@glasstrace/sdk 1.3.9 → 1.4.0

package/dist/cli/validate.js

@@ -2,8 +2,8 @@ import {
   identityFingerprint,
   readMcpMarker,
   resolveEffectiveMcpCredential
-} from "../chunk-GYTCZSAV.js";
-import "../chunk-XS5W3SPL.js";
+} from "../chunk-MFYOQOD7.js";
+import "../chunk-4WI7B5FQ.js";
 import "../chunk-NSBPE2FW.js";
 
 // src/cli/validate.ts

package/dist/{edge-entry-BSKA1l_0.d.ts → edge-entry-AWO70gje.d.ts}

@@ -1,4 +1,4 @@
-import { c as SdkDiagnosticCode, e as SessionId, C as CaptureConfig } from './index.d-Bo_Rxund.js';
+import { i as SdkDiagnosticCode, j as SessionId, C as CaptureConfig } from './index.d-Dq33YwFT.js';
 import { ReadableSpan } from './export/ReadableSpan';
 import { Span } from './Span';
 import { SpanProcessor } from './SpanProcessor';

package/dist/{edge-entry-DyMWa6JK.d.cts → edge-entry-DaeG7D7S.d.cts}

@@ -1,4 +1,4 @@
-import { c as SdkDiagnosticCode, e as SessionId, C as CaptureConfig } from './index.d-Bo_Rxund.cjs';
+import { i as SdkDiagnosticCode, j as SessionId, C as CaptureConfig } from './index.d-Dq33YwFT.cjs';
 import { ReadableSpan } from './export/ReadableSpan';
 import { Span } from './Span';
 import { SpanProcessor } from './SpanProcessor';

package/dist/edge-entry.cjs

@@ -14561,7 +14561,18 @@ var CaptureConfigSchema = external_exports.object({
   fullConsoleOutput: external_exports.boolean(),
   importGraph: external_exports.boolean(),
   consoleErrors: external_exports.boolean().optional().default(false),
-  errorResponseBodies: external_exports.boolean().optional().default(false)
+  errorResponseBodies: external_exports.boolean().optional().default(false),
+  /**
+   * Account opt-in for side-effect evidence emission (SDK-049).
+   *
+   * When `false` (default), `recordSideEffect()` is a silent no-op:
+   * no allowlist evaluation runs and no `glasstrace.side_effect.*`
+   * attribute reaches the wire. When `true`, allowlisted side-effect
+   * metadata is attached to the active OTel span subject to the
+   * client-side allowlist enforcement layered with the product's
+   * storage-time filter as defense-in-depth.
+   */
+  sideEffectEvidence: external_exports.boolean().optional().default(false)
 });
 var SdkCachedConfigSchema = external_exports.object({
   response: external_exports.record(external_exports.string(), external_exports.unknown()),
@@ -14621,7 +14632,37 @@ var GLASSTRACE_ATTRIBUTE_NAMES = {
   TRIGGER_TYPE: "glasstrace.trigger.type",
   ELEMENT_FINGERPRINT: "glasstrace.element.fingerprint",
   ELEMENT_CONFIDENCE: "glasstrace.element.confidence",
-  TAB_ID: "glasstrace.tab.id"
+  TAB_ID: "glasstrace.tab.id",
+  // Side-effect evidence (SDK-049 / SCHEMA-036).
+  // Top-level operation attributes attached to the active span when a
+  // side-effect is recorded via `recordSideEffect()`. The wire-string
+  // set aligns verbatim with the product-side filter in
+  // `packages/ingestion/src/services/trace-writer.ts`.
+  SIDE_EFFECT_KIND: "glasstrace.side_effect.kind",
+  SIDE_EFFECT_OPERATION: "glasstrace.side_effect.operation",
+  SIDE_EFFECT_STATUS: "glasstrace.side_effect.status",
+  SIDE_EFFECT_PHASE: "glasstrace.side_effect.phase",
+  // Allowlisted semantic field attributes — one per allowlisted key.
+  // Wire keys are camelCase to match the SCHEMA-036 enum members
+  // exactly; the SDK constant names are SCREAMING_SNAKE per the rest
+  // of GLASSTRACE_ATTRIBUTE_NAMES.
+  SIDE_EFFECT_FIELD_TEMPLATE_KEY: "glasstrace.side_effect.field.templateKey",
+  SIDE_EFFECT_FIELD_PROVIDER_OPERATION: "glasstrace.side_effect.field.providerOperation",
+  SIDE_EFFECT_FIELD_ROLE: "glasstrace.side_effect.field.role",
+  SIDE_EFFECT_FIELD_LOCALE: "glasstrace.side_effect.field.locale",
+  SIDE_EFFECT_FIELD_TIMEZONE: "glasstrace.side_effect.field.timezone",
+  SIDE_EFFECT_FIELD_STATUS: "glasstrace.side_effect.field.status",
+  SIDE_EFFECT_FIELD_PHASE: "glasstrace.side_effect.field.phase",
+  // Omission reason attributes — one per allowlisted reason. The
+  // attribute value carries an integer count; the rejected value is
+  // never echoed.
+  SIDE_EFFECT_OMITTED_PII: "glasstrace.side_effect.omitted.pii",
+  SIDE_EFFECT_OMITTED_SECRET: "glasstrace.side_effect.omitted.secret",
+  SIDE_EFFECT_OMITTED_RAW_PAYLOAD: "glasstrace.side_effect.omitted.raw_payload",
+  SIDE_EFFECT_OMITTED_UNSUPPORTED_KEY: "glasstrace.side_effect.omitted.unsupported_key",
+  SIDE_EFFECT_OMITTED_VALUE_TOO_LONG: "glasstrace.side_effect.omitted.value_too_long",
+  SIDE_EFFECT_OMITTED_NOT_EMITTED: "glasstrace.side_effect.omitted.not_emitted",
+  SIDE_EFFECT_OMITTED_CAPTURE_DISABLED: "glasstrace.side_effect.omitted.capture_disabled"
 };
 var MAX_SOURCE_MAP_FILE_PATH_LENGTH = 512;
 var MAX_SOURCE_MAP_FILE_SIZE = 50 * 1024 * 1024;