@glasstrace/sdk 1.3.1 → 1.3.3

package/dist/cli/uninit.js

@@ -12,9 +12,9 @@ import {
   unwrapCJSExport,
   unwrapExport,
   writeShutdownMarker
-} from "../chunk-USLH3OTM.js";
-import "../chunk-DW2UJUNB.js";
-import "../chunk-MQHLWSIX.js";
+} from "../chunk-E62DL2H4.js";
+import "../chunk-LQKJ27LO.js";
+import "../chunk-M4ZI7J3N.js";
 import "../chunk-NB7GJE4S.js";
 import "../chunk-NSBPE2FW.js";
 export {

package/dist/cli/validate.cjs

@@ -13853,6 +13853,11 @@ var GlasstraceEnvVarsSchema = external_exports.object({
   NODE_ENV: external_exports.string().optional(),
   VERCEL_ENV: external_exports.string().optional()
 });
+var MAX_SOURCE_MAP_FILE_PATH_LENGTH = 512;
+var MAX_SOURCE_MAP_FILE_SIZE = 50 * 1024 * 1024;
+var MAX_SOURCE_MAP_FILE_COUNT = 100;
+var MAX_PRESIGNED_CLIENT_TOKEN_LENGTH = 2048;
+var MAX_PRESIGNED_PATHNAME_LENGTH = 1024;
 var ImportGraphPayloadSchema = external_exports.object({
   buildHash: BuildHashSchema,
   graph: external_exports.record(external_exports.string(), external_exports.array(external_exports.string()))
@@ -13899,35 +13904,68 @@ var PresignedUploadRequestSchema = external_exports.object({
   buildHash: BuildHashSchema,
   files: external_exports.array(
     external_exports.object({
-      filePath: external_exports.string().min(1),
-      sizeBytes: external_exports.number().int().positive()
+      filePath: external_exports.string().min(1).max(
+        MAX_SOURCE_MAP_FILE_PATH_LENGTH,
+        `filePath length exceeds maximum of ${MAX_SOURCE_MAP_FILE_PATH_LENGTH} characters`
+      ),
+      sizeBytes: external_exports.number().int().positive().max(
+        MAX_SOURCE_MAP_FILE_SIZE,
+        `sizeBytes exceeds maximum of ${MAX_SOURCE_MAP_FILE_SIZE} bytes (${MAX_SOURCE_MAP_FILE_SIZE / (1024 * 1024)} MiB)`
+      )
     })
-  ).min(1).max(100)
+  ).min(1).max(
+    MAX_SOURCE_MAP_FILE_COUNT,
+    `files array exceeds maximum of ${MAX_SOURCE_MAP_FILE_COUNT} entries`
+  )
 });
 var PresignedUploadResponseSchema = external_exports.object({
   uploadId: external_exports.string().uuid(),
   expiresAt: external_exports.number().int().nonnegative(),
   files: external_exports.array(
     external_exports.object({
-      filePath: external_exports.string().min(1),
-      clientToken: external_exports.string().min(1),
-      pathname: external_exports.string().min(1),
-      maxBytes: external_exports.number().int().positive(),
+      filePath: external_exports.string().min(1).max(
+        MAX_SOURCE_MAP_FILE_PATH_LENGTH,
+        `filePath length exceeds maximum of ${MAX_SOURCE_MAP_FILE_PATH_LENGTH} characters`
+      ),
+      clientToken: external_exports.string().min(1).max(
+        MAX_PRESIGNED_CLIENT_TOKEN_LENGTH,
+        `clientToken length exceeds maximum of ${MAX_PRESIGNED_CLIENT_TOKEN_LENGTH} characters`
+      ),
+      pathname: external_exports.string().min(1).max(
+        MAX_PRESIGNED_PATHNAME_LENGTH,
+        `pathname length exceeds maximum of ${MAX_PRESIGNED_PATHNAME_LENGTH} characters`
+      ),
+      maxBytes: external_exports.number().int().positive().max(
+        MAX_SOURCE_MAP_FILE_SIZE,
+        `maxBytes exceeds maximum of ${MAX_SOURCE_MAP_FILE_SIZE} bytes (${MAX_SOURCE_MAP_FILE_SIZE / (1024 * 1024)} MiB)`
+      ),
       /** Vercel Blob access mode — explicit in the contract per DISC-756. */
       access: external_exports.enum(["public"])
     })
-  ).min(1).max(100)
+  ).min(1).max(
+    MAX_SOURCE_MAP_FILE_COUNT,
+    `files array exceeds maximum of ${MAX_SOURCE_MAP_FILE_COUNT} entries`
+  )
 });
 var SourceMapManifestRequestSchema = external_exports.object({
   uploadId: external_exports.string().uuid(),
   buildHash: BuildHashSchema,
   files: external_exports.array(
     external_exports.object({
-      filePath: external_exports.string().min(1),
-      sizeBytes: external_exports.number().int().positive(),
+      filePath: external_exports.string().min(1).max(
+        MAX_SOURCE_MAP_FILE_PATH_LENGTH,
+        `filePath length exceeds maximum of ${MAX_SOURCE_MAP_FILE_PATH_LENGTH} characters`
+      ),
+      sizeBytes: external_exports.number().int().positive().max(
+        MAX_SOURCE_MAP_FILE_SIZE,
+        `sizeBytes exceeds maximum of ${MAX_SOURCE_MAP_FILE_SIZE} bytes (${MAX_SOURCE_MAP_FILE_SIZE / (1024 * 1024)} MiB)`
+      ),
       blobUrl: external_exports.string().url()
     })
-  ).min(1).max(100)
+  ).min(1).max(
+    MAX_SOURCE_MAP_FILE_COUNT,
+    `files array exceeds maximum of ${MAX_SOURCE_MAP_FILE_COUNT} entries`
+  )
 });
 var SourceMapManifestResponseSchema = external_exports.object({
   success: external_exports.literal(true),