@glasstrace/sdk 1.3.2 → 1.3.4

package/dist/node-entry.js

@@ -12,12 +12,12 @@ import {
   registerGlasstrace,
   waitForReady,
   withGlasstraceConfig
-} from "./chunk-DQGNUENK.js";
+} from "./chunk-XFNK4YEW.js";
 import {
   GlasstraceSpanProcessor,
   SdkError,
   captureCorrelationId
-} from "./chunk-CRM3EYOL.js";
+} from "./chunk-WKOQJCFN.js";
 import "./chunk-DQ25VOKK.js";
 import {
   PRESIGNED_THRESHOLD_BYTES,
@@ -27,8 +27,8 @@ import {
   uploadSourceMaps,
   uploadSourceMapsAuto,
   uploadSourceMapsPresigned
-} from "./chunk-XS3BO7RY.js";
-import "./chunk-3TU62WD6.js";
+} from "./chunk-BQKPRFLF.js";
+import "./chunk-YG3X7TUI.js";
 import {
   getActiveConfig,
   getLinkedAccountId,
@@ -36,12 +36,12 @@ import {
   performInit,
   saveCachedConfig,
   sendInitRequest
-} from "./chunk-REEU6CNO.js";
+} from "./chunk-3HWBR7XM.js";
 import {
   buildImportGraph,
   discoverTestFiles,
   extractImports
-} from "./chunk-JFR42QG5.js";
+} from "./chunk-QJVAKVQJ.js";
 import {
   isAnonymousMode,
   isProductionDisabled,
@@ -51,10 +51,10 @@ import {
 import {
   getOrCreateAnonKey,
   readAnonKey
-} from "./chunk-UFZEISZB.js";
+} from "./chunk-LQKJ27LO.js";
 import {
   deriveSessionId
-} from "./chunk-MQHLWSIX.js";
+} from "./chunk-M4ZI7J3N.js";
 import "./chunk-NSBPE2FW.js";
 export {
   GlasstraceExporter,

package/dist/node-subpath.cjs

@@ -13875,6 +13875,11 @@ var GlasstraceEnvVarsSchema = external_exports.object({
   NODE_ENV: external_exports.string().optional(),
   VERCEL_ENV: external_exports.string().optional()
 });
+var MAX_SOURCE_MAP_FILE_PATH_LENGTH = 512;
+var MAX_SOURCE_MAP_FILE_SIZE = 50 * 1024 * 1024;
+var MAX_SOURCE_MAP_FILE_COUNT = 100;
+var MAX_PRESIGNED_CLIENT_TOKEN_LENGTH = 2048;
+var MAX_PRESIGNED_PATHNAME_LENGTH = 1024;
 var ImportGraphPayloadSchema = external_exports.object({
   buildHash: BuildHashSchema,
   graph: external_exports.record(external_exports.string(), external_exports.array(external_exports.string()))
@@ -13921,35 +13926,68 @@ var PresignedUploadRequestSchema = external_exports.object({
   buildHash: BuildHashSchema,
   files: external_exports.array(
     external_exports.object({
-      filePath: external_exports.string().min(1),
-      sizeBytes: external_exports.number().int().positive()
+      filePath: external_exports.string().min(1).max(
+        MAX_SOURCE_MAP_FILE_PATH_LENGTH,
+        `filePath length exceeds maximum of ${MAX_SOURCE_MAP_FILE_PATH_LENGTH} characters`
+      ),
+      sizeBytes: external_exports.number().int().positive().max(
+        MAX_SOURCE_MAP_FILE_SIZE,
+        `sizeBytes exceeds maximum of ${MAX_SOURCE_MAP_FILE_SIZE} bytes (${MAX_SOURCE_MAP_FILE_SIZE / (1024 * 1024)} MiB)`
+      )
     })
-  ).min(1).max(100)
+  ).min(1).max(
+    MAX_SOURCE_MAP_FILE_COUNT,
+    `files array exceeds maximum of ${MAX_SOURCE_MAP_FILE_COUNT} entries`
+  )
 });
 var PresignedUploadResponseSchema = external_exports.object({
   uploadId: external_exports.string().uuid(),
   expiresAt: external_exports.number().int().nonnegative(),
   files: external_exports.array(
     external_exports.object({
-      filePath: external_exports.string().min(1),
-      clientToken: external_exports.string().min(1),
-      pathname: external_exports.string().min(1),
-      maxBytes: external_exports.number().int().positive(),
+      filePath: external_exports.string().min(1).max(
+        MAX_SOURCE_MAP_FILE_PATH_LENGTH,
+        `filePath length exceeds maximum of ${MAX_SOURCE_MAP_FILE_PATH_LENGTH} characters`
+      ),
+      clientToken: external_exports.string().min(1).max(
+        MAX_PRESIGNED_CLIENT_TOKEN_LENGTH,
+        `clientToken length exceeds maximum of ${MAX_PRESIGNED_CLIENT_TOKEN_LENGTH} characters`
+      ),
+      pathname: external_exports.string().min(1).max(
+        MAX_PRESIGNED_PATHNAME_LENGTH,
+        `pathname length exceeds maximum of ${MAX_PRESIGNED_PATHNAME_LENGTH} characters`
+      ),
+      maxBytes: external_exports.number().int().positive().max(
+        MAX_SOURCE_MAP_FILE_SIZE,
+        `maxBytes exceeds maximum of ${MAX_SOURCE_MAP_FILE_SIZE} bytes (${MAX_SOURCE_MAP_FILE_SIZE / (1024 * 1024)} MiB)`
+      ),
       /** Vercel Blob access mode — explicit in the contract per DISC-756. */
       access: external_exports.enum(["public"])
     })
-  ).min(1).max(100)
+  ).min(1).max(
+    MAX_SOURCE_MAP_FILE_COUNT,
+    `files array exceeds maximum of ${MAX_SOURCE_MAP_FILE_COUNT} entries`
+  )
 });
 var SourceMapManifestRequestSchema = external_exports.object({
   uploadId: external_exports.string().uuid(),
   buildHash: BuildHashSchema,
   files: external_exports.array(
     external_exports.object({
-      filePath: external_exports.string().min(1),
-      sizeBytes: external_exports.number().int().positive(),
+      filePath: external_exports.string().min(1).max(
+        MAX_SOURCE_MAP_FILE_PATH_LENGTH,
+        `filePath length exceeds maximum of ${MAX_SOURCE_MAP_FILE_PATH_LENGTH} characters`
+      ),
+      sizeBytes: external_exports.number().int().positive().max(
+        MAX_SOURCE_MAP_FILE_SIZE,
+        `sizeBytes exceeds maximum of ${MAX_SOURCE_MAP_FILE_SIZE} bytes (${MAX_SOURCE_MAP_FILE_SIZE / (1024 * 1024)} MiB)`
+      ),
       blobUrl: external_exports.string().url()
     })
-  ).min(1).max(100)
+  ).min(1).max(
+    MAX_SOURCE_MAP_FILE_COUNT,
+    `files array exceeds maximum of ${MAX_SOURCE_MAP_FILE_COUNT} entries`
+  )
 });
 var SourceMapManifestResponseSchema = external_exports.object({
   success: external_exports.literal(true),