@glasstrace/sdk 1.2.0 → 1.3.0

package/README.md

@@ -199,6 +199,53 @@ body data. If your account enables the flag but a span never carries
 the internal attribute (no adapter set it), the public attribute is
 still absent. The default is "off, twice".
 
+## Source maps
+
+Glasstrace uploads server-side source maps at build time and resolves
+compiled-output stack frames back to original source on the dashboard
+and in agent prompts. Three span attributes connect the runtime trace
+to the build-time manifest:
+
+| Attribute | When stamped | Source |
+|---|---|---|
+| `glasstrace.build.hash` | every server span | `process.env.GLASSTRACE_BUILD_HASH` (read once at module load) |
+| `glasstrace.source.file` | error spans only | top user-attributable frame of `Error.stack` |
+| `glasstrace.source.line` | error spans only | top user-attributable frame of `Error.stack` |
+
+The build hash links a runtime span to the source maps uploaded
+during the same build. Set the env var in your deploy step:
+
+```bash
+# Vercel / GitHub Actions / any CI
+GLASSTRACE_BUILD_HASH=$(git rev-parse HEAD) npm run start
+```
+
+The Glasstrace `next.config.ts` wrapper (`withGlasstraceConfig`) and
+the `@glasstrace/sdk/node` upload helpers compute the same hash via
+`computeBuildHash()` (preferring `git rev-parse HEAD`, falling back
+to a deterministic content hash). When the runtime env var is unset,
+the SDK silently omits the attribute — no crash, no diagnostic — so
+projects that have not adopted the convention behave exactly as
+before; their stored traces simply do not render mapped frames in
+the dashboard.
+
+The error-source attributes are stamped only by the manual
+`captureError()` API, on the `glasstrace.error` span event. They
+report the compiled-output `file:line` from the top user-attributable
+frame; ingestion's resolver then maps that pair back to original
+source via the uploaded source map manifest. The SDK skips frames
+inside Node's built-in modules (`node:internal/*`, `node:fs`, etc.)
+and inside its own `node_modules/@glasstrace/sdk/` closure, so the
+reported frame is always the caller of `captureError()`. If
+`Error.stack` is absent, malformed, or contains only internal frames,
+the attributes are silently omitted and only the existing
+`error.message` / `error.type` / `error.stack` event attributes are
+recorded.
+
+These attributes are additive: any consumer that does not understand
+them ignores them. Existing trace pipelines and dashboards continue
+to work unchanged.
+
 ## Browser-extension discovery
 
 `glasstrace init` writes a small static file at

package/dist/{chunk-JKI4OCFV.js → chunk-A63WX7NR.js}

@@ -2,12 +2,12 @@ import {
   atomicWriteFile,
   refreshGenericMcpConfigAtRuntime,
   resolveEffectiveMcpCredential
-} from "./chunk-TWTWRJ25.js";
+} from "./chunk-AYUL5QMZ.js";
 import {
   DEFAULT_CAPTURE_CONFIG,
   SdkCachedConfigSchema,
   SdkInitResponseSchema
-} from "./chunk-X5MAXP5T.js";
+} from "./chunk-GTPTKN5A.js";
 import {
   __require
 } from "./chunk-NSBPE2FW.js";
@@ -692,4 +692,4 @@ export {
   didLastInitSucceed,
   verifyInitReachable
 };
-//# sourceMappingURL=chunk-JKI4OCFV.js.map
+//# sourceMappingURL=chunk-A63WX7NR.js.map

package/dist/{chunk-6RNBUUBR.js → chunk-AGCYKZFY.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-DQ25VOKK.js";
 import {
   GLASSTRACE_ATTRIBUTE_NAMES
-} from "./chunk-X5MAXP5T.js";
+} from "./chunk-GTPTKN5A.js";
 
 // src/errors.ts
 var SdkError = class extends Error {
@@ -102,4 +102,4 @@ export {
   GlasstraceSpanProcessor,
   captureCorrelationId
 };
-//# sourceMappingURL=chunk-6RNBUUBR.js.map
+//# sourceMappingURL=chunk-AGCYKZFY.js.map

package/dist/{chunk-4EZ6JTDG.js → chunk-AKZGMT33.js}

@@ -5,7 +5,7 @@ import {
   PresignedUploadResponseSchema,
   SourceMapManifestResponseSchema,
   SourceMapUploadResponseSchema
-} from "./chunk-X5MAXP5T.js";
+} from "./chunk-GTPTKN5A.js";
 
 // src/source-map-uploader.ts
 import * as fs from "node:fs/promises";
@@ -331,4 +331,4 @@ export {
   uploadSourceMapsPresigned,
   uploadSourceMapsAuto
 };
-//# sourceMappingURL=chunk-4EZ6JTDG.js.map
+//# sourceMappingURL=chunk-AKZGMT33.js.map

package/dist/{chunk-TWTWRJ25.js → chunk-AYUL5QMZ.js}

@@ -2,7 +2,7 @@ import {
   AnonApiKeySchema,
   DevApiKeySchema,
   createAnonApiKey
-} from "./chunk-X5MAXP5T.js";
+} from "./chunk-GTPTKN5A.js";
 import {
   __require
 } from "./chunk-NSBPE2FW.js";
@@ -605,4 +605,4 @@ export {
   writeMcpMarker,
   refreshGenericMcpConfigAtRuntime
 };
-//# sourceMappingURL=chunk-TWTWRJ25.js.map
+//# sourceMappingURL=chunk-AYUL5QMZ.js.map

package/dist/{chunk-DST4UBXU.js → chunk-FMEWG3FY.js}

@@ -1,6 +1,6 @@
 import {
   createBuildHash
-} from "./chunk-X5MAXP5T.js";
+} from "./chunk-GTPTKN5A.js";
 
 // src/import-graph.ts
 import * as fs from "node:fs/promises";
@@ -175,4 +175,4 @@ export {
   extractImports,
   buildImportGraph
 };
-//# sourceMappingURL=chunk-DST4UBXU.js.map
+//# sourceMappingURL=chunk-FMEWG3FY.js.map

package/dist/{chunk-TWHCJKRS.js → chunk-FVHVDBGX.js}

@@ -5,10 +5,10 @@ import {
   isDevApiKey,
   readEnvLocalApiKey,
   writeAndFsyncTempSync
-} from "./chunk-TWTWRJ25.js";
+} from "./chunk-AYUL5QMZ.js";
 import {
   AnonApiKeySchema
-} from "./chunk-X5MAXP5T.js";
+} from "./chunk-GTPTKN5A.js";
 import {
   NEXT_CONFIG_NAMES
 } from "./chunk-NB7GJE4S.js";
@@ -914,4 +914,4 @@ export {
   writeShutdownMarker,
   runUninit
 };
-//# sourceMappingURL=chunk-TWHCJKRS.js.map
+//# sourceMappingURL=chunk-FVHVDBGX.js.map

package/dist/{chunk-X5MAXP5T.js → chunk-GTPTKN5A.js}

@@ -13878,13 +13878,15 @@ var PresignedUploadRequestSchema = external_exports.object({
 });
 var PresignedUploadResponseSchema = external_exports.object({
   uploadId: external_exports.string().uuid(),
-  expiresAt: external_exports.number().int().positive(),
+  expiresAt: external_exports.number().int().nonnegative(),
   files: external_exports.array(
     external_exports.object({
       filePath: external_exports.string().min(1),
       clientToken: external_exports.string().min(1),
       pathname: external_exports.string().min(1),
-      maxBytes: external_exports.number().int().positive()
+      maxBytes: external_exports.number().int().positive(),
+      /** Vercel Blob access mode — explicit in the contract per DISC-756. */
+      access: external_exports.enum(["public"])
     })
   ).min(1).max(100)
 });
@@ -13930,6 +13932,7 @@ var GLASSTRACE_ATTRIBUTE_NAMES = {
   FETCH_DURATION_MS: "glasstrace.fetch.duration_ms",
   FETCH_TARGET: "glasstrace.fetch.target",
   ENV_REFERENCED: "glasstrace.env.referenced",
+  BUILD_HASH: "glasstrace.build.hash",
   SOURCE_FILE: "glasstrace.source.file",
   SOURCE_LINE: "glasstrace.source.line",
   SOURCE_MAPPED: "glasstrace.source.mapped",
@@ -14111,4 +14114,4 @@ export {
   DEFAULT_CAPTURE_CONFIG,
   deriveSessionId
 };
-//# sourceMappingURL=chunk-X5MAXP5T.js.map
+//# sourceMappingURL=chunk-GTPTKN5A.js.map