@glasstrace/sdk 0.9.0 → 0.10.0

package/dist/chunk-ZRNG36LU.js

@@ -0,0 +1,77 @@
+import {
+  AnonApiKeySchema,
+  createAnonApiKey
+} from "./chunk-O3Y45VGV.js";
+
+// src/anon-key.ts
+import { readFile, writeFile, mkdir, chmod } from "fs/promises";
+import { join } from "path";
+var GLASSTRACE_DIR = ".glasstrace";
+var ANON_KEY_FILE = "anon_key";
+var ephemeralKeyCache = /* @__PURE__ */ new Map();
+async function readAnonKey(projectRoot) {
+  const root = projectRoot ?? process.cwd();
+  const keyPath = join(root, GLASSTRACE_DIR, ANON_KEY_FILE);
+  try {
+    const content = await readFile(keyPath, "utf-8");
+    const result = AnonApiKeySchema.safeParse(content);
+    if (result.success) {
+      return result.data;
+    }
+  } catch {
+  }
+  const cached = ephemeralKeyCache.get(root);
+  if (cached !== void 0) {
+    return cached;
+  }
+  return null;
+}
+async function getOrCreateAnonKey(projectRoot) {
+  const root = projectRoot ?? process.cwd();
+  const dirPath = join(root, GLASSTRACE_DIR);
+  const keyPath = join(dirPath, ANON_KEY_FILE);
+  const existingKey = await readAnonKey(root);
+  if (existingKey !== null) {
+    return existingKey;
+  }
+  const cached = ephemeralKeyCache.get(root);
+  if (cached !== void 0) {
+    return cached;
+  }
+  const newKey = createAnonApiKey();
+  try {
+    await mkdir(dirPath, { recursive: true, mode: 448 });
+    await writeFile(keyPath, newKey, { flag: "wx", mode: 384 });
+    return newKey;
+  } catch (err) {
+    const code = err.code;
+    if (code === "EEXIST") {
+      for (let attempt = 0; attempt < 3; attempt++) {
+        const winnerKey = await readAnonKey(root);
+        if (winnerKey !== null) {
+          return winnerKey;
+        }
+        if (attempt < 2) {
+          await new Promise((resolve) => setTimeout(resolve, 50));
+        }
+      }
+      try {
+        await writeFile(keyPath, newKey, { mode: 384 });
+        await chmod(keyPath, 384);
+        return newKey;
+      } catch {
+      }
+    }
+    ephemeralKeyCache.set(root, newKey);
+    console.warn(
+      `[glasstrace] Failed to persist anonymous key to ${keyPath}: ${err instanceof Error ? err.message : String(err)}. Using ephemeral key.`
+    );
+    return newKey;
+  }
+}
+
+export {
+  readAnonKey,
+  getOrCreateAnonKey
+};
+//# sourceMappingURL=chunk-ZRNG36LU.js.map

package/dist/chunk-ZRNG36LU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/anon-key.ts"],"sourcesContent":["import { readFile, writeFile, mkdir, chmod } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { AnonApiKeySchema, createAnonApiKey } from \"@glasstrace/protocol\";\nimport type { AnonApiKey } from \"@glasstrace/protocol\";\n\nconst GLASSTRACE_DIR = \".glasstrace\";\nconst ANON_KEY_FILE = \"anon_key\";\n\n/**\n * In-memory cache for ephemeral keys when filesystem persistence fails.\n * Keyed by resolved project root to support multiple roots in tests.\n */\nconst ephemeralKeyCache = new Map<string, AnonApiKey>();\n\n/**\n * Reads an existing anonymous key from the filesystem.\n * Returns the key if valid, or null if:\n * - The file does not exist\n * - The file content is invalid\n * - An I/O error occurs\n */\nexport async function readAnonKey(projectRoot?: string): Promise<AnonApiKey | null> {\n  const root = projectRoot ?? process.cwd();\n  const keyPath = join(root, GLASSTRACE_DIR, ANON_KEY_FILE);\n\n  try {\n    const content = await readFile(keyPath, \"utf-8\");\n    const result = AnonApiKeySchema.safeParse(content);\n    if (result.success) {\n      return result.data;\n    }\n  } catch {\n    // Fall through to check ephemeral cache\n  }\n\n  // Check in-memory cache (used when filesystem persistence failed)\n  const cached = ephemeralKeyCache.get(root);\n  if (cached !== undefined) {\n    return cached;\n  }\n\n  return null;\n}\n\n/**\n * Gets an existing anonymous key from the filesystem, or creates a new one.\n *\n * - If file exists and contains a valid key, returns it\n * - If file does not exist or content is invalid, generates a new key via createAnonApiKey()\n * - Writes the new key to `.glasstrace/anon_key`, creating the directory if needed\n * - On file write failure: logs a warning, caches an ephemeral in-memory key so\n *   repeated calls in the same process return the same key\n */\nexport async function getOrCreateAnonKey(projectRoot?: string): Promise<AnonApiKey> {\n  const root = projectRoot ?? process.cwd();\n  const dirPath = join(root, GLASSTRACE_DIR);\n  const keyPath = join(dirPath, ANON_KEY_FILE);\n\n  // Try reading existing key from filesystem\n  const existingKey = await readAnonKey(root);\n  if (existingKey !== null) {\n    return existingKey;\n  }\n\n  // Check in-memory cache (used when filesystem is unavailable)\n  const cached = ephemeralKeyCache.get(root);\n  if (cached !== undefined) {\n    return cached;\n  }\n\n  // Generate a new key\n  const newKey = createAnonApiKey();\n\n  // Persist to filesystem using atomic create-or-fail (O_CREAT | O_EXCL)\n  // to prevent TOCTOU races where concurrent cold starts both generate keys.\n  try {\n    await mkdir(dirPath, { recursive: true, mode: 0o700 });\n    await writeFile(keyPath, newKey, { flag: \"wx\", mode: 0o600 });\n    return newKey;\n  } catch (err) {\n    const code = (err as NodeJS.ErrnoException).code;\n    if (code === \"EEXIST\") {\n      // Another process won the race. Retry reading their key with\n      // short delays — the winner's writeFile is atomic for small\n      // payloads but the filesystem may not have flushed yet.\n      for (let attempt = 0; attempt < 3; attempt++) {\n        const winnerKey = await readAnonKey(root);\n        if (winnerKey !== null) {\n          return winnerKey;\n        }\n        // Short delay before next retry (50ms), skip after final attempt\n        if (attempt < 2) {\n          await new Promise((resolve) => setTimeout(resolve, 50));\n        }\n      }\n      // All retries exhausted — overwrite as last resort.\n      // Use explicit chmod after overwrite since writeFile mode only\n      // applies on creation on some platforms.\n      try {\n        await writeFile(keyPath, newKey, { mode: 0o600 });\n        await chmod(keyPath, 0o600);\n        return newKey;\n      } catch {\n        // Overwrite failed — fall through to ephemeral cache\n      }\n    }\n\n    // Non-EEXIST error (EACCES, ENOTDIR, etc.) — cache in memory so\n    // repeated calls get the same ephemeral key within this process.\n    ephemeralKeyCache.set(root, newKey);\n    console.warn(\n      `[glasstrace] Failed to persist anonymous key to ${keyPath}: ${err instanceof Error ? err.message : String(err)}. Using ephemeral key.`,\n    );\n    return newKey;\n  }\n}\n"],"mappings":";;;;;;AAAA,SAAS,UAAU,WAAW,OAAO,aAAa;AAClD,SAAS,YAAY;AAIrB,IAAM,iBAAiB;AACvB,IAAM,gBAAgB;AAMtB,IAAM,oBAAoB,oBAAI,IAAwB;AAStD,eAAsB,YAAY,aAAkD;AAClF,QAAM,OAAO,eAAe,QAAQ,IAAI;AACxC,QAAM,UAAU,KAAK,MAAM,gBAAgB,aAAa;AAExD,MAAI;AACF,UAAM,UAAU,MAAM,SAAS,SAAS,OAAO;AAC/C,UAAM,SAAS,iBAAiB,UAAU,OAAO;AACjD,QAAI,OAAO,SAAS;AAClB,aAAO,OAAO;AAAA,IAChB;AAAA,EACF,QAAQ;AAAA,EAER;AAGA,QAAM,SAAS,kBAAkB,IAAI,IAAI;AACzC,MAAI,WAAW,QAAW;AACxB,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAWA,eAAsB,mBAAmB,aAA2C;AAClF,QAAM,OAAO,eAAe,QAAQ,IAAI;AACxC,QAAM,UAAU,KAAK,MAAM,cAAc;AACzC,QAAM,UAAU,KAAK,SAAS,aAAa;AAG3C,QAAM,cAAc,MAAM,YAAY,IAAI;AAC1C,MAAI,gBAAgB,MAAM;AACxB,WAAO;AAAA,EACT;AAGA,QAAM,SAAS,kBAAkB,IAAI,IAAI;AACzC,MAAI,WAAW,QAAW;AACxB,WAAO;AAAA,EACT;AAGA,QAAM,SAAS,iBAAiB;AAIhC,MAAI;AACF,UAAM,MAAM,SAAS,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACrD,UAAM,UAAU,SAAS,QAAQ,EAAE,MAAM,MAAM,MAAM,IAAM,CAAC;AAC5D,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,UAAM,OAAQ,IAA8B;AAC5C,QAAI,SAAS,UAAU;AAIrB,eAAS,UAAU,GAAG,UAAU,GAAG,WAAW;AAC5C,cAAM,YAAY,MAAM,YAAY,IAAI;AACxC,YAAI,cAAc,MAAM;AACtB,iBAAO;AAAA,QACT;AAEA,YAAI,UAAU,GAAG;AACf,gBAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AAAA,QACxD;AAAA,MACF;AAIA,UAAI;AACF,cAAM,UAAU,SAAS,QAAQ,EAAE,MAAM,IAAM,CAAC;AAChD,cAAM,MAAM,SAAS,GAAK;AAC1B,eAAO;AAAA,MACT,QAAQ;AAAA,MAER;AAAA,IACF;AAIA,sBAAkB,IAAI,MAAM,MAAM;AAClC,YAAQ;AAAA,MACN,mDAAmD,OAAO,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IACjH;AACA,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/cli/init.cjs

@@ -31,6 +31,27 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
+// src/cli/constants.ts
+function formatAgentName(name) {
+  const displayNames = {
+    claude: "Claude Code",
+    codex: "Codex",
+    gemini: "Gemini",
+    cursor: "Cursor",
+    windsurf: "Windsurf",
+    generic: "Generic"
+  };
+  return displayNames[name];
+}
+var MCP_ENDPOINT, NEXT_CONFIG_NAMES;
+var init_constants = __esm({
+  "src/cli/constants.ts"() {
+    "use strict";
+    MCP_ENDPOINT = "https://api.glasstrace.dev/mcp";
+    NEXT_CONFIG_NAMES = ["next.config.ts", "next.config.js", "next.config.mjs"];
+  }
+});
+
 // src/cli/scaffolder.ts
 function identityFingerprint(token) {
   return `sha256:${(0, import_node_crypto.createHash)("sha256").update(token).digest("hex")}`;
@@ -72,7 +93,7 @@ ${indent}registerGlasstrace();
       } else {
         const existingImports = specifiers.trimEnd();
         const separator = existingImports.endsWith(",") ? " " : ", ";
-        const updatedImport = `import {${existingImports}${separator}registerGlasstrace} from "@glasstrace/sdk"`;
+        const updatedImport = `import { ${existingImports.trim()}${separator}registerGlasstrace } from "@glasstrace/sdk"`;
         modified = content.replace(importMatch[0], updatedImport);
         const newMatch = registerFnRegex.exec(modified);
         if (newMatch) {
@@ -275,14 +296,14 @@ async function scaffoldMcpMarker(projectRoot, anonKey) {
   fs.chmodSync(markerPath, 384);
   return true;
 }
-var import_node_crypto, fs, path, NEXT_CONFIG_NAMES;
+var import_node_crypto, fs, path;
 var init_scaffolder = __esm({
   "src/cli/scaffolder.ts"() {
     "use strict";
     import_node_crypto = require("crypto");
     fs = __toESM(require("fs"), 1);
     path = __toESM(require("path"), 1);
-    NEXT_CONFIG_NAMES = ["next.config.ts", "next.config.js", "next.config.mjs"];
+    init_constants();
   }
 });
 
@@ -14859,9 +14880,14 @@ async function getOrCreateAnonKey(projectRoot) {
   } catch (err) {
     const code = err.code;
     if (code === "EEXIST") {
-      const winnerKey = await readAnonKey(root);
-      if (winnerKey !== null) {
-        return winnerKey;
+      for (let attempt = 0; attempt < 3; attempt++) {
+        const winnerKey = await readAnonKey(root);
+        if (winnerKey !== null) {
+          return winnerKey;
+        }
+        if (attempt < 2) {
+          await new Promise((resolve2) => setTimeout(resolve2, 50));
+        }
       }
       try {
         await (0, import_promises.writeFile)(keyPath, newKey, { mode: 384 });
@@ -15075,7 +15101,7 @@ function generateMcpConfig(agent, endpoint, anonKey) {
         2
       );
     case "codex": {
-      const safeEndpoint = endpoint.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+      const safeEndpoint = endpoint.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t");
       return [
         "[mcp_servers.glasstrace]",
         `url = "${safeEndpoint}"`,
@@ -15143,6 +15169,10 @@ function generateMcpConfig(agent, endpoint, anonKey) {
         null,
         2
       );
+    default: {
+      const _exhaustive = agent.name;
+      throw new Error(`Unknown agent: ${_exhaustive}`);
+    }
   }
 }
 function htmlMarkers() {
@@ -15200,6 +15230,10 @@ ${content}${m.end}
     case "windsurf":
     case "generic":
       return "";
+    default: {
+      const _exhaustive = agent.name;
+      throw new Error(`Unknown agent: ${_exhaustive}`);
+    }
   }
 }
 var init_configs = __esm({
@@ -15391,26 +15425,6 @@ var init_inject = __esm({
   }
 });
 
-// src/cli/constants.ts
-function formatAgentName(name) {
-  const displayNames = {
-    claude: "Claude Code",
-    codex: "Codex",
-    gemini: "Gemini",
-    cursor: "Cursor",
-    windsurf: "Windsurf",
-    generic: "Generic"
-  };
-  return displayNames[name];
-}
-var MCP_ENDPOINT;
-var init_constants = __esm({
-  "src/cli/constants.ts"() {
-    "use strict";
-    MCP_ENDPOINT = "https://api.glasstrace.dev/mcp";
-  }
-});
-
 // src/cli/mcp-add.ts
 var mcp_add_exports = {};
 __export(mcp_add_exports, {
@@ -15644,6 +15658,7 @@ var init_mcp_add = __esm({
 // src/cli/uninit.ts
 var uninit_exports = {};
 __export(uninit_exports, {
+  findMatchingDelimiter: () => findMatchingDelimiter,
   findMatchingParen: () => findMatchingParen,
   isInitCreatedInstrumentation: () => isInitCreatedInstrumentation,
   processJsonMcpConfig: () => processJsonMcpConfig,
@@ -15652,23 +15667,64 @@ __export(uninit_exports, {
   removeMarkerSection: () => removeMarkerSection,
   removeRegisterGlasstrace: () => removeRegisterGlasstrace,
   runUninit: () => runUninit,
+  skipString: () => skipString,
   unwrapCJSExport: () => unwrapCJSExport,
   unwrapExport: () => unwrapExport
 });
-function findMatchingParen(text, openPos) {
+function skipString(text, start, quote) {
+  let i = start + 1;
+  while (i < text.length) {
+    if (text[i] === "\\") {
+      i += 2;
+      continue;
+    }
+    if (text[i] === quote) {
+      return i + 1;
+    }
+    i++;
+  }
+  return text.length;
+}
+function findMatchingDelimiter(text, openPos, openChar, closeChar) {
   let depth = 0;
-  for (let i = openPos; i < text.length; i++) {
-    if (text[i] === "(") {
+  let i = openPos;
+  while (i < text.length) {
+    const ch = text[i];
+    if (ch === '"' || ch === "'" || ch === "`") {
+      i = skipString(text, i, ch);
+      continue;
+    }
+    if (ch === "/" && text[i + 1] === "/") {
+      const newline = text.indexOf("\n", i);
+      if (newline === -1) {
+        return -1;
+      }
+      i = newline + 1;
+      continue;
+    }
+    if (ch === "/" && text[i + 1] === "*") {
+      const end = text.indexOf("*/", i + 2);
+      if (end === -1) {
+        return -1;
+      }
+      i = end + 2;
+      continue;
+    }
+    if (ch === openChar) {
       depth++;
-    } else if (text[i] === ")") {
+    } else if (ch === closeChar) {
       depth--;
       if (depth === 0) {
         return i;
       }
     }
+    i++;
   }
   return -1;
 }
+function findMatchingParen(text, openPos) {
+  return findMatchingDelimiter(text, openPos, "(", ")");
+}
 function unwrapExport(content) {
   const pattern = /export\s+default\s+withGlasstraceConfig\s*\(/;
   const match = pattern.exec(content);
@@ -15799,18 +15855,7 @@ function isInitCreatedInstrumentation(content) {
   return topLevelBefore.length === 0 && topLevelAfter.length === 0;
 }
 function findMatchingBrace(text, openPos) {
-  let depth = 0;
-  for (let i = openPos; i < text.length; i++) {
-    if (text[i] === "{") {
-      depth++;
-    } else if (text[i] === "}") {
-      depth--;
-      if (depth === 0) {
-        return i;
-      }
-    }
-  }
-  return -1;
+  return findMatchingDelimiter(text, openPos, "{", "}");
 }
 function removeRegisterGlasstrace(content) {
   let result = content;
@@ -15933,7 +15978,7 @@ async function runUninit(options) {
   const prefix = dryRun ? "[dry run] " : "";
   try {
     let configHandled = false;
-    for (const name of NEXT_CONFIG_NAMES3) {
+    for (const name of NEXT_CONFIG_NAMES) {
       const configPath = path5.join(projectRoot, name);
       if (!fs5.existsSync(configPath)) {
         continue;
@@ -16120,16 +16165,22 @@ async function runUninit(options) {
       if (fs5.existsSync(windsurfConfigPath)) {
         const content = fs5.readFileSync(windsurfConfigPath, "utf-8");
         const windsurfResult = processJsonMcpConfig(content);
+        const home = os.homedir();
+        const displayPath = windsurfConfigPath.startsWith(home) ? "~" + windsurfConfigPath.slice(home.length) : windsurfConfigPath;
         if (windsurfResult.action === "deleted") {
           if (!dryRun) {
             fs5.unlinkSync(windsurfConfigPath);
           }
-          summary.push(`${prefix}Deleted Windsurf MCP config`);
+          summary.push(
+            `${prefix}Deleted global Windsurf config (${displayPath})`
+          );
         } else if (windsurfResult.action === "removed-key" && windsurfResult.content !== void 0) {
           if (!dryRun) {
             fs5.writeFileSync(windsurfConfigPath, windsurfResult.content, "utf-8");
           }
-          summary.push(`${prefix}Removed glasstrace from Windsurf MCP config`);
+          summary.push(
+            `${prefix}Removed glasstrace from global Windsurf config (${displayPath})`
+          );
         }
       }
     }
@@ -16170,14 +16221,14 @@ async function runUninit(options) {
   }
   return { exitCode: errors.length > 0 ? 1 : 0, summary, warnings, errors };
 }
-var fs5, os, path5, NEXT_CONFIG_NAMES3, MCP_CONFIG_FILES, AGENT_INFO_FILES;
+var fs5, os, path5, MCP_CONFIG_FILES, AGENT_INFO_FILES;
 var init_uninit = __esm({
   "src/cli/uninit.ts"() {
     "use strict";
     fs5 = __toESM(require("fs"), 1);
     os = __toESM(require("os"), 1);
     path5 = __toESM(require("path"), 1);
-    NEXT_CONFIG_NAMES3 = ["next.config.ts", "next.config.js", "next.config.mjs"];
+    init_constants();
     MCP_CONFIG_FILES = [".mcp.json", ".cursor/mcp.json", ".gemini/settings.json"];
     AGENT_INFO_FILES = [
       "CLAUDE.md",
@@ -16378,7 +16429,7 @@ init_constants();
 // src/cli/monorepo.ts
 var fs3 = __toESM(require("fs"), 1);
 var path3 = __toESM(require("path"), 1);
-var NEXT_CONFIG_NAMES2 = ["next.config.ts", "next.config.js", "next.config.mjs"];
+init_constants();
 function resolveProjectRoot(cwd) {
   if (hasNextConfig(cwd)) {
     return { projectRoot: cwd, isMonorepo: false };
@@ -16414,7 +16465,7 @@ Run init from the specific app directory you want to instrument.`
   );
 }
 function hasNextConfig(dir) {
-  return NEXT_CONFIG_NAMES2.some(
+  return NEXT_CONFIG_NAMES.some(
     (name) => fs3.existsSync(path3.join(dir, name))
   );
 }