@glasstrace/sdk 1.13.0 → 1.14.0

package/dist/index.cjs

@@ -24063,1081 +24063,1140 @@ function registerHeartbeatShutdownHook(config2, anonKey, sdkVersion) {
   });
 }
 
-// src/runtime-state.ts
-init_console_capture();
-var fsSync = null;
-var pathSync = null;
-try {
-  fsSync = require("node:fs");
-  pathSync = require("node:path");
-} catch {
-  fsSync = null;
-  pathSync = null;
+// src/side-effect/allowlist.ts
+init_dist();
+var MAX_SIDE_EFFECT_OPERATION_LABEL_LENGTH = 96;
+var MAX_SIDE_EFFECT_FIELD_VALUE_LENGTH = 80;
+var MAX_SIDE_EFFECT_FIELD_COUNT_VALUE_LENGTH = 16;
+var MAX_SIDE_EFFECT_OPERATIONS_PER_SPAN = 5;
+var OPERATION_KIND_SET = new Set(
+  SIDE_EFFECT_OPERATION_KINDS
+);
+var OPERATION_STATUS_SET = new Set(
+  SIDE_EFFECT_OPERATION_STATUSES
+);
+var OPERATION_PHASE_SET = new Set(
+  SIDE_EFFECT_OPERATION_PHASES
+);
+var OMISSION_REASON_SET = new Set(
+  SIDE_EFFECT_OMISSION_REASONS
+);
+var TOKEN_REGEX = /^[A-Za-z0-9][A-Za-z0-9_.:-]*$/;
+var LOCALE_REGEX = /^[A-Za-z]{2,3}(?:-[A-Za-z0-9]{2,8}){0,3}$/;
+var TIMEZONE_REGEX = /^(?:UTC|GMT|[A-Za-z][A-Za-z0-9_+-]*(?:\/[A-Za-z0-9_+-]+){1,3})$/;
+var DIGIT_REGEX = /^[0-9]+$/;
+var URL_SCHEME = /:\/\//;
+var URL_SCHEME_RELATIVE = /^\/\//;
+var EMAIL_LIKE = /[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}/i;
+var QUERY_LIKE = /\?/;
+var FRAGMENT_LIKE = /#/;
+var HEADER_LIKE = /\b(authorization|set-cookie|cookie)\b\s*[:=]/i;
+var HEADER_TOKEN_LIKE = /\b(authorization|set-cookie|cookie)\b\s+\S+=/i;
+var BEARER_LIKE = /bearer\s+\S+/i;
+var TOKEN_KV_LIKE = /["']?(password|passwd|token|api[_-]?key|secret|client_secret)["']?\s*[:=]/i;
+var PROSE_LIKE = /[\r\n\t]|\s{2,}/;
+var UUID_LIKE = /[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}/i;
+var GT_KEY_LIKE = /gt_(dev|anon|live)_[A-Za-z0-9_-]+/;
+function detectUnsafePattern(value) {
+  if (value.trim() !== value) return "raw_payload";
+  if (PROSE_LIKE.test(value)) return "raw_payload";
+  if (URL_SCHEME.test(value)) return "raw_payload";
+  if (URL_SCHEME_RELATIVE.test(value)) return "raw_payload";
+  if (QUERY_LIKE.test(value)) return "raw_payload";
+  if (FRAGMENT_LIKE.test(value)) return "raw_payload";
+  if (BEARER_LIKE.test(value)) return "secret";
+  if (HEADER_TOKEN_LIKE.test(value)) return "secret";
+  if (TOKEN_KV_LIKE.test(value)) return "secret";
+  if (HEADER_LIKE.test(value)) return "secret";
+  if (UUID_LIKE.test(value)) return "secret";
+  if (GT_KEY_LIKE.test(value)) return "secret";
+  if (EMAIL_LIKE.test(value)) return "pii";
+  return null;
 }
-var _projectRoot = null;
-var _sdkVersion = "unknown";
-var _lastScenario;
-var _lastError;
-var _debounceTimer = null;
-var _started = false;
-function startRuntimeStateWriter(options) {
-  if (_started) return;
-  if (!isSyncFsAvailable() || fsSync === null || pathSync === null) {
-    _started = true;
-    return;
+function passesFieldValidator(key, value) {
+  if (key === "locale") return LOCALE_REGEX.test(value);
+  if (key === "timezone") return TIMEZONE_REGEX.test(value);
+  if (typeof key === "string" && key.endsWith("Count")) {
+    return DIGIT_REGEX.test(value);
   }
-  _started = true;
-  _projectRoot = options.projectRoot;
-  _sdkVersion = options.sdkVersion;
-  onLifecycleEvent("core:state_changed", ({ to }) => {
-    if (to === CoreState.SHUTDOWN) {
-      writeStateNow();
-    } else {
-      debouncedWrite();
-    }
-  });
-  onLifecycleEvent("otel:configured", ({ scenario }) => {
-    _lastScenario = scenario;
-    debouncedWrite();
-  });
-  onLifecycleEvent("otel:failed", (payload) => {
-    _lastError = { ...payload };
-    debouncedWrite();
-  });
-  onLifecycleEvent("otel:circuit_opened", (payload) => {
-    _lastError = {
-      category: "export-circuit-open",
-      message: payload.message,
-      timestamp: payload.timestamp,
-      exportCircuitCategory: payload.category
-    };
-    debouncedWrite();
-  });
-  onLifecycleEvent("otel:circuit_closed", () => {
-    if (_lastError?.category === "export-circuit-open") {
-      _lastError = void 0;
-      debouncedWrite();
-    }
-  });
-  onLifecycleEvent("auth:key_resolved", () => debouncedWrite());
-  onLifecycleEvent("auth:claim_started", () => debouncedWrite());
-  onLifecycleEvent("auth:claim_completed", () => debouncedWrite());
-  writeStateNow();
+  return TOKEN_REGEX.test(value);
 }
-function debouncedWrite() {
-  if (_debounceTimer) return;
-  _debounceTimer = setTimeout(() => {
-    _debounceTimer = null;
-    writeStateNow();
-  }, 1e3);
-  if (typeof _debounceTimer === "object" && "unref" in _debounceTimer) {
-    _debounceTimer.unref();
+function checkOperationLabel(value) {
+  if (typeof value !== "string" || value.length === 0) {
+    return { accepted: false, reason: "raw_payload" };
   }
-}
-function writeStateNow() {
-  if (!_projectRoot) return;
-  try {
-    const state = getSdkState();
-    const runtimeState = {
-      updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-      pid: process.pid,
-      sdkVersion: _sdkVersion,
-      core: { state: state.core },
-      auth: { state: state.auth },
-      otel: { state: state.otel, scenario: _lastScenario }
-    };
-    if (_lastError) {
-      runtimeState.lastError = _lastError;
-    }
-    const dir = pathSync.join(_projectRoot, ".glasstrace");
-    const filePath = pathSync.join(dir, "runtime-state.json");
-    fsSync.mkdirSync(dir, { recursive: true, mode: 448 });
-    atomicWriteFileSync(filePath, JSON.stringify(runtimeState, null, 2) + "\n", {
-      mode: 384
-    });
-  } catch (err) {
-    sdkLog(
-      "warn",
-      `[glasstrace] Failed to write runtime state: ${err instanceof Error ? err.message : String(err)}`
-    );
+  if (value.length > MAX_SIDE_EFFECT_OPERATION_LABEL_LENGTH) {
+    return { accepted: false, reason: "value_too_long" };
+  }
+  const unsafe = detectUnsafePattern(value);
+  if (unsafe) {
+    return { accepted: false, reason: unsafe };
+  }
+  if (!TOKEN_REGEX.test(value)) {
+    return { accepted: false, reason: "raw_payload" };
   }
+  return { accepted: true, value };
 }
-
-// src/agent-detection/upgrade-notice.ts
-var fs2 = __toESM(require("node:fs"), 1);
-var path2 = __toESM(require("node:path"), 1);
-
-// src/agent-detection/inject.ts
-var HTML_START_RE = /^<!--\s*glasstrace:mcp:start(?:\s+v=([^\s>]+))?\s*-->$/;
-var HTML_END = "<!-- glasstrace:mcp:end -->";
-var HASH_START_RE = /^#\s*glasstrace:mcp:start(?:\s+v=(\S+))?$/;
-var HASH_END = "# glasstrace:mcp:end";
-function parseStartMarkerLine(line) {
-  const trimmed = line.trim();
-  const html = HTML_START_RE.exec(trimmed);
-  if (html !== null) {
-    return { kind: "html", stamp: html[1] ?? null };
+function checkSemanticFieldValue(key, value) {
+  if (typeof value !== "string" || value.length === 0) {
+    return { accepted: false, reason: "raw_payload" };
   }
-  const hash2 = HASH_START_RE.exec(trimmed);
-  if (hash2 !== null) {
-    return { kind: "hash", stamp: hash2[1] ?? null };
+  const maxLength = typeof key === "string" && key.endsWith("Count") ? MAX_SIDE_EFFECT_FIELD_COUNT_VALUE_LENGTH : MAX_SIDE_EFFECT_FIELD_VALUE_LENGTH;
+  if (value.length > maxLength) {
+    return { accepted: false, reason: "value_too_long" };
   }
-  return null;
+  const unsafe = detectUnsafePattern(value);
+  if (unsafe) {
+    return { accepted: false, reason: unsafe };
+  }
+  if (!passesFieldValidator(key, value)) {
+    return { accepted: false, reason: "raw_payload" };
+  }
+  return { accepted: true, value };
 }
-function isEndMarker(line) {
-  const trimmed = line.trim();
-  return trimmed === HTML_END || trimmed === HASH_END;
+function checkSemanticFieldKey(key) {
+  return typeof key === "string" && isSideEffectSemanticFieldKey(key);
 }
-function isEndMarkerLine(line) {
-  return isEndMarker(line);
+function checkOperationKind(kind) {
+  return typeof kind === "string" && OPERATION_KIND_SET.has(kind);
 }
-
-// src/agent-detection/upgrade-notice.ts
-var warningEmitted = false;
-var AGENT_INSTRUCTION_FILES = [
-  "AGENTS.md",
-  "CLAUDE.md",
-  "GEMINI.md",
-  ".cursor/rules/glasstrace.mdc",
-  ".windsurf/rules/glasstrace.md",
-  ".cursorrules",
-  "codex.md",
-  ".windsurfrules"
-];
-function parseSemver(input) {
-  const plusIdx = input.indexOf("+");
-  const core = plusIdx === -1 ? input : input.slice(0, plusIdx);
-  const m = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?$/.exec(core);
-  if (m === null) return null;
-  return {
-    major: Number(m[1]),
-    minor: Number(m[2]),
-    patch: Number(m[3]),
-    prerelease: m[4] ?? null
-  };
+function checkOperationStatus(status) {
+  return typeof status === "string" && OPERATION_STATUS_SET.has(status);
 }
-function comparePrerelease(a, b) {
-  const ap = a.split(".");
-  const bp = b.split(".");
-  const len = Math.min(ap.length, bp.length);
-  for (let i = 0; i < len; i++) {
-    const x = ap[i];
-    const y = bp[i];
-    const xNumeric = /^\d+$/.test(x);
-    const yNumeric = /^\d+$/.test(y);
-    if (xNumeric && yNumeric) {
-      const xv = Number(x);
-      const yv = Number(y);
-      if (xv !== yv) return xv < yv ? -1 : 1;
-    } else if (xNumeric) {
-      return -1;
-    } else if (yNumeric) {
-      return 1;
-    } else if (x !== y) {
-      return x < y ? -1 : 1;
-    }
-  }
-  return ap.length - bp.length;
+function checkOperationPhase(phase) {
+  return typeof phase === "string" && OPERATION_PHASE_SET.has(phase);
 }
-function compareSemver(a, b) {
-  const pa = parseSemver(a);
-  const pb = parseSemver(b);
-  if (pa === null || pb === null) return null;
-  if (pa.major !== pb.major) return pa.major - pb.major;
-  if (pa.minor !== pb.minor) return pa.minor - pb.minor;
-  if (pa.patch !== pb.patch) return pa.patch - pb.patch;
-  if (pa.prerelease === null && pb.prerelease === null) return 0;
-  if (pa.prerelease === null) return 1;
-  if (pb.prerelease === null) return -1;
-  return comparePrerelease(pa.prerelease, pb.prerelease);
-}
-function isOptedOut() {
-  const raw = process.env.GLASSTRACE_DISABLE_UPGRADE_NOTICE;
-  if (typeof raw !== "string") return false;
-  const trimmed = raw.trim().toLowerCase();
-  return trimmed === "1" || trimmed === "true" || trimmed === "yes";
-}
-function isQuietCiContext() {
-  const stderrIsTty = process.stderr.isTTY === true;
-  if (stderrIsTty) return false;
-  return process.env.CI === "true";
+
+// src/side-effect/emit.ts
+init_esm();
+init_dist();
+var spanState = /* @__PURE__ */ new WeakMap();
+function getOrCreateState(span) {
+  let state = spanState.get(span);
+  if (!state) {
+    state = { operationsRecorded: 0, omissions: /* @__PURE__ */ new Map() };
+    spanState.set(span, state);
+  }
+  return state;
 }
-var MAX_AGENT_FILE_BYTES = 5 * 1024 * 1024;
-function inspectFile(filePath, runningSdkVersion) {
-  let content;
+function getRecordingActiveSpan() {
+  let span;
   try {
-    const stat2 = fs2.statSync(filePath);
-    if (!stat2.isFile()) return "absent";
-    if (stat2.size > MAX_AGENT_FILE_BYTES) return "absent";
-    content = fs2.readFileSync(filePath, "utf-8");
+    span = trace.getActiveSpan();
   } catch {
-    return "absent";
+    return void 0;
   }
-  const lines = content.split("\n");
-  let lastStart = null;
-  let foundEnd = false;
-  for (const line of lines) {
-    const parsed = parseStartMarkerLine(line);
-    if (parsed !== null) {
-      lastStart = parsed;
-      continue;
-    }
-    if (lastStart !== null && isEndMarkerLine(line)) {
-      foundEnd = true;
-      break;
+  if (!span) return void 0;
+  try {
+    if (typeof span.isRecording === "function" && !span.isRecording()) {
+      return void 0;
     }
+  } catch {
+    return void 0;
   }
-  if (lastStart === null || !foundEnd) {
-    return "no-section";
-  }
-  if (lastStart.stamp === null) {
-    return "no-stamp";
-  }
-  const cmp = compareSemver(lastStart.stamp, runningSdkVersion);
-  if (cmp === null) {
-    return "unknown-stamp";
-  }
-  return cmp < 0 ? "stale" : "current";
+  return span;
 }
-function maybeWarnStaleAgentInstructions(options) {
+function recordOmissionOnActiveSpan(reason) {
+  const span = getRecordingActiveSpan();
+  if (!span) return;
+  recordOmissionOnSpan(span, reason);
+}
+function recordOmissionOnSpan(span, reason) {
+  const state = getOrCreateState(span);
+  const previous = state.omissions.get(reason) ?? 0;
+  const next = previous + 1;
+  state.omissions.set(reason, next);
+  const attribute = OMISSION_ATTRIBUTE_BY_REASON[reason];
   try {
-    if (warningEmitted) return;
-    if (typeof process === "undefined" || typeof process.versions?.node !== "string" || typeof process.env !== "object" || process.env === null) {
-      return;
-    }
-    if (isOptedOut()) return;
-    if (isQuietCiContext()) return;
-    if (parseSemver(options.sdkVersion) === null) return;
-    const staleFiles = [];
-    for (const fileName of AGENT_INSTRUCTION_FILES) {
-      const fullPath = path2.join(options.projectRoot, fileName);
-      const state = inspectFile(fullPath, options.sdkVersion);
-      if (state === "stale") {
-        staleFiles.push(fileName);
-      }
-    }
-    if (staleFiles.length === 0) return;
-    const fileList = staleFiles.join(", ");
-    const message = `[glasstrace] Glasstrace managed MCP section in ${fileList} was rendered by an older @glasstrace/sdk; run \`npx glasstrace upgrade-instructions\` to refresh (silence with GLASSTRACE_DISABLE_UPGRADE_NOTICE=1).
-`;
-    warningEmitted = true;
-    if (options.stderrWrite !== void 0) {
-      options.stderrWrite(message);
-      return;
-    }
-    try {
-      process.stderr.write(message);
-    } catch {
-    }
+    span.setAttribute(attribute, next);
   } catch {
   }
 }
-
-// src/register.ts
-function maskKey(key) {
-  if (key.length <= 12) return key.slice(0, 4) + "...";
-  return key.slice(0, 8) + "..." + key.slice(-4);
+var OMISSION_ATTRIBUTE_BY_REASON = {
+  pii: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_PII,
+  secret: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_SECRET,
+  raw_payload: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_RAW_PAYLOAD,
+  unsupported_key: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_UNSUPPORTED_KEY,
+  value_too_long: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_VALUE_TOO_LONG,
+  not_emitted: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_NOT_EMITTED,
+  capture_disabled: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_CAPTURE_DISABLED
+};
+var FIELD_ATTRIBUTE_BY_KEY = {
+  templateKey: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_TEMPLATE_KEY,
+  providerOperation: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_PROVIDER_OPERATION,
+  role: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_ROLE,
+  locale: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_LOCALE,
+  timezone: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_TIMEZONE,
+  status: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_STATUS,
+  phase: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_PHASE,
+  recipientClass: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_RECIPIENT_CLASS,
+  participantCount: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_PARTICIPANT_COUNT,
+  activeParticipantCount: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_ACTIVE_PARTICIPANT_COUNT
+};
+function resolveFieldAttribute(key) {
+  const explicit = FIELD_ATTRIBUTE_BY_KEY[key];
+  if (explicit !== void 0) return explicit;
+  return `glasstrace.side_effect.field.${key}`;
 }
-var consoleCaptureInstalled = false;
-var discoveryHandler = null;
-var registrationGeneration = 0;
-var _sessionManager = null;
-function getSessionManager() {
-  if (!_sessionManager) {
-    _sessionManager = new SessionManager();
-  }
-  return _sessionManager;
+function hasExplicitFieldAttribute(key) {
+  return FIELD_ATTRIBUTE_BY_KEY[key] !== void 0;
 }
-function registerGlasstrace(options) {
+function attachOperation(input) {
+  const span = getRecordingActiveSpan();
+  if (!span) return { kind: "no_active_span" };
+  const state = getOrCreateState(span);
+  if (state.operationsRecorded >= MAX_SIDE_EFFECT_OPERATIONS_PER_SPAN) {
+    return { kind: "over_budget", span };
+  }
+  state.operationsRecorded += 1;
   try {
-    if (getCoreState() !== CoreState.IDLE) {
-      return;
-    }
-    initLifecycle({ logger: sdkLog });
-    if (typeof process === "undefined" || typeof process.versions?.node !== "string") {
-      console.warn(
-        "[glasstrace] SDK requires a Node.js runtime. Edge Runtime, browser, and Deno without Node compat are not supported. Glasstrace is disabled in this environment."
-      );
-      return;
-    }
-    setCoreState(CoreState.REGISTERING);
-    maybeWarnStaleAgentInstructions({
-      projectRoot: process.cwd(),
-      sdkVersion: "1.13.0"
-    });
-    startRuntimeStateWriter({
-      projectRoot: process.cwd(),
-      sdkVersion: "1.13.0"
-    });
-    const config2 = resolveConfig(options);
-    if (config2.verbose) {
-      console.info("[glasstrace] Config resolved.");
-    }
-    if (isProductionDisabled(config2)) {
-      setCoreState(CoreState.PRODUCTION_DISABLED);
-      console.warn(
-        "[glasstrace] Disabled in production. Set GLASSTRACE_FORCE_ENABLE=true to override."
-      );
-      return;
-    }
-    if (config2.verbose) {
-      console.info("[glasstrace] Not production-disabled.");
-    }
-    const existingTracerProvider = trace.getTracerProvider();
-    const existingProbe = existingTracerProvider.getTracer("glasstrace-probe");
-    const anotherProviderRegistered = !isProxyTracerProvider(existingTracerProvider) || !isProxyTracer(existingProbe, existingTracerProvider);
-    if (anotherProviderRegistered) {
-      setCoexistenceState("coexisting");
-    }
-    registerSignalHandlers();
-    const anonymous = isAnonymousMode(config2);
-    let effectiveKey = config2.apiKey;
-    initAuthState(anonymous ? AuthState.ANONYMOUS : AuthState.AUTHENTICATED);
-    if (effectiveKey) {
-      setResolvedApiKey(effectiveKey);
-      emitLifecycleEvent("auth:key_resolved", {
-        key: maskKey(effectiveKey),
-        mode: anonymous ? "anonymous" : "dev"
-      });
-    }
-    if (config2.verbose) {
-      console.info(
-        `[glasstrace] Auth mode = ${anonymous ? "anonymous" : "dev-key"}.`
-      );
-    }
-    const cachedInitResponse = loadCachedConfig();
-    if (cachedInitResponse) {
-      _setCurrentConfig(cachedInitResponse);
-    }
-    if (config2.verbose) {
-      console.info(
-        `[glasstrace] Cached config ${cachedInitResponse ? "loaded and applied" : "not found"}.`
-      );
-    }
-    const sessionManager = getSessionManager();
-    if (config2.verbose) {
-      console.info("[glasstrace] SessionManager created.");
-    }
-    setCoreState(CoreState.KEY_PENDING);
-    const currentGeneration = registrationGeneration;
-    if (anotherProviderRegistered) {
-      if (config2.verbose) {
-        console.info("[glasstrace] Another OTel provider detected \u2014 using existing context manager.");
-      }
-    } else {
-      const contextManagerInstalled = installContextManager();
-      if (config2.verbose) {
-        console.info(
-          contextManagerInstalled ? "[glasstrace] Context manager installed." : "[glasstrace] Context manager not available \u2014 trace context propagation disabled."
-        );
-      }
-    }
-    void configureOtel(config2, sessionManager).then(
-      () => {
-        maybeInstallConsoleCapture();
-        if (config2.verbose) {
-          console.info("[glasstrace] OTel configured.");
-        }
-      },
-      (err) => {
-        console.warn(
-          `[glasstrace] Failed to configure OTel: ${err instanceof Error ? err.message : String(err)}`
-        );
-      }
-    );
-    if (anonymous) {
-      if (isDiscoveryEnabled(config2)) {
-        let resolvedAnonKey = null;
-        const anonKeyPromise = getOrCreateAnonKey();
-        const getClaimState = () => {
-          if (getLinkedAccountId()) return { claimed: true };
-          if (getClaimResult()) return { claimed: true };
-          return null;
-        };
-        discoveryHandler = createDiscoveryHandler(
-          async () => resolvedAnonKey,
-          () => sessionManager.getSessionId(getResolvedApiKey()),
-          getClaimState
-        );
-        if (config2.verbose) {
-          console.info("[glasstrace] Discovery endpoint registered (key pending).");
-        }
-        void (async () => {
-          try {
-            if (currentGeneration !== registrationGeneration) return;
-            const anonKey = await anonKeyPromise;
-            resolvedAnonKey = anonKey;
-            setResolvedApiKey(anonKey);
-            notifyApiKeyResolved();
-            emitLifecycleEvent("auth:key_resolved", { key: maskKey(anonKey), mode: "anonymous" });
-            effectiveKey = anonKey;
-            if (currentGeneration !== registrationGeneration) return;
-            discoveryHandler = createDiscoveryHandler(
-              () => Promise.resolve(anonKey),
-              () => sessionManager.getSessionId(getResolvedApiKey()),
-              getClaimState
-            );
-            await backgroundInit(config2, anonKey, currentGeneration);
-          } catch (err) {
-            console.warn(
-              `[glasstrace] Background init failed: ${err instanceof Error ? err.message : String(err)}`
-            );
-          }
-        })();
-      } else {
-        void (async () => {
-          try {
-            if (currentGeneration !== registrationGeneration) return;
-            const anonKey = await getOrCreateAnonKey();
-            setResolvedApiKey(anonKey);
-            notifyApiKeyResolved();
-            emitLifecycleEvent("auth:key_resolved", { key: maskKey(anonKey), mode: "anonymous" });
-            effectiveKey = anonKey;
-            if (currentGeneration !== registrationGeneration) return;
-            await backgroundInit(config2, anonKey, currentGeneration);
-          } catch (err) {
-            console.warn(
-              `[glasstrace] Background init failed: ${err instanceof Error ? err.message : String(err)}`
-            );
-          }
-        })();
-      }
-    } else {
-      void (async () => {
-        try {
-          if (currentGeneration !== registrationGeneration) return;
-          let anonKeyForInit = null;
-          try {
-            anonKeyForInit = await readAnonKey();
-          } catch {
-          }
-          if (currentGeneration !== registrationGeneration) return;
-          await backgroundInit(config2, anonKeyForInit, currentGeneration);
-        } catch (err) {
-          console.warn(
-            `[glasstrace] Background init failed: ${err instanceof Error ? err.message : String(err)}`
-          );
-        }
-      })();
-    }
-    if (config2.coverageMapEnabled && config2.verbose) {
-      console.info("[glasstrace] Import graph building skipped.");
-    }
-  } catch (err) {
-    setCoreState(CoreState.REGISTRATION_FAILED);
-    console.warn(
-      `[glasstrace] Registration failed: ${err instanceof Error ? err.message : String(err)}`
+    span.setAttribute(GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_KIND, input.kind);
+    span.setAttribute(
+      GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OPERATION,
+      input.operation
     );
+    if (input.status !== void 0) {
+      span.setAttribute(
+        GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_STATUS,
+        input.status
+      );
+    }
+    if (input.phase !== void 0) {
+      span.setAttribute(
+        GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_PHASE,
+        input.phase
+      );
+    }
+  } catch {
   }
+  return { kind: "attached", span };
 }
-async function backgroundInit(config2, anonKeyForInit, generation) {
-  if (config2.verbose) {
-    console.info("[glasstrace] Background init firing.");
-  }
-  const healthReport = collectHealthReport("1.13.0");
-  const initResult = await performInit(config2, anonKeyForInit, "1.13.0", healthReport);
-  if (generation !== registrationGeneration) return;
-  const currentState = getCoreState();
-  if (currentState === CoreState.SHUTTING_DOWN || currentState === CoreState.SHUTDOWN) {
-    return;
-  }
-  if (currentState === CoreState.KEY_PENDING) {
-    setCoreState(CoreState.KEY_RESOLVED);
-  }
-  if (getCoreState() === CoreState.KEY_RESOLVED) {
-    setCoreState(didLastInitSucceed() ? CoreState.ACTIVE : CoreState.ACTIVE_DEGRADED);
-  }
-  if (initResult?.claimResult) {
-    const { newApiKey, accountId } = initResult.claimResult;
-    setAuthState(AuthState.CLAIMING);
-    emitLifecycleEvent("auth:claim_started", { accountId });
-    setResolvedApiKey(newApiKey);
-    notifyApiKeyResolved();
-    setAuthState(AuthState.CLAIMED);
-    emitLifecycleEvent("auth:claim_completed", { newKey: maskKey(newApiKey), accountId });
-  }
-  maybeInstallConsoleCapture();
-  if (didLastInitSucceed()) {
-    startHeartbeat(config2, anonKeyForInit, "1.13.0", generation, (newApiKey, accountId) => {
-      setAuthState(AuthState.CLAIMING);
-      emitLifecycleEvent("auth:claim_started", { accountId });
-      setResolvedApiKey(newApiKey);
-      notifyApiKeyResolved();
-      setAuthState(AuthState.CLAIMED);
-      emitLifecycleEvent("auth:claim_completed", { newKey: maskKey(newApiKey), accountId });
-    });
-  }
-}
-function getDiscoveryHandler() {
-  return discoveryHandler;
-}
-function maybeInstallConsoleCapture() {
-  if (consoleCaptureInstalled) return;
-  if (getActiveConfig().consoleErrors) {
-    consoleCaptureInstalled = true;
-    void installConsoleCapture();
+function attachField(span, key, value) {
+  const attribute = resolveFieldAttribute(key);
+  try {
+    span.setAttribute(attribute, value);
+  } catch {
   }
 }
-function isDiscoveryEnabled(config2) {
-  if (process.env.GLASSTRACE_DISCOVERY_ENABLED === "true") return true;
-  if (process.env.GLASSTRACE_DISCOVERY_ENABLED === "false") return false;
-  if (config2.nodeEnv === "production") return false;
-  if (config2.vercelEnv === "production") return false;
-  if (config2.nodeEnv === "development" || config2.nodeEnv === void 0) return true;
-  return false;
+function recordOmission(span, reason) {
+  recordOmissionOnSpan(span, reason);
 }
 
-// src/config-wrapper.ts
-var import_node_module = require("node:module");
-function isTurbopackBuild() {
-  if (typeof process === "undefined") return false;
-  const argv = Array.isArray(process.argv) ? process.argv : [];
-  if (argv.includes("--webpack")) return false;
-  if (argv.includes("--turbopack")) return true;
-  if (process.env?.TURBOPACK === "1") return true;
-  return false;
+// src/side-effect/index.ts
+var _verbose = false;
+function setSideEffectVerboseFlag(verbose) {
+  _verbose = verbose;
+}
+var _casingWarnSeen = /* @__PURE__ */ new Map();
+var _CASING_DEDUP_MAX_KEYS = 100;
+var _patternKeysSeen = /* @__PURE__ */ new Set();
+var _recentPatternKeys = [];
+var _proliferationWarned = false;
+var _PROLIFERATION_THRESHOLD = 50;
+var _RECENT_KEYS_IN_WARN = 5;
+function shouldCheckCasingConvention(key) {
+  return key.endsWith("Class") || key.endsWith("Role");
+}
+function casingPattern(value) {
+  return value === value.toUpperCase() ? "uppercase" : "mixed";
+}
+function maybeWarnMixedCasing(key, value) {
+  if (!shouldCheckCasingConvention(key)) return;
+  if (value === value.toLowerCase()) return;
+  const pattern = casingPattern(value);
+  let seenPatterns = _casingWarnSeen.get(key);
+  if (!seenPatterns) {
+    if (_casingWarnSeen.size >= _CASING_DEDUP_MAX_KEYS) return;
+    seenPatterns = /* @__PURE__ */ new Set();
+    _casingWarnSeen.set(key, seenPatterns);
+  }
+  if (seenPatterns.has(pattern)) return;
+  seenPatterns.add(pattern);
+  console.warn(
+    `[glasstrace] side-effect field "${key}" value has ${pattern} casing; convention is lowercase-kebab. Producer should normalize.`
+  );
 }
-var SDK_PACKAGE_NAME = "@glasstrace/sdk";
-function appendNodeSchemeExternal(webpackConfig) {
-  const nodeBuiltinExternal = (data, callback) => {
-    const request = data.request;
-    if (typeof request === "string" && (0, import_node_module.isBuiltin)(request)) {
-      callback(null, "commonjs " + request);
-      return;
-    }
-    callback(null);
-  };
-  const existing = webpackConfig.externals;
-  if (Array.isArray(existing)) {
-    webpackConfig.externals = [...existing, nodeBuiltinExternal];
-  } else if (existing == null) {
-    webpackConfig.externals = [nodeBuiltinExternal];
-  } else {
-    webpackConfig.externals = [existing, nodeBuiltinExternal];
+function maybeWarnPatternKeyProliferation(key) {
+  if (!_verbose) return;
+  if (_proliferationWarned) return;
+  if (hasExplicitFieldAttribute(key)) return;
+  if (_patternKeysSeen.has(key)) return;
+  _patternKeysSeen.add(key);
+  _recentPatternKeys.push(key);
+  if (_recentPatternKeys.length > _RECENT_KEYS_IN_WARN) {
+    _recentPatternKeys.shift();
+  }
+  if (_patternKeysSeen.size >= _PROLIFERATION_THRESHOLD) {
+    _proliferationWarned = true;
+    console.warn(
+      `[glasstrace] side-effect emission has used ${_patternKeysSeen.size} distinct pattern-admitted field keys this process; recent: ${_recentPatternKeys.join(", ")}. Consider producer-side vocabulary review (lowercase-kebab convention; Class/Count/Kind/Role suffixes).`
+    );
   }
 }
-function ensureServerExternal(config2) {
-  const existingStable = config2.serverExternalPackages;
-  const stable = Array.isArray(existingStable) ? (
-    // Clone so we never mutate a caller-owned array in place.
-    existingStable.filter((entry) => typeof entry === "string")
-  ) : [];
-  if (!stable.includes(SDK_PACKAGE_NAME)) {
-    stable.push(SDK_PACKAGE_NAME);
+function recordSideEffect(input) {
+  try {
+    runRecordSideEffect(input);
+  } catch {
   }
-  config2.serverExternalPackages = stable;
 }
-function withGlasstraceConfig(nextConfig) {
-  if (typeof process === "undefined" || typeof process.versions?.node !== "string") {
-    return nextConfig != null ? { ...nextConfig } : {};
+function runRecordSideEffect(input) {
+  if (!input || typeof input !== "object") return;
+  let captureEnabled;
+  try {
+    captureEnabled = getActiveConfig().sideEffectEvidence === true;
+  } catch {
+    captureEnabled = false;
   }
-  const config2 = nextConfig != null ? { ...nextConfig } : {};
-  const bag = config2;
-  const existingExperimental = bag.experimental ?? {};
-  bag.experimental = {
-    ...existingExperimental,
-    serverSourceMaps: true
-  };
-  ensureServerExternal(bag);
-  if (bag.turbopack == null) {
-    bag.turbopack = {};
+  if (!captureEnabled) {
+    return;
   }
-  if (isTurbopackBuild()) {
-    warnTurbopackLimitationOnce();
+  const candidate = input;
+  if (!checkOperationKind(candidate.kind)) {
+    return;
   }
-  const distDir = typeof bag.distDir === "string" ? bag.distDir : ".next";
-  const existingWebpack = bag.webpack;
-  bag.webpack = (webpackConfig, context2) => {
-    let result = webpackConfig;
-    if (typeof existingWebpack === "function") {
-      result = existingWebpack(webpackConfig, context2);
+  const labelOutcome = checkOperationLabel(candidate.operation);
+  if (!labelOutcome.accepted) {
+    recordOmissionOnActiveSpan(labelOutcome.reason);
+    return;
+  }
+  let acceptedStatus;
+  if (candidate.status !== void 0) {
+    if (checkOperationStatus(candidate.status)) {
+      acceptedStatus = candidate.status;
+    } else {
+      recordOmissionOnActiveSpan("unsupported_key");
     }
-    const webpackContext = context2;
-    if (webpackContext.isServer) {
-      appendNodeSchemeExternal(result);
+  }
+  let acceptedPhase;
+  if (candidate.phase !== void 0) {
+    if (checkOperationPhase(candidate.phase)) {
+      acceptedPhase = candidate.phase;
+    } else {
+      recordOmissionOnActiveSpan("unsupported_key");
     }
-    if (!webpackContext.isServer && webpackContext.dev === false) {
-      const plugins = result.plugins ?? [];
-      plugins.push({
-        apply(compiler) {
-          const typedCompiler = compiler;
-          if (typedCompiler.hooks?.afterEmit?.tapPromise) {
-            typedCompiler.hooks.afterEmit.tapPromise(
-              "GlasstraceSourceMapUpload",
-              async () => {
-                await handleSourceMapUpload(distDir);
-              }
-            );
-          }
-        }
-      });
-      result.plugins = plugins;
+  }
+  const outcome = attachOperation({
+    kind: candidate.kind,
+    operation: labelOutcome.value,
+    status: acceptedStatus,
+    phase: acceptedPhase
+  });
+  if (outcome.kind === "no_active_span") {
+    return;
+  }
+  if (outcome.kind === "over_budget") {
+    recordOmission(outcome.span, "value_too_long");
+    return;
+  }
+  const fields = candidate.fields;
+  if (fields && typeof fields === "object") {
+    for (const [rawKey, rawValue] of Object.entries(fields)) {
+      if (!checkSemanticFieldKey(rawKey)) {
+        recordOmission(outcome.span, "unsupported_key");
+        continue;
+      }
+      const valueOutcome = checkSemanticFieldValue(rawKey, rawValue);
+      if (!valueOutcome.accepted) {
+        recordOmission(outcome.span, valueOutcome.reason);
+        continue;
+      }
+      try {
+        maybeWarnMixedCasing(rawKey, valueOutcome.value);
+        maybeWarnPatternKeyProliferation(rawKey);
+      } catch {
+      }
+      attachField(outcome.span, rawKey, valueOutcome.value);
     }
-    return result;
-  };
-  return config2;
+  }
 }
-var _turbopackWarningEmitted = false;
-function warnTurbopackLimitationOnce() {
-  if (_turbopackWarningEmitted) return;
-  _turbopackWarningEmitted = true;
-  console.warn(
-    "[glasstrace] Turbopack detected. Source-map upload currently runs only under webpack \u2014 run `next build --webpack` to upload source maps, or wait for the Turbopack port in a future SDK release."
-  );
+
+// src/runtime-state.ts
+init_console_capture();
+var fsSync = null;
+var pathSync = null;
+try {
+  fsSync = require("node:fs");
+  pathSync = require("node:path");
+} catch {
+  fsSync = null;
+  pathSync = null;
+}
+var _projectRoot = null;
+var _sdkVersion = "unknown";
+var _lastScenario;
+var _lastError;
+var _debounceTimer = null;
+var _started = false;
+function startRuntimeStateWriter(options) {
+  if (_started) return;
+  if (!isSyncFsAvailable() || fsSync === null || pathSync === null) {
+    _started = true;
+    return;
+  }
+  _started = true;
+  _projectRoot = options.projectRoot;
+  _sdkVersion = options.sdkVersion;
+  onLifecycleEvent("core:state_changed", ({ to }) => {
+    if (to === CoreState.SHUTDOWN) {
+      writeStateNow();
+    } else {
+      debouncedWrite();
+    }
+  });
+  onLifecycleEvent("otel:configured", ({ scenario }) => {
+    _lastScenario = scenario;
+    debouncedWrite();
+  });
+  onLifecycleEvent("otel:failed", (payload) => {
+    _lastError = { ...payload };
+    debouncedWrite();
+  });
+  onLifecycleEvent("otel:circuit_opened", (payload) => {
+    _lastError = {
+      category: "export-circuit-open",
+      message: payload.message,
+      timestamp: payload.timestamp,
+      exportCircuitCategory: payload.category
+    };
+    debouncedWrite();
+  });
+  onLifecycleEvent("otel:circuit_closed", () => {
+    if (_lastError?.category === "export-circuit-open") {
+      _lastError = void 0;
+      debouncedWrite();
+    }
+  });
+  onLifecycleEvent("auth:key_resolved", () => debouncedWrite());
+  onLifecycleEvent("auth:claim_started", () => debouncedWrite());
+  onLifecycleEvent("auth:claim_completed", () => debouncedWrite());
+  writeStateNow();
+}
+function debouncedWrite() {
+  if (_debounceTimer) return;
+  _debounceTimer = setTimeout(() => {
+    _debounceTimer = null;
+    writeStateNow();
+  }, 1e3);
+  if (typeof _debounceTimer === "object" && "unref" in _debounceTimer) {
+    _debounceTimer.unref();
+  }
 }
-async function handleSourceMapUpload(distDir) {
+function writeStateNow() {
+  if (!_projectRoot) return;
   try {
-    const apiKey = process.env.GLASSTRACE_API_KEY;
-    const endpoint = process.env.GLASSTRACE_ENDPOINT ?? "https://api.glasstrace.dev";
-    if (!apiKey || apiKey.trim() === "") {
-      console.info(
-        "[glasstrace] Source map upload skipped (no API key). Stack traces will show compiled locations."
-      );
-      return;
-    }
-    const { discoverSourceMapFiles: discoverSourceMapFiles2, computeBuildHash: computeBuildHash2, uploadSourceMaps: uploadSourceMaps2 } = await Promise.resolve().then(() => (init_source_map_uploader(), source_map_uploader_exports));
-    const files = await discoverSourceMapFiles2(distDir);
-    if (files.length === 0) {
-      console.info("[glasstrace] No source map files found. Skipping upload.");
-      return;
+    const state = getSdkState();
+    const runtimeState = {
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      pid: process.pid,
+      sdkVersion: _sdkVersion,
+      core: { state: state.core },
+      auth: { state: state.auth },
+      otel: { state: state.otel, scenario: _lastScenario }
+    };
+    if (_lastError) {
+      runtimeState.lastError = _lastError;
     }
-    const buildHash = await computeBuildHash2(files);
-    await uploadSourceMaps2(apiKey, endpoint, buildHash, files);
-    console.info(
-      `[glasstrace] Uploaded ${String(files.length)} source map(s) for build ${buildHash}.`
-    );
-  } catch (error51) {
-    const message = error51 instanceof Error ? error51.message : "Unknown error";
-    console.warn(
-      `[glasstrace] Source map upload failed: ${message}. Build continues normally.`
+    const dir = pathSync.join(_projectRoot, ".glasstrace");
+    const filePath = pathSync.join(dir, "runtime-state.json");
+    fsSync.mkdirSync(dir, { recursive: true, mode: 448 });
+    atomicWriteFileSync(filePath, JSON.stringify(runtimeState, null, 2) + "\n", {
+      mode: 384
+    });
+  } catch (err) {
+    sdkLog(
+      "warn",
+      `[glasstrace] Failed to write runtime state: ${err instanceof Error ? err.message : String(err)}`
     );
   }
 }
 
-// src/capture-error.ts
-init_esm();
-init_dist();
-init_error_nudge();
+// src/agent-detection/upgrade-notice.ts
+var fs2 = __toESM(require("node:fs"), 1);
+var path2 = __toESM(require("node:path"), 1);
 
-// src/stack-frame.ts
-var PAREN_FRAME = /^\s*at\s+(?!eval\s+\(eval\s+at\b)(?:[^()]+\s+)?\(([^()\s]+(?:\([A-Za-z0-9_.-]+\)[^()\s]*)*):(\d+):(\d+)\)\s*$/;
-var BARE_FRAME = /^\s*at\s+(?:async\s+)?([^()\s]+(?:\([A-Za-z0-9_.-]+\)[^()\s]*)*):(\d+):(\d+)\s*$/;
-var INTERNAL_FRAME_PATTERNS = [
-  /^node:/,
-  /^node:internal\//,
-  /[/\\]node_modules[/\\]@glasstrace[/\\]sdk[/\\]/,
-  /[/\\]packages[/\\]sdk[/\\]src[/\\]capture-error\./,
-  /[/\\]packages[/\\]sdk[/\\]src[/\\]stack-frame\./
+// src/agent-detection/inject.ts
+var HTML_START_RE = /^<!--\s*glasstrace:mcp:start(?:\s+v=([^\s>]+))?\s*-->$/;
+var HTML_END = "<!-- glasstrace:mcp:end -->";
+var HASH_START_RE = /^#\s*glasstrace:mcp:start(?:\s+v=(\S+))?$/;
+var HASH_END = "# glasstrace:mcp:end";
+function parseStartMarkerLine(line) {
+  const trimmed = line.trim();
+  const html = HTML_START_RE.exec(trimmed);
+  if (html !== null) {
+    return { kind: "html", stamp: html[1] ?? null };
+  }
+  const hash2 = HASH_START_RE.exec(trimmed);
+  if (hash2 !== null) {
+    return { kind: "hash", stamp: hash2[1] ?? null };
+  }
+  return null;
+}
+function isEndMarker(line) {
+  const trimmed = line.trim();
+  return trimmed === HTML_END || trimmed === HASH_END;
+}
+function isEndMarkerLine(line) {
+  return isEndMarker(line);
+}
+
+// src/agent-detection/upgrade-notice.ts
+var warningEmitted = false;
+var AGENT_INSTRUCTION_FILES = [
+  "AGENTS.md",
+  "CLAUDE.md",
+  "GEMINI.md",
+  ".cursor/rules/glasstrace.mdc",
+  ".windsurf/rules/glasstrace.md",
+  ".cursorrules",
+  "codex.md",
+  ".windsurfrules"
 ];
-function isInternalFrame(file2) {
-  return INTERNAL_FRAME_PATTERNS.some((re2) => re2.test(file2));
+function parseSemver(input) {
+  const plusIdx = input.indexOf("+");
+  const core = plusIdx === -1 ? input : input.slice(0, plusIdx);
+  const m = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?$/.exec(core);
+  if (m === null) return null;
+  return {
+    major: Number(m[1]),
+    minor: Number(m[2]),
+    patch: Number(m[3]),
+    prerelease: m[4] ?? null
+  };
 }
-function parseTopStackFrame(stack) {
-  if (typeof stack !== "string" || stack.length === 0) return null;
-  let cursor = 0;
-  while (cursor < stack.length) {
-    const newlineAt = stack.indexOf("\n", cursor);
-    const lineEnd = newlineAt === -1 ? stack.length : newlineAt;
-    const line = stack.slice(cursor, lineEnd);
-    cursor = lineEnd + 1;
-    if (!/^\s*at\s/.test(line)) continue;
-    let file2;
-    let lineStr;
-    const parenMatch = PAREN_FRAME.exec(line);
-    if (parenMatch) {
-      file2 = parenMatch[1];
-      lineStr = parenMatch[2];
-    } else {
-      const bareMatch = BARE_FRAME.exec(line);
-      if (bareMatch) {
-        file2 = bareMatch[1];
-        lineStr = bareMatch[2];
-      }
+function comparePrerelease(a, b) {
+  const ap = a.split(".");
+  const bp = b.split(".");
+  const len = Math.min(ap.length, bp.length);
+  for (let i = 0; i < len; i++) {
+    const x = ap[i];
+    const y = bp[i];
+    const xNumeric = /^\d+$/.test(x);
+    const yNumeric = /^\d+$/.test(y);
+    if (xNumeric && yNumeric) {
+      const xv = Number(x);
+      const yv = Number(y);
+      if (xv !== yv) return xv < yv ? -1 : 1;
+    } else if (xNumeric) {
+      return -1;
+    } else if (yNumeric) {
+      return 1;
+    } else if (x !== y) {
+      return x < y ? -1 : 1;
     }
-    if (!file2 || !lineStr) continue;
-    if (isInternalFrame(file2)) continue;
-    const lineNum = Number.parseInt(lineStr, 10);
-    if (!Number.isFinite(lineNum) || lineNum <= 0) continue;
-    return { file: file2, line: lineNum };
   }
-  return null;
+  return ap.length - bp.length;
 }
-
-// src/capture-error.ts
-function captureError(error51) {
+function compareSemver(a, b) {
+  const pa = parseSemver(a);
+  const pb = parseSemver(b);
+  if (pa === null || pb === null) return null;
+  if (pa.major !== pb.major) return pa.major - pb.major;
+  if (pa.minor !== pb.minor) return pa.minor - pb.minor;
+  if (pa.patch !== pb.patch) return pa.patch - pb.patch;
+  if (pa.prerelease === null && pb.prerelease === null) return 0;
+  if (pa.prerelease === null) return 1;
+  if (pb.prerelease === null) return -1;
+  return comparePrerelease(pa.prerelease, pb.prerelease);
+}
+function isOptedOut() {
+  const raw = process.env.GLASSTRACE_DISABLE_UPGRADE_NOTICE;
+  if (typeof raw !== "string") return false;
+  const trimmed = raw.trim().toLowerCase();
+  return trimmed === "1" || trimmed === "true" || trimmed === "yes";
+}
+function isQuietCiContext() {
+  const stderrIsTty = process.stderr.isTTY === true;
+  if (stderrIsTty) return false;
+  return process.env.CI === "true";
+}
+var MAX_AGENT_FILE_BYTES = 5 * 1024 * 1024;
+function inspectFile(filePath, runningSdkVersion) {
+  let content;
   try {
-    const span = trace.getSpan(context.active());
-    if (!span) return;
-    const attributes = {
-      "error.message": String(error51)
-    };
-    if (error51 instanceof Error) {
-      attributes["error.type"] = error51.constructor.name;
-      if (error51.stack) {
-        attributes["error.stack"] = error51.stack;
-        const frame = parseTopStackFrame(error51.stack);
-        if (frame) {
-          attributes[GLASSTRACE_ATTRIBUTE_NAMES.SOURCE_FILE] = frame.file;
-          attributes[GLASSTRACE_ATTRIBUTE_NAMES.SOURCE_LINE] = frame.line;
-        }
+    const stat2 = fs2.statSync(filePath);
+    if (!stat2.isFile()) return "absent";
+    if (stat2.size > MAX_AGENT_FILE_BYTES) return "absent";
+    content = fs2.readFileSync(filePath, "utf-8");
+  } catch {
+    return "absent";
+  }
+  const lines = content.split("\n");
+  let lastStart = null;
+  let foundEnd = false;
+  for (const line of lines) {
+    const parsed = parseStartMarkerLine(line);
+    if (parsed !== null) {
+      lastStart = parsed;
+      continue;
+    }
+    if (lastStart !== null && isEndMarkerLine(line)) {
+      foundEnd = true;
+      break;
+    }
+  }
+  if (lastStart === null || !foundEnd) {
+    return "no-section";
+  }
+  if (lastStart.stamp === null) {
+    return "no-stamp";
+  }
+  const cmp = compareSemver(lastStart.stamp, runningSdkVersion);
+  if (cmp === null) {
+    return "unknown-stamp";
+  }
+  return cmp < 0 ? "stale" : "current";
+}
+function maybeWarnStaleAgentInstructions(options) {
+  try {
+    if (warningEmitted) return;
+    if (typeof process === "undefined" || typeof process.versions?.node !== "string" || typeof process.env !== "object" || process.env === null) {
+      return;
+    }
+    if (isOptedOut()) return;
+    if (isQuietCiContext()) return;
+    if (parseSemver(options.sdkVersion) === null) return;
+    const staleFiles = [];
+    for (const fileName of AGENT_INSTRUCTION_FILES) {
+      const fullPath = path2.join(options.projectRoot, fileName);
+      const state = inspectFile(fullPath, options.sdkVersion);
+      if (state === "stale") {
+        staleFiles.push(fileName);
       }
     }
-    span.addEvent("glasstrace.error", attributes);
-    maybeShowMcpNudge(String(error51));
+    if (staleFiles.length === 0) return;
+    const fileList = staleFiles.join(", ");
+    const message = `[glasstrace] Glasstrace managed MCP section in ${fileList} was rendered by an older @glasstrace/sdk; run \`npx glasstrace upgrade-instructions\` to refresh (silence with GLASSTRACE_DISABLE_UPGRADE_NOTICE=1).
+`;
+    warningEmitted = true;
+    if (options.stderrWrite !== void 0) {
+      options.stderrWrite(message);
+      return;
+    }
+    try {
+      process.stderr.write(message);
+    } catch {
+    }
   } catch {
   }
 }
 
-// src/correlation-id.ts
-init_esm();
-init_dist();
-var ATTR2 = GLASSTRACE_ATTRIBUTE_NAMES;
-var HEADER_NAME = "x-gt-cid";
-var MAX_CID_LENGTH = 128;
-function captureCorrelationId(req) {
+// src/register.ts
+function maskKey(key) {
+  if (key.length <= 12) return key.slice(0, 4) + "...";
+  return key.slice(0, 8) + "..." + key.slice(-4);
+}
+var consoleCaptureInstalled = false;
+var discoveryHandler = null;
+var registrationGeneration = 0;
+var _sessionManager = null;
+function getSessionManager() {
+  if (!_sessionManager) {
+    _sessionManager = new SessionManager();
+  }
+  return _sessionManager;
+}
+function registerGlasstrace(options) {
   try {
-    if (!req || !req.headers) {
+    if (getCoreState() !== CoreState.IDLE) {
       return;
     }
-    const value = readHeader(req.headers);
-    if (!value) {
+    initLifecycle({ logger: sdkLog });
+    if (typeof process === "undefined" || typeof process.versions?.node !== "string") {
+      console.warn(
+        "[glasstrace] SDK requires a Node.js runtime. Edge Runtime, browser, and Deno without Node compat are not supported. Glasstrace is disabled in this environment."
+      );
       return;
     }
-    const span = trace.getActiveSpan();
-    if (!span) {
+    setCoreState(CoreState.REGISTERING);
+    maybeWarnStaleAgentInstructions({
+      projectRoot: process.cwd(),
+      sdkVersion: "1.14.0"
+    });
+    startRuntimeStateWriter({
+      projectRoot: process.cwd(),
+      sdkVersion: "1.14.0"
+    });
+    const config2 = resolveConfig(options);
+    setSideEffectVerboseFlag(config2.verbose);
+    if (config2.verbose) {
+      console.info("[glasstrace] Config resolved.");
+    }
+    if (isProductionDisabled(config2)) {
+      setCoreState(CoreState.PRODUCTION_DISABLED);
+      console.warn(
+        "[glasstrace] Disabled in production. Set GLASSTRACE_FORCE_ENABLE=true to override."
+      );
       return;
     }
-    span.setAttribute(ATTR2.CORRELATION_ID, value);
-  } catch {
-  }
-}
-function readHeader(headers) {
-  const asFetch = headers;
-  if (typeof asFetch.get === "function") {
-    const raw = asFetch.get(HEADER_NAME);
-    return firstToken(raw);
-  }
-  const dict = headers;
-  const direct = dict[HEADER_NAME];
-  if (direct !== void 0) {
-    return firstValue(direct);
-  }
-  for (const key of Object.keys(dict)) {
-    if (key.toLowerCase() === HEADER_NAME) {
-      return firstValue(dict[key]);
+    if (config2.verbose) {
+      console.info("[glasstrace] Not production-disabled.");
     }
-  }
-  return void 0;
-}
-function firstValue(value) {
-  if (Array.isArray(value)) {
-    for (const entry of value) {
-      const token = firstToken(entry);
-      if (token) return token;
+    const existingTracerProvider = trace.getTracerProvider();
+    const existingProbe = existingTracerProvider.getTracer("glasstrace-probe");
+    const anotherProviderRegistered = !isProxyTracerProvider(existingTracerProvider) || !isProxyTracer(existingProbe, existingTracerProvider);
+    if (anotherProviderRegistered) {
+      setCoexistenceState("coexisting");
     }
-    return void 0;
-  }
-  return firstToken(value);
-}
-function firstToken(value) {
-  if (typeof value !== "string") return void 0;
-  const parts = value.split(",");
-  for (const part of parts) {
-    const trimmed = part.trim();
-    if (trimmed.length === 0) continue;
-    if (trimmed.length > MAX_CID_LENGTH) return void 0;
-    return trimmed;
-  }
-  return void 0;
-}
-
-// src/side-effect/allowlist.ts
-init_dist();
-var MAX_SIDE_EFFECT_OPERATION_LABEL_LENGTH = 96;
-var MAX_SIDE_EFFECT_FIELD_VALUE_LENGTH = 80;
-var MAX_SIDE_EFFECT_FIELD_COUNT_VALUE_LENGTH = 16;
-var MAX_SIDE_EFFECT_OPERATIONS_PER_SPAN = 5;
-var OPERATION_KIND_SET = new Set(
-  SIDE_EFFECT_OPERATION_KINDS
-);
-var OPERATION_STATUS_SET = new Set(
-  SIDE_EFFECT_OPERATION_STATUSES
-);
-var OPERATION_PHASE_SET = new Set(
-  SIDE_EFFECT_OPERATION_PHASES
-);
-var OMISSION_REASON_SET = new Set(
-  SIDE_EFFECT_OMISSION_REASONS
-);
-var TOKEN_REGEX = /^[A-Za-z0-9][A-Za-z0-9_.:-]*$/;
-var LOCALE_REGEX = /^[A-Za-z]{2,3}(?:-[A-Za-z0-9]{2,8}){0,3}$/;
-var TIMEZONE_REGEX = /^(?:UTC|GMT|[A-Za-z][A-Za-z0-9_+-]*(?:\/[A-Za-z0-9_+-]+){1,3})$/;
-var DIGIT_REGEX = /^[0-9]+$/;
-var URL_SCHEME = /:\/\//;
-var URL_SCHEME_RELATIVE = /^\/\//;
-var EMAIL_LIKE = /[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}/i;
-var QUERY_LIKE = /\?/;
-var FRAGMENT_LIKE = /#/;
-var HEADER_LIKE = /\b(authorization|set-cookie|cookie)\b\s*[:=]/i;
-var HEADER_TOKEN_LIKE = /\b(authorization|set-cookie|cookie)\b\s+\S+=/i;
-var BEARER_LIKE = /bearer\s+\S+/i;
-var TOKEN_KV_LIKE = /["']?(password|passwd|token|api[_-]?key|secret|client_secret)["']?\s*[:=]/i;
-var PROSE_LIKE = /[\r\n\t]|\s{2,}/;
-var UUID_LIKE = /[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}/i;
-var GT_KEY_LIKE = /gt_(dev|anon|live)_[A-Za-z0-9_-]+/;
-function detectUnsafePattern(value) {
-  if (value.trim() !== value) return "raw_payload";
-  if (PROSE_LIKE.test(value)) return "raw_payload";
-  if (URL_SCHEME.test(value)) return "raw_payload";
-  if (URL_SCHEME_RELATIVE.test(value)) return "raw_payload";
-  if (QUERY_LIKE.test(value)) return "raw_payload";
-  if (FRAGMENT_LIKE.test(value)) return "raw_payload";
-  if (BEARER_LIKE.test(value)) return "secret";
-  if (HEADER_TOKEN_LIKE.test(value)) return "secret";
-  if (TOKEN_KV_LIKE.test(value)) return "secret";
-  if (HEADER_LIKE.test(value)) return "secret";
-  if (UUID_LIKE.test(value)) return "secret";
-  if (GT_KEY_LIKE.test(value)) return "secret";
-  if (EMAIL_LIKE.test(value)) return "pii";
-  return null;
-}
-function passesFieldValidator(key, value) {
-  if (key === "locale") return LOCALE_REGEX.test(value);
-  if (key === "timezone") return TIMEZONE_REGEX.test(value);
-  if (typeof key === "string" && key.endsWith("Count")) {
-    return DIGIT_REGEX.test(value);
+    registerSignalHandlers();
+    const anonymous = isAnonymousMode(config2);
+    let effectiveKey = config2.apiKey;
+    initAuthState(anonymous ? AuthState.ANONYMOUS : AuthState.AUTHENTICATED);
+    if (effectiveKey) {
+      setResolvedApiKey(effectiveKey);
+      emitLifecycleEvent("auth:key_resolved", {
+        key: maskKey(effectiveKey),
+        mode: anonymous ? "anonymous" : "dev"
+      });
+    }
+    if (config2.verbose) {
+      console.info(
+        `[glasstrace] Auth mode = ${anonymous ? "anonymous" : "dev-key"}.`
+      );
+    }
+    const cachedInitResponse = loadCachedConfig();
+    if (cachedInitResponse) {
+      _setCurrentConfig(cachedInitResponse);
+    }
+    if (config2.verbose) {
+      console.info(
+        `[glasstrace] Cached config ${cachedInitResponse ? "loaded and applied" : "not found"}.`
+      );
+    }
+    const sessionManager = getSessionManager();
+    if (config2.verbose) {
+      console.info("[glasstrace] SessionManager created.");
+    }
+    setCoreState(CoreState.KEY_PENDING);
+    const currentGeneration = registrationGeneration;
+    if (anotherProviderRegistered) {
+      if (config2.verbose) {
+        console.info("[glasstrace] Another OTel provider detected \u2014 using existing context manager.");
+      }
+    } else {
+      const contextManagerInstalled = installContextManager();
+      if (config2.verbose) {
+        console.info(
+          contextManagerInstalled ? "[glasstrace] Context manager installed." : "[glasstrace] Context manager not available \u2014 trace context propagation disabled."
+        );
+      }
+    }
+    void configureOtel(config2, sessionManager).then(
+      () => {
+        maybeInstallConsoleCapture();
+        if (config2.verbose) {
+          console.info("[glasstrace] OTel configured.");
+        }
+      },
+      (err) => {
+        console.warn(
+          `[glasstrace] Failed to configure OTel: ${err instanceof Error ? err.message : String(err)}`
+        );
+      }
+    );
+    if (anonymous) {
+      if (isDiscoveryEnabled(config2)) {
+        let resolvedAnonKey = null;
+        const anonKeyPromise = getOrCreateAnonKey();
+        const getClaimState = () => {
+          if (getLinkedAccountId()) return { claimed: true };
+          if (getClaimResult()) return { claimed: true };
+          return null;
+        };
+        discoveryHandler = createDiscoveryHandler(
+          async () => resolvedAnonKey,
+          () => sessionManager.getSessionId(getResolvedApiKey()),
+          getClaimState
+        );
+        if (config2.verbose) {
+          console.info("[glasstrace] Discovery endpoint registered (key pending).");
+        }
+        void (async () => {
+          try {
+            if (currentGeneration !== registrationGeneration) return;
+            const anonKey = await anonKeyPromise;
+            resolvedAnonKey = anonKey;
+            setResolvedApiKey(anonKey);
+            notifyApiKeyResolved();
+            emitLifecycleEvent("auth:key_resolved", { key: maskKey(anonKey), mode: "anonymous" });
+            effectiveKey = anonKey;
+            if (currentGeneration !== registrationGeneration) return;
+            discoveryHandler = createDiscoveryHandler(
+              () => Promise.resolve(anonKey),
+              () => sessionManager.getSessionId(getResolvedApiKey()),
+              getClaimState
+            );
+            await backgroundInit(config2, anonKey, currentGeneration);
+          } catch (err) {
+            console.warn(
+              `[glasstrace] Background init failed: ${err instanceof Error ? err.message : String(err)}`
+            );
+          }
+        })();
+      } else {
+        void (async () => {
+          try {
+            if (currentGeneration !== registrationGeneration) return;
+            const anonKey = await getOrCreateAnonKey();
+            setResolvedApiKey(anonKey);
+            notifyApiKeyResolved();
+            emitLifecycleEvent("auth:key_resolved", { key: maskKey(anonKey), mode: "anonymous" });
+            effectiveKey = anonKey;
+            if (currentGeneration !== registrationGeneration) return;
+            await backgroundInit(config2, anonKey, currentGeneration);
+          } catch (err) {
+            console.warn(
+              `[glasstrace] Background init failed: ${err instanceof Error ? err.message : String(err)}`
+            );
+          }
+        })();
+      }
+    } else {
+      void (async () => {
+        try {
+          if (currentGeneration !== registrationGeneration) return;
+          let anonKeyForInit = null;
+          try {
+            anonKeyForInit = await readAnonKey();
+          } catch {
+          }
+          if (currentGeneration !== registrationGeneration) return;
+          await backgroundInit(config2, anonKeyForInit, currentGeneration);
+        } catch (err) {
+          console.warn(
+            `[glasstrace] Background init failed: ${err instanceof Error ? err.message : String(err)}`
+          );
+        }
+      })();
+    }
+    if (config2.coverageMapEnabled && config2.verbose) {
+      console.info("[glasstrace] Import graph building skipped.");
+    }
+  } catch (err) {
+    setCoreState(CoreState.REGISTRATION_FAILED);
+    console.warn(
+      `[glasstrace] Registration failed: ${err instanceof Error ? err.message : String(err)}`
+    );
   }
-  return TOKEN_REGEX.test(value);
 }
-function checkOperationLabel(value) {
-  if (typeof value !== "string" || value.length === 0) {
-    return { accepted: false, reason: "raw_payload" };
-  }
-  if (value.length > MAX_SIDE_EFFECT_OPERATION_LABEL_LENGTH) {
-    return { accepted: false, reason: "value_too_long" };
-  }
-  const unsafe = detectUnsafePattern(value);
-  if (unsafe) {
-    return { accepted: false, reason: unsafe };
+async function backgroundInit(config2, anonKeyForInit, generation) {
+  if (config2.verbose) {
+    console.info("[glasstrace] Background init firing.");
   }
-  if (!TOKEN_REGEX.test(value)) {
-    return { accepted: false, reason: "raw_payload" };
+  const healthReport = collectHealthReport("1.14.0");
+  const initResult = await performInit(config2, anonKeyForInit, "1.14.0", healthReport);
+  if (generation !== registrationGeneration) return;
+  const currentState = getCoreState();
+  if (currentState === CoreState.SHUTTING_DOWN || currentState === CoreState.SHUTDOWN) {
+    return;
   }
-  return { accepted: true, value };
-}
-function checkSemanticFieldValue(key, value) {
-  if (typeof value !== "string" || value.length === 0) {
-    return { accepted: false, reason: "raw_payload" };
+  if (currentState === CoreState.KEY_PENDING) {
+    setCoreState(CoreState.KEY_RESOLVED);
   }
-  const maxLength = typeof key === "string" && key.endsWith("Count") ? MAX_SIDE_EFFECT_FIELD_COUNT_VALUE_LENGTH : MAX_SIDE_EFFECT_FIELD_VALUE_LENGTH;
-  if (value.length > maxLength) {
-    return { accepted: false, reason: "value_too_long" };
+  if (getCoreState() === CoreState.KEY_RESOLVED) {
+    setCoreState(didLastInitSucceed() ? CoreState.ACTIVE : CoreState.ACTIVE_DEGRADED);
   }
-  const unsafe = detectUnsafePattern(value);
-  if (unsafe) {
-    return { accepted: false, reason: unsafe };
+  if (initResult?.claimResult) {
+    const { newApiKey, accountId } = initResult.claimResult;
+    setAuthState(AuthState.CLAIMING);
+    emitLifecycleEvent("auth:claim_started", { accountId });
+    setResolvedApiKey(newApiKey);
+    notifyApiKeyResolved();
+    setAuthState(AuthState.CLAIMED);
+    emitLifecycleEvent("auth:claim_completed", { newKey: maskKey(newApiKey), accountId });
   }
-  if (!passesFieldValidator(key, value)) {
-    return { accepted: false, reason: "raw_payload" };
+  maybeInstallConsoleCapture();
+  if (didLastInitSucceed()) {
+    startHeartbeat(config2, anonKeyForInit, "1.14.0", generation, (newApiKey, accountId) => {
+      setAuthState(AuthState.CLAIMING);
+      emitLifecycleEvent("auth:claim_started", { accountId });
+      setResolvedApiKey(newApiKey);
+      notifyApiKeyResolved();
+      setAuthState(AuthState.CLAIMED);
+      emitLifecycleEvent("auth:claim_completed", { newKey: maskKey(newApiKey), accountId });
+    });
   }
-  return { accepted: true, value };
-}
-function checkSemanticFieldKey(key) {
-  return typeof key === "string" && isSideEffectSemanticFieldKey(key);
 }
-function checkOperationKind(kind) {
-  return typeof kind === "string" && OPERATION_KIND_SET.has(kind);
+function getDiscoveryHandler() {
+  return discoveryHandler;
 }
-function checkOperationStatus(status) {
-  return typeof status === "string" && OPERATION_STATUS_SET.has(status);
+function maybeInstallConsoleCapture() {
+  if (consoleCaptureInstalled) return;
+  if (getActiveConfig().consoleErrors) {
+    consoleCaptureInstalled = true;
+    void installConsoleCapture();
+  }
 }
-function checkOperationPhase(phase) {
-  return typeof phase === "string" && OPERATION_PHASE_SET.has(phase);
+function isDiscoveryEnabled(config2) {
+  if (process.env.GLASSTRACE_DISCOVERY_ENABLED === "true") return true;
+  if (process.env.GLASSTRACE_DISCOVERY_ENABLED === "false") return false;
+  if (config2.nodeEnv === "production") return false;
+  if (config2.vercelEnv === "production") return false;
+  if (config2.nodeEnv === "development" || config2.nodeEnv === void 0) return true;
+  return false;
 }
 
-// src/side-effect/emit.ts
-init_esm();
-init_dist();
-var spanState = /* @__PURE__ */ new WeakMap();
-function getOrCreateState(span) {
-  let state = spanState.get(span);
-  if (!state) {
-    state = { operationsRecorded: 0, omissions: /* @__PURE__ */ new Map() };
-    spanState.set(span, state);
-  }
-  return state;
+// src/config-wrapper.ts
+var import_node_module = require("node:module");
+function isTurbopackBuild() {
+  if (typeof process === "undefined") return false;
+  const argv = Array.isArray(process.argv) ? process.argv : [];
+  if (argv.includes("--webpack")) return false;
+  if (argv.includes("--turbopack")) return true;
+  if (process.env?.TURBOPACK === "1") return true;
+  return false;
 }
-function getRecordingActiveSpan() {
-  let span;
-  try {
-    span = trace.getActiveSpan();
-  } catch {
-    return void 0;
-  }
-  if (!span) return void 0;
-  try {
-    if (typeof span.isRecording === "function" && !span.isRecording()) {
-      return void 0;
+var SDK_PACKAGE_NAME = "@glasstrace/sdk";
+function appendNodeSchemeExternal(webpackConfig) {
+  const nodeBuiltinExternal = (data, callback) => {
+    const request = data.request;
+    if (typeof request === "string" && (0, import_node_module.isBuiltin)(request)) {
+      callback(null, "commonjs " + request);
+      return;
     }
-  } catch {
-    return void 0;
+    callback(null);
+  };
+  const existing = webpackConfig.externals;
+  if (Array.isArray(existing)) {
+    webpackConfig.externals = [...existing, nodeBuiltinExternal];
+  } else if (existing == null) {
+    webpackConfig.externals = [nodeBuiltinExternal];
+  } else {
+    webpackConfig.externals = [existing, nodeBuiltinExternal];
   }
-  return span;
-}
-function recordOmissionOnActiveSpan(reason) {
-  const span = getRecordingActiveSpan();
-  if (!span) return;
-  recordOmissionOnSpan(span, reason);
 }
-function recordOmissionOnSpan(span, reason) {
-  const state = getOrCreateState(span);
-  const previous = state.omissions.get(reason) ?? 0;
-  const next = previous + 1;
-  state.omissions.set(reason, next);
-  const attribute = OMISSION_ATTRIBUTE_BY_REASON[reason];
-  try {
-    span.setAttribute(attribute, next);
-  } catch {
+function ensureServerExternal(config2) {
+  const existingStable = config2.serverExternalPackages;
+  const stable = Array.isArray(existingStable) ? (
+    // Clone so we never mutate a caller-owned array in place.
+    existingStable.filter((entry) => typeof entry === "string")
+  ) : [];
+  if (!stable.includes(SDK_PACKAGE_NAME)) {
+    stable.push(SDK_PACKAGE_NAME);
   }
+  config2.serverExternalPackages = stable;
 }
-var OMISSION_ATTRIBUTE_BY_REASON = {
-  pii: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_PII,
-  secret: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_SECRET,
-  raw_payload: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_RAW_PAYLOAD,
-  unsupported_key: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_UNSUPPORTED_KEY,
-  value_too_long: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_VALUE_TOO_LONG,
-  not_emitted: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_NOT_EMITTED,
-  capture_disabled: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_CAPTURE_DISABLED
-};
-var FIELD_ATTRIBUTE_BY_KEY = {
-  templateKey: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_TEMPLATE_KEY,
-  providerOperation: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_PROVIDER_OPERATION,
-  role: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_ROLE,
-  locale: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_LOCALE,
-  timezone: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_TIMEZONE,
-  status: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_STATUS,
-  phase: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_PHASE,
-  recipientClass: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_RECIPIENT_CLASS,
-  participantCount: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_PARTICIPANT_COUNT,
-  activeParticipantCount: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_ACTIVE_PARTICIPANT_COUNT
-};
-function resolveFieldAttribute(key) {
-  const explicit = FIELD_ATTRIBUTE_BY_KEY[key];
-  if (explicit !== void 0) return explicit;
-  return `glasstrace.side_effect.field.${key}`;
+function withGlasstraceConfig(nextConfig) {
+  if (typeof process === "undefined" || typeof process.versions?.node !== "string") {
+    return nextConfig != null ? { ...nextConfig } : {};
+  }
+  const config2 = nextConfig != null ? { ...nextConfig } : {};
+  const bag = config2;
+  const existingExperimental = bag.experimental ?? {};
+  bag.experimental = {
+    ...existingExperimental,
+    serverSourceMaps: true
+  };
+  ensureServerExternal(bag);
+  if (bag.turbopack == null) {
+    bag.turbopack = {};
+  }
+  if (isTurbopackBuild()) {
+    warnTurbopackLimitationOnce();
+  }
+  const distDir = typeof bag.distDir === "string" ? bag.distDir : ".next";
+  const existingWebpack = bag.webpack;
+  bag.webpack = (webpackConfig, context2) => {
+    let result = webpackConfig;
+    if (typeof existingWebpack === "function") {
+      result = existingWebpack(webpackConfig, context2);
+    }
+    const webpackContext = context2;
+    if (webpackContext.isServer) {
+      appendNodeSchemeExternal(result);
+    }
+    if (!webpackContext.isServer && webpackContext.dev === false) {
+      const plugins = result.plugins ?? [];
+      plugins.push({
+        apply(compiler) {
+          const typedCompiler = compiler;
+          if (typedCompiler.hooks?.afterEmit?.tapPromise) {
+            typedCompiler.hooks.afterEmit.tapPromise(
+              "GlasstraceSourceMapUpload",
+              async () => {
+                await handleSourceMapUpload(distDir);
+              }
+            );
+          }
+        }
+      });
+      result.plugins = plugins;
+    }
+    return result;
+  };
+  return config2;
 }
-function attachOperation(input) {
-  const span = getRecordingActiveSpan();
-  if (!span) return { kind: "no_active_span" };
-  const state = getOrCreateState(span);
-  if (state.operationsRecorded >= MAX_SIDE_EFFECT_OPERATIONS_PER_SPAN) {
-    return { kind: "over_budget", span };
-  }
-  state.operationsRecorded += 1;
+var _turbopackWarningEmitted = false;
+function warnTurbopackLimitationOnce() {
+  if (_turbopackWarningEmitted) return;
+  _turbopackWarningEmitted = true;
+  console.warn(
+    "[glasstrace] Turbopack detected. Source-map upload currently runs only under webpack \u2014 run `next build --webpack` to upload source maps, or wait for the Turbopack port in a future SDK release."
+  );
+}
+async function handleSourceMapUpload(distDir) {
   try {
-    span.setAttribute(GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_KIND, input.kind);
-    span.setAttribute(
-      GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OPERATION,
-      input.operation
-    );
-    if (input.status !== void 0) {
-      span.setAttribute(
-        GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_STATUS,
-        input.status
+    const apiKey = process.env.GLASSTRACE_API_KEY;
+    const endpoint = process.env.GLASSTRACE_ENDPOINT ?? "https://api.glasstrace.dev";
+    if (!apiKey || apiKey.trim() === "") {
+      console.info(
+        "[glasstrace] Source map upload skipped (no API key). Stack traces will show compiled locations."
       );
+      return;
     }
-    if (input.phase !== void 0) {
-      span.setAttribute(
-        GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_PHASE,
-        input.phase
-      );
+    const { discoverSourceMapFiles: discoverSourceMapFiles2, computeBuildHash: computeBuildHash2, uploadSourceMaps: uploadSourceMaps2 } = await Promise.resolve().then(() => (init_source_map_uploader(), source_map_uploader_exports));
+    const files = await discoverSourceMapFiles2(distDir);
+    if (files.length === 0) {
+      console.info("[glasstrace] No source map files found. Skipping upload.");
+      return;
     }
-  } catch {
+    const buildHash = await computeBuildHash2(files);
+    await uploadSourceMaps2(apiKey, endpoint, buildHash, files);
+    console.info(
+      `[glasstrace] Uploaded ${String(files.length)} source map(s) for build ${buildHash}.`
+    );
+  } catch (error51) {
+    const message = error51 instanceof Error ? error51.message : "Unknown error";
+    console.warn(
+      `[glasstrace] Source map upload failed: ${message}. Build continues normally.`
+    );
   }
-  return { kind: "attached", span };
 }
-function attachField(span, key, value) {
-  const attribute = resolveFieldAttribute(key);
-  try {
-    span.setAttribute(attribute, value);
-  } catch {
-  }
+
+// src/capture-error.ts
+init_esm();
+init_dist();
+init_error_nudge();
+
+// src/stack-frame.ts
+var PAREN_FRAME = /^\s*at\s+(?!eval\s+\(eval\s+at\b)(?:[^()]+\s+)?\(([^()\s]+(?:\([A-Za-z0-9_.-]+\)[^()\s]*)*):(\d+):(\d+)\)\s*$/;
+var BARE_FRAME = /^\s*at\s+(?:async\s+)?([^()\s]+(?:\([A-Za-z0-9_.-]+\)[^()\s]*)*):(\d+):(\d+)\s*$/;
+var INTERNAL_FRAME_PATTERNS = [
+  /^node:/,
+  /^node:internal\//,
+  /[/\\]node_modules[/\\]@glasstrace[/\\]sdk[/\\]/,
+  /[/\\]packages[/\\]sdk[/\\]src[/\\]capture-error\./,
+  /[/\\]packages[/\\]sdk[/\\]src[/\\]stack-frame\./
+];
+function isInternalFrame(file2) {
+  return INTERNAL_FRAME_PATTERNS.some((re2) => re2.test(file2));
 }
-function recordOmission(span, reason) {
-  recordOmissionOnSpan(span, reason);
+function parseTopStackFrame(stack) {
+  if (typeof stack !== "string" || stack.length === 0) return null;
+  let cursor = 0;
+  while (cursor < stack.length) {
+    const newlineAt = stack.indexOf("\n", cursor);
+    const lineEnd = newlineAt === -1 ? stack.length : newlineAt;
+    const line = stack.slice(cursor, lineEnd);
+    cursor = lineEnd + 1;
+    if (!/^\s*at\s/.test(line)) continue;
+    let file2;
+    let lineStr;
+    const parenMatch = PAREN_FRAME.exec(line);
+    if (parenMatch) {
+      file2 = parenMatch[1];
+      lineStr = parenMatch[2];
+    } else {
+      const bareMatch = BARE_FRAME.exec(line);
+      if (bareMatch) {
+        file2 = bareMatch[1];
+        lineStr = bareMatch[2];
+      }
+    }
+    if (!file2 || !lineStr) continue;
+    if (isInternalFrame(file2)) continue;
+    const lineNum = Number.parseInt(lineStr, 10);
+    if (!Number.isFinite(lineNum) || lineNum <= 0) continue;
+    return { file: file2, line: lineNum };
+  }
+  return null;
 }
 
-// src/side-effect/index.ts
-function recordSideEffect(input) {
+// src/capture-error.ts
+function captureError(error51) {
   try {
-    runRecordSideEffect(input);
+    const span = trace.getSpan(context.active());
+    if (!span) return;
+    const attributes = {
+      "error.message": String(error51)
+    };
+    if (error51 instanceof Error) {
+      attributes["error.type"] = error51.constructor.name;
+      if (error51.stack) {
+        attributes["error.stack"] = error51.stack;
+        const frame = parseTopStackFrame(error51.stack);
+        if (frame) {
+          attributes[GLASSTRACE_ATTRIBUTE_NAMES.SOURCE_FILE] = frame.file;
+          attributes[GLASSTRACE_ATTRIBUTE_NAMES.SOURCE_LINE] = frame.line;
+        }
+      }
+    }
+    span.addEvent("glasstrace.error", attributes);
+    maybeShowMcpNudge(String(error51));
   } catch {
   }
 }
-function runRecordSideEffect(input) {
-  if (!input || typeof input !== "object") return;
-  let captureEnabled;
+
+// src/correlation-id.ts
+init_esm();
+init_dist();
+var ATTR2 = GLASSTRACE_ATTRIBUTE_NAMES;
+var HEADER_NAME = "x-gt-cid";
+var MAX_CID_LENGTH = 128;
+function captureCorrelationId(req) {
   try {
-    captureEnabled = getActiveConfig().sideEffectEvidence === true;
+    if (!req || !req.headers) {
+      return;
+    }
+    const value = readHeader(req.headers);
+    if (!value) {
+      return;
+    }
+    const span = trace.getActiveSpan();
+    if (!span) {
+      return;
+    }
+    span.setAttribute(ATTR2.CORRELATION_ID, value);
   } catch {
-    captureEnabled = false;
-  }
-  if (!captureEnabled) {
-    return;
   }
-  const candidate = input;
-  if (!checkOperationKind(candidate.kind)) {
-    return;
+}
+function readHeader(headers) {
+  const asFetch = headers;
+  if (typeof asFetch.get === "function") {
+    const raw = asFetch.get(HEADER_NAME);
+    return firstToken(raw);
   }
-  const labelOutcome = checkOperationLabel(candidate.operation);
-  if (!labelOutcome.accepted) {
-    recordOmissionOnActiveSpan(labelOutcome.reason);
-    return;
+  const dict = headers;
+  const direct = dict[HEADER_NAME];
+  if (direct !== void 0) {
+    return firstValue(direct);
   }
-  let acceptedStatus;
-  if (candidate.status !== void 0) {
-    if (checkOperationStatus(candidate.status)) {
-      acceptedStatus = candidate.status;
-    } else {
-      recordOmissionOnActiveSpan("unsupported_key");
+  for (const key of Object.keys(dict)) {
+    if (key.toLowerCase() === HEADER_NAME) {
+      return firstValue(dict[key]);
     }
   }
-  let acceptedPhase;
-  if (candidate.phase !== void 0) {
-    if (checkOperationPhase(candidate.phase)) {
-      acceptedPhase = candidate.phase;
-    } else {
-      recordOmissionOnActiveSpan("unsupported_key");
+  return void 0;
+}
+function firstValue(value) {
+  if (Array.isArray(value)) {
+    for (const entry of value) {
+      const token = firstToken(entry);
+      if (token) return token;
     }
+    return void 0;
   }
-  const outcome = attachOperation({
-    kind: candidate.kind,
-    operation: labelOutcome.value,
-    status: acceptedStatus,
-    phase: acceptedPhase
-  });
-  if (outcome.kind === "no_active_span") {
-    return;
-  }
-  if (outcome.kind === "over_budget") {
-    recordOmission(outcome.span, "value_too_long");
-    return;
-  }
-  const fields = candidate.fields;
-  if (fields && typeof fields === "object") {
-    for (const [rawKey, rawValue] of Object.entries(fields)) {
-      if (!checkSemanticFieldKey(rawKey)) {
-        recordOmission(outcome.span, "unsupported_key");
-        continue;
-      }
-      const valueOutcome = checkSemanticFieldValue(rawKey, rawValue);
-      if (!valueOutcome.accepted) {
-        recordOmission(outcome.span, valueOutcome.reason);
-        continue;
-      }
-      attachField(outcome.span, rawKey, valueOutcome.value);
-    }
+  return firstToken(value);
+}
+function firstToken(value) {
+  if (typeof value !== "string") return void 0;
+  const parts = value.split(",");
+  for (const part of parts) {
+    const trimmed = part.trim();
+    if (trimmed.length === 0) continue;
+    if (trimmed.length > MAX_CID_LENGTH) return void 0;
+    return trimmed;
   }
+  return void 0;
 }
 
 // src/index.ts