@sentry/cloudflare 10.70.0 → 11.0.0-alpha.1

package/build/cjs/prod/utils/instrumentContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instrumentContext.js","sources":["../../../../src/utils/instrumentContext.ts"],"sourcesContent":["import { type DurableObjectState, type DurableObjectStorage, type ExecutionContext } from '@cloudflare/workers-types';\nimport { instrumentDurableObjectStorage } from '../instrumentations/instrumentDurableObjectStorage';\n\ntype ContextType = ExecutionContext | DurableObjectState;\ntype OverridesStore<T extends ContextType> = Map<keyof T, (...args: unknown[]) => unknown>;\n\n/**\n * Instruments an execution context or DurableObjectState with Sentry tracing.\n *\n * Creates a copy of the context that:\n * - Allows overriding of methods (e.g., waitUntil)\n * - For DurableObjectState: instruments storage operations (get, put, delete, list, etc.)\n *   to create Sentry spans automatically\n *\n * @param ctx - The execution context or DurableObjectState to instrument\n * @returns An instrumented copy of the context\n */\nexport function instrumentContext<T extends ContextType>(ctx: T): T {\n  if (!ctx) return ctx;\n\n  const overrides: OverridesStore<T> = new Map();\n  const contextPrototype = Object.getPrototypeOf(ctx);\n  const prototypeMethodNames = Object.getOwnPropertyNames(contextPrototype) as unknown as (keyof T)[];\n  const ownPropertyNames = Object.getOwnPropertyNames(ctx) as unknown as (keyof T)[];\n  const instrumented = new Set<unknown>(['constructor']);\n  const descriptors: PropertyDescriptorMap = {};\n\n  for (const methodName of [...ownPropertyNames, ...prototypeMethodNames]) {\n    if (instrumented.has(methodName) || typeof ctx[methodName] !== 'function') {\n      continue;\n    }\n\n    instrumented.add(methodName);\n    descriptors[methodName as string] = makeOverridableDescriptor(overrides, ctx, methodName);\n  }\n\n  // Check if this is a DurableObjectState context with a storage property\n  // If so, wrap the storage with instrumentation\n  if ('storage' in ctx && ctx.storage) {\n    const originalStorage = ctx.storage;\n    const waitUntil = 'waitUntil' in ctx && typeof ctx.waitUntil === 'function' ? ctx.waitUntil.bind(ctx) : undefined;\n    let instrumentedStorage: DurableObjectStorage | undefined;\n    descriptors.storage = {\n      configurable: true,\n      enumerable: true,\n      get: () => {\n        if (!instrumentedStorage) {\n          instrumentedStorage = instrumentDurableObjectStorage(originalStorage, waitUntil);\n        }\n        return instrumentedStorage;\n      },\n    };\n    // Expose the original uninstrumented storage for internal Sentry operations\n    // This avoids creating spans for internal storage operations\n    descriptors.originalStorage = {\n      configurable: true,\n      enumerable: false,\n      get: () => originalStorage,\n    };\n  }\n\n  return Object.create(ctx, descriptors);\n}\n\n/**\n * Creates a property descriptor that allows overriding of a method on the given context object.\n *\n * This descriptor supports property overriding with functions only. It delegates method calls to\n * the provided store if an override exists or to the original method on the context otherwise.\n *\n * @param {OverridesStore<ContextType>} store - The storage for overridden methods specific to the context type.\n * @param {ContextType} ctx - The context object that contains the method to be overridden.\n * @param {keyof ContextType} method - The method on the context object to create the overridable descriptor for.\n * @return {PropertyDescriptor} A property descriptor enabling the overriding of the specified method.\n */\nfunction makeOverridableDescriptor<T extends ContextType>(\n  store: OverridesStore<T>,\n  ctx: T,\n  method: keyof T,\n): PropertyDescriptor {\n  return {\n    configurable: true,\n    enumerable: true,\n    set: newValue => {\n      if (typeof newValue == 'function') {\n        store.set(method, newValue);\n        return;\n      }\n      Reflect.set(ctx, method, newValue);\n    },\n\n    get: () => {\n      if (store.has(method)) return store.get(method);\n      const methodFunction = Reflect.get(ctx, method);\n      if (typeof methodFunction !== 'function') return methodFunction;\n      // We should do bind() to make sure that the method is bound to the context object - otherwise it will not work\n      return methodFunction.bind(ctx);\n    },\n  };\n}\n"],"names":["instrumentDurableObjectStorage"],"mappings":";;;;AAiBO,SAAS,kBAAyC,GAAA,EAAW;AAClE,EAAA,IAAI,CAAC,KAAK,OAAO,GAAA;AAEjB,EAAA,MAAM,SAAA,uBAAmC,GAAA,EAAI;AAC7C,EAAA,MAAM,gBAAA,GAAmB,MAAA,CAAO,cAAA,CAAe,GAAG,CAAA;AAClD,EAAA,MAAM,oBAAA,GAAuB,MAAA,CAAO,mBAAA,CAAoB,gBAAgB,CAAA;AACxE,EAAA,MAAM,gBAAA,GAAmB,MAAA,CAAO,mBAAA,CAAoB,GAAG,CAAA;AACvD,EAAA,MAAM,YAAA,mBAAe,IAAI,GAAA,CAAa,CAAC,aAAa,CAAC,CAAA;AACrD,EAAA,MAAM,cAAqC,EAAC;AAE5C,EAAA,KAAA,MAAW,cAAc,CAAC,GAAG,gBAAA,EAAkB,GAAG,oBAAoB,CAAA,EAAG;AACvE,IAAA,IAAI,YAAA,CAAa,IAAI,UAAU,CAAA,IAAK,OAAO,GAAA,CAAI,UAAU,MAAM,UAAA,EAAY;AACzE,MAAA;AAAA,IACF;AAEA,IAAA,YAAA,CAAa,IAAI,UAAU,CAAA;AAC3B,IAAA,WAAA,CAAY,UAAoB,CAAA,GAAI,yBAAA,CAA0B,SAAA,EAAW,KAAK,UAAU,CAAA;AAAA,EAC1F;AAIA,EAAA,IAAI,SAAA,IAAa,GAAA,IAAO,GAAA,CAAI,OAAA,EAAS;AACnC,IAAA,MAAM,kBAAkB,GAAA,CAAI,OAAA;AAC5B,IAAA,MAAM,SAAA,GAAY,WAAA,IAAe,GAAA,IAAO,OAAO,GAAA,CAAI,SAAA,KAAc,UAAA,GAAa,GAAA,CAAI,SAAA,CAAU,IAAA,CAAK,GAAG,CAAA,GAAI,MAAA;AACxG,IAAA,IAAI,mBAAA;AACJ,IAAA,WAAA,CAAY,OAAA,GAAU;AAAA,MACpB,YAAA,EAAc,IAAA;AAAA,MACd,UAAA,EAAY,IAAA;AAAA,MACZ,KAAK,MAAM;AACT,QAAA,IAAI,CAAC,mBAAA,EAAqB;AACxB,UAAA,mBAAA,GAAsBA,6DAAA,CAA+B,iBAAiB,SAAS,CAAA;AAAA,QACjF;AACA,QAAA,OAAO,mBAAA;AAAA,MACT;AAAA,KACF;AAGA,IAAA,WAAA,CAAY,eAAA,GAAkB;AAAA,MAC5B,YAAA,EAAc,IAAA;AAAA,MACd,UAAA,EAAY,KAAA;AAAA,MACZ,KAAK,MAAM;AAAA,KACb;AAAA,EACF;AAEA,EAAA,OAAO,MAAA,CAAO,MAAA,CAAO,GAAA,EAAK,WAAW,CAAA;AACvC;AAaA,SAAS,yBAAA,CACP,KAAA,EACA,GAAA,EACA,MAAA,EACoB;AACpB,EAAA,OAAO;AAAA,IACL,YAAA,EAAc,IAAA;AAAA,IACd,UAAA,EAAY,IAAA;AAAA,IACZ,KAAK,CAAA,QAAA,KAAY;AACf,MAAA,IAAI,OAAO,YAAY,UAAA,EAAY;AACjC,QAAA,KAAA,CAAM,GAAA,CAAI,QAAQ,QAAQ,CAAA;AAC1B,QAAA;AAAA,MACF;AACA,MAAA,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,MAAA,EAAQ,QAAQ,CAAA;AAAA,IACnC,CAAA;AAAA,IAEA,KAAK,MAAM;AACT,MAAA,IAAI,MAAM,GAAA,CAAI,MAAM,GAAG,OAAO,KAAA,CAAM,IAAI,MAAM,CAAA;AAC9C,MAAA,MAAM,cAAA,GAAiB,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,MAAM,CAAA;AAC9C,MAAA,IAAI,OAAO,cAAA,KAAmB,UAAA,EAAY,OAAO,cAAA;AAEjD,MAAA,OAAO,cAAA,CAAe,KAAK,GAAG,CAAA;AAAA,IAChC;AAAA,GACF;AACF;;;;"}

package/build/cjs/prod/utils/internalSqlQuery.js

@@ -0,0 +1,25 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const core = require('@sentry/core');
+
+function targetsCloudflareInternalTable(querySummary, allowlist, queryText) {
+  if (!querySummary) {
+    return false;
+  }
+  const indexedTable = queryText ? CREATE_INDEX_TABLE_RE.exec(queryText)?.groups?.["table"] : void 0;
+  if (indexedTable) {
+    return isCloudflareInternalTable(indexedTable, allowlist);
+  }
+  const [, ...tables] = querySummary.split(" ");
+  return tables.some((table) => isCloudflareInternalTable(table, allowlist));
+}
+const CREATE_INDEX_TABLE_RE = /^\s*CREATE\s+(?:UNIQUE\s+)?INDEX(?:\s+IF\s+(?:NOT\s+)?EXISTS)?\s+[^\s(,;)]+\s+ON\s+(?<table>[^\s(,;)]+)/i;
+function isCloudflareInternalTable(table, allowlist) {
+  if (!table.toLowerCase().startsWith("cf_")) {
+    return false;
+  }
+  return !allowlist?.length || !core.stringMatchesSomePattern(table, allowlist, true);
+}
+
+exports.targetsCloudflareInternalTable = targetsCloudflareInternalTable;
+//# sourceMappingURL=internalSqlQuery.js.map

package/build/cjs/prod/utils/internalSqlQuery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"internalSqlQuery.js","sources":["../../../../src/utils/internalSqlQuery.ts"],"sourcesContent":["import { stringMatchesSomePattern } from '@sentry/core';\n\n/**\n * Cloudflare frameworks that build on Durable Objects (`agents`, `partyserver`, ...) manage their\n * own internal SQLite tables, all namespaced with a `cf_` prefix — e.g. `cf_agents_schedules`,\n * `cf_agent_state`, `cf_ai_chat_stream_chunks`. Queries against them (schedule polling, chat-stream\n * persistence, state bookkeeping) are framework implementation details that otherwise flood traces\n * with dozens of zero-signal `db.query` spans per request. The exact set of tables even varies\n * between framework versions, so we match the reserved prefix rather than an enumerated list.\n *\n * The `cf_` prefix is a reserved convention for framework-managed tables, so user tables should not\n * use it. In case a user table does collide with the prefix, the `durableObjectSqlSpanAllowlist`\n * option lets them opt those tables back into instrumentation.\n *\n * The check operates on the query summary produced by `getSqlQuerySummary` (`{operation} {table} ...`,\n * the same value used as the span name), so table targets are already isolated from the rest of the\n * query. The one exception is `CREATE INDEX`: its summary carries the index name, not the indexed\n * table (upstream OTel convention), so the `cf_` target only appears in the ON clause of the full\n * statement, which `queryText` is needed for.\n */\nexport function targetsCloudflareInternalTable(\n  querySummary: string | undefined,\n  allowlist?: Array<string | RegExp>,\n  queryText?: string,\n): boolean {\n  if (!querySummary) {\n    return false;\n  }\n\n  const indexedTable = queryText ? CREATE_INDEX_TABLE_RE.exec(queryText)?.groups?.['table'] : undefined;\n  if (indexedTable) {\n    return isCloudflareInternalTable(indexedTable, allowlist);\n  }\n\n  const [, ...tables] = querySummary.split(' ');\n\n  return tables.some(table => isCloudflareInternalTable(table, allowlist));\n}\n\n// `CREATE [UNIQUE] INDEX [IF NOT EXISTS] <name> ON <table>` — the IF EXISTS shape mirrors DDL_RE\n// in @sentry/core.\nconst CREATE_INDEX_TABLE_RE =\n  /^\\s*CREATE\\s+(?:UNIQUE\\s+)?INDEX(?:\\s+IF\\s+(?:NOT\\s+)?EXISTS)?\\s+[^\\s(,;)]+\\s+ON\\s+(?<table>[^\\s(,;)]+)/i;\n\nfunction isCloudflareInternalTable(table: string, allowlist?: Array<string | RegExp>): boolean {\n  if (!table.toLowerCase().startsWith('cf_')) {\n    return false;\n  }\n\n  // A table on the allowlist is treated as a user table and stays instrumented, even though it\n  // matches the reserved prefix.\n  return !allowlist?.length || !stringMatchesSomePattern(table, allowlist, true);\n}\n"],"names":["stringMatchesSomePattern"],"mappings":";;;;AAoBO,SAAS,8BAAA,CACd,YAAA,EACA,SAAA,EACA,SAAA,EACS;AACT,EAAA,IAAI,CAAC,YAAA,EAAc;AACjB,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,MAAM,YAAA,GAAe,YAAY,qBAAA,CAAsB,IAAA,CAAK,SAAS,CAAA,EAAG,MAAA,GAAS,OAAO,CAAA,GAAI,MAAA;AAC5F,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,OAAO,yBAAA,CAA0B,cAAc,SAAS,CAAA;AAAA,EAC1D;AAEA,EAAA,MAAM,GAAG,GAAG,MAAM,CAAA,GAAI,YAAA,CAAa,MAAM,GAAG,CAAA;AAE5C,EAAA,OAAO,OAAO,IAAA,CAAK,CAAA,KAAA,KAAS,yBAAA,CAA0B,KAAA,EAAO,SAAS,CAAC,CAAA;AACzE;AAIA,MAAM,qBAAA,GACJ,0GAAA;AAEF,SAAS,yBAAA,CAA0B,OAAe,SAAA,EAA6C;AAC7F,EAAA,IAAI,CAAC,KAAA,CAAM,WAAA,EAAY,CAAE,UAAA,CAAW,KAAK,CAAA,EAAG;AAC1C,IAAA,OAAO,KAAA;AAAA,EACT;AAIA,EAAA,OAAO,CAAC,SAAA,EAAW,MAAA,IAAU,CAACA,6BAAA,CAAyB,KAAA,EAAO,WAAW,IAAI,CAAA;AAC/E;;;;"}

package/build/cjs/prod/utils/internalStorageKey.js

@@ -0,0 +1,44 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const core = require('@sentry/core');
+
+function targetsCloudflareInternalKey(key, allowlist) {
+  if (!key) {
+    return false;
+  }
+  const isFrameworkKey = key.startsWith("cf_") || key.startsWith("cf:") || key.startsWith("__ps_") || key.startsWith("/");
+  if (!isFrameworkKey) {
+    return false;
+  }
+  return !allowlist?.length || !core.stringMatchesSomePattern(key, allowlist, true);
+}
+function getStorageKeys(methodName, args) {
+  const [first] = args;
+  if (methodName === "get" || methodName === "delete") {
+    if (typeof first === "string") {
+      return [first];
+    }
+    if (Array.isArray(first)) {
+      return first.filter((k) => typeof k === "string");
+    }
+    return void 0;
+  }
+  if (methodName === "put") {
+    if (typeof first === "string") {
+      return [first];
+    }
+    if (first && typeof first === "object" && !Array.isArray(first)) {
+      return Object.keys(first);
+    }
+    return void 0;
+  }
+  if (methodName === "list") {
+    const prefix = first && typeof first === "object" ? first.prefix : void 0;
+    return typeof prefix === "string" ? [prefix] : void 0;
+  }
+  return void 0;
+}
+
+exports.getStorageKeys = getStorageKeys;
+exports.targetsCloudflareInternalKey = targetsCloudflareInternalKey;
+//# sourceMappingURL=internalStorageKey.js.map

package/build/cjs/prod/utils/internalStorageKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"internalStorageKey.js","sources":["../../../../src/utils/internalStorageKey.ts"],"sourcesContent":["import { stringMatchesSomePattern } from '@sentry/core';\n\n/**\n * Cloudflare frameworks that build on Durable Objects (`agents`, `partyserver`, ...) also manage\n * their own internal KV entries alongside their internal SQLite tables, namespaced with a reserved\n * prefix — e.g. `cf_agents_state`, `cf_agents_mcp_servers`, `__ps_name`. Reads/writes of these\n * (message persistence, MCP connection bookkeeping, name hydration) are framework implementation\n * details that otherwise flood traces with dozens of zero-signal `durable_object_storage_*` spans\n * per request, so we match the reserved prefixes rather than an enumerated list. This mirrors the\n * `cf_` convention used for internal SQL tables (see `targetsCloudflareInternalTable`).\n *\n * The prefixes are a reserved convention for framework-managed entries, so user keys should not use\n * them. In case a user key does collide, the `durableObjectStorageSpanAllowlist` option lets them\n * opt those keys back into instrumentation.\n */\nexport function targetsCloudflareInternalKey(key: string | undefined, allowlist?: Array<string | RegExp>): boolean {\n  if (!key) {\n    return false;\n  }\n\n  // Framework-managed KV namespaces:\n  // - `cf_`   — agents / ai-chat internal state (mirrors the internal SQL table convention)\n  // - `cf:`   — agents chat-recovery entries (`cf:chat-recovery:*`, `cf:chat:*`); the same reserved\n  //   `cf` namespace, but colon-separated instead of underscore-separated\n  // - `__ps_` — partyserver internals (e.g. `__ps_name`)\n  // - `/`     — MCP OAuth client state (`/<clientName>/<serverId>/{token,client_info,state,...}`),\n  //   read on every MCP tool call. User keys on an Agent rarely use a leading slash; if one does,\n  //   the allowlist opts it back in.\n  const isFrameworkKey =\n    key.startsWith('cf_') || key.startsWith('cf:') || key.startsWith('__ps_') || key.startsWith('/');\n  if (!isFrameworkKey) {\n    return false;\n  }\n\n  // A key on the allowlist is treated as a user key and stays instrumented, even though it matches\n  // a reserved prefix.\n  return !allowlist?.length || !stringMatchesSomePattern(key, allowlist, true);\n}\n\n/**\n * Extracts the KV keys a Durable Object storage call targets, so the caller can decide whether the\n * operation only touches framework-internal entries. Returns `undefined` when the keys can't be\n * determined from the arguments (e.g. `list()` without a prefix), in which case the call is treated\n * as user work and stays instrumented.\n */\nexport function getStorageKeys(methodName: string, args: unknown[]): string[] | undefined {\n  const [first] = args;\n\n  if (methodName === 'get' || methodName === 'delete') {\n    // get(key) / get(keys[]) / delete(key) / delete(keys[])\n    if (typeof first === 'string') {\n      return [first];\n    }\n    if (Array.isArray(first)) {\n      return first.filter((k): k is string => typeof k === 'string');\n    }\n    return undefined;\n  }\n\n  if (methodName === 'put') {\n    // put(key, value) or put({ key: value, ... })\n    if (typeof first === 'string') {\n      return [first];\n    }\n    if (first && typeof first === 'object' && !Array.isArray(first)) {\n      return Object.keys(first);\n    }\n    return undefined;\n  }\n\n  if (methodName === 'list') {\n    // list({ prefix })\n    const prefix = first && typeof first === 'object' ? (first as { prefix?: unknown }).prefix : undefined;\n    return typeof prefix === 'string' ? [prefix] : undefined;\n  }\n\n  return undefined;\n}\n"],"names":["stringMatchesSomePattern"],"mappings":";;;;AAeO,SAAS,4BAAA,CAA6B,KAAyB,SAAA,EAA6C;AACjH,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,OAAO,KAAA;AAAA,EACT;AAUA,EAAA,MAAM,cAAA,GACJ,GAAA,CAAI,UAAA,CAAW,KAAK,KAAK,GAAA,CAAI,UAAA,CAAW,KAAK,CAAA,IAAK,IAAI,UAAA,CAAW,OAAO,CAAA,IAAK,GAAA,CAAI,WAAW,GAAG,CAAA;AACjG,EAAA,IAAI,CAAC,cAAA,EAAgB;AACnB,IAAA,OAAO,KAAA;AAAA,EACT;AAIA,EAAA,OAAO,CAAC,SAAA,EAAW,MAAA,IAAU,CAACA,6BAAA,CAAyB,GAAA,EAAK,WAAW,IAAI,CAAA;AAC7E;AAQO,SAAS,cAAA,CAAe,YAAoB,IAAA,EAAuC;AACxF,EAAA,MAAM,CAAC,KAAK,CAAA,GAAI,IAAA;AAEhB,EAAA,IAAI,UAAA,KAAe,KAAA,IAAS,UAAA,KAAe,QAAA,EAAU;AAEnD,IAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,MAAA,OAAO,CAAC,KAAK,CAAA;AAAA,IACf;AACA,IAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,MAAA,OAAO,MAAM,MAAA,CAAO,CAAC,CAAA,KAAmB,OAAO,MAAM,QAAQ,CAAA;AAAA,IAC/D;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,IAAI,eAAe,KAAA,EAAO;AAExB,IAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,MAAA,OAAO,CAAC,KAAK,CAAA;AAAA,IACf;AACA,IAAA,IAAI,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,IAAY,CAAC,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC/D,MAAA,OAAO,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,IAC1B;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,IAAI,eAAe,MAAA,EAAQ;AAEzB,IAAA,MAAM,SAAS,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,GAAY,MAA+B,MAAA,GAAS,MAAA;AAC7F,IAAA,OAAO,OAAO,MAAA,KAAW,QAAA,GAAW,CAAC,MAAM,CAAA,GAAI,MAAA;AAAA,EACjD;AAEA,EAAA,OAAO,MAAA;AACT;;;;;"}

package/build/cjs/prod/utils/invocationScope.js

@@ -0,0 +1,12 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const core = require('@sentry/core');
+
+function withInvocationIsolationScope(callback) {
+  const isolationScope = core.getIsolationScope();
+  const newIsolationScope = isolationScope === core.getDefaultIsolationScope() ? isolationScope.clone() : isolationScope;
+  return core.withIsolationScope(newIsolationScope, () => callback(newIsolationScope));
+}
+
+exports.withInvocationIsolationScope = withInvocationIsolationScope;
+//# sourceMappingURL=invocationScope.js.map

package/build/cjs/prod/utils/invocationScope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invocationScope.js","sources":["../../../../src/utils/invocationScope.ts"],"sourcesContent":["import { getDefaultIsolationScope, getIsolationScope, type Scope, withIsolationScope } from '@sentry/core';\n\n/**\n * Runs `callback` on the isolation scope for the current invocation.\n *\n * An instrumented handler is either the entry point of an invocation or reentrant — reached from\n * another instrumented handler already serving the same invocation (a Durable Object method calling\n * its own `fetch`, an RPC method reaching a sibling method). Only the entry point may fork:\n *\n * - Forking at the entry point is mandatory. `setUser`/`setTag` write to the isolation scope, and a\n *   Durable Object's isolation scope outlives the invocation that touched it, so without a fork one\n *   invocation's user and tags reappear on the next invocation's events in the same isolate.\n *   Forking clones, so request data set by an enclosing wrapper is still inherited.\n * - Forking again when reentrant would be wrong. Everything below the entry point is one logical\n *   unit of work: a nested call must see what the caller set and be able to add to it, the way it\n *   would if the SDK were not wrapping it at all.\n *\n * The AsyncLocalStorage strategy hands the default isolation scope back whenever no invocation is in\n * flight, and a forked one while inside `withIsolationScope`. Reference-comparing against the default\n * is therefore enough to tell the two cases apart. The stack fallback does not fork, so it reports the\n * default scope even inside an invocation; there the fork degrades to a no-op, which the stack strategy\n * tolerates. This matches the approach used by `patchEventHandler` in Nuxt.\n */\nexport function withInvocationIsolationScope<T>(callback: (scope: Scope) => T): T {\n  const isolationScope = getIsolationScope();\n\n  const newIsolationScope = isolationScope === getDefaultIsolationScope() ? isolationScope.clone() : isolationScope;\n\n  return withIsolationScope(newIsolationScope, () => callback(newIsolationScope));\n}\n"],"names":["getIsolationScope","getDefaultIsolationScope","withIsolationScope"],"mappings":";;;;AAuBO,SAAS,6BAAgC,QAAA,EAAkC;AAChF,EAAA,MAAM,iBAAiBA,sBAAA,EAAkB;AAEzC,EAAA,MAAM,oBAAoB,cAAA,KAAmBC,6BAAA,EAAyB,GAAI,cAAA,CAAe,OAAM,GAAI,cAAA;AAEnG,EAAA,OAAOC,uBAAA,CAAmB,iBAAA,EAAmB,MAAM,QAAA,CAAS,iBAAiB,CAAC,CAAA;AAChF;;;;"}

package/build/cjs/prod/utils/isBinding.js

@@ -0,0 +1,37 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+function isJSRPC(item) {
+  try {
+    return !!item[`__some_property_that_will_never_exist__${Math.random()}`];
+  } catch {
+    return false;
+  }
+}
+const isNotJSRPC = (item) => !isJSRPC(item);
+function isDurableObjectNamespace(item) {
+  return item != null && isNotJSRPC(item) && typeof item.idFromName === "function";
+}
+function isQueue(item) {
+  return item != null && isNotJSRPC(item) && typeof item.send === "function" && typeof item.sendBatch === "function";
+}
+function isD1Database(item) {
+  return item != null && isNotJSRPC(item) && typeof item.prepare === "function" && typeof item.batch === "function" && typeof item.exec === "function";
+}
+function isAiBinding(item) {
+  return item != null && isNotJSRPC(item) && typeof item.run === "function" && typeof item.gateway === "function" && typeof item.toMarkdown === "function";
+}
+function isR2Bucket(item) {
+  return item != null && isNotJSRPC(item) && typeof item.head === "function" && typeof item.put === "function" && typeof item.createMultipartUpload === "function";
+}
+function isRateLimit(item) {
+  return item != null && isNotJSRPC(item) && typeof item.limit === "function";
+}
+
+exports.isAiBinding = isAiBinding;
+exports.isD1Database = isD1Database;
+exports.isDurableObjectNamespace = isDurableObjectNamespace;
+exports.isJSRPC = isJSRPC;
+exports.isQueue = isQueue;
+exports.isR2Bucket = isR2Bucket;
+exports.isRateLimit = isRateLimit;
+//# sourceMappingURL=isBinding.js.map

package/build/cjs/prod/utils/isBinding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isBinding.js","sources":["../../../../src/utils/isBinding.ts"],"sourcesContent":["/**\n * Adapted from https://github.com/evanderkoogh/otel-cf-workers/blob/effeb549f0a4ed1c55ea0c4f0d8e8e37e5494fb3/src/instrumentation/env.ts\n *\n * BSD 3-Clause License\n *\n * Copyright (c) 2023, Erwin van der Koogh\n *\n * Redistribution and use in source and binary forms, with or without\n * modification, are permitted provided that the following conditions are met:\n *\n * 1. Redistributions of source code must retain the above copyright notice, this\n *    list of conditions and the following disclaimer.\n *\n * 2. Redistributions in binary form must reproduce the above copyright notice,\n *    this list of conditions and the following disclaimer in the documentation\n *    and/or other materials provided with the distribution.\n *\n * 3. Neither the name of the copyright holder nor the names of its\n *    contributors may be used to endorse or promote products derived from\n *    this software without specific prior written permission.\n *\n * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\"\n * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE\n * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE\n * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL\n * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR\n * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER\n * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,\n * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\n * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n */\n\nimport type { Ai, D1Database, DurableObjectNamespace, Queue, R2Bucket, RateLimit } from '@cloudflare/workers-types';\n\n/**\n * Checks if a value is a JSRPC proxy (service binding).\n *\n * JSRPC proxies return a truthy value for ANY property access, including\n * properties that don't exist. This makes other duck-type checks unreliable\n * unless we exclude JSRPC first.\n *\n * Must be checked before other binding type checks.\n */\nexport function isJSRPC(item: unknown): item is Service {\n  try {\n    return !!(item as Record<string, unknown>)[`__some_property_that_will_never_exist__${Math.random()}`];\n  } catch {\n    return false;\n  }\n}\n\nconst isNotJSRPC = (item: unknown): item is Record<string, unknown> => !isJSRPC(item);\n\n/**\n * Duck-type check for DurableObjectNamespace bindings.\n * DurableObjectNamespace has `idFromName`, `idFromString`, `get`, `newUniqueId`.\n */\nexport function isDurableObjectNamespace(item: unknown): item is DurableObjectNamespace {\n  return item != null && isNotJSRPC(item) && typeof item.idFromName === 'function';\n}\n\n/**\n * Duck-type check for Queue producer bindings.\n * Queue has `send` and `sendBatch` async methods.\n */\nexport function isQueue(item: unknown): item is Queue {\n  return item != null && isNotJSRPC(item) && typeof item.send === 'function' && typeof item.sendBatch === 'function';\n}\n\n/**\n * Duck-type check for D1Database bindings.\n * D1Database has `prepare`, `batch`, and `exec` methods.\n */\nexport function isD1Database(item: unknown): item is D1Database {\n  return (\n    item != null &&\n    isNotJSRPC(item) &&\n    typeof item.prepare === 'function' &&\n    typeof item.batch === 'function' &&\n    typeof item.exec === 'function'\n  );\n}\n\n/**\n * Duck-type check for Workers AI bindings.\n * The Ai binding has `run`, `gateway`, and `toMarkdown` methods.\n */\nexport function isAiBinding(item: unknown): item is Ai {\n  return (\n    item != null &&\n    isNotJSRPC(item) &&\n    typeof item.run === 'function' &&\n    typeof item.gateway === 'function' &&\n    typeof item.toMarkdown === 'function'\n  );\n}\n\n/**\n * Duck-type check for R2 Bucket bindings.\n * R2Bucket has `head`, `put`, and `createMultipartUpload` methods.\n */\nexport function isR2Bucket(item: unknown): item is R2Bucket {\n  return (\n    item != null &&\n    isNotJSRPC(item) &&\n    typeof item.head === 'function' &&\n    typeof item.put === 'function' &&\n    typeof item.createMultipartUpload === 'function'\n  );\n}\n\n/**\n * Duck-type check for RateLimit bindings.\n * RateLimit only exposes a single `limit` method. Because that is a fairly\n * common method name, this check is intentionally run after the more specific\n * binding checks (Queue, R2, D1) in `instrumentEnv`, so those win when a binding\n * also happens to expose `limit`.\n */\nexport function isRateLimit(item: unknown): item is RateLimit {\n  return item != null && isNotJSRPC(item) && typeof item.limit === 'function';\n}\n"],"names":[],"mappings":";;AA4CO,SAAS,QAAQ,IAAA,EAAgC;AACtD,EAAA,IAAI;AACF,IAAA,OAAO,CAAC,CAAE,IAAA,CAAiC,0CAA0C,IAAA,CAAK,MAAA,EAAQ,CAAA,CAAE,CAAA;AAAA,EACtG,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,MAAM,UAAA,GAAa,CAAC,IAAA,KAAmD,CAAC,QAAQ,IAAI,CAAA;AAM7E,SAAS,yBAAyB,IAAA,EAA+C;AACtF,EAAA,OAAO,QAAQ,IAAA,IAAQ,UAAA,CAAW,IAAI,CAAA,IAAK,OAAO,KAAK,UAAA,KAAe,UAAA;AACxE;AAMO,SAAS,QAAQ,IAAA,EAA8B;AACpD,EAAA,OAAO,IAAA,IAAQ,IAAA,IAAQ,UAAA,CAAW,IAAI,CAAA,IAAK,OAAO,IAAA,CAAK,IAAA,KAAS,UAAA,IAAc,OAAO,IAAA,CAAK,SAAA,KAAc,UAAA;AAC1G;AAMO,SAAS,aAAa,IAAA,EAAmC;AAC9D,EAAA,OACE,IAAA,IAAQ,IAAA,IACR,UAAA,CAAW,IAAI,KACf,OAAO,IAAA,CAAK,OAAA,KAAY,UAAA,IACxB,OAAO,IAAA,CAAK,KAAA,KAAU,UAAA,IACtB,OAAO,KAAK,IAAA,KAAS,UAAA;AAEzB;AAMO,SAAS,YAAY,IAAA,EAA2B;AACrD,EAAA,OACE,IAAA,IAAQ,IAAA,IACR,UAAA,CAAW,IAAI,KACf,OAAO,IAAA,CAAK,GAAA,KAAQ,UAAA,IACpB,OAAO,IAAA,CAAK,OAAA,KAAY,UAAA,IACxB,OAAO,KAAK,UAAA,KAAe,UAAA;AAE/B;AAMO,SAAS,WAAW,IAAA,EAAiC;AAC1D,EAAA,OACE,IAAA,IAAQ,IAAA,IACR,UAAA,CAAW,IAAI,KACf,OAAO,IAAA,CAAK,IAAA,KAAS,UAAA,IACrB,OAAO,IAAA,CAAK,GAAA,KAAQ,UAAA,IACpB,OAAO,KAAK,qBAAA,KAA0B,UAAA;AAE1C;AASO,SAAS,YAAY,IAAA,EAAkC;AAC5D,EAAA,OAAO,QAAQ,IAAA,IAAQ,UAAA,CAAW,IAAI,CAAA,IAAK,OAAO,KAAK,KAAA,KAAU,UAAA;AACnE;;;;;;;;;;"}

package/build/cjs/prod/utils/isCloudflareClass.js

@@ -0,0 +1,23 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+function isCloudflareClass(value, className) {
+  if (!value || typeof value !== "function") {
+    return false;
+  }
+  if (value.name === className) {
+    return false;
+  }
+  let proto = value.prototype;
+  while (proto) {
+    const ctor = proto.constructor;
+    const constructorName = ctor?.name;
+    if (constructorName === className) {
+      return true;
+    }
+    proto = Object.getPrototypeOf(proto);
+  }
+  return false;
+}
+
+exports.isCloudflareClass = isCloudflareClass;
+//# sourceMappingURL=isCloudflareClass.js.map

package/build/cjs/prod/utils/isCloudflareClass.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isCloudflareClass.js","sources":["../../../../src/utils/isCloudflareClass.ts"],"sourcesContent":["import type { DurableObject, WorkflowEntrypoint } from 'cloudflare:workers';\nimport type { WorkerEntrypointConstructor } from '../instrumentations/instrumentWorkerEntrypoint';\ntype CloudflareClassName = 'WorkerEntrypoint' | 'DurableObject' | 'WorkflowEntrypoint';\n\n/**\n * Checks if a class constructor extends a specific Cloudflare base class.\n *\n * Uses prototype chain walking with constructor names rather than instanceof,\n * so it works in Node at build time without requiring the cloudflare:workers\n * module (which only exists in the Workers runtime).\n *\n * This is used to differentiate between different Cloudflare worker types:\n * - WorkerEntrypoint: Class-based workers (used with instrumentWorkerEntrypoint)\n * - DurableObject: Durable Object classes\n * - Workflow: Workflow classes\n *\n * For ExportedHandler (plain objects), this will return false for all types.\n *\n * @param value - The value to check (typically a class constructor)\n * @param className - The Cloudflare base class name to check against\n * @returns true if the value is a class that extends the specified Cloudflare class\n *\n * @example\n * ```ts\n * isCloudflareClass(MyWorker, 'WorkerEntrypoint') // true if MyWorker extends WorkerEntrypoint\n * isCloudflareClass(MyDO, 'DurableObject') // true if MyDO extends DurableObject\n * ```\n */\nexport function isCloudflareClass(\n  value: unknown,\n  className: 'WorkerEntrypoint',\n  // oxlint-disable-next-line typescript/no-explicit-any\n): value is WorkerEntrypointConstructor<any, any>;\nexport function isCloudflareClass(\n  value: unknown,\n  className: 'DurableObject',\n): value is new (...args: unknown[]) => DurableObject;\nexport function isCloudflareClass(\n  value: unknown,\n  className: 'WorkflowEntrypoint',\n): value is new (...args: unknown[]) => WorkflowEntrypoint;\nexport function isCloudflareClass(value: unknown, className: CloudflareClassName): boolean {\n  if (!value || typeof value !== 'function') {\n    return false;\n  }\n\n  if (value.name === className) {\n    return false;\n  }\n\n  let proto: object | null = value.prototype;\n\n  while (proto) {\n    const ctor = (proto as { constructor?: { name?: string } }).constructor;\n    const constructorName = ctor?.name;\n\n    if (constructorName === className) {\n      return true;\n    }\n\n    proto = Object.getPrototypeOf(proto);\n  }\n\n  return false;\n}\n"],"names":[],"mappings":";;AAyCO,SAAS,iBAAA,CAAkB,OAAgB,SAAA,EAAyC;AACzF,EAAA,IAAI,CAAC,KAAA,IAAS,OAAO,KAAA,KAAU,UAAA,EAAY;AACzC,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI,KAAA,CAAM,SAAS,SAAA,EAAW;AAC5B,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI,QAAuB,KAAA,CAAM,SAAA;AAEjC,EAAA,OAAO,KAAA,EAAO;AACZ,IAAA,MAAM,OAAQ,KAAA,CAA8C,WAAA;AAC5D,IAAA,MAAM,kBAAkB,IAAA,EAAM,IAAA;AAE9B,IAAA,IAAI,oBAAoB,SAAA,EAAW;AACjC,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,KAAA,GAAQ,MAAA,CAAO,eAAe,KAAK,CAAA;AAAA,EACrC;AAEA,EAAA,OAAO,KAAA;AACT;;;;"}

package/build/cjs/prod/utils/rpcMeta.js

@@ -0,0 +1,39 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const core = require('@sentry/core');
+
+const SENTRY_RPC_META_KEY = "__sentry_rpc_meta__";
+function isSentryRpcMeta(value) {
+  if (!core.isObjectLike(value) || !(SENTRY_RPC_META_KEY in value)) {
+    return false;
+  }
+  return core.isObjectLike(value[SENTRY_RPC_META_KEY]);
+}
+function appendRpcMeta(args) {
+  const traceData = core.getTraceData();
+  if (!traceData["sentry-trace"]) {
+    return args;
+  }
+  return [...args, { [SENTRY_RPC_META_KEY]: traceData }];
+}
+function hasRpcMeta(args) {
+  return args.length > 0 && isSentryRpcMeta(args[args.length - 1]);
+}
+function extractRpcMeta(args) {
+  if (args.length === 0) {
+    return { args };
+  }
+  const last = args[args.length - 1];
+  if (isSentryRpcMeta(last)) {
+    return {
+      args: args.slice(0, -1),
+      rpcMeta: last.__sentry_rpc_meta__
+    };
+  }
+  return { args };
+}
+
+exports.appendRpcMeta = appendRpcMeta;
+exports.extractRpcMeta = extractRpcMeta;
+exports.hasRpcMeta = hasRpcMeta;
+//# sourceMappingURL=rpcMeta.js.map

package/build/cjs/prod/utils/rpcMeta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpcMeta.js","sources":["../../../../src/utils/rpcMeta.ts"],"sourcesContent":["import { getTraceData, isObjectLike, type SerializedTraceData } from '@sentry/core';\n\n/**\n * Key used to identify Sentry RPC metadata in a trailing argument.\n * This enables transparent trace propagation across Cloudflare Workers RPC\n * calls (Cap'n Proto), which have no native header/metadata support.\n */\nconst SENTRY_RPC_META_KEY = '__sentry_rpc_meta__';\n\ninterface SentryRpcMeta {\n  __sentry_rpc_meta__: SerializedTraceData;\n}\n\nfunction isSentryRpcMeta(value: unknown): value is SentryRpcMeta {\n  if (!isObjectLike(value) || !(SENTRY_RPC_META_KEY in value)) {\n    return false;\n  }\n  return isObjectLike(value[SENTRY_RPC_META_KEY]);\n}\n\n/**\n * Appends Sentry RPC metadata to an args array for trace propagation.\n * If no active trace exists, returns the original args unchanged.\n */\nexport function appendRpcMeta(args: unknown[]): unknown[] {\n  const traceData = getTraceData();\n\n  if (!traceData['sentry-trace']) {\n    return args;\n  }\n\n  return [...args, { [SENTRY_RPC_META_KEY]: traceData }];\n}\n\n/**\n * Whether the trailing argument carries Sentry RPC metadata.\n *\n * Separate from {@link extractRpcMeta} because the RPC method wrappers run this check on every\n * call — including the instance's own internal method calls, which never carry metadata — and\n * must not allocate on that path.\n */\nexport function hasRpcMeta(args: unknown[]): boolean {\n  return args.length > 0 && isSentryRpcMeta(args[args.length - 1]);\n}\n\n/**\n * Extracts Sentry RPC metadata from the trailing argument of an args array.\n * Returns cleaned args (without meta) and the extracted trace data if found.\n */\nexport function extractRpcMeta<T extends unknown[]>(\n  args: T,\n): {\n  args: T;\n  rpcMeta?: SerializedTraceData;\n} {\n  if (args.length === 0) {\n    return { args };\n  }\n\n  const last = args[args.length - 1];\n  if (isSentryRpcMeta(last)) {\n    return {\n      args: args.slice(0, -1) as T,\n      rpcMeta: last.__sentry_rpc_meta__,\n    };\n  }\n\n  return { args };\n}\n"],"names":["isObjectLike","getTraceData"],"mappings":";;;;AAOA,MAAM,mBAAA,GAAsB,qBAAA;AAM5B,SAAS,gBAAgB,KAAA,EAAwC;AAC/D,EAAA,IAAI,CAACA,iBAAA,CAAa,KAAK,CAAA,IAAK,EAAE,uBAAuB,KAAA,CAAA,EAAQ;AAC3D,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAOA,iBAAA,CAAa,KAAA,CAAM,mBAAmB,CAAC,CAAA;AAChD;AAMO,SAAS,cAAc,IAAA,EAA4B;AACxD,EAAA,MAAM,YAAYC,iBAAA,EAAa;AAE/B,EAAA,IAAI,CAAC,SAAA,CAAU,cAAc,CAAA,EAAG;AAC9B,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,OAAO,CAAC,GAAG,IAAA,EAAM,EAAE,CAAC,mBAAmB,GAAG,WAAW,CAAA;AACvD;AASO,SAAS,WAAW,IAAA,EAA0B;AACnD,EAAA,OAAO,IAAA,CAAK,SAAS,CAAA,IAAK,eAAA,CAAgB,KAAK,IAAA,CAAK,MAAA,GAAS,CAAC,CAAC,CAAA;AACjE;AAMO,SAAS,eACd,IAAA,EAIA;AACA,EAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG;AACrB,IAAA,OAAO,EAAE,IAAA,EAAK;AAAA,EAChB;AAEA,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,IAAA,CAAK,MAAA,GAAS,CAAC,CAAA;AACjC,EAAA,IAAI,eAAA,CAAgB,IAAI,CAAA,EAAG;AACzB,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAAA,MACtB,SAAS,IAAA,CAAK;AAAA,KAChB;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,IAAA,EAAK;AAChB;;;;;;"}

package/build/cjs/prod/utils/streaming.js

@@ -0,0 +1,16 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+function classifyResponseStreaming(res) {
+  if (!res.body) {
+    return { isStreaming: false };
+  }
+  const contentType = res.headers.get("content-type") ?? "";
+  const contentLength = res.headers.get("content-length");
+  if (/^text\/event-stream\b/i.test(contentType) || /^application\/(x-)?ndjson\b/i.test(contentType) || /^application\/stream\+json\b/i.test(contentType) || /^text\/plain\b/i.test(contentType) && !contentLength) {
+    return { isStreaming: true };
+  }
+  return { isStreaming: false };
+}
+
+exports.classifyResponseStreaming = classifyResponseStreaming;
+//# sourceMappingURL=streaming.js.map

package/build/cjs/prod/utils/streaming.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streaming.js","sources":["../../../../src/utils/streaming.ts"],"sourcesContent":["export type StreamingGuess = {\n  isStreaming: boolean;\n};\n\n/**\n * Classifies a Response as streaming or non-streaming.\n *\n * Heuristics:\n * - No body → not streaming\n * - Known streaming Content-Types → streaming (SSE, NDJSON, JSON streaming)\n * - text/plain without Content-Length → streaming (some AI APIs)\n * - Otherwise → not streaming (conservative default, including HTML/SSR)\n *\n * We avoid probing the stream to prevent blocking on transform streams (like injectTraceMetaTags)\n * or SSR streams that may not have data ready immediately.\n */\nexport function classifyResponseStreaming(res: Response): StreamingGuess {\n  if (!res.body) {\n    return { isStreaming: false };\n  }\n\n  const contentType = res.headers.get('content-type') ?? '';\n  const contentLength = res.headers.get('content-length');\n\n  // Streaming: Known streaming content types\n  // - text/event-stream: Server-Sent Events (Vercel AI SDK, real-time APIs)\n  // - application/x-ndjson, application/ndjson: Newline-delimited JSON\n  // - application/stream+json: JSON streaming\n  // - text/plain (without Content-Length): Some AI APIs use this for streaming text\n  if (\n    /^text\\/event-stream\\b/i.test(contentType) ||\n    /^application\\/(x-)?ndjson\\b/i.test(contentType) ||\n    /^application\\/stream\\+json\\b/i.test(contentType) ||\n    (/^text\\/plain\\b/i.test(contentType) && !contentLength)\n  ) {\n    return { isStreaming: true };\n  }\n\n  // Default: treat as non-streaming\n  return { isStreaming: false };\n}\n"],"names":[],"mappings":";;AAgBO,SAAS,0BAA0B,GAAA,EAA+B;AACvE,EAAA,IAAI,CAAC,IAAI,IAAA,EAAM;AACb,IAAA,OAAO,EAAE,aAAa,KAAA,EAAM;AAAA,EAC9B;AAEA,EAAA,MAAM,WAAA,GAAc,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,EAAA;AACvD,EAAA,MAAM,aAAA,GAAgB,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,gBAAgB,CAAA;AAOtD,EAAA,IACE,yBAAyB,IAAA,CAAK,WAAW,CAAA,IACzC,8BAAA,CAA+B,KAAK,WAAW,CAAA,IAC/C,+BAAA,CAAgC,IAAA,CAAK,WAAW,CAAA,IAC/C,iBAAA,CAAkB,KAAK,WAAW,CAAA,IAAK,CAAC,aAAA,EACzC;AACA,IAAA,OAAO,EAAE,aAAa,IAAA,EAAK;AAAA,EAC7B;AAGA,EAAA,OAAO,EAAE,aAAa,KAAA,EAAM;AAC9B;;;;"}

package/build/cjs/prod/utils/traceLinks.js

@@ -0,0 +1,54 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const api = require('@opentelemetry/api');
+const core = require('@sentry/core');
+const debugBuild = require('../debug-build.js');
+
+const SENTRY_TRACE_LINK_KEY_PREFIX = "__SENTRY_TRACE_LINK__";
+function getTraceLinkKey(methodName) {
+  return `${SENTRY_TRACE_LINK_KEY_PREFIX}${methodName}`;
+}
+function storeSpanContext(originalStorage, methodName) {
+  try {
+    const activeSpan = core.getActiveSpan();
+    if (activeSpan) {
+      const spanContext = activeSpan.spanContext();
+      const storedContext = {
+        traceId: spanContext.traceId,
+        spanId: spanContext.spanId,
+        sampled: core.spanIsSampled(activeSpan)
+      };
+      originalStorage.kv.put(getTraceLinkKey(methodName), storedContext);
+    }
+  } catch (error) {
+    debugBuild.DEBUG_BUILD && core.debug.log(`[CloudflareClient] Error storing span context for method ${methodName}`, error);
+  }
+}
+function getStoredSpanContext(originalStorage, methodName) {
+  try {
+    return originalStorage.kv.get(getTraceLinkKey(methodName));
+  } catch (error) {
+    debugBuild.DEBUG_BUILD && core.debug.log(`[CloudflareClient] Error retrieving span context for method ${methodName}`, error);
+    return void 0;
+  }
+}
+function buildSpanLinks(storedContext) {
+  return [
+    {
+      context: {
+        traceId: storedContext.traceId,
+        spanId: storedContext.spanId,
+        traceFlags: storedContext.sampled ? api.TraceFlags.SAMPLED : api.TraceFlags.NONE
+      },
+      attributes: {
+        [core.SEMANTIC_LINK_ATTRIBUTE_LINK_TYPE]: "previous_trace"
+      }
+    }
+  ];
+}
+
+exports.buildSpanLinks = buildSpanLinks;
+exports.getStoredSpanContext = getStoredSpanContext;
+exports.getTraceLinkKey = getTraceLinkKey;
+exports.storeSpanContext = storeSpanContext;
+//# sourceMappingURL=traceLinks.js.map

package/build/cjs/prod/utils/traceLinks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"traceLinks.js","sources":["../../../../src/utils/traceLinks.ts"],"sourcesContent":["import type { DurableObjectStorage } from '@cloudflare/workers-types';\nimport { TraceFlags } from '@opentelemetry/api';\nimport type { SpanLink } from '@sentry/core';\nimport { debug, getActiveSpan, SEMANTIC_LINK_ATTRIBUTE_LINK_TYPE, spanIsSampled } from '@sentry/core';\nimport { DEBUG_BUILD } from '../debug-build';\n\n/** Storage key prefix for the span context that links consecutive method invocations */\nconst SENTRY_TRACE_LINK_KEY_PREFIX = '__SENTRY_TRACE_LINK__';\n\n/** Stored span context for creating span links */\nexport interface StoredSpanContext {\n  traceId: string;\n  spanId: string;\n  sampled: boolean;\n}\n\n/**\n * Gets the storage key for a specific method's trace link.\n */\nexport function getTraceLinkKey(methodName: string): string {\n  return `${SENTRY_TRACE_LINK_KEY_PREFIX}${methodName}`;\n}\n\n/**\n * Stores the current span context in Durable Object storage for trace linking.\n * Uses the original uninstrumented storage to avoid creating spans for internal operations.\n * Errors are silently ignored to prevent internal storage failures from propagating to user code.\n */\nexport function storeSpanContext(originalStorage: DurableObjectStorage, methodName: string): void {\n  try {\n    const activeSpan = getActiveSpan();\n    if (activeSpan) {\n      const spanContext = activeSpan.spanContext();\n      const storedContext: StoredSpanContext = {\n        traceId: spanContext.traceId,\n        spanId: spanContext.spanId,\n        sampled: spanIsSampled(activeSpan),\n      };\n\n      originalStorage.kv.put(getTraceLinkKey(methodName), storedContext);\n    }\n  } catch (error) {\n    // Silently ignore storage errors to prevent internal failures from affecting user code\n    DEBUG_BUILD && debug.log(`[CloudflareClient] Error storing span context for method ${methodName}`, error);\n  }\n}\n\n/**\n * Retrieves a stored span context from Durable Object storage.\n * Errors are silently ignored to prevent internal storage failures from propagating to user code.\n */\nexport function getStoredSpanContext(\n  originalStorage: DurableObjectStorage,\n  methodName: string,\n): StoredSpanContext | undefined {\n  try {\n    return originalStorage.kv.get<StoredSpanContext>(getTraceLinkKey(methodName));\n  } catch (error) {\n    // Silently ignore storage errors to prevent internal failures from affecting user code\n    DEBUG_BUILD && debug.log(`[CloudflareClient] Error retrieving span context for method ${methodName}`, error);\n    return undefined;\n  }\n}\n\n/**\n * Builds span links from a stored span context.\n */\nexport function buildSpanLinks(storedContext: StoredSpanContext): SpanLink[] {\n  return [\n    {\n      context: {\n        traceId: storedContext.traceId,\n        spanId: storedContext.spanId,\n        traceFlags: storedContext.sampled ? TraceFlags.SAMPLED : TraceFlags.NONE,\n      },\n      attributes: {\n        [SEMANTIC_LINK_ATTRIBUTE_LINK_TYPE]: 'previous_trace',\n      },\n    },\n  ];\n}\n"],"names":["getActiveSpan","spanIsSampled","DEBUG_BUILD","debug","TraceFlags","SEMANTIC_LINK_ATTRIBUTE_LINK_TYPE"],"mappings":";;;;;;AAOA,MAAM,4BAAA,GAA+B,uBAAA;AAY9B,SAAS,gBAAgB,UAAA,EAA4B;AAC1D,EAAA,OAAO,CAAA,EAAG,4BAA4B,CAAA,EAAG,UAAU,CAAA,CAAA;AACrD;AAOO,SAAS,gBAAA,CAAiB,iBAAuC,UAAA,EAA0B;AAChG,EAAA,IAAI;AACF,IAAA,MAAM,aAAaA,kBAAA,EAAc;AACjC,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,MAAM,WAAA,GAAc,WAAW,WAAA,EAAY;AAC3C,MAAA,MAAM,aAAA,GAAmC;AAAA,QACvC,SAAS,WAAA,CAAY,OAAA;AAAA,QACrB,QAAQ,WAAA,CAAY,MAAA;AAAA,QACpB,OAAA,EAASC,mBAAc,UAAU;AAAA,OACnC;AAEA,MAAA,eAAA,CAAgB,EAAA,CAAG,GAAA,CAAI,eAAA,CAAgB,UAAU,GAAG,aAAa,CAAA;AAAA,IACnE;AAAA,EACF,SAAS,KAAA,EAAO;AAEd,IAAAC,sBAAA,IAAeC,UAAA,CAAM,GAAA,CAAI,CAAA,yDAAA,EAA4D,UAAU,IAAI,KAAK,CAAA;AAAA,EAC1G;AACF;AAMO,SAAS,oBAAA,CACd,iBACA,UAAA,EAC+B;AAC/B,EAAA,IAAI;AACF,IAAA,OAAO,eAAA,CAAgB,EAAA,CAAG,GAAA,CAAuB,eAAA,CAAgB,UAAU,CAAC,CAAA;AAAA,EAC9E,SAAS,KAAA,EAAO;AAEd,IAAAD,sBAAA,IAAeC,UAAA,CAAM,GAAA,CAAI,CAAA,4DAAA,EAA+D,UAAU,IAAI,KAAK,CAAA;AAC3G,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAKO,SAAS,eAAe,aAAA,EAA8C;AAC3E,EAAA,OAAO;AAAA,IACL;AAAA,MACE,OAAA,EAAS;AAAA,QACP,SAAS,aAAA,CAAc,OAAA;AAAA,QACvB,QAAQ,aAAA,CAAc,MAAA;AAAA,QACtB,UAAA,EAAY,aAAA,CAAc,OAAA,GAAUC,cAAA,CAAW,UAAUA,cAAA,CAAW;AAAA,OACtE;AAAA,MACA,UAAA,EAAY;AAAA,QACV,CAACC,sCAAiC,GAAG;AAAA;AACvC;AACF,GACF;AACF;;;;;;;"}

package/build/cjs/prod/vendor/stacktrace.js

@@ -0,0 +1,28 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const core = require('@sentry/core');
+
+function workersStackLineParser(getModule2) {
+  const [arg1, arg2] = core.nodeStackLineParser(getModule2);
+  const fn = (line) => {
+    const result = arg2(line);
+    if (result) {
+      const filename = result.filename;
+      result.abs_path = filename !== void 0 && !filename.startsWith("/") ? `/${filename}` : filename;
+      result.in_app = filename !== void 0;
+    }
+    return result;
+  };
+  return [arg1, fn];
+}
+function getModule(filename) {
+  if (!filename) {
+    return;
+  }
+  return core.basename(filename, ".js");
+}
+const defaultStackParser = core.createStackParser(workersStackLineParser(getModule));
+
+exports.defaultStackParser = defaultStackParser;
+exports.getModule = getModule;
+//# sourceMappingURL=stacktrace.js.map

package/build/cjs/prod/vendor/stacktrace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stacktrace.js","sources":["../../../../src/vendor/stacktrace.ts"],"sourcesContent":["// Vendored from https://github.com/robertcepa/toucan-js/blob/036568729e49d0a937de527dc32d73580d9a41b3/packages/toucan-js/src/stacktrace.ts\n// Copyright (c) 2022 Robert Cepa\n// SPDX-License-Identifier: MIT\n\nimport type { StackLineParser, StackLineParserFn, StackParser } from '@sentry/core';\nimport { basename, createStackParser, nodeStackLineParser } from '@sentry/core';\n\ntype GetModuleFn = (filename: string | undefined) => string | undefined;\n\n/**\n * Stack line parser for Cloudflare Workers.\n * This wraps node stack parser and adjusts root paths to match with source maps.\n *\n */\nfunction workersStackLineParser(getModule?: GetModuleFn): StackLineParser {\n  const [arg1, arg2] = nodeStackLineParser(getModule);\n\n  const fn: StackLineParserFn = line => {\n    const result = arg2(line);\n    if (result) {\n      const filename = result.filename;\n      // Workers runtime runs a single bundled file that is always in a virtual root\n      result.abs_path = filename !== undefined && !filename.startsWith('/') ? `/${filename}` : filename;\n      // There is no way to tell what code is in_app and what comes from dependencies (node_modules), since we have one bundled file.\n      // So everything is in_app, unless an error comes from runtime function (ie. JSON.parse), which is determined by the presence of filename.\n      result.in_app = filename !== undefined;\n    }\n    return result;\n  };\n\n  return [arg1, fn];\n}\n\n/**\n * Gets the module from filename.\n *\n * @param filename\n * @returns Module name\n */\nexport function getModule(filename: string | undefined): string | undefined {\n  if (!filename) {\n    return;\n  }\n\n  // In Cloudflare Workers there is always only one bundled file\n  return basename(filename, '.js');\n}\n\n/** Cloudflare Workers stack parser */\nexport const defaultStackParser: StackParser = createStackParser(workersStackLineParser(getModule));\n"],"names":["getModule","nodeStackLineParser","basename","createStackParser"],"mappings":";;;;AAcA,SAAS,uBAAuBA,UAAAA,EAA0C;AACxE,EAAA,MAAM,CAAC,IAAA,EAAM,IAAI,CAAA,GAAIC,yBAAoBD,UAAS,CAAA;AAElD,EAAA,MAAM,KAAwB,CAAA,IAAA,KAAQ;AACpC,IAAA,MAAM,MAAA,GAAS,KAAK,IAAI,CAAA;AACxB,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,MAAM,WAAW,MAAA,CAAO,QAAA;AAExB,MAAA,MAAA,CAAO,QAAA,GAAW,QAAA,KAAa,MAAA,IAAa,CAAC,QAAA,CAAS,WAAW,GAAG,CAAA,GAAI,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAA,GAAK,QAAA;AAGzF,MAAA,MAAA,CAAO,SAAS,QAAA,KAAa,MAAA;AAAA,IAC/B;AACA,IAAA,OAAO,MAAA;AAAA,EACT,CAAA;AAEA,EAAA,OAAO,CAAC,MAAM,EAAE,CAAA;AAClB;AAQO,SAAS,UAAU,QAAA,EAAkD;AAC1E,EAAA,IAAI,CAAC,QAAA,EAAU;AACb,IAAA;AAAA,EACF;AAGA,EAAA,OAAOE,aAAA,CAAS,UAAU,KAAK,CAAA;AACjC;AAGO,MAAM,kBAAA,GAAkCC,sBAAA,CAAkB,sBAAA,CAAuB,SAAS,CAAC;;;;;"}

package/build/cjs/prod/vite/agentClass.js

@@ -0,0 +1,114 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+
+const node_fs = require('node:fs');
+const moduleShape = require('./moduleShape.js');
+
+const AGENT_BASE_CLASSES = {
+  agents: /* @__PURE__ */ new Set(["Agent"]),
+  "agents/mcp": /* @__PURE__ */ new Set(["McpAgent"]),
+  "@cloudflare/ai-chat": /* @__PURE__ */ new Set(["AIChatAgent"]),
+  "@cloudflare/think": /* @__PURE__ */ new Set(["Think"])
+};
+const MAX_DEPTH = 8;
+async function detectAgentClasses(ast, entryId, candidates, resolver) {
+  const ctx = { resolver, modules: /* @__PURE__ */ new Map([[entryId, moduleShape.shapeFromAst(ast)]]) };
+  const detected = /* @__PURE__ */ new Set();
+  for (const name of candidates) {
+    if (await isAgentBinding(ctx, entryId, name, 0, /* @__PURE__ */ new Set())) {
+      detected.add(name);
+    }
+  }
+  return detected;
+}
+function collectAgentCandidates(ast, configuredNames) {
+  const shape = moduleShape.shapeFromAst(ast);
+  const candidates = /* @__PURE__ */ new Set();
+  for (const configured of configuredNames) {
+    if (shape.classes.has(configured)) {
+      candidates.add(configured);
+    }
+    const local = shape.localExports.get(configured);
+    if (local && shape.classes.has(local)) {
+      candidates.add(local);
+    }
+  }
+  return candidates;
+}
+async function isAgentBinding(ctx, moduleId, name, depth, visited) {
+  if (depth > MAX_DEPTH) return false;
+  const key = `${moduleId} ${name}`;
+  if (visited.has(key)) return false;
+  visited.add(key);
+  const shape = await getModuleShape(ctx, moduleId);
+  if (!shape) return false;
+  if (shape.classes.has(name)) {
+    return extendsAgent(ctx, shape, moduleId, shape.classes.get(name), depth, visited);
+  }
+  const imported = shape.imports.get(name);
+  if (imported) {
+    return followImport(ctx, moduleId, imported.source, imported.imported, depth, visited);
+  }
+  if (name === moduleShape.DEFAULT_EXPORT) {
+    if (shape.defaultExportIsClass) {
+      return extendsAgent(ctx, shape, moduleId, shape.defaultExportSuper, depth, visited);
+    }
+    if (shape.defaultExportName) {
+      return isAgentBinding(ctx, moduleId, shape.defaultExportName, depth + 1, visited);
+    }
+  }
+  const localName = shape.localExports.get(name);
+  if (localName) {
+    return isAgentBinding(ctx, moduleId, localName, depth + 1, visited);
+  }
+  const reexport = shape.reexports.get(name);
+  if (reexport) {
+    return followImport(ctx, moduleId, reexport.source, reexport.imported, depth, visited);
+  }
+  for (const source of shape.starExports) {
+    if (await followImport(ctx, moduleId, source, name, depth, visited)) {
+      return true;
+    }
+  }
+  return false;
+}
+async function extendsAgent(ctx, shape, moduleId, superClass, depth, visited) {
+  if (!superClass) return false;
+  if (superClass.kind === "identifier") {
+    return isAgentBinding(ctx, moduleId, superClass.name, depth + 1, visited);
+  }
+  const source = shape.namespaces.get(superClass.object);
+  if (source) {
+    return followImport(ctx, moduleId, source, superClass.property, depth, visited);
+  }
+  return false;
+}
+async function followImport(ctx, importerId, source, importedName, depth, visited) {
+  if (AGENT_BASE_CLASSES[source]?.has(importedName)) return true;
+  if (!ctx.resolver.resolve) return false;
+  let resolved;
+  try {
+    resolved = await ctx.resolver.resolve(source, importerId);
+  } catch {
+    return false;
+  }
+  if (!resolved?.id) return false;
+  if (resolved.id.includes("/node_modules/") || resolved.id.includes("\\node_modules\\")) return false;
+  return isAgentBinding(ctx, resolved.id, importedName, depth + 1, visited);
+}
+async function getModuleShape(ctx, moduleId) {
+  if (ctx.modules.has(moduleId)) return ctx.modules.get(moduleId);
+  let shape;
+  try {
+    const code = ctx.resolver.readFile ? ctx.resolver.readFile(moduleId) : node_fs.readFileSync(moduleId.replace(/[?#].*$/, ""), "utf8");
+    if (typeof code === "string") {
+      shape = moduleShape.shapeFromSource(code);
+    }
+  } catch {
+  }
+  ctx.modules.set(moduleId, shape);
+  return shape;
+}
+
+exports.collectAgentCandidates = collectAgentCandidates;
+exports.detectAgentClasses = detectAgentClasses;
+//# sourceMappingURL=agentClass.js.map

package/build/cjs/prod/vite/agentClass.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentClass.js","sources":["../../../../src/vite/agentClass.ts"],"sourcesContent":["import { readFileSync } from 'node:fs';\nimport { DEFAULT_EXPORT, type ModuleShape, shapeFromAst, shapeFromSource, type SuperRef } from './moduleShape';\nimport type { ProgramBody } from './transform';\n\n/**\n * Agent base classes, keyed by the module specifier they are imported from. A class extending any\n * of these — directly or through a chain of local/imported subclasses — is an `agents` Agent rather\n * than a plain Durable Object.\n *\n * `McpAgent`, `AIChatAgent` and `Think` all extend `Agent` themselves, but they live in packages\n * whose sources we never walk into (see {@link followImport}), so each needs its own entry.\n */\nconst AGENT_BASE_CLASSES: Record<string, ReadonlySet<string>> = {\n  agents: new Set(['Agent']),\n  'agents/mcp': new Set(['McpAgent']),\n  '@cloudflare/ai-chat': new Set(['AIChatAgent']),\n  '@cloudflare/think': new Set(['Think']),\n};\n\n/**\n * How many modules deep the base-class chain is followed. Guards against pathological module graphs;\n * real Agent hierarchies are only a few levels deep.\n */\nconst MAX_DEPTH = 8;\n\n/**\n * The subset of the Vite/Rollup plugin context needed to walk the module graph.\n *\n * `resolve` is optional: without it detection still works, but only for base-class chains declared\n * inside the entry module itself. `readFile` is injectable for tests and defaults to reading disk.\n *\n * Deliberately **no `load`**: awaiting the plugin context's `load()` from inside a `transform` hook\n * deadlocks the build — the module cannot finish loading while its own transform is still pending\n * (Rollup documents this hazard, and Vite's Rolldown pipeline is stricter still). Sibling modules\n * are therefore read straight off disk; see {@link getModuleShape}.\n */\nexport interface ModuleResolver {\n  parse(code: string): ProgramBody;\n  resolve?(source: string, importer: string): Promise<{ id: string } | null | undefined>;\n  readFile?(id: string): string | undefined;\n}\n\ninterface DetectContext {\n  resolver: ModuleResolver;\n  modules: Map<string, ModuleShape | undefined>;\n}\n\n/**\n * Find which of `candidates` (top-level class names in the entry module) are Cloudflare\n * [`agents`](https://www.npmjs.com/package/agents) Agents.\n *\n * An Agent is a Durable Object under the hood, so wrangler configures it as one and the transform\n * would otherwise reach for `instrumentDurableObjectWithSentry`. Detecting the Agent base chain lets\n * it pick `instrumentAgentWithSentry` instead, which adds the Agent-specific telemetry on top.\n *\n * Unlike `WorkerEntrypoint` detection, the chain is followed *across* modules: base classes commonly\n * live in their own file (`import { MyBase } from './base'`), and there is no runtime fallback that\n * would catch a missed one. Resolution stops at package boundaries — a base class imported from\n * `node_modules` is only recognized when it is one of {@link AGENT_BASE_CLASSES}.\n */\nexport async function detectAgentClasses(\n  ast: ProgramBody,\n  entryId: string,\n  candidates: Iterable<string>,\n  resolver: ModuleResolver,\n): Promise<Set<string>> {\n  // The entry's shape comes from the AST Vite already handed us (TypeScript stripped, full\n  // fidelity); only sibling modules fall back to source scanning.\n  const ctx: DetectContext = { resolver, modules: new Map([[entryId, shapeFromAst(ast)]]) };\n\n  const detected = new Set<string>();\n  for (const name of candidates) {\n    // A fresh cycle guard per candidate: a shared one would record \"not an Agent\" for bindings\n    // visited while resolving an earlier candidate that turned out to be unrelated.\n    if (await isAgentBinding(ctx, entryId, name, 0, new Set())) {\n      detected.add(name);\n    }\n  }\n  return detected;\n}\n\n/**\n * The local class names in the entry that a configured class name could refer to — either declared\n * under that name directly, or aliased to it by an `export { Local as Configured }` specifier.\n *\n * Keeps detection (which reads and scans other modules) off classes that no binding points at.\n */\nexport function collectAgentCandidates(ast: ProgramBody, configuredNames: Iterable<string>): Set<string> {\n  const shape = shapeFromAst(ast);\n  const candidates = new Set<string>();\n\n  for (const configured of configuredNames) {\n    if (shape.classes.has(configured)) {\n      candidates.add(configured);\n    }\n    const local = shape.localExports.get(configured);\n    if (local && shape.classes.has(local)) {\n      candidates.add(local);\n    }\n  }\n\n  return candidates;\n}\n\nasync function isAgentBinding(\n  ctx: DetectContext,\n  moduleId: string,\n  name: string,\n  depth: number,\n  visited: Set<string>,\n): Promise<boolean> {\n  if (depth > MAX_DEPTH) return false;\n\n  const key = `${moduleId} ${name}`;\n  if (visited.has(key)) return false;\n  visited.add(key);\n\n  const shape = await getModuleShape(ctx, moduleId);\n  if (!shape) return false;\n\n  if (shape.classes.has(name)) {\n    return extendsAgent(ctx, shape, moduleId, shape.classes.get(name), depth, visited);\n  }\n\n  const imported = shape.imports.get(name);\n  if (imported) {\n    return followImport(ctx, moduleId, imported.source, imported.imported, depth, visited);\n  }\n\n  if (name === DEFAULT_EXPORT) {\n    if (shape.defaultExportIsClass) {\n      return extendsAgent(ctx, shape, moduleId, shape.defaultExportSuper, depth, visited);\n    }\n    if (shape.defaultExportName) {\n      return isAgentBinding(ctx, moduleId, shape.defaultExportName, depth + 1, visited);\n    }\n  }\n\n  // `export { Local as Requested }` — the caller asked by exported name.\n  const localName = shape.localExports.get(name);\n  if (localName) {\n    return isAgentBinding(ctx, moduleId, localName, depth + 1, visited);\n  }\n\n  const reexport = shape.reexports.get(name);\n  if (reexport) {\n    return followImport(ctx, moduleId, reexport.source, reexport.imported, depth, visited);\n  }\n\n  // Barrel modules (`export * from './base'`) don't name the binding, so every star source is a\n  // candidate home for it.\n  for (const source of shape.starExports) {\n    if (await followImport(ctx, moduleId, source, name, depth, visited)) {\n      return true;\n    }\n  }\n\n  return false;\n}\n\n/**\n * Whether a superclass reference resolves to an Agent base — a bare identifier (imported, or a\n * subclass declared in the same module) or `ns.Agent` off a namespace import.\n */\nasync function extendsAgent(\n  ctx: DetectContext,\n  shape: ModuleShape,\n  moduleId: string,\n  superClass: SuperRef | undefined,\n  depth: number,\n  visited: Set<string>,\n): Promise<boolean> {\n  if (!superClass) return false;\n\n  if (superClass.kind === 'identifier') {\n    return isAgentBinding(ctx, moduleId, superClass.name, depth + 1, visited);\n  }\n\n  const source = shape.namespaces.get(superClass.object);\n  if (source) {\n    return followImport(ctx, moduleId, source, superClass.property, depth, visited);\n  }\n\n  return false;\n}\n\n/** Resolve an import to its module and continue the search there, stopping at package boundaries. */\nasync function followImport(\n  ctx: DetectContext,\n  importerId: string,\n  source: string,\n  importedName: string,\n  depth: number,\n  visited: Set<string>,\n): Promise<boolean> {\n  if (AGENT_BASE_CLASSES[source]?.has(importedName)) return true;\n\n  if (!ctx.resolver.resolve) return false;\n\n  let resolved: { id: string } | null | undefined;\n  try {\n    resolved = await ctx.resolver.resolve(source, importerId);\n  } catch {\n    return false;\n  }\n  if (!resolved?.id) return false;\n\n  // Third-party sources are not walked: they are large, may not be plain JS by the time we see\n  // them, and any Agent base worth knowing about is listed in AGENT_BASE_CLASSES.\n  if (resolved.id.includes('/node_modules/') || resolved.id.includes('\\\\node_modules\\\\')) return false;\n\n  return isAgentBinding(ctx, resolved.id, importedName, depth + 1, visited);\n}\n\nasync function getModuleShape(ctx: DetectContext, moduleId: string): Promise<ModuleShape | undefined> {\n  if (ctx.modules.has(moduleId)) return ctx.modules.get(moduleId);\n\n  let shape: ModuleShape | undefined;\n  try {\n    const code = ctx.resolver.readFile\n      ? ctx.resolver.readFile(moduleId)\n      : readFileSync(moduleId.replace(/[?#].*$/, ''), 'utf8');\n    if (typeof code === 'string') {\n      shape = shapeFromSource(code);\n    }\n  } catch {\n    // Unreadable or not a source file — treat as \"not an Agent\" rather than failing the build.\n  }\n\n  ctx.modules.set(moduleId, shape);\n  return shape;\n}\n"],"names":["shapeFromAst","DEFAULT_EXPORT","readFileSync","shapeFromSource"],"mappings":";;;;;AAYA,MAAM,kBAAA,GAA0D;AAAA,EAC9D,MAAA,kBAAQ,IAAI,GAAA,CAAI,CAAC,OAAO,CAAC,CAAA;AAAA,EACzB,YAAA,kBAAc,IAAI,GAAA,CAAI,CAAC,UAAU,CAAC,CAAA;AAAA,EAClC,qBAAA,kBAAuB,IAAI,GAAA,CAAI,CAAC,aAAa,CAAC,CAAA;AAAA,EAC9C,mBAAA,kBAAqB,IAAI,GAAA,CAAI,CAAC,OAAO,CAAC;AACxC,CAAA;AAMA,MAAM,SAAA,GAAY,CAAA;AAqClB,eAAsB,kBAAA,CACpB,GAAA,EACA,OAAA,EACA,UAAA,EACA,QAAA,EACsB;AAGtB,EAAA,MAAM,GAAA,GAAqB,EAAE,QAAA,EAAU,OAAA,sBAAa,GAAA,CAAI,CAAC,CAAC,OAAA,EAASA,wBAAA,CAAa,GAAG,CAAC,CAAC,CAAC,CAAA,EAAE;AAExF,EAAA,MAAM,QAAA,uBAAe,GAAA,EAAY;AACjC,EAAA,KAAA,MAAW,QAAQ,UAAA,EAAY;AAG7B,IAAA,IAAI,MAAM,eAAe,GAAA,EAAK,OAAA,EAAS,MAAM,CAAA,kBAAG,IAAI,GAAA,EAAK,CAAA,EAAG;AAC1D,MAAA,QAAA,CAAS,IAAI,IAAI,CAAA;AAAA,IACnB;AAAA,EACF;AACA,EAAA,OAAO,QAAA;AACT;AAQO,SAAS,sBAAA,CAAuB,KAAkB,eAAA,EAAgD;AACvG,EAAA,MAAM,KAAA,GAAQA,yBAAa,GAAG,CAAA;AAC9B,EAAA,MAAM,UAAA,uBAAiB,GAAA,EAAY;AAEnC,EAAA,KAAA,MAAW,cAAc,eAAA,EAAiB;AACxC,IAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,UAAU,CAAA,EAAG;AACjC,MAAA,UAAA,CAAW,IAAI,UAAU,CAAA;AAAA,IAC3B;AACA,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,YAAA,CAAa,GAAA,CAAI,UAAU,CAAA;AAC/C,IAAA,IAAI,KAAA,IAAS,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,KAAK,CAAA,EAAG;AACrC,MAAA,UAAA,CAAW,IAAI,KAAK,CAAA;AAAA,IACtB;AAAA,EACF;AAEA,EAAA,OAAO,UAAA;AACT;AAEA,eAAe,cAAA,CACb,GAAA,EACA,QAAA,EACA,IAAA,EACA,OACA,OAAA,EACkB;AAClB,EAAA,IAAI,KAAA,GAAQ,WAAW,OAAO,KAAA;AAE9B,EAAA,MAAM,GAAA,GAAM,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA;AAC/B,EAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA,EAAG,OAAO,KAAA;AAC7B,EAAA,OAAA,CAAQ,IAAI,GAAG,CAAA;AAEf,EAAA,MAAM,KAAA,GAAQ,MAAM,cAAA,CAAe,GAAA,EAAK,QAAQ,CAAA;AAChD,EAAA,IAAI,CAAC,OAAO,OAAO,KAAA;AAEnB,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA,EAAG;AAC3B,IAAA,OAAO,YAAA,CAAa,GAAA,EAAK,KAAA,EAAO,QAAA,EAAU,KAAA,CAAM,QAAQ,GAAA,CAAI,IAAI,CAAA,EAAG,KAAA,EAAO,OAAO,CAAA;AAAA,EACnF;AAEA,EAAA,MAAM,QAAA,GAAW,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAA;AACvC,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,OAAO,YAAA,CAAa,KAAK,QAAA,EAAU,QAAA,CAAS,QAAQ,QAAA,CAAS,QAAA,EAAU,OAAO,OAAO,CAAA;AAAA,EACvF;AAEA,EAAA,IAAI,SAASC,0BAAA,EAAgB;AAC3B,IAAA,IAAI,MAAM,oBAAA,EAAsB;AAC9B,MAAA,OAAO,aAAa,GAAA,EAAK,KAAA,EAAO,UAAU,KAAA,CAAM,kBAAA,EAAoB,OAAO,OAAO,CAAA;AAAA,IACpF;AACA,IAAA,IAAI,MAAM,iBAAA,EAAmB;AAC3B,MAAA,OAAO,eAAe,GAAA,EAAK,QAAA,EAAU,MAAM,iBAAA,EAAmB,KAAA,GAAQ,GAAG,OAAO,CAAA;AAAA,IAClF;AAAA,EACF;AAGA,EAAA,MAAM,SAAA,GAAY,KAAA,CAAM,YAAA,CAAa,GAAA,CAAI,IAAI,CAAA;AAC7C,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,OAAO,eAAe,GAAA,EAAK,QAAA,EAAU,SAAA,EAAW,KAAA,GAAQ,GAAG,OAAO,CAAA;AAAA,EACpE;AAEA,EAAA,MAAM,QAAA,GAAW,KAAA,CAAM,SAAA,CAAU,GAAA,CAAI,IAAI,CAAA;AACzC,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,OAAO,YAAA,CAAa,KAAK,QAAA,EAAU,QAAA,CAAS,QAAQ,QAAA,CAAS,QAAA,EAAU,OAAO,OAAO,CAAA;AAAA,EACvF;AAIA,EAAA,KAAA,MAAW,MAAA,IAAU,MAAM,WAAA,EAAa;AACtC,IAAA,IAAI,MAAM,aAAa,GAAA,EAAK,QAAA,EAAU,QAAQ,IAAA,EAAM,KAAA,EAAO,OAAO,CAAA,EAAG;AACnE,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,OAAO,KAAA;AACT;AAMA,eAAe,aACb,GAAA,EACA,KAAA,EACA,QAAA,EACA,UAAA,EACA,OACA,OAAA,EACkB;AAClB,EAAA,IAAI,CAAC,YAAY,OAAO,KAAA;AAExB,EAAA,IAAI,UAAA,CAAW,SAAS,YAAA,EAAc;AACpC,IAAA,OAAO,eAAe,GAAA,EAAK,QAAA,EAAU,WAAW,IAAA,EAAM,KAAA,GAAQ,GAAG,OAAO,CAAA;AAAA,EAC1E;AAEA,EAAA,MAAM,MAAA,GAAS,KAAA,CAAM,UAAA,CAAW,GAAA,CAAI,WAAW,MAAM,CAAA;AACrD,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,OAAO,aAAa,GAAA,EAAK,QAAA,EAAU,QAAQ,UAAA,CAAW,QAAA,EAAU,OAAO,OAAO,CAAA;AAAA,EAChF;AAEA,EAAA,OAAO,KAAA;AACT;AAGA,eAAe,aACb,GAAA,EACA,UAAA,EACA,MAAA,EACA,YAAA,EACA,OACA,OAAA,EACkB;AAClB,EAAA,IAAI,mBAAmB,MAAM,CAAA,EAAG,GAAA,CAAI,YAAY,GAAG,OAAO,IAAA;AAE1D,EAAA,IAAI,CAAC,GAAA,CAAI,QAAA,CAAS,OAAA,EAAS,OAAO,KAAA;AAElC,EAAA,IAAI,QAAA;AACJ,EAAA,IAAI;AACF,IAAA,QAAA,GAAW,MAAM,GAAA,CAAI,QAAA,CAAS,OAAA,CAAQ,QAAQ,UAAU,CAAA;AAAA,EAC1D,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,IAAI,CAAC,QAAA,EAAU,EAAA,EAAI,OAAO,KAAA;AAI1B,EAAA,IAAI,QAAA,CAAS,EAAA,CAAG,QAAA,CAAS,gBAAgB,CAAA,IAAK,SAAS,EAAA,CAAG,QAAA,CAAS,kBAAkB,CAAA,EAAG,OAAO,KAAA;AAE/F,EAAA,OAAO,eAAe,GAAA,EAAK,QAAA,CAAS,IAAI,YAAA,EAAc,KAAA,GAAQ,GAAG,OAAO,CAAA;AAC1E;AAEA,eAAe,cAAA,CAAe,KAAoB,QAAA,EAAoD;AACpG,EAAA,IAAI,GAAA,CAAI,QAAQ,GAAA,CAAI,QAAQ,GAAG,OAAO,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA;AAE9D,EAAA,IAAI,KAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,QAAA,CAAS,QAAA,GACtB,IAAI,QAAA,CAAS,QAAA,CAAS,QAAQ,CAAA,GAC9BC,qBAAa,QAAA,CAAS,OAAA,CAAQ,SAAA,EAAW,EAAE,GAAG,MAAM,CAAA;AACxD,IAAA,IAAI,OAAO,SAAS,QAAA,EAAU;AAC5B,MAAA,KAAA,GAAQC,4BAAgB,IAAI,CAAA;AAAA,IAC9B;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AAEA,EAAA,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,QAAA,EAAU,KAAK,CAAA;AAC/B,EAAA,OAAO,KAAA;AACT;;;;;"}