@morsehq-dev/sdk 0.4.0-rc.1

package/dist/browser/chunk-KRBADE6R.cjs

@@ -0,0 +1,183 @@
+'use strict';
+
+var chunkO4HG3OSK_cjs = require('./chunk-O4HG3OSK.cjs');
+
+// src/_internal/sentry-reporter.ts
+chunkO4HG3OSK_cjs.init_env();
+var SENTRY_DSN = "https://f2f3d4d8c324fe5e439b6d83678116bd@o4511340656656384.ingest.us.sentry.io/4511340719833088";
+var RATE_WINDOW_MS = 60 * 1e3;
+var RATE_LIMIT_PER_WINDOW = 100;
+var rateBuckets = /* @__PURE__ */ new Map();
+var capture = null;
+var sentryInitFailed = false;
+var SAFE_EXTRA_KEYS = /* @__PURE__ */ new Set([
+  "adapter",
+  "module",
+  "function",
+  "operation",
+  "endpoint_host",
+  "sdk_version",
+  "runtime",
+  "platform"
+]);
+function checkRateLimit(fingerprint) {
+  const now = Date.now();
+  const cutoff = now - RATE_WINDOW_MS;
+  const bucket = rateBuckets.get(fingerprint) ?? [];
+  while (bucket.length > 0 && bucket[0] < cutoff) {
+    bucket.shift();
+  }
+  if (bucket.length >= RATE_LIMIT_PER_WINDOW) {
+    rateBuckets.set(fingerprint, bucket);
+    return false;
+  }
+  bucket.push(now);
+  rateBuckets.set(fingerprint, bucket);
+  return true;
+}
+function scrubExtra(extra) {
+  if (!extra) return {};
+  const out = {};
+  for (const [k, v] of Object.entries(extra)) {
+    if (SAFE_EXTRA_KEYS.has(k)) {
+      out[k] = v;
+    }
+  }
+  return out;
+}
+async function ensureSentry() {
+  if (capture !== null) return capture;
+  if (sentryInitFailed) return null;
+  try {
+    let mod = null;
+    let isNode = true;
+    try {
+      mod = await Function("m", "return import(m)")("@sentry/node");
+    } catch {
+      try {
+        mod = await Function("m", "return import(m)")("@sentry/browser");
+        isNode = false;
+      } catch {
+        sentryInitFailed = true;
+        return null;
+      }
+    }
+    if (!mod) {
+      sentryInitFailed = true;
+      return null;
+    }
+    const sentry = mod;
+    const ClientCtor = isNode ? sentry.NodeClient : sentry.BrowserClient;
+    const transport = isNode ? sentry.makeNodeTransport : sentry.makeFetchTransport;
+    if (typeof ClientCtor !== "function" || typeof transport !== "function") {
+      sentryInitFailed = true;
+      return null;
+    }
+    const client = new ClientCtor({
+      dsn: SENTRY_DSN,
+      transport,
+      stackParser: sentry.defaultStackParser,
+      // No integrations: every default one instruments the HOST app (global
+      // handlers, console, fetch/http breadcrumbs). We only ever report
+      // exceptions we hand over explicitly.
+      integrations: [],
+      tracesSampleRate: 0,
+      autoSessionTracking: false,
+      sendDefaultPii: false,
+      // Breadcrumbs are host-application activity, not ours. Never collect.
+      maxBreadcrumbs: 0
+    });
+    if (typeof client.init === "function") client.init();
+    const built = buildCapture(sentry, client);
+    if (built === null) {
+      sentryInitFailed = true;
+      return null;
+    }
+    capture = built;
+    return capture;
+  } catch {
+    sentryInitFailed = true;
+    return null;
+  }
+}
+function buildCapture(sentry, client) {
+  if (typeof sentry.Scope === "function" && sentry.Scope.prototype?.setClient) {
+    return (error, fingerprint, extra) => {
+      const scope = new sentry.Scope();
+      scope.setClient(client);
+      scope.setFingerprint([fingerprint]);
+      for (const [k, v] of Object.entries(extra)) scope.setExtra(k, v);
+      scope.captureException(error);
+    };
+  }
+  if (typeof sentry.Hub === "function") {
+    const hub = new sentry.Hub(client);
+    return (error, fingerprint, extra) => {
+      hub.withScope((scope) => {
+        scope.setFingerprint([fingerprint]);
+        for (const [k, v] of Object.entries(extra)) scope.setExtra(k, v);
+        hub.captureException(error);
+      });
+    };
+  }
+  return null;
+}
+function report(error, options) {
+  try {
+    if (chunkO4HG3OSK_cjs.isTelemetryDisabled()) return;
+    if (!checkRateLimit(options.fingerprint)) return;
+    const errClass = error instanceof Error ? error.name : "Error";
+    const errMessage = error instanceof Error ? error.message : String(error);
+    if (chunkO4HG3OSK_cjs.isDebug()) {
+      console.error(
+        `morse internal error [${options.fingerprint}]: ${errClass}: ${errMessage}`,
+        error
+      );
+    } else {
+      console.warn(`morse internal error [${options.fingerprint}]: ${errClass}: ${errMessage}`);
+    }
+    if (!SENTRY_DSN) ;
+    void ensureSentry().then((captureFn) => {
+      if (!captureFn) return;
+      try {
+        captureFn(error, options.fingerprint, scrubExtra(options.extra));
+      } catch {
+      }
+    });
+  } catch {
+  }
+}
+function _resetForTesting() {
+  rateBuckets.clear();
+  capture = null;
+  sentryInitFailed = false;
+}
+
+// src/_internal/errors.ts
+function absorbErrorsSync(fn, options) {
+  return (...args) => {
+    try {
+      return fn(...args);
+    } catch (err) {
+      report(err, options);
+      return void 0;
+    }
+  };
+}
+function absorbErrorsAsync(fn, options) {
+  return async (...args) => {
+    try {
+      return await fn(...args);
+    } catch (err) {
+      report(err, options);
+      return void 0;
+    }
+  };
+}
+
+exports._resetForTesting = _resetForTesting;
+exports.absorbErrorsAsync = absorbErrorsAsync;
+exports.absorbErrorsSync = absorbErrorsSync;
+exports.report = report;
+//# sourceMappingURL=chunk-KRBADE6R.cjs.map
+//# sourceMappingURL=chunk-KRBADE6R.cjs.map

package/dist/browser/chunk-KRBADE6R.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/_internal/sentry-reporter.ts","../../src/_internal/errors.ts"],"names":["init_env","isTelemetryDisabled","isDebug"],"mappings":";;;;;AA0BAA,0BAAA,EAAA;AAWA,IAAM,UAAA,GACJ,iGAAA;AAGF,IAAM,iBAAiB,EAAA,GAAK,GAAA;AAC5B,IAAM,qBAAA,GAAwB,GAAA;AAE9B,IAAM,WAAA,uBAAyC,GAAA,EAAI;AAKnD,IAAI,OAAA,GAA4B,IAAA;AAChC,IAAI,gBAAA,GAAmB,KAAA;AAEvB,IAAM,eAAA,uBAA2C,GAAA,CAAI;AAAA,EACnD,SAAA;AAAA,EACA,QAAA;AAAA,EACA,UAAA;AAAA,EACA,WAAA;AAAA,EACA,eAAA;AAAA,EACA,aAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,SAAS,eAAe,WAAA,EAA8B;AACpD,EAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,EAAA,MAAM,SAAS,GAAA,GAAM,cAAA;AACrB,EAAA,MAAM,MAAA,GAAS,WAAA,CAAY,GAAA,CAAI,WAAW,KAAK,EAAC;AAGhD,EAAA,OAAO,OAAO,MAAA,GAAS,CAAA,IAAM,MAAA,CAAO,CAAC,IAAe,MAAA,EAAQ;AAC1D,IAAA,MAAA,CAAO,KAAA,EAAM;AAAA,EACf;AACA,EAAA,IAAI,MAAA,CAAO,UAAU,qBAAA,EAAuB;AAC1C,IAAA,WAAA,CAAY,GAAA,CAAI,aAAa,MAAM,CAAA;AACnC,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAA,CAAO,KAAK,GAAG,CAAA;AACf,EAAA,WAAA,CAAY,GAAA,CAAI,aAAa,MAAM,CAAA;AACnC,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,WAAW,KAAA,EAAqE;AACvF,EAAA,IAAI,CAAC,KAAA,EAAO,OAAO,EAAC;AACpB,EAAA,MAAM,MAA+B,EAAC;AACtC,EAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC1C,IAAA,IAAI,eAAA,CAAgB,GAAA,CAAI,CAAC,CAAA,EAAG;AAC1B,MAAA,GAAA,CAAI,CAAC,CAAA,GAAI,CAAA;AAAA,IACX;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;AAaA,eAAe,YAAA,GAA0C;AAEvD,EAAA,IAAI,OAAA,KAAY,MAAM,OAAO,OAAA;AAC7B,EAAA,IAAI,kBAAkB,OAAO,IAAA;AAC7B,EAAA,IAAI;AAGF,IAAA,IAAI,GAAA,GAAe,IAAA;AACnB,IAAA,IAAI,MAAA,GAAS,IAAA;AACb,IAAA,IAAI;AAEF,MAAA,GAAA,GAAM,MAAO,QAAA,CAAS,GAAA,EAAK,kBAAkB,EAAU,cAAc,CAAA;AAAA,IACvE,CAAA,CAAA,MAAQ;AACN,MAAA,IAAI;AAEF,QAAA,GAAA,GAAM,MAAO,QAAA,CAAS,GAAA,EAAK,kBAAkB,EAAU,iBAAiB,CAAA;AACxE,QAAA,MAAA,GAAS,KAAA;AAAA,MACX,CAAA,CAAA,MAAQ;AACN,QAAA,gBAAA,GAAmB,IAAA;AACnB,QAAA,OAAO,IAAA;AAAA,MACT;AAAA,IACF;AACA,IAAA,IAAI,CAAC,GAAA,EAAK;AACR,MAAA,gBAAA,GAAmB,IAAA;AACnB,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,MAAM,MAAA,GAAS,GAAA;AAEf,IAAA,MAAM,UAAA,GAAa,MAAA,GAAS,MAAA,CAAO,UAAA,GAAa,MAAA,CAAO,aAAA;AACvD,IAAA,MAAM,SAAA,GAAY,MAAA,GAAS,MAAA,CAAO,iBAAA,GAAoB,MAAA,CAAO,kBAAA;AAC7D,IAAA,IAAI,OAAO,UAAA,KAAe,UAAA,IAAc,OAAO,cAAc,UAAA,EAAY;AACvE,MAAA,gBAAA,GAAmB,IAAA;AACnB,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW;AAAA,MAC5B,GAAA,EAAK,UAAA;AAAA,MACL,SAAA;AAAA,MACA,aAAa,MAAA,CAAO,kBAAA;AAAA;AAAA;AAAA;AAAA,MAIpB,cAAc,EAAC;AAAA,MACf,gBAAA,EAAkB,CAAA;AAAA,MAClB,mBAAA,EAAqB,KAAA;AAAA,MACrB,cAAA,EAAgB,KAAA;AAAA;AAAA,MAEhB,cAAA,EAAgB;AAAA,KACjB,CAAA;AACD,IAAA,IAAI,OAAO,MAAA,CAAO,IAAA,KAAS,UAAA,SAAmB,IAAA,EAAK;AAEnD,IAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,MAAA,EAAQ,MAAM,CAAA;AACzC,IAAA,IAAI,UAAU,IAAA,EAAM;AAClB,MAAA,gBAAA,GAAmB,IAAA;AACnB,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,OAAA,GAAU,KAAA;AACV,IAAA,OAAO,OAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,gBAAA,GAAmB,IAAA;AACnB,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAYO,SAAS,YAAA,CAAa,QAAa,MAAA,EAA+B;AACvE,EAAA,IAAI,OAAO,MAAA,CAAO,KAAA,KAAU,cAAc,MAAA,CAAO,KAAA,CAAM,WAAW,SAAA,EAAW;AAE3E,IAAA,OAAO,CAAC,KAAA,EAAO,WAAA,EAAa,KAAA,KAAU;AACpC,MAAA,MAAM,KAAA,GAAQ,IAAI,MAAA,CAAO,KAAA,EAAM;AAC/B,MAAA,KAAA,CAAM,UAAU,MAAM,CAAA;AACtB,MAAA,KAAA,CAAM,cAAA,CAAe,CAAC,WAAW,CAAC,CAAA;AAClC,MAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG,KAAA,CAAM,QAAA,CAAS,CAAA,EAAG,CAAC,CAAA;AAC/D,MAAA,KAAA,CAAM,iBAAiB,KAAK,CAAA;AAAA,IAC9B,CAAA;AAAA,EACF;AACA,EAAA,IAAI,OAAO,MAAA,CAAO,GAAA,KAAQ,UAAA,EAAY;AAEpC,IAAA,MAAM,GAAA,GAAM,IAAI,MAAA,CAAO,GAAA,CAAI,MAAM,CAAA;AACjC,IAAA,OAAO,CAAC,KAAA,EAAO,WAAA,EAAa,KAAA,KAAU;AAEpC,MAAA,GAAA,CAAI,SAAA,CAAU,CAAC,KAAA,KAAe;AAC5B,QAAA,KAAA,CAAM,cAAA,CAAe,CAAC,WAAW,CAAC,CAAA;AAClC,QAAA,KAAA,MAAW,CAAC,CAAA,EAAG,CAAC,CAAA,IAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG,KAAA,CAAM,QAAA,CAAS,CAAA,EAAG,CAAC,CAAA;AAC/D,QAAA,GAAA,CAAI,iBAAiB,KAAK,CAAA;AAAA,MAC5B,CAAC,CAAA;AAAA,IACH,CAAA;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAcO,SAAS,MAAA,CAAO,OAAgB,OAAA,EAA8B;AACnE,EAAA,IAAI;AACF,IAAA,IAAIC,uCAAoB,EAAG;AAC3B,IAAA,IAAI,CAAC,cAAA,CAAe,OAAA,CAAQ,WAAW,CAAA,EAAG;AAE1C,IAAA,MAAM,QAAA,GAAW,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,IAAA,GAAO,OAAA;AACvD,IAAA,MAAM,aAAa,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK,CAAA;AAExE,IAAA,IAAIC,2BAAQ,EAAG;AACb,MAAA,OAAA,CAAQ,KAAA;AAAA,QACN,yBAAyB,OAAA,CAAQ,WAAW,CAAA,GAAA,EAAM,QAAQ,KAAK,UAAU,CAAA,CAAA;AAAA,QACzE;AAAA,OACF;AAAA,IACF,CAAA,MAAO;AACL,MAAA,OAAA,CAAQ,IAAA,CAAK,yBAAyB,OAAA,CAAQ,WAAW,MAAM,QAAQ,CAAA,EAAA,EAAK,UAAU,CAAA,CAAE,CAAA;AAAA,IAC1F;AAEA,IAAA,IAAI,CAAC,UAAA,EAAY;AAEjB,IAAA,KAAK,YAAA,EAAa,CAAE,IAAA,CAAK,CAAC,SAAA,KAAc;AACtC,MAAA,IAAI,CAAC,SAAA,EAAW;AAChB,MAAA,IAAI;AACF,QAAA,SAAA,CAAU,OAAO,OAAA,CAAQ,WAAA,EAAa,UAAA,CAAW,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,MACjE,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF,CAAC,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAOO,SAAS,gBAAA,GAAyB;AACvC,EAAA,WAAA,CAAY,KAAA,EAAM;AAClB,EAAA,OAAA,GAAU,IAAA;AACV,EAAA,gBAAA,GAAmB,KAAA;AACrB;;;AC1NO,SAAS,gBAAA,CACd,IACA,OAAA,EACyC;AACzC,EAAA,OAAO,IAAI,IAAA,KAAqC;AAC9C,IAAA,IAAI;AACF,MAAA,OAAO,EAAA,CAAG,GAAG,IAAI,CAAA;AAAA,IACnB,SAAS,GAAA,EAAK;AACZ,MAAA,MAAA,CAAO,KAAK,OAAO,CAAA;AACnB,MAAA,OAAO,MAAA;AAAA,IACT;AAAA,EACF,CAAA;AACF;AAOO,SAAS,iBAAA,CACd,IACA,OAAA,EACkD;AAClD,EAAA,OAAO,UAAU,IAAA,KAA8C;AAC7D,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,EAAA,CAAG,GAAG,IAAI,CAAA;AAAA,IACzB,SAAS,GAAA,EAAK;AACZ,MAAA,MAAA,CAAO,KAAK,OAAO,CAAA;AACnB,MAAA,OAAO,MAAA;AAAA,IACT;AAAA,EACF,CAAA;AACF","file":"chunk-KRBADE6R.cjs","sourcesContent":["/**\n * Out-of-band error reporting to Morse's internal Sentry instance.\n *\n * Mirrors the Python SDK's `_internal/sentry_reporter.py`. When the SDK\n * absorbs an internal exception (per the non-invasive guarantee), it\n * reports the error here. Everything in this module is itself wrapped\n * to swallow errors — if Sentry reporting fails, that failure must not\n * propagate either.\n *\n * Customer data is NEVER included. Reports carry only:\n *   - Error class + message\n *   - Sanitized stack trace (file paths kept, locals stripped)\n *   - SDK version\n *   - Adapter name (when applicable)\n *   - Runtime / OS metadata\n *   - Content-free fingerprint of the call site\n *\n * The Sentry DSN is a build-time constant. Write-only — even if the DSN\n * leaks, it can only post errors to Morse's project, never read.\n *\n * Phase 6c status: DSN is a placeholder (`\"\"`). When Sanji provides the\n * real DSN, the constant below is updated and reports start flowing.\n * Until then, errors fall back to `console.warn` (or the host logger\n * once we add a logger abstraction).\n */\n\nimport { isDebug, isTelemetryDisabled } from \"./env\";\n\n// ---------------------------------------------------------------------------\n// Hardcoded DSN constant — Morse-owned, write-only.\n//\n// ISOLATION (MHQ-729): we must never call `Sentry.init()`. That binds a client\n// process-wide, so a host app that already uses Sentry would have ITS errors\n// redirected into Morse's project the first time we absorb an internal error.\n// `ensureSentry` builds a private Client on its own Scope instead.\n// ---------------------------------------------------------------------------\n\nconst SENTRY_DSN =\n  \"https://f2f3d4d8c324fe5e439b6d83678116bd@o4511340656656384.ingest.us.sentry.io/4511340719833088\";\n\n// Rate limit: max 100 events per fingerprint per 60-second sliding window.\nconst RATE_WINDOW_MS = 60 * 1000;\nconst RATE_LIMIT_PER_WINDOW = 100;\n\nconst rateBuckets: Map<string, number[]> = new Map();\n\n/** `(error, fingerprint, safeExtra) => void`, bound to a Morse-private client. */\ntype CaptureFn = (error: unknown, fingerprint: string, extra: Record<string, unknown>) => void;\n\nlet capture: CaptureFn | null = null;\nlet sentryInitFailed = false;\n\nconst SAFE_EXTRA_KEYS: ReadonlySet<string> = new Set([\n  \"adapter\",\n  \"module\",\n  \"function\",\n  \"operation\",\n  \"endpoint_host\",\n  \"sdk_version\",\n  \"runtime\",\n  \"platform\",\n]);\n\nfunction checkRateLimit(fingerprint: string): boolean {\n  const now = Date.now();\n  const cutoff = now - RATE_WINDOW_MS;\n  const bucket = rateBuckets.get(fingerprint) ?? [];\n\n  // Evict old entries.\n  while (bucket.length > 0 && (bucket[0] as number) < cutoff) {\n    bucket.shift();\n  }\n  if (bucket.length >= RATE_LIMIT_PER_WINDOW) {\n    rateBuckets.set(fingerprint, bucket);\n    return false;\n  }\n  bucket.push(now);\n  rateBuckets.set(fingerprint, bucket);\n  return true;\n}\n\nfunction scrubExtra(extra: Record<string, unknown> | undefined): Record<string, unknown> {\n  if (!extra) return {};\n  const out: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(extra)) {\n    if (SAFE_EXTRA_KEYS.has(k)) {\n      out[k] = v;\n    }\n  }\n  return out;\n}\n\n/**\n * Build a capture function bound to a PRIVATE Sentry client.\n *\n * MHQ-729: never calls `Sentry.init()`. We construct a Client directly and\n * attach it to a Scope we own, so the host application's global Sentry client\n * (if any) is left exactly as its owner configured it.\n *\n * Returns `null` when no Sentry package is installed or the version exposes\n * neither the v8 `Scope.setClient` nor the v7 `Hub` isolation primitive — in\n * that case reports stay local-log-only, which is the safe direction.\n */\nasync function ensureSentry(): Promise<CaptureFn | null> {\n  if (!SENTRY_DSN) return null;\n  if (capture !== null) return capture;\n  if (sentryInitFailed) return null;\n  try {\n    // Import dynamically so the SDK doesn't pay the cost when DSN is unset.\n    // @sentry/node first, falling back to @sentry/browser.\n    let mod: unknown = null;\n    let isNode = true;\n    try {\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      mod = await (Function(\"m\", \"return import(m)\") as any)(\"@sentry/node\");\n    } catch {\n      try {\n        // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        mod = await (Function(\"m\", \"return import(m)\") as any)(\"@sentry/browser\");\n        isNode = false;\n      } catch {\n        sentryInitFailed = true;\n        return null;\n      }\n    }\n    if (!mod) {\n      sentryInitFailed = true;\n      return null;\n    }\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    const sentry = mod as any;\n\n    const ClientCtor = isNode ? sentry.NodeClient : sentry.BrowserClient;\n    const transport = isNode ? sentry.makeNodeTransport : sentry.makeFetchTransport;\n    if (typeof ClientCtor !== \"function\" || typeof transport !== \"function\") {\n      sentryInitFailed = true;\n      return null;\n    }\n\n    const client = new ClientCtor({\n      dsn: SENTRY_DSN,\n      transport,\n      stackParser: sentry.defaultStackParser,\n      // No integrations: every default one instruments the HOST app (global\n      // handlers, console, fetch/http breadcrumbs). We only ever report\n      // exceptions we hand over explicitly.\n      integrations: [],\n      tracesSampleRate: 0,\n      autoSessionTracking: false,\n      sendDefaultPii: false,\n      // Breadcrumbs are host-application activity, not ours. Never collect.\n      maxBreadcrumbs: 0,\n    });\n    if (typeof client.init === \"function\") client.init();\n\n    const built = buildCapture(sentry, client);\n    if (built === null) {\n      sentryInitFailed = true;\n      return null;\n    }\n    capture = built;\n    return capture;\n  } catch {\n    sentryInitFailed = true;\n    return null;\n  }\n}\n\n/**\n * Bind `client` to an isolated scope, preferring the v8 API over v7's Hub.\n *\n * Exported for tests: the dynamic import in `ensureSentry` goes through\n * `Function(\"m\", \"return import(m)\")`, which sidesteps vitest's module mocking,\n * so this — where the actual isolation decision lives — is tested directly.\n *\n * @internal\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport function buildCapture(sentry: any, client: any): CaptureFn | null {\n  if (typeof sentry.Scope === \"function\" && sentry.Scope.prototype?.setClient) {\n    // @sentry/* v8+: a Scope carries its own client.\n    return (error, fingerprint, extra) => {\n      const scope = new sentry.Scope();\n      scope.setClient(client);\n      scope.setFingerprint([fingerprint]);\n      for (const [k, v] of Object.entries(extra)) scope.setExtra(k, v);\n      scope.captureException(error);\n    };\n  }\n  if (typeof sentry.Hub === \"function\") {\n    // @sentry/* v7: an isolated Hub owns the client.\n    const hub = new sentry.Hub(client);\n    return (error, fingerprint, extra) => {\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      hub.withScope((scope: any) => {\n        scope.setFingerprint([fingerprint]);\n        for (const [k, v] of Object.entries(extra)) scope.setExtra(k, v);\n        hub.captureException(error);\n      });\n    };\n  }\n  return null;\n}\n\nexport interface ReportOptions {\n  fingerprint: string;\n  extra?: Record<string, unknown>;\n}\n\n/**\n * Report an internal SDK error out-of-band. Never throws.\n *\n * @param error       The exception caught.\n * @param options     fingerprint used for grouping + rate limiting; extra\n *                    is scrubbed against an allow-list before sending.\n */\nexport function report(error: unknown, options: ReportOptions): void {\n  try {\n    if (isTelemetryDisabled()) return;\n    if (!checkRateLimit(options.fingerprint)) return;\n\n    const errClass = error instanceof Error ? error.name : \"Error\";\n    const errMessage = error instanceof Error ? error.message : String(error);\n\n    if (isDebug()) {\n      console.error(\n        `morse internal error [${options.fingerprint}]: ${errClass}: ${errMessage}`,\n        error,\n      );\n    } else {\n      console.warn(`morse internal error [${options.fingerprint}]: ${errClass}: ${errMessage}`);\n    }\n\n    if (!SENTRY_DSN) return;\n\n    void ensureSentry().then((captureFn) => {\n      if (!captureFn) return;\n      try {\n        captureFn(error, options.fingerprint, scrubExtra(options.extra));\n      } catch {\n        // Sentry send error — swallow.\n      }\n    });\n  } catch {\n    // Absolute last-resort: nothing here may propagate.\n  }\n}\n\n/**\n * Test-only reset hook — clears rate limits and sentry init state.\n *\n * @internal\n */\nexport function _resetForTesting(): void {\n  rateBuckets.clear();\n  capture = null;\n  sentryInitFailed = false;\n}\n","/**\n * Non-invasive error isolation — the foundational SDK guarantee.\n *\n * Mirrors Python's `_internal/errors.py` `@absorb_errors` decorator. Every\n * public SDK function and every adapter-installed wrapper is wrapped with\n * `absorbErrors()`. The wrapper catches all exceptions and reports them\n * out-of-band to the Sentry reporter, then returns a benign value\n * (typically `undefined`) instead of propagating.\n *\n * Foundational principle:\n *\n *     Telemetry must never break the host application.\n *\n * The customer's call returns its original result (or `undefined`)\n * regardless of whether the SDK's recording path succeeded.\n *\n * Note on async: TypeScript-land has no `KeyboardInterrupt` equivalent —\n * the analogue is \"no exceptions are special\". We absorb everything,\n * and rely on Node's `process.exit` / browser navigation to tear down\n * the runtime cleanly.\n */\n\nimport { report } from \"./sentry-reporter\";\n\nexport interface AbsorbErrorsOptions {\n  /**\n   * Stable identifier for grouping. Used for Sentry fingerprinting and\n   * the rate limiter (max 100 events per fingerprint per minute).\n   */\n  fingerprint: string;\n  /** Optional metadata attached to the report; scrubbed against an allow-list. */\n  extra?: Record<string, unknown>;\n}\n\n/**\n * Wrap a synchronous function so that any thrown exception is absorbed\n * (reported out-of-band) instead of propagating. Returns `undefined` on\n * absorbed error.\n */\nexport function absorbErrorsSync<TArgs extends unknown[], TReturn>(\n  fn: (...args: TArgs) => TReturn,\n  options: AbsorbErrorsOptions,\n): (...args: TArgs) => TReturn | undefined {\n  return (...args: TArgs): TReturn | undefined => {\n    try {\n      return fn(...args);\n    } catch (err) {\n      report(err, options);\n      return undefined;\n    }\n  };\n}\n\n/**\n * Wrap an async function so that any rejection or thrown exception is\n * absorbed (reported out-of-band) instead of propagating. Returns\n * `undefined` on absorbed error.\n */\nexport function absorbErrorsAsync<TArgs extends unknown[], TReturn>(\n  fn: (...args: TArgs) => Promise<TReturn>,\n  options: AbsorbErrorsOptions,\n): (...args: TArgs) => Promise<TReturn | undefined> {\n  return async (...args: TArgs): Promise<TReturn | undefined> => {\n    try {\n      return await fn(...args);\n    } catch (err) {\n      report(err, options);\n      return undefined;\n    }\n  };\n}\n\n/**\n * Higher-order alias chosen to read like the Python decorator: pass a\n * function in, get a wrapped version back. Resolves to the sync or async\n * variant based on the runtime return value (a Promise). Defaults to\n * sync at the type level; use `absorbErrorsAsync` directly for proper\n * async typing.\n */\nexport const absorbErrors = absorbErrorsSync;\n"]}

package/dist/browser/chunk-MCJYZH6W.cjs

@@ -0,0 +1,415 @@
+'use strict';
+
+var chunkKRBADE6R_cjs = require('./chunk-KRBADE6R.cjs');
+
+// src/_agent-sdk-common/redaction.ts
+var DEFAULT_TOOL_ARG_MAX_BYTES = 2048;
+var DEFAULT_TOOL_OUTPUT_MAX_BYTES = 4096;
+var DEFAULT_BLOB_TRIGGER_BYTES = 4096;
+var REDACTION_ERROR_FALLBACK = "<redaction_error>";
+function summarizeImpl(value, opts, defaultMax) {
+  const maxBytes = opts.maxBytes ?? defaultMax;
+  const stripBlobs = opts.stripBlobs !== false;
+  let str;
+  if (typeof value === "string") {
+    str = value;
+  } else if (value === void 0) {
+    str = "undefined";
+  } else {
+    str = canonicalJsonStringify(value);
+  }
+  if (stripBlobs) {
+    str = stripBlobsFromString(str);
+  }
+  return truncateUtf8(str, maxBytes);
+}
+var summarizeToolInputInner = (value, opts) => summarizeImpl(value, opts ?? {}, DEFAULT_TOOL_ARG_MAX_BYTES);
+var summarizeToolOutputInner = (value, opts) => summarizeImpl(value, opts ?? {}, DEFAULT_TOOL_OUTPUT_MAX_BYTES);
+var safeSummarizeToolInput = chunkKRBADE6R_cjs.absorbErrorsSync(summarizeToolInputInner, {
+  fingerprint: "agent-sdk.redaction.summarizeToolInput"
+});
+var safeSummarizeToolOutput = chunkKRBADE6R_cjs.absorbErrorsSync(summarizeToolOutputInner, {
+  fingerprint: "agent-sdk.redaction.summarizeToolOutput"
+});
+function summarizeToolInput(value, opts) {
+  const out = safeSummarizeToolInput(value, opts);
+  return out === void 0 ? REDACTION_ERROR_FALLBACK : out;
+}
+function summarizeToolOutput(value, opts) {
+  const out = safeSummarizeToolOutput(value, opts);
+  return out === void 0 ? REDACTION_ERROR_FALLBACK : out;
+}
+var BINARY_KINDS = /* @__PURE__ */ new Set(["image", "audio", "video", "screenshot"]);
+function summarizeBinaryBlockInner(block) {
+  if (block === null || typeof block !== "object") return null;
+  const b = block;
+  const type = typeof b.type === "string" ? b.type : null;
+  if (type === null || !BINARY_KINDS.has(type)) return null;
+  const kind = type;
+  let base64 = null;
+  let mime;
+  const source = b.source;
+  if (source !== null && typeof source === "object") {
+    const s = source;
+    if (typeof s.data === "string") base64 = s.data;
+    if (typeof s.media_type === "string") mime = s.media_type;
+    else if (typeof s.mediaType === "string") mime = s.mediaType;
+  }
+  if (base64 === null) {
+    const url = typeof b.url === "string" ? b.url : typeof b.dataUrl === "string" ? b.dataUrl : null;
+    if (url !== null && url.startsWith("data:")) {
+      const parsed = parseDataUrl(url);
+      if (parsed !== null) {
+        base64 = parsed.base64;
+        if (mime === void 0) mime = parsed.mime;
+      }
+    }
+  }
+  if (base64 === null && typeof b.data === "string") {
+    base64 = b.data;
+  }
+  let dims;
+  const w = b.width;
+  const h = b.height;
+  if (typeof w === "number" && typeof h === "number") {
+    dims = { width: w, height: h };
+  }
+  let hash;
+  let byte_len;
+  if (base64 !== null) {
+    const bytes = decodeBase64ToBytes(base64);
+    hash = sha256HexBytes(bytes);
+    byte_len = bytes.length;
+  } else {
+    hash = sha256Hex("");
+    byte_len = 0;
+  }
+  const out = { kind, hash, byte_len };
+  if (dims !== void 0) out.dims = dims;
+  if (mime !== void 0) out.mime = mime;
+  return out;
+}
+chunkKRBADE6R_cjs.absorbErrorsSync(summarizeBinaryBlockInner, {
+  fingerprint: "agent-sdk.redaction.summarizeBinaryBlock"
+});
+function redactContentBlocksInner(blocks) {
+  return blocks.map((block) => {
+    const summary = summarizeBinaryBlockInner(block);
+    return summary === null ? block : summary;
+  });
+}
+chunkKRBADE6R_cjs.absorbErrorsSync(redactContentBlocksInner, {
+  fingerprint: "agent-sdk.redaction.redactContentBlocks"
+});
+var DATA_URL_RE = /data:[A-Za-z0-9.+/-]*(?:;[A-Za-z0-9.=+/-]+)*?;base64,[A-Za-z0-9+/=]+/g;
+var LONG_BASE64_RE = /[A-Za-z0-9+/]{100,}={0,2}/g;
+function stripBlobsFromString(s) {
+  let out = s.replace(DATA_URL_RE, (match) => {
+    if (match.length < DEFAULT_BLOB_TRIGGER_BYTES) return match;
+    const parsed = parseDataUrl(match);
+    if (parsed === null) {
+      return blobMarker(sha256Hex(match), match.length);
+    }
+    const bytes = decodeBase64ToBytes(parsed.base64);
+    return blobMarker(sha256HexBytes(bytes), bytes.length);
+  });
+  out = out.replace(LONG_BASE64_RE, (match) => {
+    if (match.length < DEFAULT_BLOB_TRIGGER_BYTES) return match;
+    const bytes = decodeBase64ToBytes(match);
+    return blobMarker(sha256HexBytes(bytes), bytes.length);
+  });
+  return out;
+}
+function blobMarker(hashHex, byteLen) {
+  return `<blob:sha256:${hashHex}:${byteLen}>`;
+}
+function parseDataUrl(url) {
+  if (!url.startsWith("data:")) return null;
+  const comma = url.indexOf(",");
+  if (comma < 0) return null;
+  const header = url.slice(5, comma);
+  const payload = url.slice(comma + 1);
+  if (!header.includes("base64")) return null;
+  const parts = header.split(";");
+  const mime = parts[0] !== void 0 && parts[0] !== "" ? parts[0] : "application/octet-stream";
+  return { mime, base64: payload };
+}
+function decodeBase64ToBytes(b64) {
+  const cleaned = b64.replace(/\s+/g, "");
+  try {
+    if (typeof process !== "undefined" && process.versions?.node) {
+      const dynamicRequire = Function("m", "return require(m)");
+      const bufferMod = dynamicRequire("node:buffer");
+      if (bufferMod?.Buffer) {
+        const buf = bufferMod.Buffer.from(cleaned, "base64");
+        return new Uint8Array(buf);
+      }
+    }
+  } catch {
+  }
+  try {
+    if (typeof atob === "function") {
+      const bin = atob(cleaned);
+      const out = new Uint8Array(bin.length);
+      for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+      return out;
+    }
+  } catch {
+  }
+  return pureBase64Decode(cleaned);
+}
+var B64_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+var B64_LOOKUP = (() => {
+  const m = {};
+  for (let i = 0; i < B64_ALPHABET.length; i++) m[B64_ALPHABET[i]] = i;
+  return m;
+})();
+function pureBase64Decode(s) {
+  const stripped = s.replace(/=+$/, "");
+  const out = [];
+  let buffer = 0;
+  let bits = 0;
+  for (let i = 0; i < stripped.length; i++) {
+    const ch = stripped[i];
+    const v = B64_LOOKUP[ch];
+    if (v === void 0) continue;
+    buffer = buffer << 6 | v;
+    bits += 6;
+    if (bits >= 8) {
+      bits -= 8;
+      out.push(buffer >> bits & 255);
+    }
+  }
+  return new Uint8Array(out);
+}
+function canonicalJsonStringify(value) {
+  return JSON.stringify(value, function replacer(_key, val) {
+    if (val && typeof val === "object" && !Array.isArray(val)) {
+      const obj = val;
+      const sorted = {};
+      for (const k of Object.keys(obj).sort()) {
+        sorted[k] = obj[k];
+      }
+      return sorted;
+    }
+    return val;
+  });
+}
+function truncateUtf8(text, maxBytes) {
+  if (maxBytes <= 0) return "";
+  if (text.length <= maxBytes / 4) return text;
+  const bytes = utf8Encode(text);
+  if (bytes.length <= maxBytes) return text;
+  let cut = maxBytes;
+  while (cut > 0 && (bytes[cut] & 192) === 128) {
+    cut--;
+  }
+  return utf8Decode(bytes.subarray(0, cut));
+}
+function utf8Encode(text) {
+  if (typeof TextEncoder !== "undefined") {
+    return new TextEncoder().encode(text);
+  }
+  const out = [];
+  for (let i = 0; i < text.length; i++) {
+    const code = text.charCodeAt(i);
+    if (code < 128) {
+      out.push(code);
+    } else if (code < 2048) {
+      out.push(192 | code >> 6, 128 | code & 63);
+    } else {
+      out.push(224 | code >> 12, 128 | code >> 6 & 63, 128 | code & 63);
+    }
+  }
+  return new Uint8Array(out);
+}
+function utf8Decode(bytes) {
+  if (typeof TextDecoder !== "undefined") {
+    return new TextDecoder("utf-8").decode(bytes);
+  }
+  let out = "";
+  for (let i = 0; i < bytes.length; ) {
+    const b = bytes[i];
+    if (b < 128) {
+      out += String.fromCharCode(b);
+      i++;
+    } else if (b < 224) {
+      out += String.fromCharCode((b & 31) << 6 | bytes[i + 1] & 63);
+      i += 2;
+    } else {
+      out += String.fromCharCode(
+        (b & 15) << 12 | (bytes[i + 1] & 63) << 6 | bytes[i + 2] & 63
+      );
+      i += 3;
+    }
+  }
+  return out;
+}
+function sha256Hex(text) {
+  try {
+    if (typeof process !== "undefined" && process.versions?.node) {
+      const dynamicRequire = Function("m", "return require(m)");
+      const cryptoMod = dynamicRequire("node:crypto");
+      if (cryptoMod?.createHash) {
+        return cryptoMod.createHash("sha256").update(text).digest("hex");
+      }
+    }
+  } catch {
+  }
+  return purejsSha256Bytes(utf8Encode(text));
+}
+function sha256HexBytes(bytes) {
+  try {
+    if (typeof process !== "undefined" && process.versions?.node) {
+      const dynamicRequire = Function("m", "return require(m)");
+      const cryptoMod = dynamicRequire("node:crypto");
+      if (cryptoMod?.createHash) {
+        return cryptoMod.createHash("sha256").update(bytes).digest("hex");
+      }
+    }
+  } catch {
+  }
+  return purejsSha256Bytes(bytes);
+}
+function purejsSha256Bytes(msg) {
+  const K = [
+    1116352408,
+    1899447441,
+    3049323471,
+    3921009573,
+    961987163,
+    1508970993,
+    2453635748,
+    2870763221,
+    3624381080,
+    310598401,
+    607225278,
+    1426881987,
+    1925078388,
+    2162078206,
+    2614888103,
+    3248222580,
+    3835390401,
+    4022224774,
+    264347078,
+    604807628,
+    770255983,
+    1249150122,
+    1555081692,
+    1996064986,
+    2554220882,
+    2821834349,
+    2952996808,
+    3210313671,
+    3336571891,
+    3584528711,
+    113926993,
+    338241895,
+    666307205,
+    773529912,
+    1294757372,
+    1396182291,
+    1695183700,
+    1986661051,
+    2177026350,
+    2456956037,
+    2730485921,
+    2820302411,
+    3259730800,
+    3345764771,
+    3516065817,
+    3600352804,
+    4094571909,
+    275423344,
+    430227734,
+    506948616,
+    659060556,
+    883997877,
+    958139571,
+    1322822218,
+    1537002063,
+    1747873779,
+    1955562222,
+    2024104815,
+    2227730452,
+    2361852424,
+    2428436474,
+    2756734187,
+    3204031479,
+    3329325298
+  ];
+  const H = [
+    1779033703,
+    3144134277,
+    1013904242,
+    2773480762,
+    1359893119,
+    2600822924,
+    528734635,
+    1541459225
+  ];
+  const msgLen = msg.length;
+  const bitLen = msgLen * 8;
+  const padded = new Uint8Array(msgLen + 9 + 63 >> 6 << 6);
+  padded.set(msg);
+  padded[msgLen] = 128;
+  const lo = (bitLen & 4294967295) >>> 0;
+  const hi = Math.floor(bitLen / 4294967296) >>> 0;
+  padded[padded.length - 8] = hi >>> 24 & 255;
+  padded[padded.length - 7] = hi >>> 16 & 255;
+  padded[padded.length - 6] = hi >>> 8 & 255;
+  padded[padded.length - 5] = hi & 255;
+  padded[padded.length - 4] = lo >>> 24 & 255;
+  padded[padded.length - 3] = lo >>> 16 & 255;
+  padded[padded.length - 2] = lo >>> 8 & 255;
+  padded[padded.length - 1] = lo & 255;
+  const W = new Uint32Array(64);
+  for (let chunk = 0; chunk < padded.length; chunk += 64) {
+    for (let i = 0; i < 16; i++) {
+      W[i] = (padded[chunk + i * 4] << 24 | padded[chunk + i * 4 + 1] << 16 | padded[chunk + i * 4 + 2] << 8 | padded[chunk + i * 4 + 3]) >>> 0;
+    }
+    for (let i = 16; i < 64; i++) {
+      const s0 = rotr(W[i - 15], 7) ^ rotr(W[i - 15], 18) ^ W[i - 15] >>> 3;
+      const s1 = rotr(W[i - 2], 17) ^ rotr(W[i - 2], 19) ^ W[i - 2] >>> 10;
+      W[i] = W[i - 16] + s0 + W[i - 7] + s1 >>> 0;
+    }
+    let [a, b, c, d, e, f, g, h] = H;
+    for (let i = 0; i < 64; i++) {
+      const S1 = rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25);
+      const ch = e & f ^ ~e & g;
+      const temp1 = h + S1 + ch + K[i] + W[i] >>> 0;
+      const S0 = rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22);
+      const maj = a & b ^ a & c ^ b & c;
+      const temp2 = S0 + maj >>> 0;
+      h = g;
+      g = f;
+      f = e;
+      e = d + temp1 >>> 0;
+      d = c;
+      c = b;
+      b = a;
+      a = temp1 + temp2 >>> 0;
+    }
+    H[0] = H[0] + a >>> 0;
+    H[1] = H[1] + b >>> 0;
+    H[2] = H[2] + c >>> 0;
+    H[3] = H[3] + d >>> 0;
+    H[4] = H[4] + e >>> 0;
+    H[5] = H[5] + f >>> 0;
+    H[6] = H[6] + g >>> 0;
+    H[7] = H[7] + h >>> 0;
+  }
+  let hex = "";
+  for (const v of H) {
+    hex += v.toString(16).padStart(8, "0");
+  }
+  return hex;
+}
+function rotr(x, n) {
+  return (x >>> n | x << 32 - n) >>> 0;
+}
+
+exports.summarizeToolInput = summarizeToolInput;
+exports.summarizeToolOutput = summarizeToolOutput;
+//# sourceMappingURL=chunk-MCJYZH6W.cjs.map
+//# sourceMappingURL=chunk-MCJYZH6W.cjs.map