@glasstrace/sdk 1.1.2 → 1.2.0

package/README.md

@@ -280,7 +280,7 @@ file directly and no longer needs the runtime handler.
 
 ## Subpath exports
 
-`@glasstrace/sdk` ships three public entries:
+`@glasstrace/sdk` ships four public entries:
 
 - **`@glasstrace/sdk`** — primary import site. Use from
   `instrumentation.ts` (runtime instrumentation) and `next.config.ts`
@@ -298,6 +298,8 @@ file directly and no longer needs the runtime handler.
   condition; non-Node runtimes (workerd, edge-light) fail cleanly at
   module resolution rather than at evaluation.
 - **`@glasstrace/sdk/drizzle`** — Drizzle ORM adapter.
+- **`@glasstrace/sdk/trpc`** — tRPC middleware-chain instrumentation.
+  See "tRPC middleware instrumentation" below.
 
 The source-map and import-graph helpers previously reachable from the
 `@glasstrace/sdk` root specifier have moved to `@glasstrace/sdk/node`
@@ -383,6 +385,57 @@ on the Node-only side to become edge-safe, the right move is to remove
 the `process` and Node built-in reaches from the symbol's transitive
 closure, not to add a runtime guard.
 
+## tRPC middleware instrumentation
+
+The `@glasstrace/sdk/trpc` subpath exposes `tracedMiddleware`, a thin
+wrapper that turns a user-supplied tRPC middleware function into a
+span-emitting middleware function. Each invocation opens a child span
+named `options.name` under the active OTel context (typically the HTTP
+server span), so middleware steps land as children of the HTTP span
+without manual context plumbing. Errors thrown from the middleware
+body are recorded via `span.recordException` and propagate unchanged;
+short-circuit `{ ok: false, error }` results mark the span `ERROR`
+without recording an exception.
+
+`@trpc/server` is declared as an optional peer dependency
+(`^10.0.0 || ^11.0.0`); projects that do not use tRPC pay no runtime
+cost because the subpath is excluded from the root barrel and is
+tree-shakeable.
+
+```ts
+// trpc.ts — your project
+import { initTRPC, TRPCError } from "@trpc/server";
+import { tracedMiddleware } from "@glasstrace/sdk/trpc";
+
+interface MyContext { session?: { userId: string }; tier?: string }
+const t = initTRPC.context<MyContext>().create();
+
+const isAuthed = t.middleware(
+  tracedMiddleware({ name: "isAuthed" }, async ({ ctx, next }) => {
+    if (!ctx.session) throw new TRPCError({ code: "UNAUTHORIZED" });
+    return next({ ctx: { ...ctx, session: ctx.session } });
+  }),
+);
+
+const isPro = t.middleware(
+  tracedMiddleware({ name: "isPro" }, async ({ ctx, next }) => {
+    if (ctx.tier !== "pro") throw new TRPCError({ code: "FORBIDDEN" });
+    return next();
+  }),
+);
+
+export const proProcedure = t.procedure.use(isAuthed).use(isPro);
+```
+
+The wrapped function preserves the original middleware's call-site type,
+so tRPC's procedure-builder context narrowing flows through unchanged.
+The existing `glasstrace.trpc.procedure` attribute (set on the parent
+HTTP span) is not duplicated on the middleware child spans — middleware
+spans carry only `trpc.path`, `trpc.type`, and any caller-supplied
+`options.attributes`. Caller-supplied attributes are forwarded as-is;
+the SDK does not redact them, so callers must avoid placing tokens or
+credentials in `options.attributes`.
+
 ## Security
 
 The SDK transmits your API key exclusively via the `Authorization: Bearer`

package/dist/{chunk-Z35HKVSO.js → chunk-6RIH6SFM.js}

@@ -33,16 +33,17 @@ import {
   performInit,
   recordSpansDropped,
   recordSpansExported
-} from "./chunk-C567H5EQ.js";
+} from "./chunk-JKI4OCFV.js";
 import {
   isAnonymousMode,
   isProductionDisabled,
   resolveConfig
 } from "./chunk-VUZCLMIX.js";
 import {
+  atomicWriteFileSync,
   getOrCreateAnonKey,
   readAnonKey
-} from "./chunk-3LILTM3T.js";
+} from "./chunk-TWTWRJ25.js";
 import {
   GLASSTRACE_ATTRIBUTE_NAMES,
   deriveSessionId
@@ -3905,8 +3906,51 @@ function createDiscoveryHandler(getAnonKey, getSessionId, getClaimState) {
 
 // src/context-manager.ts
 import { AsyncLocalStorage } from "node:async_hooks";
+var GLASSTRACE_BRAND = 1;
+var GUARD = /* @__PURE__ */ Symbol.for("glasstrace.context-manager.installed");
+var OTEL_API_KEY = /* @__PURE__ */ Symbol.for("opentelemetry.js.api.1");
+function isOtelContextManager(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const candidate = value;
+  return typeof candidate.active === "function" && typeof candidate.with === "function" && typeof candidate.bind === "function" && typeof candidate.enable === "function" && typeof candidate.disable === "function";
+}
+function isInstallationRecord(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const candidate = value;
+  if (candidate.glasstraceContextManagerBrand !== GLASSTRACE_BRAND) return false;
+  return candidate.manager === null || isOtelContextManager(candidate.manager);
+}
+function getOtelRegisteredContextManager() {
+  const otelSlot = globalThis[OTEL_API_KEY];
+  if (typeof otelSlot !== "object" || otelSlot === null) return void 0;
+  const ctx = otelSlot.context;
+  return isOtelContextManager(ctx) ? ctx : void 0;
+}
 function installContextManager() {
   try {
+    const slot = globalThis;
+    const existing = slot[GUARD];
+    const otelCurrent = getOtelRegisteredContextManager();
+    if (isInstallationRecord(existing) && existing.manager !== null && existing.manager === otelCurrent) {
+      return true;
+    }
+    if (isInstallationRecord(existing) && existing.manager === null && otelCurrent !== void 0) {
+      return false;
+    }
+    if (isInstallationRecord(existing) && existing.manager !== null) {
+      const reSuccess = context.setGlobalContextManager(existing.manager);
+      if (!reSuccess) {
+        console.warn(
+          "[glasstrace] Another context manager is already registered. Trace context propagation may not work as expected."
+        );
+      }
+      const reRecord = {
+        glasstraceContextManagerBrand: GLASSTRACE_BRAND,
+        manager: reSuccess ? existing.manager : null
+      };
+      slot[GUARD] = reRecord;
+      return reSuccess;
+    }
     const als = new AsyncLocalStorage();
     const contextManager = {
       active: () => als.getStore() ?? ROOT_CONTEXT,
@@ -3927,6 +3971,11 @@ function installContextManager() {
         "[glasstrace] Another context manager is already registered. Trace context propagation may not work as expected."
       );
     }
+    const record = {
+      glasstraceContextManagerBrand: GLASSTRACE_BRAND,
+      manager: success ? contextManager : null
+    };
+    slot[GUARD] = record;
     return success;
   } catch {
     return false;
@@ -4058,7 +4107,7 @@ function registerHeartbeatShutdownHook(config, anonKey, sdkVersion) {
 }
 
 // src/runtime-state.ts
-import { writeFileSync, renameSync, mkdirSync } from "node:fs";
+import { mkdirSync } from "node:fs";
 import { join } from "node:path";
 var _projectRoot = null;
 var _sdkVersion = "unknown";
@@ -4110,12 +4159,10 @@ function writeStateNow() {
     };
     const dir = join(_projectRoot, ".glasstrace");
     const filePath = join(dir, "runtime-state.json");
-    const tmpPath = join(dir, "runtime-state.json.tmp");
     mkdirSync(dir, { recursive: true, mode: 448 });
-    writeFileSync(tmpPath, JSON.stringify(runtimeState, null, 2) + "\n", {
+    atomicWriteFileSync(filePath, JSON.stringify(runtimeState, null, 2) + "\n", {
       mode: 384
     });
-    renameSync(tmpPath, filePath);
   } catch (err) {
     sdkLog(
       "warn",
@@ -4154,7 +4201,7 @@ function registerGlasstrace(options) {
     setCoreState(CoreState.REGISTERING);
     startRuntimeStateWriter({
       projectRoot: process.cwd(),
-      sdkVersion: "1.1.2"
+      sdkVersion: "1.2.0"
     });
     const config = resolveConfig(options);
     if (config.verbose) {
@@ -4320,8 +4367,8 @@ async function backgroundInit(config, anonKeyForInit, generation) {
   if (config.verbose) {
     console.info("[glasstrace] Background init firing.");
   }
-  const healthReport = collectHealthReport("1.1.2");
-  const initResult = await performInit(config, anonKeyForInit, "1.1.2", healthReport);
+  const healthReport = collectHealthReport("1.2.0");
+  const initResult = await performInit(config, anonKeyForInit, "1.2.0", healthReport);
   if (generation !== registrationGeneration) return;
   const currentState = getCoreState();
   if (currentState === CoreState.SHUTTING_DOWN || currentState === CoreState.SHUTDOWN) {
@@ -4344,7 +4391,7 @@ async function backgroundInit(config, anonKeyForInit, generation) {
   }
   maybeInstallConsoleCapture();
   if (didLastInitSucceed()) {
-    startHeartbeat(config, anonKeyForInit, "1.1.2", generation, (newApiKey, accountId) => {
+    startHeartbeat(config, anonKeyForInit, "1.2.0", generation, (newApiKey, accountId) => {
       setAuthState(AuthState.CLAIMING);
       emitLifecycleEvent("auth:claim_started", { accountId });
       setResolvedApiKey(newApiKey);
@@ -4693,4 +4740,4 @@ export {
   withGlasstraceConfig,
   captureError
 };
-//# sourceMappingURL=chunk-Z35HKVSO.js.map
+//# sourceMappingURL=chunk-6RIH6SFM.js.map