@glasstrace/sdk 0.4.2 → 0.7.1

package/dist/cli/mcp-add.js

@@ -9,7 +9,7 @@ import {
 } from "../chunk-PLJVIWHN.js";
 import {
   readAnonKey
-} from "../chunk-TVOYTJ7I.js";
+} from "../chunk-QW6W4CSA.js";
 import "../chunk-PZ5AY32C.js";
 
 // src/cli/mcp-add.ts

package/dist/index.cjs

@@ -1617,6 +1617,7 @@ var src_exports = {};
 __export(src_exports, {
   GlasstraceExporter: () => GlasstraceExporter,
   GlasstraceSpanProcessor: () => GlasstraceSpanProcessor,
+  PRESIGNED_THRESHOLD_BYTES: () => PRESIGNED_THRESHOLD_BYTES,
   SdkError: () => SdkError,
   SessionManager: () => SessionManager,
   buildImportGraph: () => buildImportGraph,
@@ -1644,6 +1645,8 @@ __export(src_exports, {
   saveCachedConfig: () => saveCachedConfig,
   sendInitRequest: () => sendInitRequest,
   uploadSourceMaps: () => uploadSourceMaps,
+  uploadSourceMapsAuto: () => uploadSourceMapsAuto,
+  uploadSourceMapsPresigned: () => uploadSourceMapsPresigned,
   withGlasstraceConfig: () => withGlasstraceConfig
 });
 module.exports = __toCommonJS(src_exports);
@@ -15556,7 +15559,12 @@ var SdkInitResponseSchema = external_exports.object({
   linkedAccountId: external_exports.string().uuid().optional(),
   minimumSdkVersion: external_exports.string(),
   apiVersion: external_exports.string(),
-  tierLimits: TierLimitsSchema
+  tierLimits: TierLimitsSchema,
+  claimResult: external_exports.object({
+    newApiKey: DevApiKeySchema,
+    accountId: external_exports.string().uuid(),
+    graceExpiresAt: external_exports.number().int().positive()
+  }).optional()
 });
 var DiscoveryResponseSchema = external_exports.object({
   key: AnonApiKeySchema,
@@ -15568,6 +15576,45 @@ var SourceMapUploadResponseSchema = external_exports.object({
   fileCount: external_exports.number().int().nonnegative(),
   totalSizeBytes: external_exports.number().int().nonnegative()
 });
+var PresignedUploadRequestSchema = external_exports.object({
+  buildHash: BuildHashSchema,
+  files: external_exports.array(
+    external_exports.object({
+      filePath: external_exports.string().min(1),
+      sizeBytes: external_exports.number().int().positive()
+    })
+  ).min(1).max(100)
+});
+var PresignedUploadResponseSchema = external_exports.object({
+  uploadId: external_exports.string().uuid(),
+  expiresAt: external_exports.number().int().positive(),
+  files: external_exports.array(
+    external_exports.object({
+      filePath: external_exports.string().min(1),
+      clientToken: external_exports.string().min(1),
+      pathname: external_exports.string().min(1),
+      maxBytes: external_exports.number().int().positive()
+    })
+  ).min(1).max(100)
+});
+var SourceMapManifestRequestSchema = external_exports.object({
+  uploadId: external_exports.string().uuid(),
+  buildHash: BuildHashSchema,
+  files: external_exports.array(
+    external_exports.object({
+      filePath: external_exports.string().min(1),
+      sizeBytes: external_exports.number().int().positive(),
+      blobUrl: external_exports.string().url()
+    })
+  ).min(1).max(100)
+});
+var SourceMapManifestResponseSchema = external_exports.object({
+  success: external_exports.literal(true),
+  buildHash: BuildHashSchema,
+  fileCount: external_exports.number().int().nonnegative(),
+  totalSizeBytes: external_exports.number().int().nonnegative(),
+  activatedAt: external_exports.number().int().positive()
+});
 var GLASSTRACE_ATTRIBUTE_NAMES = {
   // Server-side attributes
   TRACE_TYPE: "glasstrace.trace.type",
@@ -15803,12 +15850,14 @@ async function saveCachedConfig(response, projectRoot) {
   const dirPath = (0, import_node_path2.join)(root, GLASSTRACE_DIR2);
   const configPath = (0, import_node_path2.join)(dirPath, CONFIG_FILE);
   try {
-    await (0, import_promises2.mkdir)(dirPath, { recursive: true });
+    await (0, import_promises2.mkdir)(dirPath, { recursive: true, mode: 448 });
+    await (0, import_promises2.chmod)(dirPath, 448);
     const cached2 = {
       response,
       cachedAt: Date.now()
     };
-    await (0, import_promises2.writeFile)(configPath, JSON.stringify(cached2), "utf-8");
+    await (0, import_promises2.writeFile)(configPath, JSON.stringify(cached2), { encoding: "utf-8", mode: 384 });
+    await (0, import_promises2.chmod)(configPath, 384);
   } catch (err) {
     console.warn(
       `[glasstrace] Failed to cache config to ${configPath}: ${err instanceof Error ? err.message : String(err)}`
@@ -15861,16 +15910,88 @@ async function sendInitRequest(config2, anonKey, sdkVersion, importGraph, health
   const body = await response.json();
   return SdkInitResponseSchema.parse(body);
 }
+async function writeClaimedKey(newApiKey, projectRoot) {
+  const root = projectRoot ?? process.cwd();
+  const envLocalPath = (0, import_node_path2.join)(root, ".env.local");
+  let envLocalWritten = false;
+  try {
+    let content;
+    try {
+      content = await (0, import_promises2.readFile)(envLocalPath, "utf-8");
+      if (/^GLASSTRACE_API_KEY=.*/m.test(content)) {
+        content = content.replace(
+          /^GLASSTRACE_API_KEY=.*$/gm,
+          `GLASSTRACE_API_KEY=${newApiKey}`
+        );
+      } else {
+        if (content.length > 0 && !content.endsWith("\n")) {
+          content += "\n";
+        }
+        content += `GLASSTRACE_API_KEY=${newApiKey}
+`;
+      }
+    } catch (readErr) {
+      const code = readErr instanceof Error ? readErr.code : void 0;
+      if (code !== "ENOENT") {
+        throw readErr;
+      }
+      content = `GLASSTRACE_API_KEY=${newApiKey}
+`;
+    }
+    await (0, import_promises2.writeFile)(envLocalPath, content, { encoding: "utf-8", mode: 384 });
+    await (0, import_promises2.chmod)(envLocalPath, 384);
+    envLocalWritten = true;
+  } catch {
+  }
+  if (envLocalWritten) {
+    try {
+      process.stderr.write(
+        "[glasstrace] Account claimed! API key written to .env.local. Restart your dev server to use it.\n"
+      );
+    } catch {
+    }
+    return;
+  }
+  let claimedKeyWritten = false;
+  try {
+    const dirPath = (0, import_node_path2.join)(root, GLASSTRACE_DIR2);
+    await (0, import_promises2.mkdir)(dirPath, { recursive: true, mode: 448 });
+    await (0, import_promises2.chmod)(dirPath, 448);
+    const claimedKeyPath = (0, import_node_path2.join)(dirPath, "claimed-key");
+    await (0, import_promises2.writeFile)(claimedKeyPath, newApiKey, {
+      encoding: "utf-8",
+      mode: 384
+    });
+    await (0, import_promises2.chmod)(claimedKeyPath, 384);
+    claimedKeyWritten = true;
+  } catch {
+  }
+  if (claimedKeyWritten) {
+    try {
+      process.stderr.write(
+        "[glasstrace] Account claimed! API key written to .glasstrace/claimed-key. Copy it to your .env.local file.\n"
+      );
+    } catch {
+    }
+    return;
+  }
+  try {
+    process.stderr.write(
+      "[glasstrace] Account claimed but could not write key to disk. Visit your dashboard settings to rotate and retrieve a new API key.\n"
+    );
+  } catch {
+  }
+}
 async function performInit(config2, anonKey, sdkVersion) {
   if (rateLimitBackoff) {
     rateLimitBackoff = false;
-    return;
+    return null;
   }
   try {
     const effectiveKey = config2.apiKey || anonKey;
     if (!effectiveKey) {
       console.warn("[glasstrace] No API key available for init request.");
-      return;
+      return null;
     }
     const controller = new AbortController();
     const timeoutId = setTimeout(() => controller.abort(), INIT_TIMEOUT_MS);
@@ -15887,45 +16008,55 @@ async function performInit(config2, anonKey, sdkVersion) {
       clearTimeout(timeoutId);
       currentConfig = result;
       await saveCachedConfig(result);
+      if (result.claimResult) {
+        try {
+          await writeClaimedKey(result.claimResult.newApiKey);
+        } catch {
+        }
+        return { claimResult: result.claimResult };
+      }
+      return null;
     } catch (err) {
       clearTimeout(timeoutId);
       if (err instanceof DOMException && err.name === "AbortError") {
         console.warn("[glasstrace] ingestion_unreachable: Init request timed out.");
-        return;
+        return null;
       }
       const status = err.status;
       if (status === 401) {
         console.warn(
           "[glasstrace] ingestion_auth_failed: Check your GLASSTRACE_API_KEY."
         );
-        return;
+        return null;
       }
       if (status === 429) {
         console.warn("[glasstrace] ingestion_rate_limited: Backing off.");
         rateLimitBackoff = true;
-        return;
+        return null;
       }
       if (typeof status === "number" && status >= 400) {
         console.warn(
           `[glasstrace] Init request failed with status ${status}. Using cached config.`
         );
-        return;
+        return null;
       }
       if (err instanceof Error && err.name === "ZodError") {
         console.warn(
           "[glasstrace] Init response failed validation (schema version mismatch?). Using cached config."
         );
-        return;
+        return null;
       }
       console.warn(
         `[glasstrace] ingestion_unreachable: ${err instanceof Error ? err.message : String(err)}`
       );
+      return null;
     }
   } catch (err) {
     console.warn(
       `[glasstrace] Unexpected init error: ${err instanceof Error ? err.message : String(err)}`
     );
   }
+  return null;
 }
 function getActiveConfig() {
   if (currentConfig) {
@@ -19066,6 +19197,14 @@ async function installConsoleCapture() {
     }
   };
 }
+function sdkLog(level, message) {
+  isGlasstraceLog = true;
+  try {
+    console[level](message);
+  } finally {
+    isGlasstraceLog = false;
+  }
+}
 
 // src/register.ts
 var consoleCaptureInstalled = false;
@@ -19155,7 +19294,11 @@ function registerGlasstrace(options) {
             if (config2.verbose) {
               console.info("[glasstrace] Background init firing.");
             }
-            await performInit(config2, anonKey, "0.4.2");
+            const initResult = await performInit(config2, anonKey, "0.7.1");
+            if (initResult?.claimResult) {
+              setResolvedApiKey(initResult.claimResult.newApiKey);
+              notifyApiKeyResolved();
+            }
             maybeInstallConsoleCapture();
           } catch (err) {
             console.warn(
@@ -19175,7 +19318,11 @@ function registerGlasstrace(options) {
             if (config2.verbose) {
               console.info("[glasstrace] Background init firing.");
             }
-            await performInit(config2, anonKey, "0.4.2");
+            const initResult = await performInit(config2, anonKey, "0.7.1");
+            if (initResult?.claimResult) {
+              setResolvedApiKey(initResult.claimResult.newApiKey);
+              notifyApiKeyResolved();
+            }
             maybeInstallConsoleCapture();
           } catch (err) {
             console.warn(
@@ -19197,7 +19344,7 @@ function registerGlasstrace(options) {
           if (config2.verbose) {
             console.info("[glasstrace] Background init firing.");
           }
-          await performInit(config2, anonKeyForInit, "0.4.2");
+          await performInit(config2, anonKeyForInit, "0.7.1");
           maybeInstallConsoleCapture();
         } catch (err) {
           console.warn(
@@ -19296,10 +19443,7 @@ async function uploadSourceMaps(apiKey, endpoint, buildHash, maps) {
       sourceMap: m.content
     }))
   };
-  let baseUrl = endpoint;
-  while (baseUrl.endsWith("/")) {
-    baseUrl = baseUrl.slice(0, -1);
-  }
+  const baseUrl = stripTrailingSlashes(endpoint);
   const response = await fetch(`${baseUrl}/v1/source-maps`, {
     method: "POST",
     headers: {
@@ -19320,6 +19464,155 @@ async function uploadSourceMaps(apiKey, endpoint, buildHash, maps) {
   const json2 = await response.json();
   return SourceMapUploadResponseSchema.parse(json2);
 }
+var PRESIGNED_THRESHOLD_BYTES = 45e5;
+function stripTrailingSlashes(url2) {
+  let result = url2;
+  while (result.endsWith("/")) {
+    result = result.slice(0, -1);
+  }
+  return result;
+}
+async function requestPresignedTokens(apiKey, endpoint, buildHash, files) {
+  const baseUrl = stripTrailingSlashes(endpoint);
+  const response = await fetch(`${baseUrl}/v1/source-maps/presign`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${apiKey}`
+    },
+    body: JSON.stringify({ buildHash, files })
+  });
+  if (!response.ok) {
+    try {
+      await response.text();
+    } catch {
+    }
+    throw new Error(
+      `Presigned token request failed: ${String(response.status)} ${response.statusText}`
+    );
+  }
+  const json2 = await response.json();
+  return PresignedUploadResponseSchema.parse(json2);
+}
+async function uploadToBlob(clientToken, pathname, content) {
+  let mod;
+  try {
+    mod = await import("@vercel/blob/client");
+  } catch (err) {
+    const code = err.code;
+    if (code === "ERR_MODULE_NOT_FOUND" || code === "MODULE_NOT_FOUND") {
+      throw new Error(
+        "Presigned upload requires @vercel/blob. Install it: npm install @vercel/blob"
+      );
+    }
+    throw err;
+  }
+  const result = await mod.put(pathname, new Blob([content]), {
+    access: "public",
+    token: clientToken
+  });
+  return { url: result.url, size: Buffer.byteLength(content, "utf-8") };
+}
+async function submitManifest(apiKey, endpoint, uploadId, buildHash, files) {
+  const baseUrl = stripTrailingSlashes(endpoint);
+  const response = await fetch(`${baseUrl}/v1/source-maps/manifest`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${apiKey}`
+    },
+    body: JSON.stringify({ uploadId, buildHash, files })
+  });
+  if (!response.ok) {
+    try {
+      await response.text();
+    } catch {
+    }
+    throw new Error(
+      `Source map manifest submission failed: ${String(response.status)} ${response.statusText}`
+    );
+  }
+  const json2 = await response.json();
+  return SourceMapManifestResponseSchema.parse(json2);
+}
+async function uploadSourceMapsPresigned(apiKey, endpoint, buildHash, maps, blobUploader = uploadToBlob) {
+  if (maps.length === 0) {
+    throw new Error("No source maps to upload");
+  }
+  const presigned = await requestPresignedTokens(
+    apiKey,
+    endpoint,
+    buildHash,
+    maps.map((m) => ({
+      filePath: m.filePath,
+      sizeBytes: Buffer.byteLength(m.content, "utf-8")
+    }))
+  );
+  const mapsByPath = new Map(maps.map((m) => [m.filePath, m]));
+  if (mapsByPath.size !== maps.length) {
+    throw new Error("Duplicate filePath entries in source maps");
+  }
+  for (const token of presigned.files) {
+    if (!mapsByPath.has(token.filePath)) {
+      throw new Error(
+        `Presigned token for "${token.filePath}" has no matching source map entry`
+      );
+    }
+  }
+  const CONCURRENCY = 5;
+  const uploadResults = [];
+  for (let i = 0; i < presigned.files.length; i += CONCURRENCY) {
+    const chunk = presigned.files.slice(i, i + CONCURRENCY);
+    const chunkResults = await Promise.all(
+      chunk.map(async (token) => {
+        const entry = mapsByPath.get(token.filePath);
+        const result = await blobUploader(token.clientToken, token.pathname, entry.content);
+        return {
+          filePath: token.filePath,
+          sizeBytes: result.size,
+          blobUrl: result.url
+        };
+      })
+    );
+    uploadResults.push(...chunkResults);
+  }
+  return submitManifest(apiKey, endpoint, presigned.uploadId, buildHash, uploadResults);
+}
+async function uploadSourceMapsAuto(apiKey, endpoint, buildHash, maps, options) {
+  if (maps.length === 0) {
+    throw new Error("No source maps to upload");
+  }
+  const totalBytes = maps.reduce(
+    (sum, m) => sum + Buffer.byteLength(m.content, "utf-8"),
+    0
+  );
+  if (totalBytes < PRESIGNED_THRESHOLD_BYTES) {
+    return uploadSourceMaps(apiKey, endpoint, buildHash, maps);
+  }
+  const checkAvailable = options?.checkBlobAvailable ?? (async () => {
+    try {
+      await import("@vercel/blob/client");
+      return true;
+    } catch {
+      return false;
+    }
+  });
+  const blobAvailable = await checkAvailable();
+  if (blobAvailable) {
+    return uploadSourceMapsPresigned(
+      apiKey,
+      endpoint,
+      buildHash,
+      maps,
+      options?.blobUploader
+    );
+  }
+  sdkLog(
+    "warn",
+    `[glasstrace] Build exceeds 4.5MB (${totalBytes} bytes). Install @vercel/blob for presigned uploads to avoid serverless body size limits. Falling back to legacy upload.`
+  );
+  return uploadSourceMaps(apiKey, endpoint, buildHash, maps);
+}
 
 // src/config-wrapper.ts
 function withGlasstraceConfig(nextConfig) {
@@ -19609,6 +19902,7 @@ async function buildImportGraph(projectRoot) {
 0 && (module.exports = {
   GlasstraceExporter,
   GlasstraceSpanProcessor,
+  PRESIGNED_THRESHOLD_BYTES,
   SdkError,
   SessionManager,
   buildImportGraph,
@@ -19636,6 +19930,8 @@ async function buildImportGraph(projectRoot) {
   saveCachedConfig,
   sendInitRequest,
   uploadSourceMaps,
+  uploadSourceMapsAuto,
+  uploadSourceMapsPresigned,
   withGlasstraceConfig
 });
 //# sourceMappingURL=index.cjs.map