@glasstrace/sdk 1.3.8 → 1.4.0

package/dist/edge-entry.d.cts

@@ -1,5 +1,5 @@
-export { C as CorrelationIdRequest, G as GlasstraceSpanProcessor, S as SdkError, c as captureCorrelationId } from './edge-entry-DyMWa6JK.cjs';
-import './index.d-Bo_Rxund.cjs';
+export { C as CorrelationIdRequest, G as GlasstraceSpanProcessor, S as SdkError, c as captureCorrelationId } from './edge-entry-DaeG7D7S.cjs';
+import './index.d-Dq33YwFT.cjs';
 import './v4/classic/external.cjs';
 import './export/ReadableSpan';
 import './Span';

package/dist/edge-entry.d.ts

@@ -1,5 +1,5 @@
-export { C as CorrelationIdRequest, G as GlasstraceSpanProcessor, S as SdkError, c as captureCorrelationId } from './edge-entry-BSKA1l_0.js';
-import './index.d-Bo_Rxund.js';
+export { C as CorrelationIdRequest, G as GlasstraceSpanProcessor, S as SdkError, c as captureCorrelationId } from './edge-entry-AWO70gje.js';
+import './index.d-Dq33YwFT.js';
 import './v4/classic/external.cjs';
 import './export/ReadableSpan';
 import './Span';

package/dist/edge-entry.js

@@ -2,9 +2,9 @@ import {
   GlasstraceSpanProcessor,
   SdkError,
   captureCorrelationId
-} from "./chunk-FKBCEOJ5.js";
+} from "./chunk-Q42BY5BA.js";
 import "./chunk-DQ25VOKK.js";
-import "./chunk-XS5W3SPL.js";
+import "./chunk-4WI7B5FQ.js";
 import "./chunk-NSBPE2FW.js";
 export {
   GlasstraceSpanProcessor,

package/dist/index.cjs

@@ -14563,7 +14563,7 @@ function deriveSessionId(apiKey, origin, date5, windowIndex) {
   const digest = sha256Hex(input).slice(0, 16);
   return SessionIdSchema.parse(digest);
 }
-var DevApiKeySchema, AnonApiKeySchema, SessionIdSchema, BuildHashSchema, SdkDiagnosticCodeSchema, CaptureConfigSchema, SdkCachedConfigSchema, GlasstraceOptionsSchema, GlasstraceEnvVarsSchema, GLASSTRACE_ATTRIBUTE_NAMES, DEFAULT_CAPTURE_CONFIG, MAX_SOURCE_MAP_FILE_PATH_LENGTH, MAX_SOURCE_MAP_FILE_SIZE, MAX_SOURCE_MAP_FILE_COUNT, MAX_PRESIGNED_CLIENT_TOKEN_LENGTH, MAX_PRESIGNED_PATHNAME_LENGTH, ImportGraphPayloadSchema, SdkHealthReportSchema, TierLimitsSchema, SdkInitResponseSchema, DiscoveryResponseSchema, SourceMapUploadResponseSchema, PresignedUploadRequestSchema, PresignedUploadResponseSchema, SourceMapManifestRequestSchema, SourceMapManifestResponseSchema, K;
+var DevApiKeySchema, AnonApiKeySchema, SessionIdSchema, BuildHashSchema, SdkDiagnosticCodeSchema, CaptureConfigSchema, SdkCachedConfigSchema, GlasstraceOptionsSchema, GlasstraceEnvVarsSchema, GLASSTRACE_ATTRIBUTE_NAMES, DEFAULT_CAPTURE_CONFIG, MAX_SOURCE_MAP_FILE_PATH_LENGTH, MAX_SOURCE_MAP_FILE_SIZE, MAX_SOURCE_MAP_FILE_COUNT, MAX_PRESIGNED_CLIENT_TOKEN_LENGTH, MAX_PRESIGNED_PATHNAME_LENGTH, ImportGraphPayloadSchema, SdkHealthReportSchema, TierLimitsSchema, SdkInitResponseSchema, DiscoveryResponseSchema, SourceMapUploadResponseSchema, PresignedUploadRequestSchema, PresignedUploadResponseSchema, SourceMapManifestRequestSchema, SourceMapManifestResponseSchema, K, SIDE_EFFECT_OPERATION_KINDS, SIDE_EFFECT_SEMANTIC_FIELD_KEYS, SIDE_EFFECT_OMISSION_REASONS, SIDE_EFFECT_OPERATION_STATUSES, SIDE_EFFECT_OPERATION_PHASES;
 var init_dist = __esm({
   "../protocol/dist/index.js"() {
     "use strict";
@@ -14591,7 +14591,18 @@ var init_dist = __esm({
       fullConsoleOutput: external_exports.boolean(),
       importGraph: external_exports.boolean(),
       consoleErrors: external_exports.boolean().optional().default(false),
-      errorResponseBodies: external_exports.boolean().optional().default(false)
+      errorResponseBodies: external_exports.boolean().optional().default(false),
+      /**
+       * Account opt-in for side-effect evidence emission (SDK-049).
+       *
+       * When `false` (default), `recordSideEffect()` is a silent no-op:
+       * no allowlist evaluation runs and no `glasstrace.side_effect.*`
+       * attribute reaches the wire. When `true`, allowlisted side-effect
+       * metadata is attached to the active OTel span subject to the
+       * client-side allowlist enforcement layered with the product's
+       * storage-time filter as defense-in-depth.
+       */
+      sideEffectEvidence: external_exports.boolean().optional().default(false)
     });
     SdkCachedConfigSchema = external_exports.object({
       response: external_exports.record(external_exports.string(), external_exports.unknown()),
@@ -14651,7 +14662,37 @@ var init_dist = __esm({
       TRIGGER_TYPE: "glasstrace.trigger.type",
       ELEMENT_FINGERPRINT: "glasstrace.element.fingerprint",
       ELEMENT_CONFIDENCE: "glasstrace.element.confidence",
-      TAB_ID: "glasstrace.tab.id"
+      TAB_ID: "glasstrace.tab.id",
+      // Side-effect evidence (SDK-049 / SCHEMA-036).
+      // Top-level operation attributes attached to the active span when a
+      // side-effect is recorded via `recordSideEffect()`. The wire-string
+      // set aligns verbatim with the product-side filter in
+      // `packages/ingestion/src/services/trace-writer.ts`.
+      SIDE_EFFECT_KIND: "glasstrace.side_effect.kind",
+      SIDE_EFFECT_OPERATION: "glasstrace.side_effect.operation",
+      SIDE_EFFECT_STATUS: "glasstrace.side_effect.status",
+      SIDE_EFFECT_PHASE: "glasstrace.side_effect.phase",
+      // Allowlisted semantic field attributes — one per allowlisted key.
+      // Wire keys are camelCase to match the SCHEMA-036 enum members
+      // exactly; the SDK constant names are SCREAMING_SNAKE per the rest
+      // of GLASSTRACE_ATTRIBUTE_NAMES.
+      SIDE_EFFECT_FIELD_TEMPLATE_KEY: "glasstrace.side_effect.field.templateKey",
+      SIDE_EFFECT_FIELD_PROVIDER_OPERATION: "glasstrace.side_effect.field.providerOperation",
+      SIDE_EFFECT_FIELD_ROLE: "glasstrace.side_effect.field.role",
+      SIDE_EFFECT_FIELD_LOCALE: "glasstrace.side_effect.field.locale",
+      SIDE_EFFECT_FIELD_TIMEZONE: "glasstrace.side_effect.field.timezone",
+      SIDE_EFFECT_FIELD_STATUS: "glasstrace.side_effect.field.status",
+      SIDE_EFFECT_FIELD_PHASE: "glasstrace.side_effect.field.phase",
+      // Omission reason attributes — one per allowlisted reason. The
+      // attribute value carries an integer count; the rejected value is
+      // never echoed.
+      SIDE_EFFECT_OMITTED_PII: "glasstrace.side_effect.omitted.pii",
+      SIDE_EFFECT_OMITTED_SECRET: "glasstrace.side_effect.omitted.secret",
+      SIDE_EFFECT_OMITTED_RAW_PAYLOAD: "glasstrace.side_effect.omitted.raw_payload",
+      SIDE_EFFECT_OMITTED_UNSUPPORTED_KEY: "glasstrace.side_effect.omitted.unsupported_key",
+      SIDE_EFFECT_OMITTED_VALUE_TOO_LONG: "glasstrace.side_effect.omitted.value_too_long",
+      SIDE_EFFECT_OMITTED_NOT_EMITTED: "glasstrace.side_effect.omitted.not_emitted",
+      SIDE_EFFECT_OMITTED_CAPTURE_DISABLED: "glasstrace.side_effect.omitted.capture_disabled"
     };
     DEFAULT_CAPTURE_CONFIG = {
       requestBodies: false,
@@ -14660,7 +14701,8 @@ var init_dist = __esm({
       fullConsoleOutput: false,
       importGraph: false,
       consoleErrors: false,
-      errorResponseBodies: false
+      errorResponseBodies: false,
+      sideEffectEvidence: false
     };
     MAX_SOURCE_MAP_FILE_PATH_LENGTH = 512;
     MAX_SOURCE_MAP_FILE_SIZE = 50 * 1024 * 1024;
@@ -14849,6 +14891,45 @@ var init_dist = __esm({
       3204031479,
       3329325298
     ]);
+    SIDE_EFFECT_OPERATION_KINDS = [
+      "email",
+      "calendar_link",
+      "webhook",
+      "external_api",
+      "queue",
+      "after_callback"
+    ];
+    SIDE_EFFECT_SEMANTIC_FIELD_KEYS = [
+      "templateKey",
+      "providerOperation",
+      "role",
+      "locale",
+      "timezone",
+      "status",
+      "phase"
+    ];
+    SIDE_EFFECT_OMISSION_REASONS = [
+      "pii",
+      "secret",
+      "raw_payload",
+      "unsupported_key",
+      "value_too_long",
+      "not_emitted",
+      "capture_disabled"
+    ];
+    SIDE_EFFECT_OPERATION_STATUSES = [
+      "scheduled",
+      "started",
+      "succeeded",
+      "failed",
+      "unknown"
+    ];
+    SIDE_EFFECT_OPERATION_PHASES = [
+      "request",
+      "post_response",
+      "background",
+      "unknown"
+    ];
   }
 });
 
@@ -16934,6 +17015,7 @@ __export(src_exports, {
   performInit: () => performInit,
   readAnonKey: () => readAnonKey,
   readEnvVars: () => readEnvVars,
+  recordSideEffect: () => recordSideEffect,
   registerGlasstrace: () => registerGlasstrace,
   resolveConfig: () => resolveConfig,
   saveCachedConfig: () => saveCachedConfig,
@@ -22677,7 +22759,7 @@ function registerGlasstrace(options) {
     setCoreState(CoreState.REGISTERING);
     startRuntimeStateWriter({
       projectRoot: process.cwd(),
-      sdkVersion: "1.3.8"
+      sdkVersion: "1.4.0"
     });
     const config2 = resolveConfig(options);
     if (config2.verbose) {
@@ -22844,8 +22926,8 @@ async function backgroundInit(config2, anonKeyForInit, generation) {
   if (config2.verbose) {
     console.info("[glasstrace] Background init firing.");
   }
-  const healthReport = collectHealthReport("1.3.8");
-  const initResult = await performInit(config2, anonKeyForInit, "1.3.8", healthReport);
+  const healthReport = collectHealthReport("1.4.0");
+  const initResult = await performInit(config2, anonKeyForInit, "1.4.0", healthReport);
   if (generation !== registrationGeneration) return;
   const currentState = getCoreState();
   if (currentState === CoreState.SHUTTING_DOWN || currentState === CoreState.SHUTDOWN) {
@@ -22868,7 +22950,7 @@ async function backgroundInit(config2, anonKeyForInit, generation) {
   }
   maybeInstallConsoleCapture();
   if (didLastInitSucceed()) {
-    startHeartbeat(config2, anonKeyForInit, "1.3.8", generation, (newApiKey, accountId) => {
+    startHeartbeat(config2, anonKeyForInit, "1.4.0", generation, (newApiKey, accountId) => {
       setAuthState(AuthState.CLAIMING);
       emitLifecycleEvent("auth:claim_started", { accountId });
       setResolvedApiKey(newApiKey);
@@ -23160,6 +23242,284 @@ function firstToken(value) {
   }
   return void 0;
 }
+
+// src/side-effect/allowlist.ts
+init_dist();
+var MAX_SIDE_EFFECT_OPERATION_LABEL_LENGTH = 96;
+var MAX_SIDE_EFFECT_FIELD_VALUE_LENGTH = 80;
+var MAX_SIDE_EFFECT_OPERATIONS_PER_SPAN = 5;
+var OPERATION_KIND_SET = new Set(
+  SIDE_EFFECT_OPERATION_KINDS
+);
+var SEMANTIC_FIELD_KEY_SET = new Set(
+  SIDE_EFFECT_SEMANTIC_FIELD_KEYS
+);
+var OPERATION_STATUS_SET = new Set(
+  SIDE_EFFECT_OPERATION_STATUSES
+);
+var OPERATION_PHASE_SET = new Set(
+  SIDE_EFFECT_OPERATION_PHASES
+);
+var OMISSION_REASON_SET = new Set(
+  SIDE_EFFECT_OMISSION_REASONS
+);
+var TOKEN_REGEX = /^[A-Za-z0-9][A-Za-z0-9_.:-]*$/;
+var LOCALE_REGEX = /^[A-Za-z]{2,3}(?:-[A-Za-z0-9]{2,8}){0,3}$/;
+var TIMEZONE_REGEX = /^(?:UTC|GMT|[A-Za-z][A-Za-z0-9_+-]*(?:\/[A-Za-z0-9_+-]+){1,3})$/;
+var URL_SCHEME = /:\/\//;
+var URL_SCHEME_RELATIVE = /^\/\//;
+var EMAIL_LIKE = /[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}/i;
+var QUERY_LIKE = /\?/;
+var FRAGMENT_LIKE = /#/;
+var HEADER_LIKE = /\b(authorization|set-cookie|cookie)\b\s*[:=]/i;
+var HEADER_TOKEN_LIKE = /\b(authorization|set-cookie|cookie)\b\s+\S+=/i;
+var BEARER_LIKE = /bearer\s+\S+/i;
+var TOKEN_KV_LIKE = /["']?(password|passwd|token|api[_-]?key|secret|client_secret)["']?\s*[:=]/i;
+var PROSE_LIKE = /[\r\n\t]|\s{2,}/;
+var UUID_LIKE = /[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}/i;
+var GT_KEY_LIKE = /gt_(dev|anon|live)_[A-Za-z0-9_-]+/;
+function detectUnsafePattern(value) {
+  if (value.trim() !== value) return "raw_payload";
+  if (PROSE_LIKE.test(value)) return "raw_payload";
+  if (URL_SCHEME.test(value)) return "raw_payload";
+  if (URL_SCHEME_RELATIVE.test(value)) return "raw_payload";
+  if (QUERY_LIKE.test(value)) return "raw_payload";
+  if (FRAGMENT_LIKE.test(value)) return "raw_payload";
+  if (BEARER_LIKE.test(value)) return "secret";
+  if (HEADER_TOKEN_LIKE.test(value)) return "secret";
+  if (TOKEN_KV_LIKE.test(value)) return "secret";
+  if (HEADER_LIKE.test(value)) return "secret";
+  if (UUID_LIKE.test(value)) return "secret";
+  if (GT_KEY_LIKE.test(value)) return "secret";
+  if (EMAIL_LIKE.test(value)) return "pii";
+  return null;
+}
+function passesFieldValidator(key, value) {
+  if (key === "locale") return LOCALE_REGEX.test(value);
+  if (key === "timezone") return TIMEZONE_REGEX.test(value);
+  return TOKEN_REGEX.test(value);
+}
+function checkOperationLabel(value) {
+  if (typeof value !== "string" || value.length === 0) {
+    return { accepted: false, reason: "raw_payload" };
+  }
+  if (value.length > MAX_SIDE_EFFECT_OPERATION_LABEL_LENGTH) {
+    return { accepted: false, reason: "value_too_long" };
+  }
+  const unsafe = detectUnsafePattern(value);
+  if (unsafe) {
+    return { accepted: false, reason: unsafe };
+  }
+  if (!TOKEN_REGEX.test(value)) {
+    return { accepted: false, reason: "raw_payload" };
+  }
+  return { accepted: true, value };
+}
+function checkSemanticFieldValue(key, value) {
+  if (typeof value !== "string" || value.length === 0) {
+    return { accepted: false, reason: "raw_payload" };
+  }
+  if (value.length > MAX_SIDE_EFFECT_FIELD_VALUE_LENGTH) {
+    return { accepted: false, reason: "value_too_long" };
+  }
+  const unsafe = detectUnsafePattern(value);
+  if (unsafe) {
+    return { accepted: false, reason: unsafe };
+  }
+  if (!passesFieldValidator(key, value)) {
+    return { accepted: false, reason: "raw_payload" };
+  }
+  return { accepted: true, value };
+}
+function checkSemanticFieldKey(key) {
+  return typeof key === "string" && SEMANTIC_FIELD_KEY_SET.has(key);
+}
+function checkOperationKind(kind) {
+  return typeof kind === "string" && OPERATION_KIND_SET.has(kind);
+}
+function checkOperationStatus(status) {
+  return typeof status === "string" && OPERATION_STATUS_SET.has(status);
+}
+function checkOperationPhase(phase) {
+  return typeof phase === "string" && OPERATION_PHASE_SET.has(phase);
+}
+
+// src/side-effect/emit.ts
+init_esm();
+init_dist();
+var spanState = /* @__PURE__ */ new WeakMap();
+function getOrCreateState(span) {
+  let state = spanState.get(span);
+  if (!state) {
+    state = { operationsRecorded: 0, omissions: /* @__PURE__ */ new Map() };
+    spanState.set(span, state);
+  }
+  return state;
+}
+function getRecordingActiveSpan() {
+  let span;
+  try {
+    span = trace.getActiveSpan();
+  } catch {
+    return void 0;
+  }
+  if (!span) return void 0;
+  try {
+    if (typeof span.isRecording === "function" && !span.isRecording()) {
+      return void 0;
+    }
+  } catch {
+    return void 0;
+  }
+  return span;
+}
+function recordOmissionOnActiveSpan(reason) {
+  const span = getRecordingActiveSpan();
+  if (!span) return;
+  recordOmissionOnSpan(span, reason);
+}
+function recordOmissionOnSpan(span, reason) {
+  const state = getOrCreateState(span);
+  const previous = state.omissions.get(reason) ?? 0;
+  const next = previous + 1;
+  state.omissions.set(reason, next);
+  const attribute = OMISSION_ATTRIBUTE_BY_REASON[reason];
+  try {
+    span.setAttribute(attribute, next);
+  } catch {
+  }
+}
+var OMISSION_ATTRIBUTE_BY_REASON = {
+  pii: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_PII,
+  secret: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_SECRET,
+  raw_payload: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_RAW_PAYLOAD,
+  unsupported_key: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_UNSUPPORTED_KEY,
+  value_too_long: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_VALUE_TOO_LONG,
+  not_emitted: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_NOT_EMITTED,
+  capture_disabled: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_CAPTURE_DISABLED
+};
+var FIELD_ATTRIBUTE_BY_KEY = {
+  templateKey: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_TEMPLATE_KEY,
+  providerOperation: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_PROVIDER_OPERATION,
+  role: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_ROLE,
+  locale: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_LOCALE,
+  timezone: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_TIMEZONE,
+  status: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_STATUS,
+  phase: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_PHASE
+};
+function attachOperation(input) {
+  const span = getRecordingActiveSpan();
+  if (!span) return { kind: "no_active_span" };
+  const state = getOrCreateState(span);
+  if (state.operationsRecorded >= MAX_SIDE_EFFECT_OPERATIONS_PER_SPAN) {
+    return { kind: "over_budget", span };
+  }
+  state.operationsRecorded += 1;
+  try {
+    span.setAttribute(GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_KIND, input.kind);
+    span.setAttribute(
+      GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OPERATION,
+      input.operation
+    );
+    if (input.status !== void 0) {
+      span.setAttribute(
+        GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_STATUS,
+        input.status
+      );
+    }
+    if (input.phase !== void 0) {
+      span.setAttribute(
+        GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_PHASE,
+        input.phase
+      );
+    }
+  } catch {
+  }
+  return { kind: "attached", span };
+}
+function attachField(span, key, value) {
+  const attribute = FIELD_ATTRIBUTE_BY_KEY[key];
+  try {
+    span.setAttribute(attribute, value);
+  } catch {
+  }
+}
+function recordOmission(span, reason) {
+  recordOmissionOnSpan(span, reason);
+}
+
+// src/side-effect/index.ts
+function recordSideEffect(input) {
+  try {
+    runRecordSideEffect(input);
+  } catch {
+  }
+}
+function runRecordSideEffect(input) {
+  if (!input || typeof input !== "object") return;
+  let captureEnabled;
+  try {
+    captureEnabled = getActiveConfig().sideEffectEvidence === true;
+  } catch {
+    captureEnabled = false;
+  }
+  if (!captureEnabled) {
+    return;
+  }
+  const candidate = input;
+  if (!checkOperationKind(candidate.kind)) {
+    return;
+  }
+  const labelOutcome = checkOperationLabel(candidate.operation);
+  if (!labelOutcome.accepted) {
+    recordOmissionOnActiveSpan(labelOutcome.reason);
+    return;
+  }
+  let acceptedStatus;
+  if (candidate.status !== void 0) {
+    if (checkOperationStatus(candidate.status)) {
+      acceptedStatus = candidate.status;
+    } else {
+      recordOmissionOnActiveSpan("unsupported_key");
+    }
+  }
+  let acceptedPhase;
+  if (candidate.phase !== void 0) {
+    if (checkOperationPhase(candidate.phase)) {
+      acceptedPhase = candidate.phase;
+    } else {
+      recordOmissionOnActiveSpan("unsupported_key");
+    }
+  }
+  const outcome = attachOperation({
+    kind: candidate.kind,
+    operation: labelOutcome.value,
+    status: acceptedStatus,
+    phase: acceptedPhase
+  });
+  if (outcome.kind === "no_active_span") {
+    return;
+  }
+  if (outcome.kind === "over_budget") {
+    recordOmission(outcome.span, "value_too_long");
+    return;
+  }
+  const fields = candidate.fields;
+  if (fields && typeof fields === "object") {
+    for (const [rawKey, rawValue] of Object.entries(fields)) {
+      if (!checkSemanticFieldKey(rawKey)) {
+        recordOmission(outcome.span, "unsupported_key");
+        continue;
+      }
+      const valueOutcome = checkSemanticFieldValue(rawKey, rawValue);
+      if (!valueOutcome.accepted) {
+        recordOmission(outcome.span, valueOutcome.reason);
+        continue;
+      }
+      attachField(outcome.span, rawKey, valueOutcome.value);
+    }
+  }
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   GlasstraceExporter,
@@ -23185,6 +23545,7 @@ function firstToken(value) {
   performInit,
   readAnonKey,
   readEnvVars,
+  recordSideEffect,
   registerGlasstrace,
   resolveConfig,
   saveCachedConfig,