fix(rollup): Prevent double-injection of debug ID

Author: s1gr1d

packages/bundler-plugin-core/src/index.ts

@@ -269,6 +269,14 @@ export function createRollupDebugIdInjectionHooks(): {
           stripQueryAndHashFromPath(chunk.fileName).endsWith(ending)
         )
       ) {
+        // Check if a debug ID has already been injected to avoid duplicate injection (e.g. by another plugin or Sentry CLI)
+        const chunkStartSnippet = code.slice(0, 2000);
+        const chunkEndSnippet = code.slice(-500);
+
+        if (chunkStartSnippet.includes("_sentryDebugIdIdentifier") || chunkEndSnippet.includes("//# debugId=")) {
+          return null; // Debug ID already present, skip injection
+        }
+
         const debugId = stringToUUID(code); // generate a deterministic debug ID
         const codeToInject = getDebugIdSnippet(debugId);
 

packages/bundler-plugin-core/test/index.test.ts

@@ -1,5 +1,5 @@
 import { Compiler } from "webpack";
-import { getDebugIdSnippet, sentryUnpluginFactory } from "../src";
+import { getDebugIdSnippet, sentryUnpluginFactory, createRollupDebugIdInjectionHooks } from "../src";
 
 describe("getDebugIdSnippet", () => {
   it("returns the debugId injection snippet for a passed debugId", () => {
@@ -10,6 +10,85 @@ describe("getDebugIdSnippet", () => {
   });
 });
 
+describe("createRollupDebugIdInjectionHooks", () => {
+  const hooks = createRollupDebugIdInjectionHooks();
+
+  describe("renderChunk", () => {
+    it("should inject debug ID into clean JavaScript files", () => {
+      const code = 'console.log("Hello world");';
+      const result = hooks.renderChunk(code, { fileName: "bundle.js" });
+
+      expect(result).not.toBeNull();
+      expect(result?.code).toContain("_sentryDebugIdIdentifier");
+      expect(result?.code).toContain('console.log("Hello world");');
+    });
+
+    it("should inject debug ID after 'use strict'", () => {
+      const code = '"use strict";\nconsole.log("Hello world");';
+      const result = hooks.renderChunk(code, { fileName: "bundle.js" });
+
+      expect(result).not.toBeNull();
+      expect(result?.code).toMatch(/^"use strict";.*;{try/);
+    });
+
+    it.each([
+      ["bundle.js", true],
+      ["bundle.mjs", true],
+      ["bundle.cjs", true],
+      ["bundle.js?foo=bar", true],
+      ["bundle.js#hash", true],
+      ["index.html", false],
+      ["styles.css", false],
+    ])("should process file '%s': %s", (fileName, shouldProcess) => {
+      const code = 'console.log("test");';
+      const result = hooks.renderChunk(code, { fileName });
+
+      if (shouldProcess) {
+        expect(result).not.toBeNull();
+        expect(result?.code).toContain("_sentryDebugIdIdentifier");
+      } else {
+        expect(result).toBeNull();
+      }
+    });
+
+    it.each([
+      [
+        "inline format at start",
+        ';{try{(function(){var e="undefined"!=typeof window?window:e._sentryDebugIdIdentifier="sentry-dbid-existing-id");})();}catch(e){}};console.log("test");',
+      ],
+      [
+        "comment format at end",
+        'console.log("test");\n//# debugId=f6ccd6f4-7ea0-4854-8384-1c9f8340af81\n//# sourceMappingURL=bundle.js.map',
+      ],
+      [
+        "inline format with large file",
+        '"use strict";\n' +
+          "// comment\n".repeat(10) +
+          ';{try{(function(){var e="undefined"!=typeof window?window:e._sentryDebugIdIdentifier="sentry-dbid-existing-id");})();}catch(e){}};' +
+          '\nconsole.log("line");\n'.repeat(100),
+      ],
+    ])("should NOT inject when debug ID already exists (%s)", (_description, code) => {
+      const result = hooks.renderChunk(code, { fileName: "bundle.js" });
+      expect(result).toBeNull();
+    });
+
+    it("should only check boundaries for performance (not entire file)", () => {
+      // Inline format beyond first 2KB boundary
+      const codeWithInlineBeyond2KB =
+        "a".repeat(2100) +
+        ';{try{(function(){var e="undefined"!=typeof window?window:e._sentryDebugIdIdentifier="sentry-dbid-existing-id");})();}catch(e){}};';
+
+      expect(hooks.renderChunk(codeWithInlineBeyond2KB, { fileName: "bundle.js" })).not.toBeNull();
+
+      // Comment format beyond last 500 bytes boundary
+      const codeWithCommentBeyond500B =
+        "//# debugId=f6ccd6f4-7ea0-4854-8384-1c9f8340af81\n" + "a".repeat(600);
+
+      expect(hooks.renderChunk(codeWithCommentBeyond500B, { fileName: "bundle.js" })).not.toBeNull();
+    });
+  });
+});
+
 describe("sentryUnpluginFactory sourcemaps.disable behavior", () => {
   const mockReleaseInjectionPlugin = jest.fn((_injectionCode: string) => ({
     name: "mock-release-injection-plugin",