route group entirely - Updated docs, tests, and all references

Prevents HostScopeError from masking the deprecation message when a .sentryclirc file is present.

# Conflicts: # AGENTS.md

# Conflicts: # docs/src/content/docs/contributing.md # plugins/sentry-cli/skills/sentry-cli/references/event.md

cursor

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit b6ec9ac. Configure here.}

cursor · 2026-05-11T17:51:52Z

+  const extra: Record<string, unknown> = {
+    ...(flags["no-environ"] ? {} : { environ: process.env }),
+    ...parseKeyValuePairs(flags.extra),
+  };


Default environ leaks auth tokens in event extras

Medium Severity

When --no-environ is not set (the default), process.env is included verbatim as extra.environ in the event payload. In CI environments where SENTRY_AUTH_TOKEN is set alongside SENTRY_DSN, running sentry event send -m "deploy done" silently sends the auth token (and any other secrets like DATABASE_URL, AWS_SECRET_ACCESS_KEY, etc.) to the Sentry ingest endpoint, where they become visible to all project members. The --no-environ default of false makes this a passive credential leak.

^{Reviewed by Cursor Bugbot for commit b6ec9ac. Configure here.}

cursor Bot reviewed May 5, 2026

View reviewed changes

Comment thread src/lib/envelope/event-builder.ts

Comment thread src/commands/send-event.ts Outdated

sentry Bot reviewed May 5, 2026

View reviewed changes

Comment thread src/commands/send-envelope.ts Outdated

refactor: group send-event/send-envelope under 'sentry send' route

296879f

sentry send event -- canonical new interface sentry send envelope sentry send-event -- hidden bw-compat alias (old sentry-cli) sentry send-envelope -- hidden bw-compat alias (old sentry-cli)

sentry Bot reviewed May 5, 2026

View reviewed changes

Comment thread src/lib/envelope/event-builder.ts

Comment thread src/commands/send-event.ts Outdated

BYK and others added 2 commits May 5, 2026 17:05

fix: sort imports in app.ts + add missing send command docs fragment

902d089

chore: regenerate docs

cb15098

cursor Bot reviewed May 5, 2026

View reviewed changes

Comment thread src/lib/envelope/event-builder.ts

sentry Bot reviewed May 5, 2026

View reviewed changes

Comment thread src/commands/send-envelope.ts Outdated

Comment thread src/commands/send-event.ts Outdated

sentry Bot reviewed May 5, 2026

View reviewed changes

Comment thread src/commands/send-event.ts Outdated

cursor Bot reviewed May 5, 2026

View reviewed changes

Comment thread src/lib/envelope/event-builder.ts

BYK added 2 commits May 5, 2026 17:30

sentry Bot reviewed May 5, 2026

View reviewed changes

Comment thread src/commands/send-event.ts Outdated

Comment thread src/commands/send-event.ts Outdated

cursor Bot reviewed May 5, 2026

View reviewed changes

Comment thread src/commands/send-envelope.ts Outdated

sentry Bot reviewed May 5, 2026

View reviewed changes

Comment thread src/commands/send-event.ts Outdated

fix: wrap inline event createEventEnvelope/serializeEnvelope in try/c…

da503bb

…atch Mirrors the file-based path's error handling — catches any internal SDK errors and re-throws as ValidationError.

sentry Bot reviewed May 5, 2026

View reviewed changes

Comment thread src/commands/send-envelope.ts Outdated

fix: validate DSN before file I/O in send-envelope

254e593

Calling buildEnvelopeUrl(dsn) before the file read loop ensures invalid DSNs are caught upfront rather than after unnecessary I/O, consistent with send-event's behavior.

cursor Bot reviewed May 5, 2026

View reviewed changes

Comment thread src/lib/envelope/transport.ts

cursor Bot reviewed May 5, 2026

View reviewed changes

Comment thread src/lib/envelope/transport.ts Outdated

sentry Bot reviewed May 5, 2026

View reviewed changes

Comment thread src/lib/envelope/transport.ts Outdated

BYK added 2 commits May 5, 2026 19:15

fix: add explicit type annotation to avoid noImplicitAnyLet lint error

2fae081

sentry-warden Bot reviewed May 6, 2026

View reviewed changes

Comment thread src/commands/event/send.ts

Comment thread src/lib/envelope/transport.ts

Comment thread src/lib/envelope/transport.ts

Comment thread src/lib/envelope/transport.ts

cursor Bot reviewed May 6, 2026

View reviewed changes

Comment thread test/lib/command-suggestions.test.ts Outdated

fix: update command-suggestions test to expect 'sentry event send'

b70175e

sentry Bot reviewed May 6, 2026

View reviewed changes

Comment thread src/commands/send-envelope.ts

BYK added 3 commits May 6, 2026 13:04

fix: add skipRcUrlCheck to send-envelope deprecation shim

494700a

Prevents HostScopeError from masking the deprecation message when a .sentryclirc file is present.

Merge remote-tracking branch 'origin/main' into feat/send-event-envelope

012dac2

# Conflicts: # AGENTS.md

Merge remote-tracking branch 'origin/main' into feat/send-event-envelope

b6ec9ac

# Conflicts: # docs/src/content/docs/contributing.md # plugins/sentry-cli/skills/sentry-cli/references/event.md

cursor Bot reviewed May 11, 2026

View reviewed changes

Uh oh!

Conversation

BYK commented May 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Command structure

sentry event send

Design decisions

Shared infrastructure

Uh oh!

github-actions Bot commented May 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Built to branch gh-pages at 2026-05-11 17:45 UTC. Preview will be ready when the GitHub Pages deployment is complete.

Uh oh!

github-actions Bot commented May 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Results 📊

📊 Comparison with Base Branch

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

BYK commented May 5, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor Bot May 11, 2026

Choose a reason for hiding this comment

Default environ leaks auth tokens in event extras

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

BYK commented May 5, 2026 •

edited

Loading

`sentry event send`

github-actions Bot commented May 5, 2026 •

edited

Loading

Built to branch `gh-pages` at 2026-05-11 17:45 UTC.
Preview will be ready when the GitHub Pages deployment is complete.

github-actions Bot commented May 5, 2026 •

edited

Loading