@ciandt-flow/flow-ai-obs 0.4.1-beta.66 → 0.4.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli.js +62 -62
- package/dist/index.js +11 -11
- package/dist/setup.js +6 -6
- package/package.json +2 -2
package/dist/cli.js
CHANGED
|
@@ -1,54 +1,54 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
'use strict';var
|
|
2
|
+
'use strict';var u=(e=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(e,{get:(t,n)=>(typeof require<"u"?require:t)[n]}):e)(function(e){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+e+'" is not supported')});var l=(e,t)=>()=>(t||e((t={exports:{}}).exports,t),t.exports);var Se=l((Ba,fs)=>{fs.exports={name:"@ciandt-flow/flow-ai-obs",version:"0.4.1",description:"Claude Code hooks for Langfuse OTLP tracing \u2014 cross-platform",main:"dist/index.js",bin:{"flow-ai-obs":"dist/cli.js","flow-ai-obs-setup":"dist/setup.js"},scripts:{build:"tsup",test:"node --test src/**/*.test.js",typecheck:"node --check src/**/*.js bin/cli.js",lint:"node --check src/**/*.js bin/cli.js","security-scan":"trufflehog filesystem src/ --fail --no-update --exclude-paths .trufflehogignore",postinstall:`node -e "require('fs').existsSync('dist/setup.js') && require('child_process').execFileSync(process.execPath, ['dist/setup.js'], {stdio:'inherit'})"`,prepublishOnly:"npm run security-scan && npm run build","release:npm":"changeset publish",changeset:"changeset","version-packages":"changeset version","install:hooks":"node bin/cli.js install","auth:login":"node bin/cli.js auth login","auth:logout":"node bin/cli.js auth logout","auth:status":"node bin/cli.js auth status",smoke:"bash scripts/smoke-test.sh","smoke:debug":"bash scripts/smoke-test.sh --debug","smoke:send":"bash scripts/smoke-test.sh --send --allow-http --debug"},files:["dist/","README.md","LICENSE.md"],keywords:["claude-code","langfuse","observability","otlp","hooks","flow","ciandt"],author:"CI&T Flow Team",license:"SEE LICENSE IN LICENSE.md",private:false,dependencies:{keytar:"7.9.0"},devDependencies:{"@changesets/changelog-github":"^0.6.0","@changesets/cli":"^2.30.0",tsup:"^8.5.1",typescript:"^6.0.3"},engines:{node:">=18.0.0"},publishConfig:{registry:"https://registry.npmjs.org",access:"public"},repository:{type:"git",url:"git+https://github.com/CI-T-HyperX/flow-codeassistant-observability.git"}};});var B=l((Ha,ft)=>{var hs=!process.env.NO_COLOR&&process.stdout.isTTY;function D(e,t){return hs?n=>`\x1B[${e}m${n}\x1B[${t}m`:n=>n}var Ts=D("32","39"),Ss=D("31","39"),Es=D("33","39"),ws=D("36","39"),_s=D("1","22"),gs=D("2","22");ft.exports={green:Ts,red:Ss,yellow:Es,cyan:ws,bold:_s,dim:gs};});var Ee=l((Ya,wt)=>{var ys=u("https"),St=u("fs"),ms=u("os"),As=u("path"),{spawn:Ls}=u("child_process"),ve;function H(){return ve||(ve=Se()),ve}var Et=As.join(ms.tmpdir(),"flow-obs-update-cache.json"),Os=1440*60*1e3,Is=3e3;function be(e,t){let n=r=>{let i=String(r).replace(/^v/,"").match(/^(\d+)\.(\d+)\.(\d+)/);return i?[+i[1],+i[2],+i[3]]:null},s=n(e),o=n(t);return !s||!o?false:o[0]!==s[0]?o[0]>s[0]:o[1]!==s[1]?o[1]>s[1]:o[2]>s[2]}function Ns(){try{let e=JSON.parse(St.readFileSync(Et,"utf8"));return typeof e.latestVersion!="string"||Date.now()-e.checkedAt>=Os?null:e}catch{return null}}function ks(e,t){try{St.writeFileSync(Et,JSON.stringify({latestVersion:e,updatePriority:t||null,checkedAt:Date.now()}),{mode:384});}catch{}}function Cs(e){let t=H().name,n=ys.get(`https://registry.npmjs.org/${encodeURIComponent(t)}/latest`,{timeout:Is},s=>{if(s.statusCode!==200)return s.resume(),e(new Error(`HTTP ${s.statusCode}`));let o="";s.setEncoding("utf8"),s.on("data",r=>{o+=r;}),s.on("end",()=>{try{let r=JSON.parse(o);if(typeof r.version!="string")throw new Error("no version field");e(null,{version:r.version,updatePriority:typeof r.updatePriority=="string"?r.updatePriority:null});}catch(r){e(r);}});});n.on("error",e),n.on("timeout",()=>{n.destroy(new Error("timeout"));});}function ht(e){let t=H().name,s=` Update available: ${H().version} \u2192 ${e}`,o=` Run: npm install -g ${t}`,r=Math.max(s.length,o.length)+2,i="\u2500".repeat(r);process.stderr.write(`
|
|
3
3
|
\u256D${i}\u256E
|
|
4
4
|
\u2502${s.padEnd(r)}\u2502
|
|
5
5
|
\u2502${o.padEnd(r)}\u2502
|
|
6
6
|
\u2570${i}\u256F
|
|
7
7
|
|
|
8
|
-
`);}function Tt(e){let t=
|
|
8
|
+
`);}function Tt(e){let t=H().name;process.stderr.write(`
|
|
9
9
|
[${t}] Critical update detected \u2014 auto-updating to ${e}...
|
|
10
10
|
|
|
11
|
-
`),
|
|
12
|
-
`,{encoding:"utf8",mode:384});try{_.chmodSync(e,384);}catch{}}finally{Ot(t);}return {settingsPath:e,preserved:n}}async function
|
|
13
|
-
`,{encoding:"utf8",mode:384});try{_.chmodSync(t,384);}catch{}}finally{Ot(n);}}
|
|
14
|
-
`;try{
|
|
15
|
-
`);}}Yt.exports={dbg
|
|
16
|
-
`){
|
|
17
|
-
`),n(i);return}if(
|
|
11
|
+
`),Ls("npm",["install","-g",`${t}@${e}`],{detached:true,stdio:"ignore",windowsHide:true}).unref();}function vs(){try{let e=Ns();if(e){be(H().version,e.latestVersion)&&(e.updatePriority==="auto"?Tt(e.latestVersion):ht(e.latestVersion));return}setImmediate(()=>{Cs((t,n)=>{t||!n||(ks(n.version,n.updatePriority),be(H().version,n.version)&&(n.updatePriority==="auto"?Tt(n.version):ht(n.version)));});});}catch{}}wt.exports={checkForUpdate:vs,isNewer:be};});var w=l((ja,gt)=>{var Y=process.env.FLOW_BASE_URL||"https://flow.ciandt.com",_t={AUTH_ENGINE:process.env.FLOW_AUTH_ENGINE_URL||`${Y}/auth-engine-api/v2/api-key/token`,GATEWAY_TRACES:process.env.FLOW_GATEWAY_TRACES_URL||`${Y}/flow-langfuse-gateway/v1/traces`,GATEWAY_HEALTH:process.env.FLOW_GATEWAY_HEALTH_URL||`${Y}/flow-langfuse-gateway/v1/health`,OTEL_ENDPOINT:process.env.FLOW_OTEL_ENDPOINT_URL||`${Y}/otel`},bs={SERVICE:"flow-plugins-cli",ACCOUNT_CREDS:"credentials",ACCOUNT_TOKEN:"token-cache"},Us="FLOW-nodejs",Rs="config.json",Ps={SCOPE_NAME:"flow-ai-obs",SCOPE_VERSION:"0.1.0"},Fs={ANTHROPIC_BASE_URL:process.env.FLOW_LLM_PROXY_URL||`${Y}/flow-llm-proxy/`,ANTHROPIC_MODEL:process.env.FLOW_LLM_PROXY_MODEL||"anthropic.claude-4-6-sonnet",ANTHROPIC_SMALL_FAST_MODEL:process.env.FLOW_LLM_PROXY_SMALL_MODEL||"anthropic.claude-4-6-sonnet",CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS:"1"},$s={CLAUDE_CODE_ENABLE_TELEMETRY:"1",OTEL_EXPORTER_OTLP_ENDPOINT:_t.OTEL_ENDPOINT,OTEL_EXPORTER_OTLP_PROTOCOL:"http/json",OTEL_METRICS_EXPORTER:"otlp",OTEL_LOGS_EXPORTER:"otlp",OTEL_LOG_TOOL_DETAILS:"1",OTEL_LOG_USER_PROMPTS:"1"},qs={FLOW_TELEMETRY:"FLOW_TELEMETRY",FLOW_TELEMETRY_GATEWAY:"FLOW_TELEMETRY_GATEWAY_URL",LANGFUSE_BASE_URL:"LANGFUSE_BASE_URL",LANGFUSE_PUBLIC_KEY:"LANGFUSE_PUBLIC_KEY",LANGFUSE_SECRET_KEY:"LANGFUSE_SECRET_KEY",ANTHROPIC_MODEL:"ANTHROPIC_MODEL",ANTHROPIC_AUTH_TOKEN:"ANTHROPIC_AUTH_TOKEN",FLOW_OBS_DEBUG:"FLOW_TELEMETRY_DEBUG",FLOW_OBS_ALLOW_HTTP:"FLOW_TELEMETRY_ALLOW_HTTP",BUFFER_TTL_DAYS:"FLOW_TELEMETRY_BUFFER_TTL_DAYS",BUFFER_MAX_FILES:"FLOW_TELEMETRY_BUFFER_MAX_FILES"},xs={KEYCHAIN_ENABLED:false},Ms={LOCK_STALE_MS:3e4,CONNECTIVITY_MAX_RETRY:3,CONNECTIVITY_RETRY_MS:2e3},Ds={UserPromptSubmit:5,PreToolUse:3,PostToolUse:10,Stop:15},Bs={FILE_PREFIX:"flow-obs-buffer-",DEFAULT_TTL_DAYS:4,MIN_TTL_DAYS:1,MAX_TTL_DAYS:30,DEFAULT_MAX_FILES:50,MIN_MAX_FILES:1,MAX_MAX_FILES:500,REPLAY_BATCH_SIZE:10},Hs="flow-ai-obs-debug.log",Ys={TOOL_INPUT:2e4,TOOL_OUTPUT:2e4,TRACE_OUTPUT:2e4,USER_INSTRUCTION:1e4,TRACE_INPUT:5e4,TOOL_BRIEF:60},js="flow-obs-";gt.exports={FLOW_BASE_URL:Y,FLOW_URLS:_t,VAULT:bs,CONFIG_DIR_NAME:Us,CONFIG_FILE_NAME:Rs,OTLP:Ps,LLM_PROXY:Fs,NATIVE_OTEL:$s,ENV:qs,FEATURES:xs,INSTALLER:Ms,HOOK_TIMEOUTS:Ds,BUFFER:Bs,DEBUG_LOG_FILENAME:Hs,STATE_FILE_PREFIX:js,TRACE_LIMITS:Ys};});var Q=l((Ga,mt)=>{var Gs=u("https"),Ks=u("http"),{FLOW_URLS:Ws}=w(),Vs=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function Js(e){if(!Vs.test(e))throw new Error(`Invalid tenant value: "${e}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}var yt={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};function Xs(e,t){try{let n=JSON.parse(t);if(typeof n.error=="string"&&yt[n.error])return new Error(yt[n.error])}catch{}return e===401||e===403||e===500?new Error("Invalid credentials"):e>=400&&e<500?new Error("Authentication request was rejected"):new Error("Authentication service unavailable, please try again later")}function zs(e){return new Promise((t,n)=>{try{Js(e.tenant);}catch(p){return n(p)}let s=JSON.stringify({clientSecret:e.clientSecret}),o=new URL(Ws.AUTH_ENGINE),r=o.protocol==="https:",i={hostname:o.hostname,port:o.port||(r?443:80),path:o.pathname+o.search,method:"POST",headers:{"Content-Type":"application/json","Content-Length":Buffer.byteLength(s),FlowTenant:e.tenant}},c=(r?Gs:Ks).request(i,p=>{let h=[];p.on("data",S=>h.push(S)),p.on("end",()=>{let S=h.join("");if(p.statusCode>=400)return n(Xs(p.statusCode,S));let f;try{f=JSON.parse(S);}catch{return n(new Error("Invalid response from auth engine"))}let y=f.expires_at??new Date(Date.now()+(f.expires_in??3600)*1e3).toISOString();t({accessToken:f.access_token,expiresAt:y});});});c.on("error",p=>n(new Error(`Network error: ${p.message}`))),c.write(s),c.end();})}mt.exports={getToken:zs};});var ne=l((Ka,It)=>{var _=u("fs"),te=u("path"),At=u("os"),{FLOW_URLS:Zs,INSTALLER:ee,HOOK_TIMEOUTS:Qs,NATIVE_OTEL:er,LLM_PROXY:tr}=w(),{getToken:nr}=Q();function Re(){return process.platform==="win32"?te.join(process.env.APPDATA||te.join(At.homedir(),"AppData","Roaming"),"Claude","settings.json"):te.join(At.homedir(),".claude","settings.json")}var sr=ee.LOCK_STALE_MS;function Lt(e){try{let t=_.statSync(e);Date.now()-t.mtimeMs>sr&&_.unlinkSync(e);}catch{}try{_.writeFileSync(e,String(process.pid),{flag:"wx"});}catch(t){throw t.code==="EEXIST"?new Error("Another install is already in progress. If this is stale, remove: "+e):t}}function Ot(e){try{_.unlinkSync(e);}catch{}}function rr(e,t){let s=(Array.isArray(e)?e:[]).map(o=>{if(!Array.isArray(o?.hooks))return null;let r=o.hooks.filter(i=>!i.command?.startsWith?.("flow-ai-obs "));return r.length>0?{...o,hooks:r}:null}).filter(o=>o!=null);return [t,...s]}function or(){let e=Re(),t=e+".lock";_.mkdirSync(te.dirname(e),{recursive:true});let n=[];Lt(t);try{if(_.existsSync(e)){_.copyFileSync(e,e+".bkp");try{_.chmodSync(e+".bkp",384);}catch{}}let s={};try{s=JSON.parse(_.readFileSync(e,"utf8"));}catch{}(!s.env||typeof s.env!="object")&&(s.env={}),Object.assign(s.env,er),Object.assign(s.env,tr),s.otelHeadersHelper="flow-ai-obs otel-headers",(!s.hooks||typeof s.hooks!="object"||Array.isArray(s.hooks))&&(s.hooks={});let o=(i,a)=>({matcher:"",hooks:[{type:"command",command:`flow-ai-obs ${i}`,timeout:a}]}),r=["UserPromptSubmit","PreToolUse","PostToolUse","Stop"];for(let i of r){let a=rr(s.hooks[i],o(i,Qs[i]));a.length>1&&n.push(i),s.hooks[i]=a;}_.writeFileSync(e,JSON.stringify(s,null,2)+`
|
|
12
|
+
`,{encoding:"utf8",mode:384});try{_.chmodSync(e,384);}catch{}}finally{Ot(t);}return {settingsPath:e,preserved:n}}async function ir(e){let t;try{t=(await nr(e)).accessToken;}catch{return false}return t?new Promise(n=>{Ue(`Bearer ${t}`,n,1);}):false}function Ue(e,t,n){let s=new URL(Zs.GATEWAY_TRACES),o=JSON.stringify({resourceSpans:[],validation_run:true}),r=s.protocol==="https:",i={hostname:s.hostname,port:s.port||(r?443:80),path:s.pathname,method:"POST",headers:{"Content-Type":"application/json",Authorization:e,"Content-Length":Buffer.byteLength(o)}},c=(r?u("https"):u("http")).request(i,p=>{p.resume(),p.statusCode===200||p.statusCode===204?t(true):n<ee.CONNECTIVITY_MAX_RETRY?setTimeout(()=>Ue(e,t,n+1),ee.CONNECTIVITY_RETRY_MS):t(false);});c.on("error",()=>{n<ee.CONNECTIVITY_MAX_RETRY?setTimeout(()=>Ue(e,t,n+1),ee.CONNECTIVITY_RETRY_MS):t(false);}),c.write(o),c.end();}function ar(e){let t=Re(),n=t+".lock";_.mkdirSync(te.dirname(t),{recursive:true}),Lt(n);try{let s={};try{s=JSON.parse(_.readFileSync(t,"utf8"));}catch{}(!s.env||typeof s.env!="object")&&(s.env={}),Object.assign(s.env,e),_.writeFileSync(t,JSON.stringify(s,null,2)+`
|
|
13
|
+
`,{encoding:"utf8",mode:384});try{_.chmodSync(t,384);}catch{}}finally{Ot(n);}}It.exports={getClaudeSettingsPath:Re,writeClaudeSettings:or,addEnvToClaudeSettings:ar,validateConnectivity:ir};});var Ct=l((Wa,kt)=>{var re=u("fs"),j=u("path"),cr=u("os"),{CONFIG_DIR_NAME:Pe,CONFIG_FILE_NAME:Fe}=w(),$e={credentials:"credentials","token-cache":"tokenCache"};function se(){let e=cr.homedir();if(process.platform==="darwin")return j.join(e,"Library","Preferences",Pe,Fe);if(process.platform==="win32"){let n=process.env.APPDATA||j.join(e,"AppData","Roaming");return j.join(n,Pe,Fe)}let t=process.env.XDG_CONFIG_HOME||j.join(e,".config");return j.join(t,Pe,Fe)}function qe(){try{let e=re.readFileSync(se(),"utf8");return JSON.parse(e)}catch{return {}}}function Nt(e){let t=se();re.mkdirSync(j.dirname(t),{recursive:true}),re.writeFileSync(t,JSON.stringify(e,null,2),{encoding:"utf8",mode:384});}var we=class{static isAvailable(){return true}static hasExistingData(){try{if(!re.existsSync(se()))return !1;let t=JSON.parse(re.readFileSync(se(),"utf8"));return !!(t&&t.credentials)}catch{return false}}async getSecret(t,n){let s=qe(),o=$e[n]||n,r=s[o];return r?typeof r=="string"?r:JSON.stringify(r):null}async setSecret(t,n,s){let o=qe(),r=$e[n]||n;if(n==="token-cache")try{o[r]=JSON.parse(s);}catch{o[r]=s;}else o[r]=s;Nt(o);}async deleteSecret(t,n){let s=qe(),o=$e[n]||n;return o in s?(delete s[o],Nt(s),true):false}getStoragePath(){return `config.json (unencrypted) \u2014 ${se()}`}};function ur(){}var lr=we;kt.exports={JsonFallbackProvider:we,ScryptFallbackProvider:lr,_resetWarningState:ur};});var bt=l((Va,vt)=>{var{execFile:dr}=u("child_process"),{promisify:pr}=u("util"),{accessSync:fr,constants:hr}=u("fs"),xe=pr(dr),Me=class{static async isAvailable(){try{return fr("/usr/bin/security",hr.X_OK),!0}catch{return false}}async getSecret(t,n){try{let{stdout:s}=await xe("security",["find-generic-password","-w","-a",n,"-s",t]);return s.trim()||null}catch{return null}}async setSecret(t,n,s){await xe("security",["add-generic-password","-U","-a",n,"-s",t,"-w",s]);}async deleteSecret(t,n){try{return await xe("security",["delete-generic-password","-a",n,"-s",t]),!0}catch{return false}}getStoragePath(){return "macOS Keychain"}};vt.exports={MacOsKeyVaultProvider:Me};});var Pt=l((Ja,Rt)=>{var{execFile:Tr,spawn:Sr}=u("child_process"),{promisify:Er}=u("util"),{accessSync:wr,constants:_r}=u("fs"),Ut=Er(Tr),De=class{static async isAvailable(){let t=["/usr/bin/secret-tool","/bin/secret-tool","/usr/local/bin/secret-tool"];for(let n of t)try{return wr(n,_r.X_OK),!0}catch{}return false}async getSecret(t,n){try{let{stdout:s}=await Ut("secret-tool",["lookup","service",t,"account",n]);return s.trim()||null}catch{return null}}async setSecret(t,n,s){await new Promise((o,r)=>{let i=Sr("secret-tool",["store","--label",t,"service",t,"account",n]);i.on("error",r),i.on("close",a=>{a===0?o():r(new Error(`secret-tool exited with code ${a}`));}),i.stdin.write(s),i.stdin.end();});}async deleteSecret(t,n){try{return await Ut("secret-tool",["clear","service",t,"account",n]),!0}catch{return false}}getStoragePath(){return "Linux Secret Service (libsecret)"}};Rt.exports={LinuxKeyVaultProvider:De};});var $t=l((Xa,Ft)=>{var Be=class{static async isAvailable(){try{return await u("keytar").getPassword("__flow_probe__","__flow_probe__"),!0}catch{return false}}async getSecret(t,n){return u("keytar").getPassword(t,n)}async setSecret(t,n,s){await u("keytar").setPassword(t,n,s);}async deleteSecret(t,n){return u("keytar").deletePassword(t,n)}getStoragePath(){return "Windows Credential Manager"}};Ft.exports={WindowsKeyVaultProvider:Be};});var Mt=l((za,xt)=>{async function qt(){let{JsonFallbackProvider:e}=Ct();return await gr()??new e}async function gr(){switch(process.platform){case "darwin":{let{MacOsKeyVaultProvider:e}=bt();return await e.isAvailable()?new e:null}case "linux":{let{LinuxKeyVaultProvider:e}=Pt();return await e.isAvailable()?new e:null}case "win32":{let{WindowsKeyVaultProvider:e}=$t();return await e.isAvailable()?new e:null}default:return null}}var yr=qt;xt.exports={createSecretVaultProvider:qt,createKeyVaultProvider:yr};});var W=l((Za,Bt)=>{var{createSecretVaultProvider:mr}=Mt(),{VAULT:Ye}=w(),G=Ye.SERVICE,je=Ye.ACCOUNT_CREDS,Ge=Ye.ACCOUNT_TOKEN,He=null;function K(){return He||(He=mr()),He}async function Dt(){let t=await(await K()).getSecret(G,je);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function Ar(e){if(!e.clientId||!e.clientSecret||!e.tenant)throw new Error("clientId, clientSecret and tenant are required");await(await K()).setSecret(G,je,JSON.stringify(e));}async function Lr(){let e=await K();await e.deleteSecret(G,je),await e.deleteSecret(G,Ge);}async function Or(e){await(await K()).setSecret(G,Ge,JSON.stringify({accessToken:e.accessToken,expiresAt:e.expiresAt}));}async function Ke(){let t=await(await K()).getSecret(G,Ge);if(!t)return null;try{let n=JSON.parse(t);return {accessToken:n.accessToken,expiresAt:n.expiresAt}}catch{return null}}async function Ir(){let e=await Ke();return e?new Date(e.expiresAt)>new Date:false}async function Nr(){let e=await Ke();if(!e||!e.accessToken)return null;try{let t=e.accessToken.split(".");if(t.length<2)return null;let n=JSON.parse(Buffer.from(t[1].replace(/-/g,"+").replace(/_/g,"/"),"base64").toString("utf8"));return n.email||n.preferred_username||n.upn||n.sub||null}catch{return null}}async function kr(){let e=await K();if(typeof e.getStoragePath=="function")return e.getStoragePath();let t=process.platform;return t==="darwin"?"macOS Keychain":t==="win32"?"Windows Credential Manager":"Linux Secret Service (libsecret)"}async function Cr(){let e=await Dt();return !!(e&&e.clientId&&e.clientSecret&&e.tenant)}Bt.exports={getFlowCredentials:Dt,saveFlowCredentials:Ar,clearFlowCredentials:Lr,saveTokenCache:Or,getTokenCache:Ke,isTokenValid:Ir,getEmailFromToken:Nr,getConfigPath:kr,hasCredentials:Cr};});var v=l((Qa,Yt)=>{var{writeFileSync:vr}=u("fs"),{tmpdir:br}=u("os"),{join:Ur}=u("path"),{DEBUG_LOG_FILENAME:Rr,ENV:Pr}=w(),Ht=Ur(br(),Rr);function Fr(...e){if(process.env[Pr.FLOW_OBS_DEBUG]!=="1")return;let t=`[${new Date().toISOString()}] ${e.join(" ")}
|
|
14
|
+
`;try{vr(Ht,t,{flag:"a"});}catch(n){process.stderr.write(`[flow-obs debug ERROR] ${n.message}
|
|
15
|
+
`);}}Yt.exports={dbg:Fr,DEBUG_LOG:Ht};});var x=l((ec,Gt)=>{var{getFlowCredentials:We,isTokenValid:$r,getEmailFromToken:_e,getTokenCache:qr,saveTokenCache:xr}=W(),{getToken:Mr}=Q(),{FLOW_BASE_URL:Dr,ENV:N,FEATURES:Ve}=w(),{dbg:q}=v(),Br=[/^localhost\.?$/i,/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^0\.0\.0\.0$/,/^::1$/,/^\[::1\]$/,/^\[::ffff:/i,/^\[f[cd]/i,/^\[fe80:/i,/^metadata\.google\.internal\.?$/i,/^metadata\.azure\.internal\.?$/i,/(?:^|\.)localtest\.me\.?$/i,/(?:^|\.)lvh\.me\.?$/i,/(?:^|\.)vcap\.me\.?$/i];function Hr(e){return Br.some(t=>t.test(e))}function Yr(e){if(!e)return null;try{let t=e.split(".");if(t.length<2)return null;let n=JSON.parse(Buffer.from(t[1].replace(/-/g,"+").replace(/_/g,"/"),"base64").toString("utf8"));return n.email||n.preferred_username||n.upn||n.sub||null}catch{return null}}function Xe(e){if(!e)return null;try{let t=e.split(".");if(t.length<2)return null;let n=JSON.parse(Buffer.from(t[1].replace(/-/g,"+").replace(/_/g,"/"),"base64").toString("utf8")),{clientId:s,clientSecret:o,tenant:r}=n;return !s||!o||!r?null:{clientId:s,clientSecret:o,tenant:r}}catch{return null}}function jr(e){let t=Buffer.from(JSON.stringify({alg:"none",typ:"JWT"})).toString("base64url"),n=Buffer.from(JSON.stringify({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant})).toString("base64url");return `${t}.${n}.`}function Je(e){let t;try{t=new URL(e);}catch{throw new Error(`Invalid URL: ${e}`)}let n=process.env[N.FLOW_OBS_ALLOW_HTTP]==="true";if(!n&&t.protocol!=="https:")throw new Error(`URL must use HTTPS: ${e}`);if(t.username||t.password)throw new Error(`URL must not contain embedded credentials: ${e}`);if(!n&&Hr(t.hostname))throw new Error(`SSRF: private/loopback host not allowed: ${t.hostname}`);return e}async function Gr(){let e=Xe(process.env[N.ANTHROPIC_AUTH_TOKEN]);if(e)return {user:await _e().catch(()=>null)||e.clientId,tenant:e.tenant};if(Ve.KEYCHAIN_ENABLED)try{let t=await We();if(!t)return {user:"",tenant:""};let n=await _e()||t.clientId||"",s=t.tenant||"";return {user:n,tenant:s}}catch{return {user:"",tenant:""}}return {user:"",tenant:""}}async function Kr(e){if(await $r())return (await qr()).accessToken;q("getOrRefreshToken","token expired \u2014 refreshing via auth-engine");let t=await Mr(e);try{await xr(t);}catch(n){q("getOrRefreshToken",`token cache save failed (non-fatal): ${n.message}`);}return q("getOrRefreshToken",`token refreshed, expires=${t.expiresAt}`),t.accessToken}function Wr(e,t){let n=t&&t.accessToken?t.accessToken:"";return {endpoint:e.replace(/\/$/,"")+"/flow-langfuse-gateway/v1/traces",authHeader:`Bearer ${n}`}}function Vr(e,t,n){let s=Buffer.from(`${t}:${n}`).toString("base64");return {endpoint:e.replace(/\/$/,"")+"/api/public/otel/v1/traces",authHeader:`Basic ${s}`}}async function jt(){let e=[],t=process.env[N.ANTHROPIC_MODEL]||"",n=Xe(process.env[N.ANTHROPIC_AUTH_TOKEN]);q("resolveCredentials",n?"credentials resolved from ANTHROPIC_AUTH_TOKEN":"ANTHROPIC_AUTH_TOKEN absent or invalid"),!n&&Ve.KEYCHAIN_ENABLED&&(n=await We(),n&&q("resolveCredentials","credentials resolved from keychain (FEATURES.KEYCHAIN_ENABLED=true)"));let s=n?n.tenant:"",o=process.env[N.FLOW_TELEMETRY]==="true",r=process.env[N.LANGFUSE_BASE_URL],i=process.env[N.LANGFUSE_PUBLIC_KEY],a=process.env[N.LANGFUSE_SECRET_KEY];if(o&&r&&i&&a){let f="",y=s;if(n)f=await _e().catch(()=>null)||n.clientId;else if(Ve.KEYCHAIN_ENABLED)try{let k=await We();k&&(f=await _e()||k.clientId,y=k.tenant);}catch{}let I={user:f||"",tenant:y||"",team:"",project:"",model:t};e.push({mode:"direct",...Vr(Je(r),i,a),...I}),q("resolveCredentials","direct mode active",`user=${I.user}`,`tenant=${I.tenant}`);}if(!n){if(e.length===0){let f=[];return f.authError=false,f}return e}let c=null;try{c=await Kr(n);}catch(f){if(q("resolveCredentials",`token refresh failed: ${f.message}`),e.length>0)return e;let y=[];return y.authError=true,y}let h={user:Yr(c)||n.clientId,tenant:s,team:"",project:"",model:t},S=process.env[N.FLOW_TELEMETRY_GATEWAY]||Dr;return e.push({mode:"gateway",...Wr(Je(S),{accessToken:c}),...h}),e}async function Jr(){return (await jt()).length>0}Gt.exports={credentialsAvailable:Jr,getIdentityFromToken:Gr,resolveCredentials:jt,validateUrl:Je,parseCredsFromAnthropicToken:Xe,buildAnthropicAuthToken:jr};});var ce=l((tc,Zt)=>{var{getFlowCredentials:ze,saveFlowCredentials:Kt,clearFlowCredentials:Xr,saveTokenCache:zr,isTokenValid:Zr,getConfigPath:Wt,hasCredentials:Qr}=W(),{getToken:eo}=Q(),{buildAnthropicAuthToken:to,parseCredsFromAnthropicToken:Vt}=x(),{addEnvToClaudeSettings:no}=ne(),{ENV:Ze}=w(),{green:ye,red:oe,yellow:ge,cyan:ie,bold:Jt,dim:V}=B(),so=/[\x00-\x08\x0B-\x1F\x7F]|\x1b\[[0-9;]*[a-zA-Z]/g;function b(e){return typeof e=="string"?e.replace(so,""):e}function ae(e,t={}){return new Promise((n,s)=>{let{masked:o=false,defaultValue:r=""}=t;process.stdout.write(e+r);let i=r;function a(){try{process.stdin.setRawMode(!1);}catch{}}process.once("uncaughtException",a),process.once("unhandledRejection",a);let c=h=>{if(h===""){p(),s(new Error("SIGINT"));return}if(h==="\r"||h===`
|
|
16
|
+
`){p(),process.stdout.write(`
|
|
17
|
+
`),n(i);return}if(h==="\x7F"){i.length>0&&(i=i.slice(0,-1),process.stdout.write("\b \b"));return}h.startsWith("\x1B")||(i+=h,process.stdout.write(o?"*".repeat(h.length):h));};function p(){process.stdin.setRawMode(false),process.stdin.removeListener("data",c),process.removeListener("uncaughtException",a),process.removeListener("unhandledRejection",a);}process.stdin.setRawMode(true),process.stdin.resume(),process.stdin.setEncoding("utf8"),process.stdin.on("data",c);})}async function Xt(e){try{let t=await ze();(!t||t.clientId!==e.clientId||t.clientSecret!==e.clientSecret||t.tenant!==e.tenant)&&await Kt(e);}catch{}}async function zt(e){let{accessToken:t,expiresAt:n}=await eo(e);await Kt(e),await zr({accessToken:t,expiresAt:n});try{let s=to(e);no({[Ze.ANTHROPIC_AUTH_TOKEN]:s});}catch{}}async function ro(e){try{return await zt(e),process.stdout.write(ye(` \u2713 Setup complete. Tenant: ${b(e.tenant)}
|
|
18
18
|
|
|
19
|
-
`)),0}catch(t){return process.stderr.write(oe(` \u2717 Authentication failed: ${
|
|
19
|
+
`)),0}catch(t){return process.stderr.write(oe(` \u2717 Authentication failed: ${b(t.message)}
|
|
20
20
|
`)),1}}async function oo(){try{process.stdout.write(`
|
|
21
21
|
`);let e=(await ae(ie(" ? ")+"Client ID: ")).trim(),t=(await ae(ie(" ? ")+"Client Secret: ",{masked:!0})).trim(),n=(await ae(ie(" ? ")+"Tenant: ")).trim();if(!e||!t||!n)return process.stderr.write(oe(` \u2717 All fields are required
|
|
22
|
-
`)),1;try{await zt({clientId:e,clientSecret:t,tenant:n});}catch(s){return process.stderr.write(oe(` \u2717 Authentication failed: ${
|
|
23
|
-
`)),1}return process.stdout.write(ye(` \u2713 Setup complete. Tenant: ${
|
|
22
|
+
`)),1;try{await zt({clientId:e,clientSecret:t,tenant:n});}catch(s){return process.stderr.write(oe(` \u2717 Authentication failed: ${b(s.message)}
|
|
23
|
+
`)),1}return process.stdout.write(ye(` \u2713 Setup complete. Tenant: ${b(n)}
|
|
24
24
|
`)),process.stdout.write(` Storage: ${await Wt()}
|
|
25
25
|
|
|
26
26
|
`),0}catch(e){if(e.message==="SIGINT")throw e;return process.stderr.write(oe(` \u2717 Unexpected error: ${e.message}
|
|
27
27
|
`)),1}}async function io(e={}){if(e.clientId&&e.clientSecret&&e.tenant)return ro({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant});let t=Vt(process.env[Ze.ANTHROPIC_AUTH_TOKEN]);t&&await Xt(t);let n=t||await ze();if(n){process.stdout.write(`
|
|
28
28
|
`),process.stdout.write(Jt(` Already authenticated
|
|
29
|
-
`)),process.stdout.write(
|
|
30
|
-
`),process.stdout.write(
|
|
29
|
+
`)),process.stdout.write(V(" Tenant: ")+b(n.tenant)+`
|
|
30
|
+
`),process.stdout.write(V(" Client ID: ")+b(n.clientId)+`
|
|
31
31
|
`),process.stdout.write(`
|
|
32
32
|
`);let s;try{s=await ae(ie(" ? ")+"Re-authenticate? (y/N): ");}catch(o){if(o.message==="SIGINT")return process.stdout.write(`
|
|
33
33
|
`),130;throw o}if(s.trim().toLowerCase()!=="y")return process.stdout.write(ye(` \u2713 Using existing credentials.
|
|
34
34
|
|
|
35
35
|
`)),0}try{return await oo()}catch(s){if(s.message==="SIGINT")return process.stdout.write(`
|
|
36
36
|
`),130;throw s}}async function ao(){try{return process.stdout.write(`
|
|
37
|
-
`),(await ae(ie(" ? ")+"Are you sure? This will remove your local credentials. (y/N): ")).toLowerCase()!=="y"?(process.stdout.write(
|
|
37
|
+
`),(await ae(ie(" ? ")+"Are you sure? This will remove your local credentials. (y/N): ")).toLowerCase()!=="y"?(process.stdout.write(ge(` \u26A0 Logout cancelled
|
|
38
38
|
`)),0):null}catch(e){if(e.message==="SIGINT")return process.stdout.write(`
|
|
39
|
-
`),130;throw e}}async function co(e=false){if(!await Qr())return process.stdout.write(
|
|
39
|
+
`),130;throw e}}async function co(e=false){if(!await Qr())return process.stdout.write(ge(` \u26A0 You are not authenticated
|
|
40
40
|
`)),0;if(!e){let t=await ao();if(t!==null)return t}try{return await Xr(),process.stdout.write(ye(` \u2713 Credentials removed successfully
|
|
41
41
|
`)),0}catch{return process.stderr.write(oe(` \u2717 Error removing credentials
|
|
42
|
-
`)),1}}async function uo(){let e=Vt(process.env[Ze.ANTHROPIC_AUTH_TOKEN]);e&&await Xt(e);let t=e||await ze();if(!t)return process.stdout.write(
|
|
42
|
+
`)),1}}async function uo(){let e=Vt(process.env[Ze.ANTHROPIC_AUTH_TOKEN]);e&&await Xt(e);let t=e||await ze();if(!t)return process.stdout.write(ge(" \u26A0 Not authenticated. Run `flow-ai-obs auth login` to set up.\n")),0;if(!e&&!await Zr())return process.stdout.write(ge(" \u26A0 Session expired. Run `flow-ai-obs auth login` to re-authenticate.\n")),0;let n=t.clientSecret.length>4?"****...****"+t.clientSecret.slice(-4):"****",s=e?"ANTHROPIC_AUTH_TOKEN (settings.json)":await Wt();return process.stdout.write(`
|
|
43
43
|
`+Jt(` Authenticated
|
|
44
|
-
`)),process.stdout.write(
|
|
45
|
-
`),process.stdout.write(
|
|
46
|
-
`),process.stdout.write(
|
|
47
|
-
`),process.stdout.write(
|
|
44
|
+
`)),process.stdout.write(V(" Tenant: ")+b(t.tenant)+`
|
|
45
|
+
`),process.stdout.write(V(" Client ID: ")+b(t.clientId)+`
|
|
46
|
+
`),process.stdout.write(V(" Client Secret: ")+n+`
|
|
47
|
+
`),process.stdout.write(V(" Storage: ")+s+`
|
|
48
48
|
|
|
49
|
-
`),0}Zt.exports={runLogin:io,runLogout:co,runStatus:uo};});var et=l((
|
|
49
|
+
`),0}Zt.exports={runLogin:io,runLogout:co,runStatus:uo};});var et=l((nc,sn)=>{var lo=u("fs"),Qe=u("path"),Qt=u("os"),{spawnSync:po}=u("child_process"),{writeClaudeSettings:fo}=ne(),{NATIVE_OTEL:ho,ENV:To}=w(),{green:So,red:Eo,yellow:en,bold:tn,dim:L,cyan:wo}=B(),{runLogin:_o}=ce(),nn={darwin:`npm install -g @anthropic-ai/claude-code
|
|
50
50
|
or visit: https://claude.ai/download`,linux:"npm install -g @anthropic-ai/claude-code",win32:`npm install -g @anthropic-ai/claude-code
|
|
51
|
-
or visit: https://claude.ai/download`};function go(){let e=process.platform==="win32"?"where":"which";return po(e,["claude"],{encoding:"utf8",timeout:5e3}).status===0}function
|
|
51
|
+
or visit: https://claude.ai/download`};function go(){let e=process.platform==="win32"?"where":"which";return po(e,["claude"],{encoding:"utf8",timeout:5e3}).status===0}function yo(){return process.platform==="win32"?Qe.join(process.env.APPDATA||Qe.join(Qt.homedir(),"AppData","Roaming"),"Claude","settings.json"):Qe.join(Qt.homedir(),".claude","settings.json")}function mo(){try{let e=lo.readFileSync(yo(),"utf8"),t=JSON.parse(e);return !!(t.env&&t.env[To.ANTHROPIC_AUTH_TOKEN])}catch{return false}}async function Ao(){if(!go()){let n=nn[process.platform]||nn.linux;return process.stderr.write(`
|
|
52
52
|
`+Eo(` \u2717 Claude Code is not installed or not found in PATH.
|
|
53
53
|
|
|
54
54
|
`)+` flow-ai-obs requires Claude Code to function.
|
|
@@ -56,28 +56,28 @@
|
|
|
56
56
|
|
|
57
57
|
`+wo(` ${n}`)+`
|
|
58
58
|
|
|
59
|
-
`),1}if(!
|
|
59
|
+
`),1}if(!mo()){process.stdout.write(en(` \u26A0 No credentials found in settings.json \u2014 authentication required.
|
|
60
60
|
|
|
61
61
|
`));let n=await _o();if(n!==0)return n}let e,t;try{({settingsPath:e,preserved:t}=fo());}catch(n){return process.stderr.write(` \u2717 Failed to write settings: ${n.message}
|
|
62
62
|
`),1}process.stdout.write(`
|
|
63
63
|
`+tn(" Native OTEL configured")+` (metrics & logs)
|
|
64
|
-
`);for(let[n,s]of Object.entries(ho))process.stdout.write(
|
|
64
|
+
`);for(let[n,s]of Object.entries(ho))process.stdout.write(L(` ${n.padEnd(36)}`)+s+`
|
|
65
65
|
`);return process.stdout.write(`
|
|
66
66
|
`),process.stdout.write(tn(" Hooks registered")+` (Langfuse trace capture)
|
|
67
|
-
`),process.stdout.write(
|
|
68
|
-
`),process.stdout.write(
|
|
69
|
-
`),process.stdout.write(
|
|
70
|
-
`),process.stdout.write(
|
|
67
|
+
`),process.stdout.write(L(" UserPromptSubmit")+` \u2192 flow-ai-obs UserPromptSubmit (timeout: 5s)
|
|
68
|
+
`),process.stdout.write(L(" PreToolUse ")+` \u2192 flow-ai-obs PreToolUse (timeout: 3s)
|
|
69
|
+
`),process.stdout.write(L(" PostToolUse ")+` \u2192 flow-ai-obs PostToolUse (timeout: 10s)
|
|
70
|
+
`),process.stdout.write(L(" Stop ")+` \u2192 flow-ai-obs Stop (timeout: 15s)
|
|
71
71
|
`),t.length>0&&(process.stdout.write(`
|
|
72
72
|
`),process.stdout.write(en(` \u26A0 Third-party hooks detected and preserved on: ${t.join(", ")}
|
|
73
|
-
`)),process.stdout.write(
|
|
73
|
+
`)),process.stdout.write(L(` flow-ai-obs was prepended \u2014 it executes first.
|
|
74
74
|
`))),process.stdout.write(`
|
|
75
|
-
`),process.stdout.write(
|
|
76
|
-
`),process.stdout.write(
|
|
77
|
-
`),process.stdout.write(
|
|
75
|
+
`),process.stdout.write(L(" Settings: ")+e+`
|
|
76
|
+
`),process.stdout.write(L(" Backup: ")+e+`.bkp
|
|
77
|
+
`),process.stdout.write(L(" OTEL auth: flow-ai-obs otel-headers")+L(` (reads keychain at runtime)
|
|
78
78
|
`)),process.stdout.write(`
|
|
79
79
|
`),process.stdout.write(So(` \u2713 Ready. Native OTEL + Langfuse trace capture active.
|
|
80
|
-
`)),process.stdout.write(
|
|
80
|
+
`)),process.stdout.write(L(" Run `flow-ai-obs setup` to also configure the Flow LLM Proxy.\n\n")),0}sn.exports={runInstall:Ao};});var ln=l((sc,un)=>{var{LLM_PROXY:rn}=w(),{green:on,yellow:an,bold:Lo,dim:cn}=B(),{runLogin:Oo}=ce(),{runInstall:Io}=et(),{addEnvToClaudeSettings:No,validateConnectivity:ko,getClaudeSettingsPath:Co}=ne(),{getFlowCredentials:vo}=W();async function bo(e={}){process.stdout.write(`
|
|
81
81
|
\u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557
|
|
82
82
|
`),process.stdout.write(`\u2551 flow-ai-obs \u2014 setup \u2551
|
|
83
83
|
`),process.stdout.write(`\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D
|
|
@@ -86,7 +86,7 @@
|
|
|
86
86
|
Setup aborted. Run \`flow-ai-obs auth login\` to retry.
|
|
87
87
|
|
|
88
88
|
`),t;process.stdout.write(`
|
|
89
|
-
`);let n=await
|
|
89
|
+
`);let n=await Io();if(n!==0)return n;try{No(rn);}catch(o){process.stderr.write(` \u26A0 Could not write LLM Proxy config: ${o.message}
|
|
90
90
|
`);}process.stdout.write(Lo(" Flow LLM Proxy configured")+` (model provider)
|
|
91
91
|
`);for(let[o,r]of Object.entries(rn))process.stdout.write(cn(` ${o.padEnd(36)}`)+r+`
|
|
92
92
|
`);process.stdout.write(`
|
|
@@ -100,40 +100,40 @@
|
|
|
100
100
|
`)),process.stdout.write(on(` \u2713 Setup complete!
|
|
101
101
|
`)),process.stdout.write(cn(` Settings: ${Co()}
|
|
102
102
|
|
|
103
|
-
`)),0}un.exports={runSetup:bo};});var pn=l((
|
|
103
|
+
`)),0}un.exports={runSetup:bo};});var pn=l((rc,dn)=>{var{getFlowCredentials:Uo}=W(),{getToken:Ro}=Q();async function Po(){let e;try{e=await Uo();}catch{return process.stderr.write(`[flow-ai-obs otel-headers] Failed to read credentials
|
|
104
104
|
`),1}if(!e)return process.stderr.write(`[flow-ai-obs otel-headers] Not authenticated \u2014 run: flow-ai-obs auth login
|
|
105
105
|
`),1;let t;try{t=(await Ro(e)).accessToken;}catch(n){return process.stderr.write(`[flow-ai-obs otel-headers] Token fetch failed: ${n.message}
|
|
106
106
|
`),1}return t?(process.stdout.write(`{"Authorization": "Bearer ${t}"}
|
|
107
107
|
`),0):(process.stderr.write(`[flow-ai-obs otel-headers] Empty token received
|
|
108
|
-
`),1)}dn.exports={runOtelHeaders:Po};});var En=l((
|
|
109
|
-
`);}function
|
|
110
|
-
`);}function
|
|
108
|
+
`),1)}dn.exports={runOtelHeaders:Po};});var En=l((oc,Sn)=>{var{getFlowCredentials:fn,isTokenValid:Fo,getEmailFromToken:$o,getTokenCache:qo}=W(),{resolveCredentials:xo,parseCredsFromAnthropicToken:hn}=x(),{getClaudeSettingsPath:Mo}=ne(),{ENV:U,NATIVE_OTEL:Do}=w(),{runLogin:Tn}=ce(),Bo=u("fs");function tt(e){return !e||e.length<=8?"****":e.slice(0,4)+"****...****"+e.slice(-4)}function ue(e){process.stdout.write(` \u2713 ${e}
|
|
109
|
+
`);}function me(e){process.stdout.write(` \u26A0 ${e}
|
|
110
|
+
`);}function Ae(e){process.stdout.write(` \u2717 ${e}
|
|
111
111
|
`);}function m(e){process.stdout.write(` ${e}
|
|
112
|
-
`);}function
|
|
113
|
-
`);}async function Ho(){
|
|
114
|
-
`),
|
|
115
|
-
`);let e=hn(process.env[
|
|
116
|
-
`);}if(!e&&!await Fo()){
|
|
117
|
-
`);}let n=await $o()||t.clientId;ue("Authenticated"),m(`Tenant: ${t.tenant}`),m(`User: ${n}`),
|
|
118
|
-
`);let s={};try{let a=Bo.readFileSync(Mo(),"utf8");s=JSON.parse(a).env||{};}catch{}let o=Object.keys(Do).filter(a=>!s[a]);if(o.length===0?(ue("All OTEL env vars present in settings.json"),m(`Endpoint: ${s.OTEL_EXPORTER_OTLP_ENDPOINT}`)):(
|
|
119
|
-
`),process.env[
|
|
120
|
-
`),
|
|
121
|
-
`)[0].slice(0,t).trim()}function Go(){return new Promise(e=>{let t="";process.stdin.setEncoding("utf8"),process.stdin.on("data",n=>t+=n),process.stdin.on("end",()=>{try{e(JSON.parse(t));}catch{e({});}});})}function Ko(e){process.stdout.write(JSON.stringify(e));}wn.exports={truncate:Yo,firstLine:jo,readInput:Go,passthrough:Ko};});var le=l((
|
|
112
|
+
`);}function A(){process.stdout.write(`
|
|
113
|
+
`);}async function Ho(){A(),process.stdout.write(` flow-claude-observability \u2014 configuration check
|
|
114
|
+
`),A(),process.stdout.write(` Auth
|
|
115
|
+
`);let e=hn(process.env[U.ANTHROPIC_AUTH_TOKEN]),t=e||await fn();if(!t){me("Not authenticated \u2014 starting setup..."),A();let a=await Tn();if(a!==0)return a;if(e=hn(process.env[U.ANTHROPIC_AUTH_TOKEN]),t=e||await fn(),!t)return Ae("Authentication failed"),A(),1;A(),process.stdout.write(` Auth
|
|
116
|
+
`);}if(!e&&!await Fo()){me("Session expired \u2014 re-authenticating..."),A();let a=await Tn();if(a!==0)return a;A(),process.stdout.write(` Auth
|
|
117
|
+
`);}let n=await $o()||t.clientId;ue("Authenticated"),m(`Tenant: ${t.tenant}`),m(`User: ${n}`),A(),process.stdout.write(` Native OTEL
|
|
118
|
+
`);let s={};try{let a=Bo.readFileSync(Mo(),"utf8");s=JSON.parse(a).env||{};}catch{}let o=Object.keys(Do).filter(a=>!s[a]);if(o.length===0?(ue("All OTEL env vars present in settings.json"),m(`Endpoint: ${s.OTEL_EXPORTER_OTLP_ENDPOINT}`)):(me(`${o.length} OTEL var(s) missing from settings.json \u2014 native metrics/logs disabled`),o.forEach(a=>Ae(`Missing: ${a}`)),m("Run: flow-ai-obs install (restores missing vars automatically)")),A(),process.stdout.write(` Tracing
|
|
119
|
+
`),process.env[U.FLOW_TELEMETRY]==="true"){ue("FLOW_TELEMETRY=true (direct mode enabled)");let a=[U.LANGFUSE_BASE_URL,U.LANGFUSE_PUBLIC_KEY,U.LANGFUSE_SECRET_KEY].filter(c=>!process.env[c]);a.length>0&&a.forEach(c=>me(`Missing: ${c}`));}else m("FLOW_TELEMETRY not set \u2014 direct mode inactive (gateway mode may still be active)");let i=await xo();if(!i||i.length===0)return i&&i.authError?Ae("Token refresh failed \u2014 gateway mode could not activate"):(Ae("No active destinations \u2014 no traces will be sent"),m("For direct mode: set FLOW_TELEMETRY=true + LANGFUSE_BASE_URL + LANGFUSE_PUBLIC_KEY + LANGFUSE_SECRET_KEY"),m("For gateway mode: run flow-claude-observability auth login")),A(),1;for(let a of i)if(a.mode==="gateway"){let c=await qo();ue("Mode: gateway"),m(`Endpoint: ${a.endpoint}`),m(`Token: ${tt(c&&c.accessToken)}`);}else a.mode==="direct"&&(ue("Mode: direct"),m(`Endpoint: ${a.endpoint}`),m(`PK: ${tt(process.env[U.LANGFUSE_PUBLIC_KEY])}`),m(`SK: ${tt(process.env[U.LANGFUSE_SECRET_KEY])}`));return A(),process.stdout.write(` All checks passed \u2014 observability is active.
|
|
120
|
+
`),A(),0}Sn.exports={runCheck:Ho};});var J=l((ic,wn)=>{function Yo(e,t){let n=typeof e=="object"?JSON.stringify(e):String(e??"");return n.length>t?n.slice(0,t)+" \u2026[truncated]":n}function jo(e,t=100){return String(e??"").split(`
|
|
121
|
+
`)[0].slice(0,t).trim()}function Go(){return new Promise(e=>{let t="";process.stdin.setEncoding("utf8"),process.stdin.on("data",n=>t+=n),process.stdin.on("end",()=>{try{e(JSON.parse(t));}catch{e({});}});})}function Ko(e){process.stdout.write(JSON.stringify(e));}wn.exports={truncate:Yo,firstLine:jo,readInput:Go,passthrough:Ko};});var le=l((ac,gn)=>{var{randomBytes:_n}=u("crypto"),Wo=()=>_n(16).toString("hex"),Vo=()=>_n(8).toString("hex");function Jo(){return String(BigInt(Date.now())*1000000n)}gn.exports={generateTraceId:Wo,generateSpanId:Vo,nowNs:Jo};});var de=l((uc,mn)=>{var{readFileSync:Xo,writeFileSync:zo,unlinkSync:Zo,existsSync:Qo,realpathSync:cc}=u("fs"),{tmpdir:yn}=u("os"),{join:ei,resolve:ti,normalize:ni,sep:si}=u("path"),ri=/^[0-9a-f-]{1,64}$/i,oi=ni(yn())+si;function ii(e,t){let n=ti(e);if(!n.startsWith(t))throw new Error(`Path traversal detected: ${e}`);return n}function nt(e){if(!ri.test(e))throw new Error(`Invalid session ID: ${e}`);return ii(ei(yn(),`flow-obs-${e}.json`),oi)}function ai(e){let t=nt(e);if(!Qo(t))return null;try{return JSON.parse(Xo(t,"utf8"))}catch{return null}}function ci(e,t){zo(nt(e),JSON.stringify(t),{encoding:"utf8",mode:384});}function ui(e){try{Zo(nt(e));}catch{}}mn.exports={loadState:ai,saveState:ci,deleteState:ui};});var st=l((lc,On)=>{var{readFileSync:An,existsSync:Ln}=u("fs");function li(e){if(!e||!Ln(e))return null;try{let t=An(e,"utf8").trimEnd().split(`
|
|
122
122
|
`);for(let n=t.length-1;n>=0;n--)try{let s=JSON.parse(t[n]);if(s.type==="user"&&s.uuid)return s.uuid}catch{}}catch{}return null}function di(e){if(!e||!Ln(e))return null;try{let t=An(e,"utf8").trimEnd().split(`
|
|
123
|
-
`),n=[],s=0,o=0,r=!1;for(let i=t.length-1;i>=0;i--)try{let a=JSON.parse(t[i]);if(a.type==="user"){if(r)break;continue}if(a.type==="assistant"){r=!0;let
|
|
123
|
+
`),n=[],s=0,o=0,r=!1;for(let i=t.length-1;i>=0;i--)try{let a=JSON.parse(t[i]);if(a.type==="user"){if(r)break;continue}if(a.type==="assistant"){r=!0;let p=(a.message?.content??[]).filter(S=>S.type==="text").map(S=>S.text).join("");p&&n.unshift(p);let h=a.message?.usage??{};s+=(h.input_tokens??0)+(h.cache_read_input_tokens??0)+(h.cache_creation_input_tokens??0),o+=h.output_tokens??0;}}catch{}return !n.length&&s===0?null:{text:n.join(`
|
|
124
124
|
|
|
125
|
-
`),inputTokens:s,outputTokens:o}}catch{}return null}On.exports={readPromptUuid:li,readLastAssistantOutput:di};});var
|
|
125
|
+
`),inputTokens:s,outputTokens:o}}catch{}return null}On.exports={readPromptUuid:li,readLastAssistantOutput:di};});var Le=l((dc,Cn)=>{var{readFileSync:pi,existsSync:In,readdirSync:fi}=u("fs"),{homedir:Nn}=u("os"),{join:X,extname:hi}=u("path"),Ti=new Set([".venv","__pycache__",".git","node_modules"]),Si=new Set([".pyc",".pyo"]),Ei=new Set(["SKILL.md",".DS_Store",".gitignore"]);function wi(e,t){if(!e)return null;let n=[X(Nn(),".claude","skills",e,"SKILL.md"),X(t||"",".claude","skills",e,"SKILL.md")];for(let s of n)if(In(s))try{return pi(s,"utf8")}catch{}return null}function _i(e){return e.match(/^\/([a-z][a-z0-9-]*)(?:\s.*)?$/i)?.[1]||null}var kn=new Set(["Read","Write","Edit","MultiEdit","Bash","Glob","Grep","TodoWrite","WebFetch","WebSearch","Agent","Task"]);function gi(e){return !!e.slashSkill||e.toolCalls.some(s=>s.tool==="Skill")?e.toolCalls.some(s=>kn.has(s.tool))?"complete":"prerequisite_required":null}function yi(e,t){if(!e)return null;let n=[X(Nn(),".claude","skills",e),X(t||"",".claude","skills",e)],s=null;for(let i of n)if(In(X(i,"SKILL.md"))){s=i;break}if(!s)return null;let o=[];function r(i,a){for(let c of fi(i,{withFileTypes:true})){if(Ti.has(c.name)||Ei.has(c.name)||Si.has(hi(c.name)))continue;let p=a?`${a}/${c.name}`:c.name;c.isDirectory()?r(X(i,c.name),p):o.push(p);}}return r(s,""),o.length>0?o:null}Cn.exports={readSkillContent:wi,readSkillArtifacts:yi,detectSlashSkill:_i,EXECUTION_TOOLS:kn,detectExecutionStatus:gi};});var Rn=l((pc,Un)=>{var{generateTraceId:vn,generateSpanId:mi,nowNs:Ai}=le(),{saveState:Li}=de(),{readPromptUuid:Oi}=st(),{detectSlashSkill:Ii,readSkillContent:Ni,readSkillArtifacts:ki}=Le(),{passthrough:Ci}=J(),{dbg:bn}=v(),{ENV:vi}=w(),{resolveCredentials:bi}=x();async function Ui(e){let t=e.session_id||"unknown",n=e.prompt||"",s=e.cwd||"";try{(await bi()).authError===!0&&(process.stderr.write(`
|
|
126
126
|
\u26A0 flow-ai-obs: Your Flow credentials have expired.
|
|
127
127
|
Traces will not be captured until you re-authenticate.
|
|
128
128
|
Run: flow-ai-obs auth login
|
|
129
129
|
|
|
130
|
-
`),bn("UserPromptSubmit","auth expired \u2014 warning emitted to stderr"));}catch{}let o=Oi(e.transcript_path)||vn(),r=
|
|
130
|
+
`),bn("UserPromptSubmit","auth expired \u2014 warning emitted to stderr"));}catch{}let o=Oi(e.transcript_path)||vn(),r=Ii(n),i=r?Ni(r,s):null,a=r?ki(r,s):null;Li(t,{traceId:vn(),spanId:mi(),startNs:Ai(),sessionId:t,prompt:n,cwd:s,traceName:o,transcriptPath:e.transcript_path||"",model:process.env[vi.ANTHROPIC_MODEL]||"",toolCalls:[],spans:[],pendingTool:null,slashSkill:r,skillContent:i,skillArtifacts:a}),bn("UserPromptSubmit",`sid=${t}`,`traceName=${o}`,`slashSkill=${r}`),Ci(e);}Un.exports={onUserPromptSubmit:Ui};});var Fn=l((fc,Pn)=>{var{nowNs:Ri}=le(),{loadState:Pi,saveState:Fi}=de(),{truncate:$i,passthrough:qi}=J(),{dbg:xi}=v(),{TRACE_LIMITS:Mi}=w();async function Di(e){let t=e.session_id||"unknown",n=e.tool_name||"unknown",s=e.tool_input||{},o=Pi(t);o&&(o.pendingTool={name:n,inputStr:$i(s,Mi.TOOL_INPUT),startNs:Ri()},Fi(t,o)),xi("PreToolUse",`sid=${t}`,`tool=${n}`,`stateFound=${!!o}`),qi(e);}Pn.exports={onPreToolUse:Di};});var qn=l((hc,$n)=>{var{FLOW_URLS:Bi}=w();function Hi(e){let t=new URL(e),n=new URL(Bi.GATEWAY_HEALTH);return n.hostname=t.hostname,n.port=t.port,n.protocol=t.protocol,n}async function Yi(e,t){let n;try{n=Hi(e);}catch{return false}let s={};t&&(s.Authorization=String(t).replace(/[\r\n]/g,""));try{let o=await fetch(n.toString(),{method:"GET",headers:s,signal:AbortSignal.timeout(1e4)});return o.status>=200&&o.status<300}catch{return false}}async function ji(e,t,n){let s=String(n).replace(/[\r\n]/g,"");try{return (await fetch(t,{method:"POST",headers:{"Content-Type":"application/json",Authorization:s},body:JSON.stringify(e),signal:AbortSignal.timeout(1e4)})).status}catch{return 0}}$n.exports={checkHealth:Yi,sendTraces:ji};});var Hn=l((Tc,Bn)=>{var P=u("fs"),rt=u("path"),xn=u("os"),{BUFFER:R,ENV:Mn}=w(),{dbg:pe}=v();function Gi(){let e=parseInt(process.env[Mn.BUFFER_TTL_DAYS],10);return (Number.isFinite(e)?Math.max(R.MIN_TTL_DAYS,Math.min(R.MAX_TTL_DAYS,e)):R.DEFAULT_TTL_DAYS)*24*60*60*1e3}function Ki(){let e=parseInt(process.env[Mn.BUFFER_MAX_FILES],10);return Number.isFinite(e)?Math.max(R.MIN_MAX_FILES,Math.min(R.MAX_MAX_FILES,e)):R.DEFAULT_MAX_FILES}function Dn(e){if(/[/\\]/.test(e))throw new Error(`Invalid buffer fileId: ${e}`);return rt.join(xn.tmpdir(),`${R.FILE_PREFIX}${e}.json`)}function ot(){let e=xn.tmpdir(),t;try{t=P.readdirSync(e);}catch{return []}return t.filter(n=>n.startsWith(R.FILE_PREFIX)&&n.endsWith(".json")).map(n=>{let s=rt.join(e,n),o=0;try{o=P.statSync(s).mtimeMs;}catch{}return {full:s,mtime:o}}).sort((n,s)=>n.mtime-s.mtime).map(n=>n.full)}function Wi(e){try{let t=Ki(),n=ot();if(n.length>=t){let r=n.slice(0,n.length-t+1);for(let i of r)try{P.unlinkSync(i);}catch{}}let s=`${Date.now()}-${Math.random().toString(36).slice(2,8)}`,o={fileId:s,bufferedAt:Date.now(),payload:e};return P.writeFileSync(Dn(s),JSON.stringify(o),{encoding:"utf8",mode:384}),pe("buffer",`saved fileId=${s}`),s}catch(t){return pe("buffer",`saveToBuffer failed: ${t.message}`),null}}function Vi(e){let t=ot(),n=e!=null&&e>0?e:t.length,s=[];for(let o of t){if(s.length>=n)break;try{let r=P.readFileSync(o,"utf8"),i=JSON.parse(r);i&&i.fileId&&i.payload&&s.push(i);}catch{pe("buffer",`skipping malformed file: ${o}`);}}return s}function Ji(e){try{P.unlinkSync(Dn(e)),pe("buffer",`deleted fileId=${e}`);}catch{}}function Xi(){let e=Date.now()-Gi();for(let t of ot())try{let{mtimeMs:n}=P.statSync(t);n<e&&(P.unlinkSync(t),pe("buffer",`evicted stale: ${rt.basename(t)}`));}catch{}}Bn.exports={saveToBuffer:Wi,loadBuffer:Vi,deleteBuffer:Ji,cleanStaleBuffers:Xi};});var at=l((Sc,jn)=>{var{resolveCredentials:zi}=x(),{OTLP:Yn,BUFFER:Zi}=w(),{dbg:F}=v(),{checkHealth:Qi,sendTraces:it}=qn(),{saveToBuffer:Oe,loadBuffer:ea,deleteBuffer:ta,cleanStaleBuffers:na}=Hn(),sa={name:Yn.SCOPE_NAME,version:Yn.SCOPE_VERSION},ra={TRACE_NAME:"langfuse.trace.name",TRACE_INPUT:"langfuse.trace.input",TRACE_OUTPUT:"langfuse.trace.output",TRACE_METADATA:"langfuse.trace.metadata",TRACE_TAGS:"langfuse.trace.tags",USER_ID:"langfuse.user.id",SESSION_ID:"langfuse.session.id",OBS_NAME:"langfuse.observation.name",OBS_INPUT:"langfuse.observation.input",OBS_OUTPUT:"langfuse.observation.output",OBS_LEVEL:"langfuse.observation.level",OBS_TYPE:"langfuse.observation.type",MODEL:"gen_ai.request.model",INPUT_TOKENS:"gen_ai.usage.input_tokens",OUTPUT_TOKENS:"gen_ai.usage.output_tokens"};function oa(e,t){return t==null||t===""?null:{key:e,value:{stringValue:String(t)}}}function ia(...e){return e.filter(Boolean)}function aa(e,t){return {resourceSpans:[{resource:{attributes:e},scopeSpans:[{scope:sa,spans:Array.isArray(t)?t:[t]}]}]}}async function ca(e){na();let t=ea(Zi.REPLAY_BATCH_SIZE);t.length&&(F("replayBufferedTraces",`replaying ${t.length} buffered trace(s)`),await Promise.allSettled(t.map(async n=>{try{let s=await it(n.payload,e.endpoint,e.authHeader);s>=200&&s<300?(ta(n.fileId),F("replayBufferedTraces",`replayed fileId=${n.fileId} status=${s}`)):F("replayBufferedTraces",`replay failed fileId=${n.fileId} status=${s}`);}catch(s){F("replayBufferedTraces",`replay error fileId=${n.fileId}: ${s.message}`);}})));}async function ua(e){let t=await zi();if(!t.length)return t.authError&&(F("postToLangfuse","auth refresh failed \u2014 buffering trace"),Oe(e)),0;let n=await Promise.all(t.map(async r=>{if(r.mode!=="gateway")return {creds:r,healthy:true};let i=await Qi(r.endpoint,r.authHeader);return {creds:r,healthy:i}})),s=n.find(r=>r.creds.mode==="gateway"&&r.healthy)?.creds??n.find(r=>r.creds.mode==="direct")?.creds;return s&&await ca(s),(await Promise.all(n.map(async({creds:r,healthy:i})=>{if(r.mode==="gateway"){if(!i)return F("postToLangfuse","gateway health check failed \u2014 buffering trace"),Oe(e),0;let c=await it(e,r.endpoint,r.authHeader);return (c===0||c>=500)&&(F("postToLangfuse",`gateway send failed (status ${c}) \u2014 buffering trace`),Oe(e)),c}let a=await it(e,r.endpoint,r.authHeader);return (a===0||a>=500)&&(F("postToLangfuse",`direct endpoint unavailable (status ${a}) \u2014 buffering trace`),Oe(e)),a}))).find(r=>r!==0)||0}jn.exports={LF:ra,a:oa,attrs:ia,buildPayload:aa,postToLangfuse:ua};});var ct=l((Ec,Gn)=>{var g="[REDACTED]",la=[{re:/\b(sk-[A-Za-z0-9_\-]{20,})/g,replace:()=>`sk-${g}`},{re:/\b(pk-[A-Za-z0-9_\-]{20,})/g,replace:()=>`pk-${g}`},{re:/\b(Bearer\s+)[A-Za-z0-9\-._~+/]+=*/gi,replace:(e,t)=>`${t}${g}`},{re:/\b(Basic\s+)[A-Za-z0-9+/]+=*/gi,replace:(e,t)=>`${t}${g}`},{re:/(-----BEGIN [A-Z ]+-----)[^-]*(-----END [A-Z ]+-----)/g,replace:(e,t,n)=>`${t}
|
|
131
131
|
${g}
|
|
132
|
-
${n}`},{re:/\b(AKIA[0-9A-Z]{16})\b/g,replace:()=>`AKIA${g}`},{re:/(aws_secret_access_key\s*[=:]\s*)([A-Za-z0-9/+]{40})/gi,replace:(e,t)=>`${t}${g}`},{re:/\b(ghp_[A-Za-z0-9]{36,})/g,replace:()=>`ghp_${g}`},{re:/\b(github_pat_[A-Za-z0-9_]{36,})/gi,replace:()=>`github_pat_${g}`},{re:/\b(eyJ[A-Za-z0-9_\-]+\.eyJ[A-Za-z0-9_\-]+\.[A-Za-z0-9_\-]+)/g,replace:()=>`eyJ.${g}`},{re:/\b([A-Z0-9_]*(?:SECRET|TOKEN|KEY|PASSWORD|PASSWD|PWD|CREDENTIAL|API)[A-Z0-9_]*\s*=\s*)(['"]?)([^\s'"#\n]+)\2/gi,replace:(e,t,n)=>`${t}${n}${g}${n}`},{re:/([a-z][a-z0-9+\-.]*:\/\/[^:/?#\s]*):([^@\s]+)@/gi,replace:(e,t)=>`${t}:${g}@`}];function
|
|
133
|
-
`)),
|
|
134
|
-
`),process.stdout.write(JSON.stringify(t));}}
|
|
135
|
-
`),process.exit(0);});});var
|
|
136
|
-
`),process.exit(0);}else if(
|
|
132
|
+
${n}`},{re:/\b(AKIA[0-9A-Z]{16})\b/g,replace:()=>`AKIA${g}`},{re:/(aws_secret_access_key\s*[=:]\s*)([A-Za-z0-9/+]{40})/gi,replace:(e,t)=>`${t}${g}`},{re:/\b(ghp_[A-Za-z0-9]{36,})/g,replace:()=>`ghp_${g}`},{re:/\b(github_pat_[A-Za-z0-9_]{36,})/gi,replace:()=>`github_pat_${g}`},{re:/\b(eyJ[A-Za-z0-9_\-]+\.eyJ[A-Za-z0-9_\-]+\.[A-Za-z0-9_\-]+)/g,replace:()=>`eyJ.${g}`},{re:/\b([A-Z0-9_]*(?:SECRET|TOKEN|KEY|PASSWORD|PASSWD|PWD|CREDENTIAL|API)[A-Z0-9_]*\s*=\s*)(['"]?)([^\s'"#\n]+)\2/gi,replace:(e,t,n)=>`${t}${n}${g}${n}`},{re:/([a-z][a-z0-9+\-.]*:\/\/[^:/?#\s]*):([^@\s]+)@/gi,replace:(e,t)=>`${t}:${g}@`}];function da(e){if(e==null)return "";let t=typeof e=="string"?e:JSON.stringify(e);return la.reduce((n,{re:s,replace:o})=>n.replace(s,o),t)}Gn.exports={sanitize:da,REDACTED:g};});var Zn=l((wc,zn)=>{var{generateSpanId:pa,nowNs:fa}=le(),{loadState:ha,saveState:Ta}=de(),{LF:fe,a:M,attrs:Sa}=at(),{truncate:Kn,firstLine:Ea,passthrough:Wn}=J(),{readSkillContent:wa,readSkillArtifacts:_a}=Le(),{dbg:Vn}=v(),{TRACE_LIMITS:Jn}=w(),{sanitize:Xn}=ct();async function ga(e){let t=e.session_id||"unknown",n=e.tool_name||"unknown",s=e.tool_input||{},o=e.tool_response||"",r=ha(t);if(!r){Wn(e);return}let i=fa(),a=r.pendingTool?.name===n,c=a?r.pendingTool.startNs:String(BigInt(i)-200000000n),p=a?r.pendingTool.inputStr:Kn(s,Jn.TOOL_INPUT),h=p;if(n==="Skill"){let $=typeof s=="object"&&s!==null?s.skill||s.name||s.skillName||String(Object.values(s)[0]??""):String(s),C=$?wa($.trim(),r.cwd):null;C&&(h=C,r.skillContent||(r.skillContent=C),r.slashSkill||(r.slashSkill=$.trim()),r.skillArtifacts||(r.skillArtifacts=_a($.trim(),r.cwd))),Vn("PostToolUse","Skill tool detected",`skillName=${$}`,`contentFound=${!!C}`);}let S=Xn(Kn(o,Jn.TOOL_OUTPUT)),f=/\b(error|exception|failed|failure|traceback|errno)\b/i.test(S.slice(0,500)),y=f?"ERROR":"DEFAULT",I=pa(),k=Math.round(Number(BigInt(i)-BigInt(c))/1e6),Ce={Agent:"AGENT",Task:"AGENT"}[n]??"TOOL";r.toolCalls.push({tool:n,brief:Ea(p,60),error:f,durationMs:k}),r.spans.push({traceId:r.traceId,spanId:I,parentSpanId:r.spanId,name:n,kind:3,startTimeUnixNano:c,endTimeUnixNano:i,attributes:Sa(M(fe.OBS_NAME,n),M(fe.OBS_TYPE,Ce),M(fe.OBS_LEVEL,y),M(fe.OBS_INPUT,Xn(h)),M(fe.OBS_OUTPUT,S),M("tool.name",n),M("tool.error",String(f))),status:{code:f?2:1}}),r.pendingTool=null,Ta(t,r),Vn("PostToolUse",`sid=${t}`,`tool=${n}`,`error=${f}`,`durationMs=${k}`,`totalSpans=${r.spans.length}`),Wn(e);}zn.exports={onPostToolUse:ga};});var es=l((_c,Qn)=>{var ut={"claude-opus-4-6":{input:15,output:75},"claude-opus-4-5":{input:15,output:75},"claude-sonnet-4-6":{input:3,output:15},"claude-sonnet-4-5":{input:3,output:15},"claude-haiku-4-5":{input:.8,output:4},"claude-4-6-opus":{input:15,output:75},"claude-4-6-sonnet":{input:3,output:15},"claude-4-5-opus":{input:15,output:75},"claude-4-5-sonnet":{input:3,output:15},"claude-4-5-haiku":{input:.8,output:4},"claude-3-5-sonnet-20241022":{input:3,output:15},"claude-3-5-haiku-20241022":{input:.8,output:4},"claude-3-opus-20240229":{input:15,output:75}};function ya(e,t,n){let s=Object.keys(ut).find(i=>(e||"").toLowerCase().includes(i));if(!s)return;let o=ut[s],r=(t*o.input+n*o.output)/1e6;return Math.round(r*1e6)/1e6}Qn.exports={MODEL_PRICING:ut,calcCostUsd:ya};});var os=l((gc,rs)=>{var{generateSpanId:ts,nowNs:ma}=le(),{loadState:Aa,deleteState:ns}=de(),{LF:E,a:d,attrs:Ie,buildPayload:La,postToLangfuse:Oa}=at(),{getIdentityFromToken:Ia}=x(),{calcCostUsd:Na}=es(),{readLastAssistantOutput:ka}=st(),{truncate:Ne,firstLine:Ca,passthrough:lt}=J(),{dbg:z}=v(),{detectExecutionStatus:va}=Le(),{sanitize:ss}=ct(),{TRACE_LIMITS:ke}=w();async function ba(e){let t=e.session_id||"unknown",n=e.stop_reason||"end_turn",s=Aa(t);if(!s){lt(e);return}s.slashSkill&&!/^[a-z][a-z0-9-]*$/i.test(s.slashSkill)&&(z("Stop",`sid=${t}`,`slashSkill rejected post-disk: "${s.slashSkill}"`),s.slashSkill=null);let o=ma(),r=await Ia();if(s.slashSkill&&!s.toolCalls.some(T=>T.tool==="Skill")){let T=ts(),Z=s.skillContent?s.skillContent:JSON.stringify({skill:s.slashSkill});s.toolCalls.push({tool:"Skill",brief:s.slashSkill,error:false,durationMs:0,synthetic:true}),s.spans.push({traceId:s.traceId,spanId:T,parentSpanId:s.spanId,name:"Skill",kind:3,startTimeUnixNano:s.startNs,endTimeUnixNano:s.startNs,attributes:Ie(d(E.OBS_NAME,"Skill"),d(E.OBS_TYPE,"TOOL"),d(E.OBS_LEVEL,"DEFAULT"),d(E.OBS_INPUT,Z),d(E.OBS_OUTPUT,"loaded via slash command"),d("tool.name","Skill"),d("tool.error","false"),d("skill.name",s.slashSkill),d("skill.invocation","slash-command")),status:{code:1}}),z("Stop",`slashSkill=${s.slashSkill}`,"synthetic span injected");}let i=e.transcript_path||s.transcriptPath||"",a=ka(i),c=s.toolCalls.length,p=s.toolCalls.filter(T=>T.error).length,h=ss(a?.text?Ne(a.text,ke.TRACE_OUTPUT):c===0?"No tools used":s.toolCalls.map((T,Z)=>`${Z+1}. ${T.tool}${T.brief?` \u2192 ${T.brief}`:""}${T.error?" [ERROR]":""}`).join(`
|
|
133
|
+
`)),S=a?.inputTokens??0,f=a?.outputTokens??0,y=s.toolCalls.map((T,Z)=>`${Z+1}. ${T.tool}${T.brief?` \u2192 ${T.brief}`:""}${T.error?" [ERROR]":""} (${T.durationMs}ms)`),I=!!(s.slashSkill||s.toolCalls.some(T=>T.tool==="Skill")),k=s.toolCalls.some(T=>T.tool==="Agent");if(!I&&!k){z("Stop",`sid=${t}`,"skipping trace \u2014 no Skill or Agent calls found"),ns(t),lt(e);return}let Te=I?"skill":"agent",Ce=Math.round(Number(BigInt(o)-BigInt(s.startNs))/1e6),$=Na(s.model,S,f),C=va(s);C==="prerequisite_required"&&(s.spans.push({traceId:s.traceId,spanId:ts(),parentSpanId:s.spanId,name:"prerequisite-check",kind:3,startTimeUnixNano:s.startNs,endTimeUnixNano:o,attributes:Ie(d(E.OBS_NAME,"prerequisite-check"),d(E.OBS_TYPE,"EVENT"),d(E.OBS_LEVEL,"WARNING"),d(E.OBS_OUTPUT,h),d("skill.name",s.slashSkill||void 0),d("execution_status","prerequisite_required")),status:{code:1}}),z("Stop",`sid=${t}`,"prerequisite-check span injected",`skill=${s.slashSkill}`));let dt=(()=>{if(!(!I||!s.prompt)){if(s.slashSkill){let T=s.prompt.replace(new RegExp(`^\\/${s.slashSkill}\\s*`,"i"),"").trim();return T?Ne(T,ke.USER_INSTRUCTION):void 0}return Ne(s.prompt,ke.USER_INSTRUCTION)||void 0}})(),as=JSON.stringify({trace_type:Te,...C!==null&&{execution_status:C},...s.slashSkill&&{skill_name:s.slashSkill},...s.skillArtifacts?.length&&{skill_artifacts:s.skillArtifacts},...dt!==void 0&&{user_instruction:dt},latency_ms:Ce,...S&&{tokens_input:S},...f&&{tokens_output:f},cost_usd:$,...s.model&&{model:s.model},toolCount:c,errorCount:p,stopReason:n,sessionId:s.sessionId,tools:y.length?y:void 0}),cs=ss(Ne(s.prompt,ke.TRACE_INPUT)),us=Ie(d(E.TRACE_NAME,s.traceName),d(E.TRACE_INPUT,cs),d(E.TRACE_OUTPUT,h),d(E.TRACE_METADATA,as),d(E.SESSION_ID,s.sessionId),d(E.USER_ID,r.user),d(E.OBS_TYPE,"GENERATION"),d(E.MODEL,s.model),S?d(E.INPUT_TOKENS,S):null,f?d(E.OUTPUT_TOKENS,f):null,d("claude.stop_reason",n),d("claude.tool_count",String(c)),d("claude.error_count",String(p)),d("claude.session_id",s.sessionId),d("flow.trace_type",Te),{key:E.TRACE_TAGS,value:{arrayValue:{values:[{stringValue:Te}]}}}),ls={traceId:s.traceId,spanId:s.spanId,name:s.traceName,kind:1,startTimeUnixNano:s.startNs,endTimeUnixNano:o,attributes:us,status:{code:p>0?2:1}},ds=Ie(d("service.name",process.env.LANGFUSE_PROJECT_NAME||"claude-code"),d("deployment.environment",process.env.LANGFUSE_ENVIRONMENT||"default")),pt=[...s.spans||[],ls];z("Stop",`sid=${t}`,`totalTools=${c}`,`errorTools=${p}`,`spans=${pt.length}`,`inputTokens=${S}`,`outputTokens=${f}`,`traceOutput="${Ca(h,80)}"`);let ps=await Oa(La(ds,pt));z("Stop",`POST status=${ps}`,`traceId=${s.traceId}`),ns(t),lt(e);}rs.exports={onStop:ba};});var is=l(()=>{var{credentialsAvailable:Ua}=x(),{readInput:Ra}=J(),{onUserPromptSubmit:Pa}=Rn(),{onPreToolUse:Fa}=Fn(),{onPostToolUse:$a}=Zn(),{onStop:qa}=os();async function xa(){let e=process.argv[2];if(!await Ua()){let n=[];process.stdin.on("data",s=>n.push(s)),process.stdin.on("end",()=>process.stdout.write(n.join("")));return}let t=await Ra();switch(e){case "UserPromptSubmit":await Pa(t);break;case "PreToolUse":await Fa(t);break;case "PostToolUse":await $a(t);break;case "Stop":await qa(t);break;default:process.stderr.write(`[flow-obs] unknown event: ${e}
|
|
134
|
+
`),process.stdout.write(JSON.stringify(t));}}xa().catch(e=>{process.stderr.write(`[flow-obs] fatal: ${e.message}
|
|
135
|
+
`),process.exit(0);});});var Ma=new Set(["UserPromptSubmit","PreToolUse","PostToolUse","Stop"]),[,,O,he]=process.argv;if(O==="--version"||O==="-v"){let{version:e}=Se();process.stdout.write(e+`
|
|
136
|
+
`),process.exit(0);}else if(O==="--help"||O==="-h"){let{bold:e,cyan:t,dim:n}=B(),{version:s}=Se();process.stdout.write(`
|
|
137
137
|
`+e(" flow-ai-obs")+n(" v"+s)+`
|
|
138
138
|
|
|
139
139
|
`),process.stdout.write(t(" install")+n(` Auth (if needed) + hooks + native OTEL
|
|
@@ -148,12 +148,12 @@ ${n}`},{re:/\b(AKIA[0-9A-Z]{16})\b/g,replace:()=>`AKIA${g}`},{re:/(aws_secret_ac
|
|
|
148
148
|
|
|
149
149
|
`)),process.stdout.write(n(` (Hook events: UserPromptSubmit | PreToolUse | PostToolUse | Stop)
|
|
150
150
|
|
|
151
|
-
`)),process.exit(0);}else if(
|
|
152
|
-
`),process.exit(1);});}else if(
|
|
153
|
-
`),process.exit(1);});}else if(
|
|
151
|
+
`)),process.exit(0);}else if(O==="install"){Ee().checkForUpdate();let{runInstall:e}=et();e().then(t=>process.exit(t)).catch(t=>{process.stderr.write(`Unexpected error: ${t.message}
|
|
152
|
+
`),process.exit(1);});}else if(O==="setup"){Ee().checkForUpdate();let{runSetup:e}=ln(),t=process.argv.slice(3),n=s=>{let o=t.indexOf(s);return o!==-1?t[o+1]:void 0};e({clientId:n("--client-id"),clientSecret:n("--client-secret"),tenant:n("--tenant")}).then(s=>process.exit(s)).catch(s=>{process.stderr.write(`Unexpected error: ${s.message}
|
|
153
|
+
`),process.exit(1);});}else if(O==="auth"){Ee().checkForUpdate();let{runLogin:e,runLogout:t,runStatus:n}=ce();(async()=>{let s=0;if(he==="login"||!he){let o=process.argv.slice(4),r=i=>{let a=o.indexOf(i);return a!==-1?o[a+1]:void 0};s=await e({clientId:r("--client-id"),clientSecret:r("--client-secret"),tenant:r("--tenant")});}else if(he==="logout"){let o=process.argv.includes("--force");s=await t(o);}else he==="status"?s=await n():(process.stderr.write(`Unknown auth subcommand: ${he}
|
|
154
154
|
`),process.stderr.write(`Usage: flow-ai-obs auth [login|logout|status]
|
|
155
|
-
`),s=1);process.exit(s);})();}else if(
|
|
156
|
-
`),process.exit(1);});}else if(
|
|
155
|
+
`),s=1);process.exit(s);})();}else if(O==="otel-headers"){let{runOtelHeaders:e}=pn();e().then(t=>process.exit(t)).catch(()=>process.exit(1));}else if(O==="check"){let{runCheck:e}=En();e().then(t=>process.exit(t)).catch(t=>{process.stderr.write(`Unexpected error: ${t.message}
|
|
156
|
+
`),process.exit(1);});}else if(Ma.has(O))is();else {let{bold:e,cyan:t,dim:n}=B();process.stdout.write(`
|
|
157
157
|
`+e(" flow-ai-obs")+`
|
|
158
158
|
|
|
159
159
|
`),process.stdout.write(t(" install")+n(` Auth (if needed) + hooks + native OTEL
|
package/dist/index.js
CHANGED
|
@@ -1,18 +1,18 @@
|
|
|
1
|
-
'use strict';var l=(e=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(e,{get:(t,r)=>(typeof require<"u"?require:t)[r]}):e)(function(e){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+e+'" is not supported')});var p=(e,t)=>()=>(t||e((t={exports:{}}).exports,t),t.exports);var h=p((so,Ce)=>{var U=process.env.FLOW_BASE_URL||"https://flow.ciandt.com",Ue={AUTH_ENGINE:process.env.FLOW_AUTH_ENGINE_URL||`${U}/auth-engine-api/v2/api-key/token`,GATEWAY_TRACES:process.env.FLOW_GATEWAY_TRACES_URL||`${U}/flow-langfuse-gateway/v1/traces`,GATEWAY_HEALTH:process.env.FLOW_GATEWAY_HEALTH_URL||`${U}/flow-langfuse-gateway/v1/health`,OTEL_ENDPOINT:process.env.FLOW_OTEL_ENDPOINT_URL||`${U}/otel`},Xt={SERVICE:"flow-plugins-cli",ACCOUNT_CREDS:"credentials",ACCOUNT_TOKEN:"token-cache"},zt="FLOW-nodejs",Zt="config.json",Qt={SCOPE_NAME:"flow-ai-obs",SCOPE_VERSION:"0.1.0"},en={ANTHROPIC_BASE_URL:process.env.FLOW_LLM_PROXY_URL||`${U}/flow-llm-proxy/`,ANTHROPIC_MODEL:process.env.FLOW_LLM_PROXY_MODEL||"anthropic.claude-4-6-sonnet",ANTHROPIC_SMALL_FAST_MODEL:process.env.FLOW_LLM_PROXY_SMALL_MODEL||"anthropic.claude-4-6-sonnet",CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS:"1"},tn={CLAUDE_CODE_ENABLE_TELEMETRY:"1",OTEL_EXPORTER_OTLP_ENDPOINT:Ue.OTEL_ENDPOINT,OTEL_EXPORTER_OTLP_PROTOCOL:"http/json",OTEL_METRICS_EXPORTER:"otlp",OTEL_LOGS_EXPORTER:"otlp",OTEL_LOG_TOOL_DETAILS:"1",OTEL_LOG_USER_PROMPTS:"1"},nn={FLOW_TELEMETRY:"FLOW_TELEMETRY",FLOW_TELEMETRY_GATEWAY:"FLOW_TELEMETRY_GATEWAY_URL",LANGFUSE_BASE_URL:"LANGFUSE_BASE_URL",LANGFUSE_PUBLIC_KEY:"LANGFUSE_PUBLIC_KEY",LANGFUSE_SECRET_KEY:"LANGFUSE_SECRET_KEY",ANTHROPIC_MODEL:"ANTHROPIC_MODEL",ANTHROPIC_AUTH_TOKEN:"ANTHROPIC_AUTH_TOKEN",FLOW_OBS_DEBUG:"FLOW_TELEMETRY_DEBUG",FLOW_OBS_ALLOW_HTTP:"FLOW_TELEMETRY_ALLOW_HTTP",BUFFER_TTL_DAYS:"FLOW_TELEMETRY_BUFFER_TTL_DAYS",BUFFER_MAX_FILES:"FLOW_TELEMETRY_BUFFER_MAX_FILES"},rn={KEYCHAIN_ENABLED:false},sn={LOCK_STALE_MS:3e4,CONNECTIVITY_MAX_RETRY:3,CONNECTIVITY_RETRY_MS:2e3},on={UserPromptSubmit:5,PreToolUse:3,PostToolUse:10,Stop:15},an={FILE_PREFIX:"flow-obs-buffer-",DEFAULT_TTL_DAYS:4,MIN_TTL_DAYS:1,MAX_TTL_DAYS:30,DEFAULT_MAX_FILES:50,MIN_MAX_FILES:1,MAX_MAX_FILES:500,REPLAY_BATCH_SIZE:10},cn="flow-ai-obs-debug.log",ln={TOOL_INPUT:2e4,TOOL_OUTPUT:2e4,TRACE_OUTPUT:2e4,USER_INSTRUCTION:1e4,TRACE_INPUT:5e4,TOOL_BRIEF:60},un="flow-obs-";Ce.exports={FLOW_BASE_URL:U,FLOW_URLS:Ue,VAULT:Xt,CONFIG_DIR_NAME:zt,CONFIG_FILE_NAME:Zt,OTLP:Qt,LLM_PROXY:en,NATIVE_OTEL:tn,ENV:nn,FEATURES:rn,INSTALLER:sn,HOOK_TIMEOUTS:on,BUFFER:an,DEBUG_LOG_FILENAME:cn,STATE_FILE_PREFIX:un,TRACE_LIMITS:ln};});var be=p((oo,Fe)=>{var B=l("fs"),C=l("path"),dn=l("os"),{CONFIG_DIR_NAME:re,CONFIG_FILE_NAME:se}=h(),oe={credentials:"credentials","token-cache":"tokenCache"};function D(){let e=dn.homedir();if(process.platform==="darwin")return C.join(e,"Library","Preferences",re,se);if(process.platform==="win32"){let r=process.env.APPDATA||C.join(e,"AppData","Roaming");return C.join(r,re,se)}let t=process.env.XDG_CONFIG_HOME||C.join(e,".config");return C.join(t,re,se)}function ae(){try{let e=B.readFileSync(D(),"utf8");return JSON.parse(e)}catch{return {}}}function Pe(e){let t=D();B.mkdirSync(C.dirname(t),{recursive:true}),B.writeFileSync(t,JSON.stringify(e,null,2),{encoding:"utf8",mode:384});}var J=class{static isAvailable(){return true}static hasExistingData(){try{if(!B.existsSync(D()))return !1;let t=JSON.parse(B.readFileSync(D(),"utf8"));return !!(t&&t.credentials)}catch{return false}}async getSecret(t,r){let n=ae(),o=oe[r]||r,s=n[o];return s?typeof s=="string"?s:JSON.stringify(s):null}async setSecret(t,r,n){let o=ae(),s=oe[r]||r;if(r==="token-cache")try{o[s]=JSON.parse(n);}catch{o[s]=n;}else o[s]=n;Pe(o);}async deleteSecret(t,r){let n=ae(),o=oe[r]||r;return o in n?(delete n[o],Pe(n),true):false}getStoragePath(){return `config.json (unencrypted) \u2014 ${D()}`}};function fn(){}var pn=J;Fe.exports={JsonFallbackProvider:J,ScryptFallbackProvider:pn,_resetWarningState:fn};});var $e=p((ao,ve)=>{var{execFile:_n}=l("child_process"),{promisify:Sn}=l("util"),{accessSync:En,constants:Tn}=l("fs"),ie=Sn(_n),ce=class{static async isAvailable(){try{return En("/usr/bin/security",Tn.X_OK),!0}catch{return false}}async getSecret(t,r){try{let{stdout:n}=await ie("security",["find-generic-password","-w","-a",r,"-s",t]);return n.trim()||null}catch{return null}}async setSecret(t,r,n){await ie("security",["add-generic-password","-U","-a",r,"-s",t,"-w",n]);}async deleteSecret(t,r){try{return await ie("security",["delete-generic-password","-a",r,"-s",t]),!0}catch{return false}}getStoragePath(){return "macOS Keychain"}};ve.exports={MacOsKeyVaultProvider:ce};});var De=p((io,Me)=>{var{execFile:hn,spawn:An}=l("child_process"),{promisify:gn}=l("util"),{accessSync:On,constants:Ln}=l("fs"),qe=gn(hn),le=class{static async isAvailable(){let t=["/usr/bin/secret-tool","/bin/secret-tool","/usr/local/bin/secret-tool"];for(let r of t)try{return On(r,Ln.X_OK),!0}catch{}return false}async getSecret(t,r){try{let{stdout:n}=await qe("secret-tool",["lookup","service",t,"account",r]);return n.trim()||null}catch{return null}}async setSecret(t,r,n){await new Promise((o,s)=>{let a=An("secret-tool",["store","--label",t,"service",t,"account",r]);a.on("error",s),a.on("close",i=>{i===0?o():s(new Error(`secret-tool exited with code ${i}`));}),a.stdin.write(n),a.stdin.end();});}async deleteSecret(t,r){try{return await qe("secret-tool",["clear","service",t,"account",r]),!0}catch{return false}}getStoragePath(){return "Linux Secret Service (libsecret)"}};Me.exports={LinuxKeyVaultProvider:le};});var xe=p((co,Be)=>{var ue=class{static async isAvailable(){try{return await l("keytar").getPassword("__flow_probe__","__flow_probe__"),!0}catch{return false}}async getSecret(t,r){return l("keytar").getPassword(t,r)}async setSecret(t,r,n){await l("keytar").setPassword(t,r,n);}async deleteSecret(t,r){return l("keytar").deletePassword(t,r)}getStoragePath(){return "Windows Credential Manager"}};Be.exports={WindowsKeyVaultProvider:ue};});var We=p((lo,He)=>{async function Ye(){let{JsonFallbackProvider:e}=be();return await yn()??new e}async function yn(){switch(process.platform){case "darwin":{let{MacOsKeyVaultProvider:e}=$e();return await e.isAvailable()?new e:null}case "linux":{let{LinuxKeyVaultProvider:e}=De();return await e.isAvailable()?new e:null}case "win32":{let{WindowsKeyVaultProvider:e}=xe();return await e.isAvailable()?new e:null}default:return null}}var mn=Ye;He.exports={createSecretVaultProvider:Ye,createKeyVaultProvider:mn};});var Ve=p((uo,Ke)=>{var{createSecretVaultProvider:In}=We(),{VAULT:fe}=h(),P=fe.SERVICE,pe=fe.ACCOUNT_CREDS,_e=fe.ACCOUNT_TOKEN,de=null;function F(){return de||(de=In()),de}async function Ge(){let t=await(await F()).getSecret(P,pe);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function Nn(e){if(!e.clientId||!e.clientSecret||!e.tenant)throw new Error("clientId, clientSecret and tenant are required");await(await F()).setSecret(P,pe,JSON.stringify(e));}async function wn(){let e=await F();await e.deleteSecret(P,pe),await e.deleteSecret(P,_e);}async function kn(e){await(await F()).setSecret(P,_e,JSON.stringify({accessToken:e.accessToken,expiresAt:e.expiresAt}));}async function Se(){let t=await(await F()).getSecret(P,_e);if(!t)return null;try{let r=JSON.parse(t);return {accessToken:r.accessToken,expiresAt:r.expiresAt}}catch{return null}}async function Rn(){let e=await Se();return e?new Date(e.expiresAt)>new Date:false}async function Un(){let e=await Se();if(!e||!e.accessToken)return null;try{let t=e.accessToken.split(".");if(t.length<2)return null;let r=JSON.parse(Buffer.from(t[1].replace(/-/g,"+").replace(/_/g,"/"),"base64").toString("utf8"));return r.email||r.preferred_username||r.upn||r.sub||null}catch{return null}}async function Cn(){let e=await F();if(typeof e.getStoragePath=="function")return e.getStoragePath();let t=process.platform;return t==="darwin"?"macOS Keychain":t==="win32"?"Windows Credential Manager":"Linux Secret Service (libsecret)"}async function Pn(){let e=await Ge();return !!(e&&e.clientId&&e.clientSecret&&e.tenant)}Ke.exports={getFlowCredentials:Ge,saveFlowCredentials:Nn,clearFlowCredentials:wn,saveTokenCache:kn,getTokenCache:Se,isTokenValid:Rn,getEmailFromToken:Un,getConfigPath:Cn,hasCredentials:Pn};});var Xe=p((fo,Je)=>{var Fn=l("https"),bn=l("http"),{FLOW_URLS:vn}=h(),$n=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function qn(e){if(!$n.test(e))throw new Error(`Invalid tenant value: "${e}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}var je={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};function Mn(e,t){try{let r=JSON.parse(t);if(typeof r.error=="string"&&je[r.error])return new Error(je[r.error])}catch{}return e===401||e===403||e===500?new Error("Invalid credentials"):e>=400&&e<500?new Error("Authentication request was rejected"):new Error("Authentication service unavailable, please try again later")}function Dn(e){return new Promise((t,r)=>{try{qn(e.tenant);}catch(f){return r(f)}let n=JSON.stringify({clientSecret:e.clientSecret}),o=new URL(vn.AUTH_ENGINE),s=o.protocol==="https:",a={hostname:o.hostname,port:o.port||(s?443:80),path:o.pathname+o.search,method:"POST",headers:{"Content-Type":"application/json","Content-Length":Buffer.byteLength(n),FlowTenant:e.tenant}},u=(s?Fn:bn).request(a,f=>{let _=[];f.on("data",d=>_.push(d)),f.on("end",()=>{let d=_.join("");if(f.statusCode>=400)return r(Mn(f.statusCode,d));let E;try{E=JSON.parse(d);}catch{return r(new Error("Invalid response from auth engine"))}let g=E.expires_at??new Date(Date.now()+(E.expires_in??3600)*1e3).toISOString();t({accessToken:E.access_token,expiresAt:g});});});u.on("error",f=>r(new Error(`Network error: ${f.message}`))),u.write(n),u.end();})}Je.exports={getToken:Dn};});var m=p((po,Ze)=>{var{writeFileSync:Bn}=l("fs"),{tmpdir:xn}=l("os"),{join:Yn}=l("path"),{DEBUG_LOG_FILENAME:Hn,ENV:Wn}=h(),ze=Yn(xn(),Hn);function Gn(...e){if(process.env[Wn.FLOW_OBS_DEBUG]!=="1")return;let t=`[${new Date().toISOString()}] ${e.join(" ")}
|
|
2
|
-
`;try{
|
|
3
|
-
`);}}Ze.exports={dbg:
|
|
4
|
-
`)[0].slice(0,t).trim()}function ir(){return new Promise(e=>{let t="";process.stdin.setEncoding("utf8"),process.stdin.on("data",
|
|
5
|
-
`);for(let
|
|
6
|
-
`),
|
|
1
|
+
'use strict';var u=(e=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(e,{get:(t,n)=>(typeof require<"u"?require:t)[n]}):e)(function(e){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+e+'" is not supported')});var f=(e,t)=>()=>(t||e((t={exports:{}}).exports,t),t.exports);var h=f((no,Ce)=>{var P=process.env.FLOW_BASE_URL||"https://flow.ciandt.com",Ue={AUTH_ENGINE:process.env.FLOW_AUTH_ENGINE_URL||`${P}/auth-engine-api/v2/api-key/token`,GATEWAY_TRACES:process.env.FLOW_GATEWAY_TRACES_URL||`${P}/flow-langfuse-gateway/v1/traces`,GATEWAY_HEALTH:process.env.FLOW_GATEWAY_HEALTH_URL||`${P}/flow-langfuse-gateway/v1/health`,OTEL_ENDPOINT:process.env.FLOW_OTEL_ENDPOINT_URL||`${P}/otel`},Xt={SERVICE:"flow-plugins-cli",ACCOUNT_CREDS:"credentials",ACCOUNT_TOKEN:"token-cache"},jt="FLOW-nodejs",zt="config.json",Zt={SCOPE_NAME:"flow-ai-obs",SCOPE_VERSION:"0.1.0"},Qt={ANTHROPIC_BASE_URL:process.env.FLOW_LLM_PROXY_URL||`${P}/flow-llm-proxy/`,ANTHROPIC_MODEL:process.env.FLOW_LLM_PROXY_MODEL||"anthropic.claude-4-6-sonnet",ANTHROPIC_SMALL_FAST_MODEL:process.env.FLOW_LLM_PROXY_SMALL_MODEL||"anthropic.claude-4-6-sonnet",CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS:"1"},en={CLAUDE_CODE_ENABLE_TELEMETRY:"1",OTEL_EXPORTER_OTLP_ENDPOINT:Ue.OTEL_ENDPOINT,OTEL_EXPORTER_OTLP_PROTOCOL:"http/json",OTEL_METRICS_EXPORTER:"otlp",OTEL_LOGS_EXPORTER:"otlp",OTEL_LOG_TOOL_DETAILS:"1",OTEL_LOG_USER_PROMPTS:"1"},tn={FLOW_TELEMETRY:"FLOW_TELEMETRY",FLOW_TELEMETRY_GATEWAY:"FLOW_TELEMETRY_GATEWAY_URL",LANGFUSE_BASE_URL:"LANGFUSE_BASE_URL",LANGFUSE_PUBLIC_KEY:"LANGFUSE_PUBLIC_KEY",LANGFUSE_SECRET_KEY:"LANGFUSE_SECRET_KEY",ANTHROPIC_MODEL:"ANTHROPIC_MODEL",ANTHROPIC_AUTH_TOKEN:"ANTHROPIC_AUTH_TOKEN",FLOW_OBS_DEBUG:"FLOW_TELEMETRY_DEBUG",FLOW_OBS_ALLOW_HTTP:"FLOW_TELEMETRY_ALLOW_HTTP",BUFFER_TTL_DAYS:"FLOW_TELEMETRY_BUFFER_TTL_DAYS",BUFFER_MAX_FILES:"FLOW_TELEMETRY_BUFFER_MAX_FILES"},nn={KEYCHAIN_ENABLED:false},rn={LOCK_STALE_MS:3e4,CONNECTIVITY_MAX_RETRY:3,CONNECTIVITY_RETRY_MS:2e3},sn={UserPromptSubmit:5,PreToolUse:3,PostToolUse:10,Stop:15},on={FILE_PREFIX:"flow-obs-buffer-",DEFAULT_TTL_DAYS:4,MIN_TTL_DAYS:1,MAX_TTL_DAYS:30,DEFAULT_MAX_FILES:50,MIN_MAX_FILES:1,MAX_MAX_FILES:500,REPLAY_BATCH_SIZE:10},an="flow-ai-obs-debug.log",cn={TOOL_INPUT:2e4,TOOL_OUTPUT:2e4,TRACE_OUTPUT:2e4,USER_INSTRUCTION:1e4,TRACE_INPUT:5e4,TOOL_BRIEF:60},ln="flow-obs-";Ce.exports={FLOW_BASE_URL:P,FLOW_URLS:Ue,VAULT:Xt,CONFIG_DIR_NAME:jt,CONFIG_FILE_NAME:zt,OTLP:Zt,LLM_PROXY:Qt,NATIVE_OTEL:en,ENV:tn,FEATURES:nn,INSTALLER:rn,HOOK_TIMEOUTS:sn,BUFFER:on,DEBUG_LOG_FILENAME:an,STATE_FILE_PREFIX:ln,TRACE_LIMITS:cn};});var Fe=f((ro,be)=>{var x=u("fs"),b=u("path"),un=u("os"),{CONFIG_DIR_NAME:ne,CONFIG_FILE_NAME:re}=h(),se={credentials:"credentials","token-cache":"tokenCache"};function B(){let e=un.homedir();if(process.platform==="darwin")return b.join(e,"Library","Preferences",ne,re);if(process.platform==="win32"){let n=process.env.APPDATA||b.join(e,"AppData","Roaming");return b.join(n,ne,re)}let t=process.env.XDG_CONFIG_HOME||b.join(e,".config");return b.join(t,ne,re)}function oe(){try{let e=x.readFileSync(B(),"utf8");return JSON.parse(e)}catch{return {}}}function Pe(e){let t=B();x.mkdirSync(b.dirname(t),{recursive:true}),x.writeFileSync(t,JSON.stringify(e,null,2),{encoding:"utf8",mode:384});}var V=class{static isAvailable(){return true}static hasExistingData(){try{if(!x.existsSync(B()))return !1;let t=JSON.parse(x.readFileSync(B(),"utf8"));return !!(t&&t.credentials)}catch{return false}}async getSecret(t,n){let r=oe(),o=se[n]||n,s=r[o];return s?typeof s=="string"?s:JSON.stringify(s):null}async setSecret(t,n,r){let o=oe(),s=se[n]||n;if(n==="token-cache")try{o[s]=JSON.parse(r);}catch{o[s]=r;}else o[s]=r;Pe(o);}async deleteSecret(t,n){let r=oe(),o=se[n]||n;return o in r?(delete r[o],Pe(r),true):false}getStoragePath(){return `config.json (unencrypted) \u2014 ${B()}`}};function dn(){}var fn=V;be.exports={JsonFallbackProvider:V,ScryptFallbackProvider:fn,_resetWarningState:dn};});var $e=f((so,ve)=>{var{execFile:pn}=u("child_process"),{promisify:_n}=u("util"),{accessSync:Sn,constants:En}=u("fs"),ae=_n(pn),ie=class{static async isAvailable(){try{return Sn("/usr/bin/security",En.X_OK),!0}catch{return false}}async getSecret(t,n){try{let{stdout:r}=await ae("security",["find-generic-password","-w","-a",n,"-s",t]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await ae("security",["add-generic-password","-U","-a",n,"-s",t,"-w",r]);}async deleteSecret(t,n){try{return await ae("security",["delete-generic-password","-a",n,"-s",t]),!0}catch{return false}}getStoragePath(){return "macOS Keychain"}};ve.exports={MacOsKeyVaultProvider:ie};});var De=f((oo,qe)=>{var{execFile:Tn,spawn:hn}=u("child_process"),{promisify:An}=u("util"),{accessSync:gn,constants:On}=u("fs"),Me=An(Tn),ce=class{static async isAvailable(){let t=["/usr/bin/secret-tool","/bin/secret-tool","/usr/local/bin/secret-tool"];for(let n of t)try{return gn(n,On.X_OK),!0}catch{}return false}async getSecret(t,n){try{let{stdout:r}=await Me("secret-tool",["lookup","service",t,"account",n]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await new Promise((o,s)=>{let a=hn("secret-tool",["store","--label",t,"service",t,"account",n]);a.on("error",s),a.on("close",l=>{l===0?o():s(new Error(`secret-tool exited with code ${l}`));}),a.stdin.write(r),a.stdin.end();});}async deleteSecret(t,n){try{return await Me("secret-tool",["clear","service",t,"account",n]),!0}catch{return false}}getStoragePath(){return "Linux Secret Service (libsecret)"}};qe.exports={LinuxKeyVaultProvider:ce};});var xe=f((ao,Be)=>{var le=class{static async isAvailable(){try{return await u("keytar").getPassword("__flow_probe__","__flow_probe__"),!0}catch{return false}}async getSecret(t,n){return u("keytar").getPassword(t,n)}async setSecret(t,n,r){await u("keytar").setPassword(t,n,r);}async deleteSecret(t,n){return u("keytar").deletePassword(t,n)}getStoragePath(){return "Windows Credential Manager"}};Be.exports={WindowsKeyVaultProvider:le};});var We=f((io,He)=>{async function Ye(){let{JsonFallbackProvider:e}=Fe();return await Ln()??new e}async function Ln(){switch(process.platform){case "darwin":{let{MacOsKeyVaultProvider:e}=$e();return await e.isAvailable()?new e:null}case "linux":{let{LinuxKeyVaultProvider:e}=De();return await e.isAvailable()?new e:null}case "win32":{let{WindowsKeyVaultProvider:e}=xe();return await e.isAvailable()?new e:null}default:return null}}var yn=Ye;He.exports={createSecretVaultProvider:Ye,createKeyVaultProvider:yn};});var Je=f((co,Ke)=>{var{createSecretVaultProvider:mn}=We(),{VAULT:de}=h(),F=de.SERVICE,fe=de.ACCOUNT_CREDS,pe=de.ACCOUNT_TOKEN,ue=null;function v(){return ue||(ue=mn()),ue}async function Ge(){let t=await(await v()).getSecret(F,fe);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function In(e){if(!e.clientId||!e.clientSecret||!e.tenant)throw new Error("clientId, clientSecret and tenant are required");await(await v()).setSecret(F,fe,JSON.stringify(e));}async function Nn(){let e=await v();await e.deleteSecret(F,fe),await e.deleteSecret(F,pe);}async function wn(e){await(await v()).setSecret(F,pe,JSON.stringify({accessToken:e.accessToken,expiresAt:e.expiresAt}));}async function _e(){let t=await(await v()).getSecret(F,pe);if(!t)return null;try{let n=JSON.parse(t);return {accessToken:n.accessToken,expiresAt:n.expiresAt}}catch{return null}}async function kn(){let e=await _e();return e?new Date(e.expiresAt)>new Date:false}async function Rn(){let e=await _e();if(!e||!e.accessToken)return null;try{let t=e.accessToken.split(".");if(t.length<2)return null;let n=JSON.parse(Buffer.from(t[1].replace(/-/g,"+").replace(/_/g,"/"),"base64").toString("utf8"));return n.email||n.preferred_username||n.upn||n.sub||null}catch{return null}}async function Un(){let e=await v();if(typeof e.getStoragePath=="function")return e.getStoragePath();let t=process.platform;return t==="darwin"?"macOS Keychain":t==="win32"?"Windows Credential Manager":"Linux Secret Service (libsecret)"}async function Cn(){let e=await Ge();return !!(e&&e.clientId&&e.clientSecret&&e.tenant)}Ke.exports={getFlowCredentials:Ge,saveFlowCredentials:In,clearFlowCredentials:Nn,saveTokenCache:wn,getTokenCache:_e,isTokenValid:kn,getEmailFromToken:Rn,getConfigPath:Un,hasCredentials:Cn};});var je=f((lo,Xe)=>{var Pn=u("https"),bn=u("http"),{FLOW_URLS:Fn}=h(),vn=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function $n(e){if(!vn.test(e))throw new Error(`Invalid tenant value: "${e}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}var Ve={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};function Mn(e,t){try{let n=JSON.parse(t);if(typeof n.error=="string"&&Ve[n.error])return new Error(Ve[n.error])}catch{}return e===401||e===403||e===500?new Error("Invalid credentials"):e>=400&&e<500?new Error("Authentication request was rejected"):new Error("Authentication service unavailable, please try again later")}function qn(e){return new Promise((t,n)=>{try{$n(e.tenant);}catch(p){return n(p)}let r=JSON.stringify({clientSecret:e.clientSecret}),o=new URL(Fn.AUTH_ENGINE),s=o.protocol==="https:",a={hostname:o.hostname,port:o.port||(s?443:80),path:o.pathname+o.search,method:"POST",headers:{"Content-Type":"application/json","Content-Length":Buffer.byteLength(r),FlowTenant:e.tenant}},c=(s?Pn:bn).request(a,p=>{let T=[];p.on("data",S=>T.push(S)),p.on("end",()=>{let S=T.join("");if(p.statusCode>=400)return n(Mn(p.statusCode,S));let d;try{d=JSON.parse(S);}catch{return n(new Error("Invalid response from auth engine"))}let g=d.expires_at??new Date(Date.now()+(d.expires_in??3600)*1e3).toISOString();t({accessToken:d.access_token,expiresAt:g});});});c.on("error",p=>n(new Error(`Network error: ${p.message}`))),c.write(r),c.end();})}Xe.exports={getToken:qn};});var I=f((uo,Ze)=>{var{writeFileSync:Dn}=u("fs"),{tmpdir:Bn}=u("os"),{join:xn}=u("path"),{DEBUG_LOG_FILENAME:Yn,ENV:Hn}=h(),ze=xn(Bn(),Yn);function Wn(...e){if(process.env[Hn.FLOW_OBS_DEBUG]!=="1")return;let t=`[${new Date().toISOString()}] ${e.join(" ")}
|
|
2
|
+
`;try{Dn(ze,t,{flag:"a"});}catch(n){process.stderr.write(`[flow-obs debug ERROR] ${n.message}
|
|
3
|
+
`);}}Ze.exports={dbg:Wn,DEBUG_LOG:ze};});var Y=f((fo,et)=>{var{getFlowCredentials:Se,isTokenValid:Gn,getEmailFromToken:X,getTokenCache:Kn,saveTokenCache:Jn}=Je(),{getToken:Vn}=je(),{FLOW_BASE_URL:Xn,ENV:L,FEATURES:Ee}=h(),{dbg:U}=I(),jn=[/^localhost\.?$/i,/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^0\.0\.0\.0$/,/^::1$/,/^\[::1\]$/,/^\[::ffff:/i,/^\[f[cd]/i,/^\[fe80:/i,/^metadata\.google\.internal\.?$/i,/^metadata\.azure\.internal\.?$/i,/(?:^|\.)localtest\.me\.?$/i,/(?:^|\.)lvh\.me\.?$/i,/(?:^|\.)vcap\.me\.?$/i];function zn(e){return jn.some(t=>t.test(e))}function Zn(e){if(!e)return null;try{let t=e.split(".");if(t.length<2)return null;let n=JSON.parse(Buffer.from(t[1].replace(/-/g,"+").replace(/_/g,"/"),"base64").toString("utf8"));return n.email||n.preferred_username||n.upn||n.sub||null}catch{return null}}function he(e){if(!e)return null;try{let t=e.split(".");if(t.length<2)return null;let n=JSON.parse(Buffer.from(t[1].replace(/-/g,"+").replace(/_/g,"/"),"base64").toString("utf8")),{clientId:r,clientSecret:o,tenant:s}=n;return !r||!o||!s?null:{clientId:r,clientSecret:o,tenant:s}}catch{return null}}function Qn(e){let t=Buffer.from(JSON.stringify({alg:"none",typ:"JWT"})).toString("base64url"),n=Buffer.from(JSON.stringify({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant})).toString("base64url");return `${t}.${n}.`}function Te(e){let t;try{t=new URL(e);}catch{throw new Error(`Invalid URL: ${e}`)}let n=process.env[L.FLOW_OBS_ALLOW_HTTP]==="true";if(!n&&t.protocol!=="https:")throw new Error(`URL must use HTTPS: ${e}`);if(t.username||t.password)throw new Error(`URL must not contain embedded credentials: ${e}`);if(!n&&zn(t.hostname))throw new Error(`SSRF: private/loopback host not allowed: ${t.hostname}`);return e}async function er(){let e=he(process.env[L.ANTHROPIC_AUTH_TOKEN]);if(e)return {user:await X().catch(()=>null)||e.clientId,tenant:e.tenant};if(Ee.KEYCHAIN_ENABLED)try{let t=await Se();if(!t)return {user:"",tenant:""};let n=await X()||t.clientId||"",r=t.tenant||"";return {user:n,tenant:r}}catch{return {user:"",tenant:""}}return {user:"",tenant:""}}async function tr(e){if(await Gn())return (await Kn()).accessToken;U("getOrRefreshToken","token expired \u2014 refreshing via auth-engine");let t=await Vn(e);try{await Jn(t);}catch(n){U("getOrRefreshToken",`token cache save failed (non-fatal): ${n.message}`);}return U("getOrRefreshToken",`token refreshed, expires=${t.expiresAt}`),t.accessToken}function nr(e,t){let n=t&&t.accessToken?t.accessToken:"";return {endpoint:e.replace(/\/$/,"")+"/flow-langfuse-gateway/v1/traces",authHeader:`Bearer ${n}`}}function rr(e,t,n){let r=Buffer.from(`${t}:${n}`).toString("base64");return {endpoint:e.replace(/\/$/,"")+"/api/public/otel/v1/traces",authHeader:`Basic ${r}`}}async function Qe(){let e=[],t=process.env[L.ANTHROPIC_MODEL]||"",n=he(process.env[L.ANTHROPIC_AUTH_TOKEN]);U("resolveCredentials",n?"credentials resolved from ANTHROPIC_AUTH_TOKEN":"ANTHROPIC_AUTH_TOKEN absent or invalid"),!n&&Ee.KEYCHAIN_ENABLED&&(n=await Se(),n&&U("resolveCredentials","credentials resolved from keychain (FEATURES.KEYCHAIN_ENABLED=true)"));let r=n?n.tenant:"",o=process.env[L.FLOW_TELEMETRY]==="true",s=process.env[L.LANGFUSE_BASE_URL],a=process.env[L.LANGFUSE_PUBLIC_KEY],l=process.env[L.LANGFUSE_SECRET_KEY];if(o&&s&&a&&l){let d="",g=r;if(n)d=await X().catch(()=>null)||n.clientId;else if(Ee.KEYCHAIN_ENABLED)try{let y=await Se();y&&(d=await X()||y.clientId,g=y.tenant);}catch{}let O={user:d||"",tenant:g||"",team:"",project:"",model:t};e.push({mode:"direct",...rr(Te(s),a,l),...O}),U("resolveCredentials","direct mode active",`user=${O.user}`,`tenant=${O.tenant}`);}if(!n){if(e.length===0){let d=[];return d.authError=false,d}return e}let c=null;try{c=await tr(n);}catch(d){if(U("resolveCredentials",`token refresh failed: ${d.message}`),e.length>0)return e;let g=[];return g.authError=true,g}let T={user:Zn(c)||n.clientId,tenant:r,team:"",project:"",model:t},S=process.env[L.FLOW_TELEMETRY_GATEWAY]||Xn;return e.push({mode:"gateway",...nr(Te(S),{accessToken:c}),...T}),e}async function sr(){return (await Qe()).length>0}et.exports={credentialsAvailable:sr,getIdentityFromToken:er,resolveCredentials:Qe,validateUrl:Te,parseCredsFromAnthropicToken:he,buildAnthropicAuthToken:Qn};});var $=f((po,tt)=>{function or(e,t){let n=typeof e=="object"?JSON.stringify(e):String(e??"");return n.length>t?n.slice(0,t)+" \u2026[truncated]":n}function ar(e,t=100){return String(e??"").split(`
|
|
4
|
+
`)[0].slice(0,t).trim()}function ir(){return new Promise(e=>{let t="";process.stdin.setEncoding("utf8"),process.stdin.on("data",n=>t+=n),process.stdin.on("end",()=>{try{e(JSON.parse(t));}catch{e({});}});})}function cr(e){process.stdout.write(JSON.stringify(e));}tt.exports={truncate:or,firstLine:ar,readInput:ir,passthrough:cr};});var H=f((_o,rt)=>{var{randomBytes:nt}=u("crypto"),lr=()=>nt(16).toString("hex"),ur=()=>nt(8).toString("hex");function dr(){return String(BigInt(Date.now())*1000000n)}rt.exports={generateTraceId:lr,generateSpanId:ur,nowNs:dr};});var W=f((Eo,ot)=>{var{readFileSync:fr,writeFileSync:pr,unlinkSync:_r,existsSync:Sr,realpathSync:So}=u("fs"),{tmpdir:st}=u("os"),{join:Er,resolve:Tr,normalize:hr,sep:Ar}=u("path"),gr=/^[0-9a-f-]{1,64}$/i,Or=hr(st())+Ar;function Lr(e,t){let n=Tr(e);if(!n.startsWith(t))throw new Error(`Path traversal detected: ${e}`);return n}function Ae(e){if(!gr.test(e))throw new Error(`Invalid session ID: ${e}`);return Lr(Er(st(),`flow-obs-${e}.json`),Or)}function yr(e){let t=Ae(e);if(!Sr(t))return null;try{return JSON.parse(fr(t,"utf8"))}catch{return null}}function mr(e,t){pr(Ae(e),JSON.stringify(t),{encoding:"utf8",mode:384});}function Ir(e){try{_r(Ae(e));}catch{}}ot.exports={loadState:yr,saveState:mr,deleteState:Ir};});var ge=f((To,ct)=>{var{readFileSync:at,existsSync:it}=u("fs");function Nr(e){if(!e||!it(e))return null;try{let t=at(e,"utf8").trimEnd().split(`
|
|
5
|
+
`);for(let n=t.length-1;n>=0;n--)try{let r=JSON.parse(t[n]);if(r.type==="user"&&r.uuid)return r.uuid}catch{}}catch{}return null}function wr(e){if(!e||!it(e))return null;try{let t=at(e,"utf8").trimEnd().split(`
|
|
6
|
+
`),n=[],r=0,o=0,s=!1;for(let a=t.length-1;a>=0;a--)try{let l=JSON.parse(t[a]);if(l.type==="user"){if(s)break;continue}if(l.type==="assistant"){s=!0;let p=(l.message?.content??[]).filter(S=>S.type==="text").map(S=>S.text).join("");p&&n.unshift(p);let T=l.message?.usage??{};r+=(T.input_tokens??0)+(T.cache_read_input_tokens??0)+(T.cache_creation_input_tokens??0),o+=T.output_tokens??0;}}catch{}return !n.length&&r===0?null:{text:n.join(`
|
|
7
7
|
|
|
8
|
-
`),inputTokens:
|
|
8
|
+
`),inputTokens:r,outputTokens:o}}catch{}return null}ct.exports={readPromptUuid:Nr,readLastAssistantOutput:wr};});var j=f((ho,ft)=>{var{readFileSync:kr,existsSync:lt,readdirSync:Rr}=u("fs"),{homedir:ut}=u("os"),{join:M,extname:Ur}=u("path"),Cr=new Set([".venv","__pycache__",".git","node_modules"]),Pr=new Set([".pyc",".pyo"]),br=new Set(["SKILL.md",".DS_Store",".gitignore"]);function Fr(e,t){if(!e)return null;let n=[M(ut(),".claude","skills",e,"SKILL.md"),M(t||"",".claude","skills",e,"SKILL.md")];for(let r of n)if(lt(r))try{return kr(r,"utf8")}catch{}return null}function vr(e){return e.match(/^\/([a-z][a-z0-9-]*)(?:\s.*)?$/i)?.[1]||null}var dt=new Set(["Read","Write","Edit","MultiEdit","Bash","Glob","Grep","TodoWrite","WebFetch","WebSearch","Agent","Task"]);function $r(e){return !!e.slashSkill||e.toolCalls.some(r=>r.tool==="Skill")?e.toolCalls.some(r=>dt.has(r.tool))?"complete":"prerequisite_required":null}function Mr(e,t){if(!e)return null;let n=[M(ut(),".claude","skills",e),M(t||"",".claude","skills",e)],r=null;for(let a of n)if(lt(M(a,"SKILL.md"))){r=a;break}if(!r)return null;let o=[];function s(a,l){for(let c of Rr(a,{withFileTypes:true})){if(Cr.has(c.name)||br.has(c.name)||Pr.has(Ur(c.name)))continue;let p=l?`${l}/${c.name}`:c.name;c.isDirectory()?s(M(a,c.name),p):o.push(p);}}return s(r,""),o.length>0?o:null}ft.exports={readSkillContent:Fr,readSkillArtifacts:Mr,detectSlashSkill:vr,EXECUTION_TOOLS:dt,detectExecutionStatus:$r};});var Et=f((Ao,St)=>{var{generateTraceId:pt,generateSpanId:qr,nowNs:Dr}=H(),{saveState:Br}=W(),{readPromptUuid:xr}=ge(),{detectSlashSkill:Yr,readSkillContent:Hr,readSkillArtifacts:Wr}=j(),{passthrough:Gr}=$(),{dbg:_t}=I(),{ENV:Kr}=h(),{resolveCredentials:Jr}=Y();async function Vr(e){let t=e.session_id||"unknown",n=e.prompt||"",r=e.cwd||"";try{(await Jr()).authError===!0&&(process.stderr.write(`
|
|
9
9
|
\u26A0 flow-ai-obs: Your Flow credentials have expired.
|
|
10
10
|
Traces will not be captured until you re-authenticate.
|
|
11
11
|
Run: flow-ai-obs auth login
|
|
12
12
|
|
|
13
|
-
`),_t("UserPromptSubmit","auth expired \u2014 warning emitted to stderr"));}catch{}let o=xr(e.transcript_path)||pt(),s=Yr(
|
|
13
|
+
`),_t("UserPromptSubmit","auth expired \u2014 warning emitted to stderr"));}catch{}let o=xr(e.transcript_path)||pt(),s=Yr(n),a=s?Hr(s,r):null,l=s?Wr(s,r):null;Br(t,{traceId:pt(),spanId:qr(),startNs:Dr(),sessionId:t,prompt:n,cwd:r,traceName:o,transcriptPath:e.transcript_path||"",model:process.env[Kr.ANTHROPIC_MODEL]||"",toolCalls:[],spans:[],pendingTool:null,slashSkill:s,skillContent:a,skillArtifacts:l}),_t("UserPromptSubmit",`sid=${t}`,`traceName=${o}`,`slashSkill=${s}`),Gr(e);}St.exports={onUserPromptSubmit:Vr};});var ht=f((go,Tt)=>{var{nowNs:Xr}=H(),{loadState:jr,saveState:zr}=W(),{truncate:Zr,passthrough:Qr}=$(),{dbg:es}=I(),{TRACE_LIMITS:ts}=h();async function ns(e){let t=e.session_id||"unknown",n=e.tool_name||"unknown",r=e.tool_input||{},o=jr(t);o&&(o.pendingTool={name:n,inputStr:Zr(r,ts.TOOL_INPUT),startNs:Xr()},zr(t,o)),es("PreToolUse",`sid=${t}`,`tool=${n}`,`stateFound=${!!o}`),Qr(e);}Tt.exports={onPreToolUse:ns};});var gt=f((Oo,At)=>{var{FLOW_URLS:rs}=h();function ss(e){let t=new URL(e),n=new URL(rs.GATEWAY_HEALTH);return n.hostname=t.hostname,n.port=t.port,n.protocol=t.protocol,n}async function os(e,t){let n;try{n=ss(e);}catch{return false}let r={};t&&(r.Authorization=String(t).replace(/[\r\n]/g,""));try{let o=await fetch(n.toString(),{method:"GET",headers:r,signal:AbortSignal.timeout(1e4)});return o.status>=200&&o.status<300}catch{return false}}async function as(e,t,n){let r=String(n).replace(/[\r\n]/g,"");try{return (await fetch(t,{method:"POST",headers:{"Content-Type":"application/json",Authorization:r},body:JSON.stringify(e),signal:AbortSignal.timeout(1e4)})).status}catch{return 0}}At.exports={checkHealth:os,sendTraces:as};});var It=f((Lo,mt)=>{var w=u("fs"),Oe=u("path"),Ot=u("os"),{BUFFER:N,ENV:Lt}=h(),{dbg:G}=I();function is(){let e=parseInt(process.env[Lt.BUFFER_TTL_DAYS],10);return (Number.isFinite(e)?Math.max(N.MIN_TTL_DAYS,Math.min(N.MAX_TTL_DAYS,e)):N.DEFAULT_TTL_DAYS)*24*60*60*1e3}function cs(){let e=parseInt(process.env[Lt.BUFFER_MAX_FILES],10);return Number.isFinite(e)?Math.max(N.MIN_MAX_FILES,Math.min(N.MAX_MAX_FILES,e)):N.DEFAULT_MAX_FILES}function yt(e){if(/[/\\]/.test(e))throw new Error(`Invalid buffer fileId: ${e}`);return Oe.join(Ot.tmpdir(),`${N.FILE_PREFIX}${e}.json`)}function Le(){let e=Ot.tmpdir(),t;try{t=w.readdirSync(e);}catch{return []}return t.filter(n=>n.startsWith(N.FILE_PREFIX)&&n.endsWith(".json")).map(n=>{let r=Oe.join(e,n),o=0;try{o=w.statSync(r).mtimeMs;}catch{}return {full:r,mtime:o}}).sort((n,r)=>n.mtime-r.mtime).map(n=>n.full)}function ls(e){try{let t=cs(),n=Le();if(n.length>=t){let s=n.slice(0,n.length-t+1);for(let a of s)try{w.unlinkSync(a);}catch{}}let r=`${Date.now()}-${Math.random().toString(36).slice(2,8)}`,o={fileId:r,bufferedAt:Date.now(),payload:e};return w.writeFileSync(yt(r),JSON.stringify(o),{encoding:"utf8",mode:384}),G("buffer",`saved fileId=${r}`),r}catch(t){return G("buffer",`saveToBuffer failed: ${t.message}`),null}}function us(e){let t=Le(),n=e!=null&&e>0?e:t.length,r=[];for(let o of t){if(r.length>=n)break;try{let s=w.readFileSync(o,"utf8"),a=JSON.parse(s);a&&a.fileId&&a.payload&&r.push(a);}catch{G("buffer",`skipping malformed file: ${o}`);}}return r}function ds(e){try{w.unlinkSync(yt(e)),G("buffer",`deleted fileId=${e}`);}catch{}}function fs(){let e=Date.now()-is();for(let t of Le())try{let{mtimeMs:n}=w.statSync(t);n<e&&(w.unlinkSync(t),G("buffer",`evicted stale: ${Oe.basename(t)}`));}catch{}}mt.exports={saveToBuffer:ls,loadBuffer:us,deleteBuffer:ds,cleanStaleBuffers:fs};});var me=f((yo,wt)=>{var{resolveCredentials:ps}=Y(),{OTLP:Nt,BUFFER:_s}=h(),{dbg:k}=I(),{checkHealth:Ss,sendTraces:ye}=gt(),{saveToBuffer:z,loadBuffer:Es,deleteBuffer:Ts,cleanStaleBuffers:hs}=It(),As={name:Nt.SCOPE_NAME,version:Nt.SCOPE_VERSION},gs={TRACE_NAME:"langfuse.trace.name",TRACE_INPUT:"langfuse.trace.input",TRACE_OUTPUT:"langfuse.trace.output",TRACE_METADATA:"langfuse.trace.metadata",TRACE_TAGS:"langfuse.trace.tags",USER_ID:"langfuse.user.id",SESSION_ID:"langfuse.session.id",OBS_NAME:"langfuse.observation.name",OBS_INPUT:"langfuse.observation.input",OBS_OUTPUT:"langfuse.observation.output",OBS_LEVEL:"langfuse.observation.level",OBS_TYPE:"langfuse.observation.type",MODEL:"gen_ai.request.model",INPUT_TOKENS:"gen_ai.usage.input_tokens",OUTPUT_TOKENS:"gen_ai.usage.output_tokens"};function Os(e,t){return t==null||t===""?null:{key:e,value:{stringValue:String(t)}}}function Ls(...e){return e.filter(Boolean)}function ys(e,t){return {resourceSpans:[{resource:{attributes:e},scopeSpans:[{scope:As,spans:Array.isArray(t)?t:[t]}]}]}}async function ms(e){hs();let t=Es(_s.REPLAY_BATCH_SIZE);t.length&&(k("replayBufferedTraces",`replaying ${t.length} buffered trace(s)`),await Promise.allSettled(t.map(async n=>{try{let r=await ye(n.payload,e.endpoint,e.authHeader);r>=200&&r<300?(Ts(n.fileId),k("replayBufferedTraces",`replayed fileId=${n.fileId} status=${r}`)):k("replayBufferedTraces",`replay failed fileId=${n.fileId} status=${r}`);}catch(r){k("replayBufferedTraces",`replay error fileId=${n.fileId}: ${r.message}`);}})));}async function Is(e){let t=await ps();if(!t.length)return t.authError&&(k("postToLangfuse","auth refresh failed \u2014 buffering trace"),z(e)),0;let n=await Promise.all(t.map(async s=>{if(s.mode!=="gateway")return {creds:s,healthy:true};let a=await Ss(s.endpoint,s.authHeader);return {creds:s,healthy:a}})),r=n.find(s=>s.creds.mode==="gateway"&&s.healthy)?.creds??n.find(s=>s.creds.mode==="direct")?.creds;return r&&await ms(r),(await Promise.all(n.map(async({creds:s,healthy:a})=>{if(s.mode==="gateway"){if(!a)return k("postToLangfuse","gateway health check failed \u2014 buffering trace"),z(e),0;let c=await ye(e,s.endpoint,s.authHeader);return (c===0||c>=500)&&(k("postToLangfuse",`gateway send failed (status ${c}) \u2014 buffering trace`),z(e)),c}let l=await ye(e,s.endpoint,s.authHeader);return (l===0||l>=500)&&(k("postToLangfuse",`direct endpoint unavailable (status ${l}) \u2014 buffering trace`),z(e)),l}))).find(s=>s!==0)||0}wt.exports={LF:gs,a:Os,attrs:Ls,buildPayload:ys,postToLangfuse:Is};});var Ie=f((mo,kt)=>{var A="[REDACTED]",Ns=[{re:/\b(sk-[A-Za-z0-9_\-]{20,})/g,replace:()=>`sk-${A}`},{re:/\b(pk-[A-Za-z0-9_\-]{20,})/g,replace:()=>`pk-${A}`},{re:/\b(Bearer\s+)[A-Za-z0-9\-._~+/]+=*/gi,replace:(e,t)=>`${t}${A}`},{re:/\b(Basic\s+)[A-Za-z0-9+/]+=*/gi,replace:(e,t)=>`${t}${A}`},{re:/(-----BEGIN [A-Z ]+-----)[^-]*(-----END [A-Z ]+-----)/g,replace:(e,t,n)=>`${t}
|
|
14
14
|
${A}
|
|
15
|
-
${
|
|
16
|
-
`)),
|
|
17
|
-
`),process.stdout.write(JSON.stringify(t));}}
|
|
15
|
+
${n}`},{re:/\b(AKIA[0-9A-Z]{16})\b/g,replace:()=>`AKIA${A}`},{re:/(aws_secret_access_key\s*[=:]\s*)([A-Za-z0-9/+]{40})/gi,replace:(e,t)=>`${t}${A}`},{re:/\b(ghp_[A-Za-z0-9]{36,})/g,replace:()=>`ghp_${A}`},{re:/\b(github_pat_[A-Za-z0-9_]{36,})/gi,replace:()=>`github_pat_${A}`},{re:/\b(eyJ[A-Za-z0-9_\-]+\.eyJ[A-Za-z0-9_\-]+\.[A-Za-z0-9_\-]+)/g,replace:()=>`eyJ.${A}`},{re:/\b([A-Z0-9_]*(?:SECRET|TOKEN|KEY|PASSWORD|PASSWD|PWD|CREDENTIAL|API)[A-Z0-9_]*\s*=\s*)(['"]?)([^\s'"#\n]+)\2/gi,replace:(e,t,n)=>`${t}${n}${A}${n}`},{re:/([a-z][a-z0-9+\-.]*:\/\/[^:/?#\s]*):([^@\s]+)@/gi,replace:(e,t)=>`${t}:${A}@`}];function ws(e){if(e==null)return "";let t=typeof e=="string"?e:JSON.stringify(e);return Ns.reduce((n,{re:r,replace:o})=>n.replace(r,o),t)}kt.exports={sanitize:ws,REDACTED:A};});var vt=f((Io,Ft)=>{var{generateSpanId:ks,nowNs:Rs}=H(),{loadState:Us,saveState:Cs}=W(),{LF:K,a:C,attrs:Ps}=me(),{truncate:Rt,firstLine:bs,passthrough:Ut}=$(),{readSkillContent:Fs,readSkillArtifacts:vs}=j(),{dbg:Ct}=I(),{TRACE_LIMITS:Pt}=h(),{sanitize:bt}=Ie();async function $s(e){let t=e.session_id||"unknown",n=e.tool_name||"unknown",r=e.tool_input||{},o=e.tool_response||"",s=Us(t);if(!s){Ut(e);return}let a=Rs(),l=s.pendingTool?.name===n,c=l?s.pendingTool.startNs:String(BigInt(a)-200000000n),p=l?s.pendingTool.inputStr:Rt(r,Pt.TOOL_INPUT),T=p;if(n==="Skill"){let R=typeof r=="object"&&r!==null?r.skill||r.name||r.skillName||String(Object.values(r)[0]??""):String(r),m=R?Fs(R.trim(),s.cwd):null;m&&(T=m,s.skillContent||(s.skillContent=m),s.slashSkill||(s.slashSkill=R.trim()),s.skillArtifacts||(s.skillArtifacts=vs(R.trim(),s.cwd))),Ct("PostToolUse","Skill tool detected",`skillName=${R}`,`contentFound=${!!m}`);}let S=bt(Rt(o,Pt.TOOL_OUTPUT)),d=/\b(error|exception|failed|failure|traceback|errno)\b/i.test(S.slice(0,500)),g=d?"ERROR":"DEFAULT",O=ks(),y=Math.round(Number(BigInt(a)-BigInt(c))/1e6),te={Agent:"AGENT",Task:"AGENT"}[n]??"TOOL";s.toolCalls.push({tool:n,brief:bs(p,60),error:d,durationMs:y}),s.spans.push({traceId:s.traceId,spanId:O,parentSpanId:s.spanId,name:n,kind:3,startTimeUnixNano:c,endTimeUnixNano:a,attributes:Ps(C(K.OBS_NAME,n),C(K.OBS_TYPE,te),C(K.OBS_LEVEL,g),C(K.OBS_INPUT,bt(T)),C(K.OBS_OUTPUT,S),C("tool.name",n),C("tool.error",String(d))),status:{code:d?2:1}}),s.pendingTool=null,Cs(t,s),Ct("PostToolUse",`sid=${t}`,`tool=${n}`,`error=${d}`,`durationMs=${y}`,`totalSpans=${s.spans.length}`),Ut(e);}Ft.exports={onPostToolUse:$s};});var Mt=f((No,$t)=>{var Ne={"claude-opus-4-6":{input:15,output:75},"claude-opus-4-5":{input:15,output:75},"claude-sonnet-4-6":{input:3,output:15},"claude-sonnet-4-5":{input:3,output:15},"claude-haiku-4-5":{input:.8,output:4},"claude-4-6-opus":{input:15,output:75},"claude-4-6-sonnet":{input:3,output:15},"claude-4-5-opus":{input:15,output:75},"claude-4-5-sonnet":{input:3,output:15},"claude-4-5-haiku":{input:.8,output:4},"claude-3-5-sonnet-20241022":{input:3,output:15},"claude-3-5-haiku-20241022":{input:.8,output:4},"claude-3-opus-20240229":{input:15,output:75}};function Ms(e,t,n){let r=Object.keys(Ne).find(a=>(e||"").toLowerCase().includes(a));if(!r)return;let o=Ne[r],s=(t*o.input+n*o.output)/1e6;return Math.round(s*1e6)/1e6}$t.exports={MODEL_PRICING:Ne,calcCostUsd:Ms};});var Yt=f((wo,xt)=>{var{generateSpanId:qt,nowNs:qs}=H(),{loadState:Ds,deleteState:Dt}=W(),{LF:E,a:i,attrs:Z,buildPayload:Bs,postToLangfuse:xs}=me(),{getIdentityFromToken:Ys}=Y(),{calcCostUsd:Hs}=Mt(),{readLastAssistantOutput:Ws}=ge(),{truncate:Q,firstLine:Gs,passthrough:we}=$(),{dbg:q}=I(),{detectExecutionStatus:Ks}=j(),{sanitize:Bt}=Ie(),{TRACE_LIMITS:ee}=h();async function Js(e){let t=e.session_id||"unknown",n=e.stop_reason||"end_turn",r=Ds(t);if(!r){we(e);return}r.slashSkill&&!/^[a-z][a-z0-9-]*$/i.test(r.slashSkill)&&(q("Stop",`sid=${t}`,`slashSkill rejected post-disk: "${r.slashSkill}"`),r.slashSkill=null);let o=qs(),s=await Ys();if(r.slashSkill&&!r.toolCalls.some(_=>_.tool==="Skill")){let _=qt(),D=r.skillContent?r.skillContent:JSON.stringify({skill:r.slashSkill});r.toolCalls.push({tool:"Skill",brief:r.slashSkill,error:false,durationMs:0,synthetic:true}),r.spans.push({traceId:r.traceId,spanId:_,parentSpanId:r.spanId,name:"Skill",kind:3,startTimeUnixNano:r.startNs,endTimeUnixNano:r.startNs,attributes:Z(i(E.OBS_NAME,"Skill"),i(E.OBS_TYPE,"TOOL"),i(E.OBS_LEVEL,"DEFAULT"),i(E.OBS_INPUT,D),i(E.OBS_OUTPUT,"loaded via slash command"),i("tool.name","Skill"),i("tool.error","false"),i("skill.name",r.slashSkill),i("skill.invocation","slash-command")),status:{code:1}}),q("Stop",`slashSkill=${r.slashSkill}`,"synthetic span injected");}let a=e.transcript_path||r.transcriptPath||"",l=Ws(a),c=r.toolCalls.length,p=r.toolCalls.filter(_=>_.error).length,T=Bt(l?.text?Q(l.text,ee.TRACE_OUTPUT):c===0?"No tools used":r.toolCalls.map((_,D)=>`${D+1}. ${_.tool}${_.brief?` \u2192 ${_.brief}`:""}${_.error?" [ERROR]":""}`).join(`
|
|
16
|
+
`)),S=l?.inputTokens??0,d=l?.outputTokens??0,g=r.toolCalls.map((_,D)=>`${D+1}. ${_.tool}${_.brief?` \u2192 ${_.brief}`:""}${_.error?" [ERROR]":""} (${_.durationMs}ms)`),O=!!(r.slashSkill||r.toolCalls.some(_=>_.tool==="Skill")),y=r.toolCalls.some(_=>_.tool==="Agent");if(!O&&!y){q("Stop",`sid=${t}`,"skipping trace \u2014 no Skill or Agent calls found"),Dt(t),we(e);return}let J=O?"skill":"agent",te=Math.round(Number(BigInt(o)-BigInt(r.startNs))/1e6),R=Hs(r.model,S,d),m=Ks(r);m==="prerequisite_required"&&(r.spans.push({traceId:r.traceId,spanId:qt(),parentSpanId:r.spanId,name:"prerequisite-check",kind:3,startTimeUnixNano:r.startNs,endTimeUnixNano:o,attributes:Z(i(E.OBS_NAME,"prerequisite-check"),i(E.OBS_TYPE,"EVENT"),i(E.OBS_LEVEL,"WARNING"),i(E.OBS_OUTPUT,T),i("skill.name",r.slashSkill||void 0),i("execution_status","prerequisite_required")),status:{code:1}}),q("Stop",`sid=${t}`,"prerequisite-check span injected",`skill=${r.slashSkill}`));let ke=(()=>{if(!(!O||!r.prompt)){if(r.slashSkill){let _=r.prompt.replace(new RegExp(`^\\/${r.slashSkill}\\s*`,"i"),"").trim();return _?Q(_,ee.USER_INSTRUCTION):void 0}return Q(r.prompt,ee.USER_INSTRUCTION)||void 0}})(),Ht=JSON.stringify({trace_type:J,...m!==null&&{execution_status:m},...r.slashSkill&&{skill_name:r.slashSkill},...r.skillArtifacts?.length&&{skill_artifacts:r.skillArtifacts},...ke!==void 0&&{user_instruction:ke},latency_ms:te,...S&&{tokens_input:S},...d&&{tokens_output:d},cost_usd:R,...r.model&&{model:r.model},toolCount:c,errorCount:p,stopReason:n,sessionId:r.sessionId,tools:g.length?g:void 0}),Wt=Bt(Q(r.prompt,ee.TRACE_INPUT)),Gt=Z(i(E.TRACE_NAME,r.traceName),i(E.TRACE_INPUT,Wt),i(E.TRACE_OUTPUT,T),i(E.TRACE_METADATA,Ht),i(E.SESSION_ID,r.sessionId),i(E.USER_ID,s.user),i(E.OBS_TYPE,"GENERATION"),i(E.MODEL,r.model),S?i(E.INPUT_TOKENS,S):null,d?i(E.OUTPUT_TOKENS,d):null,i("claude.stop_reason",n),i("claude.tool_count",String(c)),i("claude.error_count",String(p)),i("claude.session_id",r.sessionId),i("flow.trace_type",J),{key:E.TRACE_TAGS,value:{arrayValue:{values:[{stringValue:J}]}}}),Kt={traceId:r.traceId,spanId:r.spanId,name:r.traceName,kind:1,startTimeUnixNano:r.startNs,endTimeUnixNano:o,attributes:Gt,status:{code:p>0?2:1}},Jt=Z(i("service.name",process.env.LANGFUSE_PROJECT_NAME||"claude-code"),i("deployment.environment",process.env.LANGFUSE_ENVIRONMENT||"default")),Re=[...r.spans||[],Kt];q("Stop",`sid=${t}`,`totalTools=${c}`,`errorTools=${p}`,`spans=${Re.length}`,`inputTokens=${S}`,`outputTokens=${d}`,`traceOutput="${Gs(T,80)}"`);let Vt=await xs(Bs(Jt,Re));q("Stop",`POST status=${Vt}`,`traceId=${r.traceId}`),Dt(t),we(e);}xt.exports={onStop:Js};});var{credentialsAvailable:Vs}=Y(),{readInput:Xs}=$(),{onUserPromptSubmit:js}=Et(),{onPreToolUse:zs}=ht(),{onPostToolUse:Zs}=vt(),{onStop:Qs}=Yt();async function eo(){let e=process.argv[2];if(!await Vs()){let n=[];process.stdin.on("data",r=>n.push(r)),process.stdin.on("end",()=>process.stdout.write(n.join("")));return}let t=await Xs();switch(e){case "UserPromptSubmit":await js(t);break;case "PreToolUse":await zs(t);break;case "PostToolUse":await Zs(t);break;case "Stop":await Qs(t);break;default:process.stderr.write(`[flow-obs] unknown event: ${e}
|
|
17
|
+
`),process.stdout.write(JSON.stringify(t));}}eo().catch(e=>{process.stderr.write(`[flow-obs] fatal: ${e.message}
|
|
18
18
|
`),process.exit(0);});
|
package/dist/setup.js
CHANGED
|
@@ -1,10 +1,10 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
'use strict';var a=(e=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(e,{get:(t,n)=>(typeof require<"u"?require:t)[n]}):e)(function(e){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+e+'" is not supported')});var T=(e,t)=>()=>(t||e((t={exports:{}}).exports,t),t.exports);var p=T((rn,Q)=>{var A=process.env.FLOW_BASE_URL||"https://flow.ciandt.com",Z={AUTH_ENGINE:process.env.FLOW_AUTH_ENGINE_URL||`${A}/auth-engine-api/v2/api-key/token`,GATEWAY_TRACES:process.env.FLOW_GATEWAY_TRACES_URL||`${A}/flow-langfuse-gateway/v1/traces`,GATEWAY_HEALTH:process.env.FLOW_GATEWAY_HEALTH_URL||`${A}/flow-langfuse-gateway/v1/health`,OTEL_ENDPOINT:process.env.FLOW_OTEL_ENDPOINT_URL||`${A}/otel`},me={SERVICE:"flow-plugins-cli",ACCOUNT_CREDS:"credentials",ACCOUNT_TOKEN:"token-cache"},Fe="FLOW-nodejs",Ue="config.json",Pe={SCOPE_NAME:"flow-ai-obs",SCOPE_VERSION:"0.1.0"},ke={ANTHROPIC_BASE_URL:process.env.FLOW_LLM_PROXY_URL||`${A}/flow-llm-proxy/`,ANTHROPIC_MODEL:process.env.FLOW_LLM_PROXY_MODEL||"anthropic.claude-4-6-sonnet",ANTHROPIC_SMALL_FAST_MODEL:process.env.FLOW_LLM_PROXY_SMALL_MODEL||"anthropic.claude-4-6-sonnet",CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS:"1"},be={CLAUDE_CODE_ENABLE_TELEMETRY:"1",OTEL_EXPORTER_OTLP_ENDPOINT:Z.OTEL_ENDPOINT,OTEL_EXPORTER_OTLP_PROTOCOL:"http/json",OTEL_METRICS_EXPORTER:"otlp",OTEL_LOGS_EXPORTER:"otlp",OTEL_LOG_TOOL_DETAILS:"1",OTEL_LOG_USER_PROMPTS:"1"},De={FLOW_TELEMETRY:"FLOW_TELEMETRY",FLOW_TELEMETRY_GATEWAY:"FLOW_TELEMETRY_GATEWAY_URL",LANGFUSE_BASE_URL:"LANGFUSE_BASE_URL",LANGFUSE_PUBLIC_KEY:"LANGFUSE_PUBLIC_KEY",LANGFUSE_SECRET_KEY:"LANGFUSE_SECRET_KEY",ANTHROPIC_MODEL:"ANTHROPIC_MODEL",ANTHROPIC_AUTH_TOKEN:"ANTHROPIC_AUTH_TOKEN",FLOW_OBS_DEBUG:"FLOW_TELEMETRY_DEBUG",FLOW_OBS_ALLOW_HTTP:"FLOW_TELEMETRY_ALLOW_HTTP",BUFFER_TTL_DAYS:"FLOW_TELEMETRY_BUFFER_TTL_DAYS",BUFFER_MAX_FILES:"FLOW_TELEMETRY_BUFFER_MAX_FILES"},Me={KEYCHAIN_ENABLED:false},He={LOCK_STALE_MS:3e4,CONNECTIVITY_MAX_RETRY:3,CONNECTIVITY_RETRY_MS:2e3},Ye={UserPromptSubmit:5,PreToolUse:3,PostToolUse:10,Stop:15},qe={FILE_PREFIX:"flow-obs-buffer-",DEFAULT_TTL_DAYS:4,MIN_TTL_DAYS:1,MAX_TTL_DAYS:30,DEFAULT_MAX_FILES:50,MIN_MAX_FILES:1,MAX_MAX_FILES:500,REPLAY_BATCH_SIZE:10},We="flow-ai-obs-debug.log",Be={TOOL_INPUT:2e4,TOOL_OUTPUT:2e4,TRACE_OUTPUT:2e4,USER_INSTRUCTION:1e4,TRACE_INPUT:5e4,TOOL_BRIEF:60},Ge="flow-obs-";Q.exports={FLOW_BASE_URL:A,FLOW_URLS:Z,VAULT:me,CONFIG_DIR_NAME:Fe,CONFIG_FILE_NAME:Ue,OTLP:Pe,LLM_PROXY:ke,NATIVE_OTEL:be,ENV:De,FEATURES:Me,INSTALLER:He,HOOK_TIMEOUTS:Ye,BUFFER:qe,DEBUG_LOG_FILENAME:We,STATE_FILE_PREFIX:Ge,TRACE_LIMITS:Be};});var ne=T((sn,te)=>{var g=a("fs"),O=a("path"),$e=a("os"),{CONFIG_DIR_NAME:U,CONFIG_FILE_NAME:P}=p(),k={credentials:"credentials","token-cache":"tokenCache"};function N(){let e=$e.homedir();if(process.platform==="darwin")return O.join(e,"Library","Preferences",U,P);if(process.platform==="win32"){let n=process.env.APPDATA||O.join(e,"AppData","Roaming");return O.join(n,U,P)}let t=process.env.XDG_CONFIG_HOME||O.join(e,".config");return O.join(t,U,P)}function b(){try{let e=g.readFileSync(N(),"utf8");return JSON.parse(e)}catch{return {}}}function ee(e){let t=N();g.mkdirSync(O.dirname(t),{recursive:true}),g.writeFileSync(t,JSON.stringify(e,null,2),{encoding:"utf8",mode:384});}var v=class{static isAvailable(){return true}static hasExistingData(){try{if(!g.existsSync(N()))return !1;let t=JSON.parse(g.readFileSync(N(),"utf8"));return !!(t&&t.credentials)}catch{return false}}async getSecret(t,n){let r=b(),s=k[n]||n,o=r[s];return o?typeof o=="string"?o:JSON.stringify(o):null}async setSecret(t,n,r){let s=b(),o=k[n]||n;if(n==="token-cache")try{s[o]=JSON.parse(r);}catch{s[o]=r;}else s[o]=r;ee(s);}async deleteSecret(t,n){let r=b(),s=k[n]||n;return s in r?(delete r[s],ee(r),true):false}getStoragePath(){return `config.json (unencrypted) \u2014 ${N()}`}};function xe(){}var Ke=v;te.exports={JsonFallbackProvider:v,ScryptFallbackProvider:Ke,_resetWarningState:xe};});var se=T((on,re)=>{var{execFile:Ve}=a("child_process"),{promisify:Xe}=a("util"),{accessSync:je,constants:Je}=a("fs"),D=Xe(Ve),M=class{static async isAvailable(){try{return je("/usr/bin/security",Je.X_OK),!0}catch{return false}}async getSecret(t,n){try{let{stdout:r}=await D("security",["find-generic-password","-w","-a",n,"-s",t]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await D("security",["add-generic-password","-U","-a",n,"-s",t,"-w",r]);}async deleteSecret(t,n){try{return await D("security",["delete-generic-password","-a",n,"-s",t]),!0}catch{return false}}getStoragePath(){return "macOS Keychain"}};re.exports={MacOsKeyVaultProvider:M};});var ae=T((cn,ce)=>{var{execFile:ze,spawn:Ze}=a("child_process"),{promisify:Qe}=a("util"),{accessSync:et,constants:tt}=a("fs"),oe=Qe(ze),H=class{static async isAvailable(){let t=["/usr/bin/secret-tool","/bin/secret-tool","/usr/local/bin/secret-tool"];for(let n of t)try{return et(n,tt.X_OK),!0}catch{}return false}async getSecret(t,n){try{let{stdout:r}=await oe("secret-tool",["lookup","service",t,"account",n]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await new Promise((s,o)=>{let c=Ze("secret-tool",["store","--label",t,"service",t,"account",n]);c.on("error",o),c.on("close",u=>{u===0?s():o(new Error(`secret-tool exited with code ${u}`));}),c.stdin.write(r),c.stdin.end();});}async deleteSecret(t,n){try{return await oe("secret-tool",["clear","service",t,"account",n]),!0}catch{return false}}getStoragePath(){return "Linux Secret Service (libsecret)"}};ce.exports={LinuxKeyVaultProvider:H};});var le=T((an,ie)=>{var Y=class{static async isAvailable(){try{return await a("keytar").getPassword("__flow_probe__","__flow_probe__"),!0}catch{return false}}async getSecret(t,n){return a("keytar").getPassword(t,n)}async setSecret(t,n,r){await a("keytar").setPassword(t,n,r);}async deleteSecret(t,n){return a("keytar").deletePassword(t,n)}getStoragePath(){return "Windows Credential Manager"}};ie.exports={WindowsKeyVaultProvider:Y};});var _e=T((ln,Ee)=>{async function ue(){let{JsonFallbackProvider:e}=ne();return await nt()??new e}async function nt(){switch(process.platform){case "darwin":{let{MacOsKeyVaultProvider:e}=se();return await e.isAvailable()?new e:null}case "linux":{let{LinuxKeyVaultProvider:e}=ae();return await e.isAvailable()?new e:null}case "win32":{let{WindowsKeyVaultProvider:e}=le();return await e.isAvailable()?new e:null}default:return null}}var rt=ue;Ee.exports={createSecretVaultProvider:ue,createKeyVaultProvider:rt};});var x=T((un,fe)=>{var{createSecretVaultProvider:st}=_e(),{VAULT:W}=p(),L=W.SERVICE,B=W.ACCOUNT_CREDS,G=W.ACCOUNT_TOKEN,q=null;function h(){return q||(q=st()),q}async function Te(){let t=await(await h()).getSecret(L,B);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function ot(e){if(!e.clientId||!e.clientSecret||!e.tenant)throw new Error("clientId, clientSecret and tenant are required");await(await h()).setSecret(L,B,JSON.stringify(e));}async function ct(){let e=await h();await e.deleteSecret(L,B),await e.deleteSecret(L,G);}async function at(e){await(await h()).setSecret(L,G,JSON.stringify({accessToken:e.accessToken,expiresAt:e.expiresAt}));}async function $(){let t=await(await h()).getSecret(L,G);if(!t)return null;try{let n=JSON.parse(t);return {accessToken:n.accessToken,expiresAt:n.expiresAt}}catch{return null}}async function it(){let e=await $();return e?new Date(e.expiresAt)>new Date:false}async function lt(){let e=await $();if(!e||!e.accessToken)return null;try{let t=e.accessToken.split(".");if(t.length<2)return null;let n=JSON.parse(Buffer.from(t[1].replace(/-/g,"+").replace(/_/g,"/"),"base64").toString("utf8"));return n.email||n.preferred_username||n.upn||n.sub||null}catch{return null}}async function ut(){let e=await h();if(typeof e.getStoragePath=="function")return e.getStoragePath();let t=process.platform;return t==="darwin"?"macOS Keychain":t==="win32"?"Windows Credential Manager":"Linux Secret Service (libsecret)"}async function Et(){let e=await Te();return !!(e&&e.clientId&&e.clientSecret&&e.tenant)}fe.exports={getFlowCredentials:Te,saveFlowCredentials:ot,clearFlowCredentials:ct,saveTokenCache:at,getTokenCache:$,isTokenValid:it,getEmailFromToken:lt,getConfigPath:ut,hasCredentials:Et};});var K=T((En,Se)=>{var _t=a("https"),Tt=a("http"),{FLOW_URLS:ft}=p(),dt=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function St(e){if(!dt.test(e))throw new Error(`Invalid tenant value: "${e}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}var de={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};function pt(e,t){try{let n=JSON.parse(t);if(typeof n.error=="string"&&de[n.error])return new Error(de[n.error])}catch{}return e===401||e===403||e===500?new Error("Invalid credentials"):e>=400&&e<500?new Error("Authentication request was rejected"):new Error("Authentication service unavailable, please try again later")}function At(e){return new Promise((t,n)=>{try{St(e.tenant);}catch(l){return n(l)}let r=JSON.stringify({clientSecret:e.clientSecret}),s=new URL(ft.AUTH_ENGINE),o=s.protocol==="https:",c={hostname:s.hostname,port:s.port||(o?443:80),path:s.pathname+s.search,method:"POST",headers:{"Content-Type":"application/json","Content-Length":Buffer.byteLength(r),FlowTenant:e.tenant}},d=(o?_t:Tt).request(c,l=>{let E=[];l.on("data",_=>E.push(_)),l.on("end",()=>{let _=E.join("");if(l.statusCode>=400)return n(pt(l.statusCode,_));let S;try{S=JSON.parse(_);}catch{return n(new Error("Invalid response from auth engine"))}let w=S.expires_at??new Date(Date.now()+(S.expires_in??3600)*1e3).toISOString();t({accessToken:S.access_token,expiresAt:w});});});d.on("error",l=>n(new Error(`Network error: ${l.message}`))),d.write(r),d.end();})}Se.exports={getToken:At};});var he=T((_n,Le)=>{var i=a("fs"),I=a("path"),pe=a("os"),{FLOW_URLS:Ot,INSTALLER:R,HOOK_TIMEOUTS:Lt,NATIVE_OTEL:ht,LLM_PROXY:yt}=p(),{getToken:wt}=K();function X(){return process.platform==="win32"?I.join(process.env.APPDATA||I.join(pe.homedir(),"AppData","Roaming"),"Claude","settings.json"):I.join(pe.homedir(),".claude","settings.json")}var Nt=R.LOCK_STALE_MS;function Ae(e){try{let t=i.statSync(e);Date.now()-t.mtimeMs>Nt&&i.unlinkSync(e);}catch{}try{i.writeFileSync(e,String(process.pid),{flag:"wx"});}catch(t){throw t.code==="EEXIST"?new Error("Another install is already in progress. If this is stale, remove: "+e):t}}function Oe(e){try{i.unlinkSync(e);}catch{}}function gt(e,t){let r=(Array.isArray(e)?e:[]).map(s=>{if(!Array.isArray(s?.hooks))return null;let o=s.hooks.filter(c=>!c.command?.startsWith?.("flow-ai-obs "));return o.length>0?{...s,hooks:o}:null}).filter(s=>s!=null);return [t,...r]}function Rt(){let e=X(),t=e+".lock";i.mkdirSync(I.dirname(e),{recursive:true});let n=[];Ae(t);try{if(i.existsSync(e)){i.copyFileSync(e,e+".bkp");try{i.chmodSync(e+".bkp",384);}catch{}}let r={};try{r=JSON.parse(i.readFileSync(e,"utf8"));}catch{}(!r.env||typeof r.env!="object")&&(r.env={}),Object.assign(r.env,ht),Object.assign(r.env,yt),r.otelHeadersHelper="flow-ai-obs otel-headers",(!r.hooks||typeof r.hooks!="object"||Array.isArray(r.hooks))&&(r.hooks={});let s=(c,u)=>({matcher:"",hooks:[{type:"command",command:`flow-ai-obs ${c}`,timeout:u}]}),o=["UserPromptSubmit","PreToolUse","PostToolUse","Stop"];for(let c of o){let u=gt(r.hooks[c],s(c,Lt[c]));u.length>1&&n.push(c),r.hooks[c]=u;}i.writeFileSync(e,JSON.stringify(r,null,2)+`
|
|
3
|
-
`,{encoding:"utf8",mode:384});try{i.chmodSync(e,384);}catch{}}finally{
|
|
4
|
-
`,{encoding:"utf8",mode:384});try{i.chmodSync(t,384);}catch{}}finally{
|
|
5
|
-
`;try{
|
|
6
|
-
`);}}
|
|
2
|
+
'use strict';var a=(e=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(e,{get:(t,n)=>(typeof require<"u"?require:t)[n]}):e)(function(e){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+e+'" is not supported')});var T=(e,t)=>()=>(t||e((t={exports:{}}).exports,t),t.exports);var d=T((on,ee)=>{var O=process.env.FLOW_BASE_URL||"https://flow.ciandt.com",Q={AUTH_ENGINE:process.env.FLOW_AUTH_ENGINE_URL||`${O}/auth-engine-api/v2/api-key/token`,GATEWAY_TRACES:process.env.FLOW_GATEWAY_TRACES_URL||`${O}/flow-langfuse-gateway/v1/traces`,GATEWAY_HEALTH:process.env.FLOW_GATEWAY_HEALTH_URL||`${O}/flow-langfuse-gateway/v1/health`,OTEL_ENDPOINT:process.env.FLOW_OTEL_ENDPOINT_URL||`${O}/otel`},Fe={SERVICE:"flow-plugins-cli",ACCOUNT_CREDS:"credentials",ACCOUNT_TOKEN:"token-cache"},Ue="FLOW-nodejs",Pe="config.json",ke={SCOPE_NAME:"flow-ai-obs",SCOPE_VERSION:"0.1.0"},be={ANTHROPIC_BASE_URL:process.env.FLOW_LLM_PROXY_URL||`${O}/flow-llm-proxy/`,ANTHROPIC_MODEL:process.env.FLOW_LLM_PROXY_MODEL||"anthropic.claude-4-6-sonnet",ANTHROPIC_SMALL_FAST_MODEL:process.env.FLOW_LLM_PROXY_SMALL_MODEL||"anthropic.claude-4-6-sonnet",CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS:"1"},De={CLAUDE_CODE_ENABLE_TELEMETRY:"1",OTEL_EXPORTER_OTLP_ENDPOINT:Q.OTEL_ENDPOINT,OTEL_EXPORTER_OTLP_PROTOCOL:"http/json",OTEL_METRICS_EXPORTER:"otlp",OTEL_LOGS_EXPORTER:"otlp",OTEL_LOG_TOOL_DETAILS:"1",OTEL_LOG_USER_PROMPTS:"1"},Me={FLOW_TELEMETRY:"FLOW_TELEMETRY",FLOW_TELEMETRY_GATEWAY:"FLOW_TELEMETRY_GATEWAY_URL",LANGFUSE_BASE_URL:"LANGFUSE_BASE_URL",LANGFUSE_PUBLIC_KEY:"LANGFUSE_PUBLIC_KEY",LANGFUSE_SECRET_KEY:"LANGFUSE_SECRET_KEY",ANTHROPIC_MODEL:"ANTHROPIC_MODEL",ANTHROPIC_AUTH_TOKEN:"ANTHROPIC_AUTH_TOKEN",FLOW_OBS_DEBUG:"FLOW_TELEMETRY_DEBUG",FLOW_OBS_ALLOW_HTTP:"FLOW_TELEMETRY_ALLOW_HTTP",BUFFER_TTL_DAYS:"FLOW_TELEMETRY_BUFFER_TTL_DAYS",BUFFER_MAX_FILES:"FLOW_TELEMETRY_BUFFER_MAX_FILES"},Ye={KEYCHAIN_ENABLED:false},He={LOCK_STALE_MS:3e4,CONNECTIVITY_MAX_RETRY:3,CONNECTIVITY_RETRY_MS:2e3},qe={UserPromptSubmit:5,PreToolUse:3,PostToolUse:10,Stop:15},Be={FILE_PREFIX:"flow-obs-buffer-",DEFAULT_TTL_DAYS:4,MIN_TTL_DAYS:1,MAX_TTL_DAYS:30,DEFAULT_MAX_FILES:50,MIN_MAX_FILES:1,MAX_MAX_FILES:500,REPLAY_BATCH_SIZE:10},We="flow-ai-obs-debug.log",$e={TOOL_INPUT:2e4,TOOL_OUTPUT:2e4,TRACE_OUTPUT:2e4,USER_INSTRUCTION:1e4,TRACE_INPUT:5e4,TOOL_BRIEF:60},Ge="flow-obs-";ee.exports={FLOW_BASE_URL:O,FLOW_URLS:Q,VAULT:Fe,CONFIG_DIR_NAME:Ue,CONFIG_FILE_NAME:Pe,OTLP:ke,LLM_PROXY:be,NATIVE_OTEL:De,ENV:Me,FEATURES:Ye,INSTALLER:He,HOOK_TIMEOUTS:qe,BUFFER:Be,DEBUG_LOG_FILENAME:We,STATE_FILE_PREFIX:Ge,TRACE_LIMITS:$e};});var re=T((an,ne)=>{var g=a("fs"),L=a("path"),xe=a("os"),{CONFIG_DIR_NAME:U,CONFIG_FILE_NAME:P}=d(),k={credentials:"credentials","token-cache":"tokenCache"};function w(){let e=xe.homedir();if(process.platform==="darwin")return L.join(e,"Library","Preferences",U,P);if(process.platform==="win32"){let n=process.env.APPDATA||L.join(e,"AppData","Roaming");return L.join(n,U,P)}let t=process.env.XDG_CONFIG_HOME||L.join(e,".config");return L.join(t,U,P)}function b(){try{let e=g.readFileSync(w(),"utf8");return JSON.parse(e)}catch{return {}}}function te(e){let t=w();g.mkdirSync(L.dirname(t),{recursive:true}),g.writeFileSync(t,JSON.stringify(e,null,2),{encoding:"utf8",mode:384});}var C=class{static isAvailable(){return true}static hasExistingData(){try{if(!g.existsSync(w()))return !1;let t=JSON.parse(g.readFileSync(w(),"utf8"));return !!(t&&t.credentials)}catch{return false}}async getSecret(t,n){let r=b(),s=k[n]||n,o=r[s];return o?typeof o=="string"?o:JSON.stringify(o):null}async setSecret(t,n,r){let s=b(),o=k[n]||n;if(n==="token-cache")try{s[o]=JSON.parse(r);}catch{s[o]=r;}else s[o]=r;te(s);}async deleteSecret(t,n){let r=b(),s=k[n]||n;return s in r?(delete r[s],te(r),true):false}getStoragePath(){return `config.json (unencrypted) \u2014 ${w()}`}};function Ke(){}var Ve=C;ne.exports={JsonFallbackProvider:C,ScryptFallbackProvider:Ve,_resetWarningState:Ke};});var oe=T((cn,se)=>{var{execFile:Xe}=a("child_process"),{promisify:je}=a("util"),{accessSync:Je,constants:ze}=a("fs"),D=je(Xe),M=class{static async isAvailable(){try{return Je("/usr/bin/security",ze.X_OK),!0}catch{return false}}async getSecret(t,n){try{let{stdout:r}=await D("security",["find-generic-password","-w","-a",n,"-s",t]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await D("security",["add-generic-password","-U","-a",n,"-s",t,"-w",r]);}async deleteSecret(t,n){try{return await D("security",["delete-generic-password","-a",n,"-s",t]),!0}catch{return false}}getStoragePath(){return "macOS Keychain"}};se.exports={MacOsKeyVaultProvider:M};});var ie=T((ln,ce)=>{var{execFile:Ze,spawn:Qe}=a("child_process"),{promisify:et}=a("util"),{accessSync:tt,constants:nt}=a("fs"),ae=et(Ze),Y=class{static async isAvailable(){let t=["/usr/bin/secret-tool","/bin/secret-tool","/usr/local/bin/secret-tool"];for(let n of t)try{return tt(n,nt.X_OK),!0}catch{}return false}async getSecret(t,n){try{let{stdout:r}=await ae("secret-tool",["lookup","service",t,"account",n]);return r.trim()||null}catch{return null}}async setSecret(t,n,r){await new Promise((s,o)=>{let c=Qe("secret-tool",["store","--label",t,"service",t,"account",n]);c.on("error",o),c.on("close",E=>{E===0?s():o(new Error(`secret-tool exited with code ${E}`));}),c.stdin.write(r),c.stdin.end();});}async deleteSecret(t,n){try{return await ae("secret-tool",["clear","service",t,"account",n]),!0}catch{return false}}getStoragePath(){return "Linux Secret Service (libsecret)"}};ce.exports={LinuxKeyVaultProvider:Y};});var ue=T((un,le)=>{var H=class{static async isAvailable(){try{return await a("keytar").getPassword("__flow_probe__","__flow_probe__"),!0}catch{return false}}async getSecret(t,n){return a("keytar").getPassword(t,n)}async setSecret(t,n,r){await a("keytar").setPassword(t,n,r);}async deleteSecret(t,n){return a("keytar").deletePassword(t,n)}getStoragePath(){return "Windows Credential Manager"}};le.exports={WindowsKeyVaultProvider:H};});var Te=T((En,_e)=>{async function Ee(){let{JsonFallbackProvider:e}=re();return await rt()??new e}async function rt(){switch(process.platform){case "darwin":{let{MacOsKeyVaultProvider:e}=oe();return await e.isAvailable()?new e:null}case "linux":{let{LinuxKeyVaultProvider:e}=ie();return await e.isAvailable()?new e:null}case "win32":{let{WindowsKeyVaultProvider:e}=ue();return await e.isAvailable()?new e:null}default:return null}}var st=Ee;_e.exports={createSecretVaultProvider:Ee,createKeyVaultProvider:st};});var x=T((_n,de)=>{var{createSecretVaultProvider:ot}=Te(),{VAULT:B}=d(),h=B.SERVICE,W=B.ACCOUNT_CREDS,$=B.ACCOUNT_TOKEN,q=null;function y(){return q||(q=ot()),q}async function fe(){let t=await(await y()).getSecret(h,W);if(!t)return null;try{return JSON.parse(t)}catch{return null}}async function at(e){if(!e.clientId||!e.clientSecret||!e.tenant)throw new Error("clientId, clientSecret and tenant are required");await(await y()).setSecret(h,W,JSON.stringify(e));}async function ct(){let e=await y();await e.deleteSecret(h,W),await e.deleteSecret(h,$);}async function it(e){await(await y()).setSecret(h,$,JSON.stringify({accessToken:e.accessToken,expiresAt:e.expiresAt}));}async function G(){let t=await(await y()).getSecret(h,$);if(!t)return null;try{let n=JSON.parse(t);return {accessToken:n.accessToken,expiresAt:n.expiresAt}}catch{return null}}async function lt(){let e=await G();return e?new Date(e.expiresAt)>new Date:false}async function ut(){let e=await G();if(!e||!e.accessToken)return null;try{let t=e.accessToken.split(".");if(t.length<2)return null;let n=JSON.parse(Buffer.from(t[1].replace(/-/g,"+").replace(/_/g,"/"),"base64").toString("utf8"));return n.email||n.preferred_username||n.upn||n.sub||null}catch{return null}}async function Et(){let e=await y();if(typeof e.getStoragePath=="function")return e.getStoragePath();let t=process.platform;return t==="darwin"?"macOS Keychain":t==="win32"?"Windows Credential Manager":"Linux Secret Service (libsecret)"}async function _t(){let e=await fe();return !!(e&&e.clientId&&e.clientSecret&&e.tenant)}de.exports={getFlowCredentials:fe,saveFlowCredentials:at,clearFlowCredentials:ct,saveTokenCache:it,getTokenCache:G,isTokenValid:lt,getEmailFromToken:ut,getConfigPath:Et,hasCredentials:_t};});var K=T((Tn,Se)=>{var Tt=a("https"),ft=a("http"),{FLOW_URLS:dt}=d(),pt=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/;function St(e){if(!pt.test(e))throw new Error(`Invalid tenant value: "${e}". Tenant must be lowercase alphanumeric and hyphens (1-64 chars).`)}var pe={INVALID_CLIENT_SECRET:"Invalid Client Secret \u2014 check the value and try again",INVALID_CLIENT_ID:"Invalid Client ID \u2014 check the value and try again",INVALID_TENANT:"Invalid Tenant \u2014 check the value and try again",TENANT_NOT_FOUND:"Tenant not found \u2014 verify the tenant identifier"};function At(e,t){try{let n=JSON.parse(t);if(typeof n.error=="string"&&pe[n.error])return new Error(pe[n.error])}catch{}return e===401||e===403||e===500?new Error("Invalid credentials"):e>=400&&e<500?new Error("Authentication request was rejected"):new Error("Authentication service unavailable, please try again later")}function Ot(e){return new Promise((t,n)=>{try{St(e.tenant);}catch(l){return n(l)}let r=JSON.stringify({clientSecret:e.clientSecret}),s=new URL(dt.AUTH_ENGINE),o=s.protocol==="https:",c={hostname:s.hostname,port:s.port||(o?443:80),path:s.pathname+s.search,method:"POST",headers:{"Content-Type":"application/json","Content-Length":Buffer.byteLength(r),FlowTenant:e.tenant}},_=(o?Tt:ft).request(c,l=>{let I=[];l.on("data",A=>I.push(A)),l.on("end",()=>{let A=I.join("");if(l.statusCode>=400)return n(At(l.statusCode,A));let u;try{u=JSON.parse(A);}catch{return n(new Error("Invalid response from auth engine"))}let p=u.expires_at??new Date(Date.now()+(u.expires_in??3600)*1e3).toISOString();t({accessToken:u.access_token,expiresAt:p});});});_.on("error",l=>n(new Error(`Network error: ${l.message}`))),_.write(r),_.end();})}Se.exports={getToken:Ot};});var ye=T((fn,he)=>{var i=a("fs"),R=a("path"),Ae=a("os"),{FLOW_URLS:Lt,INSTALLER:N,HOOK_TIMEOUTS:ht,NATIVE_OTEL:yt,LLM_PROXY:wt}=d(),{getToken:gt}=K();function X(){return process.platform==="win32"?R.join(process.env.APPDATA||R.join(Ae.homedir(),"AppData","Roaming"),"Claude","settings.json"):R.join(Ae.homedir(),".claude","settings.json")}var Nt=N.LOCK_STALE_MS;function Oe(e){try{let t=i.statSync(e);Date.now()-t.mtimeMs>Nt&&i.unlinkSync(e);}catch{}try{i.writeFileSync(e,String(process.pid),{flag:"wx"});}catch(t){throw t.code==="EEXIST"?new Error("Another install is already in progress. If this is stale, remove: "+e):t}}function Le(e){try{i.unlinkSync(e);}catch{}}function Rt(e,t){let r=(Array.isArray(e)?e:[]).map(s=>{if(!Array.isArray(s?.hooks))return null;let o=s.hooks.filter(c=>!c.command?.startsWith?.("flow-ai-obs "));return o.length>0?{...s,hooks:o}:null}).filter(s=>s!=null);return [t,...r]}function It(){let e=X(),t=e+".lock";i.mkdirSync(R.dirname(e),{recursive:true});let n=[];Oe(t);try{if(i.existsSync(e)){i.copyFileSync(e,e+".bkp");try{i.chmodSync(e+".bkp",384);}catch{}}let r={};try{r=JSON.parse(i.readFileSync(e,"utf8"));}catch{}(!r.env||typeof r.env!="object")&&(r.env={}),Object.assign(r.env,yt),Object.assign(r.env,wt),r.otelHeadersHelper="flow-ai-obs otel-headers",(!r.hooks||typeof r.hooks!="object"||Array.isArray(r.hooks))&&(r.hooks={});let s=(c,E)=>({matcher:"",hooks:[{type:"command",command:`flow-ai-obs ${c}`,timeout:E}]}),o=["UserPromptSubmit","PreToolUse","PostToolUse","Stop"];for(let c of o){let E=Rt(r.hooks[c],s(c,ht[c]));E.length>1&&n.push(c),r.hooks[c]=E;}i.writeFileSync(e,JSON.stringify(r,null,2)+`
|
|
3
|
+
`,{encoding:"utf8",mode:384});try{i.chmodSync(e,384);}catch{}}finally{Le(t);}return {settingsPath:e,preserved:n}}async function Ct(e){let t;try{t=(await gt(e)).accessToken;}catch{return false}return t?new Promise(n=>{V(`Bearer ${t}`,n,1);}):false}function V(e,t,n){let r=new URL(Lt.GATEWAY_TRACES),s=JSON.stringify({resourceSpans:[],validation_run:true}),o=r.protocol==="https:",c={hostname:r.hostname,port:r.port||(o?443:80),path:r.pathname,method:"POST",headers:{"Content-Type":"application/json",Authorization:e,"Content-Length":Buffer.byteLength(s)}},_=(o?a("https"):a("http")).request(c,l=>{l.resume(),l.statusCode===200||l.statusCode===204?t(true):n<N.CONNECTIVITY_MAX_RETRY?setTimeout(()=>V(e,t,n+1),N.CONNECTIVITY_RETRY_MS):t(false);});_.on("error",()=>{n<N.CONNECTIVITY_MAX_RETRY?setTimeout(()=>V(e,t,n+1),N.CONNECTIVITY_RETRY_MS):t(false);}),_.write(s),_.end();}function vt(e){let t=X(),n=t+".lock";i.mkdirSync(R.dirname(t),{recursive:true}),Oe(n);try{let r={};try{r=JSON.parse(i.readFileSync(t,"utf8"));}catch{}(!r.env||typeof r.env!="object")&&(r.env={}),Object.assign(r.env,e),i.writeFileSync(t,JSON.stringify(r,null,2)+`
|
|
4
|
+
`,{encoding:"utf8",mode:384});try{i.chmodSync(t,384);}catch{}}finally{Le(n);}}he.exports={getClaudeSettingsPath:X,writeClaudeSettings:It,addEnvToClaudeSettings:vt,validateConnectivity:Ct};});var Ne=T((dn,ge)=>{var{writeFileSync:mt}=a("fs"),{tmpdir:Ft}=a("os"),{join:Ut}=a("path"),{DEBUG_LOG_FILENAME:Pt,ENV:kt}=d(),we=Ut(Ft(),Pt);function bt(...e){if(process.env[kt.FLOW_OBS_DEBUG]!=="1")return;let t=`[${new Date().toISOString()}] ${e.join(" ")}
|
|
5
|
+
`;try{mt(we,t,{flag:"a"});}catch(n){process.stderr.write(`[flow-obs debug ERROR] ${n.message}
|
|
6
|
+
`);}}ge.exports={dbg:bt,DEBUG_LOG:we};});var Ce=T((pn,Ie)=>{var{getFlowCredentials:j,isTokenValid:Dt,getEmailFromToken:v,getTokenCache:Mt,saveTokenCache:Yt}=x(),{getToken:Ht}=K(),{FLOW_BASE_URL:qt,ENV:f,FEATURES:J}=d(),{dbg:S}=Ne(),Bt=[/^localhost\.?$/i,/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^0\.0\.0\.0$/,/^::1$/,/^\[::1\]$/,/^\[::ffff:/i,/^\[f[cd]/i,/^\[fe80:/i,/^metadata\.google\.internal\.?$/i,/^metadata\.azure\.internal\.?$/i,/(?:^|\.)localtest\.me\.?$/i,/(?:^|\.)lvh\.me\.?$/i,/(?:^|\.)vcap\.me\.?$/i];function Wt(e){return Bt.some(t=>t.test(e))}function $t(e){if(!e)return null;try{let t=e.split(".");if(t.length<2)return null;let n=JSON.parse(Buffer.from(t[1].replace(/-/g,"+").replace(/_/g,"/"),"base64").toString("utf8"));return n.email||n.preferred_username||n.upn||n.sub||null}catch{return null}}function Z(e){if(!e)return null;try{let t=e.split(".");if(t.length<2)return null;let n=JSON.parse(Buffer.from(t[1].replace(/-/g,"+").replace(/_/g,"/"),"base64").toString("utf8")),{clientId:r,clientSecret:s,tenant:o}=n;return !r||!s||!o?null:{clientId:r,clientSecret:s,tenant:o}}catch{return null}}function Gt(e){let t=Buffer.from(JSON.stringify({alg:"none",typ:"JWT"})).toString("base64url"),n=Buffer.from(JSON.stringify({clientId:e.clientId,clientSecret:e.clientSecret,tenant:e.tenant})).toString("base64url");return `${t}.${n}.`}function z(e){let t;try{t=new URL(e);}catch{throw new Error(`Invalid URL: ${e}`)}let n=process.env[f.FLOW_OBS_ALLOW_HTTP]==="true";if(!n&&t.protocol!=="https:")throw new Error(`URL must use HTTPS: ${e}`);if(t.username||t.password)throw new Error(`URL must not contain embedded credentials: ${e}`);if(!n&&Wt(t.hostname))throw new Error(`SSRF: private/loopback host not allowed: ${t.hostname}`);return e}async function xt(){let e=Z(process.env[f.ANTHROPIC_AUTH_TOKEN]);if(e)return {user:await v().catch(()=>null)||e.clientId,tenant:e.tenant};if(J.KEYCHAIN_ENABLED)try{let t=await j();if(!t)return {user:"",tenant:""};let n=await v()||t.clientId||"",r=t.tenant||"";return {user:n,tenant:r}}catch{return {user:"",tenant:""}}return {user:"",tenant:""}}async function Kt(e){if(await Dt())return (await Mt()).accessToken;S("getOrRefreshToken","token expired \u2014 refreshing via auth-engine");let t=await Ht(e);try{await Yt(t);}catch(n){S("getOrRefreshToken",`token cache save failed (non-fatal): ${n.message}`);}return S("getOrRefreshToken",`token refreshed, expires=${t.expiresAt}`),t.accessToken}function Vt(e,t){let n=t&&t.accessToken?t.accessToken:"";return {endpoint:e.replace(/\/$/,"")+"/flow-langfuse-gateway/v1/traces",authHeader:`Bearer ${n}`}}function Xt(e,t,n){let r=Buffer.from(`${t}:${n}`).toString("base64");return {endpoint:e.replace(/\/$/,"")+"/api/public/otel/v1/traces",authHeader:`Basic ${r}`}}async function Re(){let e=[],t=process.env[f.ANTHROPIC_MODEL]||"",n=Z(process.env[f.ANTHROPIC_AUTH_TOKEN]);S("resolveCredentials",n?"credentials resolved from ANTHROPIC_AUTH_TOKEN":"ANTHROPIC_AUTH_TOKEN absent or invalid"),!n&&J.KEYCHAIN_ENABLED&&(n=await j(),n&&S("resolveCredentials","credentials resolved from keychain (FEATURES.KEYCHAIN_ENABLED=true)"));let r=n?n.tenant:"",s=process.env[f.FLOW_TELEMETRY]==="true",o=process.env[f.LANGFUSE_BASE_URL],c=process.env[f.LANGFUSE_PUBLIC_KEY],E=process.env[f.LANGFUSE_SECRET_KEY];if(s&&o&&c&&E){let u="",p=r;if(n)u=await v().catch(()=>null)||n.clientId;else if(J.KEYCHAIN_ENABLED)try{let F=await j();F&&(u=await v()||F.clientId,p=F.tenant);}catch{}let m={user:u||"",tenant:p||"",team:"",project:"",model:t};e.push({mode:"direct",...Xt(z(o),c,E),...m}),S("resolveCredentials","direct mode active",`user=${m.user}`,`tenant=${m.tenant}`);}if(!n){if(e.length===0){let u=[];return u.authError=false,u}return e}let _=null;try{_=await Kt(n);}catch(u){if(S("resolveCredentials",`token refresh failed: ${u.message}`),e.length>0)return e;let p=[];return p.authError=true,p}let I={user:$t(_)||n.clientId,tenant:r,team:"",project:"",model:t},A=process.env[f.FLOW_TELEMETRY_GATEWAY]||qt;return e.push({mode:"gateway",...Vt(z(A),{accessToken:_}),...I}),e}async function jt(){return (await Re()).length>0}Ie.exports={credentialsAvailable:jt,getIdentityFromToken:xt,resolveCredentials:Re,validateUrl:z,parseCredsFromAnthropicToken:Z,buildAnthropicAuthToken:Gt};});var me=a("path"),{getFlowCredentials:Jt}=x(),{writeClaudeSettings:zt,addEnvToClaudeSettings:Zt}=ye(),{buildAnthropicAuthToken:Qt,parseCredsFromAnthropicToken:en}=Ce(),{ENV:ve}=d(),tn=me.resolve(__dirname,".."),nn=process.env.INIT_CWD?me.resolve(process.env.INIT_CWD):null;nn===tn&&process.exit(0);async function rn(){try{zt();}catch{}let e=await Jt();if(!e){process.stderr.write(`
|
|
7
7
|
[flow-ai-obs] No credentials found.
|
|
8
8
|
Run \`flow-ai-obs auth login\` to authenticate and enable telemetry.
|
|
9
9
|
|
|
10
|
-
`);return}let t=
|
|
10
|
+
`);return}let t=en(process.env[ve.ANTHROPIC_AUTH_TOKEN]);if(!t||t.clientId!==e.clientId||t.clientSecret!==e.clientSecret||t.tenant!==e.tenant)try{let r=Qt(e);Zt({[ve.ANTHROPIC_AUTH_TOKEN]:r});}catch{}}rn().catch(()=>{});
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@ciandt-flow/flow-ai-obs",
|
|
3
|
-
"version": "0.4.1
|
|
3
|
+
"version": "0.4.1",
|
|
4
4
|
"description": "Claude Code hooks for Langfuse OTLP tracing — cross-platform",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"bin": {
|
|
@@ -63,4 +63,4 @@
|
|
|
63
63
|
"type": "git",
|
|
64
64
|
"url": "git+https://github.com/CI-T-HyperX/flow-codeassistant-observability.git"
|
|
65
65
|
}
|
|
66
|
-
}
|
|
66
|
+
}
|