From dded3087db63a0af58e24c0c9f8509d38dd76093 Mon Sep 17 00:00:00 2001
From: Gio Lodi <gio@mokacoding.com>
Date: Tue, 18 Aug 2026 21:06:54 +1000
Subject: [PATCH] Add throwaway step to verify the Sentry upload

Every PR build passes `-PskipSentryProguardMappingUpload=true`, so the upload
tasks are never registered and #5708's new token wiring is never exercised.
Without this, the first real test is the next code freeze.

All three modules run because each declares its own Sentry project slug, newly
inlined in #5708, and the token has to authenticate against all of them.

---

Generated with the help of Claude Code, https://claude.ai/code

Co-Authored-By: Claude Code Opus 5 <noreply@anthropic.com>
---
 .buildkite/commands/verify-sentry-upload.sh | 34 +++++++++++++++++++++
 .buildkite/pipeline.yml                     |  5 +++
 2 files changed, 39 insertions(+)
 create mode 100755 .buildkite/commands/verify-sentry-upload.sh

diff --git a/.buildkite/commands/verify-sentry-upload.sh b/.buildkite/commands/verify-sentry-upload.sh
new file mode 100755
index 00000000000..500aa7870a3
--- /dev/null
+++ b/.buildkite/commands/verify-sentry-upload.sh
@@ -0,0 +1,34 @@
+#!/bin/bash -eu
+
+# Throwaway: proves the Sentry mapping upload works with the auth token coming from the
+# environment rather than `secret.properties`. No other CI job uploads, because they all
+# pass `-PskipSentryProguardMappingUpload=true`.
+# Delete this script and its pipeline step once AINFRA-2790 is verified.
+
+"$(dirname "${BASH_SOURCE[0]}")/restore-cache.sh"
+
+echo "--- :rubygems: Setting up Gems"
+
+install_gems
+
+echo "--- :closed_lock_with_key: Installing Secrets"
+
+bundle exec fastlane run configure_apply
+
+echo "--- :key: Checking SENTRY_AUTH_TOKEN"
+
+if [ -n "${SENTRY_AUTH_TOKEN:-}" ]; then
+  echo "SENTRY_AUTH_TOKEN is present"
+else
+  echo "SENTRY_AUTH_TOKEN is absent"
+fi
+
+# Minifies with R8 to produce each mapping, then uploads it. Deliberately not `assembleRelease`:
+# packaging and signing are not needed. All three modules run because each declares its own
+# Sentry project slug, and the token has to authenticate against all of them.
+echo "--- :sentry: Uploading ProGuard mappings"
+
+./gradlew \
+  :app:uploadSentryProguardMappingsRelease \
+  :automotive:uploadSentryProguardMappingsRelease \
+  :wear:uploadSentryProguardMappingsRelease
diff --git a/.buildkite/pipeline.yml b/.buildkite/pipeline.yml
index 2d91b0c49bf..fe2c8fc3329 100644
--- a/.buildkite/pipeline.yml
+++ b/.buildkite/pipeline.yml
@@ -87,6 +87,11 @@ steps:
         artifact_paths:
           - "**/build/outputs/apk/**/*"
 
+  # Throwaway, delete with `.buildkite/commands/verify-sentry-upload.sh`.
+  - label: ":sentry: Verify Sentry Upload"
+    command: ".buildkite/commands/verify-sentry-upload.sh"
+    plugins: [ $CI_TOOLKIT ]
+
     ##########
     # Optional Prototype Builds
     #