@morsehq-dev/sdk 0.5.0 → 0.6.0-rc.1

package/dist/browser/{chunk-2X64OY2L.cjs → chunk-LIP3XCTK.cjs}

@@ -1,11 +1,11 @@
 'use strict';
 
-var chunk4CMVMTFB_cjs = require('./chunk-4CMVMTFB.cjs');
-var chunk6BNMYEMW_cjs = require('./chunk-6BNMYEMW.cjs');
+var chunkPSNZZBQJ_cjs = require('./chunk-PSNZZBQJ.cjs');
+var chunk4IUHXUCJ_cjs = require('./chunk-4IUHXUCJ.cjs');
 
 // src/log.ts
-chunk6BNMYEMW_cjs.init_redaction();
-chunk6BNMYEMW_cjs.init_tracing();
+chunk4IUHXUCJ_cjs.init_redaction();
+chunk4IUHXUCJ_cjs.init_tracing();
 var DEFAULT_SERVICE_NAME = "morse-sdk-ts";
 var ensureInitialized = () => {
 };
@@ -14,14 +14,14 @@ function _setEnsureInitialized(fn) {
 }
 function logImpl(message, options = {}) {
   ensureInitialized();
-  const transport = chunk6BNMYEMW_cjs.getTransport();
+  const transport = chunk4IUHXUCJ_cjs.getTransport();
   if (transport === null) {
     return;
   }
   let traceId = options.traceId ?? null;
   let spanId = options.spanId ?? null;
   if (traceId === null || spanId === null) {
-    const state = chunk6BNMYEMW_cjs.getActiveTraceState();
+    const state = chunk4IUHXUCJ_cjs.getActiveTraceState();
     if (state !== null) {
       if (traceId === null) traceId = state.traceId;
       if (spanId === null && state.spanStack.length > 0) {
@@ -31,10 +31,10 @@ function logImpl(message, options = {}) {
   }
   const severity = (options.severity ?? "info").toUpperCase();
   const serviceName = options.serviceName ?? DEFAULT_SERVICE_NAME;
-  const config = chunk6BNMYEMW_cjs.getRedactionConfig();
+  const config = chunk4IUHXUCJ_cjs.getRedactionConfig();
   const rawAttributes = options.attributes ?? {};
-  const redactedAttributes = config.enabled ? chunk6BNMYEMW_cjs.redactValue(rawAttributes, config) : rawAttributes;
-  const redactedBody = config.enabled ? chunk6BNMYEMW_cjs.redactValue(String(message), config) : String(message);
+  const redactedAttributes = config.enabled ? chunk4IUHXUCJ_cjs.redactValue(rawAttributes, config) : rawAttributes;
+  const redactedBody = config.enabled ? chunk4IUHXUCJ_cjs.redactValue(String(message), config) : String(message);
   const record = {
     timestamp: (/* @__PURE__ */ new Date()).toISOString(),
     severity,
@@ -46,11 +46,11 @@ function logImpl(message, options = {}) {
   };
   transport.track({ logs: [record] });
 }
-var log = chunk4CMVMTFB_cjs.absorbErrorsSync(logImpl, {
+var log = chunkPSNZZBQJ_cjs.absorbErrorsSync(logImpl, {
   fingerprint: "morse.log"
 });
 
 exports._setEnsureInitialized = _setEnsureInitialized;
 exports.log = log;
-//# sourceMappingURL=chunk-2X64OY2L.cjs.map
-//# sourceMappingURL=chunk-2X64OY2L.cjs.map
+//# sourceMappingURL=chunk-LIP3XCTK.cjs.map
+//# sourceMappingURL=chunk-LIP3XCTK.cjs.map

package/dist/browser/{chunk-2X64OY2L.cjs.map → chunk-LIP3XCTK.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../../src/log.ts"],"names":["init_redaction","init_tracing","getTransport","getActiveTraceState","getRedactionConfig","redactValue","absorbErrorsSync"],"mappings":";;;;;;AA8BAA,gCAAA,EAAA;AACAC,8BAAA,EAAA;AA2BA,IAAM,oBAAA,GAAuB,cAAA;AAS7B,IAAI,oBAAgC,MAAM;AAE1C,CAAA;AAGO,SAAS,sBAAsB,EAAA,EAAsB;AAC1D,EAAA,iBAAA,GAAoB,EAAA;AACtB;AAEA,SAAS,OAAA,CAAQ,OAAA,EAAiB,OAAA,GAAsB,EAAC,EAAS;AAGhE,EAAA,iBAAA,EAAkB;AAClB,EAAA,MAAM,YAAkCC,8BAAA,EAAa;AACrD,EAAA,IAAI,cAAc,IAAA,EAAM;AAGtB,IAAA;AAAA,EACF;AAMA,EAAA,IAAI,OAAA,GAAyB,QAAQ,OAAA,IAAW,IAAA;AAChD,EAAA,IAAI,MAAA,GAAwB,QAAQ,MAAA,IAAU,IAAA;AAC9C,EAAA,IAAI,OAAA,KAAY,IAAA,IAAQ,MAAA,KAAW,IAAA,EAAM;AACvC,IAAA,MAAM,QAAQC,qCAAA,EAAoB;AAClC,IAAA,IAAI,UAAU,IAAA,EAAM;AAClB,MAAA,IAAI,OAAA,KAAY,IAAA,EAAM,OAAA,GAAU,KAAA,CAAM,OAAA;AACtC,MAAA,IAAI,MAAA,KAAW,IAAA,IAAQ,KAAA,CAAM,SAAA,CAAU,SAAS,CAAA,EAAG;AACjD,QAAA,MAAA,GAAS,MAAM,SAAA,CAAU,KAAA,CAAM,SAAA,CAAU,MAAA,GAAS,CAAC,CAAA,CAAG,OAAA;AAAA,MACxD;AAAA,IACF;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,GAAA,CAAY,OAAA,CAAQ,QAAA,IAAY,MAAA,EAAQ,WAAA,EAAY;AAC1D,EAAA,MAAM,WAAA,GAAc,QAAQ,WAAA,IAAe,oBAAA;AAK3C,EAAA,MAAM,SAASC,oCAAA,EAAmB;AAClC,EAAA,MAAM,aAAA,GAAgB,OAAA,CAAQ,UAAA,IAAc,EAAC;AAC7C,EAAA,MAAM,qBAAqB,MAAA,CAAO,OAAA,GAC7BC,6BAAA,CAAY,aAAA,EAAe,MAAM,CAAA,GAClC,aAAA;AACJ,EAAA,MAAM,YAAA,GAAe,MAAA,CAAO,OAAA,GACvBA,6BAAA,CAAY,MAAA,CAAO,OAAO,CAAA,EAAG,MAAM,CAAA,GACpC,MAAA,CAAO,OAAO,CAAA;AAElB,EAAA,MAAM,MAAA,GAAS;AAAA,IACb,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,IAClC,QAAA;AAAA,IACA,YAAA,EAAc,WAAA;AAAA,IACd,IAAA,EAAM,YAAA;AAAA,IACN,UAAA,EAAY,kBAAA;AAAA,IACZ,QAAA,EAAU,OAAA;AAAA,IACV,OAAA,EAAS;AAAA,GACX;AAEA,EAAA,SAAA,CAAU,MAAM,EAAE,IAAA,EAAM,CAAC,MAAM,GAAG,CAAA;AACpC;AAmCO,IAAM,GAAA,GAAMC,mCAAiB,OAAA,EAAS;AAAA,EAC3C,WAAA,EAAa;AACf,CAAC","file":"chunk-2X64OY2L.cjs","sourcesContent":["/**\n * Phase 12.5 Tier 1.2 — TypeScript SDK `log()` export.\n *\n * Closes the TS side of Feature #4 \"Gap A\": before this module, customers\n * using the TS SDK had no way to populate the Logs tab of a trace's\n * Correlation panel without standing up their own OTel collector. The\n * Python SDK already had `morse.log(...)` (AGE-240); this is the\n * cross-language peer.\n *\n * Semantics mirror Python's `morse.log()`\n * (`apps/sdk/python/src/morse/__init__.py:360-411`):\n *\n *   - Default severity: \"info\" (case-normalised to upper on the wire).\n *   - Default service_name: \"morse-sdk-ts\" (overridable).\n *   - Auto-reads the active trace_id + span_id from the SDK's existing\n *     `node:async_hooks.AsyncLocalStorage` context (re-uses\n *     `getActiveTraceState()` — the same primitive `run()`/`span()` use).\n *   - Batched: the record is enqueued on the existing `BatchTransport`,\n *     which flushes it to `/api/v1/logs/ingest` (derived from the traces\n *     batch endpoint) on the next tick. NO synchronous fetch per call.\n *   - Internal errors are absorbed via `absorbErrorsSync` so they never\n *     propagate into the customer's logging call. Mirrors the Python\n *     `@absorb_errors` decorator pattern.\n *\n * Wire shape: `{ logs: [{ timestamp, severity, service_name, body,\n * attributes, trace_id, span_id }] }`. See `apps/api/apps/logs/\n * controllers.py:66-134` for the API contract.\n */\n\nimport { absorbErrorsSync } from \"./_internal/errors\";\nimport { redactValue } from \"./_internal/redaction\";\nimport {\n  getActiveTraceState,\n  getRedactionConfig,\n  getTransport,\n  type TransportLike,\n} from \"./_internal/tracing\";\n\n/** Log severity — case-insensitive on input, upper-cased on the wire. */\nexport type LogSeverity = \"trace\" | \"debug\" | \"info\" | \"warn\" | \"error\" | \"fatal\";\n\n/** Options accepted by `log()`. */\nexport interface LogOptions {\n  /** Default: `\"info\"`. Upper-cased server-side. */\n  severity?: LogSeverity;\n  /** Free-form structured fields persisted on the record. */\n  attributes?: Record<string, unknown>;\n  /**\n   * Override the auto-detected trace_id. Use only when emitting on\n   * behalf of a known external trace (rare).\n   */\n  traceId?: string;\n  /** Override the auto-detected span_id. Same caveat as `traceId`. */\n  spanId?: string;\n  /** Logical service tag. Default: `\"morse-sdk-ts\"`. */\n  serviceName?: string;\n}\n\nconst DEFAULT_SERVICE_NAME = \"morse-sdk-ts\";\n\n/**\n * Lazy-init hook injected by `index.ts`. Allows `log()` to participate\n * in env-driven auto-init (matching the behaviour of `track()` /\n * `record()`) without `log.ts` reaching into the singleton state.\n *\n * @internal\n */\nlet ensureInitialized: () => void = () => {\n  /* default no-op; replaced from index.ts */\n};\n\n/** @internal */\nexport function _setEnsureInitialized(fn: () => void): void {\n  ensureInitialized = fn;\n}\n\nfunction logImpl(message: string, options: LogOptions = {}): void {\n  // Match Python semantics: env-driven auto-init kicks in if the SDK\n  // hasn't been explicitly init()'d yet but MORSE_API_KEY is set.\n  ensureInitialized();\n  const transport: TransportLike | null = getTransport();\n  if (transport === null) {\n    // SDK not initialised — silent no-op. Matches Python behaviour\n    // (`_ensure_initialized()` short-circuit).\n    return;\n  }\n\n  // Auto-pull trace + span IDs from the active context. Re-uses the\n  // exact same context primitive that `track()` / `run()` / `span()`\n  // use, so a `log()` call inside an `await run(...)` callback will\n  // see the active trace's IDs.\n  let traceId: string | null = options.traceId ?? null;\n  let spanId: string | null = options.spanId ?? null;\n  if (traceId === null || spanId === null) {\n    const state = getActiveTraceState();\n    if (state !== null) {\n      if (traceId === null) traceId = state.traceId;\n      if (spanId === null && state.spanStack.length > 0) {\n        spanId = state.spanStack[state.spanStack.length - 1]!.span_id;\n      }\n    }\n  }\n\n  const severity = (options.severity ?? \"info\").toUpperCase();\n  const serviceName = options.serviceName ?? DEFAULT_SERVICE_NAME;\n\n  // PII redaction reuses the trace path's allow-list config. Mirrors\n  // the Python client's `self._redaction_config.redact_value(payload)`\n  // call.\n  const config = getRedactionConfig();\n  const rawAttributes = options.attributes ?? {};\n  const redactedAttributes = config.enabled\n    ? (redactValue(rawAttributes, config) as Record<string, unknown>)\n    : rawAttributes;\n  const redactedBody = config.enabled\n    ? (redactValue(String(message), config) as string)\n    : String(message);\n\n  const record = {\n    timestamp: new Date().toISOString(),\n    severity,\n    service_name: serviceName,\n    body: redactedBody,\n    attributes: redactedAttributes,\n    trace_id: traceId,\n    span_id: spanId,\n  };\n\n  transport.track({ logs: [record] });\n}\n\n/**\n * Emit a log record correlated to the current trace context.\n *\n * Auto-correlates to the surrounding `morse.run()` /\n * `morse.span()` if one is active. Inside a trace, the record's\n * `trace_id` + `span_id` are filled in from `AsyncLocalStorage`;\n * outside a trace, both fields are `null` and the record is still\n * accepted by the backend (it surfaces in the service-wide Logs view\n * but not on any individual trace's Correlation panel).\n *\n * Non-blocking. Batched alongside trace events on the existing\n * transport — flushes at the SDK's configured interval (default 2s).\n * Internal errors are absorbed; this call never throws.\n *\n * Silent no-op when the SDK isn't initialised (no `MORSE_API_KEY`\n * and no explicit `init()` call).\n *\n * @example\n * ```ts\n * import { init, runTraced, log } from \"@morsehq-dev/sdk\";\n *\n * init({ apiKey: process.env.MORSE_API_KEY });\n *\n * await runTraced({ agentName: \"lead-qualifier\" }, async () => {\n *   log(\"starting search\", { attributes: { query: \"morse\" } });\n *   const results = await search();\n *   log(\"search complete\", {\n *     severity: \"info\",\n *     attributes: { result_count: results.length },\n *   });\n * });\n * ```\n */\nexport const log = absorbErrorsSync(logImpl, {\n  fingerprint: \"morse.log\",\n});\n"]}
+{"version":3,"sources":["../../src/log.ts"],"names":["init_redaction","init_tracing","getTransport","getActiveTraceState","getRedactionConfig","redactValue","absorbErrorsSync"],"mappings":";;;;;;AA8BAA,gCAAA,EAAA;AACAC,8BAAA,EAAA;AA2BA,IAAM,oBAAA,GAAuB,cAAA;AAS7B,IAAI,oBAAgC,MAAM;AAE1C,CAAA;AAGO,SAAS,sBAAsB,EAAA,EAAsB;AAC1D,EAAA,iBAAA,GAAoB,EAAA;AACtB;AAEA,SAAS,OAAA,CAAQ,OAAA,EAAiB,OAAA,GAAsB,EAAC,EAAS;AAGhE,EAAA,iBAAA,EAAkB;AAClB,EAAA,MAAM,YAAkCC,8BAAA,EAAa;AACrD,EAAA,IAAI,cAAc,IAAA,EAAM;AAGtB,IAAA;AAAA,EACF;AAMA,EAAA,IAAI,OAAA,GAAyB,QAAQ,OAAA,IAAW,IAAA;AAChD,EAAA,IAAI,MAAA,GAAwB,QAAQ,MAAA,IAAU,IAAA;AAC9C,EAAA,IAAI,OAAA,KAAY,IAAA,IAAQ,MAAA,KAAW,IAAA,EAAM;AACvC,IAAA,MAAM,QAAQC,qCAAA,EAAoB;AAClC,IAAA,IAAI,UAAU,IAAA,EAAM;AAClB,MAAA,IAAI,OAAA,KAAY,IAAA,EAAM,OAAA,GAAU,KAAA,CAAM,OAAA;AACtC,MAAA,IAAI,MAAA,KAAW,IAAA,IAAQ,KAAA,CAAM,SAAA,CAAU,SAAS,CAAA,EAAG;AACjD,QAAA,MAAA,GAAS,MAAM,SAAA,CAAU,KAAA,CAAM,SAAA,CAAU,MAAA,GAAS,CAAC,CAAA,CAAG,OAAA;AAAA,MACxD;AAAA,IACF;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,GAAA,CAAY,OAAA,CAAQ,QAAA,IAAY,MAAA,EAAQ,WAAA,EAAY;AAC1D,EAAA,MAAM,WAAA,GAAc,QAAQ,WAAA,IAAe,oBAAA;AAK3C,EAAA,MAAM,SAASC,oCAAA,EAAmB;AAClC,EAAA,MAAM,aAAA,GAAgB,OAAA,CAAQ,UAAA,IAAc,EAAC;AAC7C,EAAA,MAAM,qBAAqB,MAAA,CAAO,OAAA,GAC7BC,6BAAA,CAAY,aAAA,EAAe,MAAM,CAAA,GAClC,aAAA;AACJ,EAAA,MAAM,YAAA,GAAe,MAAA,CAAO,OAAA,GACvBA,6BAAA,CAAY,MAAA,CAAO,OAAO,CAAA,EAAG,MAAM,CAAA,GACpC,MAAA,CAAO,OAAO,CAAA;AAElB,EAAA,MAAM,MAAA,GAAS;AAAA,IACb,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,IAClC,QAAA;AAAA,IACA,YAAA,EAAc,WAAA;AAAA,IACd,IAAA,EAAM,YAAA;AAAA,IACN,UAAA,EAAY,kBAAA;AAAA,IACZ,QAAA,EAAU,OAAA;AAAA,IACV,OAAA,EAAS;AAAA,GACX;AAEA,EAAA,SAAA,CAAU,MAAM,EAAE,IAAA,EAAM,CAAC,MAAM,GAAG,CAAA;AACpC;AAmCO,IAAM,GAAA,GAAMC,mCAAiB,OAAA,EAAS;AAAA,EAC3C,WAAA,EAAa;AACf,CAAC","file":"chunk-LIP3XCTK.cjs","sourcesContent":["/**\n * Phase 12.5 Tier 1.2 — TypeScript SDK `log()` export.\n *\n * Closes the TS side of Feature #4 \"Gap A\": before this module, customers\n * using the TS SDK had no way to populate the Logs tab of a trace's\n * Correlation panel without standing up their own OTel collector. The\n * Python SDK already had `morse.log(...)` (AGE-240); this is the\n * cross-language peer.\n *\n * Semantics mirror Python's `morse.log()`\n * (`apps/sdk/python/src/morse/__init__.py:360-411`):\n *\n *   - Default severity: \"info\" (case-normalised to upper on the wire).\n *   - Default service_name: \"morse-sdk-ts\" (overridable).\n *   - Auto-reads the active trace_id + span_id from the SDK's existing\n *     `node:async_hooks.AsyncLocalStorage` context (re-uses\n *     `getActiveTraceState()` — the same primitive `run()`/`span()` use).\n *   - Batched: the record is enqueued on the existing `BatchTransport`,\n *     which flushes it to `/api/v1/logs/ingest` (derived from the traces\n *     batch endpoint) on the next tick. NO synchronous fetch per call.\n *   - Internal errors are absorbed via `absorbErrorsSync` so they never\n *     propagate into the customer's logging call. Mirrors the Python\n *     `@absorb_errors` decorator pattern.\n *\n * Wire shape: `{ logs: [{ timestamp, severity, service_name, body,\n * attributes, trace_id, span_id }] }`. See `apps/api/apps/logs/\n * controllers.py:66-134` for the API contract.\n */\n\nimport { absorbErrorsSync } from \"./_internal/errors\";\nimport { redactValue } from \"./_internal/redaction\";\nimport {\n  getActiveTraceState,\n  getRedactionConfig,\n  getTransport,\n  type TransportLike,\n} from \"./_internal/tracing\";\n\n/** Log severity — case-insensitive on input, upper-cased on the wire. */\nexport type LogSeverity = \"trace\" | \"debug\" | \"info\" | \"warn\" | \"error\" | \"fatal\";\n\n/** Options accepted by `log()`. */\nexport interface LogOptions {\n  /** Default: `\"info\"`. Upper-cased server-side. */\n  severity?: LogSeverity;\n  /** Free-form structured fields persisted on the record. */\n  attributes?: Record<string, unknown>;\n  /**\n   * Override the auto-detected trace_id. Use only when emitting on\n   * behalf of a known external trace (rare).\n   */\n  traceId?: string;\n  /** Override the auto-detected span_id. Same caveat as `traceId`. */\n  spanId?: string;\n  /** Logical service tag. Default: `\"morse-sdk-ts\"`. */\n  serviceName?: string;\n}\n\nconst DEFAULT_SERVICE_NAME = \"morse-sdk-ts\";\n\n/**\n * Lazy-init hook injected by `index.ts`. Allows `log()` to participate\n * in env-driven auto-init (matching the behaviour of `track()` /\n * `record()`) without `log.ts` reaching into the singleton state.\n *\n * @internal\n */\nlet ensureInitialized: () => void = () => {\n  /* default no-op; replaced from index.ts */\n};\n\n/** @internal */\nexport function _setEnsureInitialized(fn: () => void): void {\n  ensureInitialized = fn;\n}\n\nfunction logImpl(message: string, options: LogOptions = {}): void {\n  // Match Python semantics: env-driven auto-init kicks in if the SDK\n  // hasn't been explicitly init()'d yet but MORSE_API_KEY is set.\n  ensureInitialized();\n  const transport: TransportLike | null = getTransport();\n  if (transport === null) {\n    // SDK not initialised — silent no-op. Matches Python behaviour\n    // (`_ensure_initialized()` short-circuit).\n    return;\n  }\n\n  // Auto-pull trace + span IDs from the active context. Re-uses the\n  // exact same context primitive that `track()` / `run()` / `span()`\n  // use, so a `log()` call inside an `await run(...)` callback will\n  // see the active trace's IDs.\n  let traceId: string | null = options.traceId ?? null;\n  let spanId: string | null = options.spanId ?? null;\n  if (traceId === null || spanId === null) {\n    const state = getActiveTraceState();\n    if (state !== null) {\n      if (traceId === null) traceId = state.traceId;\n      if (spanId === null && state.spanStack.length > 0) {\n        spanId = state.spanStack[state.spanStack.length - 1]!.span_id;\n      }\n    }\n  }\n\n  const severity = (options.severity ?? \"info\").toUpperCase();\n  const serviceName = options.serviceName ?? DEFAULT_SERVICE_NAME;\n\n  // PII redaction reuses the trace path's allow-list config. Mirrors\n  // the Python client's `self._redaction_config.redact_value(payload)`\n  // call.\n  const config = getRedactionConfig();\n  const rawAttributes = options.attributes ?? {};\n  const redactedAttributes = config.enabled\n    ? (redactValue(rawAttributes, config) as Record<string, unknown>)\n    : rawAttributes;\n  const redactedBody = config.enabled\n    ? (redactValue(String(message), config) as string)\n    : String(message);\n\n  const record = {\n    timestamp: new Date().toISOString(),\n    severity,\n    service_name: serviceName,\n    body: redactedBody,\n    attributes: redactedAttributes,\n    trace_id: traceId,\n    span_id: spanId,\n  };\n\n  transport.track({ logs: [record] });\n}\n\n/**\n * Emit a log record correlated to the current trace context.\n *\n * Auto-correlates to the surrounding `morse.run()` /\n * `morse.span()` if one is active. Inside a trace, the record's\n * `trace_id` + `span_id` are filled in from `AsyncLocalStorage`;\n * outside a trace, both fields are `null` and the record is still\n * accepted by the backend (it surfaces in the service-wide Logs view\n * but not on any individual trace's Correlation panel).\n *\n * Non-blocking. Batched alongside trace events on the existing\n * transport — flushes at the SDK's configured interval (default 2s).\n * Internal errors are absorbed; this call never throws.\n *\n * Silent no-op when the SDK isn't initialised (no `MORSE_API_KEY`\n * and no explicit `init()` call).\n *\n * @example\n * ```ts\n * import { init, runTraced, log } from \"@morsehq-dev/sdk\";\n *\n * init({ apiKey: process.env.MORSE_API_KEY });\n *\n * await runTraced({ agentName: \"lead-qualifier\" }, async () => {\n *   log(\"starting search\", { attributes: { query: \"morse\" } });\n *   const results = await search();\n *   log(\"search complete\", {\n *     severity: \"info\",\n *     attributes: { result_count: results.length },\n *   });\n * });\n * ```\n */\nexport const log = absorbErrorsSync(logImpl, {\n  fingerprint: \"morse.log\",\n});\n"]}

package/dist/browser/{chunk-T6Z6UIBN.js → chunk-OUQAH27A.js}

@@ -1,4 +1,4 @@
-import { init_diagnostics, report } from './chunk-6T6ZPOKZ.js';
+import { init_diagnostics, report } from './chunk-PXHTLCEU.js';
 
 // src/_internal/errors.ts
 init_diagnostics();
@@ -24,5 +24,5 @@ function absorbErrorsAsync(fn, options) {
 }
 
 export { absorbErrorsAsync, absorbErrorsSync };
-//# sourceMappingURL=chunk-T6Z6UIBN.js.map
-//# sourceMappingURL=chunk-T6Z6UIBN.js.map
+//# sourceMappingURL=chunk-OUQAH27A.js.map
+//# sourceMappingURL=chunk-OUQAH27A.js.map

package/dist/browser/{chunk-T6Z6UIBN.js.map → chunk-OUQAH27A.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../../src/_internal/errors.ts"],"names":[],"mappings":";;;AAsBA,gBAAA,EAAA;AAiBO,SAAS,gBAAA,CACd,IACA,OAAA,EACyC;AACzC,EAAA,OAAO,IAAI,IAAA,KAAqC;AAC9C,IAAA,IAAI;AACF,MAAA,OAAO,EAAA,CAAG,GAAG,IAAI,CAAA;AAAA,IACnB,SAAS,GAAA,EAAK;AACZ,MAAA,MAAA,CAAO,KAAK,OAAO,CAAA;AACnB,MAAA,OAAO,MAAA;AAAA,IACT;AAAA,EACF,CAAA;AACF;AAOO,SAAS,iBAAA,CACd,IACA,OAAA,EACkD;AAClD,EAAA,OAAO,UAAU,IAAA,KAA8C;AAC7D,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,EAAA,CAAG,GAAG,IAAI,CAAA;AAAA,IACzB,SAAS,GAAA,EAAK;AACZ,MAAA,MAAA,CAAO,KAAK,OAAO,CAAA;AACnB,MAAA,OAAO,MAAA;AAAA,IACT;AAAA,EACF,CAAA;AACF","file":"chunk-T6Z6UIBN.js","sourcesContent":["/**\n * Non-invasive error isolation — the foundational SDK guarantee.\n *\n * Mirrors Python's `_internal/errors.py` `@absorb_errors` decorator. Every\n * public SDK function and every adapter-installed wrapper is wrapped with\n * `absorbErrors()`. The wrapper catches all exceptions and reports them\n * out-of-band to Morse's own diagnostics endpoint, then returns a benign value\n * (typically `undefined`) instead of propagating.\n *\n * Foundational principle:\n *\n *     Telemetry must never break the host application.\n *\n * The customer's call returns its original result (or `undefined`)\n * regardless of whether the SDK's recording path succeeded.\n *\n * Note on async: TypeScript-land has no `KeyboardInterrupt` equivalent —\n * the analogue is \"no exceptions are special\". We absorb everything,\n * and rely on Node's `process.exit` / browser navigation to tear down\n * the runtime cleanly.\n */\n\nimport { report } from \"./diagnostics\";\n\nexport interface AbsorbErrorsOptions {\n  /**\n   * Stable identifier for grouping. Used for server-side grouping and\n   * the rate limiter (max 100 events per fingerprint per minute).\n   */\n  fingerprint: string;\n  /** Optional metadata attached to the report; scrubbed against an allow-list. */\n  extra?: Record<string, unknown>;\n}\n\n/**\n * Wrap a synchronous function so that any thrown exception is absorbed\n * (reported out-of-band) instead of propagating. Returns `undefined` on\n * absorbed error.\n */\nexport function absorbErrorsSync<TArgs extends unknown[], TReturn>(\n  fn: (...args: TArgs) => TReturn,\n  options: AbsorbErrorsOptions,\n): (...args: TArgs) => TReturn | undefined {\n  return (...args: TArgs): TReturn | undefined => {\n    try {\n      return fn(...args);\n    } catch (err) {\n      report(err, options);\n      return undefined;\n    }\n  };\n}\n\n/**\n * Wrap an async function so that any rejection or thrown exception is\n * absorbed (reported out-of-band) instead of propagating. Returns\n * `undefined` on absorbed error.\n */\nexport function absorbErrorsAsync<TArgs extends unknown[], TReturn>(\n  fn: (...args: TArgs) => Promise<TReturn>,\n  options: AbsorbErrorsOptions,\n): (...args: TArgs) => Promise<TReturn | undefined> {\n  return async (...args: TArgs): Promise<TReturn | undefined> => {\n    try {\n      return await fn(...args);\n    } catch (err) {\n      report(err, options);\n      return undefined;\n    }\n  };\n}\n\n/**\n * Higher-order alias chosen to read like the Python decorator: pass a\n * function in, get a wrapped version back. Resolves to the sync or async\n * variant based on the runtime return value (a Promise). Defaults to\n * sync at the type level; use `absorbErrorsAsync` directly for proper\n * async typing.\n */\nexport const absorbErrors = absorbErrorsSync;\n"]}
+{"version":3,"sources":["../../src/_internal/errors.ts"],"names":[],"mappings":";;;AAsBA,gBAAA,EAAA;AAiBO,SAAS,gBAAA,CACd,IACA,OAAA,EACyC;AACzC,EAAA,OAAO,IAAI,IAAA,KAAqC;AAC9C,IAAA,IAAI;AACF,MAAA,OAAO,EAAA,CAAG,GAAG,IAAI,CAAA;AAAA,IACnB,SAAS,GAAA,EAAK;AACZ,MAAA,MAAA,CAAO,KAAK,OAAO,CAAA;AACnB,MAAA,OAAO,MAAA;AAAA,IACT;AAAA,EACF,CAAA;AACF;AAOO,SAAS,iBAAA,CACd,IACA,OAAA,EACkD;AAClD,EAAA,OAAO,UAAU,IAAA,KAA8C;AAC7D,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,EAAA,CAAG,GAAG,IAAI,CAAA;AAAA,IACzB,SAAS,GAAA,EAAK;AACZ,MAAA,MAAA,CAAO,KAAK,OAAO,CAAA;AACnB,MAAA,OAAO,MAAA;AAAA,IACT;AAAA,EACF,CAAA;AACF","file":"chunk-OUQAH27A.js","sourcesContent":["/**\n * Non-invasive error isolation — the foundational SDK guarantee.\n *\n * Mirrors Python's `_internal/errors.py` `@absorb_errors` decorator. Every\n * public SDK function and every adapter-installed wrapper is wrapped with\n * `absorbErrors()`. The wrapper catches all exceptions and reports them\n * out-of-band to Morse's own diagnostics endpoint, then returns a benign value\n * (typically `undefined`) instead of propagating.\n *\n * Foundational principle:\n *\n *     Telemetry must never break the host application.\n *\n * The customer's call returns its original result (or `undefined`)\n * regardless of whether the SDK's recording path succeeded.\n *\n * Note on async: TypeScript-land has no `KeyboardInterrupt` equivalent —\n * the analogue is \"no exceptions are special\". We absorb everything,\n * and rely on Node's `process.exit` / browser navigation to tear down\n * the runtime cleanly.\n */\n\nimport { report } from \"./diagnostics\";\n\nexport interface AbsorbErrorsOptions {\n  /**\n   * Stable identifier for grouping. Used for server-side grouping and\n   * the rate limiter (max 100 events per fingerprint per minute).\n   */\n  fingerprint: string;\n  /** Optional metadata attached to the report; scrubbed against an allow-list. */\n  extra?: Record<string, unknown>;\n}\n\n/**\n * Wrap a synchronous function so that any thrown exception is absorbed\n * (reported out-of-band) instead of propagating. Returns `undefined` on\n * absorbed error.\n */\nexport function absorbErrorsSync<TArgs extends unknown[], TReturn>(\n  fn: (...args: TArgs) => TReturn,\n  options: AbsorbErrorsOptions,\n): (...args: TArgs) => TReturn | undefined {\n  return (...args: TArgs): TReturn | undefined => {\n    try {\n      return fn(...args);\n    } catch (err) {\n      report(err, options);\n      return undefined;\n    }\n  };\n}\n\n/**\n * Wrap an async function so that any rejection or thrown exception is\n * absorbed (reported out-of-band) instead of propagating. Returns\n * `undefined` on absorbed error.\n */\nexport function absorbErrorsAsync<TArgs extends unknown[], TReturn>(\n  fn: (...args: TArgs) => Promise<TReturn>,\n  options: AbsorbErrorsOptions,\n): (...args: TArgs) => Promise<TReturn | undefined> {\n  return async (...args: TArgs): Promise<TReturn | undefined> => {\n    try {\n      return await fn(...args);\n    } catch (err) {\n      report(err, options);\n      return undefined;\n    }\n  };\n}\n\n/**\n * Higher-order alias chosen to read like the Python decorator: pass a\n * function in, get a wrapped version back. Resolves to the sync or async\n * variant based on the runtime return value (a Promise). Defaults to\n * sync at the type level; use `absorbErrorsAsync` directly for proper\n * async typing.\n */\nexport const absorbErrors = absorbErrorsSync;\n"]}

package/dist/browser/{chunk-4CMVMTFB.cjs → chunk-PSNZZBQJ.cjs}

@@ -1,15 +1,15 @@
 'use strict';
 
-var chunk6BNMYEMW_cjs = require('./chunk-6BNMYEMW.cjs');
+var chunk4IUHXUCJ_cjs = require('./chunk-4IUHXUCJ.cjs');
 
 // src/_internal/errors.ts
-chunk6BNMYEMW_cjs.init_diagnostics();
+chunk4IUHXUCJ_cjs.init_diagnostics();
 function absorbErrorsSync(fn, options) {
   return (...args) => {
     try {
       return fn(...args);
     } catch (err) {
-      chunk6BNMYEMW_cjs.report(err, options);
+      chunk4IUHXUCJ_cjs.report(err, options);
       return void 0;
     }
   };
@@ -19,7 +19,7 @@ function absorbErrorsAsync(fn, options) {
     try {
       return await fn(...args);
     } catch (err) {
-      chunk6BNMYEMW_cjs.report(err, options);
+      chunk4IUHXUCJ_cjs.report(err, options);
       return void 0;
     }
   };
@@ -27,5 +27,5 @@ function absorbErrorsAsync(fn, options) {
 
 exports.absorbErrorsAsync = absorbErrorsAsync;
 exports.absorbErrorsSync = absorbErrorsSync;
-//# sourceMappingURL=chunk-4CMVMTFB.cjs.map
-//# sourceMappingURL=chunk-4CMVMTFB.cjs.map
+//# sourceMappingURL=chunk-PSNZZBQJ.cjs.map
+//# sourceMappingURL=chunk-PSNZZBQJ.cjs.map

package/dist/browser/{chunk-4CMVMTFB.cjs.map → chunk-PSNZZBQJ.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../../src/_internal/errors.ts"],"names":["init_diagnostics","report"],"mappings":";;;;;AAsBAA,kCAAA,EAAA;AAiBO,SAAS,gBAAA,CACd,IACA,OAAA,EACyC;AACzC,EAAA,OAAO,IAAI,IAAA,KAAqC;AAC9C,IAAA,IAAI;AACF,MAAA,OAAO,EAAA,CAAG,GAAG,IAAI,CAAA;AAAA,IACnB,SAAS,GAAA,EAAK;AACZ,MAAAC,wBAAA,CAAO,KAAK,OAAO,CAAA;AACnB,MAAA,OAAO,MAAA;AAAA,IACT;AAAA,EACF,CAAA;AACF;AAOO,SAAS,iBAAA,CACd,IACA,OAAA,EACkD;AAClD,EAAA,OAAO,UAAU,IAAA,KAA8C;AAC7D,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,EAAA,CAAG,GAAG,IAAI,CAAA;AAAA,IACzB,SAAS,GAAA,EAAK;AACZ,MAAAA,wBAAA,CAAO,KAAK,OAAO,CAAA;AACnB,MAAA,OAAO,MAAA;AAAA,IACT;AAAA,EACF,CAAA;AACF","file":"chunk-4CMVMTFB.cjs","sourcesContent":["/**\n * Non-invasive error isolation — the foundational SDK guarantee.\n *\n * Mirrors Python's `_internal/errors.py` `@absorb_errors` decorator. Every\n * public SDK function and every adapter-installed wrapper is wrapped with\n * `absorbErrors()`. The wrapper catches all exceptions and reports them\n * out-of-band to Morse's own diagnostics endpoint, then returns a benign value\n * (typically `undefined`) instead of propagating.\n *\n * Foundational principle:\n *\n *     Telemetry must never break the host application.\n *\n * The customer's call returns its original result (or `undefined`)\n * regardless of whether the SDK's recording path succeeded.\n *\n * Note on async: TypeScript-land has no `KeyboardInterrupt` equivalent —\n * the analogue is \"no exceptions are special\". We absorb everything,\n * and rely on Node's `process.exit` / browser navigation to tear down\n * the runtime cleanly.\n */\n\nimport { report } from \"./diagnostics\";\n\nexport interface AbsorbErrorsOptions {\n  /**\n   * Stable identifier for grouping. Used for server-side grouping and\n   * the rate limiter (max 100 events per fingerprint per minute).\n   */\n  fingerprint: string;\n  /** Optional metadata attached to the report; scrubbed against an allow-list. */\n  extra?: Record<string, unknown>;\n}\n\n/**\n * Wrap a synchronous function so that any thrown exception is absorbed\n * (reported out-of-band) instead of propagating. Returns `undefined` on\n * absorbed error.\n */\nexport function absorbErrorsSync<TArgs extends unknown[], TReturn>(\n  fn: (...args: TArgs) => TReturn,\n  options: AbsorbErrorsOptions,\n): (...args: TArgs) => TReturn | undefined {\n  return (...args: TArgs): TReturn | undefined => {\n    try {\n      return fn(...args);\n    } catch (err) {\n      report(err, options);\n      return undefined;\n    }\n  };\n}\n\n/**\n * Wrap an async function so that any rejection or thrown exception is\n * absorbed (reported out-of-band) instead of propagating. Returns\n * `undefined` on absorbed error.\n */\nexport function absorbErrorsAsync<TArgs extends unknown[], TReturn>(\n  fn: (...args: TArgs) => Promise<TReturn>,\n  options: AbsorbErrorsOptions,\n): (...args: TArgs) => Promise<TReturn | undefined> {\n  return async (...args: TArgs): Promise<TReturn | undefined> => {\n    try {\n      return await fn(...args);\n    } catch (err) {\n      report(err, options);\n      return undefined;\n    }\n  };\n}\n\n/**\n * Higher-order alias chosen to read like the Python decorator: pass a\n * function in, get a wrapped version back. Resolves to the sync or async\n * variant based on the runtime return value (a Promise). Defaults to\n * sync at the type level; use `absorbErrorsAsync` directly for proper\n * async typing.\n */\nexport const absorbErrors = absorbErrorsSync;\n"]}
+{"version":3,"sources":["../../src/_internal/errors.ts"],"names":["init_diagnostics","report"],"mappings":";;;;;AAsBAA,kCAAA,EAAA;AAiBO,SAAS,gBAAA,CACd,IACA,OAAA,EACyC;AACzC,EAAA,OAAO,IAAI,IAAA,KAAqC;AAC9C,IAAA,IAAI;AACF,MAAA,OAAO,EAAA,CAAG,GAAG,IAAI,CAAA;AAAA,IACnB,SAAS,GAAA,EAAK;AACZ,MAAAC,wBAAA,CAAO,KAAK,OAAO,CAAA;AACnB,MAAA,OAAO,MAAA;AAAA,IACT;AAAA,EACF,CAAA;AACF;AAOO,SAAS,iBAAA,CACd,IACA,OAAA,EACkD;AAClD,EAAA,OAAO,UAAU,IAAA,KAA8C;AAC7D,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,EAAA,CAAG,GAAG,IAAI,CAAA;AAAA,IACzB,SAAS,GAAA,EAAK;AACZ,MAAAA,wBAAA,CAAO,KAAK,OAAO,CAAA;AACnB,MAAA,OAAO,MAAA;AAAA,IACT;AAAA,EACF,CAAA;AACF","file":"chunk-PSNZZBQJ.cjs","sourcesContent":["/**\n * Non-invasive error isolation — the foundational SDK guarantee.\n *\n * Mirrors Python's `_internal/errors.py` `@absorb_errors` decorator. Every\n * public SDK function and every adapter-installed wrapper is wrapped with\n * `absorbErrors()`. The wrapper catches all exceptions and reports them\n * out-of-band to Morse's own diagnostics endpoint, then returns a benign value\n * (typically `undefined`) instead of propagating.\n *\n * Foundational principle:\n *\n *     Telemetry must never break the host application.\n *\n * The customer's call returns its original result (or `undefined`)\n * regardless of whether the SDK's recording path succeeded.\n *\n * Note on async: TypeScript-land has no `KeyboardInterrupt` equivalent —\n * the analogue is \"no exceptions are special\". We absorb everything,\n * and rely on Node's `process.exit` / browser navigation to tear down\n * the runtime cleanly.\n */\n\nimport { report } from \"./diagnostics\";\n\nexport interface AbsorbErrorsOptions {\n  /**\n   * Stable identifier for grouping. Used for server-side grouping and\n   * the rate limiter (max 100 events per fingerprint per minute).\n   */\n  fingerprint: string;\n  /** Optional metadata attached to the report; scrubbed against an allow-list. */\n  extra?: Record<string, unknown>;\n}\n\n/**\n * Wrap a synchronous function so that any thrown exception is absorbed\n * (reported out-of-band) instead of propagating. Returns `undefined` on\n * absorbed error.\n */\nexport function absorbErrorsSync<TArgs extends unknown[], TReturn>(\n  fn: (...args: TArgs) => TReturn,\n  options: AbsorbErrorsOptions,\n): (...args: TArgs) => TReturn | undefined {\n  return (...args: TArgs): TReturn | undefined => {\n    try {\n      return fn(...args);\n    } catch (err) {\n      report(err, options);\n      return undefined;\n    }\n  };\n}\n\n/**\n * Wrap an async function so that any rejection or thrown exception is\n * absorbed (reported out-of-band) instead of propagating. Returns\n * `undefined` on absorbed error.\n */\nexport function absorbErrorsAsync<TArgs extends unknown[], TReturn>(\n  fn: (...args: TArgs) => Promise<TReturn>,\n  options: AbsorbErrorsOptions,\n): (...args: TArgs) => Promise<TReturn | undefined> {\n  return async (...args: TArgs): Promise<TReturn | undefined> => {\n    try {\n      return await fn(...args);\n    } catch (err) {\n      report(err, options);\n      return undefined;\n    }\n  };\n}\n\n/**\n * Higher-order alias chosen to read like the Python decorator: pass a\n * function in, get a wrapped version back. Resolves to the sync or async\n * variant based on the runtime return value (a Promise). Defaults to\n * sync at the type level; use `absorbErrorsAsync` directly for proper\n * async typing.\n */\nexport const absorbErrors = absorbErrorsSync;\n"]}

package/dist/browser/{chunk-6T6ZPOKZ.js → chunk-PXHTLCEU.js}

@@ -238,7 +238,7 @@ function redactValue(value, config, depth = 0) {
   }
   return value;
 }
-var PATTERN_ORDER, MANDATORY_PATTERNS, DEFAULT_OFF_PATTERNS, SHORT_KEYS, PATTERNS, EXTRA_PATTERN_CAP, EXTRA_PATTERN_CHAR_CAP, MAX_DEPTH;
+var PATTERN_ORDER, MANDATORY_PATTERNS, DEFAULT_OFF_PATTERNS, SHORT_KEYS, SECRET_ASSIGNMENT_SOURCE, PATTERNS, EXTRA_PATTERN_CAP, EXTRA_PATTERN_CHAR_CAP, MAX_DEPTH;
 var init_redaction = __esm({
   "src/_internal/redaction.ts"() {
     PATTERN_ORDER = [
@@ -249,7 +249,10 @@ var init_redaction = __esm({
       "phone_us",
       "phone_e164",
       "ssn_us",
-      "ip_address"
+      "ip_address",
+      // Last: the value-shaped patterns above are more specific, so a JWT inside
+      // `authorization: Bearer eyJ...` gets its own tag before this one runs.
+      "secret_assignment"
     ];
     MANDATORY_PATTERNS = /* @__PURE__ */ new Set([
       "api_key_prefixed",
@@ -266,8 +269,13 @@ var init_redaction = __esm({
       phone_us: "phone",
       phone_e164: "phone",
       ssn_us: "ssn",
-      ip_address: "ip"
+      ip_address: "ip",
+      secret_assignment: "secret"
+      // pragma: allowlist secret — a label, not a value
     };
+    SECRET_ASSIGNMENT_SOURCE = // Compound keys accept `=` or `:`; bare `secret` requires `=`, because with
+    // `:` it is more often a marker (`k8s-secret: mounted`) than an assignment.
+    `(?:(?:password|passwd|pwd|client[-_]?secret|secret[-_]?key|private[-_]?key|access[-_]?key|api[-_]?key|auth[-_]?token|access[-_]?token|refresh[-_]?token|id[-_]?token|session[-_]?token|authorization|credentials?)["']?\\s*[=:]|\\bsecret["']?\\s*=)\\s*(?:bearer\\s+)?(?:"[^"]*"|'[^']*'|\\S+)`;
     PATTERNS = {
       api_key_prefixed: new RegExp(
         "\\b(?:sk-[A-Za-z0-9_-]{20,}|sk_(?:live|test)_[A-Za-z0-9]{20,}|mhq_[A-Za-z0-9]{20,}|av_[A-Za-z0-9]{20,}|ghp_[A-Za-z0-9]{36}|gho_[A-Za-z0-9]{36}|ghu_[A-Za-z0-9]{36}|ghs_[A-Za-z0-9]{36}|ghr_[A-Za-z0-9]{36}|xox[bopsa]-[0-9A-Za-z\\-]{10,}|(?:AKIA|ASIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASCA)[0-9A-Z]{16})\\b",
@@ -298,7 +306,17 @@ var init_redaction = __esm({
       ip_address: new RegExp(
         "\\b(?:(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)(?:\\.(?:25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)){3}|(?:[A-F0-9]{1,4}:){2,7}[A-F0-9]{1,4})\\b",
         "gi"
-      )
+      ),
+      // MHQ-973 — key-context secret assignment. Every pattern above is
+      // VALUE-shaped: it recognises a credential by its own format. That cannot
+      // catch `password=hunter2` — `hunter2` is an ordinary word, and only the KEY
+      // marks it as a secret.
+      //
+      // Deliberately excludes a bare `token`: this is an LLM-observability SDK, and
+      // `input_tokens=100` / `max_tokens=4096` are core telemetry. Only unambiguous
+      // `*_token` compounds match. No leading `\\b` either, so `PGPASSWORD=` and
+      // `MYSQL_PWD=` are caught; the `[=:]` anchor is what prevents false positives.
+      secret_assignment: new RegExp(SECRET_ASSIGNMENT_SOURCE, "gi")
     };
     EXTRA_PATTERN_CAP = 10;
     EXTRA_PATTERN_CHAR_CAP = 256;
@@ -393,6 +411,7 @@ function redactedMessage(error) {
       const out = redactValue(raw, activeRedactionConfig);
       raw = typeof out === "string" ? out : String(out);
     }
+    raw = raw.replace(new RegExp(SECRET_ASSIGNMENT_SOURCE, "gi"), "[REDACTED:secret]");
   } catch {
     return "<redaction unavailable>";
   }
@@ -418,6 +437,7 @@ function recordDrop(reason, category, quantity = 1) {
     if (checkBucket(localLogBuckets, `drop:${key}`, LOCAL_LOG_LIMIT_PER_WINDOW, LOCAL_LOG_WINDOW_MS)) {
       console.warn(`morse: dropped ${quantity} ${category} (${reason}) \u2014 telemetry is being lost`);
     }
+    if (transmissionAllowed()) ensureTimer();
   } catch {
   }
 }
@@ -586,12 +606,12 @@ function _resetForTesting() {
   level = LEVEL_ERROR;
   activeRedactionConfig = null;
 }
-var SDK_VERSION, LEVEL_OFF, LEVEL_ERROR, LEVEL_DEBUG, VALID_LEVELS, level, RATE_WINDOW_MS, RATE_LIMIT_PER_WINDOW, RATE_LIMIT_PER_WINDOW_DEBUG, rateBuckets, LOCAL_LOG_WINDOW_MS, LOCAL_LOG_LIMIT_PER_WINDOW, localLogBuckets, MAX_STACK_ENTRIES, MAX_MESSAGE_CHARS, MAX_BATCH_EVENTS, ALLOWED_EXTRA_KEYS, DIAGNOSTICS_PATH, MAX_PENDING, FLUSH_INTERVAL_MS, BREAKER_THRESHOLD, BREAKER_COOLDOWN_MS, REASON_QUEUE_FULL, REASON_RETRY_EXHAUSTED, REASON_QUOTA_REJECTED, REASON_SHUTDOWN_DROP, counters, activeRedactionConfig, pending, timer, consecutiveFailures, breakerOpenUntil, reporting, MORSE_PATH_MARKERS, clientConfig;
+var SDK_VERSION, LEVEL_OFF, LEVEL_ERROR, LEVEL_DEBUG, VALID_LEVELS, level, RATE_WINDOW_MS, RATE_LIMIT_PER_WINDOW, RATE_LIMIT_PER_WINDOW_DEBUG, rateBuckets, LOCAL_LOG_WINDOW_MS, LOCAL_LOG_LIMIT_PER_WINDOW, localLogBuckets, MAX_STACK_ENTRIES, MAX_MESSAGE_CHARS, MAX_BATCH_EVENTS, ALLOWED_EXTRA_KEYS, DIAGNOSTICS_PATH, MAX_PENDING, FLUSH_INTERVAL_MS, BREAKER_THRESHOLD, BREAKER_COOLDOWN_MS, REASON_QUEUE_FULL, REASON_RETRY_EXHAUSTED, REASON_QUOTA_REJECTED, REASON_ENCODE_FAILED, REASON_SHUTDOWN_DROP, REASON_AUTH_REJECTED, REASON_ENDPOINT_REJECTED, REASON_SEND_FAILED, counters, activeRedactionConfig, pending, timer, consecutiveFailures, breakerOpenUntil, reporting, MORSE_PATH_MARKERS, clientConfig;
 var init_diagnostics = __esm({
   "src/_internal/diagnostics.ts"() {
     init_env();
     init_redaction();
-    SDK_VERSION = "0.5.0" ;
+    SDK_VERSION = "0.6.0-rc.1" ;
     LEVEL_OFF = "off";
     LEVEL_ERROR = "error";
     LEVEL_DEBUG = "debug";
@@ -622,7 +642,11 @@ var init_diagnostics = __esm({
     REASON_QUEUE_FULL = "queue_full";
     REASON_RETRY_EXHAUSTED = "retry_exhausted";
     REASON_QUOTA_REJECTED = "quota_rejected";
+    REASON_ENCODE_FAILED = "encode_failed";
     REASON_SHUTDOWN_DROP = "shutdown_drop";
+    REASON_AUTH_REJECTED = "auth_rejected";
+    REASON_ENDPOINT_REJECTED = "endpoint_rejected";
+    REASON_SEND_FAILED = "send_failed";
     counters = /* @__PURE__ */ new Map();
     activeRedactionConfig = null;
     pending = [];
@@ -737,7 +761,10 @@ var init_spans = __esm({
       // MHQ-482: matches Python's `SpanType.RETRIEVER` (apps/sdk/python/src/morse_ai/spans.py).
       // @beta — retriever span type is subject to change before SDK v1.0 (see
       // the plain-LangChain adapter's on_retriever_* callbacks in src/langchain/).
-      RETRIEVER: "retriever"
+      RETRIEVER: "retriever",
+      // MHQ-1025: matches Python's `SpanType.HANDOFF`. One span per routing
+      // decision between two agents, with `from_agent` / `to_agent` metadata.
+      HANDOFF: "handoff"
     };
   }
 });
@@ -1063,6 +1090,18 @@ function setContext(dims) {
   if (state.userMetadata === void 0) state.userMetadata = {};
   Object.assign(state.userMetadata, coerceDims(dims, "morse.tracing.set_context"));
 }
+function adoptThreadId(value) {
+  const state = getActiveTraceState();
+  if (state === null || state.threadId !== void 0 || value === null || value === void 0) {
+    return;
+  }
+  try {
+    const s = String(value);
+    if (s !== "") state.threadId = s;
+  } catch (err) {
+    report(err, { fingerprint: "morse.tracing.adopt_thread_id" });
+  }
+}
 function coerceDims(dims, fingerprint) {
   const out = {};
   for (const k of Object.keys(dims)) {
@@ -1263,6 +1302,6 @@ var init_propagation = __esm({
   }
 });
 
-export { DEFAULT_ENDPOINT, REASON_QUEUE_FULL, REASON_QUOTA_REJECTED, REASON_RETRY_EXHAUSTED, REASON_SHUTDOWN_DROP, SpanType, W3C_TRACEPARENT_HEADER, _resetForTesting, _resetForTesting2, buildRedactionConfig, buildTraceEntry, extractTraceparent, flushOnce, formatTraceparent, generateSpanId, generateTraceId, getActiveTraceState, getApiKey, getEndpoint, getEngine, getFlushIntervalSeconds, getInternalSource, getLastTrace, getMaxBatchSize, getMaxFieldBytes, getMaxQueueSize, getRedactionConfig, getSampleRate, getTransport, init_diagnostics, init_env, init_otel_provider_browser, init_propagation, init_redaction, init_spans, init_tracing, injectIntoRequestInit, injectTraceparent, isDisabled, isValidInternalSource, nowIso, recordDrop, redactValue, report, runAsync, runSync, sendTrace, setContext, setDiagnosticsClientConfig, setLevel, setRedactionConfig2 as setRedactionConfig, setSource, setTransport, spanAsync, spanSync, startSpan };
-//# sourceMappingURL=chunk-6T6ZPOKZ.js.map
-//# sourceMappingURL=chunk-6T6ZPOKZ.js.map
+export { DEFAULT_ENDPOINT, REASON_AUTH_REJECTED, REASON_ENCODE_FAILED, REASON_ENDPOINT_REJECTED, REASON_QUEUE_FULL, REASON_QUOTA_REJECTED, REASON_RETRY_EXHAUSTED, REASON_SEND_FAILED, REASON_SHUTDOWN_DROP, SpanType, W3C_TRACEPARENT_HEADER, _resetForTesting, _resetForTesting2, adoptThreadId, buildRedactionConfig, buildTraceEntry, extractTraceparent, flushOnce, formatTraceparent, generateSpanId, generateTraceId, getActiveTraceState, getApiKey, getEndpoint, getEngine, getFlushIntervalSeconds, getInternalSource, getLastTrace, getMaxBatchSize, getMaxFieldBytes, getMaxQueueSize, getRedactionConfig, getSampleRate, getTransport, init_diagnostics, init_env, init_otel_provider_browser, init_propagation, init_redaction, init_spans, init_tracing, injectIntoRequestInit, injectTraceparent, isDisabled, isValidInternalSource, nowIso, recordDrop, redactValue, report, runAsync, runSync, sendTrace, setContext, setDiagnosticsClientConfig, setLevel, setRedactionConfig2 as setRedactionConfig, setSource, setTransport, spanAsync, spanSync, startSpan };
+//# sourceMappingURL=chunk-PXHTLCEU.js.map
+//# sourceMappingURL=chunk-PXHTLCEU.js.map