fix(api): strip api/0/ prefix and exclude NodeSystemError integration (CLI-K1) (#523)

Fixes two bugs surfaced by
[CLI-K1](https://sentry.sentry.io/issues/7355494310/):

**1. Double `/api/0/` prefix in `sentry api` command**

When users include the `/api/0/` prefix in the endpoint argument (e.g.
`sentry api /api/0/projects/my-org/my-project/environments/`), the URL
construction doubled it to `/api/0/api/0/...`. `normalizeEndpoint()` now
strips the prefix automatically.

**2. `util.getSystemErrorMap()` crash on Bun**

The Sentry SDK's `NodeSystemError` integration calls
`util.getSystemErrorMap()` which Bun does not implement, causing the
SDK's event processing pipeline to crash with a TypeError. This
integration is now excluded from the default integrations set — it only
adds extra context for Node.js system errors and is not needed for CLI
telemetry.

Author: BYK

src/commands/api.ts

@@ -87,7 +87,15 @@ export function normalizeEndpoint(endpoint: string): string {
   validateEndpoint(endpoint);
 
   // Remove leading slash if present (rawApiRequest handles the base URL)
-  const trimmed = endpoint.startsWith("/") ? endpoint.slice(1) : endpoint;
+  let trimmed = endpoint.startsWith("/") ? endpoint.slice(1) : endpoint;
+
+  // Strip api/0/ prefix if user accidentally included it — the base URL
+  // already includes /api/0/, so keeping it would produce a doubled path
+  // like /api/0/api/0/... (see CLI-K1).
+  // Also strip bare "api/0" to maintain idempotency.
+  if (trimmed.startsWith("api/0/") || trimmed === "api/0") {
+    trimmed = trimmed.slice(trimmed.startsWith("api/0/") ? 6 : 5);
+  }
 
   // Split path and query string
   const queryIndex = trimmed.indexOf("?");
@@ -1160,6 +1168,18 @@ export const apiCommand = buildCommand({
     const { stdin } = this;
 
     const normalizedEndpoint = normalizeEndpoint(endpoint);
+
+    // Detect whether normalizeEndpoint stripped the api/0/ prefix (CLI-K1).
+    // normalizeEndpoint only adds at most 1 char (trailing slash), so if the
+    // normalized result is shorter than the raw input, the prefix was stripped.
+    const rawLen = endpoint.startsWith("/")
+      ? endpoint.length - 1
+      : endpoint.length;
+    if (normalizedEndpoint.length < rawLen) {
+      log.warn(
+        "Endpoint includes the /api/0/ prefix which is added automatically — stripping it to avoid a doubled path"
+      );
+    }
     const { body, params } = await resolveBody(flags, stdin);
 
     const headers =

src/lib/telemetry.ts

@@ -262,6 +262,24 @@ const EXCLUDED_INTEGRATIONS = new Set([
   "Modules", // Lists all loaded modules - unnecessary for CLI telemetry
 ]);
 
+/**
+ * Check whether `util.getSystemErrorMap` exists at setup time.
+ * Bun does not implement this Node.js API, which the SDK's NodeSystemError
+ * integration uses in its `processEvent` hook. When missing, the hook crashes
+ * during event processing instead of sending the error report (CLI-K1).
+ *
+ * Checked once at module load so the integration filter is a simple boolean.
+ */
+const hasGetSystemErrorMap = (() => {
+  try {
+    // Dynamic require to avoid bundler issues — the check only matters at runtime
+    const util = require("node:util") as Record<string, unknown>;
+    return typeof util.getSystemErrorMap === "function";
+  } catch {
+    return false;
+  }
+})();
+
 /** Current beforeExit handler, tracked so it can be replaced on re-init */
 let currentBeforeExitHandler: (() => void) | null = null;
 
@@ -312,11 +330,14 @@ export function initSentry(
   const client = Sentry.init({
     dsn: SENTRY_CLI_DSN,
     enabled,
-    // Keep default integrations but filter out ones that add overhead without benefit
-    // Important: Don't use defaultIntegrations: false as it may break debug ID support
+    // Keep default integrations but filter out ones that add overhead without benefit.
+    // Important: Don't use defaultIntegrations: false as it may break debug ID support.
+    // NodeSystemError is excluded on runtimes missing util.getSystemErrorMap (Bun) — CLI-K1.
     integrations: (defaults) =>
       defaults.filter(
-        (integration) => !EXCLUDED_INTEGRATIONS.has(integration.name)
+        (integration) =>
+          !EXCLUDED_INTEGRATIONS.has(integration.name) &&
+          (integration.name !== "NodeSystemError" || hasGetSystemErrorMap)
       ),
     environment,
     // Enable Sentry structured logs for non-exception telemetry (e.g., unexpected input warnings)

test/commands/api.property.test.ts

@@ -211,6 +211,31 @@ describe("normalizeEndpoint properties", () => {
       { numRuns: DEFAULT_NUM_RUNS }
     );
   });
+
+  test("api/0/ prefix is always stripped (CLI-K1)", async () => {
+    await fcAssert(
+      property(simplePathArb, (path) => {
+        const withPrefix = `api/0/${path}`;
+        const withoutPrefix = path;
+
+        const resultWith = normalizeEndpoint(withPrefix);
+        const resultWithout = normalizeEndpoint(withoutPrefix);
+
+        expect(resultWith).toBe(resultWithout);
+      }),
+      { numRuns: DEFAULT_NUM_RUNS }
+    );
+  });
+
+  test("result never starts with api/0/ (CLI-K1)", async () => {
+    await fcAssert(
+      property(endpointArb, (endpoint) => {
+        const result = normalizeEndpoint(endpoint);
+        expect(result.startsWith("api/0/")).toBe(false);
+      }),
+      { numRuns: DEFAULT_NUM_RUNS }
+    );
+  });
 });
 
 describe("parseMethod properties", () => {

test/commands/api.test.ts

@@ -55,6 +55,45 @@ describe("normalizeEndpoint edge cases", () => {
   });
 });
 
+describe("normalizeEndpoint: api/0/ prefix stripping (CLI-K1)", () => {
+  test("strips api/0/ prefix to avoid doubled path", () => {
+    expect(normalizeEndpoint("api/0/projects/my-org/my-project/")).toBe(
+      "projects/my-org/my-project/"
+    );
+  });
+
+  test("strips /api/0/ prefix with leading slash", () => {
+    expect(normalizeEndpoint("/api/0/projects/my-org/my-project/")).toBe(
+      "projects/my-org/my-project/"
+    );
+  });
+
+  test("strips api/0/ prefix and adds trailing slash", () => {
+    expect(normalizeEndpoint("api/0/organizations/my-org/issues")).toBe(
+      "organizations/my-org/issues/"
+    );
+  });
+
+  test("strips api/0/ prefix with query string", () => {
+    expect(
+      normalizeEndpoint(
+        "api/0/projects/my-org/my-proj/environments/?visibility=visible"
+      )
+    ).toBe("projects/my-org/my-proj/environments/?visibility=visible");
+  });
+
+  test("strips bare api/0 for idempotency", () => {
+    // "api/0" → "/" so that normalizing twice is stable
+    expect(normalizeEndpoint("api/0")).toBe("/");
+  });
+
+  test("does not strip partial api/ prefix", () => {
+    expect(normalizeEndpoint("api/1/organizations/")).toBe(
+      "api/1/organizations/"
+    );
+  });
+});
+
 describe("normalizeEndpoint: path traversal hardening (#350)", () => {
   test("rejects bare .. traversal", () => {
     expect(() => normalizeEndpoint("..")).toThrow(/path traversal/);