@glasstrace/sdk 1.3.9 → 1.4.0

package/dist/index.js

@@ -12,13 +12,15 @@ import {
   registerGlasstrace,
   waitForReady,
   withGlasstraceConfig
-} from "./chunk-JH7EGRC5.js";
+} from "./chunk-VQDYXXVS.js";
 import {
   GlasstraceSpanProcessor,
   SdkError,
   captureCorrelationId
-} from "./chunk-FKBCEOJ5.js";
-import "./chunk-DQ25VOKK.js";
+} from "./chunk-Q42BY5BA.js";
+import {
+  trace
+} from "./chunk-DQ25VOKK.js";
 import "./chunk-YG3X7TUI.js";
 import {
   getActiveConfig,
@@ -27,7 +29,7 @@ import {
   performInit,
   saveCachedConfig,
   sendInitRequest
-} from "./chunk-ADUD4PEK.js";
+} from "./chunk-TANUWTFO.js";
 import {
   isAnonymousMode,
   isProductionDisabled,
@@ -37,11 +39,292 @@ import {
 import {
   getOrCreateAnonKey,
   readAnonKey
-} from "./chunk-GYTCZSAV.js";
+} from "./chunk-MFYOQOD7.js";
 import {
+  GLASSTRACE_ATTRIBUTE_NAMES,
+  SIDE_EFFECT_OMISSION_REASONS,
+  SIDE_EFFECT_OPERATION_KINDS,
+  SIDE_EFFECT_OPERATION_PHASES,
+  SIDE_EFFECT_OPERATION_STATUSES,
+  SIDE_EFFECT_SEMANTIC_FIELD_KEYS,
   deriveSessionId
-} from "./chunk-XS5W3SPL.js";
+} from "./chunk-4WI7B5FQ.js";
 import "./chunk-NSBPE2FW.js";
+
+// src/side-effect/allowlist.ts
+var MAX_SIDE_EFFECT_OPERATION_LABEL_LENGTH = 96;
+var MAX_SIDE_EFFECT_FIELD_VALUE_LENGTH = 80;
+var MAX_SIDE_EFFECT_OPERATIONS_PER_SPAN = 5;
+var OPERATION_KIND_SET = new Set(
+  SIDE_EFFECT_OPERATION_KINDS
+);
+var SEMANTIC_FIELD_KEY_SET = new Set(
+  SIDE_EFFECT_SEMANTIC_FIELD_KEYS
+);
+var OPERATION_STATUS_SET = new Set(
+  SIDE_EFFECT_OPERATION_STATUSES
+);
+var OPERATION_PHASE_SET = new Set(
+  SIDE_EFFECT_OPERATION_PHASES
+);
+var OMISSION_REASON_SET = new Set(
+  SIDE_EFFECT_OMISSION_REASONS
+);
+var TOKEN_REGEX = /^[A-Za-z0-9][A-Za-z0-9_.:-]*$/;
+var LOCALE_REGEX = /^[A-Za-z]{2,3}(?:-[A-Za-z0-9]{2,8}){0,3}$/;
+var TIMEZONE_REGEX = /^(?:UTC|GMT|[A-Za-z][A-Za-z0-9_+-]*(?:\/[A-Za-z0-9_+-]+){1,3})$/;
+var URL_SCHEME = /:\/\//;
+var URL_SCHEME_RELATIVE = /^\/\//;
+var EMAIL_LIKE = /[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}/i;
+var QUERY_LIKE = /\?/;
+var FRAGMENT_LIKE = /#/;
+var HEADER_LIKE = /\b(authorization|set-cookie|cookie)\b\s*[:=]/i;
+var HEADER_TOKEN_LIKE = /\b(authorization|set-cookie|cookie)\b\s+\S+=/i;
+var BEARER_LIKE = /bearer\s+\S+/i;
+var TOKEN_KV_LIKE = /["']?(password|passwd|token|api[_-]?key|secret|client_secret)["']?\s*[:=]/i;
+var PROSE_LIKE = /[\r\n\t]|\s{2,}/;
+var UUID_LIKE = /[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}/i;
+var GT_KEY_LIKE = /gt_(dev|anon|live)_[A-Za-z0-9_-]+/;
+function detectUnsafePattern(value) {
+  if (value.trim() !== value) return "raw_payload";
+  if (PROSE_LIKE.test(value)) return "raw_payload";
+  if (URL_SCHEME.test(value)) return "raw_payload";
+  if (URL_SCHEME_RELATIVE.test(value)) return "raw_payload";
+  if (QUERY_LIKE.test(value)) return "raw_payload";
+  if (FRAGMENT_LIKE.test(value)) return "raw_payload";
+  if (BEARER_LIKE.test(value)) return "secret";
+  if (HEADER_TOKEN_LIKE.test(value)) return "secret";
+  if (TOKEN_KV_LIKE.test(value)) return "secret";
+  if (HEADER_LIKE.test(value)) return "secret";
+  if (UUID_LIKE.test(value)) return "secret";
+  if (GT_KEY_LIKE.test(value)) return "secret";
+  if (EMAIL_LIKE.test(value)) return "pii";
+  return null;
+}
+function passesFieldValidator(key, value) {
+  if (key === "locale") return LOCALE_REGEX.test(value);
+  if (key === "timezone") return TIMEZONE_REGEX.test(value);
+  return TOKEN_REGEX.test(value);
+}
+function checkOperationLabel(value) {
+  if (typeof value !== "string" || value.length === 0) {
+    return { accepted: false, reason: "raw_payload" };
+  }
+  if (value.length > MAX_SIDE_EFFECT_OPERATION_LABEL_LENGTH) {
+    return { accepted: false, reason: "value_too_long" };
+  }
+  const unsafe = detectUnsafePattern(value);
+  if (unsafe) {
+    return { accepted: false, reason: unsafe };
+  }
+  if (!TOKEN_REGEX.test(value)) {
+    return { accepted: false, reason: "raw_payload" };
+  }
+  return { accepted: true, value };
+}
+function checkSemanticFieldValue(key, value) {
+  if (typeof value !== "string" || value.length === 0) {
+    return { accepted: false, reason: "raw_payload" };
+  }
+  if (value.length > MAX_SIDE_EFFECT_FIELD_VALUE_LENGTH) {
+    return { accepted: false, reason: "value_too_long" };
+  }
+  const unsafe = detectUnsafePattern(value);
+  if (unsafe) {
+    return { accepted: false, reason: unsafe };
+  }
+  if (!passesFieldValidator(key, value)) {
+    return { accepted: false, reason: "raw_payload" };
+  }
+  return { accepted: true, value };
+}
+function checkSemanticFieldKey(key) {
+  return typeof key === "string" && SEMANTIC_FIELD_KEY_SET.has(key);
+}
+function checkOperationKind(kind) {
+  return typeof kind === "string" && OPERATION_KIND_SET.has(kind);
+}
+function checkOperationStatus(status) {
+  return typeof status === "string" && OPERATION_STATUS_SET.has(status);
+}
+function checkOperationPhase(phase) {
+  return typeof phase === "string" && OPERATION_PHASE_SET.has(phase);
+}
+
+// src/side-effect/emit.ts
+var spanState = /* @__PURE__ */ new WeakMap();
+function getOrCreateState(span) {
+  let state = spanState.get(span);
+  if (!state) {
+    state = { operationsRecorded: 0, omissions: /* @__PURE__ */ new Map() };
+    spanState.set(span, state);
+  }
+  return state;
+}
+function getRecordingActiveSpan() {
+  let span;
+  try {
+    span = trace.getActiveSpan();
+  } catch {
+    return void 0;
+  }
+  if (!span) return void 0;
+  try {
+    if (typeof span.isRecording === "function" && !span.isRecording()) {
+      return void 0;
+    }
+  } catch {
+    return void 0;
+  }
+  return span;
+}
+function recordOmissionOnActiveSpan(reason) {
+  const span = getRecordingActiveSpan();
+  if (!span) return;
+  recordOmissionOnSpan(span, reason);
+}
+function recordOmissionOnSpan(span, reason) {
+  const state = getOrCreateState(span);
+  const previous = state.omissions.get(reason) ?? 0;
+  const next = previous + 1;
+  state.omissions.set(reason, next);
+  const attribute = OMISSION_ATTRIBUTE_BY_REASON[reason];
+  try {
+    span.setAttribute(attribute, next);
+  } catch {
+  }
+}
+var OMISSION_ATTRIBUTE_BY_REASON = {
+  pii: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_PII,
+  secret: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_SECRET,
+  raw_payload: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_RAW_PAYLOAD,
+  unsupported_key: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_UNSUPPORTED_KEY,
+  value_too_long: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_VALUE_TOO_LONG,
+  not_emitted: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_NOT_EMITTED,
+  capture_disabled: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_CAPTURE_DISABLED
+};
+var FIELD_ATTRIBUTE_BY_KEY = {
+  templateKey: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_TEMPLATE_KEY,
+  providerOperation: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_PROVIDER_OPERATION,
+  role: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_ROLE,
+  locale: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_LOCALE,
+  timezone: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_TIMEZONE,
+  status: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_STATUS,
+  phase: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_PHASE
+};
+function attachOperation(input) {
+  const span = getRecordingActiveSpan();
+  if (!span) return { kind: "no_active_span" };
+  const state = getOrCreateState(span);
+  if (state.operationsRecorded >= MAX_SIDE_EFFECT_OPERATIONS_PER_SPAN) {
+    return { kind: "over_budget", span };
+  }
+  state.operationsRecorded += 1;
+  try {
+    span.setAttribute(GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_KIND, input.kind);
+    span.setAttribute(
+      GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OPERATION,
+      input.operation
+    );
+    if (input.status !== void 0) {
+      span.setAttribute(
+        GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_STATUS,
+        input.status
+      );
+    }
+    if (input.phase !== void 0) {
+      span.setAttribute(
+        GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_PHASE,
+        input.phase
+      );
+    }
+  } catch {
+  }
+  return { kind: "attached", span };
+}
+function attachField(span, key, value) {
+  const attribute = FIELD_ATTRIBUTE_BY_KEY[key];
+  try {
+    span.setAttribute(attribute, value);
+  } catch {
+  }
+}
+function recordOmission(span, reason) {
+  recordOmissionOnSpan(span, reason);
+}
+
+// src/side-effect/index.ts
+function recordSideEffect(input) {
+  try {
+    runRecordSideEffect(input);
+  } catch {
+  }
+}
+function runRecordSideEffect(input) {
+  if (!input || typeof input !== "object") return;
+  let captureEnabled;
+  try {
+    captureEnabled = getActiveConfig().sideEffectEvidence === true;
+  } catch {
+    captureEnabled = false;
+  }
+  if (!captureEnabled) {
+    return;
+  }
+  const candidate = input;
+  if (!checkOperationKind(candidate.kind)) {
+    return;
+  }
+  const labelOutcome = checkOperationLabel(candidate.operation);
+  if (!labelOutcome.accepted) {
+    recordOmissionOnActiveSpan(labelOutcome.reason);
+    return;
+  }
+  let acceptedStatus;
+  if (candidate.status !== void 0) {
+    if (checkOperationStatus(candidate.status)) {
+      acceptedStatus = candidate.status;
+    } else {
+      recordOmissionOnActiveSpan("unsupported_key");
+    }
+  }
+  let acceptedPhase;
+  if (candidate.phase !== void 0) {
+    if (checkOperationPhase(candidate.phase)) {
+      acceptedPhase = candidate.phase;
+    } else {
+      recordOmissionOnActiveSpan("unsupported_key");
+    }
+  }
+  const outcome = attachOperation({
+    kind: candidate.kind,
+    operation: labelOutcome.value,
+    status: acceptedStatus,
+    phase: acceptedPhase
+  });
+  if (outcome.kind === "no_active_span") {
+    return;
+  }
+  if (outcome.kind === "over_budget") {
+    recordOmission(outcome.span, "value_too_long");
+    return;
+  }
+  const fields = candidate.fields;
+  if (fields && typeof fields === "object") {
+    for (const [rawKey, rawValue] of Object.entries(fields)) {
+      if (!checkSemanticFieldKey(rawKey)) {
+        recordOmission(outcome.span, "unsupported_key");
+        continue;
+      }
+      const valueOutcome = checkSemanticFieldValue(rawKey, rawValue);
+      if (!valueOutcome.accepted) {
+        recordOmission(outcome.span, valueOutcome.reason);
+        continue;
+      }
+      attachField(outcome.span, rawKey, valueOutcome.value);
+    }
+  }
+}
 export {
   GlasstraceExporter,
   GlasstraceSpanProcessor,
@@ -66,6 +349,7 @@ export {
   performInit,
   readAnonKey,
   readEnvVars,
+  recordSideEffect,
   registerGlasstrace,
   resolveConfig,
   saveCachedConfig,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}
+{"version":3,"sources":["../src/side-effect/allowlist.ts","../src/side-effect/emit.ts","../src/side-effect/index.ts"],"sourcesContent":["/**\n * Side-effect evidence allowlist enforcement (SDK-049).\n *\n * Two enforcement layers, both pure functions with no I/O. The SDK\n * runs these before any `glasstrace.side_effect.*` attribute is\n * attached to a span; the product's storage filter (ING-023) is a\n * second defense, not the primary boundary. A value rejected here\n * never reaches the OTel exporter, so it cannot leak through any\n * downstream telemetry path.\n *\n * Layer 1 (input shape):\n *  - Reject non-string scalars where strings are required.\n *  - Reject lengths exceeding the SCHEMA-036 budgets\n *    (operation label > 96 chars, field value > 80 chars) ⇒\n *    `value_too_long`.\n *  - Reject unsafe-pattern matches (URL, email, headers, tokens,\n *    UUIDs, prose-shaped whitespace) ⇒ category-mapped reason.\n *\n * Layer 2 (per-field validators):\n *  - `templateKey | providerOperation | role | status | phase` and\n *    the operation label require a compact token regex.\n *  - `locale` requires a BCP-47-shaped token.\n *  - `timezone` requires an IANA-shaped token.\n *\n * The regexes mirror the product-side schema in\n * `glasstrace-product/shared/types/agent-evidence.ts:585-619`\n * verbatim so any value the SDK admits is guaranteed to pass the\n * product's storage-time filter.\n *\n * @drift-check ../../glasstrace-product/shared/types/agent-evidence.ts\n */\n\nimport type {\n  SideEffectOmissionReason,\n  SideEffectOperationKind,\n  SideEffectOperationPhase,\n  SideEffectOperationStatus,\n  SideEffectSemanticFieldKey,\n} from \"@glasstrace/protocol\";\nimport {\n  SIDE_EFFECT_OMISSION_REASONS,\n  SIDE_EFFECT_OPERATION_KINDS,\n  SIDE_EFFECT_OPERATION_PHASES,\n  SIDE_EFFECT_OPERATION_STATUSES,\n  SIDE_EFFECT_SEMANTIC_FIELD_KEYS,\n} from \"@glasstrace/protocol\";\n\n/**\n * Maximum length, in characters, of a side-effect operation label.\n * Mirrors `AGENT_EVIDENCE_MAX_SIDE_EFFECT_OPERATION_LABEL_LENGTH`\n * in the product-side schema.\n */\nexport const MAX_SIDE_EFFECT_OPERATION_LABEL_LENGTH = 96;\n\n/**\n * Maximum length, in characters, of a side-effect semantic field\n * value. Mirrors `AGENT_EVIDENCE_MAX_SIDE_EFFECT_FIELD_VALUE_LENGTH`.\n */\nexport const MAX_SIDE_EFFECT_FIELD_VALUE_LENGTH = 80;\n\n/**\n * Maximum number of side-effect operations recorded on a single span\n * before further calls are dropped under the `value_too_long`\n * omission reason. Mirrors\n * `AGENT_EVIDENCE_MAX_SIDE_EFFECT_OPERATIONS`.\n */\nexport const MAX_SIDE_EFFECT_OPERATIONS_PER_SPAN = 5;\n\nconst OPERATION_KIND_SET: ReadonlySet<string> = new Set(\n  SIDE_EFFECT_OPERATION_KINDS,\n);\nconst SEMANTIC_FIELD_KEY_SET: ReadonlySet<string> = new Set(\n  SIDE_EFFECT_SEMANTIC_FIELD_KEYS,\n);\nconst OPERATION_STATUS_SET: ReadonlySet<string> = new Set(\n  SIDE_EFFECT_OPERATION_STATUSES,\n);\nconst OPERATION_PHASE_SET: ReadonlySet<string> = new Set(\n  SIDE_EFFECT_OPERATION_PHASES,\n);\nconst OMISSION_REASON_SET: ReadonlySet<string> = new Set(\n  SIDE_EFFECT_OMISSION_REASONS,\n);\n\n/**\n * Returns `true` when `reason` is one of the SCHEMA-036 omission\n * reasons. Exposed for tests and any future caller that needs to\n * narrow an arbitrary string to a `SideEffectOmissionReason` before\n * passing it to the emission helpers; the SDK's own emission path\n * always works with statically known literals.\n */\nexport function isKnownOmissionReason(\n  reason: string,\n): reason is SideEffectOmissionReason {\n  return OMISSION_REASON_SET.has(reason);\n}\n\n// Compact-token regex shared by templateKey/providerOperation/role/status/phase\n// and the operation label. The trailing length guard is enforced\n// separately so the budget rejection produces `value_too_long`\n// (rather than this regex's anchor failure being mis-categorized).\nconst TOKEN_REGEX = /^[A-Za-z0-9][A-Za-z0-9_.:-]*$/;\n\n// BCP-47-shaped locale, mirroring SCHEMA-036's\n// SideEffectLocaleValueSchema regex.\nconst LOCALE_REGEX = /^[A-Za-z]{2,3}(?:-[A-Za-z0-9]{2,8}){0,3}$/;\n\n// IANA-shaped timezone, mirroring SCHEMA-036's\n// SideEffectTimezoneValueSchema regex.\nconst TIMEZONE_REGEX =\n  /^(?:UTC|GMT|[A-Za-z][A-Za-z0-9_+-]*(?:\\/[A-Za-z0-9_+-]+){1,3})$/;\n\n// Unsafe-pattern detectors. Each rejects independently; the first\n// match determines the omission reason. The patterns and the reason\n// mapping are calibrated against the product's\n// SideEffectUnsafeTextSchema (agent-evidence.ts:563-583) and the\n// SDK-049 §Safety Requirements list.\n\nconst URL_SCHEME = /:\\/\\//;\nconst URL_SCHEME_RELATIVE = /^\\/\\//;\nconst EMAIL_LIKE = /[A-Z0-9._%+-]+@[A-Z0-9.-]+\\.[A-Z]{2,}/i;\nconst QUERY_LIKE = /\\?/;\nconst FRAGMENT_LIKE = /#/;\nconst HEADER_LIKE = /\\b(authorization|set-cookie|cookie)\\b\\s*[:=]/i;\nconst HEADER_TOKEN_LIKE =\n  /\\b(authorization|set-cookie|cookie)\\b\\s+\\S+=/i;\nconst BEARER_LIKE = /bearer\\s+\\S+/i;\nconst TOKEN_KV_LIKE =\n  /[\"']?(password|passwd|token|api[_-]?key|secret|client_secret)[\"']?\\s*[:=]/i;\nconst PROSE_LIKE = /[\\r\\n\\t]|\\s{2,}/;\nconst UUID_LIKE =\n  /[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}/i;\nconst GT_KEY_LIKE = /gt_(dev|anon|live)_[A-Za-z0-9_-]+/;\n\n/**\n * Inspect a value for unsafe patterns. Returns the matched omission\n * reason or `null` if the value is shape-clean. The function does NOT\n * apply the per-field token regex; that is Layer 2 below.\n *\n * Detector order matters: URL-shape detectors run before token-shape\n * detectors so a URL with an embedded `token=` query parameter is\n * categorized as `raw_payload` (the structural shape that brought it\n * here was the URL, not the token). Header and bearer-shaped values\n * are categorized as `secret` because they always carry credential\n * material. Email is `pii`. Whitespace anomalies are `raw_payload`.\n */\nfunction detectUnsafePattern(value: string): SideEffectOmissionReason | null {\n  // Whitespace anomalies fall into raw_payload because they indicate\n  // prose or copy-pasted user content rather than a compact label.\n  if (value.trim() !== value) return \"raw_payload\";\n  if (PROSE_LIKE.test(value)) return \"raw_payload\";\n\n  // URL-shape detectors run first so a credential-bearing query\n  // string is categorized by its structural shape (raw_payload)\n  // rather than the credential token inside it. The product's\n  // SCHEMA-036 filter rejects URL shapes regardless of category, so\n  // either choice is safe; the test fixture documents that URL-shape\n  // wins.\n  if (URL_SCHEME.test(value)) return \"raw_payload\";\n  if (URL_SCHEME_RELATIVE.test(value)) return \"raw_payload\";\n  if (QUERY_LIKE.test(value)) return \"raw_payload\";\n  if (FRAGMENT_LIKE.test(value)) return \"raw_payload\";\n\n  // Header-shaped and credential-shaped values route to `secret`\n  // because they always carry authentication material. Bearer- and\n  // token-key-value-like values are detected even when no header\n  // prefix is present.\n  if (BEARER_LIKE.test(value)) return \"secret\";\n  if (HEADER_TOKEN_LIKE.test(value)) return \"secret\";\n  if (TOKEN_KV_LIKE.test(value)) return \"secret\";\n  if (HEADER_LIKE.test(value)) return \"secret\";\n  if (UUID_LIKE.test(value)) return \"secret\";\n  if (GT_KEY_LIKE.test(value)) return \"secret\";\n\n  // PII detector.\n  if (EMAIL_LIKE.test(value)) return \"pii\";\n\n  return null;\n}\n\n/**\n * Run Layer 2 per-field validation. Returns `true` when the value\n * matches the field's regex. Length and shape rejection from Layer 1\n * is the caller's responsibility — by the time this runs the value\n * is known to be a non-empty string within the per-field length\n * budget and free of unsafe patterns.\n */\nfunction passesFieldValidator(\n  key: SideEffectSemanticFieldKey,\n  value: string,\n): boolean {\n  if (key === \"locale\") return LOCALE_REGEX.test(value);\n  if (key === \"timezone\") return TIMEZONE_REGEX.test(value);\n  return TOKEN_REGEX.test(value);\n}\n\n/**\n * Outcome of allowlist enforcement on a single value.\n */\nexport type ValueOutcome =\n  | { accepted: true; value: string }\n  | { accepted: false; reason: SideEffectOmissionReason };\n\n/**\n * Check the operation label (`recordSideEffect({ operation })`).\n *\n * Order matters: type rejection ⇒ length budget ⇒ unsafe pattern ⇒\n * field validator. This ordering lets each rejection class produce a\n * meaningful omission reason without the regex anchor failure\n * masking an upstream length or shape problem.\n */\nexport function checkOperationLabel(value: unknown): ValueOutcome {\n  if (typeof value !== \"string\" || value.length === 0) {\n    return { accepted: false, reason: \"raw_payload\" };\n  }\n  if (value.length > MAX_SIDE_EFFECT_OPERATION_LABEL_LENGTH) {\n    return { accepted: false, reason: \"value_too_long\" };\n  }\n  const unsafe = detectUnsafePattern(value);\n  if (unsafe) {\n    return { accepted: false, reason: unsafe };\n  }\n  if (!TOKEN_REGEX.test(value)) {\n    // A value that survives unsafe-pattern detection but still fails\n    // the compact-token regex is malformed (e.g., starts with a hyphen\n    // or contains a slash). Categorize as `raw_payload` because the\n    // value carries shape inconsistent with a normalized label.\n    return { accepted: false, reason: \"raw_payload\" };\n  }\n  return { accepted: true, value };\n}\n\n/**\n * Check a semantic field value for one of the allowlisted keys. The\n * key must already be known to be allowlisted (Layer 1 filters\n * unsupported keys via {@link checkSemanticFieldKey}).\n */\nexport function checkSemanticFieldValue(\n  key: SideEffectSemanticFieldKey,\n  value: unknown,\n): ValueOutcome {\n  if (typeof value !== \"string\" || value.length === 0) {\n    return { accepted: false, reason: \"raw_payload\" };\n  }\n  if (value.length > MAX_SIDE_EFFECT_FIELD_VALUE_LENGTH) {\n    return { accepted: false, reason: \"value_too_long\" };\n  }\n  const unsafe = detectUnsafePattern(value);\n  if (unsafe) {\n    return { accepted: false, reason: unsafe };\n  }\n  if (!passesFieldValidator(key, value)) {\n    return { accepted: false, reason: \"raw_payload\" };\n  }\n  return { accepted: true, value };\n}\n\n/**\n * Returns `true` when `key` is allowlisted as a semantic field key.\n * The narrowing predicate lets callers safely route the value to\n * {@link checkSemanticFieldValue}.\n */\nexport function checkSemanticFieldKey(\n  key: unknown,\n): key is SideEffectSemanticFieldKey {\n  return typeof key === \"string\" && SEMANTIC_FIELD_KEY_SET.has(key);\n}\n\n/**\n * Returns `true` when `kind` is one of the v1 allowlisted operation\n * kinds.\n */\nexport function checkOperationKind(\n  kind: unknown,\n): kind is SideEffectOperationKind {\n  return typeof kind === \"string\" && OPERATION_KIND_SET.has(kind);\n}\n\n/**\n * Returns `true` when `status` is one of the v1 allowlisted operation\n * statuses. Distinct from the per-field `status` check because the\n * top-level operation status is enforced as an enum membership only —\n * no compact-token regex applies (the SCHEMA-036 enum is the\n * exhaustive accepted set).\n */\nexport function checkOperationStatus(\n  status: unknown,\n): status is SideEffectOperationStatus {\n  return typeof status === \"string\" && OPERATION_STATUS_SET.has(status);\n}\n\n/**\n * Returns `true` when `phase` is one of the v1 allowlisted operation\n * phases.\n */\nexport function checkOperationPhase(\n  phase: unknown,\n): phase is SideEffectOperationPhase {\n  return typeof phase === \"string\" && OPERATION_PHASE_SET.has(phase);\n}\n","/**\n * Side-effect evidence attribute emission and per-span counter state\n * (SDK-049).\n *\n * Pure observer: this module never executes a side effect, never\n * creates a span, never throws to the caller. All failure modes route\n * to silent no-ops or omission counters. Per-span state is held in a\n * `WeakMap` keyed by the OTel `Span` object so counters auto-clean\n * when the span is garbage-collected after export.\n */\n\nimport * as otelApi from \"@opentelemetry/api\";\nimport {\n  GLASSTRACE_ATTRIBUTE_NAMES,\n  type SideEffectOmissionReason,\n  type SideEffectOperationKind,\n  type SideEffectOperationPhase,\n  type SideEffectOperationStatus,\n  type SideEffectSemanticFieldKey,\n} from \"@glasstrace/protocol\";\nimport { MAX_SIDE_EFFECT_OPERATIONS_PER_SPAN } from \"./allowlist.js\";\n\n/**\n * Per-span side-effect bookkeeping. `operationsRecorded` enforces the\n * SCHEMA-036 budget of 5 operations per span; `omissions` carries one\n * counter per omission reason so final `glasstrace.side_effect.omitted.*`\n * attributes can be flushed on the span as integer counts.\n */\ninterface SpanSideEffectState {\n  operationsRecorded: number;\n  omissions: Map<SideEffectOmissionReason, number>;\n}\n\nconst spanState: WeakMap<otelApi.Span, SpanSideEffectState> = new WeakMap();\n\nfunction getOrCreateState(span: otelApi.Span): SpanSideEffectState {\n  let state = spanState.get(span);\n  if (!state) {\n    state = { operationsRecorded: 0, omissions: new Map() };\n    spanState.set(span, state);\n  }\n  return state;\n}\n\n/**\n * Returns the currently-active span when it is recording and not yet\n * ended. Returns `undefined` when there is no active span, when the\n * active span is a `NonRecordingSpan`, or when the active span has\n * already ended. Callers treat all such cases as silent no-op\n * conditions: there is no span on which to attach evidence.\n */\nfunction getRecordingActiveSpan(): otelApi.Span | undefined {\n  let span: otelApi.Span | undefined;\n  try {\n    span = otelApi.trace.getActiveSpan();\n  } catch {\n    // Defensive: an OTel API surface error must not propagate to the\n    // user's side-effect call site.\n    return undefined;\n  }\n  if (!span) return undefined;\n\n  // `isRecording()` returns false for both NonRecordingSpan and ended\n  // spans on the standard SDK; honor that as the no-op signal. The\n  // method is part of the OTel API contract so a missing impl\n  // indicates a host shim — fall through to the conservative no-op.\n  try {\n    if (typeof span.isRecording === \"function\" && !span.isRecording()) {\n      return undefined;\n    }\n  } catch {\n    return undefined;\n  }\n  return span;\n}\n\n/**\n * Record a single omission count on the active span without emitting\n * the rejected value. Rejection metadata only ever leaks the integer\n * count, never the original input.\n *\n * No-op when there is no recording active span — the rejected value\n * still doesn't reach the wire because emission is gated on a span\n * being available.\n */\nexport function recordOmissionOnActiveSpan(\n  reason: SideEffectOmissionReason,\n): void {\n  const span = getRecordingActiveSpan();\n  if (!span) return;\n  recordOmissionOnSpan(span, reason);\n}\n\nfunction recordOmissionOnSpan(\n  span: otelApi.Span,\n  reason: SideEffectOmissionReason,\n): void {\n  const state = getOrCreateState(span);\n  const previous = state.omissions.get(reason) ?? 0;\n  const next = previous + 1;\n  state.omissions.set(reason, next);\n\n  const attribute = OMISSION_ATTRIBUTE_BY_REASON[reason];\n  try {\n    span.setAttribute(attribute, next);\n  } catch {\n    // OTel may reject the attribute write (slot exhaustion, ended\n    // span). The counter still advances in-memory; further emission\n    // attempts are harmless no-ops.\n  }\n}\n\nconst OMISSION_ATTRIBUTE_BY_REASON: Readonly<\n  Record<SideEffectOmissionReason, string>\n> = {\n  pii: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_PII,\n  secret: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_SECRET,\n  raw_payload: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_RAW_PAYLOAD,\n  unsupported_key:\n    GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_UNSUPPORTED_KEY,\n  value_too_long:\n    GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_VALUE_TOO_LONG,\n  not_emitted: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_NOT_EMITTED,\n  capture_disabled:\n    GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OMITTED_CAPTURE_DISABLED,\n};\n\nconst FIELD_ATTRIBUTE_BY_KEY: Readonly<\n  Record<SideEffectSemanticFieldKey, string>\n> = {\n  templateKey: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_TEMPLATE_KEY,\n  providerOperation:\n    GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_PROVIDER_OPERATION,\n  role: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_ROLE,\n  locale: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_LOCALE,\n  timezone: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_TIMEZONE,\n  status: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_STATUS,\n  phase: GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_FIELD_PHASE,\n};\n\n/**\n * Outcome of attempting to attach an operation summary. The\n * `over_budget` and `no_active_span` discriminants let the public API\n * route the call's bookkeeping (omission count vs. silent drop)\n * without re-querying span state.\n */\nexport type AttachOutcome =\n  | { kind: \"attached\"; span: otelApi.Span }\n  | { kind: \"no_active_span\" }\n  | { kind: \"over_budget\"; span: otelApi.Span };\n\n/**\n * Attach the top-level operation attributes to the active span and\n * advance the per-span operation counter. The caller is responsible\n * for invoking {@link attachField} for each accepted semantic field\n * and {@link recordOmission} for each rejected value.\n *\n * Returns the span when emission proceeded, `no_active_span` when no\n * recording span is active, or `over_budget` when the per-span\n * operation budget (5) is exhausted. The caller routes `over_budget`\n * to a `value_too_long` omission via {@link recordOmission}.\n */\nexport function attachOperation(input: {\n  kind: SideEffectOperationKind;\n  operation: string;\n  status?: SideEffectOperationStatus;\n  phase?: SideEffectOperationPhase;\n}): AttachOutcome {\n  const span = getRecordingActiveSpan();\n  if (!span) return { kind: \"no_active_span\" };\n\n  const state = getOrCreateState(span);\n  if (state.operationsRecorded >= MAX_SIDE_EFFECT_OPERATIONS_PER_SPAN) {\n    return { kind: \"over_budget\", span };\n  }\n  state.operationsRecorded += 1;\n\n  try {\n    span.setAttribute(GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_KIND, input.kind);\n    span.setAttribute(\n      GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_OPERATION,\n      input.operation,\n    );\n    if (input.status !== undefined) {\n      span.setAttribute(\n        GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_STATUS,\n        input.status,\n      );\n    }\n    if (input.phase !== undefined) {\n      span.setAttribute(\n        GLASSTRACE_ATTRIBUTE_NAMES.SIDE_EFFECT_PHASE,\n        input.phase,\n      );\n    }\n  } catch {\n    // Slot exhaustion or ended-span write — ignore. The counter has\n    // already advanced; subsequent calls within the same span are\n    // budget-bounded as expected.\n  }\n  return { kind: \"attached\", span };\n}\n\n/**\n * Attach a single allowlisted semantic field to the span. The caller\n * has already routed the field key and value through the allowlist\n * helpers; this function only writes the attribute.\n */\nexport function attachField(\n  span: otelApi.Span,\n  key: SideEffectSemanticFieldKey,\n  value: string,\n): void {\n  const attribute = FIELD_ATTRIBUTE_BY_KEY[key];\n  try {\n    span.setAttribute(attribute, value);\n  } catch {\n    // Slot exhaustion — ignore.\n  }\n}\n\n/**\n * Record an omission directly on a known span. Used by the public\n * API after {@link attachOperation} returns `over_budget` so the\n * count is registered on the same span that observed the operation.\n */\nexport function recordOmission(\n  span: otelApi.Span,\n  reason: SideEffectOmissionReason,\n): void {\n  recordOmissionOnSpan(span, reason);\n}\n","/**\n * Public side-effect evidence emission API (SDK-049).\n *\n * Exposes {@link recordSideEffect} as a single user-callable function\n * that attaches allowlisted, non-sensitive semantic metadata about a\n * side-effect operation (email, calendar_link, webhook, external_api,\n * queue, after_callback) to the current active OTel span.\n *\n * The behavior contract is observational only: this function never\n * executes a side effect, never retries, never delays, never throws.\n * All failure modes (no active span, ended span, NonRecordingSpan,\n * capture-config disabled, allowlist rejection, per-span budget\n * exhausted, OTel attribute slot exhaustion) silently route to a\n * no-op or to an omission-counter increment that carries no rejected\n * input.\n */\n\nimport type {\n  SideEffectOperationKind,\n  SideEffectOperationPhase,\n  SideEffectOperationStatus,\n  SideEffectSemanticFieldKey,\n} from \"@glasstrace/protocol\";\nimport {\n  checkOperationKind,\n  checkOperationLabel,\n  checkOperationPhase,\n  checkOperationStatus,\n  checkSemanticFieldKey,\n  checkSemanticFieldValue,\n} from \"./allowlist.js\";\nimport {\n  attachField,\n  attachOperation,\n  recordOmission,\n  recordOmissionOnActiveSpan,\n} from \"./emit.js\";\nimport { getActiveConfig } from \"../init-client.js\";\n\n/**\n * Input shape for {@link recordSideEffect}.\n *\n * All fields except `kind` and `operation` are optional. The SDK\n * silently drops unknown fields and unsafe values, surfacing only an\n * integer omission count under the matching\n * `glasstrace.side_effect.omitted.*` attribute on the active span.\n */\nexport interface RecordSideEffectInput {\n  /**\n   * One of the allowlisted v1 operation kinds. Calls with any other\n   * value (typo, unsupported kind, non-string) silently drop without\n   * recording an omission, because there is no kind to attach the\n   * counter to.\n   */\n  kind: SideEffectOperationKind;\n\n  /**\n   * Compact, normalized operation label (max 96 chars). Must match\n   * `^[A-Za-z0-9][A-Za-z0-9_.:-]*$`. Free-form prose, URLs, query\n   * strings, and email-shaped values are silently dropped and routed\n   * to the matching omission counter.\n   */\n  operation: string;\n\n  /**\n   * Optional operation lifecycle status. Defaults to omitted. Values\n   * outside the v1 allowlist are silently dropped.\n   */\n  status?: SideEffectOperationStatus;\n\n  /**\n   * Optional operation execution phase (request / post_response /\n   * background / unknown). Defaults to omitted.\n   */\n  phase?: SideEffectOperationPhase;\n\n  /**\n   * Optional allowlisted semantic fields. Keys outside the v1\n   * allowlist (`templateKey`, `providerOperation`, `role`, `locale`,\n   * `timezone`, `status`, `phase`) and values matching unsafe\n   * patterns (URLs, emails, tokens, headers, prose-shaped\n   * whitespace) are silently dropped and routed to the matching\n   * omission counter.\n   */\n  fields?: Partial<Record<SideEffectSemanticFieldKey, string>>;\n}\n\n/**\n * Record allowlisted side-effect evidence on the current active OTel\n * span (SDK-049).\n *\n * Behavior is observational only: this function never executes,\n * retries, or duplicates a side effect. The default capture-config\n * flag `sideEffectEvidence` is `false`; callers must opt in via\n * account configuration before any attribute reaches the wire.\n *\n * Edge cases (all silent no-ops):\n *  - capture-config flag is `false` ⇒ no-op (no allowlist evaluation)\n *  - input is not a plain object ⇒ no-op\n *  - `kind` is not in the v1 allowlist ⇒ no-op\n *  - no active span ⇒ no-op\n *  - active span has already ended or is `NonRecordingSpan` ⇒ no-op\n *  - per-span operation budget exhausted (5 ops max) ⇒ records a\n *    `value_too_long` omission count, no operation attributes\n *  - OTel attribute slot exhaustion ⇒ silently drops the attribute\n *    write\n *\n * The SDK guards only callers of this function. Direct\n * `span.setAttribute(\"glasstrace.side_effect.<...>\", ...)` writes\n * bypass the SDK and rely on the product's storage filter (ING-023)\n * as the second defense layer; this is intentional defense-in-depth,\n * not a gap.\n *\n * @example Recording a successful cancellation email\n * ```ts\n * import { recordSideEffect } from \"@glasstrace/sdk\";\n *\n * await mailer.send({ to: recipient, template: \"EventCanceledEmail\" });\n * recordSideEffect({\n *   kind: \"email\",\n *   operation: \"email.send\",\n *   status: \"succeeded\",\n *   phase: \"request\",\n *   fields: {\n *     templateKey: \"EventCanceledEmail\",\n *     role: \"invitee\",\n *     locale: \"en-US\",\n *     timezone: \"Europe/Paris\",\n *   },\n * });\n * ```\n */\nexport function recordSideEffect(input: RecordSideEffectInput): void {\n  try {\n    runRecordSideEffect(input);\n  } catch {\n    // Defense-in-depth: any unexpected throw inside the function\n    // (e.g., a host shim mis-implementing OTel API) must not\n    // propagate to the user's code path. Behavior-neutrality requires\n    // recordSideEffect to be observationally invisible.\n  }\n}\n\nfunction runRecordSideEffect(input: unknown): void {\n  if (!input || typeof input !== \"object\") return;\n\n  // Capture-config gate: read at every call so config rotation takes\n  // effect on the next emission without restart. The disk read is\n  // cached inside getActiveConfig() so this stays cheap on the hot\n  // path.\n  let captureEnabled: boolean;\n  try {\n    captureEnabled = getActiveConfig().sideEffectEvidence === true;\n  } catch {\n    captureEnabled = false;\n  }\n  if (!captureEnabled) {\n    // Note: we deliberately do NOT increment a `capture_disabled`\n    // omission counter for every call. With the flag off, the SDK's\n    // contract is \"no allowlist evaluation runs and no allocation\n    // happens\" — surfacing a per-call counter would require attaching\n    // to a span and would defeat that goal. The\n    // `capture_disabled` reason exists for the receiver-side path\n    // where ingestion drops attributes due to product-side flag\n    // changes after the SDK emitted them.\n    return;\n  }\n\n  const candidate = input as Partial<RecordSideEffectInput>;\n\n  if (!checkOperationKind(candidate.kind)) {\n    // No `kind` to attach a counter under — silent drop.\n    return;\n  }\n\n  const labelOutcome = checkOperationLabel(candidate.operation);\n  if (!labelOutcome.accepted) {\n    recordOmissionOnActiveSpan(labelOutcome.reason);\n    return;\n  }\n\n  let acceptedStatus: SideEffectOperationStatus | undefined;\n  if (candidate.status !== undefined) {\n    if (checkOperationStatus(candidate.status)) {\n      acceptedStatus = candidate.status;\n    } else {\n      recordOmissionOnActiveSpan(\"unsupported_key\");\n    }\n  }\n\n  let acceptedPhase: SideEffectOperationPhase | undefined;\n  if (candidate.phase !== undefined) {\n    if (checkOperationPhase(candidate.phase)) {\n      acceptedPhase = candidate.phase;\n    } else {\n      recordOmissionOnActiveSpan(\"unsupported_key\");\n    }\n  }\n\n  const outcome = attachOperation({\n    kind: candidate.kind,\n    operation: labelOutcome.value,\n    status: acceptedStatus,\n    phase: acceptedPhase,\n  });\n\n  if (outcome.kind === \"no_active_span\") {\n    // No span to record an omission against either — silent drop.\n    return;\n  }\n  if (outcome.kind === \"over_budget\") {\n    recordOmission(outcome.span, \"value_too_long\");\n    return;\n  }\n\n  // Process semantic fields. Each rejection routes to an omission\n  // count on the same span; accepted values become field attributes.\n  const fields = candidate.fields;\n  if (fields && typeof fields === \"object\") {\n    for (const [rawKey, rawValue] of Object.entries(fields)) {\n      if (!checkSemanticFieldKey(rawKey)) {\n        recordOmission(outcome.span, \"unsupported_key\");\n        continue;\n      }\n      const valueOutcome = checkSemanticFieldValue(rawKey, rawValue);\n      if (!valueOutcome.accepted) {\n        recordOmission(outcome.span, valueOutcome.reason);\n        continue;\n      }\n      attachField(outcome.span, rawKey, valueOutcome.value);\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoDO,IAAM,yCAAyC;AAM/C,IAAM,qCAAqC;AAQ3C,IAAM,sCAAsC;AAEnD,IAAM,qBAA0C,IAAI;AAAA,EAClD;AACF;AACA,IAAM,yBAA8C,IAAI;AAAA,EACtD;AACF;AACA,IAAM,uBAA4C,IAAI;AAAA,EACpD;AACF;AACA,IAAM,sBAA2C,IAAI;AAAA,EACnD;AACF;AACA,IAAM,sBAA2C,IAAI;AAAA,EACnD;AACF;AAmBA,IAAM,cAAc;AAIpB,IAAM,eAAe;AAIrB,IAAM,iBACJ;AAQF,IAAM,aAAa;AACnB,IAAM,sBAAsB;AAC5B,IAAM,aAAa;AACnB,IAAM,aAAa;AACnB,IAAM,gBAAgB;AACtB,IAAM,cAAc;AACpB,IAAM,oBACJ;AACF,IAAM,cAAc;AACpB,IAAM,gBACJ;AACF,IAAM,aAAa;AACnB,IAAM,YACJ;AACF,IAAM,cAAc;AAcpB,SAAS,oBAAoB,OAAgD;AAG3E,MAAI,MAAM,KAAK,MAAM,MAAO,QAAO;AACnC,MAAI,WAAW,KAAK,KAAK,EAAG,QAAO;AAQnC,MAAI,WAAW,KAAK,KAAK,EAAG,QAAO;AACnC,MAAI,oBAAoB,KAAK,KAAK,EAAG,QAAO;AAC5C,MAAI,WAAW,KAAK,KAAK,EAAG,QAAO;AACnC,MAAI,cAAc,KAAK,KAAK,EAAG,QAAO;AAMtC,MAAI,YAAY,KAAK,KAAK,EAAG,QAAO;AACpC,MAAI,kBAAkB,KAAK,KAAK,EAAG,QAAO;AAC1C,MAAI,cAAc,KAAK,KAAK,EAAG,QAAO;AACtC,MAAI,YAAY,KAAK,KAAK,EAAG,QAAO;AACpC,MAAI,UAAU,KAAK,KAAK,EAAG,QAAO;AAClC,MAAI,YAAY,KAAK,KAAK,EAAG,QAAO;AAGpC,MAAI,WAAW,KAAK,KAAK,EAAG,QAAO;AAEnC,SAAO;AACT;AASA,SAAS,qBACP,KACA,OACS;AACT,MAAI,QAAQ,SAAU,QAAO,aAAa,KAAK,KAAK;AACpD,MAAI,QAAQ,WAAY,QAAO,eAAe,KAAK,KAAK;AACxD,SAAO,YAAY,KAAK,KAAK;AAC/B;AAiBO,SAAS,oBAAoB,OAA8B;AAChE,MAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG;AACnD,WAAO,EAAE,UAAU,OAAO,QAAQ,cAAc;AAAA,EAClD;AACA,MAAI,MAAM,SAAS,wCAAwC;AACzD,WAAO,EAAE,UAAU,OAAO,QAAQ,iBAAiB;AAAA,EACrD;AACA,QAAM,SAAS,oBAAoB,KAAK;AACxC,MAAI,QAAQ;AACV,WAAO,EAAE,UAAU,OAAO,QAAQ,OAAO;AAAA,EAC3C;AACA,MAAI,CAAC,YAAY,KAAK,KAAK,GAAG;AAK5B,WAAO,EAAE,UAAU,OAAO,QAAQ,cAAc;AAAA,EAClD;AACA,SAAO,EAAE,UAAU,MAAM,MAAM;AACjC;AAOO,SAAS,wBACd,KACA,OACc;AACd,MAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG;AACnD,WAAO,EAAE,UAAU,OAAO,QAAQ,cAAc;AAAA,EAClD;AACA,MAAI,MAAM,SAAS,oCAAoC;AACrD,WAAO,EAAE,UAAU,OAAO,QAAQ,iBAAiB;AAAA,EACrD;AACA,QAAM,SAAS,oBAAoB,KAAK;AACxC,MAAI,QAAQ;AACV,WAAO,EAAE,UAAU,OAAO,QAAQ,OAAO;AAAA,EAC3C;AACA,MAAI,CAAC,qBAAqB,KAAK,KAAK,GAAG;AACrC,WAAO,EAAE,UAAU,OAAO,QAAQ,cAAc;AAAA,EAClD;AACA,SAAO,EAAE,UAAU,MAAM,MAAM;AACjC;AAOO,SAAS,sBACd,KACmC;AACnC,SAAO,OAAO,QAAQ,YAAY,uBAAuB,IAAI,GAAG;AAClE;AAMO,SAAS,mBACd,MACiC;AACjC,SAAO,OAAO,SAAS,YAAY,mBAAmB,IAAI,IAAI;AAChE;AASO,SAAS,qBACd,QACqC;AACrC,SAAO,OAAO,WAAW,YAAY,qBAAqB,IAAI,MAAM;AACtE;AAMO,SAAS,oBACd,OACmC;AACnC,SAAO,OAAO,UAAU,YAAY,oBAAoB,IAAI,KAAK;AACnE;;;AC1QA,IAAM,YAAwD,oBAAI,QAAQ;AAE1E,SAAS,iBAAiB,MAAyC;AACjE,MAAI,QAAQ,UAAU,IAAI,IAAI;AAC9B,MAAI,CAAC,OAAO;AACV,YAAQ,EAAE,oBAAoB,GAAG,WAAW,oBAAI,IAAI,EAAE;AACtD,cAAU,IAAI,MAAM,KAAK;AAAA,EAC3B;AACA,SAAO;AACT;AASA,SAAS,yBAAmD;AAC1D,MAAI;AACJ,MAAI;AACF,WAAe,MAAM,cAAc;AAAA,EACrC,QAAQ;AAGN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,KAAM,QAAO;AAMlB,MAAI;AACF,QAAI,OAAO,KAAK,gBAAgB,cAAc,CAAC,KAAK,YAAY,GAAG;AACjE,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAWO,SAAS,2BACd,QACM;AACN,QAAM,OAAO,uBAAuB;AACpC,MAAI,CAAC,KAAM;AACX,uBAAqB,MAAM,MAAM;AACnC;AAEA,SAAS,qBACP,MACA,QACM;AACN,QAAM,QAAQ,iBAAiB,IAAI;AACnC,QAAM,WAAW,MAAM,UAAU,IAAI,MAAM,KAAK;AAChD,QAAM,OAAO,WAAW;AACxB,QAAM,UAAU,IAAI,QAAQ,IAAI;AAEhC,QAAM,YAAY,6BAA6B,MAAM;AACrD,MAAI;AACF,SAAK,aAAa,WAAW,IAAI;AAAA,EACnC,QAAQ;AAAA,EAIR;AACF;AAEA,IAAM,+BAEF;AAAA,EACF,KAAK,2BAA2B;AAAA,EAChC,QAAQ,2BAA2B;AAAA,EACnC,aAAa,2BAA2B;AAAA,EACxC,iBACE,2BAA2B;AAAA,EAC7B,gBACE,2BAA2B;AAAA,EAC7B,aAAa,2BAA2B;AAAA,EACxC,kBACE,2BAA2B;AAC/B;AAEA,IAAM,yBAEF;AAAA,EACF,aAAa,2BAA2B;AAAA,EACxC,mBACE,2BAA2B;AAAA,EAC7B,MAAM,2BAA2B;AAAA,EACjC,QAAQ,2BAA2B;AAAA,EACnC,UAAU,2BAA2B;AAAA,EACrC,QAAQ,2BAA2B;AAAA,EACnC,OAAO,2BAA2B;AACpC;AAwBO,SAAS,gBAAgB,OAKd;AAChB,QAAM,OAAO,uBAAuB;AACpC,MAAI,CAAC,KAAM,QAAO,EAAE,MAAM,iBAAiB;AAE3C,QAAM,QAAQ,iBAAiB,IAAI;AACnC,MAAI,MAAM,sBAAsB,qCAAqC;AACnE,WAAO,EAAE,MAAM,eAAe,KAAK;AAAA,EACrC;AACA,QAAM,sBAAsB;AAE5B,MAAI;AACF,SAAK,aAAa,2BAA2B,kBAAkB,MAAM,IAAI;AACzE,SAAK;AAAA,MACH,2BAA2B;AAAA,MAC3B,MAAM;AAAA,IACR;AACA,QAAI,MAAM,WAAW,QAAW;AAC9B,WAAK;AAAA,QACH,2BAA2B;AAAA,QAC3B,MAAM;AAAA,MACR;AAAA,IACF;AACA,QAAI,MAAM,UAAU,QAAW;AAC7B,WAAK;AAAA,QACH,2BAA2B;AAAA,QAC3B,MAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAIR;AACA,SAAO,EAAE,MAAM,YAAY,KAAK;AAClC;AAOO,SAAS,YACd,MACA,KACA,OACM;AACN,QAAM,YAAY,uBAAuB,GAAG;AAC5C,MAAI;AACF,SAAK,aAAa,WAAW,KAAK;AAAA,EACpC,QAAQ;AAAA,EAER;AACF;AAOO,SAAS,eACd,MACA,QACM;AACN,uBAAqB,MAAM,MAAM;AACnC;;;ACnGO,SAAS,iBAAiB,OAAoC;AACnE,MAAI;AACF,wBAAoB,KAAK;AAAA,EAC3B,QAAQ;AAAA,EAKR;AACF;AAEA,SAAS,oBAAoB,OAAsB;AACjD,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU;AAMzC,MAAI;AACJ,MAAI;AACF,qBAAiB,gBAAgB,EAAE,uBAAuB;AAAA,EAC5D,QAAQ;AACN,qBAAiB;AAAA,EACnB;AACA,MAAI,CAAC,gBAAgB;AASnB;AAAA,EACF;AAEA,QAAM,YAAY;AAElB,MAAI,CAAC,mBAAmB,UAAU,IAAI,GAAG;AAEvC;AAAA,EACF;AAEA,QAAM,eAAe,oBAAoB,UAAU,SAAS;AAC5D,MAAI,CAAC,aAAa,UAAU;AAC1B,+BAA2B,aAAa,MAAM;AAC9C;AAAA,EACF;AAEA,MAAI;AACJ,MAAI,UAAU,WAAW,QAAW;AAClC,QAAI,qBAAqB,UAAU,MAAM,GAAG;AAC1C,uBAAiB,UAAU;AAAA,IAC7B,OAAO;AACL,iCAA2B,iBAAiB;AAAA,IAC9C;AAAA,EACF;AAEA,MAAI;AACJ,MAAI,UAAU,UAAU,QAAW;AACjC,QAAI,oBAAoB,UAAU,KAAK,GAAG;AACxC,sBAAgB,UAAU;AAAA,IAC5B,OAAO;AACL,iCAA2B,iBAAiB;AAAA,IAC9C;AAAA,EACF;AAEA,QAAM,UAAU,gBAAgB;AAAA,IAC9B,MAAM,UAAU;AAAA,IAChB,WAAW,aAAa;AAAA,IACxB,QAAQ;AAAA,IACR,OAAO;AAAA,EACT,CAAC;AAED,MAAI,QAAQ,SAAS,kBAAkB;AAErC;AAAA,EACF;AACA,MAAI,QAAQ,SAAS,eAAe;AAClC,mBAAe,QAAQ,MAAM,gBAAgB;AAC7C;AAAA,EACF;AAIA,QAAM,SAAS,UAAU;AACzB,MAAI,UAAU,OAAO,WAAW,UAAU;AACxC,eAAW,CAAC,QAAQ,QAAQ,KAAK,OAAO,QAAQ,MAAM,GAAG;AACvD,UAAI,CAAC,sBAAsB,MAAM,GAAG;AAClC,uBAAe,QAAQ,MAAM,iBAAiB;AAC9C;AAAA,MACF;AACA,YAAM,eAAe,wBAAwB,QAAQ,QAAQ;AAC7D,UAAI,CAAC,aAAa,UAAU;AAC1B,uBAAe,QAAQ,MAAM,aAAa,MAAM;AAChD;AAAA,MACF;AACA,kBAAY,QAAQ,MAAM,QAAQ,aAAa,KAAK;AAAA,IACtD;AAAA,EACF;AACF;","names":[]}

package/dist/node-entry.cjs

@@ -14594,7 +14594,18 @@ var init_dist = __esm({
       fullConsoleOutput: external_exports.boolean(),
       importGraph: external_exports.boolean(),
       consoleErrors: external_exports.boolean().optional().default(false),
-      errorResponseBodies: external_exports.boolean().optional().default(false)
+      errorResponseBodies: external_exports.boolean().optional().default(false),
+      /**
+       * Account opt-in for side-effect evidence emission (SDK-049).
+       *
+       * When `false` (default), `recordSideEffect()` is a silent no-op:
+       * no allowlist evaluation runs and no `glasstrace.side_effect.*`
+       * attribute reaches the wire. When `true`, allowlisted side-effect
+       * metadata is attached to the active OTel span subject to the
+       * client-side allowlist enforcement layered with the product's
+       * storage-time filter as defense-in-depth.
+       */
+      sideEffectEvidence: external_exports.boolean().optional().default(false)
     });
     SdkCachedConfigSchema = external_exports.object({
       response: external_exports.record(external_exports.string(), external_exports.unknown()),
@@ -14654,7 +14665,37 @@ var init_dist = __esm({
       TRIGGER_TYPE: "glasstrace.trigger.type",
       ELEMENT_FINGERPRINT: "glasstrace.element.fingerprint",
       ELEMENT_CONFIDENCE: "glasstrace.element.confidence",
-      TAB_ID: "glasstrace.tab.id"
+      TAB_ID: "glasstrace.tab.id",
+      // Side-effect evidence (SDK-049 / SCHEMA-036).
+      // Top-level operation attributes attached to the active span when a
+      // side-effect is recorded via `recordSideEffect()`. The wire-string
+      // set aligns verbatim with the product-side filter in
+      // `packages/ingestion/src/services/trace-writer.ts`.
+      SIDE_EFFECT_KIND: "glasstrace.side_effect.kind",
+      SIDE_EFFECT_OPERATION: "glasstrace.side_effect.operation",
+      SIDE_EFFECT_STATUS: "glasstrace.side_effect.status",
+      SIDE_EFFECT_PHASE: "glasstrace.side_effect.phase",
+      // Allowlisted semantic field attributes — one per allowlisted key.
+      // Wire keys are camelCase to match the SCHEMA-036 enum members
+      // exactly; the SDK constant names are SCREAMING_SNAKE per the rest
+      // of GLASSTRACE_ATTRIBUTE_NAMES.
+      SIDE_EFFECT_FIELD_TEMPLATE_KEY: "glasstrace.side_effect.field.templateKey",
+      SIDE_EFFECT_FIELD_PROVIDER_OPERATION: "glasstrace.side_effect.field.providerOperation",
+      SIDE_EFFECT_FIELD_ROLE: "glasstrace.side_effect.field.role",
+      SIDE_EFFECT_FIELD_LOCALE: "glasstrace.side_effect.field.locale",
+      SIDE_EFFECT_FIELD_TIMEZONE: "glasstrace.side_effect.field.timezone",
+      SIDE_EFFECT_FIELD_STATUS: "glasstrace.side_effect.field.status",
+      SIDE_EFFECT_FIELD_PHASE: "glasstrace.side_effect.field.phase",
+      // Omission reason attributes — one per allowlisted reason. The
+      // attribute value carries an integer count; the rejected value is
+      // never echoed.
+      SIDE_EFFECT_OMITTED_PII: "glasstrace.side_effect.omitted.pii",
+      SIDE_EFFECT_OMITTED_SECRET: "glasstrace.side_effect.omitted.secret",
+      SIDE_EFFECT_OMITTED_RAW_PAYLOAD: "glasstrace.side_effect.omitted.raw_payload",
+      SIDE_EFFECT_OMITTED_UNSUPPORTED_KEY: "glasstrace.side_effect.omitted.unsupported_key",
+      SIDE_EFFECT_OMITTED_VALUE_TOO_LONG: "glasstrace.side_effect.omitted.value_too_long",
+      SIDE_EFFECT_OMITTED_NOT_EMITTED: "glasstrace.side_effect.omitted.not_emitted",
+      SIDE_EFFECT_OMITTED_CAPTURE_DISABLED: "glasstrace.side_effect.omitted.capture_disabled"
     };
     DEFAULT_CAPTURE_CONFIG = {
       requestBodies: false,
@@ -14663,7 +14704,8 @@ var init_dist = __esm({
       fullConsoleOutput: false,
       importGraph: false,
       consoleErrors: false,
-      errorResponseBodies: false
+      errorResponseBodies: false,
+      sideEffectEvidence: false
     };
     MAX_SOURCE_MAP_FILE_PATH_LENGTH = 512;
     MAX_SOURCE_MAP_FILE_SIZE = 50 * 1024 * 1024;
@@ -22753,7 +22795,7 @@ function registerGlasstrace(options) {
     setCoreState(CoreState.REGISTERING);
     startRuntimeStateWriter({
       projectRoot: process.cwd(),
-      sdkVersion: "1.3.9"
+      sdkVersion: "1.4.0"
     });
     const config2 = resolveConfig(options);
     if (config2.verbose) {
@@ -22920,8 +22962,8 @@ async function backgroundInit(config2, anonKeyForInit, generation) {
   if (config2.verbose) {
     console.info("[glasstrace] Background init firing.");
   }
-  const healthReport = collectHealthReport("1.3.9");
-  const initResult = await performInit(config2, anonKeyForInit, "1.3.9", healthReport);
+  const healthReport = collectHealthReport("1.4.0");
+  const initResult = await performInit(config2, anonKeyForInit, "1.4.0", healthReport);
   if (generation !== registrationGeneration) return;
   const currentState = getCoreState();
   if (currentState === CoreState.SHUTTING_DOWN || currentState === CoreState.SHUTDOWN) {
@@ -22944,7 +22986,7 @@ async function backgroundInit(config2, anonKeyForInit, generation) {
   }
   maybeInstallConsoleCapture();
   if (didLastInitSucceed()) {
-    startHeartbeat(config2, anonKeyForInit, "1.3.9", generation, (newApiKey, accountId) => {
+    startHeartbeat(config2, anonKeyForInit, "1.4.0", generation, (newApiKey, accountId) => {
       setAuthState(AuthState.CLAIMING);
       emitLifecycleEvent("auth:claim_started", { accountId });
       setResolvedApiKey(newApiKey);