@glasstrace/sdk 1.4.0 → 1.5.1

package/dist/cli/mcp-add.js

@@ -1,11 +1,8 @@
 import {
   detectAgents,
   generateInfoSection,
-  generateMcpConfig,
-  injectInfoSection,
-  updateGitignore,
-  writeMcpConfig
-} from "../chunk-JZ475QRH.js";
+  generateMcpConfig
+} from "../chunk-D3QXU2VM.js";
 import {
   MCP_ENDPOINT,
   identityFingerprint,
@@ -18,6 +15,11 @@ import "../chunk-4WI7B5FQ.js";
 import {
   formatAgentName
 } from "../chunk-NB7GJE4S.js";
+import {
+  injectInfoSection,
+  updateGitignore,
+  writeMcpConfig
+} from "../chunk-ZBQQXVHD.js";
 import "../chunk-NSBPE2FW.js";
 
 // src/cli/mcp-add.ts
@@ -166,10 +168,11 @@ async function mcpAdd(options) {
   const bearer = resolved.effective.key;
   for (const agent of targetAgents) {
     const name = formatAgentName(agent.name);
+    const sdkVersion = true ? "1.5.1" : "0.0.0-dev";
     if (agent.name !== "generic") {
       const cliSuccess = await registerViaCli(agent, bearer);
       if (cliSuccess) {
-        const infoContent = generateInfoSection(agent, MCP_ENDPOINT);
+        const infoContent = generateInfoSection(agent, MCP_ENDPOINT, sdkVersion);
         if (infoContent !== "") {
           await injectInfoSection(agent, infoContent, projectRoot);
         }
@@ -187,7 +190,7 @@ async function mcpAdd(options) {
         const configContent = generateMcpConfig(agent, MCP_ENDPOINT, bearer);
         await writeMcpConfig(agent, configContent, projectRoot);
         if (fs.existsSync(agent.mcpConfigPath)) {
-          const infoContent = generateInfoSection(agent, MCP_ENDPOINT);
+          const infoContent = generateInfoSection(agent, MCP_ENDPOINT, sdkVersion);
           if (infoContent !== "") {
             await injectInfoSection(agent, infoContent, projectRoot);
           }

package/dist/cli/mcp-add.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/cli/mcp-add.ts"],"sourcesContent":["import { execFile as execFileCb } from \"node:child_process\";\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport { promisify } from \"node:util\";\nimport {\n  isAnonApiKey,\n  identityFingerprint,\n  MCP_ENDPOINT,\n  readMcpMarker,\n  resolveEffectiveMcpCredential,\n  writeMcpMarker,\n  type EffectiveMcpCredential,\n} from \"../mcp-runtime.js\";\nimport { detectAgents } from \"../agent-detection/detect.js\";\nimport { generateMcpConfig, generateInfoSection } from \"../agent-detection/configs.js\";\nimport {\n  writeMcpConfig,\n  injectInfoSection,\n  updateGitignore,\n} from \"../agent-detection/inject.js\";\nimport type { DetectedAgent } from \"../agent-detection/detect.js\";\nimport { formatAgentName } from \"./constants.js\";\n\nconst execFileAsync = promisify(execFileCb);\n\n/** Options for the mcp add command. */\nexport interface McpAddOptions {\n  force?: boolean;\n  dryRun?: boolean;\n}\n\n/** Result of the mcp add command. */\nexport interface McpAddResult {\n  exitCode: number;\n  results: AgentResult[];\n  messages: string[];\n}\n\n/**\n * Result of a single agent registration attempt.\n */\ninterface AgentResult {\n  agent: DetectedAgent[\"name\"];\n  success: boolean;\n  method: \"cli\" | \"file\" | \"skipped\";\n  message: string;\n}\n\n/**\n * Attempts CLI-based MCP registration for agents that support it.\n * Returns true if the CLI command succeeded.\n *\n * **Anon keys only, by design.** This path passes the bearer token to\n * vendor CLIs (Claude, Gemini) as a process argument; on multi-user\n * hosts, process arguments are visible via `ps` and `/proc`. Anon keys\n * are non-secret project identifiers — exposing one in a process\n * listing is acceptable. A claimed dev/account key absolutely is not.\n *\n * Two layers of enforcement:\n *\n * 1. The `bearer` parameter is typed `string` rather than `AnonApiKey`\n *    only because the function is called through CLI plumbing where\n *    the brand is erased; callers must verify the source upstream.\n * 2. A runtime `isAnonApiKey` guard at the top of the function\n *    short-circuits with `false` if the value fails strict\n *    `AnonApiKeySchema` validation. This defends against accidental\n *    `string`-typed paths that erase the brand and against any\n *    future caller that forgets the upstream check.\n *\n * Codex's CLI registration does not embed the bearer (it writes\n * `bearer_token_env_var = \"GLASSTRACE_API_KEY\"` and reads the\n * actual token from the environment), so it is unaffected by this\n * constraint.\n */\n/** @internal Exported for unit testing of the runtime anon-only guard. */\nexport async function registerViaCli(\n  agent: DetectedAgent,\n  bearer: string,\n): Promise<boolean> {\n  if (!agent.cliAvailable) {\n    return false;\n  }\n\n  // Layer 2: runtime guard. If the bearer is not a strictly-valid\n  // anon key, refuse to put it in process arguments. The caller is\n  // expected to fall through to the file-config path, which writes\n  // 0o600 files and never exposes the bearer to other processes.\n  if (agent.name !== \"codex\" && !isAnonApiKey(bearer)) {\n    return false;\n  }\n\n  try {\n    switch (agent.name) {\n      case \"claude\": {\n        const payload = JSON.stringify({\n          type: \"http\",\n          url: MCP_ENDPOINT,\n          headers: { Authorization: `Bearer ${bearer}` },\n        });\n        await execFileAsync(\"claude\", [\n          \"mcp\",\n          \"add-json\",\n          \"glasstrace\",\n          payload,\n          \"--scope\",\n          \"project\",\n        ]);\n        return true;\n      }\n\n      case \"codex\": {\n        await execFileAsync(\"codex\", [\n          \"mcp\",\n          \"add\",\n          \"glasstrace\",\n          \"--url\",\n          MCP_ENDPOINT,\n        ]);\n        // Ensure .codex/config.toml has bearer_token_env_var\n        const configPath = agent.mcpConfigPath;\n        if (configPath !== null && fs.existsSync(configPath)) {\n          const content = fs.readFileSync(configPath, \"utf-8\");\n          if (!content.includes(\"bearer_token_env_var\")) {\n            const appendContent =\n              content.endsWith(\"\\n\") ? \"\" : \"\\n\";\n            fs.writeFileSync(\n              configPath,\n              content +\n                appendContent +\n                'bearer_token_env_var = \"GLASSTRACE_API_KEY\"\\n',\n              \"utf-8\",\n            );\n          }\n        }\n        process.stderr.write(\n          \"  Note: Set GLASSTRACE_API_KEY environment variable for Codex authentication.\\n\",\n        );\n        return true;\n      }\n\n      case \"gemini\": {\n        await execFileAsync(\"gemini\", [\n          \"mcp\",\n          \"add\",\n          \"--transport\",\n          \"http\",\n          \"--header\",\n          `Authorization: Bearer ${bearer}`,\n          \"glasstrace\",\n          MCP_ENDPOINT,\n        ]);\n        return true;\n      }\n\n      default:\n        return false;\n    }\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Returns whether the on-disk marker describes the same underlying\n * credential as the resolver's effective credential.\n *\n * Compares on `credentialHash` only — the credential identity, not\n * the on-disk *source* it was loaded from. The source can shift\n * without the key actually changing (e.g., a user copies the same\n * key from `.glasstrace/claimed-key` into `.env.local`, or vice\n * versa), and treating that shift as a credential change would\n * falsely trigger the claim-transition refresh on a project whose\n * `mcp.json` already embeds the correct bearer.\n *\n * Treats `unknown-version` and `corrupted` markers as not-matching\n * (forces a re-run that overwrites them with v2). Treats `absent`\n * markers as not-matching too — the caller's existing\n * `fs.existsSync(markerPath)` short-circuit catches that case before\n * calling here, so this branch only fires when a marker read itself\n * failed.\n */\nasync function markerMatchesEffective(\n  projectRoot: string,\n  effective: EffectiveMcpCredential,\n): Promise<boolean> {\n  const state = await readMcpMarker(projectRoot);\n  if (state.status !== \"valid\") return false;\n  return state.credentialHash === identityFingerprint(effective.key);\n}\n\n/**\n * Registers the Glasstrace MCP server with detected AI coding agents.\n *\n * For each agent, attempts native CLI registration first (anon keys\n * only, see {@link registerViaCli}), then falls back to file-based\n * configuration. The marker file at `.glasstrace/mcp-connected`\n * records the effective credential's source and identity fingerprint\n * so a later run can detect a project that has transitioned from\n * anon to account/dev-key and prompt a refresh.\n *\n * Returns a structured result instead of calling process.exit(), so the\n * CLI entry point can decide how to handle the outcome.\n *\n * @param options - Control flags for force and dry-run modes.\n */\nexport async function mcpAdd(options?: McpAddOptions): Promise<McpAddResult> {\n  const force = options?.force ?? false;\n  const dryRun = options?.dryRun ?? false;\n  const projectRoot = process.cwd();\n  const messages: string[] = [];\n\n  // Step 1: Resolve the effective credential. Replaces the prior\n  // anon-only `readAnonKey` path; dev-key-only projects (no\n  // .glasstrace/anon_key on disk) now run too.\n  const resolved = await resolveEffectiveMcpCredential(projectRoot);\n  if (resolved.effective === null) {\n    return {\n      exitCode: 1,\n      results: [],\n      messages: [\"Error: Run `glasstrace init` first to generate an API key.\"],\n    };\n  }\n\n  // Optional: surface the claimed-key-only warning so the user knows\n  // to copy the key into .env.local for normal use.\n  if (resolved.warnings.includes(\"claimed-key-only\")) {\n    messages.push(\n      \"Note: dev key was loaded from .glasstrace/claimed-key. Copy it into .env.local so your app and Codex pick it up automatically.\",\n    );\n  }\n\n  // Step 2: Marker check.\n  //\n  // Two short-circuits:\n  // - Marker absent and not --force: the legacy \"MCP already\n  //   configured\" message is no longer applicable here, but absence\n  //   of the marker means we proceed to register. (The original\n  //   behaviour was to short-circuit if the marker existed; the\n  //   short-circuit now also requires the marker to actually match\n  //   the effective credential.)\n  // - Marker present, matches effective credential, and not --force:\n  //   already configured for this credential, no work to do.\n  // - Marker present, mismatches effective credential, regardless of\n  //   --force: the project has transitioned credentials; treat as\n  //   unconfigured and re-register.\n  const markerPath = path.join(projectRoot, \".glasstrace\", \"mcp-connected\");\n  if (fs.existsSync(markerPath) && !force) {\n    if (await markerMatchesEffective(projectRoot, resolved.effective)) {\n      return {\n        exitCode: 0,\n        results: [],\n        messages: [\"MCP already configured. Use --force to reconfigure.\"],\n      };\n    }\n    // Mismatch: project has transitioned credentials. Fall through to\n    // re-register so MCP queries see the same scope as ingestion.\n    messages.push(\n      \"Detected a credential change since MCP was last configured. Refreshing MCP config so queries use the current account credential.\",\n    );\n  }\n\n  // Step 3: Detect agents\n  const agents = await detectAgents(projectRoot);\n  const detectedNonGeneric = agents.filter((a) => a.name !== \"generic\");\n\n  // The generic helper backs `.glasstrace/mcp.json`, the file\n  // validation/debug tooling reads directly. ALWAYS include it in the\n  // target list — when non-generic agents like Claude/Cursor are\n  // detected, the helper used to be silently dropped, which left the\n  // generic config stale after a credential change. `detectAgents`\n  // contract guarantees the generic entry is always appended last\n  // (see `agent-detection/detect.ts`), so we rely on that here rather\n  // than synthesising a fallback.\n  const genericAgent = agents.find((a) => a.name === \"generic\");\n  const targetAgents: DetectedAgent[] = genericAgent\n    ? [...detectedNonGeneric, genericAgent]\n    : detectedNonGeneric;\n\n  if (dryRun) {\n    messages.push(\"Dry run: would perform the following actions:\", \"\");\n    for (const agent of targetAgents) {\n      const name = formatAgentName(agent.name);\n      if (agent.cliAvailable && resolved.effective.source === \"anon\") {\n        messages.push(\n          `  ${name}: Register via CLI (${agent.name} mcp add)`,\n        );\n      } else if (agent.mcpConfigPath !== null) {\n        messages.push(\n          `  ${name}: Write config to ${agent.mcpConfigPath}`,\n        );\n      }\n      if (agent.infoFilePath !== null) {\n        messages.push(\n          `  ${name}: Inject info section into ${agent.infoFilePath}`,\n        );\n      }\n    }\n    messages.push(\n      \"\",\n      \"  Update .gitignore with MCP config paths\",\n      \"  Create .glasstrace/mcp-connected marker\",\n    );\n    return { exitCode: 0, results: [], messages };\n  }\n\n  // Step 4: Register with each agent. The bearer used in the embedded\n  // configs and in vendor CLI invocations is the resolver's effective\n  // credential. registerViaCli is anon-only by design (see its\n  // docstring); when the effective credential is a dev key, that path\n  // returns false and the file-config branch takes over.\n  const results: AgentResult[] = [];\n  const bearer = resolved.effective.key;\n\n  for (const agent of targetAgents) {\n    const name = formatAgentName(agent.name);\n\n    // Try CLI registration first (not applicable for generic)\n    if (agent.name !== \"generic\") {\n      const cliSuccess = await registerViaCli(agent, bearer);\n      if (cliSuccess) {\n        // Still inject info section if applicable\n        const infoContent = generateInfoSection(agent, MCP_ENDPOINT);\n        if (infoContent !== \"\") {\n          await injectInfoSection(agent, infoContent, projectRoot);\n        }\n        results.push({\n          agent: agent.name,\n          success: true,\n          method: \"cli\",\n          message: `${name}: Registered via CLI`,\n        });\n        continue;\n      }\n    }\n\n    // Fall back to file-based config\n    if (agent.mcpConfigPath !== null) {\n      try {\n        const configContent = generateMcpConfig(agent, MCP_ENDPOINT, bearer);\n        await writeMcpConfig(agent, configContent, projectRoot);\n\n        // Verify the config was written (writeMcpConfig swallows permission errors)\n        if (fs.existsSync(agent.mcpConfigPath)) {\n          const infoContent = generateInfoSection(agent, MCP_ENDPOINT);\n          if (infoContent !== \"\") {\n            await injectInfoSection(agent, infoContent, projectRoot);\n          }\n          results.push({\n            agent: agent.name,\n            success: true,\n            method: \"file\",\n            message: `${name}: Configured via ${agent.mcpConfigPath}`,\n          });\n          continue;\n        }\n\n        // writeMcpConfig returned without throwing but file doesn't exist\n        // (permission denied handled gracefully inside writeMcpConfig)\n        results.push({\n          agent: agent.name,\n          success: false,\n          method: \"file\",\n          message: `${name}: Failed to write config to ${agent.mcpConfigPath} (permission denied)`,\n        });\n        continue;\n      } catch (err) {\n        results.push({\n          agent: agent.name,\n          success: false,\n          method: \"file\",\n          message: `${name}: Failed - ${err instanceof Error ? err.message : String(err)}`,\n        });\n        continue;\n      }\n    }\n\n    results.push({\n      agent: agent.name,\n      success: false,\n      method: \"skipped\",\n      message: `${name}: No registration method available`,\n    });\n  }\n\n  // Step 5: Update gitignore\n  await updateGitignore(\n    [\".mcp.json\", \".cursor/mcp.json\", \".gemini/settings.json\", \".codex/config.toml\"],\n    projectRoot,\n  );\n\n  // Step 6: Update marker if at least one succeeded. Marker records\n  // the effective credential's source and fingerprint (raw key never\n  // touches disk via this path), so a later run can detect a\n  // credential change.\n  const anySuccess = results.some((r) => r.success);\n\n  if (anySuccess) {\n    await writeMcpMarker(projectRoot, {\n      credentialSource: resolved.effective.source,\n      credentialHash: identityFingerprint(resolved.effective.key),\n    });\n  }\n\n  // Step 7: Build summary messages\n  messages.push(\"\", \"MCP registration summary:\");\n  for (const result of results) {\n    const icon = result.success ? \"+\" : \"-\";\n    messages.push(`  [${icon}] ${result.message}`);\n  }\n\n  if (results.length === 0) {\n    messages.push(\n      \"  No agents detected. Place agent marker files (e.g., CLAUDE.md, .cursor/) in your project.\",\n    );\n  }\n\n  // Exit code reflects whether the originally-detected non-generic\n  // agents succeeded. The generic helper is always in `results` now —\n  // letting its success alone mask a complete failure of the agents\n  // the user actually has installed would silently break automation\n  // that bisects on `mcp add` exit code. Preserves the pre-fix\n  // contract: a run where Claude/Cursor failed still exits non-zero,\n  // even when the generic helper write succeeded.\n  const detectedNonGenericResults = results.filter((r) =>\n    detectedNonGeneric.some((a) => a.name === r.agent),\n  );\n  const allDetectedNonGenericFailed =\n    detectedNonGeneric.length > 0 &&\n    !detectedNonGenericResults.some((r) => r.success);\n\n  if (allDetectedNonGenericFailed) {\n    messages.push(\n      \"\",\n      \"All detected agent registrations failed. Check errors above.\",\n    );\n    return { exitCode: 1, results, messages };\n  }\n\n  if (!anySuccess && results.length > 0) {\n    messages.push(\n      \"\",\n      \"All agent registrations failed. Check errors above.\",\n    );\n    return { exitCode: 1, results, messages };\n  }\n\n  if (anySuccess) {\n    messages.push(\"\", \"MCP registration complete.\");\n  }\n\n  return { exitCode: 0, results, messages };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,YAAY,kBAAkB;AACvC,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,SAAS,iBAAiB;AAoB1B,IAAM,gBAAgB,UAAU,UAAU;AAoD1C,eAAsB,eACpB,OACA,QACkB;AAClB,MAAI,CAAC,MAAM,cAAc;AACvB,WAAO;AAAA,EACT;AAMA,MAAI,MAAM,SAAS,WAAW,CAAC,aAAa,MAAM,GAAG;AACnD,WAAO;AAAA,EACT;AAEA,MAAI;AACF,YAAQ,MAAM,MAAM;AAAA,MAClB,KAAK,UAAU;AACb,cAAM,UAAU,KAAK,UAAU;AAAA,UAC7B,MAAM;AAAA,UACN,KAAK;AAAA,UACL,SAAS,EAAE,eAAe,UAAU,MAAM,GAAG;AAAA,QAC/C,CAAC;AACD,cAAM,cAAc,UAAU;AAAA,UAC5B;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AACD,eAAO;AAAA,MACT;AAAA,MAEA,KAAK,SAAS;AACZ,cAAM,cAAc,SAAS;AAAA,UAC3B;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAED,cAAM,aAAa,MAAM;AACzB,YAAI,eAAe,QAAW,cAAW,UAAU,GAAG;AACpD,gBAAM,UAAa,gBAAa,YAAY,OAAO;AACnD,cAAI,CAAC,QAAQ,SAAS,sBAAsB,GAAG;AAC7C,kBAAM,gBACJ,QAAQ,SAAS,IAAI,IAAI,KAAK;AAChC,YAAG;AAAA,cACD;AAAA,cACA,UACE,gBACA;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AACA,gBAAQ,OAAO;AAAA,UACb;AAAA,QACF;AACA,eAAO;AAAA,MACT;AAAA,MAEA,KAAK,UAAU;AACb,cAAM,cAAc,UAAU;AAAA,UAC5B;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,yBAAyB,MAAM;AAAA,UAC/B;AAAA,UACA;AAAA,QACF,CAAC;AACD,eAAO;AAAA,MACT;AAAA,MAEA;AACE,eAAO;AAAA,IACX;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAqBA,eAAe,uBACb,aACA,WACkB;AAClB,QAAM,QAAQ,MAAM,cAAc,WAAW;AAC7C,MAAI,MAAM,WAAW,QAAS,QAAO;AACrC,SAAO,MAAM,mBAAmB,oBAAoB,UAAU,GAAG;AACnE;AAiBA,eAAsB,OAAO,SAAgD;AAC3E,QAAM,QAAQ,SAAS,SAAS;AAChC,QAAM,SAAS,SAAS,UAAU;AAClC,QAAM,cAAc,QAAQ,IAAI;AAChC,QAAM,WAAqB,CAAC;AAK5B,QAAM,WAAW,MAAM,8BAA8B,WAAW;AAChE,MAAI,SAAS,cAAc,MAAM;AAC/B,WAAO;AAAA,MACL,UAAU;AAAA,MACV,SAAS,CAAC;AAAA,MACV,UAAU,CAAC,4DAA4D;AAAA,IACzE;AAAA,EACF;AAIA,MAAI,SAAS,SAAS,SAAS,kBAAkB,GAAG;AAClD,aAAS;AAAA,MACP;AAAA,IACF;AAAA,EACF;AAgBA,QAAM,aAAkB,UAAK,aAAa,eAAe,eAAe;AACxE,MAAO,cAAW,UAAU,KAAK,CAAC,OAAO;AACvC,QAAI,MAAM,uBAAuB,aAAa,SAAS,SAAS,GAAG;AACjE,aAAO;AAAA,QACL,UAAU;AAAA,QACV,SAAS,CAAC;AAAA,QACV,UAAU,CAAC,qDAAqD;AAAA,MAClE;AAAA,IACF;AAGA,aAAS;AAAA,MACP;AAAA,IACF;AAAA,EACF;AAGA,QAAM,SAAS,MAAM,aAAa,WAAW;AAC7C,QAAM,qBAAqB,OAAO,OAAO,CAAC,MAAM,EAAE,SAAS,SAAS;AAUpE,QAAM,eAAe,OAAO,KAAK,CAAC,MAAM,EAAE,SAAS,SAAS;AAC5D,QAAM,eAAgC,eAClC,CAAC,GAAG,oBAAoB,YAAY,IACpC;AAEJ,MAAI,QAAQ;AACV,aAAS,KAAK,iDAAiD,EAAE;AACjE,eAAW,SAAS,cAAc;AAChC,YAAM,OAAO,gBAAgB,MAAM,IAAI;AACvC,UAAI,MAAM,gBAAgB,SAAS,UAAU,WAAW,QAAQ;AAC9D,iBAAS;AAAA,UACP,KAAK,IAAI,uBAAuB,MAAM,IAAI;AAAA,QAC5C;AAAA,MACF,WAAW,MAAM,kBAAkB,MAAM;AACvC,iBAAS;AAAA,UACP,KAAK,IAAI,qBAAqB,MAAM,aAAa;AAAA,QACnD;AAAA,MACF;AACA,UAAI,MAAM,iBAAiB,MAAM;AAC/B,iBAAS;AAAA,UACP,KAAK,IAAI,8BAA8B,MAAM,YAAY;AAAA,QAC3D;AAAA,MACF;AAAA,IACF;AACA,aAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO,EAAE,UAAU,GAAG,SAAS,CAAC,GAAG,SAAS;AAAA,EAC9C;AAOA,QAAM,UAAyB,CAAC;AAChC,QAAM,SAAS,SAAS,UAAU;AAElC,aAAW,SAAS,cAAc;AAChC,UAAM,OAAO,gBAAgB,MAAM,IAAI;AAGvC,QAAI,MAAM,SAAS,WAAW;AAC5B,YAAM,aAAa,MAAM,eAAe,OAAO,MAAM;AACrD,UAAI,YAAY;AAEd,cAAM,cAAc,oBAAoB,OAAO,YAAY;AAC3D,YAAI,gBAAgB,IAAI;AACtB,gBAAM,kBAAkB,OAAO,aAAa,WAAW;AAAA,QACzD;AACA,gBAAQ,KAAK;AAAA,UACX,OAAO,MAAM;AAAA,UACb,SAAS;AAAA,UACT,QAAQ;AAAA,UACR,SAAS,GAAG,IAAI;AAAA,QAClB,CAAC;AACD;AAAA,MACF;AAAA,IACF;AAGA,QAAI,MAAM,kBAAkB,MAAM;AAChC,UAAI;AACF,cAAM,gBAAgB,kBAAkB,OAAO,cAAc,MAAM;AACnE,cAAM,eAAe,OAAO,eAAe,WAAW;AAGtD,YAAO,cAAW,MAAM,aAAa,GAAG;AACtC,gBAAM,cAAc,oBAAoB,OAAO,YAAY;AAC3D,cAAI,gBAAgB,IAAI;AACtB,kBAAM,kBAAkB,OAAO,aAAa,WAAW;AAAA,UACzD;AACA,kBAAQ,KAAK;AAAA,YACX,OAAO,MAAM;AAAA,YACb,SAAS;AAAA,YACT,QAAQ;AAAA,YACR,SAAS,GAAG,IAAI,oBAAoB,MAAM,aAAa;AAAA,UACzD,CAAC;AACD;AAAA,QACF;AAIA,gBAAQ,KAAK;AAAA,UACX,OAAO,MAAM;AAAA,UACb,SAAS;AAAA,UACT,QAAQ;AAAA,UACR,SAAS,GAAG,IAAI,+BAA+B,MAAM,aAAa;AAAA,QACpE,CAAC;AACD;AAAA,MACF,SAAS,KAAK;AACZ,gBAAQ,KAAK;AAAA,UACX,OAAO,MAAM;AAAA,UACb,SAAS;AAAA,UACT,QAAQ;AAAA,UACR,SAAS,GAAG,IAAI,cAAc,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QAChF,CAAC;AACD;AAAA,MACF;AAAA,IACF;AAEA,YAAQ,KAAK;AAAA,MACX,OAAO,MAAM;AAAA,MACb,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,SAAS,GAAG,IAAI;AAAA,IAClB,CAAC;AAAA,EACH;AAGA,QAAM;AAAA,IACJ,CAAC,aAAa,oBAAoB,yBAAyB,oBAAoB;AAAA,IAC/E;AAAA,EACF;AAMA,QAAM,aAAa,QAAQ,KAAK,CAAC,MAAM,EAAE,OAAO;AAEhD,MAAI,YAAY;AACd,UAAM,eAAe,aAAa;AAAA,MAChC,kBAAkB,SAAS,UAAU;AAAA,MACrC,gBAAgB,oBAAoB,SAAS,UAAU,GAAG;AAAA,IAC5D,CAAC;AAAA,EACH;AAGA,WAAS,KAAK,IAAI,2BAA2B;AAC7C,aAAW,UAAU,SAAS;AAC5B,UAAM,OAAO,OAAO,UAAU,MAAM;AACpC,aAAS,KAAK,MAAM,IAAI,KAAK,OAAO,OAAO,EAAE;AAAA,EAC/C;AAEA,MAAI,QAAQ,WAAW,GAAG;AACxB,aAAS;AAAA,MACP;AAAA,IACF;AAAA,EACF;AASA,QAAM,4BAA4B,QAAQ;AAAA,IAAO,CAAC,MAChD,mBAAmB,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK;AAAA,EACnD;AACA,QAAM,8BACJ,mBAAmB,SAAS,KAC5B,CAAC,0BAA0B,KAAK,CAAC,MAAM,EAAE,OAAO;AAElD,MAAI,6BAA6B;AAC/B,aAAS;AAAA,MACP;AAAA,MACA;AAAA,IACF;AACA,WAAO,EAAE,UAAU,GAAG,SAAS,SAAS;AAAA,EAC1C;AAEA,MAAI,CAAC,cAAc,QAAQ,SAAS,GAAG;AACrC,aAAS;AAAA,MACP;AAAA,MACA;AAAA,IACF;AACA,WAAO,EAAE,UAAU,GAAG,SAAS,SAAS;AAAA,EAC1C;AAEA,MAAI,YAAY;AACd,aAAS,KAAK,IAAI,4BAA4B;AAAA,EAChD;AAEA,SAAO,EAAE,UAAU,GAAG,SAAS,SAAS;AAC1C;","names":[]}
+{"version":3,"sources":["../../src/cli/mcp-add.ts"],"sourcesContent":["import { execFile as execFileCb } from \"node:child_process\";\nimport * as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport { promisify } from \"node:util\";\n\n// Declare the tsup-injected SDK version literal. Replaced at build time\n// via `define` in tsup.config.ts. Falls back to \"0.0.0-dev\" when running\n// under vitest where no tsup build step has populated the constant.\ndeclare const __SDK_VERSION__: string;\nimport {\n  isAnonApiKey,\n  identityFingerprint,\n  MCP_ENDPOINT,\n  readMcpMarker,\n  resolveEffectiveMcpCredential,\n  writeMcpMarker,\n  type EffectiveMcpCredential,\n} from \"../mcp-runtime.js\";\nimport { detectAgents } from \"../agent-detection/detect.js\";\nimport { generateMcpConfig, generateInfoSection } from \"../agent-detection/configs.js\";\nimport {\n  writeMcpConfig,\n  injectInfoSection,\n  updateGitignore,\n} from \"../agent-detection/inject.js\";\nimport type { DetectedAgent } from \"../agent-detection/detect.js\";\nimport { formatAgentName } from \"./constants.js\";\n\nconst execFileAsync = promisify(execFileCb);\n\n/** Options for the mcp add command. */\nexport interface McpAddOptions {\n  force?: boolean;\n  dryRun?: boolean;\n}\n\n/** Result of the mcp add command. */\nexport interface McpAddResult {\n  exitCode: number;\n  results: AgentResult[];\n  messages: string[];\n}\n\n/**\n * Result of a single agent registration attempt.\n */\ninterface AgentResult {\n  agent: DetectedAgent[\"name\"];\n  success: boolean;\n  method: \"cli\" | \"file\" | \"skipped\";\n  message: string;\n}\n\n/**\n * Attempts CLI-based MCP registration for agents that support it.\n * Returns true if the CLI command succeeded.\n *\n * **Anon keys only, by design.** This path passes the bearer token to\n * vendor CLIs (Claude, Gemini) as a process argument; on multi-user\n * hosts, process arguments are visible via `ps` and `/proc`. Anon keys\n * are non-secret project identifiers — exposing one in a process\n * listing is acceptable. A claimed dev/account key absolutely is not.\n *\n * Two layers of enforcement:\n *\n * 1. The `bearer` parameter is typed `string` rather than `AnonApiKey`\n *    only because the function is called through CLI plumbing where\n *    the brand is erased; callers must verify the source upstream.\n * 2. A runtime `isAnonApiKey` guard at the top of the function\n *    short-circuits with `false` if the value fails strict\n *    `AnonApiKeySchema` validation. This defends against accidental\n *    `string`-typed paths that erase the brand and against any\n *    future caller that forgets the upstream check.\n *\n * Codex's CLI registration does not embed the bearer (it writes\n * `bearer_token_env_var = \"GLASSTRACE_API_KEY\"` and reads the\n * actual token from the environment), so it is unaffected by this\n * constraint.\n */\n/** @internal Exported for unit testing of the runtime anon-only guard. */\nexport async function registerViaCli(\n  agent: DetectedAgent,\n  bearer: string,\n): Promise<boolean> {\n  if (!agent.cliAvailable) {\n    return false;\n  }\n\n  // Layer 2: runtime guard. If the bearer is not a strictly-valid\n  // anon key, refuse to put it in process arguments. The caller is\n  // expected to fall through to the file-config path, which writes\n  // 0o600 files and never exposes the bearer to other processes.\n  if (agent.name !== \"codex\" && !isAnonApiKey(bearer)) {\n    return false;\n  }\n\n  try {\n    switch (agent.name) {\n      case \"claude\": {\n        const payload = JSON.stringify({\n          type: \"http\",\n          url: MCP_ENDPOINT,\n          headers: { Authorization: `Bearer ${bearer}` },\n        });\n        await execFileAsync(\"claude\", [\n          \"mcp\",\n          \"add-json\",\n          \"glasstrace\",\n          payload,\n          \"--scope\",\n          \"project\",\n        ]);\n        return true;\n      }\n\n      case \"codex\": {\n        await execFileAsync(\"codex\", [\n          \"mcp\",\n          \"add\",\n          \"glasstrace\",\n          \"--url\",\n          MCP_ENDPOINT,\n        ]);\n        // Ensure .codex/config.toml has bearer_token_env_var\n        const configPath = agent.mcpConfigPath;\n        if (configPath !== null && fs.existsSync(configPath)) {\n          const content = fs.readFileSync(configPath, \"utf-8\");\n          if (!content.includes(\"bearer_token_env_var\")) {\n            const appendContent =\n              content.endsWith(\"\\n\") ? \"\" : \"\\n\";\n            fs.writeFileSync(\n              configPath,\n              content +\n                appendContent +\n                'bearer_token_env_var = \"GLASSTRACE_API_KEY\"\\n',\n              \"utf-8\",\n            );\n          }\n        }\n        process.stderr.write(\n          \"  Note: Set GLASSTRACE_API_KEY environment variable for Codex authentication.\\n\",\n        );\n        return true;\n      }\n\n      case \"gemini\": {\n        await execFileAsync(\"gemini\", [\n          \"mcp\",\n          \"add\",\n          \"--transport\",\n          \"http\",\n          \"--header\",\n          `Authorization: Bearer ${bearer}`,\n          \"glasstrace\",\n          MCP_ENDPOINT,\n        ]);\n        return true;\n      }\n\n      default:\n        return false;\n    }\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Returns whether the on-disk marker describes the same underlying\n * credential as the resolver's effective credential.\n *\n * Compares on `credentialHash` only — the credential identity, not\n * the on-disk *source* it was loaded from. The source can shift\n * without the key actually changing (e.g., a user copies the same\n * key from `.glasstrace/claimed-key` into `.env.local`, or vice\n * versa), and treating that shift as a credential change would\n * falsely trigger the claim-transition refresh on a project whose\n * `mcp.json` already embeds the correct bearer.\n *\n * Treats `unknown-version` and `corrupted` markers as not-matching\n * (forces a re-run that overwrites them with v2). Treats `absent`\n * markers as not-matching too — the caller's existing\n * `fs.existsSync(markerPath)` short-circuit catches that case before\n * calling here, so this branch only fires when a marker read itself\n * failed.\n */\nasync function markerMatchesEffective(\n  projectRoot: string,\n  effective: EffectiveMcpCredential,\n): Promise<boolean> {\n  const state = await readMcpMarker(projectRoot);\n  if (state.status !== \"valid\") return false;\n  return state.credentialHash === identityFingerprint(effective.key);\n}\n\n/**\n * Registers the Glasstrace MCP server with detected AI coding agents.\n *\n * For each agent, attempts native CLI registration first (anon keys\n * only, see {@link registerViaCli}), then falls back to file-based\n * configuration. The marker file at `.glasstrace/mcp-connected`\n * records the effective credential's source and identity fingerprint\n * so a later run can detect a project that has transitioned from\n * anon to account/dev-key and prompt a refresh.\n *\n * Returns a structured result instead of calling process.exit(), so the\n * CLI entry point can decide how to handle the outcome.\n *\n * @param options - Control flags for force and dry-run modes.\n */\nexport async function mcpAdd(options?: McpAddOptions): Promise<McpAddResult> {\n  const force = options?.force ?? false;\n  const dryRun = options?.dryRun ?? false;\n  const projectRoot = process.cwd();\n  const messages: string[] = [];\n\n  // Step 1: Resolve the effective credential. Replaces the prior\n  // anon-only `readAnonKey` path; dev-key-only projects (no\n  // .glasstrace/anon_key on disk) now run too.\n  const resolved = await resolveEffectiveMcpCredential(projectRoot);\n  if (resolved.effective === null) {\n    return {\n      exitCode: 1,\n      results: [],\n      messages: [\"Error: Run `glasstrace init` first to generate an API key.\"],\n    };\n  }\n\n  // Optional: surface the claimed-key-only warning so the user knows\n  // to copy the key into .env.local for normal use.\n  if (resolved.warnings.includes(\"claimed-key-only\")) {\n    messages.push(\n      \"Note: dev key was loaded from .glasstrace/claimed-key. Copy it into .env.local so your app and Codex pick it up automatically.\",\n    );\n  }\n\n  // Step 2: Marker check.\n  //\n  // Two short-circuits:\n  // - Marker absent and not --force: the legacy \"MCP already\n  //   configured\" message is no longer applicable here, but absence\n  //   of the marker means we proceed to register. (The original\n  //   behaviour was to short-circuit if the marker existed; the\n  //   short-circuit now also requires the marker to actually match\n  //   the effective credential.)\n  // - Marker present, matches effective credential, and not --force:\n  //   already configured for this credential, no work to do.\n  // - Marker present, mismatches effective credential, regardless of\n  //   --force: the project has transitioned credentials; treat as\n  //   unconfigured and re-register.\n  const markerPath = path.join(projectRoot, \".glasstrace\", \"mcp-connected\");\n  if (fs.existsSync(markerPath) && !force) {\n    if (await markerMatchesEffective(projectRoot, resolved.effective)) {\n      return {\n        exitCode: 0,\n        results: [],\n        messages: [\"MCP already configured. Use --force to reconfigure.\"],\n      };\n    }\n    // Mismatch: project has transitioned credentials. Fall through to\n    // re-register so MCP queries see the same scope as ingestion.\n    messages.push(\n      \"Detected a credential change since MCP was last configured. Refreshing MCP config so queries use the current account credential.\",\n    );\n  }\n\n  // Step 3: Detect agents\n  const agents = await detectAgents(projectRoot);\n  const detectedNonGeneric = agents.filter((a) => a.name !== \"generic\");\n\n  // The generic helper backs `.glasstrace/mcp.json`, the file\n  // validation/debug tooling reads directly. ALWAYS include it in the\n  // target list — when non-generic agents like Claude/Cursor are\n  // detected, the helper used to be silently dropped, which left the\n  // generic config stale after a credential change. `detectAgents`\n  // contract guarantees the generic entry is always appended last\n  // (see `agent-detection/detect.ts`), so we rely on that here rather\n  // than synthesising a fallback.\n  const genericAgent = agents.find((a) => a.name === \"generic\");\n  const targetAgents: DetectedAgent[] = genericAgent\n    ? [...detectedNonGeneric, genericAgent]\n    : detectedNonGeneric;\n\n  if (dryRun) {\n    messages.push(\"Dry run: would perform the following actions:\", \"\");\n    for (const agent of targetAgents) {\n      const name = formatAgentName(agent.name);\n      if (agent.cliAvailable && resolved.effective.source === \"anon\") {\n        messages.push(\n          `  ${name}: Register via CLI (${agent.name} mcp add)`,\n        );\n      } else if (agent.mcpConfigPath !== null) {\n        messages.push(\n          `  ${name}: Write config to ${agent.mcpConfigPath}`,\n        );\n      }\n      if (agent.infoFilePath !== null) {\n        messages.push(\n          `  ${name}: Inject info section into ${agent.infoFilePath}`,\n        );\n      }\n    }\n    messages.push(\n      \"\",\n      \"  Update .gitignore with MCP config paths\",\n      \"  Create .glasstrace/mcp-connected marker\",\n    );\n    return { exitCode: 0, results: [], messages };\n  }\n\n  // Step 4: Register with each agent. The bearer used in the embedded\n  // configs and in vendor CLI invocations is the resolver's effective\n  // credential. registerViaCli is anon-only by design (see its\n  // docstring); when the effective credential is a dev key, that path\n  // returns false and the file-config branch takes over.\n  const results: AgentResult[] = [];\n  const bearer = resolved.effective.key;\n\n  for (const agent of targetAgents) {\n    const name = formatAgentName(agent.name);\n\n    const sdkVersion =\n      typeof __SDK_VERSION__ === \"string\" ? __SDK_VERSION__ : \"0.0.0-dev\";\n\n    // Try CLI registration first (not applicable for generic)\n    if (agent.name !== \"generic\") {\n      const cliSuccess = await registerViaCli(agent, bearer);\n      if (cliSuccess) {\n        // Still inject info section if applicable\n        const infoContent = generateInfoSection(agent, MCP_ENDPOINT, sdkVersion);\n        if (infoContent !== \"\") {\n          await injectInfoSection(agent, infoContent, projectRoot);\n        }\n        results.push({\n          agent: agent.name,\n          success: true,\n          method: \"cli\",\n          message: `${name}: Registered via CLI`,\n        });\n        continue;\n      }\n    }\n\n    // Fall back to file-based config\n    if (agent.mcpConfigPath !== null) {\n      try {\n        const configContent = generateMcpConfig(agent, MCP_ENDPOINT, bearer);\n        await writeMcpConfig(agent, configContent, projectRoot);\n\n        // Verify the config was written (writeMcpConfig swallows permission errors)\n        if (fs.existsSync(agent.mcpConfigPath)) {\n          const infoContent = generateInfoSection(agent, MCP_ENDPOINT, sdkVersion);\n          if (infoContent !== \"\") {\n            await injectInfoSection(agent, infoContent, projectRoot);\n          }\n          results.push({\n            agent: agent.name,\n            success: true,\n            method: \"file\",\n            message: `${name}: Configured via ${agent.mcpConfigPath}`,\n          });\n          continue;\n        }\n\n        // writeMcpConfig returned without throwing but file doesn't exist\n        // (permission denied handled gracefully inside writeMcpConfig)\n        results.push({\n          agent: agent.name,\n          success: false,\n          method: \"file\",\n          message: `${name}: Failed to write config to ${agent.mcpConfigPath} (permission denied)`,\n        });\n        continue;\n      } catch (err) {\n        results.push({\n          agent: agent.name,\n          success: false,\n          method: \"file\",\n          message: `${name}: Failed - ${err instanceof Error ? err.message : String(err)}`,\n        });\n        continue;\n      }\n    }\n\n    results.push({\n      agent: agent.name,\n      success: false,\n      method: \"skipped\",\n      message: `${name}: No registration method available`,\n    });\n  }\n\n  // Step 5: Update gitignore\n  await updateGitignore(\n    [\".mcp.json\", \".cursor/mcp.json\", \".gemini/settings.json\", \".codex/config.toml\"],\n    projectRoot,\n  );\n\n  // Step 6: Update marker if at least one succeeded. Marker records\n  // the effective credential's source and fingerprint (raw key never\n  // touches disk via this path), so a later run can detect a\n  // credential change.\n  const anySuccess = results.some((r) => r.success);\n\n  if (anySuccess) {\n    await writeMcpMarker(projectRoot, {\n      credentialSource: resolved.effective.source,\n      credentialHash: identityFingerprint(resolved.effective.key),\n    });\n  }\n\n  // Step 7: Build summary messages\n  messages.push(\"\", \"MCP registration summary:\");\n  for (const result of results) {\n    const icon = result.success ? \"+\" : \"-\";\n    messages.push(`  [${icon}] ${result.message}`);\n  }\n\n  if (results.length === 0) {\n    messages.push(\n      \"  No agents detected. Place agent marker files (e.g., CLAUDE.md, .cursor/) in your project.\",\n    );\n  }\n\n  // Exit code reflects whether the originally-detected non-generic\n  // agents succeeded. The generic helper is always in `results` now —\n  // letting its success alone mask a complete failure of the agents\n  // the user actually has installed would silently break automation\n  // that bisects on `mcp add` exit code. Preserves the pre-fix\n  // contract: a run where Claude/Cursor failed still exits non-zero,\n  // even when the generic helper write succeeded.\n  const detectedNonGenericResults = results.filter((r) =>\n    detectedNonGeneric.some((a) => a.name === r.agent),\n  );\n  const allDetectedNonGenericFailed =\n    detectedNonGeneric.length > 0 &&\n    !detectedNonGenericResults.some((r) => r.success);\n\n  if (allDetectedNonGenericFailed) {\n    messages.push(\n      \"\",\n      \"All detected agent registrations failed. Check errors above.\",\n    );\n    return { exitCode: 1, results, messages };\n  }\n\n  if (!anySuccess && results.length > 0) {\n    messages.push(\n      \"\",\n      \"All agent registrations failed. Check errors above.\",\n    );\n    return { exitCode: 1, results, messages };\n  }\n\n  if (anySuccess) {\n    messages.push(\"\", \"MCP registration complete.\");\n  }\n\n  return { exitCode: 0, results, messages };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,YAAY,kBAAkB;AACvC,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,SAAS,iBAAiB;AAyB1B,IAAM,gBAAgB,UAAU,UAAU;AAoD1C,eAAsB,eACpB,OACA,QACkB;AAClB,MAAI,CAAC,MAAM,cAAc;AACvB,WAAO;AAAA,EACT;AAMA,MAAI,MAAM,SAAS,WAAW,CAAC,aAAa,MAAM,GAAG;AACnD,WAAO;AAAA,EACT;AAEA,MAAI;AACF,YAAQ,MAAM,MAAM;AAAA,MAClB,KAAK,UAAU;AACb,cAAM,UAAU,KAAK,UAAU;AAAA,UAC7B,MAAM;AAAA,UACN,KAAK;AAAA,UACL,SAAS,EAAE,eAAe,UAAU,MAAM,GAAG;AAAA,QAC/C,CAAC;AACD,cAAM,cAAc,UAAU;AAAA,UAC5B;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AACD,eAAO;AAAA,MACT;AAAA,MAEA,KAAK,SAAS;AACZ,cAAM,cAAc,SAAS;AAAA,UAC3B;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAED,cAAM,aAAa,MAAM;AACzB,YAAI,eAAe,QAAW,cAAW,UAAU,GAAG;AACpD,gBAAM,UAAa,gBAAa,YAAY,OAAO;AACnD,cAAI,CAAC,QAAQ,SAAS,sBAAsB,GAAG;AAC7C,kBAAM,gBACJ,QAAQ,SAAS,IAAI,IAAI,KAAK;AAChC,YAAG;AAAA,cACD;AAAA,cACA,UACE,gBACA;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AACA,gBAAQ,OAAO;AAAA,UACb;AAAA,QACF;AACA,eAAO;AAAA,MACT;AAAA,MAEA,KAAK,UAAU;AACb,cAAM,cAAc,UAAU;AAAA,UAC5B;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,yBAAyB,MAAM;AAAA,UAC/B;AAAA,UACA;AAAA,QACF,CAAC;AACD,eAAO;AAAA,MACT;AAAA,MAEA;AACE,eAAO;AAAA,IACX;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAqBA,eAAe,uBACb,aACA,WACkB;AAClB,QAAM,QAAQ,MAAM,cAAc,WAAW;AAC7C,MAAI,MAAM,WAAW,QAAS,QAAO;AACrC,SAAO,MAAM,mBAAmB,oBAAoB,UAAU,GAAG;AACnE;AAiBA,eAAsB,OAAO,SAAgD;AAC3E,QAAM,QAAQ,SAAS,SAAS;AAChC,QAAM,SAAS,SAAS,UAAU;AAClC,QAAM,cAAc,QAAQ,IAAI;AAChC,QAAM,WAAqB,CAAC;AAK5B,QAAM,WAAW,MAAM,8BAA8B,WAAW;AAChE,MAAI,SAAS,cAAc,MAAM;AAC/B,WAAO;AAAA,MACL,UAAU;AAAA,MACV,SAAS,CAAC;AAAA,MACV,UAAU,CAAC,4DAA4D;AAAA,IACzE;AAAA,EACF;AAIA,MAAI,SAAS,SAAS,SAAS,kBAAkB,GAAG;AAClD,aAAS;AAAA,MACP;AAAA,IACF;AAAA,EACF;AAgBA,QAAM,aAAkB,UAAK,aAAa,eAAe,eAAe;AACxE,MAAO,cAAW,UAAU,KAAK,CAAC,OAAO;AACvC,QAAI,MAAM,uBAAuB,aAAa,SAAS,SAAS,GAAG;AACjE,aAAO;AAAA,QACL,UAAU;AAAA,QACV,SAAS,CAAC;AAAA,QACV,UAAU,CAAC,qDAAqD;AAAA,MAClE;AAAA,IACF;AAGA,aAAS;AAAA,MACP;AAAA,IACF;AAAA,EACF;AAGA,QAAM,SAAS,MAAM,aAAa,WAAW;AAC7C,QAAM,qBAAqB,OAAO,OAAO,CAAC,MAAM,EAAE,SAAS,SAAS;AAUpE,QAAM,eAAe,OAAO,KAAK,CAAC,MAAM,EAAE,SAAS,SAAS;AAC5D,QAAM,eAAgC,eAClC,CAAC,GAAG,oBAAoB,YAAY,IACpC;AAEJ,MAAI,QAAQ;AACV,aAAS,KAAK,iDAAiD,EAAE;AACjE,eAAW,SAAS,cAAc;AAChC,YAAM,OAAO,gBAAgB,MAAM,IAAI;AACvC,UAAI,MAAM,gBAAgB,SAAS,UAAU,WAAW,QAAQ;AAC9D,iBAAS;AAAA,UACP,KAAK,IAAI,uBAAuB,MAAM,IAAI;AAAA,QAC5C;AAAA,MACF,WAAW,MAAM,kBAAkB,MAAM;AACvC,iBAAS;AAAA,UACP,KAAK,IAAI,qBAAqB,MAAM,aAAa;AAAA,QACnD;AAAA,MACF;AACA,UAAI,MAAM,iBAAiB,MAAM;AAC/B,iBAAS;AAAA,UACP,KAAK,IAAI,8BAA8B,MAAM,YAAY;AAAA,QAC3D;AAAA,MACF;AAAA,IACF;AACA,aAAS;AAAA,MACP;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO,EAAE,UAAU,GAAG,SAAS,CAAC,GAAG,SAAS;AAAA,EAC9C;AAOA,QAAM,UAAyB,CAAC;AAChC,QAAM,SAAS,SAAS,UAAU;AAElC,aAAW,SAAS,cAAc;AAChC,UAAM,OAAO,gBAAgB,MAAM,IAAI;AAEvC,UAAM,aACJ,OAAsC,UAAkB;AAG1D,QAAI,MAAM,SAAS,WAAW;AAC5B,YAAM,aAAa,MAAM,eAAe,OAAO,MAAM;AACrD,UAAI,YAAY;AAEd,cAAM,cAAc,oBAAoB,OAAO,cAAc,UAAU;AACvE,YAAI,gBAAgB,IAAI;AACtB,gBAAM,kBAAkB,OAAO,aAAa,WAAW;AAAA,QACzD;AACA,gBAAQ,KAAK;AAAA,UACX,OAAO,MAAM;AAAA,UACb,SAAS;AAAA,UACT,QAAQ;AAAA,UACR,SAAS,GAAG,IAAI;AAAA,QAClB,CAAC;AACD;AAAA,MACF;AAAA,IACF;AAGA,QAAI,MAAM,kBAAkB,MAAM;AAChC,UAAI;AACF,cAAM,gBAAgB,kBAAkB,OAAO,cAAc,MAAM;AACnE,cAAM,eAAe,OAAO,eAAe,WAAW;AAGtD,YAAO,cAAW,MAAM,aAAa,GAAG;AACtC,gBAAM,cAAc,oBAAoB,OAAO,cAAc,UAAU;AACvE,cAAI,gBAAgB,IAAI;AACtB,kBAAM,kBAAkB,OAAO,aAAa,WAAW;AAAA,UACzD;AACA,kBAAQ,KAAK;AAAA,YACX,OAAO,MAAM;AAAA,YACb,SAAS;AAAA,YACT,QAAQ;AAAA,YACR,SAAS,GAAG,IAAI,oBAAoB,MAAM,aAAa;AAAA,UACzD,CAAC;AACD;AAAA,QACF;AAIA,gBAAQ,KAAK;AAAA,UACX,OAAO,MAAM;AAAA,UACb,SAAS;AAAA,UACT,QAAQ;AAAA,UACR,SAAS,GAAG,IAAI,+BAA+B,MAAM,aAAa;AAAA,QACpE,CAAC;AACD;AAAA,MACF,SAAS,KAAK;AACZ,gBAAQ,KAAK;AAAA,UACX,OAAO,MAAM;AAAA,UACb,SAAS;AAAA,UACT,QAAQ;AAAA,UACR,SAAS,GAAG,IAAI,cAAc,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QAChF,CAAC;AACD;AAAA,MACF;AAAA,IACF;AAEA,YAAQ,KAAK;AAAA,MACX,OAAO,MAAM;AAAA,MACb,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,SAAS,GAAG,IAAI;AAAA,IAClB,CAAC;AAAA,EACH;AAGA,QAAM;AAAA,IACJ,CAAC,aAAa,oBAAoB,yBAAyB,oBAAoB;AAAA,IAC/E;AAAA,EACF;AAMA,QAAM,aAAa,QAAQ,KAAK,CAAC,MAAM,EAAE,OAAO;AAEhD,MAAI,YAAY;AACd,UAAM,eAAe,aAAa;AAAA,MAChC,kBAAkB,SAAS,UAAU;AAAA,MACrC,gBAAgB,oBAAoB,SAAS,UAAU,GAAG;AAAA,IAC5D,CAAC;AAAA,EACH;AAGA,WAAS,KAAK,IAAI,2BAA2B;AAC7C,aAAW,UAAU,SAAS;AAC5B,UAAM,OAAO,OAAO,UAAU,MAAM;AACpC,aAAS,KAAK,MAAM,IAAI,KAAK,OAAO,OAAO,EAAE;AAAA,EAC/C;AAEA,MAAI,QAAQ,WAAW,GAAG;AACxB,aAAS;AAAA,MACP;AAAA,IACF;AAAA,EACF;AASA,QAAM,4BAA4B,QAAQ;AAAA,IAAO,CAAC,MAChD,mBAAmB,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK;AAAA,EACnD;AACA,QAAM,8BACJ,mBAAmB,SAAS,KAC5B,CAAC,0BAA0B,KAAK,CAAC,MAAM,EAAE,OAAO;AAElD,MAAI,6BAA6B;AAC/B,aAAS;AAAA,MACP;AAAA,MACA;AAAA,IACF;AACA,WAAO,EAAE,UAAU,GAAG,SAAS,SAAS;AAAA,EAC1C;AAEA,MAAI,CAAC,cAAc,QAAQ,SAAS,GAAG;AACrC,aAAS;AAAA,MACP;AAAA,MACA;AAAA,IACF;AACA,WAAO,EAAE,UAAU,GAAG,SAAS,SAAS;AAAA,EAC1C;AAEA,MAAI,YAAY;AACd,aAAS,KAAK,IAAI,4BAA4B;AAAA,EAChD;AAEA,SAAO,EAAE,UAAU,GAAG,SAAS,SAAS;AAC1C;","names":[]}

package/dist/cli/status.cjs

@@ -39,6 +39,31 @@ var path = __toESM(require("node:path"), 1);
 // src/cli/constants.ts
 var NEXT_CONFIG_NAMES = ["next.config.ts", "next.config.js", "next.config.mjs"];
 
+// src/agent-detection/inject.ts
+var HTML_START_RE = /^<!--\s*glasstrace:mcp:start(?:\s+v=([^\s>]+))?\s*-->$/;
+var HTML_END = "<!-- glasstrace:mcp:end -->";
+var HASH_START_RE = /^#\s*glasstrace:mcp:start(?:\s+v=(\S+))?$/;
+var HASH_END = "# glasstrace:mcp:end";
+function parseStartMarkerLine(line) {
+  const trimmed = line.trim();
+  const html = HTML_START_RE.exec(trimmed);
+  if (html !== null) {
+    return { kind: "html", stamp: html[1] ?? null };
+  }
+  const hash = HASH_START_RE.exec(trimmed);
+  if (hash !== null) {
+    return { kind: "hash", stamp: hash[1] ?? null };
+  }
+  return null;
+}
+function isEndMarker(line) {
+  const trimmed = line.trim();
+  return trimmed === HTML_END || trimmed === HASH_END;
+}
+function isEndMarkerLine(line) {
+  return isEndMarker(line);
+}
+
 // src/cli/status.ts
 var MCP_JSON_FILES = [".mcp.json", ".cursor/mcp.json", ".gemini/settings.json", ".glasstrace/mcp.json"];
 var MCP_TOML_FILES = [".codex/config.toml"];
@@ -146,9 +171,14 @@ function checkAgents(root) {
   for (const name of AGENT_INFO_FILES) {
     try {
       const content = fs.readFileSync(path.join(root, name), "utf-8");
-      const hasHtmlMarkers = content.includes("<!-- glasstrace:mcp:start -->") && content.includes("<!-- glasstrace:mcp:end -->");
-      const hasHashMarkers = content.includes("# glasstrace:mcp:start") && content.includes("# glasstrace:mcp:end");
-      if (hasHtmlMarkers || hasHashMarkers) {
+      let hasStart = false;
+      let hasEnd = false;
+      for (const line of content.split("\n")) {
+        if (parseStartMarkerLine(line) !== null) hasStart = true;
+        else if (isEndMarkerLine(line)) hasEnd = true;
+        if (hasStart && hasEnd) break;
+      }
+      if (hasStart && hasEnd) {
         found.push(name);
       }
     } catch {

package/dist/cli/status.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/cli/status.ts","../../src/cli/constants.ts"],"sourcesContent":["import * as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport { NEXT_CONFIG_NAMES } from \"./constants.js\";\n\n/**\n * JSON-based MCP config files that init may create.\n * Includes .glasstrace/mcp.json (CI/generic fallback) in addition to the\n * agent-specific files that uninit.ts handles.\n */\nconst MCP_JSON_FILES = [\".mcp.json\", \".cursor/mcp.json\", \".gemini/settings.json\", \".glasstrace/mcp.json\"] as const;\n\n/**\n * TOML-based MCP config files (Codex uses this format).\n */\nconst MCP_TOML_FILES = [\".codex/config.toml\"] as const;\n\n/**\n * Agent info files that may contain glasstrace marker sections.\n */\nconst AGENT_INFO_FILES = [\n  \"CLAUDE.md\",\n  \"codex.md\",\n  \".cursorrules\",\n] as const;\n\n/**\n * Instrumentation file names in priority order.\n */\nconst INSTRUMENTATION_FILES = [\n  \"instrumentation.ts\",\n  \"instrumentation.js\",\n  \"instrumentation.mjs\",\n  \"src/instrumentation.ts\",\n  \"src/instrumentation.js\",\n  \"src/instrumentation.mjs\",\n] as const;\n\n/**\n * Machine-readable SDK configuration state.\n * This interface is the public contract for AI agents — fields may be added\n * but never removed or renamed without a major version bump.\n */\n/** Runtime state snapshot read from .glasstrace/runtime-state.json. */\nexport interface RuntimeStateSnapshot {\n  /** Whether the runtime state file exists and was readable. */\n  available: boolean;\n  /** Whether the process that wrote the state is likely still running. */\n  stale: boolean;\n  /** Core lifecycle state (e.g., \"ACTIVE\", \"KEY_PENDING\", \"SHUTDOWN\"). */\n  coreState: string | null;\n  /** Auth lifecycle state (e.g., \"ANONYMOUS\", \"AUTHENTICATED\"). */\n  authState: string | null;\n  /** OTel coexistence state (e.g., \"OWNS_PROVIDER\", \"AUTO_ATTACHED\"). */\n  otelState: string | null;\n  /** OTel scenario (e.g., \"A\", \"B-auto\"). */\n  otelScenario: string | null;\n  /** When the state was last written. */\n  updatedAt: string | null;\n  /** PID of the process that wrote the state. */\n  pid: number | null;\n}\n\nexport interface StatusResult {\n  /** Whether @glasstrace/sdk is in package.json dependencies or devDependencies. */\n  installed: boolean;\n  /** Whether the .glasstrace/ directory exists. */\n  initialized: boolean;\n  /** Whether an instrumentation file exists with registerGlasstrace(). */\n  instrumentation: boolean;\n  /** Whether next.config is wrapped with withGlasstraceConfig(). */\n  configWrapped: boolean;\n  /** Whether .glasstrace/anon_key exists. */\n  anonKey: boolean;\n  /** Whether any MCP config file has a glasstrace server entry. */\n  mcpConfigured: boolean;\n  /** Which agent info files have glasstrace marker sections. */\n  agents: string[];\n  /** Runtime state from the running SDK process (if available). */\n  runtime: RuntimeStateSnapshot;\n}\n\n/**\n * Options for the status command.\n */\nexport interface StatusOptions {\n  projectRoot: string;\n}\n\n/**\n * Checks SDK configuration state by reading filesystem markers.\n * This function is read-only — it never modifies files or creates directories.\n */\nexport function runStatus(options: StatusOptions): StatusResult {\n  const root = options.projectRoot;\n\n  return {\n    installed: checkInstalled(root),\n    initialized: checkInitialized(root),\n    instrumentation: checkInstrumentation(root),\n    configWrapped: checkConfigWrapped(root),\n    anonKey: checkAnonKey(root),\n    mcpConfigured: checkMcpConfigured(root),\n    agents: checkAgents(root),\n    runtime: readRuntimeState(root),\n  };\n}\n\nfunction checkInstalled(root: string): boolean {\n  try {\n    const pkgPath = path.join(root, \"package.json\");\n    const content = fs.readFileSync(pkgPath, \"utf-8\");\n    const pkg = JSON.parse(content) as Record<string, unknown>;\n    const deps = pkg[\"dependencies\"] as Record<string, unknown> | undefined;\n    const devDeps = pkg[\"devDependencies\"] as Record<string, unknown> | undefined;\n    return (\n      (deps != null && \"@glasstrace/sdk\" in deps) ||\n      (devDeps != null && \"@glasstrace/sdk\" in devDeps)\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction checkInitialized(root: string): boolean {\n  try {\n    return fs.statSync(path.join(root, \".glasstrace\")).isDirectory();\n  } catch {\n    return false;\n  }\n}\n\nfunction checkInstrumentation(root: string): boolean {\n  for (const name of INSTRUMENTATION_FILES) {\n    try {\n      const content = fs.readFileSync(path.join(root, name), \"utf-8\");\n      if (content.includes(\"registerGlasstrace\")) {\n        return true;\n      }\n    } catch {\n      // File doesn't exist or is unreadable — try next\n    }\n  }\n  return false;\n}\n\nfunction checkConfigWrapped(root: string): boolean {\n  for (const name of NEXT_CONFIG_NAMES) {\n    try {\n      const content = fs.readFileSync(path.join(root, name), \"utf-8\");\n      if (content.includes(\"withGlasstraceConfig\")) {\n        return true;\n      }\n    } catch {\n      // File doesn't exist or is unreadable — try next\n    }\n  }\n  return false;\n}\n\nfunction checkAnonKey(root: string): boolean {\n  try {\n    return fs.statSync(path.join(root, \".glasstrace\", \"anon_key\")).isFile();\n  } catch {\n    return false;\n  }\n}\n\nfunction checkMcpConfigured(root: string): boolean {\n  // Check JSON-based MCP config files\n  for (const name of MCP_JSON_FILES) {\n    try {\n      const content = fs.readFileSync(path.join(root, name), \"utf-8\");\n      const parsed = JSON.parse(content) as Record<string, unknown>;\n      const mcpServers = parsed[\"mcpServers\"] as Record<string, unknown> | undefined;\n      if (mcpServers && typeof mcpServers === \"object\" && \"glasstrace\" in mcpServers) {\n        return true;\n      }\n    } catch {\n      // File doesn't exist, is unreadable, or has invalid JSON — try next\n    }\n  }\n\n  // Check TOML-based MCP config files (Codex)\n  for (const name of MCP_TOML_FILES) {\n    try {\n      const content = fs.readFileSync(path.join(root, name), \"utf-8\");\n      if (content.includes(\"[mcp_servers.glasstrace]\")) {\n        return true;\n      }\n    } catch {\n      // File doesn't exist or is unreadable — try next\n    }\n  }\n\n  return false;\n}\n\nfunction checkAgents(root: string): string[] {\n  const found: string[] = [];\n  for (const name of AGENT_INFO_FILES) {\n    try {\n      const content = fs.readFileSync(path.join(root, name), \"utf-8\");\n      const hasHtmlMarkers =\n        content.includes(\"<!-- glasstrace:mcp:start -->\") &&\n        content.includes(\"<!-- glasstrace:mcp:end -->\");\n      const hasHashMarkers =\n        content.includes(\"# glasstrace:mcp:start\") &&\n        content.includes(\"# glasstrace:mcp:end\");\n      if (hasHtmlMarkers || hasHashMarkers) {\n        found.push(name);\n      }\n    } catch {\n      // File doesn't exist or is unreadable — skip\n    }\n  }\n  return found;\n}\n\nconst STALE_THRESHOLD_MS = 30_000; // 30 seconds\n\nfunction readRuntimeState(root: string): RuntimeStateSnapshot {\n  const empty: RuntimeStateSnapshot = {\n    available: false,\n    stale: false,\n    coreState: null,\n    authState: null,\n    otelState: null,\n    otelScenario: null,\n    updatedAt: null,\n    pid: null,\n  };\n\n  try {\n    const filePath = path.join(root, \".glasstrace\", \"runtime-state.json\");\n    const content = fs.readFileSync(filePath, \"utf-8\");\n    const parsed = JSON.parse(content) as Record<string, unknown>;\n\n    const updatedAt = typeof parsed.updatedAt === \"string\" ? parsed.updatedAt : null;\n    const pid = typeof parsed.pid === \"number\" ? parsed.pid : null;\n    const core = parsed.core as Record<string, unknown> | undefined;\n    const auth = parsed.auth as Record<string, unknown> | undefined;\n    const otel = parsed.otel as Record<string, unknown> | undefined;\n\n    const coreState = typeof core?.state === \"string\" ? core.state : null;\n    const authState = typeof auth?.state === \"string\" ? auth.state : null;\n    const otelState = typeof otel?.state === \"string\" ? otel.state : null;\n    const otelScenario = typeof otel?.scenario === \"string\" ? otel.scenario : null;\n\n    // Staleness detection\n    let stale = false;\n    if (coreState === \"SHUTDOWN\") {\n      stale = false; // Clean shutdown — not stale, just finished\n    } else if (updatedAt) {\n      const updatedMs = new Date(updatedAt).getTime();\n      const age = Number.isFinite(updatedMs) ? Date.now() - updatedMs : Infinity;\n      if (age > STALE_THRESHOLD_MS) {\n        // Check if the process is still running\n        if (pid && pid > 0) {\n          try {\n            process.kill(pid, 0); // Signal 0 = existence check\n            // If we get here, process exists. EPERM would also throw,\n            // but with code \"EPERM\" — meaning the process exists but\n            // we lack permission. Both mean \"not stale.\"\n            stale = false;\n          } catch (err: unknown) {\n            const code = (err as { code?: string })?.code;\n            if (code === \"EPERM\") {\n              stale = false; // Process exists, we just can't signal it\n            } else {\n              stale = true; // ESRCH or other — process gone\n            }\n          }\n        } else {\n          stale = true; // No valid PID — can't verify\n        }\n      }\n    }\n\n    return {\n      available: true,\n      stale,\n      coreState,\n      authState,\n      otelState,\n      otelScenario,\n      updatedAt,\n      pid,\n    };\n  } catch {\n    return empty;\n  }\n}\n","import type { DetectedAgent } from \"../agent-detection/detect.js\";\n\n/** Next.js config file names in priority order. */\nexport const NEXT_CONFIG_NAMES = [\"next.config.ts\", \"next.config.js\", \"next.config.mjs\"] as const;\n\n/** Maps internal agent name to a human-readable display name. */\nexport function formatAgentName(name: DetectedAgent[\"name\"]): string {\n  const displayNames: Record<DetectedAgent[\"name\"], string> = {\n    claude: \"Claude Code\",\n    codex: \"Codex\",\n    gemini: \"Gemini\",\n    cursor: \"Cursor\",\n    windsurf: \"Windsurf\",\n    generic: \"Generic helper\",\n  };\n  return displayNames[name];\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,SAAoB;AACpB,WAAsB;;;ACEf,IAAM,oBAAoB,CAAC,kBAAkB,kBAAkB,iBAAiB;;;ADMvF,IAAM,iBAAiB,CAAC,aAAa,oBAAoB,yBAAyB,sBAAsB;AAKxG,IAAM,iBAAiB,CAAC,oBAAoB;AAK5C,IAAM,mBAAmB;AAAA,EACvB;AAAA,EACA;AAAA,EACA;AACF;AAKA,IAAM,wBAAwB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAyDO,SAAS,UAAU,SAAsC;AAC9D,QAAM,OAAO,QAAQ;AAErB,SAAO;AAAA,IACL,WAAW,eAAe,IAAI;AAAA,IAC9B,aAAa,iBAAiB,IAAI;AAAA,IAClC,iBAAiB,qBAAqB,IAAI;AAAA,IAC1C,eAAe,mBAAmB,IAAI;AAAA,IACtC,SAAS,aAAa,IAAI;AAAA,IAC1B,eAAe,mBAAmB,IAAI;AAAA,IACtC,QAAQ,YAAY,IAAI;AAAA,IACxB,SAAS,iBAAiB,IAAI;AAAA,EAChC;AACF;AAEA,SAAS,eAAe,MAAuB;AAC7C,MAAI;AACF,UAAM,UAAe,UAAK,MAAM,cAAc;AAC9C,UAAM,UAAa,gBAAa,SAAS,OAAO;AAChD,UAAM,MAAM,KAAK,MAAM,OAAO;AAC9B,UAAM,OAAO,IAAI,cAAc;AAC/B,UAAM,UAAU,IAAI,iBAAiB;AACrC,WACG,QAAQ,QAAQ,qBAAqB,QACrC,WAAW,QAAQ,qBAAqB;AAAA,EAE7C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,iBAAiB,MAAuB;AAC/C,MAAI;AACF,WAAU,YAAc,UAAK,MAAM,aAAa,CAAC,EAAE,YAAY;AAAA,EACjE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,qBAAqB,MAAuB;AACnD,aAAW,QAAQ,uBAAuB;AACxC,QAAI;AACF,YAAM,UAAa,gBAAkB,UAAK,MAAM,IAAI,GAAG,OAAO;AAC9D,UAAI,QAAQ,SAAS,oBAAoB,GAAG;AAC1C,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,MAAuB;AACjD,aAAW,QAAQ,mBAAmB;AACpC,QAAI;AACF,YAAM,UAAa,gBAAkB,UAAK,MAAM,IAAI,GAAG,OAAO;AAC9D,UAAI,QAAQ,SAAS,sBAAsB,GAAG;AAC5C,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,aAAa,MAAuB;AAC3C,MAAI;AACF,WAAU,YAAc,UAAK,MAAM,eAAe,UAAU,CAAC,EAAE,OAAO;AAAA,EACxE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,mBAAmB,MAAuB;AAEjD,aAAW,QAAQ,gBAAgB;AACjC,QAAI;AACF,YAAM,UAAa,gBAAkB,UAAK,MAAM,IAAI,GAAG,OAAO;AAC9D,YAAM,SAAS,KAAK,MAAM,OAAO;AACjC,YAAM,aAAa,OAAO,YAAY;AACtC,UAAI,cAAc,OAAO,eAAe,YAAY,gBAAgB,YAAY;AAC9E,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAGA,aAAW,QAAQ,gBAAgB;AACjC,QAAI;AACF,YAAM,UAAa,gBAAkB,UAAK,MAAM,IAAI,GAAG,OAAO;AAC9D,UAAI,QAAQ,SAAS,0BAA0B,GAAG;AAChD,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,YAAY,MAAwB;AAC3C,QAAM,QAAkB,CAAC;AACzB,aAAW,QAAQ,kBAAkB;AACnC,QAAI;AACF,YAAM,UAAa,gBAAkB,UAAK,MAAM,IAAI,GAAG,OAAO;AAC9D,YAAM,iBACJ,QAAQ,SAAS,+BAA+B,KAChD,QAAQ,SAAS,6BAA6B;AAChD,YAAM,iBACJ,QAAQ,SAAS,wBAAwB,KACzC,QAAQ,SAAS,sBAAsB;AACzC,UAAI,kBAAkB,gBAAgB;AACpC,cAAM,KAAK,IAAI;AAAA,MACjB;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAEA,IAAM,qBAAqB;AAE3B,SAAS,iBAAiB,MAAoC;AAC5D,QAAM,QAA8B;AAAA,IAClC,WAAW;AAAA,IACX,OAAO;AAAA,IACP,WAAW;AAAA,IACX,WAAW;AAAA,IACX,WAAW;AAAA,IACX,cAAc;AAAA,IACd,WAAW;AAAA,IACX,KAAK;AAAA,EACP;AAEA,MAAI;AACF,UAAM,WAAgB,UAAK,MAAM,eAAe,oBAAoB;AACpE,UAAM,UAAa,gBAAa,UAAU,OAAO;AACjD,UAAM,SAAS,KAAK,MAAM,OAAO;AAEjC,UAAM,YAAY,OAAO,OAAO,cAAc,WAAW,OAAO,YAAY;AAC5E,UAAM,MAAM,OAAO,OAAO,QAAQ,WAAW,OAAO,MAAM;AAC1D,UAAM,OAAO,OAAO;AACpB,UAAM,OAAO,OAAO;AACpB,UAAM,OAAO,OAAO;AAEpB,UAAM,YAAY,OAAO,MAAM,UAAU,WAAW,KAAK,QAAQ;AACjE,UAAM,YAAY,OAAO,MAAM,UAAU,WAAW,KAAK,QAAQ;AACjE,UAAM,YAAY,OAAO,MAAM,UAAU,WAAW,KAAK,QAAQ;AACjE,UAAM,eAAe,OAAO,MAAM,aAAa,WAAW,KAAK,WAAW;AAG1E,QAAI,QAAQ;AACZ,QAAI,cAAc,YAAY;AAC5B,cAAQ;AAAA,IACV,WAAW,WAAW;AACpB,YAAM,YAAY,IAAI,KAAK,SAAS,EAAE,QAAQ;AAC9C,YAAM,MAAM,OAAO,SAAS,SAAS,IAAI,KAAK,IAAI,IAAI,YAAY;AAClE,UAAI,MAAM,oBAAoB;AAE5B,YAAI,OAAO,MAAM,GAAG;AAClB,cAAI;AACF,oBAAQ,KAAK,KAAK,CAAC;AAInB,oBAAQ;AAAA,UACV,SAAS,KAAc;AACrB,kBAAM,OAAQ,KAA2B;AACzC,gBAAI,SAAS,SAAS;AACpB,sBAAQ;AAAA,YACV,OAAO;AACL,sBAAQ;AAAA,YACV;AAAA,UACF;AAAA,QACF,OAAO;AACL,kBAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,WAAW;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}
+{"version":3,"sources":["../../src/cli/status.ts","../../src/cli/constants.ts","../../src/agent-detection/inject.ts"],"sourcesContent":["import * as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport { NEXT_CONFIG_NAMES } from \"./constants.js\";\nimport {\n  isEndMarkerLine,\n  parseStartMarkerLine,\n} from \"../agent-detection/inject.js\";\n\n/**\n * JSON-based MCP config files that init may create.\n * Includes .glasstrace/mcp.json (CI/generic fallback) in addition to the\n * agent-specific files that uninit.ts handles.\n */\nconst MCP_JSON_FILES = [\".mcp.json\", \".cursor/mcp.json\", \".gemini/settings.json\", \".glasstrace/mcp.json\"] as const;\n\n/**\n * TOML-based MCP config files (Codex uses this format).\n */\nconst MCP_TOML_FILES = [\".codex/config.toml\"] as const;\n\n/**\n * Agent info files that may contain glasstrace marker sections.\n */\nconst AGENT_INFO_FILES = [\n  \"CLAUDE.md\",\n  \"codex.md\",\n  \".cursorrules\",\n] as const;\n\n/**\n * Instrumentation file names in priority order.\n */\nconst INSTRUMENTATION_FILES = [\n  \"instrumentation.ts\",\n  \"instrumentation.js\",\n  \"instrumentation.mjs\",\n  \"src/instrumentation.ts\",\n  \"src/instrumentation.js\",\n  \"src/instrumentation.mjs\",\n] as const;\n\n/**\n * Machine-readable SDK configuration state.\n * This interface is the public contract for AI agents — fields may be added\n * but never removed or renamed without a major version bump.\n */\n/** Runtime state snapshot read from .glasstrace/runtime-state.json. */\nexport interface RuntimeStateSnapshot {\n  /** Whether the runtime state file exists and was readable. */\n  available: boolean;\n  /** Whether the process that wrote the state is likely still running. */\n  stale: boolean;\n  /** Core lifecycle state (e.g., \"ACTIVE\", \"KEY_PENDING\", \"SHUTDOWN\"). */\n  coreState: string | null;\n  /** Auth lifecycle state (e.g., \"ANONYMOUS\", \"AUTHENTICATED\"). */\n  authState: string | null;\n  /** OTel coexistence state (e.g., \"OWNS_PROVIDER\", \"AUTO_ATTACHED\"). */\n  otelState: string | null;\n  /** OTel scenario (e.g., \"A\", \"B-auto\"). */\n  otelScenario: string | null;\n  /** When the state was last written. */\n  updatedAt: string | null;\n  /** PID of the process that wrote the state. */\n  pid: number | null;\n}\n\nexport interface StatusResult {\n  /** Whether @glasstrace/sdk is in package.json dependencies or devDependencies. */\n  installed: boolean;\n  /** Whether the .glasstrace/ directory exists. */\n  initialized: boolean;\n  /** Whether an instrumentation file exists with registerGlasstrace(). */\n  instrumentation: boolean;\n  /** Whether next.config is wrapped with withGlasstraceConfig(). */\n  configWrapped: boolean;\n  /** Whether .glasstrace/anon_key exists. */\n  anonKey: boolean;\n  /** Whether any MCP config file has a glasstrace server entry. */\n  mcpConfigured: boolean;\n  /** Which agent info files have glasstrace marker sections. */\n  agents: string[];\n  /** Runtime state from the running SDK process (if available). */\n  runtime: RuntimeStateSnapshot;\n}\n\n/**\n * Options for the status command.\n */\nexport interface StatusOptions {\n  projectRoot: string;\n}\n\n/**\n * Checks SDK configuration state by reading filesystem markers.\n * This function is read-only — it never modifies files or creates directories.\n */\nexport function runStatus(options: StatusOptions): StatusResult {\n  const root = options.projectRoot;\n\n  return {\n    installed: checkInstalled(root),\n    initialized: checkInitialized(root),\n    instrumentation: checkInstrumentation(root),\n    configWrapped: checkConfigWrapped(root),\n    anonKey: checkAnonKey(root),\n    mcpConfigured: checkMcpConfigured(root),\n    agents: checkAgents(root),\n    runtime: readRuntimeState(root),\n  };\n}\n\nfunction checkInstalled(root: string): boolean {\n  try {\n    const pkgPath = path.join(root, \"package.json\");\n    const content = fs.readFileSync(pkgPath, \"utf-8\");\n    const pkg = JSON.parse(content) as Record<string, unknown>;\n    const deps = pkg[\"dependencies\"] as Record<string, unknown> | undefined;\n    const devDeps = pkg[\"devDependencies\"] as Record<string, unknown> | undefined;\n    return (\n      (deps != null && \"@glasstrace/sdk\" in deps) ||\n      (devDeps != null && \"@glasstrace/sdk\" in devDeps)\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction checkInitialized(root: string): boolean {\n  try {\n    return fs.statSync(path.join(root, \".glasstrace\")).isDirectory();\n  } catch {\n    return false;\n  }\n}\n\nfunction checkInstrumentation(root: string): boolean {\n  for (const name of INSTRUMENTATION_FILES) {\n    try {\n      const content = fs.readFileSync(path.join(root, name), \"utf-8\");\n      if (content.includes(\"registerGlasstrace\")) {\n        return true;\n      }\n    } catch {\n      // File doesn't exist or is unreadable — try next\n    }\n  }\n  return false;\n}\n\nfunction checkConfigWrapped(root: string): boolean {\n  for (const name of NEXT_CONFIG_NAMES) {\n    try {\n      const content = fs.readFileSync(path.join(root, name), \"utf-8\");\n      if (content.includes(\"withGlasstraceConfig\")) {\n        return true;\n      }\n    } catch {\n      // File doesn't exist or is unreadable — try next\n    }\n  }\n  return false;\n}\n\nfunction checkAnonKey(root: string): boolean {\n  try {\n    return fs.statSync(path.join(root, \".glasstrace\", \"anon_key\")).isFile();\n  } catch {\n    return false;\n  }\n}\n\nfunction checkMcpConfigured(root: string): boolean {\n  // Check JSON-based MCP config files\n  for (const name of MCP_JSON_FILES) {\n    try {\n      const content = fs.readFileSync(path.join(root, name), \"utf-8\");\n      const parsed = JSON.parse(content) as Record<string, unknown>;\n      const mcpServers = parsed[\"mcpServers\"] as Record<string, unknown> | undefined;\n      if (mcpServers && typeof mcpServers === \"object\" && \"glasstrace\" in mcpServers) {\n        return true;\n      }\n    } catch {\n      // File doesn't exist, is unreadable, or has invalid JSON — try next\n    }\n  }\n\n  // Check TOML-based MCP config files (Codex)\n  for (const name of MCP_TOML_FILES) {\n    try {\n      const content = fs.readFileSync(path.join(root, name), \"utf-8\");\n      if (content.includes(\"[mcp_servers.glasstrace]\")) {\n        return true;\n      }\n    } catch {\n      // File doesn't exist or is unreadable — try next\n    }\n  }\n\n  return false;\n}\n\nfunction checkAgents(root: string): string[] {\n  const found: string[] = [];\n  for (const name of AGENT_INFO_FILES) {\n    try {\n      const content = fs.readFileSync(path.join(root, name), \"utf-8\");\n      // Use the shared marker parser so SDK-050 stamped markers\n      // (`<!-- glasstrace:mcp:start v=1.5.0 -->` /\n      // `# glasstrace:mcp:start v=1.5.0`) are recognized alongside\n      // legacy unstamped markers. A literal `.includes(...)` check\n      // for the unstamped form would silently regress this status\n      // check the moment a project re-renders its instruction file\n      // under SDK-050+.\n      let hasStart = false;\n      let hasEnd = false;\n      for (const line of content.split(\"\\n\")) {\n        if (parseStartMarkerLine(line) !== null) hasStart = true;\n        else if (isEndMarkerLine(line)) hasEnd = true;\n        if (hasStart && hasEnd) break;\n      }\n      if (hasStart && hasEnd) {\n        found.push(name);\n      }\n    } catch {\n      // File doesn't exist or is unreadable — skip\n    }\n  }\n  return found;\n}\n\nconst STALE_THRESHOLD_MS = 30_000; // 30 seconds\n\nfunction readRuntimeState(root: string): RuntimeStateSnapshot {\n  const empty: RuntimeStateSnapshot = {\n    available: false,\n    stale: false,\n    coreState: null,\n    authState: null,\n    otelState: null,\n    otelScenario: null,\n    updatedAt: null,\n    pid: null,\n  };\n\n  try {\n    const filePath = path.join(root, \".glasstrace\", \"runtime-state.json\");\n    const content = fs.readFileSync(filePath, \"utf-8\");\n    const parsed = JSON.parse(content) as Record<string, unknown>;\n\n    const updatedAt = typeof parsed.updatedAt === \"string\" ? parsed.updatedAt : null;\n    const pid = typeof parsed.pid === \"number\" ? parsed.pid : null;\n    const core = parsed.core as Record<string, unknown> | undefined;\n    const auth = parsed.auth as Record<string, unknown> | undefined;\n    const otel = parsed.otel as Record<string, unknown> | undefined;\n\n    const coreState = typeof core?.state === \"string\" ? core.state : null;\n    const authState = typeof auth?.state === \"string\" ? auth.state : null;\n    const otelState = typeof otel?.state === \"string\" ? otel.state : null;\n    const otelScenario = typeof otel?.scenario === \"string\" ? otel.scenario : null;\n\n    // Staleness detection\n    let stale = false;\n    if (coreState === \"SHUTDOWN\") {\n      stale = false; // Clean shutdown — not stale, just finished\n    } else if (updatedAt) {\n      const updatedMs = new Date(updatedAt).getTime();\n      const age = Number.isFinite(updatedMs) ? Date.now() - updatedMs : Infinity;\n      if (age > STALE_THRESHOLD_MS) {\n        // Check if the process is still running\n        if (pid && pid > 0) {\n          try {\n            process.kill(pid, 0); // Signal 0 = existence check\n            // If we get here, process exists. EPERM would also throw,\n            // but with code \"EPERM\" — meaning the process exists but\n            // we lack permission. Both mean \"not stale.\"\n            stale = false;\n          } catch (err: unknown) {\n            const code = (err as { code?: string })?.code;\n            if (code === \"EPERM\") {\n              stale = false; // Process exists, we just can't signal it\n            } else {\n              stale = true; // ESRCH or other — process gone\n            }\n          }\n        } else {\n          stale = true; // No valid PID — can't verify\n        }\n      }\n    }\n\n    return {\n      available: true,\n      stale,\n      coreState,\n      authState,\n      otelState,\n      otelScenario,\n      updatedAt,\n      pid,\n    };\n  } catch {\n    return empty;\n  }\n}\n","import type { DetectedAgent } from \"../agent-detection/detect.js\";\n\n/** Next.js config file names in priority order. */\nexport const NEXT_CONFIG_NAMES = [\"next.config.ts\", \"next.config.js\", \"next.config.mjs\"] as const;\n\n/** Maps internal agent name to a human-readable display name. */\nexport function formatAgentName(name: DetectedAgent[\"name\"]): string {\n  const displayNames: Record<DetectedAgent[\"name\"], string> = {\n    claude: \"Claude Code\",\n    codex: \"Codex\",\n    gemini: \"Gemini\",\n    cursor: \"Cursor\",\n    windsurf: \"Windsurf\",\n    generic: \"Generic helper\",\n  };\n  return displayNames[name];\n}\n","import { chmod, mkdir, readFile, writeFile } from \"node:fs/promises\";\nimport { dirname, isAbsolute, join } from \"node:path\";\nimport type { DetectedAgent } from \"./detect.js\";\n\n/**\n * HTML start-marker regex used in markdown files (.md). Matches both\n * legacy unstamped markers (pre-SDK-050) and stamped markers (SDK-050+).\n *\n * Two shapes:\n *   - Legacy: `<!-- glasstrace:mcp:start -->`\n *   - Stamped: `<!-- glasstrace:mcp:start v=1.4.0 -->`\n *\n * The optional `v=<semver>` capture group is the SDK-050 version stamp\n * (DISC-1592 Required Semantics Item 1). Recognising the legacy form is\n * load-bearing for the SDK-050 backward-compatibility constraint: an\n * upgrading user's first re-render must replace the existing block in\n * place rather than appending a duplicate. Subsequent re-renders write\n * the stamped form.\n *\n * The stamp character class\n * `[^\\s>]+` deliberately excludes whitespace and `>` so a hand-edited\n * malformed marker cannot terminate the comment early or smuggle a\n * line break into the file. The end marker (`...mcp:end`) is unstamped.\n */\nconst HTML_START_RE =\n  /^<!--\\s*glasstrace:mcp:start(?:\\s+v=([^\\s>]+))?\\s*-->$/;\nconst HTML_END = \"<!-- glasstrace:mcp:end -->\";\n\n/**\n * Hash-prefixed start-marker regex used in plain text files (e.g.\n * `.cursorrules`). Same legacy/stamped shape model as the HTML form,\n * with the constraint that the captured stamp is non-whitespace\n * (`\\S+`) — the line ends at end-of-line, so there is no closing\n * delimiter to escape.\n */\nconst HASH_START_RE = /^#\\s*glasstrace:mcp:start(?:\\s+v=(\\S+))?$/;\nconst HASH_END = \"# glasstrace:mcp:end\";\n\n/**\n * Parsed start marker — its kind (HTML vs hash) and, when present, the\n * `v=<sdkVersion>` stamp. `stamp === null` means the marker matched the\n * legacy unstamped form (pre-SDK-050).\n */\nexport interface ParsedStartMarker {\n  kind: \"html\" | \"hash\";\n  stamp: string | null;\n}\n\n/**\n * Parses a single line as a Glasstrace start marker.\n *\n * Accepts both legacy unstamped markers (pre-SDK-050) and stamped\n * markers (SDK-050+). Returns `null` if the line is not a start\n * marker. Trims whitespace before matching so leading/trailing spaces\n * in user-edited files do not defeat detection.\n *\n * Exported so the upgrade-notice module (which checks the start\n * marker line directly) can share the regex, keeping a single source\n * of truth for the marker shape.\n */\nexport function parseStartMarkerLine(\n  line: string,\n): ParsedStartMarker | null {\n  const trimmed = line.trim();\n  const html = HTML_START_RE.exec(trimmed);\n  if (html !== null) {\n    return { kind: \"html\", stamp: html[1] ?? null };\n  }\n  const hash = HASH_START_RE.exec(trimmed);\n  if (hash !== null) {\n    return { kind: \"hash\", stamp: hash[1] ?? null };\n  }\n  return null;\n}\n\nfunction isEndMarker(line: string): boolean {\n  const trimmed = line.trim();\n  return trimmed === HTML_END || trimmed === HASH_END;\n}\n\n/**\n * Public alias for {@link isEndMarker}, used by the upgrade-notice\n * module to confirm that a stamped start marker has a matching end\n * before classifying the file as having a managed section. Exported\n * only for cross-module reuse within `agent-detection/`; not part of\n * the public SDK surface.\n */\nexport function isEndMarkerLine(line: string): boolean {\n  return isEndMarker(line);\n}\n\n/**\n * Determines whether an error is a filesystem permission or read-only error.\n * Covers EACCES (permission denied), EPERM (operation not permitted), and\n * EROFS (read-only filesystem) to handle containerized/mounted environments.\n */\nfunction isPermissionError(err: unknown): boolean {\n  const code = (err as NodeJS.ErrnoException).code;\n  return code === \"EACCES\" || code === \"EPERM\" || code === \"EROFS\";\n}\n\n/**\n * Writes MCP configuration content to an agent's config file path.\n *\n * Creates parent directories as needed and sets file permissions to 0o600\n * (owner read/write only) since config files may contain auth tokens.\n *\n * Fails gracefully: logs a warning to stderr on permission errors instead\n * of throwing.\n *\n * @param agent - The detected agent whose config path to write to.\n * @param content - The full configuration file content.\n * @param projectRoot - The project root (reserved for future use).\n */\nexport async function writeMcpConfig(\n  agent: DetectedAgent,\n  content: string,\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  projectRoot: string,\n): Promise<void> {\n  if (agent.mcpConfigPath === null) {\n    return;\n  }\n\n  const configPath = agent.mcpConfigPath;\n  const parentDir = dirname(configPath);\n\n  try {\n    await mkdir(parentDir, { recursive: true });\n  } catch (err: unknown) {\n    if (isPermissionError(err)) {\n      process.stderr.write(\n        `Warning: cannot create directory ${parentDir}: permission denied\\n`,\n      );\n      return;\n    }\n    throw err;\n  }\n\n  try {\n    await writeFile(configPath, content, { mode: 0o600 });\n  } catch (err: unknown) {\n    if (isPermissionError(err)) {\n      process.stderr.write(\n        `Warning: cannot write config file ${configPath}: permission denied\\n`,\n      );\n      return;\n    }\n    throw err;\n  }\n\n  // Ensure permissions are set even if the file already existed\n  // (writeFile mode only applies to newly created files on some platforms)\n  try {\n    await chmod(configPath, 0o600);\n  } catch {\n    // Best-effort; the writeFile mode should have handled this\n  }\n}\n\n/**\n * Finds existing marker boundaries in file content.\n *\n * Recognises both the legacy unstamped marker form (pre-SDK-050) and\n * the stamped form (SDK-050+) for both HTML-comment and hash-prefix\n * conventions. Returns the start and end line indices, or `null` if no\n * complete marker pair is found. The `v=<sdkVersion>` stamp itself is\n * only inspected by the upgrade-notice module via\n * {@link parseStartMarkerLine}; in-place replacement only needs the\n * line indices.\n *\n * When multiple start markers appear before the first end marker\n * (e.g. a quoted example of the marker shape earlier in the file\n * followed by the real managed block), the boundary anchors to the\n * MOST RECENT start preceding the end. This matches the pre-SDK-050\n * behaviour of `findMarkerBoundaries` and avoids the \"swallow the\n * user's example into the replacement\" failure mode that anchoring\n * to the FIRST start would produce.\n */\nfunction findMarkerBoundaries(\n  lines: string[],\n): { startIdx: number; endIdx: number } | null {\n  let startIdx = -1;\n\n  for (let i = 0; i < lines.length; i++) {\n    if (parseStartMarkerLine(lines[i]) !== null) {\n      // Track the most recent start so a quoted/example marker earlier\n      // in the file does not capture the replacement window.\n      startIdx = i;\n    } else if (startIdx !== -1 && isEndMarker(lines[i])) {\n      return { startIdx, endIdx: i };\n    }\n  }\n\n  return null;\n}\n\n/**\n * Injects an informational section into an agent's instruction file.\n *\n * Uses marker comments to enable idempotent updates:\n * - If the file contains marker pairs, replaces content between them.\n * - If the file exists but has no markers, appends the section.\n * - If the file does not exist, creates it with the section content.\n *\n * The boundary detector recognises both legacy unstamped markers\n * (pre-SDK-050) and stamped markers, so an upgrading user's first\n * re-render replaces the existing block in place rather than\n * appending a duplicate (DISC-1592 / SDK-050 backward-compatibility\n * constraint). Subsequent re-renders write the stamped form.\n *\n * Fails gracefully: logs a warning to stderr on read-only files instead\n * of throwing.\n *\n * @param agent - The detected agent whose info file to update.\n * @param content - The section content (including markers).\n * @param projectRoot - The project root (reserved for future use).\n */\nexport async function injectInfoSection(\n  agent: DetectedAgent,\n  content: string,\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  projectRoot: string,\n): Promise<void> {\n  if (agent.infoFilePath === null) {\n    return;\n  }\n\n  // Empty content means nothing to inject (e.g., agents without info sections)\n  if (content === \"\") {\n    return;\n  }\n\n  const filePath = agent.infoFilePath;\n\n  let existingContent: string | null = null;\n  try {\n    existingContent = await readFile(filePath, \"utf-8\");\n  } catch (err: unknown) {\n    const code = (err as NodeJS.ErrnoException).code;\n    if (code !== \"ENOENT\") {\n      if (isPermissionError(err)) {\n        process.stderr.write(\n          `Warning: cannot read info file ${filePath}: permission denied\\n`,\n        );\n        return;\n      }\n      throw err;\n    }\n  }\n\n  // File does not exist — create with section content\n  if (existingContent === null) {\n    try {\n      await mkdir(dirname(filePath), { recursive: true });\n      await writeFile(filePath, content, \"utf-8\");\n    } catch (err: unknown) {\n      if (isPermissionError(err)) {\n        process.stderr.write(\n          `Warning: cannot write info file ${filePath}: permission denied\\n`,\n        );\n        return;\n      }\n      throw err;\n    }\n    return;\n  }\n\n  // File exists — check for markers\n  const lines = existingContent.split(\"\\n\");\n  const boundaries = findMarkerBoundaries(lines);\n\n  let newContent: string;\n  if (boundaries !== null) {\n    // Replace everything from start marker through end marker (inclusive)\n    const before = lines.slice(0, boundaries.startIdx);\n    const after = lines.slice(boundaries.endIdx + 1);\n    // content already includes markers and trailing newline\n    const contentWithoutTrailingNewline = content.endsWith(\"\\n\")\n      ? content.slice(0, -1)\n      : content;\n    newContent = [...before, contentWithoutTrailingNewline, ...after].join(\"\\n\");\n  } else {\n    // No markers found — append with a blank line separator\n    const separator = existingContent.endsWith(\"\\n\") ? \"\\n\" : \"\\n\\n\";\n    newContent = existingContent + separator + content;\n  }\n\n  try {\n    await writeFile(filePath, newContent, \"utf-8\");\n  } catch (err: unknown) {\n    if (isPermissionError(err)) {\n      process.stderr.write(\n        `Warning: cannot write info file ${filePath}: permission denied\\n`,\n      );\n      return;\n    }\n    throw err;\n  }\n}\n\n/**\n * Returns true when the file at `filePath` contains a complete\n * Glasstrace managed section (marker pair). Matches both legacy\n * unstamped markers and SDK-050+ stamped markers. Used by the\n * upgrade-instructions CLI to decide which detected agent files\n * actually have a managed section to refresh.\n *\n * Returns `false` for the genuine \"file does not exist\" case\n * (`ENOENT`). Any other read error — permission denied (`EACCES`),\n * not-permitted (`EPERM`), read-only (`EROFS`), I/O error, etc. — is\n * re-thrown so the caller can surface it to the user. Swallowing\n * those would let `upgrade-instructions` report an inaccessible file\n * as \"skipped (no managed section present)\" and silently mask a real\n * permission problem (Codex review on PR #247).\n */\nexport async function hasManagedSection(filePath: string): Promise<boolean> {\n  let content: string;\n  try {\n    content = await readFile(filePath, \"utf-8\");\n  } catch (err: unknown) {\n    const code = (err as NodeJS.ErrnoException).code;\n    if (code === \"ENOENT\") return false;\n    throw err;\n  }\n  return findMarkerBoundaries(content.split(\"\\n\")) !== null;\n}\n\n/**\n * Ensures that the given paths are listed in the project's `.gitignore`.\n *\n * Only adds entries for paths that are not already present. Creates the\n * `.gitignore` file if it does not exist. Skips absolute paths (e.g.,\n * Windsurf's global config) since those are outside the project tree.\n *\n * Fails gracefully: logs a warning to stderr on permission errors.\n *\n * @param paths - Relative paths to ensure are gitignored.\n * @param projectRoot - The project root directory.\n */\nexport async function updateGitignore(\n  paths: string[],\n  projectRoot: string,\n): Promise<void> {\n  const gitignorePath = join(projectRoot, \".gitignore\");\n\n  // Filter out absolute paths — they reference locations outside the project\n  // Uses isAbsolute() to handle both POSIX and Windows path formats\n  const relativePaths = paths.filter((p) => !isAbsolute(p));\n\n  if (relativePaths.length === 0) {\n    return;\n  }\n\n  let existingContent = \"\";\n  try {\n    existingContent = await readFile(gitignorePath, \"utf-8\");\n  } catch (err: unknown) {\n    const code = (err as NodeJS.ErrnoException).code;\n    if (code !== \"ENOENT\") {\n      if (isPermissionError(err)) {\n        process.stderr.write(\n          `Warning: cannot read .gitignore: permission denied\\n`,\n        );\n        return;\n      }\n      throw err;\n    }\n  }\n\n  // Parse existing entries, trimming whitespace for comparison\n  const existingLines = existingContent\n    .split(\"\\n\")\n    .map((line) => line.trim())\n    .filter((line) => line !== \"\");\n\n  const existingSet = new Set(existingLines);\n\n  // Normalize entries: trim whitespace, convert backslashes to forward slashes\n  // (git ignore patterns use / as separator; backslash is an escape character),\n  // drop empties, and deduplicate against existing entries.\n  const toAdd = relativePaths\n    .map((p) => p.trim().replace(/\\\\/g, \"/\"))\n    .filter((p) => p !== \"\" && !existingSet.has(p));\n\n  if (toAdd.length === 0) {\n    return;\n  }\n\n  // Ensure file ends with newline before appending\n  let updatedContent = existingContent;\n  if (updatedContent.length > 0 && !updatedContent.endsWith(\"\\n\")) {\n    updatedContent += \"\\n\";\n  }\n\n  updatedContent += toAdd.join(\"\\n\") + \"\\n\";\n\n  try {\n    await writeFile(gitignorePath, updatedContent, \"utf-8\");\n  } catch (err: unknown) {\n    if (isPermissionError(err)) {\n      process.stderr.write(\n        `Warning: cannot write .gitignore: permission denied\\n`,\n      );\n      return;\n    }\n    throw err;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,SAAoB;AACpB,WAAsB;;;ACEf,IAAM,oBAAoB,CAAC,kBAAkB,kBAAkB,iBAAiB;;;ACqBvF,IAAM,gBACJ;AACF,IAAM,WAAW;AASjB,IAAM,gBAAgB;AACtB,IAAM,WAAW;AAwBV,SAAS,qBACd,MAC0B;AAC1B,QAAM,UAAU,KAAK,KAAK;AAC1B,QAAM,OAAO,cAAc,KAAK,OAAO;AACvC,MAAI,SAAS,MAAM;AACjB,WAAO,EAAE,MAAM,QAAQ,OAAO,KAAK,CAAC,KAAK,KAAK;AAAA,EAChD;AACA,QAAM,OAAO,cAAc,KAAK,OAAO;AACvC,MAAI,SAAS,MAAM;AACjB,WAAO,EAAE,MAAM,QAAQ,OAAO,KAAK,CAAC,KAAK,KAAK;AAAA,EAChD;AACA,SAAO;AACT;AAEA,SAAS,YAAY,MAAuB;AAC1C,QAAM,UAAU,KAAK,KAAK;AAC1B,SAAO,YAAY,YAAY,YAAY;AAC7C;AASO,SAAS,gBAAgB,MAAuB;AACrD,SAAO,YAAY,IAAI;AACzB;;;AF5EA,IAAM,iBAAiB,CAAC,aAAa,oBAAoB,yBAAyB,sBAAsB;AAKxG,IAAM,iBAAiB,CAAC,oBAAoB;AAK5C,IAAM,mBAAmB;AAAA,EACvB;AAAA,EACA;AAAA,EACA;AACF;AAKA,IAAM,wBAAwB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAyDO,SAAS,UAAU,SAAsC;AAC9D,QAAM,OAAO,QAAQ;AAErB,SAAO;AAAA,IACL,WAAW,eAAe,IAAI;AAAA,IAC9B,aAAa,iBAAiB,IAAI;AAAA,IAClC,iBAAiB,qBAAqB,IAAI;AAAA,IAC1C,eAAe,mBAAmB,IAAI;AAAA,IACtC,SAAS,aAAa,IAAI;AAAA,IAC1B,eAAe,mBAAmB,IAAI;AAAA,IACtC,QAAQ,YAAY,IAAI;AAAA,IACxB,SAAS,iBAAiB,IAAI;AAAA,EAChC;AACF;AAEA,SAAS,eAAe,MAAuB;AAC7C,MAAI;AACF,UAAM,UAAe,UAAK,MAAM,cAAc;AAC9C,UAAM,UAAa,gBAAa,SAAS,OAAO;AAChD,UAAM,MAAM,KAAK,MAAM,OAAO;AAC9B,UAAM,OAAO,IAAI,cAAc;AAC/B,UAAM,UAAU,IAAI,iBAAiB;AACrC,WACG,QAAQ,QAAQ,qBAAqB,QACrC,WAAW,QAAQ,qBAAqB;AAAA,EAE7C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,iBAAiB,MAAuB;AAC/C,MAAI;AACF,WAAU,YAAc,UAAK,MAAM,aAAa,CAAC,EAAE,YAAY;AAAA,EACjE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,qBAAqB,MAAuB;AACnD,aAAW,QAAQ,uBAAuB;AACxC,QAAI;AACF,YAAM,UAAa,gBAAkB,UAAK,MAAM,IAAI,GAAG,OAAO;AAC9D,UAAI,QAAQ,SAAS,oBAAoB,GAAG;AAC1C,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,MAAuB;AACjD,aAAW,QAAQ,mBAAmB;AACpC,QAAI;AACF,YAAM,UAAa,gBAAkB,UAAK,MAAM,IAAI,GAAG,OAAO;AAC9D,UAAI,QAAQ,SAAS,sBAAsB,GAAG;AAC5C,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,aAAa,MAAuB;AAC3C,MAAI;AACF,WAAU,YAAc,UAAK,MAAM,eAAe,UAAU,CAAC,EAAE,OAAO;AAAA,EACxE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,mBAAmB,MAAuB;AAEjD,aAAW,QAAQ,gBAAgB;AACjC,QAAI;AACF,YAAM,UAAa,gBAAkB,UAAK,MAAM,IAAI,GAAG,OAAO;AAC9D,YAAM,SAAS,KAAK,MAAM,OAAO;AACjC,YAAM,aAAa,OAAO,YAAY;AACtC,UAAI,cAAc,OAAO,eAAe,YAAY,gBAAgB,YAAY;AAC9E,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAGA,aAAW,QAAQ,gBAAgB;AACjC,QAAI;AACF,YAAM,UAAa,gBAAkB,UAAK,MAAM,IAAI,GAAG,OAAO;AAC9D,UAAI,QAAQ,SAAS,0BAA0B,GAAG;AAChD,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,YAAY,MAAwB;AAC3C,QAAM,QAAkB,CAAC;AACzB,aAAW,QAAQ,kBAAkB;AACnC,QAAI;AACF,YAAM,UAAa,gBAAkB,UAAK,MAAM,IAAI,GAAG,OAAO;AAQ9D,UAAI,WAAW;AACf,UAAI,SAAS;AACb,iBAAW,QAAQ,QAAQ,MAAM,IAAI,GAAG;AACtC,YAAI,qBAAqB,IAAI,MAAM,KAAM,YAAW;AAAA,iBAC3C,gBAAgB,IAAI,EAAG,UAAS;AACzC,YAAI,YAAY,OAAQ;AAAA,MAC1B;AACA,UAAI,YAAY,QAAQ;AACtB,cAAM,KAAK,IAAI;AAAA,MACjB;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAEA,IAAM,qBAAqB;AAE3B,SAAS,iBAAiB,MAAoC;AAC5D,QAAM,QAA8B;AAAA,IAClC,WAAW;AAAA,IACX,OAAO;AAAA,IACP,WAAW;AAAA,IACX,WAAW;AAAA,IACX,WAAW;AAAA,IACX,cAAc;AAAA,IACd,WAAW;AAAA,IACX,KAAK;AAAA,EACP;AAEA,MAAI;AACF,UAAM,WAAgB,UAAK,MAAM,eAAe,oBAAoB;AACpE,UAAM,UAAa,gBAAa,UAAU,OAAO;AACjD,UAAM,SAAS,KAAK,MAAM,OAAO;AAEjC,UAAM,YAAY,OAAO,OAAO,cAAc,WAAW,OAAO,YAAY;AAC5E,UAAM,MAAM,OAAO,OAAO,QAAQ,WAAW,OAAO,MAAM;AAC1D,UAAM,OAAO,OAAO;AACpB,UAAM,OAAO,OAAO;AACpB,UAAM,OAAO,OAAO;AAEpB,UAAM,YAAY,OAAO,MAAM,UAAU,WAAW,KAAK,QAAQ;AACjE,UAAM,YAAY,OAAO,MAAM,UAAU,WAAW,KAAK,QAAQ;AACjE,UAAM,YAAY,OAAO,MAAM,UAAU,WAAW,KAAK,QAAQ;AACjE,UAAM,eAAe,OAAO,MAAM,aAAa,WAAW,KAAK,WAAW;AAG1E,QAAI,QAAQ;AACZ,QAAI,cAAc,YAAY;AAC5B,cAAQ;AAAA,IACV,WAAW,WAAW;AACpB,YAAM,YAAY,IAAI,KAAK,SAAS,EAAE,QAAQ;AAC9C,YAAM,MAAM,OAAO,SAAS,SAAS,IAAI,KAAK,IAAI,IAAI,YAAY;AAClE,UAAI,MAAM,oBAAoB;AAE5B,YAAI,OAAO,MAAM,GAAG;AAClB,cAAI;AACF,oBAAQ,KAAK,KAAK,CAAC;AAInB,oBAAQ;AAAA,UACV,SAAS,KAAc;AACrB,kBAAM,OAAQ,KAA2B;AACzC,gBAAI,SAAS,SAAS;AACpB,sBAAQ;AAAA,YACV,OAAO;AACL,sBAAQ;AAAA,YACV;AAAA,UACF;AAAA,QACF,OAAO;AACL,kBAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,WAAW;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/cli/status.js

@@ -1,6 +1,10 @@
 import {
   NEXT_CONFIG_NAMES
 } from "../chunk-NB7GJE4S.js";
+import {
+  isEndMarkerLine,
+  parseStartMarkerLine
+} from "../chunk-ZBQQXVHD.js";
 import "../chunk-NSBPE2FW.js";
 
 // src/cli/status.ts
@@ -112,9 +116,14 @@ function checkAgents(root) {
   for (const name of AGENT_INFO_FILES) {
     try {
       const content = fs.readFileSync(path.join(root, name), "utf-8");
-      const hasHtmlMarkers = content.includes("<!-- glasstrace:mcp:start -->") && content.includes("<!-- glasstrace:mcp:end -->");
-      const hasHashMarkers = content.includes("# glasstrace:mcp:start") && content.includes("# glasstrace:mcp:end");
-      if (hasHtmlMarkers || hasHashMarkers) {
+      let hasStart = false;
+      let hasEnd = false;
+      for (const line of content.split("\n")) {
+        if (parseStartMarkerLine(line) !== null) hasStart = true;
+        else if (isEndMarkerLine(line)) hasEnd = true;
+        if (hasStart && hasEnd) break;
+      }
+      if (hasStart && hasEnd) {
         found.push(name);
       }
     } catch {

package/dist/cli/status.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/cli/status.ts"],"sourcesContent":["import * as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport { NEXT_CONFIG_NAMES } from \"./constants.js\";\n\n/**\n * JSON-based MCP config files that init may create.\n * Includes .glasstrace/mcp.json (CI/generic fallback) in addition to the\n * agent-specific files that uninit.ts handles.\n */\nconst MCP_JSON_FILES = [\".mcp.json\", \".cursor/mcp.json\", \".gemini/settings.json\", \".glasstrace/mcp.json\"] as const;\n\n/**\n * TOML-based MCP config files (Codex uses this format).\n */\nconst MCP_TOML_FILES = [\".codex/config.toml\"] as const;\n\n/**\n * Agent info files that may contain glasstrace marker sections.\n */\nconst AGENT_INFO_FILES = [\n  \"CLAUDE.md\",\n  \"codex.md\",\n  \".cursorrules\",\n] as const;\n\n/**\n * Instrumentation file names in priority order.\n */\nconst INSTRUMENTATION_FILES = [\n  \"instrumentation.ts\",\n  \"instrumentation.js\",\n  \"instrumentation.mjs\",\n  \"src/instrumentation.ts\",\n  \"src/instrumentation.js\",\n  \"src/instrumentation.mjs\",\n] as const;\n\n/**\n * Machine-readable SDK configuration state.\n * This interface is the public contract for AI agents — fields may be added\n * but never removed or renamed without a major version bump.\n */\n/** Runtime state snapshot read from .glasstrace/runtime-state.json. */\nexport interface RuntimeStateSnapshot {\n  /** Whether the runtime state file exists and was readable. */\n  available: boolean;\n  /** Whether the process that wrote the state is likely still running. */\n  stale: boolean;\n  /** Core lifecycle state (e.g., \"ACTIVE\", \"KEY_PENDING\", \"SHUTDOWN\"). */\n  coreState: string | null;\n  /** Auth lifecycle state (e.g., \"ANONYMOUS\", \"AUTHENTICATED\"). */\n  authState: string | null;\n  /** OTel coexistence state (e.g., \"OWNS_PROVIDER\", \"AUTO_ATTACHED\"). */\n  otelState: string | null;\n  /** OTel scenario (e.g., \"A\", \"B-auto\"). */\n  otelScenario: string | null;\n  /** When the state was last written. */\n  updatedAt: string | null;\n  /** PID of the process that wrote the state. */\n  pid: number | null;\n}\n\nexport interface StatusResult {\n  /** Whether @glasstrace/sdk is in package.json dependencies or devDependencies. */\n  installed: boolean;\n  /** Whether the .glasstrace/ directory exists. */\n  initialized: boolean;\n  /** Whether an instrumentation file exists with registerGlasstrace(). */\n  instrumentation: boolean;\n  /** Whether next.config is wrapped with withGlasstraceConfig(). */\n  configWrapped: boolean;\n  /** Whether .glasstrace/anon_key exists. */\n  anonKey: boolean;\n  /** Whether any MCP config file has a glasstrace server entry. */\n  mcpConfigured: boolean;\n  /** Which agent info files have glasstrace marker sections. */\n  agents: string[];\n  /** Runtime state from the running SDK process (if available). */\n  runtime: RuntimeStateSnapshot;\n}\n\n/**\n * Options for the status command.\n */\nexport interface StatusOptions {\n  projectRoot: string;\n}\n\n/**\n * Checks SDK configuration state by reading filesystem markers.\n * This function is read-only — it never modifies files or creates directories.\n */\nexport function runStatus(options: StatusOptions): StatusResult {\n  const root = options.projectRoot;\n\n  return {\n    installed: checkInstalled(root),\n    initialized: checkInitialized(root),\n    instrumentation: checkInstrumentation(root),\n    configWrapped: checkConfigWrapped(root),\n    anonKey: checkAnonKey(root),\n    mcpConfigured: checkMcpConfigured(root),\n    agents: checkAgents(root),\n    runtime: readRuntimeState(root),\n  };\n}\n\nfunction checkInstalled(root: string): boolean {\n  try {\n    const pkgPath = path.join(root, \"package.json\");\n    const content = fs.readFileSync(pkgPath, \"utf-8\");\n    const pkg = JSON.parse(content) as Record<string, unknown>;\n    const deps = pkg[\"dependencies\"] as Record<string, unknown> | undefined;\n    const devDeps = pkg[\"devDependencies\"] as Record<string, unknown> | undefined;\n    return (\n      (deps != null && \"@glasstrace/sdk\" in deps) ||\n      (devDeps != null && \"@glasstrace/sdk\" in devDeps)\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction checkInitialized(root: string): boolean {\n  try {\n    return fs.statSync(path.join(root, \".glasstrace\")).isDirectory();\n  } catch {\n    return false;\n  }\n}\n\nfunction checkInstrumentation(root: string): boolean {\n  for (const name of INSTRUMENTATION_FILES) {\n    try {\n      const content = fs.readFileSync(path.join(root, name), \"utf-8\");\n      if (content.includes(\"registerGlasstrace\")) {\n        return true;\n      }\n    } catch {\n      // File doesn't exist or is unreadable — try next\n    }\n  }\n  return false;\n}\n\nfunction checkConfigWrapped(root: string): boolean {\n  for (const name of NEXT_CONFIG_NAMES) {\n    try {\n      const content = fs.readFileSync(path.join(root, name), \"utf-8\");\n      if (content.includes(\"withGlasstraceConfig\")) {\n        return true;\n      }\n    } catch {\n      // File doesn't exist or is unreadable — try next\n    }\n  }\n  return false;\n}\n\nfunction checkAnonKey(root: string): boolean {\n  try {\n    return fs.statSync(path.join(root, \".glasstrace\", \"anon_key\")).isFile();\n  } catch {\n    return false;\n  }\n}\n\nfunction checkMcpConfigured(root: string): boolean {\n  // Check JSON-based MCP config files\n  for (const name of MCP_JSON_FILES) {\n    try {\n      const content = fs.readFileSync(path.join(root, name), \"utf-8\");\n      const parsed = JSON.parse(content) as Record<string, unknown>;\n      const mcpServers = parsed[\"mcpServers\"] as Record<string, unknown> | undefined;\n      if (mcpServers && typeof mcpServers === \"object\" && \"glasstrace\" in mcpServers) {\n        return true;\n      }\n    } catch {\n      // File doesn't exist, is unreadable, or has invalid JSON — try next\n    }\n  }\n\n  // Check TOML-based MCP config files (Codex)\n  for (const name of MCP_TOML_FILES) {\n    try {\n      const content = fs.readFileSync(path.join(root, name), \"utf-8\");\n      if (content.includes(\"[mcp_servers.glasstrace]\")) {\n        return true;\n      }\n    } catch {\n      // File doesn't exist or is unreadable — try next\n    }\n  }\n\n  return false;\n}\n\nfunction checkAgents(root: string): string[] {\n  const found: string[] = [];\n  for (const name of AGENT_INFO_FILES) {\n    try {\n      const content = fs.readFileSync(path.join(root, name), \"utf-8\");\n      const hasHtmlMarkers =\n        content.includes(\"<!-- glasstrace:mcp:start -->\") &&\n        content.includes(\"<!-- glasstrace:mcp:end -->\");\n      const hasHashMarkers =\n        content.includes(\"# glasstrace:mcp:start\") &&\n        content.includes(\"# glasstrace:mcp:end\");\n      if (hasHtmlMarkers || hasHashMarkers) {\n        found.push(name);\n      }\n    } catch {\n      // File doesn't exist or is unreadable — skip\n    }\n  }\n  return found;\n}\n\nconst STALE_THRESHOLD_MS = 30_000; // 30 seconds\n\nfunction readRuntimeState(root: string): RuntimeStateSnapshot {\n  const empty: RuntimeStateSnapshot = {\n    available: false,\n    stale: false,\n    coreState: null,\n    authState: null,\n    otelState: null,\n    otelScenario: null,\n    updatedAt: null,\n    pid: null,\n  };\n\n  try {\n    const filePath = path.join(root, \".glasstrace\", \"runtime-state.json\");\n    const content = fs.readFileSync(filePath, \"utf-8\");\n    const parsed = JSON.parse(content) as Record<string, unknown>;\n\n    const updatedAt = typeof parsed.updatedAt === \"string\" ? parsed.updatedAt : null;\n    const pid = typeof parsed.pid === \"number\" ? parsed.pid : null;\n    const core = parsed.core as Record<string, unknown> | undefined;\n    const auth = parsed.auth as Record<string, unknown> | undefined;\n    const otel = parsed.otel as Record<string, unknown> | undefined;\n\n    const coreState = typeof core?.state === \"string\" ? core.state : null;\n    const authState = typeof auth?.state === \"string\" ? auth.state : null;\n    const otelState = typeof otel?.state === \"string\" ? otel.state : null;\n    const otelScenario = typeof otel?.scenario === \"string\" ? otel.scenario : null;\n\n    // Staleness detection\n    let stale = false;\n    if (coreState === \"SHUTDOWN\") {\n      stale = false; // Clean shutdown — not stale, just finished\n    } else if (updatedAt) {\n      const updatedMs = new Date(updatedAt).getTime();\n      const age = Number.isFinite(updatedMs) ? Date.now() - updatedMs : Infinity;\n      if (age > STALE_THRESHOLD_MS) {\n        // Check if the process is still running\n        if (pid && pid > 0) {\n          try {\n            process.kill(pid, 0); // Signal 0 = existence check\n            // If we get here, process exists. EPERM would also throw,\n            // but with code \"EPERM\" — meaning the process exists but\n            // we lack permission. Both mean \"not stale.\"\n            stale = false;\n          } catch (err: unknown) {\n            const code = (err as { code?: string })?.code;\n            if (code === \"EPERM\") {\n              stale = false; // Process exists, we just can't signal it\n            } else {\n              stale = true; // ESRCH or other — process gone\n            }\n          }\n        } else {\n          stale = true; // No valid PID — can't verify\n        }\n      }\n    }\n\n    return {\n      available: true,\n      stale,\n      coreState,\n      authState,\n      otelState,\n      otelScenario,\n      updatedAt,\n      pid,\n    };\n  } catch {\n    return empty;\n  }\n}\n"],"mappings":";;;;;;AAAA,YAAY,QAAQ;AACpB,YAAY,UAAU;AAQtB,IAAM,iBAAiB,CAAC,aAAa,oBAAoB,yBAAyB,sBAAsB;AAKxG,IAAM,iBAAiB,CAAC,oBAAoB;AAK5C,IAAM,mBAAmB;AAAA,EACvB;AAAA,EACA;AAAA,EACA;AACF;AAKA,IAAM,wBAAwB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAyDO,SAAS,UAAU,SAAsC;AAC9D,QAAM,OAAO,QAAQ;AAErB,SAAO;AAAA,IACL,WAAW,eAAe,IAAI;AAAA,IAC9B,aAAa,iBAAiB,IAAI;AAAA,IAClC,iBAAiB,qBAAqB,IAAI;AAAA,IAC1C,eAAe,mBAAmB,IAAI;AAAA,IACtC,SAAS,aAAa,IAAI;AAAA,IAC1B,eAAe,mBAAmB,IAAI;AAAA,IACtC,QAAQ,YAAY,IAAI;AAAA,IACxB,SAAS,iBAAiB,IAAI;AAAA,EAChC;AACF;AAEA,SAAS,eAAe,MAAuB;AAC7C,MAAI;AACF,UAAM,UAAe,UAAK,MAAM,cAAc;AAC9C,UAAM,UAAa,gBAAa,SAAS,OAAO;AAChD,UAAM,MAAM,KAAK,MAAM,OAAO;AAC9B,UAAM,OAAO,IAAI,cAAc;AAC/B,UAAM,UAAU,IAAI,iBAAiB;AACrC,WACG,QAAQ,QAAQ,qBAAqB,QACrC,WAAW,QAAQ,qBAAqB;AAAA,EAE7C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,iBAAiB,MAAuB;AAC/C,MAAI;AACF,WAAU,YAAc,UAAK,MAAM,aAAa,CAAC,EAAE,YAAY;AAAA,EACjE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,qBAAqB,MAAuB;AACnD,aAAW,QAAQ,uBAAuB;AACxC,QAAI;AACF,YAAM,UAAa,gBAAkB,UAAK,MAAM,IAAI,GAAG,OAAO;AAC9D,UAAI,QAAQ,SAAS,oBAAoB,GAAG;AAC1C,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,MAAuB;AACjD,aAAW,QAAQ,mBAAmB;AACpC,QAAI;AACF,YAAM,UAAa,gBAAkB,UAAK,MAAM,IAAI,GAAG,OAAO;AAC9D,UAAI,QAAQ,SAAS,sBAAsB,GAAG;AAC5C,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,aAAa,MAAuB;AAC3C,MAAI;AACF,WAAU,YAAc,UAAK,MAAM,eAAe,UAAU,CAAC,EAAE,OAAO;AAAA,EACxE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,mBAAmB,MAAuB;AAEjD,aAAW,QAAQ,gBAAgB;AACjC,QAAI;AACF,YAAM,UAAa,gBAAkB,UAAK,MAAM,IAAI,GAAG,OAAO;AAC9D,YAAM,SAAS,KAAK,MAAM,OAAO;AACjC,YAAM,aAAa,OAAO,YAAY;AACtC,UAAI,cAAc,OAAO,eAAe,YAAY,gBAAgB,YAAY;AAC9E,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAGA,aAAW,QAAQ,gBAAgB;AACjC,QAAI;AACF,YAAM,UAAa,gBAAkB,UAAK,MAAM,IAAI,GAAG,OAAO;AAC9D,UAAI,QAAQ,SAAS,0BAA0B,GAAG;AAChD,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,YAAY,MAAwB;AAC3C,QAAM,QAAkB,CAAC;AACzB,aAAW,QAAQ,kBAAkB;AACnC,QAAI;AACF,YAAM,UAAa,gBAAkB,UAAK,MAAM,IAAI,GAAG,OAAO;AAC9D,YAAM,iBACJ,QAAQ,SAAS,+BAA+B,KAChD,QAAQ,SAAS,6BAA6B;AAChD,YAAM,iBACJ,QAAQ,SAAS,wBAAwB,KACzC,QAAQ,SAAS,sBAAsB;AACzC,UAAI,kBAAkB,gBAAgB;AACpC,cAAM,KAAK,IAAI;AAAA,MACjB;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAEA,IAAM,qBAAqB;AAE3B,SAAS,iBAAiB,MAAoC;AAC5D,QAAM,QAA8B;AAAA,IAClC,WAAW;AAAA,IACX,OAAO;AAAA,IACP,WAAW;AAAA,IACX,WAAW;AAAA,IACX,WAAW;AAAA,IACX,cAAc;AAAA,IACd,WAAW;AAAA,IACX,KAAK;AAAA,EACP;AAEA,MAAI;AACF,UAAM,WAAgB,UAAK,MAAM,eAAe,oBAAoB;AACpE,UAAM,UAAa,gBAAa,UAAU,OAAO;AACjD,UAAM,SAAS,KAAK,MAAM,OAAO;AAEjC,UAAM,YAAY,OAAO,OAAO,cAAc,WAAW,OAAO,YAAY;AAC5E,UAAM,MAAM,OAAO,OAAO,QAAQ,WAAW,OAAO,MAAM;AAC1D,UAAM,OAAO,OAAO;AACpB,UAAM,OAAO,OAAO;AACpB,UAAM,OAAO,OAAO;AAEpB,UAAM,YAAY,OAAO,MAAM,UAAU,WAAW,KAAK,QAAQ;AACjE,UAAM,YAAY,OAAO,MAAM,UAAU,WAAW,KAAK,QAAQ;AACjE,UAAM,YAAY,OAAO,MAAM,UAAU,WAAW,KAAK,QAAQ;AACjE,UAAM,eAAe,OAAO,MAAM,aAAa,WAAW,KAAK,WAAW;AAG1E,QAAI,QAAQ;AACZ,QAAI,cAAc,YAAY;AAC5B,cAAQ;AAAA,IACV,WAAW,WAAW;AACpB,YAAM,YAAY,IAAI,KAAK,SAAS,EAAE,QAAQ;AAC9C,YAAM,MAAM,OAAO,SAAS,SAAS,IAAI,KAAK,IAAI,IAAI,YAAY;AAClE,UAAI,MAAM,oBAAoB;AAE5B,YAAI,OAAO,MAAM,GAAG;AAClB,cAAI;AACF,oBAAQ,KAAK,KAAK,CAAC;AAInB,oBAAQ;AAAA,UACV,SAAS,KAAc;AACrB,kBAAM,OAAQ,KAA2B;AACzC,gBAAI,SAAS,SAAS;AACpB,sBAAQ;AAAA,YACV,OAAO;AACL,sBAAQ;AAAA,YACV;AAAA,UACF;AAAA,QACF,OAAO;AACL,kBAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,WAAW;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}
+{"version":3,"sources":["../../src/cli/status.ts"],"sourcesContent":["import * as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport { NEXT_CONFIG_NAMES } from \"./constants.js\";\nimport {\n  isEndMarkerLine,\n  parseStartMarkerLine,\n} from \"../agent-detection/inject.js\";\n\n/**\n * JSON-based MCP config files that init may create.\n * Includes .glasstrace/mcp.json (CI/generic fallback) in addition to the\n * agent-specific files that uninit.ts handles.\n */\nconst MCP_JSON_FILES = [\".mcp.json\", \".cursor/mcp.json\", \".gemini/settings.json\", \".glasstrace/mcp.json\"] as const;\n\n/**\n * TOML-based MCP config files (Codex uses this format).\n */\nconst MCP_TOML_FILES = [\".codex/config.toml\"] as const;\n\n/**\n * Agent info files that may contain glasstrace marker sections.\n */\nconst AGENT_INFO_FILES = [\n  \"CLAUDE.md\",\n  \"codex.md\",\n  \".cursorrules\",\n] as const;\n\n/**\n * Instrumentation file names in priority order.\n */\nconst INSTRUMENTATION_FILES = [\n  \"instrumentation.ts\",\n  \"instrumentation.js\",\n  \"instrumentation.mjs\",\n  \"src/instrumentation.ts\",\n  \"src/instrumentation.js\",\n  \"src/instrumentation.mjs\",\n] as const;\n\n/**\n * Machine-readable SDK configuration state.\n * This interface is the public contract for AI agents — fields may be added\n * but never removed or renamed without a major version bump.\n */\n/** Runtime state snapshot read from .glasstrace/runtime-state.json. */\nexport interface RuntimeStateSnapshot {\n  /** Whether the runtime state file exists and was readable. */\n  available: boolean;\n  /** Whether the process that wrote the state is likely still running. */\n  stale: boolean;\n  /** Core lifecycle state (e.g., \"ACTIVE\", \"KEY_PENDING\", \"SHUTDOWN\"). */\n  coreState: string | null;\n  /** Auth lifecycle state (e.g., \"ANONYMOUS\", \"AUTHENTICATED\"). */\n  authState: string | null;\n  /** OTel coexistence state (e.g., \"OWNS_PROVIDER\", \"AUTO_ATTACHED\"). */\n  otelState: string | null;\n  /** OTel scenario (e.g., \"A\", \"B-auto\"). */\n  otelScenario: string | null;\n  /** When the state was last written. */\n  updatedAt: string | null;\n  /** PID of the process that wrote the state. */\n  pid: number | null;\n}\n\nexport interface StatusResult {\n  /** Whether @glasstrace/sdk is in package.json dependencies or devDependencies. */\n  installed: boolean;\n  /** Whether the .glasstrace/ directory exists. */\n  initialized: boolean;\n  /** Whether an instrumentation file exists with registerGlasstrace(). */\n  instrumentation: boolean;\n  /** Whether next.config is wrapped with withGlasstraceConfig(). */\n  configWrapped: boolean;\n  /** Whether .glasstrace/anon_key exists. */\n  anonKey: boolean;\n  /** Whether any MCP config file has a glasstrace server entry. */\n  mcpConfigured: boolean;\n  /** Which agent info files have glasstrace marker sections. */\n  agents: string[];\n  /** Runtime state from the running SDK process (if available). */\n  runtime: RuntimeStateSnapshot;\n}\n\n/**\n * Options for the status command.\n */\nexport interface StatusOptions {\n  projectRoot: string;\n}\n\n/**\n * Checks SDK configuration state by reading filesystem markers.\n * This function is read-only — it never modifies files or creates directories.\n */\nexport function runStatus(options: StatusOptions): StatusResult {\n  const root = options.projectRoot;\n\n  return {\n    installed: checkInstalled(root),\n    initialized: checkInitialized(root),\n    instrumentation: checkInstrumentation(root),\n    configWrapped: checkConfigWrapped(root),\n    anonKey: checkAnonKey(root),\n    mcpConfigured: checkMcpConfigured(root),\n    agents: checkAgents(root),\n    runtime: readRuntimeState(root),\n  };\n}\n\nfunction checkInstalled(root: string): boolean {\n  try {\n    const pkgPath = path.join(root, \"package.json\");\n    const content = fs.readFileSync(pkgPath, \"utf-8\");\n    const pkg = JSON.parse(content) as Record<string, unknown>;\n    const deps = pkg[\"dependencies\"] as Record<string, unknown> | undefined;\n    const devDeps = pkg[\"devDependencies\"] as Record<string, unknown> | undefined;\n    return (\n      (deps != null && \"@glasstrace/sdk\" in deps) ||\n      (devDeps != null && \"@glasstrace/sdk\" in devDeps)\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction checkInitialized(root: string): boolean {\n  try {\n    return fs.statSync(path.join(root, \".glasstrace\")).isDirectory();\n  } catch {\n    return false;\n  }\n}\n\nfunction checkInstrumentation(root: string): boolean {\n  for (const name of INSTRUMENTATION_FILES) {\n    try {\n      const content = fs.readFileSync(path.join(root, name), \"utf-8\");\n      if (content.includes(\"registerGlasstrace\")) {\n        return true;\n      }\n    } catch {\n      // File doesn't exist or is unreadable — try next\n    }\n  }\n  return false;\n}\n\nfunction checkConfigWrapped(root: string): boolean {\n  for (const name of NEXT_CONFIG_NAMES) {\n    try {\n      const content = fs.readFileSync(path.join(root, name), \"utf-8\");\n      if (content.includes(\"withGlasstraceConfig\")) {\n        return true;\n      }\n    } catch {\n      // File doesn't exist or is unreadable — try next\n    }\n  }\n  return false;\n}\n\nfunction checkAnonKey(root: string): boolean {\n  try {\n    return fs.statSync(path.join(root, \".glasstrace\", \"anon_key\")).isFile();\n  } catch {\n    return false;\n  }\n}\n\nfunction checkMcpConfigured(root: string): boolean {\n  // Check JSON-based MCP config files\n  for (const name of MCP_JSON_FILES) {\n    try {\n      const content = fs.readFileSync(path.join(root, name), \"utf-8\");\n      const parsed = JSON.parse(content) as Record<string, unknown>;\n      const mcpServers = parsed[\"mcpServers\"] as Record<string, unknown> | undefined;\n      if (mcpServers && typeof mcpServers === \"object\" && \"glasstrace\" in mcpServers) {\n        return true;\n      }\n    } catch {\n      // File doesn't exist, is unreadable, or has invalid JSON — try next\n    }\n  }\n\n  // Check TOML-based MCP config files (Codex)\n  for (const name of MCP_TOML_FILES) {\n    try {\n      const content = fs.readFileSync(path.join(root, name), \"utf-8\");\n      if (content.includes(\"[mcp_servers.glasstrace]\")) {\n        return true;\n      }\n    } catch {\n      // File doesn't exist or is unreadable — try next\n    }\n  }\n\n  return false;\n}\n\nfunction checkAgents(root: string): string[] {\n  const found: string[] = [];\n  for (const name of AGENT_INFO_FILES) {\n    try {\n      const content = fs.readFileSync(path.join(root, name), \"utf-8\");\n      // Use the shared marker parser so SDK-050 stamped markers\n      // (`<!-- glasstrace:mcp:start v=1.5.0 -->` /\n      // `# glasstrace:mcp:start v=1.5.0`) are recognized alongside\n      // legacy unstamped markers. A literal `.includes(...)` check\n      // for the unstamped form would silently regress this status\n      // check the moment a project re-renders its instruction file\n      // under SDK-050+.\n      let hasStart = false;\n      let hasEnd = false;\n      for (const line of content.split(\"\\n\")) {\n        if (parseStartMarkerLine(line) !== null) hasStart = true;\n        else if (isEndMarkerLine(line)) hasEnd = true;\n        if (hasStart && hasEnd) break;\n      }\n      if (hasStart && hasEnd) {\n        found.push(name);\n      }\n    } catch {\n      // File doesn't exist or is unreadable — skip\n    }\n  }\n  return found;\n}\n\nconst STALE_THRESHOLD_MS = 30_000; // 30 seconds\n\nfunction readRuntimeState(root: string): RuntimeStateSnapshot {\n  const empty: RuntimeStateSnapshot = {\n    available: false,\n    stale: false,\n    coreState: null,\n    authState: null,\n    otelState: null,\n    otelScenario: null,\n    updatedAt: null,\n    pid: null,\n  };\n\n  try {\n    const filePath = path.join(root, \".glasstrace\", \"runtime-state.json\");\n    const content = fs.readFileSync(filePath, \"utf-8\");\n    const parsed = JSON.parse(content) as Record<string, unknown>;\n\n    const updatedAt = typeof parsed.updatedAt === \"string\" ? parsed.updatedAt : null;\n    const pid = typeof parsed.pid === \"number\" ? parsed.pid : null;\n    const core = parsed.core as Record<string, unknown> | undefined;\n    const auth = parsed.auth as Record<string, unknown> | undefined;\n    const otel = parsed.otel as Record<string, unknown> | undefined;\n\n    const coreState = typeof core?.state === \"string\" ? core.state : null;\n    const authState = typeof auth?.state === \"string\" ? auth.state : null;\n    const otelState = typeof otel?.state === \"string\" ? otel.state : null;\n    const otelScenario = typeof otel?.scenario === \"string\" ? otel.scenario : null;\n\n    // Staleness detection\n    let stale = false;\n    if (coreState === \"SHUTDOWN\") {\n      stale = false; // Clean shutdown — not stale, just finished\n    } else if (updatedAt) {\n      const updatedMs = new Date(updatedAt).getTime();\n      const age = Number.isFinite(updatedMs) ? Date.now() - updatedMs : Infinity;\n      if (age > STALE_THRESHOLD_MS) {\n        // Check if the process is still running\n        if (pid && pid > 0) {\n          try {\n            process.kill(pid, 0); // Signal 0 = existence check\n            // If we get here, process exists. EPERM would also throw,\n            // but with code \"EPERM\" — meaning the process exists but\n            // we lack permission. Both mean \"not stale.\"\n            stale = false;\n          } catch (err: unknown) {\n            const code = (err as { code?: string })?.code;\n            if (code === \"EPERM\") {\n              stale = false; // Process exists, we just can't signal it\n            } else {\n              stale = true; // ESRCH or other — process gone\n            }\n          }\n        } else {\n          stale = true; // No valid PID — can't verify\n        }\n      }\n    }\n\n    return {\n      available: true,\n      stale,\n      coreState,\n      authState,\n      otelState,\n      otelScenario,\n      updatedAt,\n      pid,\n    };\n  } catch {\n    return empty;\n  }\n}\n"],"mappings":";;;;;;;;;;AAAA,YAAY,QAAQ;AACpB,YAAY,UAAU;AAYtB,IAAM,iBAAiB,CAAC,aAAa,oBAAoB,yBAAyB,sBAAsB;AAKxG,IAAM,iBAAiB,CAAC,oBAAoB;AAK5C,IAAM,mBAAmB;AAAA,EACvB;AAAA,EACA;AAAA,EACA;AACF;AAKA,IAAM,wBAAwB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAyDO,SAAS,UAAU,SAAsC;AAC9D,QAAM,OAAO,QAAQ;AAErB,SAAO;AAAA,IACL,WAAW,eAAe,IAAI;AAAA,IAC9B,aAAa,iBAAiB,IAAI;AAAA,IAClC,iBAAiB,qBAAqB,IAAI;AAAA,IAC1C,eAAe,mBAAmB,IAAI;AAAA,IACtC,SAAS,aAAa,IAAI;AAAA,IAC1B,eAAe,mBAAmB,IAAI;AAAA,IACtC,QAAQ,YAAY,IAAI;AAAA,IACxB,SAAS,iBAAiB,IAAI;AAAA,EAChC;AACF;AAEA,SAAS,eAAe,MAAuB;AAC7C,MAAI;AACF,UAAM,UAAe,UAAK,MAAM,cAAc;AAC9C,UAAM,UAAa,gBAAa,SAAS,OAAO;AAChD,UAAM,MAAM,KAAK,MAAM,OAAO;AAC9B,UAAM,OAAO,IAAI,cAAc;AAC/B,UAAM,UAAU,IAAI,iBAAiB;AACrC,WACG,QAAQ,QAAQ,qBAAqB,QACrC,WAAW,QAAQ,qBAAqB;AAAA,EAE7C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,iBAAiB,MAAuB;AAC/C,MAAI;AACF,WAAU,YAAc,UAAK,MAAM,aAAa,CAAC,EAAE,YAAY;AAAA,EACjE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,qBAAqB,MAAuB;AACnD,aAAW,QAAQ,uBAAuB;AACxC,QAAI;AACF,YAAM,UAAa,gBAAkB,UAAK,MAAM,IAAI,GAAG,OAAO;AAC9D,UAAI,QAAQ,SAAS,oBAAoB,GAAG;AAC1C,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,MAAuB;AACjD,aAAW,QAAQ,mBAAmB;AACpC,QAAI;AACF,YAAM,UAAa,gBAAkB,UAAK,MAAM,IAAI,GAAG,OAAO;AAC9D,UAAI,QAAQ,SAAS,sBAAsB,GAAG;AAC5C,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,aAAa,MAAuB;AAC3C,MAAI;AACF,WAAU,YAAc,UAAK,MAAM,eAAe,UAAU,CAAC,EAAE,OAAO;AAAA,EACxE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,mBAAmB,MAAuB;AAEjD,aAAW,QAAQ,gBAAgB;AACjC,QAAI;AACF,YAAM,UAAa,gBAAkB,UAAK,MAAM,IAAI,GAAG,OAAO;AAC9D,YAAM,SAAS,KAAK,MAAM,OAAO;AACjC,YAAM,aAAa,OAAO,YAAY;AACtC,UAAI,cAAc,OAAO,eAAe,YAAY,gBAAgB,YAAY;AAC9E,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAGA,aAAW,QAAQ,gBAAgB;AACjC,QAAI;AACF,YAAM,UAAa,gBAAkB,UAAK,MAAM,IAAI,GAAG,OAAO;AAC9D,UAAI,QAAQ,SAAS,0BAA0B,GAAG;AAChD,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,YAAY,MAAwB;AAC3C,QAAM,QAAkB,CAAC;AACzB,aAAW,QAAQ,kBAAkB;AACnC,QAAI;AACF,YAAM,UAAa,gBAAkB,UAAK,MAAM,IAAI,GAAG,OAAO;AAQ9D,UAAI,WAAW;AACf,UAAI,SAAS;AACb,iBAAW,QAAQ,QAAQ,MAAM,IAAI,GAAG;AACtC,YAAI,qBAAqB,IAAI,MAAM,KAAM,YAAW;AAAA,iBAC3C,gBAAgB,IAAI,EAAG,UAAS;AACzC,YAAI,YAAY,OAAQ;AAAA,MAC1B;AACA,UAAI,YAAY,QAAQ;AACtB,cAAM,KAAK,IAAI;AAAA,MACjB;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAEA,IAAM,qBAAqB;AAE3B,SAAS,iBAAiB,MAAoC;AAC5D,QAAM,QAA8B;AAAA,IAClC,WAAW;AAAA,IACX,OAAO;AAAA,IACP,WAAW;AAAA,IACX,WAAW;AAAA,IACX,WAAW;AAAA,IACX,cAAc;AAAA,IACd,WAAW;AAAA,IACX,KAAK;AAAA,EACP;AAEA,MAAI;AACF,UAAM,WAAgB,UAAK,MAAM,eAAe,oBAAoB;AACpE,UAAM,UAAa,gBAAa,UAAU,OAAO;AACjD,UAAM,SAAS,KAAK,MAAM,OAAO;AAEjC,UAAM,YAAY,OAAO,OAAO,cAAc,WAAW,OAAO,YAAY;AAC5E,UAAM,MAAM,OAAO,OAAO,QAAQ,WAAW,OAAO,MAAM;AAC1D,UAAM,OAAO,OAAO;AACpB,UAAM,OAAO,OAAO;AACpB,UAAM,OAAO,OAAO;AAEpB,UAAM,YAAY,OAAO,MAAM,UAAU,WAAW,KAAK,QAAQ;AACjE,UAAM,YAAY,OAAO,MAAM,UAAU,WAAW,KAAK,QAAQ;AACjE,UAAM,YAAY,OAAO,MAAM,UAAU,WAAW,KAAK,QAAQ;AACjE,UAAM,eAAe,OAAO,MAAM,aAAa,WAAW,KAAK,WAAW;AAG1E,QAAI,QAAQ;AACZ,QAAI,cAAc,YAAY;AAC5B,cAAQ;AAAA,IACV,WAAW,WAAW;AACpB,YAAM,YAAY,IAAI,KAAK,SAAS,EAAE,QAAQ;AAC9C,YAAM,MAAM,OAAO,SAAS,SAAS,IAAI,KAAK,IAAI,IAAI,YAAY;AAClE,UAAI,MAAM,oBAAoB;AAE5B,YAAI,OAAO,MAAM,GAAG;AAClB,cAAI;AACF,oBAAQ,KAAK,KAAK,CAAC;AAInB,oBAAQ;AAAA,UACV,SAAS,KAAc;AACrB,kBAAM,OAAQ,KAA2B;AACzC,gBAAI,SAAS,SAAS;AACpB,sBAAQ;AAAA,YACV,OAAO;AACL,sBAAQ;AAAA,YACV;AAAA,UACF;AAAA,QACF,OAAO;AACL,kBAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,WAAW;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/cli/uninit.cjs

@@ -274,6 +274,31 @@ function removeDiscoveryFile(projectRoot) {
   };
 }
 
+// src/agent-detection/inject.ts
+var HTML_START_RE = /^<!--\s*glasstrace:mcp:start(?:\s+v=([^\s>]+))?\s*-->$/;
+var HTML_END = "<!-- glasstrace:mcp:end -->";
+var HASH_START_RE = /^#\s*glasstrace:mcp:start(?:\s+v=(\S+))?$/;
+var HASH_END = "# glasstrace:mcp:end";
+function parseStartMarkerLine(line) {
+  const trimmed = line.trim();
+  const html = HTML_START_RE.exec(trimmed);
+  if (html !== null) {
+    return { kind: "html", stamp: html[1] ?? null };
+  }
+  const hash = HASH_START_RE.exec(trimmed);
+  if (hash !== null) {
+    return { kind: "hash", stamp: hash[1] ?? null };
+  }
+  return null;
+}
+function isEndMarker(line) {
+  const trimmed = line.trim();
+  return trimmed === HTML_END || trimmed === HASH_END;
+}
+function isEndMarkerLine(line) {
+  return isEndMarker(line);
+}
+
 // src/cli/uninit.ts
 var MCP_CONFIG_FILES = [".mcp.json", ".cursor/mcp.json", ".gemini/settings.json"];
 var AGENT_INFO_FILES = [
@@ -503,10 +528,9 @@ function removeMarkerSection(content) {
   let startIdx = -1;
   let endIdx = -1;
   for (let i = 0; i < lines.length; i++) {
-    const trimmed = lines[i].trim();
-    if (trimmed === "<!-- glasstrace:mcp:start -->" || trimmed === "# glasstrace:mcp:start") {
+    if (parseStartMarkerLine(lines[i]) !== null) {
       startIdx = i;
-    } else if ((trimmed === "<!-- glasstrace:mcp:end -->" || trimmed === "# glasstrace:mcp:end") && startIdx !== -1) {
+    } else if (isEndMarkerLine(lines[i]) && startIdx !== -1) {
       endIdx = i;
       break;
     }