@glasstrace/sdk 1.3.1 → 1.3.3

package/dist/cli/init.js

@@ -4,10 +4,10 @@ import {
 } from "../chunk-2M57EO6U.js";
 import {
   verifyInitReachable
-} from "../chunk-X4IK6KES.js";
+} from "../chunk-3HWBR7XM.js";
 import {
   buildImportGraph
-} from "../chunk-JFR42QG5.js";
+} from "../chunk-QJVAKVQJ.js";
 import {
   resolveConfig
 } from "../chunk-VUZCLMIX.js";
@@ -21,7 +21,7 @@ import {
   unwrapCJSExport,
   unwrapExport,
   writeDiscoveryFile
-} from "../chunk-USLH3OTM.js";
+} from "../chunk-E62DL2H4.js";
 import {
   detectAgents,
   generateInfoSection,
@@ -40,8 +40,8 @@ import {
   readEnvLocalApiKey,
   resolveEffectiveMcpCredential,
   writeMcpMarker
-} from "../chunk-DW2UJUNB.js";
-import "../chunk-MQHLWSIX.js";
+} from "../chunk-LQKJ27LO.js";
+import "../chunk-M4ZI7J3N.js";
 import {
   NEXT_CONFIG_NAMES,
   formatAgentName
@@ -994,7 +994,7 @@ async function verifyAnonKeyRegistration(projectRoot) {
   }
   const baseConfig = resolveConfig({ apiKey: devKey });
   const config = { ...baseConfig, apiKey: devKey };
-  const sdkVersion = true ? "1.3.1" : "0.0.0-dev";
+  const sdkVersion = true ? "1.3.3" : "0.0.0-dev";
   const result = await verifyInitReachable(config, anonKey, sdkVersion);
   if (result.ok) {
     return { outcome: "verified" };

package/dist/cli/mcp-add.cjs

@@ -13854,6 +13854,11 @@ var GlasstraceEnvVarsSchema = external_exports.object({
   NODE_ENV: external_exports.string().optional(),
   VERCEL_ENV: external_exports.string().optional()
 });
+var MAX_SOURCE_MAP_FILE_PATH_LENGTH = 512;
+var MAX_SOURCE_MAP_FILE_SIZE = 50 * 1024 * 1024;
+var MAX_SOURCE_MAP_FILE_COUNT = 100;
+var MAX_PRESIGNED_CLIENT_TOKEN_LENGTH = 2048;
+var MAX_PRESIGNED_PATHNAME_LENGTH = 1024;
 var ImportGraphPayloadSchema = external_exports.object({
   buildHash: BuildHashSchema,
   graph: external_exports.record(external_exports.string(), external_exports.array(external_exports.string()))
@@ -13900,35 +13905,68 @@ var PresignedUploadRequestSchema = external_exports.object({
   buildHash: BuildHashSchema,
   files: external_exports.array(
     external_exports.object({
-      filePath: external_exports.string().min(1),
-      sizeBytes: external_exports.number().int().positive()
+      filePath: external_exports.string().min(1).max(
+        MAX_SOURCE_MAP_FILE_PATH_LENGTH,
+        `filePath length exceeds maximum of ${MAX_SOURCE_MAP_FILE_PATH_LENGTH} characters`
+      ),
+      sizeBytes: external_exports.number().int().positive().max(
+        MAX_SOURCE_MAP_FILE_SIZE,
+        `sizeBytes exceeds maximum of ${MAX_SOURCE_MAP_FILE_SIZE} bytes (${MAX_SOURCE_MAP_FILE_SIZE / (1024 * 1024)} MiB)`
+      )
     })
-  ).min(1).max(100)
+  ).min(1).max(
+    MAX_SOURCE_MAP_FILE_COUNT,
+    `files array exceeds maximum of ${MAX_SOURCE_MAP_FILE_COUNT} entries`
+  )
 });
 var PresignedUploadResponseSchema = external_exports.object({
   uploadId: external_exports.string().uuid(),
   expiresAt: external_exports.number().int().nonnegative(),
   files: external_exports.array(
     external_exports.object({
-      filePath: external_exports.string().min(1),
-      clientToken: external_exports.string().min(1),
-      pathname: external_exports.string().min(1),
-      maxBytes: external_exports.number().int().positive(),
+      filePath: external_exports.string().min(1).max(
+        MAX_SOURCE_MAP_FILE_PATH_LENGTH,
+        `filePath length exceeds maximum of ${MAX_SOURCE_MAP_FILE_PATH_LENGTH} characters`
+      ),
+      clientToken: external_exports.string().min(1).max(
+        MAX_PRESIGNED_CLIENT_TOKEN_LENGTH,
+        `clientToken length exceeds maximum of ${MAX_PRESIGNED_CLIENT_TOKEN_LENGTH} characters`
+      ),
+      pathname: external_exports.string().min(1).max(
+        MAX_PRESIGNED_PATHNAME_LENGTH,
+        `pathname length exceeds maximum of ${MAX_PRESIGNED_PATHNAME_LENGTH} characters`
+      ),
+      maxBytes: external_exports.number().int().positive().max(
+        MAX_SOURCE_MAP_FILE_SIZE,
+        `maxBytes exceeds maximum of ${MAX_SOURCE_MAP_FILE_SIZE} bytes (${MAX_SOURCE_MAP_FILE_SIZE / (1024 * 1024)} MiB)`
+      ),
       /** Vercel Blob access mode — explicit in the contract per DISC-756. */
       access: external_exports.enum(["public"])
     })
-  ).min(1).max(100)
+  ).min(1).max(
+    MAX_SOURCE_MAP_FILE_COUNT,
+    `files array exceeds maximum of ${MAX_SOURCE_MAP_FILE_COUNT} entries`
+  )
 });
 var SourceMapManifestRequestSchema = external_exports.object({
   uploadId: external_exports.string().uuid(),
   buildHash: BuildHashSchema,
   files: external_exports.array(
     external_exports.object({
-      filePath: external_exports.string().min(1),
-      sizeBytes: external_exports.number().int().positive(),
+      filePath: external_exports.string().min(1).max(
+        MAX_SOURCE_MAP_FILE_PATH_LENGTH,
+        `filePath length exceeds maximum of ${MAX_SOURCE_MAP_FILE_PATH_LENGTH} characters`
+      ),
+      sizeBytes: external_exports.number().int().positive().max(
+        MAX_SOURCE_MAP_FILE_SIZE,
+        `sizeBytes exceeds maximum of ${MAX_SOURCE_MAP_FILE_SIZE} bytes (${MAX_SOURCE_MAP_FILE_SIZE / (1024 * 1024)} MiB)`
+      ),
       blobUrl: external_exports.string().url()
     })
-  ).min(1).max(100)
+  ).min(1).max(
+    MAX_SOURCE_MAP_FILE_COUNT,
+    `files array exceeds maximum of ${MAX_SOURCE_MAP_FILE_COUNT} entries`
+  )
 });
 var SourceMapManifestResponseSchema = external_exports.object({
   success: external_exports.literal(true),