@glasstrace/sdk 0.18.0 → 0.20.0

package/README.md

@@ -155,6 +155,85 @@ GLASSTRACE_SUPPRESS_ACTION_NUDGE=1
 The nudge never fires in production (detected via `NODE_ENV` or
 `VERCEL_ENV`) unless `GLASSTRACE_FORCE_ENABLE=true` is also set.
 
+## Browser-extension discovery
+
+`glasstrace init` writes a small static file at
+`public/.well-known/glasstrace.json` (or `static/.well-known/glasstrace.json`
+on SvelteKit) so the Glasstrace browser extension can discover your
+project's anonymous key without a runtime HTTP handler. The file
+contains only a schema version and the project's anonymous key — it
+is public metadata, not a secret, and should be committed to source
+control alongside the rest of your project.
+
+The SDK no longer requires `createDiscoveryHandler` to be wired into
+your server. If you previously registered the handler (for example,
+inside `middleware.ts` or `proxy.ts` on Next.js), you can remove the
+handler code and the extension will read the static file instead.
+
+### Migration: removing the runtime discovery handler
+
+**Next.js 15 and earlier (`middleware.ts`):**
+
+```ts
+// Before: middleware.ts
+import { createDiscoveryHandler } from "@glasstrace/sdk";
+import { NextResponse } from "next/server";
+
+const discoveryHandler = createDiscoveryHandler(/* getAnonKey */, /* getSessionId */);
+
+export async function middleware(req: Request) {
+  const response = await discoveryHandler(req);
+  if (response !== null) return response;
+  return NextResponse.next();
+}
+```
+
+```ts
+// After: middleware.ts (only the non-Glasstrace logic remains)
+import { NextResponse } from "next/server";
+
+export function middleware(_req: Request) {
+  return NextResponse.next();
+}
+```
+
+**Next.js 16 and later (`proxy.ts`):**
+
+Next.js 16 replaces `middleware.ts` with `proxy.ts`. If your project
+invoked the discovery handler from `middleware.ts`, migrate it to the
+new file convention and drop the handler in the same edit:
+
+```ts
+// Before: proxy.ts (Next 16+)
+import { createDiscoveryHandler } from "@glasstrace/sdk";
+import { NextResponse } from "next/server";
+
+const discoveryHandler = createDiscoveryHandler(/* getAnonKey */, /* getSessionId */);
+
+export async function proxy(req: Request) {
+  const response = await discoveryHandler(req);
+  if (response !== null) return response;
+  return NextResponse.next();
+}
+```
+
+```ts
+// After: proxy.ts (Next 16+)
+import { NextResponse } from "next/server";
+
+export function proxy(_req: Request) {
+  return NextResponse.next();
+}
+```
+
+If `proxy.ts` no longer does anything else, you can delete it entirely.
+
+`createDiscoveryHandler` remains available for one more major version
+to avoid breaking integrations that depend on it, but it now prints a
+one-time deprecation warning on first use and will be removed in
+`v1.0.0`. Run `npx glasstrace init` after upgrading to generate the
+static file.
+
 ## Security
 
 The SDK transmits your API key exclusively via the `Authorization: Bearer`

package/dist/{chunk-GSGX76Q5.js → chunk-5N2IR4EO.js}

@@ -13953,10 +13953,152 @@ var DEFAULT_CAPTURE_CONFIG = {
   consoleErrors: false,
   errorResponseBodies: false
 };
+var K = new Uint32Array([
+  1116352408,
+  1899447441,
+  3049323471,
+  3921009573,
+  961987163,
+  1508970993,
+  2453635748,
+  2870763221,
+  3624381080,
+  310598401,
+  607225278,
+  1426881987,
+  1925078388,
+  2162078206,
+  2614888103,
+  3248222580,
+  3835390401,
+  4022224774,
+  264347078,
+  604807628,
+  770255983,
+  1249150122,
+  1555081692,
+  1996064986,
+  2554220882,
+  2821834349,
+  2952996808,
+  3210313671,
+  3336571891,
+  3584528711,
+  113926993,
+  338241895,
+  666307205,
+  773529912,
+  1294757372,
+  1396182291,
+  1695183700,
+  1986661051,
+  2177026350,
+  2456956037,
+  2730485921,
+  2820302411,
+  3259730800,
+  3345764771,
+  3516065817,
+  3600352804,
+  4094571909,
+  275423344,
+  430227734,
+  506948616,
+  659060556,
+  883997877,
+  958139571,
+  1322822218,
+  1537002063,
+  1747873779,
+  1955562222,
+  2024104815,
+  2227730452,
+  2361852424,
+  2428436474,
+  2756734187,
+  3204031479,
+  3329325298
+]);
+function rotr(x, n) {
+  return (x >>> n | x << 32 - n) >>> 0;
+}
+function sha256Hex(input) {
+  const message = new TextEncoder().encode(input);
+  const bitLength = message.length * 8;
+  const paddedLength = Math.ceil((message.length + 9) / 64) * 64;
+  const padded = new Uint8Array(paddedLength);
+  padded.set(message);
+  padded[message.length] = 128;
+  const view = new DataView(padded.buffer);
+  view.setUint32(paddedLength - 8, Math.floor(bitLength / 4294967296), false);
+  view.setUint32(paddedLength - 4, bitLength >>> 0, false);
+  const H = new Uint32Array([
+    1779033703,
+    3144134277,
+    1013904242,
+    2773480762,
+    1359893119,
+    2600822924,
+    528734635,
+    1541459225
+  ]);
+  const W = new Uint32Array(64);
+  for (let offset = 0; offset < paddedLength; offset += 64) {
+    for (let i = 0; i < 16; i++) {
+      W[i] = view.getUint32(offset + i * 4, false);
+    }
+    for (let i = 16; i < 64; i++) {
+      const s0 = rotr(W[i - 15], 7) ^ rotr(W[i - 15], 18) ^ W[i - 15] >>> 3;
+      const s1 = rotr(W[i - 2], 17) ^ rotr(W[i - 2], 19) ^ W[i - 2] >>> 10;
+      W[i] = W[i - 16] + s0 + W[i - 7] + s1 >>> 0;
+    }
+    let a = H[0];
+    let b = H[1];
+    let c = H[2];
+    let d = H[3];
+    let e = H[4];
+    let f = H[5];
+    let g = H[6];
+    let h = H[7];
+    for (let i = 0; i < 64; i++) {
+      const S1 = rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25);
+      const ch = e & f ^ ~e & g;
+      const temp1 = h + S1 + ch + K[i] + W[i] >>> 0;
+      const S0 = rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22);
+      const maj = a & b ^ a & c ^ b & c;
+      const temp2 = S0 + maj >>> 0;
+      h = g;
+      g = f;
+      f = e;
+      e = d + temp1 >>> 0;
+      d = c;
+      c = b;
+      b = a;
+      a = temp1 + temp2 >>> 0;
+    }
+    H[0] = H[0] + a >>> 0;
+    H[1] = H[1] + b >>> 0;
+    H[2] = H[2] + c >>> 0;
+    H[3] = H[3] + d >>> 0;
+    H[4] = H[4] + e >>> 0;
+    H[5] = H[5] + f >>> 0;
+    H[6] = H[6] + g >>> 0;
+    H[7] = H[7] + h >>> 0;
+  }
+  let out = "";
+  for (let i = 0; i < 8; i++) {
+    out += H[i].toString(16).padStart(8, "0");
+  }
+  return out;
+}
+function deriveSessionId(apiKey, origin, date5, windowIndex) {
+  const input = JSON.stringify([apiKey, origin, date5, windowIndex]);
+  const digest = sha256Hex(input).slice(0, 16);
+  return SessionIdSchema.parse(digest);
+}
 
 export {
   AnonApiKeySchema,
-  SessionIdSchema,
   createAnonApiKey,
   createBuildHash,
   SdkCachedConfigSchema,
@@ -13965,6 +14107,7 @@ export {
   PresignedUploadResponseSchema,
   SourceMapManifestResponseSchema,
   GLASSTRACE_ATTRIBUTE_NAMES,
-  DEFAULT_CAPTURE_CONFIG
+  DEFAULT_CAPTURE_CONFIG,
+  deriveSessionId
 };
-//# sourceMappingURL=chunk-GSGX76Q5.js.map
+//# sourceMappingURL=chunk-5N2IR4EO.js.map