@geminixiang/mikan 1.0.0-beta.7 → 1.0.0-beta.71

package/dist/observability/otel.js

@@ -0,0 +1,183 @@
+import { metrics } from "@opentelemetry/api";
+import { OTLPMetricExporter } from "@opentelemetry/exporter-metrics-otlp-proto";
+import { OTLPTraceExporter } from "@opentelemetry/exporter-trace-otlp-proto";
+import { resourceFromAttributes } from "@opentelemetry/resources";
+import { MeterProvider, PeriodicExportingMetricReader } from "@opentelemetry/sdk-metrics";
+import { BatchSpanProcessor, NodeTracerProvider } from "@opentelemetry/sdk-trace-node";
+import { SentryContextManager } from "@sentry/node";
+import { SentryPropagator } from "@sentry/opentelemetry";
+import { readStandardEnv } from "../env-manifest.js";
+import { sanitizeTelemetryString } from "./sentry.js";
+const SAFE_RESOURCE_KEYS = new Set([
+    "deployment.environment.name",
+    "openinference.project.name",
+    "service.namespace",
+    "service.version",
+]);
+let tracerProvider;
+let meterProvider;
+let metricsEnabled = false;
+export function resolveOpenTelemetryConfiguration(env = currentOpenTelemetryEnvironment()) {
+    if (env.OTEL_SDK_DISABLED?.toLowerCase() === "true")
+        return { traces: false, metrics: false };
+    return {
+        traces: protocolSupported(env.OTEL_EXPORTER_OTLP_TRACES_PROTOCOL ?? env.OTEL_EXPORTER_OTLP_PROTOCOL) &&
+            exporterEnabled(env.OTEL_TRACES_EXPORTER) &&
+            effectiveEndpointIsValid(env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT, env.OTEL_EXPORTER_OTLP_ENDPOINT),
+        metrics: protocolSupported(env.OTEL_EXPORTER_OTLP_METRICS_PROTOCOL ?? env.OTEL_EXPORTER_OTLP_PROTOCOL) &&
+            exporterEnabled(env.OTEL_METRICS_EXPORTER) &&
+            effectiveEndpointIsValid(env.OTEL_EXPORTER_OTLP_METRICS_ENDPOINT, env.OTEL_EXPORTER_OTLP_ENDPOINT),
+    };
+}
+export function initializeOpenTelemetry() {
+    const env = currentOpenTelemetryEnvironment();
+    const configuration = resolveOpenTelemetryConfiguration(env);
+    metricsEnabled = configuration.metrics;
+    if (!configuration.traces && !configuration.metrics)
+        return false;
+    const resource = resourceFromAttributes(resolveOpenTelemetryResourceAttributes(env));
+    if (configuration.metrics) {
+        meterProvider = new MeterProvider({
+            resource,
+            readers: [
+                new PeriodicExportingMetricReader({
+                    exporter: new OTLPMetricExporter(),
+                    exportIntervalMillis: positiveInteger(env.OTEL_METRIC_EXPORT_INTERVAL),
+                    exportTimeoutMillis: positiveInteger(env.OTEL_METRIC_EXPORT_TIMEOUT),
+                }),
+            ],
+        });
+        metrics.setGlobalMeterProvider(meterProvider);
+    }
+    if (configuration.traces) {
+        tracerProvider = new NodeTracerProvider({
+            resource,
+            spanProcessors: [new BatchSpanProcessor(new OTLPTraceExporter())],
+        });
+        tracerProvider.register({
+            contextManager: new SentryContextManager(),
+            propagator: new SentryPropagator(),
+        });
+    }
+    return true;
+}
+export function isOpenTelemetryMetricsEnabled() {
+    return metricsEnabled;
+}
+export async function shutdownOpenTelemetry() {
+    const providers = [tracerProvider, meterProvider].filter((provider) => provider !== undefined);
+    const flushResults = await Promise.allSettled(providers.map((provider) => provider.forceFlush()));
+    const shutdownResults = await Promise.allSettled(providers.map((provider) => provider.shutdown()));
+    tracerProvider = undefined;
+    meterProvider = undefined;
+    metricsEnabled = false;
+    const failures = [...flushResults, ...shutdownResults].flatMap((result) => result.status === "rejected" ? [result.reason] : []);
+    if (failures.length > 0) {
+        throw new AggregateError(failures, "OpenTelemetry shutdown failed");
+    }
+}
+function exporterEnabled(value) {
+    if (!value)
+        return true;
+    return value
+        .split(",")
+        .map((entry) => entry.trim().toLowerCase())
+        .includes("otlp");
+}
+function protocolSupported(value) {
+    return !value || value.trim().toLowerCase() === "http/protobuf";
+}
+function effectiveEndpointIsValid(signalEndpoint, baseEndpoint) {
+    return validEndpoint(signalEndpoint ?? baseEndpoint);
+}
+function validEndpoint(value) {
+    if (!value)
+        return false;
+    try {
+        const endpoint = new URL(value);
+        return ((endpoint.protocol === "http:" || endpoint.protocol === "https:") &&
+            endpoint.username === "" &&
+            endpoint.password === "");
+    }
+    catch {
+        return false;
+    }
+}
+export function resolveOpenTelemetryResourceAttributes(env = currentOpenTelemetryEnvironment()) {
+    const serviceName = safeResourceValue(env.OTEL_SERVICE_NAME) ?? "mikan";
+    const attributes = { "service.name": serviceName };
+    const parsed = parseResourceAttributes(env.OTEL_RESOURCE_ATTRIBUTES);
+    if (!parsed)
+        return attributes;
+    for (const [key, value] of Object.entries(parsed)) {
+        if (!SAFE_RESOURCE_KEYS.has(key))
+            continue;
+        const safeValue = safeResourceValue(value);
+        if (safeValue !== undefined)
+            attributes[key] = safeValue;
+    }
+    return attributes;
+}
+/** Parse OTEL_RESOURCE_ATTRIBUTES using the specification's percent-encoding rules. */
+function parseResourceAttributes(value) {
+    if (!value)
+        return {};
+    const attributes = {};
+    try {
+        for (const rawEntry of value.split(",").filter((entry) => entry.trim() !== "")) {
+            const parts = rawEntry.split("=");
+            if (parts.length !== 2)
+                return undefined;
+            const rawKey = parts[0]?.trim();
+            const rawValue = parts[1]?.trim();
+            if (!rawKey || rawValue === undefined)
+                return undefined;
+            const key = decodeURIComponent(rawKey);
+            const decodedValue = decodeURIComponent(rawValue);
+            if (key.length > 255 || decodedValue.length > 255)
+                return undefined;
+            attributes[key] = decodedValue;
+        }
+    }
+    catch {
+        return undefined;
+    }
+    return attributes;
+}
+function safeResourceValue(value) {
+    const trimmed = value?.trim();
+    if (!trimmed || trimmed.length > 128)
+        return undefined;
+    if ([...trimmed].some((character) => {
+        const code = character.charCodeAt(0);
+        return code <= 31 || code === 127;
+    })) {
+        return undefined;
+    }
+    return sanitizeTelemetryString(trimmed) === trimmed ? trimmed : undefined;
+}
+function currentOpenTelemetryEnvironment() {
+    const names = [
+        "OTEL_SDK_DISABLED",
+        "OTEL_SERVICE_NAME",
+        "OTEL_RESOURCE_ATTRIBUTES",
+        "OTEL_TRACES_EXPORTER",
+        "OTEL_METRICS_EXPORTER",
+        "OTEL_EXPORTER_OTLP_ENDPOINT",
+        "OTEL_EXPORTER_OTLP_TRACES_ENDPOINT",
+        "OTEL_EXPORTER_OTLP_METRICS_ENDPOINT",
+        "OTEL_EXPORTER_OTLP_PROTOCOL",
+        "OTEL_EXPORTER_OTLP_TRACES_PROTOCOL",
+        "OTEL_EXPORTER_OTLP_METRICS_PROTOCOL",
+        "OTEL_METRIC_EXPORT_INTERVAL",
+        "OTEL_METRIC_EXPORT_TIMEOUT",
+    ];
+    return Object.fromEntries(names.map((name) => [name, readStandardEnv(name)]));
+}
+function positiveInteger(value) {
+    if (!value)
+        return undefined;
+    const parsed = Number(value);
+    return Number.isInteger(parsed) && parsed > 0 ? parsed : undefined;
+}
+//# sourceMappingURL=otel.js.map

package/dist/observability/otel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otel.js","sourceRoot":"","sources":["../../src/observability/otel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAC1F,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACvF,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,6BAA6B;IAC7B,4BAA4B;IAC5B,mBAAmB;IACnB,iBAAiB;CAClB,CAAC,CAAC;AAEH,IAAI,cAA8C,CAAC;AACnD,IAAI,aAAwC,CAAC;AAC7C,IAAI,cAAc,GAAG,KAAK,CAAC;AAO3B,MAAM,UAAU,iCAAiC,CAC/C,GAAG,GAAsB,+BAA+B,EAAE;IAE1D,IAAI,GAAG,CAAC,iBAAiB,EAAE,WAAW,EAAE,KAAK,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE9F,OAAO;QACL,MAAM,EACJ,iBAAiB,CACf,GAAG,CAAC,kCAAkC,IAAI,GAAG,CAAC,2BAA2B,CAC1E;YACD,eAAe,CAAC,GAAG,CAAC,oBAAoB,CAAC;YACzC,wBAAwB,CACtB,GAAG,CAAC,kCAAkC,EACtC,GAAG,CAAC,2BAA2B,CAChC;QACH,OAAO,EACL,iBAAiB,CACf,GAAG,CAAC,mCAAmC,IAAI,GAAG,CAAC,2BAA2B,CAC3E;YACD,eAAe,CAAC,GAAG,CAAC,qBAAqB,CAAC;YAC1C,wBAAwB,CACtB,GAAG,CAAC,mCAAmC,EACvC,GAAG,CAAC,2BAA2B,CAChC;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,MAAM,GAAG,GAAG,+BAA+B,EAAE,CAAC;IAC9C,MAAM,aAAa,GAAG,iCAAiC,CAAC,GAAG,CAAC,CAAC;IAC7D,cAAc,GAAG,aAAa,CAAC,OAAO,CAAC;IACvC,IAAI,CAAC,aAAa,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAElE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,sCAAsC,CAAC,GAAG,CAAC,CAAC,CAAC;IAErF,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAC1B,aAAa,GAAG,IAAI,aAAa,CAAC;YAChC,QAAQ;YACR,OAAO,EAAE;gBACP,IAAI,6BAA6B,CAAC;oBAChC,QAAQ,EAAE,IAAI,kBAAkB,EAAE;oBAClC,oBAAoB,EAAE,eAAe,CAAC,GAAG,CAAC,2BAA2B,CAAC;oBACtE,mBAAmB,EAAE,eAAe,CAAC,GAAG,CAAC,0BAA0B,CAAC;iBACrE,CAAC;aACH;SACF,CAAC,CAAC;QACH,OAAO,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;QACzB,cAAc,GAAG,IAAI,kBAAkB,CAAC;YACtC,QAAQ;YACR,cAAc,EAAE,CAAC,IAAI,kBAAkB,CAAC,IAAI,iBAAiB,EAAE,CAAC,CAAC;SAClE,CAAC,CAAC;QACH,cAAc,CAAC,QAAQ,CAAC;YACtB,cAAc,EAAE,IAAI,oBAAoB,EAAE;YAC1C,UAAU,EAAE,IAAI,gBAAgB,EAAE;SACnC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,6BAA6B;IAC3C,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,SAAS,GAAG,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,MAAM,CACtD,CAAC,QAAQ,EAAkD,EAAE,CAAC,QAAQ,KAAK,SAAS,CACrF,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAClG,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,UAAU,CAC9C,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CACjD,CAAC;IACF,cAAc,GAAG,SAAS,CAAC;IAC3B,aAAa,GAAG,SAAS,CAAC;IAC1B,cAAc,GAAG,KAAK,CAAC;IAEvB,MAAM,QAAQ,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxE,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CACpD,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,+BAA+B,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAChD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAC1C,QAAQ,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAyB;IAClD,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC;AAClE,CAAC;AAED,SAAS,wBAAwB,CAC/B,cAAkC,EAClC,YAAgC;IAEhC,OAAO,aAAa,CAAC,cAAc,IAAI,YAAY,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB;IAC9C,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,CACL,CAAC,QAAQ,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC;YACjE,QAAQ,CAAC,QAAQ,KAAK,EAAE;YACxB,QAAQ,CAAC,QAAQ,KAAK,EAAE,CACzB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sCAAsC,CACpD,GAAG,GAAsB,+BAA+B,EAAE;IAE1D,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC;IACxE,MAAM,UAAU,GAA2B,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC;IAC3E,MAAM,MAAM,GAAG,uBAAuB,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACrE,IAAI,CAAC,MAAM;QAAE,OAAO,UAAU,CAAC;IAE/B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC3C,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,SAAS,KAAK,SAAS;YAAE,UAAU,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;IAC3D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,uFAAuF;AACvF,SAAS,uBAAuB,CAAC,KAAyB;IACxD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,IAAI,CAAC;QACH,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YAC/E,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YACzC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YACxD,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,YAAY,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YAClD,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,MAAM,GAAG,GAAG;gBAAE,OAAO,SAAS,CAAC;YACpE,UAAU,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;QACjC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAyB;IAClD,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,SAAS,CAAC;IACvD,IACE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrC,OAAO,IAAI,IAAI,EAAE,IAAI,IAAI,KAAK,GAAG,CAAC;IACpC,CAAC,CAAC,EACF,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,uBAAuB,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5E,CAAC;AAED,SAAS,+BAA+B;IACtC,MAAM,KAAK,GAAG;QACZ,mBAAmB;QACnB,mBAAmB;QACnB,0BAA0B;QAC1B,sBAAsB;QACtB,uBAAuB;QACvB,6BAA6B;QAC7B,oCAAoC;QACpC,qCAAqC;QACrC,6BAA6B;QAC7B,oCAAoC;QACpC,qCAAqC;QACrC,6BAA6B;QAC7B,4BAA4B;KACpB,CAAC;IACX,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAChD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC","sourcesContent":["import { metrics } from \"@opentelemetry/api\";\nimport { OTLPMetricExporter } from \"@opentelemetry/exporter-metrics-otlp-proto\";\nimport { OTLPTraceExporter } from \"@opentelemetry/exporter-trace-otlp-proto\";\nimport { resourceFromAttributes } from \"@opentelemetry/resources\";\nimport { MeterProvider, PeriodicExportingMetricReader } from \"@opentelemetry/sdk-metrics\";\nimport { BatchSpanProcessor, NodeTracerProvider } from \"@opentelemetry/sdk-trace-node\";\nimport { SentryContextManager } from \"@sentry/node\";\nimport { SentryPropagator } from \"@sentry/opentelemetry\";\nimport { readStandardEnv } from \"../env-manifest.js\";\nimport { sanitizeTelemetryString } from \"./sentry.js\";\n\nconst SAFE_RESOURCE_KEYS = new Set([\n  \"deployment.environment.name\",\n  \"openinference.project.name\",\n  \"service.namespace\",\n  \"service.version\",\n]);\n\nlet tracerProvider: NodeTracerProvider | undefined;\nlet meterProvider: MeterProvider | undefined;\nlet metricsEnabled = false;\n\nexport interface OpenTelemetryConfiguration {\n  traces: boolean;\n  metrics: boolean;\n}\n\nexport function resolveOpenTelemetryConfiguration(\n  env: NodeJS.ProcessEnv = currentOpenTelemetryEnvironment(),\n): OpenTelemetryConfiguration {\n  if (env.OTEL_SDK_DISABLED?.toLowerCase() === \"true\") return { traces: false, metrics: false };\n\n  return {\n    traces:\n      protocolSupported(\n        env.OTEL_EXPORTER_OTLP_TRACES_PROTOCOL ?? env.OTEL_EXPORTER_OTLP_PROTOCOL,\n      ) &&\n      exporterEnabled(env.OTEL_TRACES_EXPORTER) &&\n      effectiveEndpointIsValid(\n        env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT,\n        env.OTEL_EXPORTER_OTLP_ENDPOINT,\n      ),\n    metrics:\n      protocolSupported(\n        env.OTEL_EXPORTER_OTLP_METRICS_PROTOCOL ?? env.OTEL_EXPORTER_OTLP_PROTOCOL,\n      ) &&\n      exporterEnabled(env.OTEL_METRICS_EXPORTER) &&\n      effectiveEndpointIsValid(\n        env.OTEL_EXPORTER_OTLP_METRICS_ENDPOINT,\n        env.OTEL_EXPORTER_OTLP_ENDPOINT,\n      ),\n  };\n}\n\nexport function initializeOpenTelemetry(): boolean {\n  const env = currentOpenTelemetryEnvironment();\n  const configuration = resolveOpenTelemetryConfiguration(env);\n  metricsEnabled = configuration.metrics;\n  if (!configuration.traces && !configuration.metrics) return false;\n\n  const resource = resourceFromAttributes(resolveOpenTelemetryResourceAttributes(env));\n\n  if (configuration.metrics) {\n    meterProvider = new MeterProvider({\n      resource,\n      readers: [\n        new PeriodicExportingMetricReader({\n          exporter: new OTLPMetricExporter(),\n          exportIntervalMillis: positiveInteger(env.OTEL_METRIC_EXPORT_INTERVAL),\n          exportTimeoutMillis: positiveInteger(env.OTEL_METRIC_EXPORT_TIMEOUT),\n        }),\n      ],\n    });\n    metrics.setGlobalMeterProvider(meterProvider);\n  }\n\n  if (configuration.traces) {\n    tracerProvider = new NodeTracerProvider({\n      resource,\n      spanProcessors: [new BatchSpanProcessor(new OTLPTraceExporter())],\n    });\n    tracerProvider.register({\n      contextManager: new SentryContextManager(),\n      propagator: new SentryPropagator(),\n    });\n  }\n\n  return true;\n}\n\nexport function isOpenTelemetryMetricsEnabled(): boolean {\n  return metricsEnabled;\n}\n\nexport async function shutdownOpenTelemetry(): Promise<void> {\n  const providers = [tracerProvider, meterProvider].filter(\n    (provider): provider is NodeTracerProvider | MeterProvider => provider !== undefined,\n  );\n  const flushResults = await Promise.allSettled(providers.map((provider) => provider.forceFlush()));\n  const shutdownResults = await Promise.allSettled(\n    providers.map((provider) => provider.shutdown()),\n  );\n  tracerProvider = undefined;\n  meterProvider = undefined;\n  metricsEnabled = false;\n\n  const failures = [...flushResults, ...shutdownResults].flatMap((result) =>\n    result.status === \"rejected\" ? [result.reason] : [],\n  );\n  if (failures.length > 0) {\n    throw new AggregateError(failures, \"OpenTelemetry shutdown failed\");\n  }\n}\n\nfunction exporterEnabled(value: string | undefined): boolean {\n  if (!value) return true;\n  return value\n    .split(\",\")\n    .map((entry) => entry.trim().toLowerCase())\n    .includes(\"otlp\");\n}\n\nfunction protocolSupported(value: string | undefined): boolean {\n  return !value || value.trim().toLowerCase() === \"http/protobuf\";\n}\n\nfunction effectiveEndpointIsValid(\n  signalEndpoint: string | undefined,\n  baseEndpoint: string | undefined,\n): boolean {\n  return validEndpoint(signalEndpoint ?? baseEndpoint);\n}\n\nfunction validEndpoint(value: string | undefined): boolean {\n  if (!value) return false;\n  try {\n    const endpoint = new URL(value);\n    return (\n      (endpoint.protocol === \"http:\" || endpoint.protocol === \"https:\") &&\n      endpoint.username === \"\" &&\n      endpoint.password === \"\"\n    );\n  } catch {\n    return false;\n  }\n}\n\nexport function resolveOpenTelemetryResourceAttributes(\n  env: NodeJS.ProcessEnv = currentOpenTelemetryEnvironment(),\n): Record<string, string> {\n  const serviceName = safeResourceValue(env.OTEL_SERVICE_NAME) ?? \"mikan\";\n  const attributes: Record<string, string> = { \"service.name\": serviceName };\n  const parsed = parseResourceAttributes(env.OTEL_RESOURCE_ATTRIBUTES);\n  if (!parsed) return attributes;\n\n  for (const [key, value] of Object.entries(parsed)) {\n    if (!SAFE_RESOURCE_KEYS.has(key)) continue;\n    const safeValue = safeResourceValue(value);\n    if (safeValue !== undefined) attributes[key] = safeValue;\n  }\n  return attributes;\n}\n\n/** Parse OTEL_RESOURCE_ATTRIBUTES using the specification's percent-encoding rules. */\nfunction parseResourceAttributes(value: string | undefined): Record<string, string> | undefined {\n  if (!value) return {};\n  const attributes: Record<string, string> = {};\n  try {\n    for (const rawEntry of value.split(\",\").filter((entry) => entry.trim() !== \"\")) {\n      const parts = rawEntry.split(\"=\");\n      if (parts.length !== 2) return undefined;\n      const rawKey = parts[0]?.trim();\n      const rawValue = parts[1]?.trim();\n      if (!rawKey || rawValue === undefined) return undefined;\n      const key = decodeURIComponent(rawKey);\n      const decodedValue = decodeURIComponent(rawValue);\n      if (key.length > 255 || decodedValue.length > 255) return undefined;\n      attributes[key] = decodedValue;\n    }\n  } catch {\n    return undefined;\n  }\n  return attributes;\n}\n\nfunction safeResourceValue(value: string | undefined): string | undefined {\n  const trimmed = value?.trim();\n  if (!trimmed || trimmed.length > 128) return undefined;\n  if (\n    [...trimmed].some((character) => {\n      const code = character.charCodeAt(0);\n      return code <= 31 || code === 127;\n    })\n  ) {\n    return undefined;\n  }\n  return sanitizeTelemetryString(trimmed) === trimmed ? trimmed : undefined;\n}\n\nfunction currentOpenTelemetryEnvironment(): NodeJS.ProcessEnv {\n  const names = [\n    \"OTEL_SDK_DISABLED\",\n    \"OTEL_SERVICE_NAME\",\n    \"OTEL_RESOURCE_ATTRIBUTES\",\n    \"OTEL_TRACES_EXPORTER\",\n    \"OTEL_METRICS_EXPORTER\",\n    \"OTEL_EXPORTER_OTLP_ENDPOINT\",\n    \"OTEL_EXPORTER_OTLP_TRACES_ENDPOINT\",\n    \"OTEL_EXPORTER_OTLP_METRICS_ENDPOINT\",\n    \"OTEL_EXPORTER_OTLP_PROTOCOL\",\n    \"OTEL_EXPORTER_OTLP_TRACES_PROTOCOL\",\n    \"OTEL_EXPORTER_OTLP_METRICS_PROTOCOL\",\n    \"OTEL_METRIC_EXPORT_INTERVAL\",\n    \"OTEL_METRIC_EXPORT_TIMEOUT\",\n  ] as const;\n  return Object.fromEntries(names.map((name) => [name, readStandardEnv(name)]));\n}\n\nfunction positiveInteger(value: string | undefined): number | undefined {\n  if (!value) return undefined;\n  const parsed = Number(value);\n  return Number.isInteger(parsed) && parsed > 0 ? parsed : undefined;\n}\n"]}

package/dist/observability/sentry.d.ts

@@ -1,30 +1,63 @@
 import type { Breadcrumb, ErrorEvent, Event, EventHint, Scope } from "@sentry/node";
-export type { ReportUserFacingErrorOptions, SentryAttributionAttributes, SentryRunScopeContext, SentrySpanPayload, SentryTransactionPayload, } from "./types.js";
-import type { ReportUserFacingErrorOptions, SentryAttributionAttributes, SentryRunScopeContext, SentrySpanPayload, SentryTransactionPayload } from "./types.js";
-export declare function createSentryInitOptions(dsn?: string): {
+import * as Sentry from "@sentry/node";
+export type { ReportUserFacingErrorOptions, SentryAttributionAttributes, SubagentOutcomeReport, SentryRunScopeContext, SentrySpanPayload, SentryTransactionPayload, } from "./types.js";
+import type { ReportUserFacingErrorOptions, SentryAttributionAttributes, SubagentOutcomeReport, SentryRunScopeContext, SentrySpanPayload, SentryTransactionPayload } from "./types.js";
+export declare function createSentryInitOptions(dsn?: string, customOpenTelemetry?: boolean): {
     dsn: string | undefined;
     environment: string;
     enabled: boolean;
     sendDefaultPii: boolean;
-    tracesSampleRate: number;
+    tracesSampleRate: number | undefined;
+    skipOpenTelemetrySetup: boolean;
+    registerEsmLoaderHooks: boolean | undefined;
     includeLocalVariables: boolean;
     enableLogs: boolean;
+    integrations(defaultIntegrations: ReturnType<typeof Sentry.getDefaultIntegrations>): import("@sentry/core").Integration[];
     beforeSend(event: ErrorEvent, hint: EventHint): ErrorEvent | null;
     beforeSendSpan(span: SentrySpanPayload): SentrySpanPayload;
     beforeSendTransaction(event: SentryTransactionPayload): SentryTransactionPayload | null;
     beforeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null;
 };
-export declare function reportUserFacingError(error: unknown, options: ReportUserFacingErrorOptions): string | undefined;
+export declare function captureSentryError(error: unknown, options: ReportUserFacingErrorOptions): string | undefined;
+export declare function closeSentry(timeoutMs: number): Promise<boolean>;
+export declare function recordSentryCounter(name: string, value: number, attributes: SentryAttributionAttributes): void;
+export declare function recordSentryDistribution(name: string, value: number, options: {
+    unit?: string;
+    attributes: SentryAttributionAttributes;
+}): void;
+export declare function recordSentryGauge(name: string, value: number, options: {
+    unit?: string;
+    attributes: SentryAttributionAttributes;
+}): void;
+export declare function addSentryBreadcrumb(message: string, data?: Record<string, unknown>, options?: {
+    category?: string;
+    level?: "info" | "warning";
+    log?: boolean;
+}): void;
+export declare function withSentryRunScope<T>(context: SentryRunScopeContext, body: () => T): T;
 export declare function createRunAttributionAttributes(context: SentryRunScopeContext): SentryAttributionAttributes;
 export declare function registerTraceAttribution(span: {
     setAttributes(attributes: SentryAttributionAttributes): unknown;
 }, attributes: SentryAttributionAttributes): void;
-export declare function updateActiveSpanAttribution(attributes: SentryAttributionAttributes): void;
 export declare function applyRunScope(scope: Scope, context: SentryRunScopeContext): void;
 export declare function metricAttributes(attributes: Record<string, string | number | boolean | undefined>): Record<string, string | number | boolean>;
-export declare function addLifecycleBreadcrumb(message: string, data?: Record<string, string | number | boolean | undefined>): void;
 export declare function sanitizeEvent<T extends Event>(event: T, _hint?: EventHint): T | null;
 export declare function applySpanAttribution<T extends SentrySpanPayload>(span: T): T;
 export declare function sanitizeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null;
 export declare function sanitizeValue(value: unknown, key?: string, depth?: number): unknown;
+export declare function sanitizeTelemetryString(value: string): string;
+/**
+ * Record one subagent outcome: a run counter and duration for every status,
+ * a lifecycle breadcrumb, and a Sentry error only for statuses in
+ * `UNEXPECTED_SUBAGENT_STATUSES`. Fingerprinted on the error's prefix before
+ * the first colon so one failure class is one issue regardless of which
+ * tool, file, or model message follows it.
+ */
+export declare function recordSubagentOutcome(report: SubagentOutcomeReport): string | undefined;
+/**
+ * A subagent that never started: unknown profile, ungranted tool, or a
+ * harness rejection. The throw still reaches the parent model as a tool
+ * error; this only makes sure it also reaches Sentry.
+ */
+export declare function reportSubagentLaunchError(error: unknown, report: Pick<SubagentOutcomeReport, "itemId" | "mode" | "profile">): string | undefined;
 //# sourceMappingURL=sentry.d.ts.map

package/dist/observability/sentry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sentry.d.ts","sourceRoot":"","sources":["../../src/observability/sentry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AA0DpF,YAAY,EACV,4BAA4B,EAC5B,2BAA2B,EAC3B,qBAAqB,EACrB,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EACV,4BAA4B,EAC5B,2BAA2B,EAC3B,qBAAqB,EACrB,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,YAAY,CAAC;AASpB,wBAAgB,uBAAuB,CAAC,GAAG,CAAC,EAAE,MAAM;;;;;;;;sBAS9B,UAAU,QAAQ,SAAS,GAAG,UAAU,GAAG,IAAI;yBAG5C,iBAAiB,GAAG,iBAAiB;iCAG7B,wBAAwB,GAAG,wBAAwB,GAAG,IAAI;iCAG1D,UAAU,GAAG,UAAU,GAAG,IAAI;EAI9D;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,4BAA4B,GACpC,MAAM,GAAG,SAAS,CAkCpB;AAMD,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,qBAAqB,GAC7B,2BAA2B,CAY7B;AAED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE;IAAE,aAAa,CAAC,UAAU,EAAE,2BAA2B,GAAG,OAAO,CAAA;CAAE,EACzE,UAAU,EAAE,2BAA2B,GACtC,IAAI,CAWN;AAED,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,2BAA2B,GAAG,IAAI,CAIzF;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAqBhF;AAED,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,GAChE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAO3C;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,GAC3D,IAAI,CAON;AAED,wBAAgB,aAAa,CAAC,CAAC,SAAS,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,SAAS,GAAG,CAAC,GAAG,IAAI,CA2CpF;AAED,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,iBAAiB,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAU5E;AAsBD,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAU5E;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,OAAO,CAwB9E"}
+{"version":3,"file":"sentry.d.ts","sourceRoot":"","sources":["../../src/observability/sentry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACpF,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AAiEvC,YAAY,EACV,4BAA4B,EAC5B,2BAA2B,EAC3B,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EACV,4BAA4B,EAC5B,2BAA2B,EAC3B,qBAAqB,EAErB,qBAAqB,EACrB,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,YAAY,CAAC;AASpB,wBAAgB,uBAAuB,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,mBAAmB,UAAQ;;;;;;;;;;sCAkB3C,UAAU,CAAC,OAAO,MAAM,CAAC,sBAAsB,CAAC;sBAkBhE,UAAU,QAAQ,SAAS,GAAG,UAAU,GAAG,IAAI;yBAG5C,iBAAiB,GAAG,iBAAiB;iCAG7B,wBAAwB,GAAG,wBAAwB,GAAG,IAAI;iCAG1D,UAAU,GAAG,UAAU,GAAG,IAAI;EAI9D;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,4BAA4B,GACpC,MAAM,GAAG,SAAS,CAkCpB;AAED,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAE/D;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,2BAA2B,GACtC,IAAI,CAEN;AAED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,2BAA2B,CAAA;CAAE,GAClE,IAAI,CAEN;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,2BAA2B,CAAA;CAAE,GAClE,IAAI,CAEN;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,GAAE;IACP,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,GAAG,CAAC,EAAE,OAAO,CAAC;CACV,GACL,IAAI,CAQN;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,OAAO,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAKtF;AAMD,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,qBAAqB,GAC7B,2BAA2B,CAa7B;AAED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE;IAAE,aAAa,CAAC,UAAU,EAAE,2BAA2B,GAAG,OAAO,CAAA;CAAE,EACzE,UAAU,EAAE,2BAA2B,GACtC,IAAI,CAWN;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAqBhF;AAED,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,GAChE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAO3C;AAcD,wBAAgB,aAAa,CAAC,CAAC,SAAS,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,SAAS,GAAG,CAAC,GAAG,IAAI,CA+CpF;AAED,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,iBAAiB,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAU5E;AAsBD,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAU5E;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,OAAO,CAwB9E;AA8CD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAS7D;AAYD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,MAAM,GAAG,SAAS,CAwDvF;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,IAAI,CAAC,qBAAqB,EAAE,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC,GACjE,MAAM,GAAG,SAAS,CAUpB"}

package/dist/observability/sentry.js

@@ -1,12 +1,15 @@
 import * as Sentry from "@sentry/node";
+import { readEnv } from "../env-manifest.js";
 const REDACTED = "[REDACTED]";
 const REDACTED_PATH = "[REDACTED_PATH]";
 const MAX_STRING_LENGTH = 256;
 const MAX_DEPTH = 4;
+const MAX_FINGERPRINT_CLASS_LENGTH = 80;
 const TRACE_ATTRIBUTION_TTL_MS = 5 * 60 * 1000;
 const SENSITIVE_KEYS = new Set([
     "accesstoken",
     "apikey",
+    "apitoken",
     "args",
     "attachment",
     "attachments",
@@ -14,6 +17,8 @@ const SENSITIVE_KEYS = new Set([
     "body",
     "clientsecret",
     "code",
+    "completion",
+    "completions",
     "content",
     "contents",
     "cookie",
@@ -38,12 +43,16 @@ const SENSITIVE_KEYS = new Set([
     "systemprompt",
     "text",
     "thinking",
+    "toolarguments",
+    "toolargs",
+    "toolinput",
+    "tooloutput",
     "token",
     "url",
     "uri",
     "workspacepath",
 ]);
-const ABSOLUTE_PATH_PATTERN = /(?:\/Users\/[^\s"'`]+|\/workspace\/[^\s"'`]+|\/tmp\/[^\s"'`]+|\/var\/folders\/[^\s"'`]+|[A-Za-z]:\\[^\s"'`]+)/;
+const ABSOLUTE_PATH_PATTERN = /(?:(?<![A-Za-z0-9:/])\/(?!\/)[^\s"'`<>]+|[A-Za-z]:\\[^\s"'`<>]+)/;
 const TOKEN_PATTERNS = [
     /\bsk-[A-Za-z0-9_-]{12,}\b/,
     /\bxox[a-z]-[A-Za-z0-9-]{10,}\b/,
@@ -51,15 +60,39 @@ const TOKEN_PATTERNS = [
     /\bgh[pousr]_[A-Za-z0-9]{20,}\b/,
 ];
 const traceAttribution = new Map();
-export function createSentryInitOptions(dsn) {
+export function createSentryInitOptions(dsn, customOpenTelemetry = false) {
     return {
         dsn,
-        environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-        enabled: Boolean(dsn) && process.env.SENTRY_ENABLED !== "false",
+        environment: readEnv("SENTRY_ENVIRONMENT") ?? "production",
+        enabled: Boolean(dsn) && readEnv("SENTRY_ENABLED") !== "false",
+        // Also keeps gen_ai inputs/outputs off. Do not add a `dataCollection`
+        // block here: its mere presence switches the SDK base to all-true, and
+        // prompts and completions start shipping unless every key is set false.
         sendDefaultPii: false,
-        tracesSampleRate: 1.0,
+        tracesSampleRate: customOpenTelemetry ? undefined : 1.0,
+        skipOpenTelemetrySetup: customOpenTelemetry,
+        registerEsmLoaderHooks: customOpenTelemetry ? false : undefined,
         includeLocalVariables: false,
         enableLogs: true,
+        // Sentry's OpenAI APIPromise wrapper leaks a second rejection when an
+        // in-flight request is aborted (for example by an agent budget limit).
+        // Keep all other default integrations until the upstream wrapper handles
+        // both withResponse() branches without an unhandled rejection.
+        integrations(defaultIntegrations) {
+            const retained = defaultIntegrations.filter((integration) => integration.name !== "OpenAI" &&
+                (!customOpenTelemetry ||
+                    (integration.name !== "Http" && integration.name !== "NodeFetch")));
+            if (!customOpenTelemetry)
+                return retained;
+            // OTel owns span creation and W3C propagation in custom mode. Keep
+            // Sentry's HTTP integration for request isolation, but do not let either
+            // Sentry integration create spans or inject a second set of headers.
+            return [
+                ...retained,
+                Sentry.httpIntegration({ spans: false, tracePropagation: false }),
+                Sentry.nativeNodeFetchIntegration({ tracePropagation: false }),
+            ];
+        },
         beforeSend(event, hint) {
             return sanitizeEvent(event, hint);
         },
@@ -74,7 +107,7 @@ export function createSentryInitOptions(dsn) {
         },
     };
 }
-export function reportUserFacingError(error, options) {
+export function captureSentryError(error, options) {
     if (options.expected)
         return undefined;
     const exception = error instanceof Error ? error : new Error(String(error));
@@ -111,6 +144,34 @@ export function reportUserFacingError(error, options) {
         return Sentry.captureException(exception);
     });
 }
+export function closeSentry(timeoutMs) {
+    return Sentry.close(timeoutMs);
+}
+export function recordSentryCounter(name, value, attributes) {
+    Sentry.metrics.count(name, value, { attributes });
+}
+export function recordSentryDistribution(name, value, options) {
+    Sentry.metrics.distribution(name, value, options);
+}
+export function recordSentryGauge(name, value, options) {
+    Sentry.metrics.gauge(name, value, options);
+}
+export function addSentryBreadcrumb(message, data, options = {}) {
+    if (options.log)
+        Sentry.logger.info(message, data);
+    Sentry.addBreadcrumb({
+        category: options.category ?? "agent.lifecycle",
+        message,
+        level: options.level ?? "info",
+        data,
+    });
+}
+export function withSentryRunScope(context, body) {
+    return Sentry.withScope((scope) => {
+        applyRunScope(scope, context);
+        return body();
+    });
+}
 function setOptionalTag(scope, key, value) {
     if (value !== undefined)
         scope.setTag(key, value);
@@ -122,8 +183,9 @@ export function createRunAttributionAttributes(context) {
         session_key: context.sessionKey,
         message_id: context.messageId,
         platform: context.platform,
+        conversation_kind: context.conversationKind,
         user_id: context.userId,
-        thread_ts: context.threadTs,
+        thread_id: context.threadTs,
         provider: context.provider,
         model: context.model,
     });
@@ -140,29 +202,23 @@ export function registerTraceAttribution(span, attributes) {
         expiresAt: now + TRACE_ATTRIBUTION_TTL_MS,
     });
 }
-export function updateActiveSpanAttribution(attributes) {
-    const span = Sentry.getActiveSpan();
-    if (!span)
-        return;
-    registerTraceAttribution(span, attributes);
-}
 export function applyRunScope(scope, context) {
     const attributes = createRunAttributionAttributes(context);
     for (const [key, value] of Object.entries(attributes)) {
         scope.setTag(key, value);
     }
     scope.setAttributes(attributes);
-    scope.setUser({
-        id: context.userId,
-        username: context.userName,
-    });
+    // Agent Monitoring groups spans by the platform session identifier.
+    scope.setUser({ id: String(attributes.user_id) });
+    scope.setConversationId(String(attributes.session_key));
     scope.setContext("agent_run", {
-        conversationId: context.conversationId,
-        channelId: context.conversationId,
-        sessionKey: context.sessionKey,
-        messageId: context.messageId,
-        threadTs: context.threadTs,
+        conversationId: attributes.conversation_id,
+        channelId: attributes.channel_id,
+        sessionKey: attributes.session_key,
+        messageId: attributes.message_id,
+        threadId: attributes.thread_id,
         platform: context.platform,
+        conversationKind: context.conversationKind,
         provider: context.provider,
         model: context.model,
     });
@@ -173,7 +229,7 @@ export function metricAttributes(attributes) {
         return value !== undefined;
     }));
 }
-export function addLifecycleBreadcrumb(message, data) {
+function addLifecycleBreadcrumb(message, data) {
     Sentry.addBreadcrumb({
         category: "agent.lifecycle",
         message,
@@ -190,29 +246,33 @@ export function sanitizeEvent(event, _hint) {
         extra: sanitizeValue(event.extra),
         contexts: sanitizeValue(event.contexts),
         request: sanitizeRequest(event.request),
-        user: undefined,
+        // Keep the identity applyRunScope set so Conversations show who sent each
+        // message; drop anything else the SDK may have attached (email, IP).
+        user: event.user ? { id: event.user.id, username: event.user.username } : undefined,
         server_name: undefined,
     };
     if (sanitized.message) {
-        sanitized.message = sanitizeString(sanitized.message);
+        sanitized.message = sanitizeTelemetryString(sanitized.message);
     }
     if (sanitized.logentry) {
         sanitized.logentry = {
             ...sanitized.logentry,
-            message: sanitized.logentry.message ? sanitizeString(sanitized.logentry.message) : undefined,
+            message: sanitized.logentry.message
+                ? sanitizeTelemetryString(sanitized.logentry.message)
+                : undefined,
         };
     }
     if (sanitized.exception?.values) {
         sanitized.exception.values = sanitized.exception.values.map((value) => ({
             ...value,
-            value: value.value ? sanitizeString(value.value) : value.value,
+            value: value.value ? sanitizeTelemetryString(value.value) : value.value,
             stacktrace: value.stacktrace
                 ? {
                     ...value.stacktrace,
                     frames: value.stacktrace.frames?.map((frame) => ({
                         ...frame,
-                        filename: frame.filename ? sanitizeString(frame.filename) : frame.filename,
-                        abs_path: frame.abs_path ? sanitizeString(frame.abs_path) : frame.abs_path,
+                        filename: frame.filename ? sanitizeTelemetryString(frame.filename) : frame.filename,
+                        abs_path: frame.abs_path ? sanitizeTelemetryString(frame.abs_path) : frame.abs_path,
                         vars: undefined,
                     })),
                 }
@@ -259,7 +319,7 @@ export function sanitizeBreadcrumb(breadcrumb) {
     }
     return {
         ...breadcrumb,
-        message: breadcrumb.message ? sanitizeString(breadcrumb.message) : breadcrumb.message,
+        message: breadcrumb.message ? sanitizeTelemetryString(breadcrumb.message) : breadcrumb.message,
         data: sanitizeValue(breadcrumb.data),
     };
 }
@@ -272,7 +332,7 @@ export function sanitizeValue(value, key, depth = 0) {
         return summarizeValue(value, key);
     }
     if (typeof value === "string") {
-        return sanitizeString(value);
+        return sanitizeTelemetryString(value);
     }
     if (Array.isArray(value)) {
         return value.slice(0, 20).map((entry) => sanitizeValue(entry, key, depth + 1));
@@ -326,7 +386,7 @@ function summarizeValue(value, key) {
     }
     return `[Redacted ${label}]`;
 }
-function sanitizeString(value) {
+export function sanitizeTelemetryString(value) {
     let sanitized = value.replace(new RegExp(ABSOLUTE_PATH_PATTERN, "g"), REDACTED_PATH);
     for (const pattern of TOKEN_PATTERNS) {
         sanitized = sanitized.replace(new RegExp(pattern, "g"), REDACTED);
@@ -336,4 +396,88 @@ function sanitizeString(value) {
     }
     return sanitized;
 }
+/**
+ * Subagent outcomes that page. Everything else is a bounded, expected end
+ * state the parent model already sees in the tool result: a budget or clock
+ * ran out, the caller aborted, or a dependency failed upstream.
+ */
+const UNEXPECTED_SUBAGENT_STATUSES = new Set([
+    "failed",
+    "invalid_output",
+]);
+/**
+ * Record one subagent outcome: a run counter and duration for every status,
+ * a lifecycle breadcrumb, and a Sentry error only for statuses in
+ * `UNEXPECTED_SUBAGENT_STATUSES`. Fingerprinted on the error's prefix before
+ * the first colon so one failure class is one issue regardless of which
+ * tool, file, or model message follows it.
+ */
+export function recordSubagentOutcome(report) {
+    const attributes = metricAttributes({
+        status: report.status,
+        profile: report.profile,
+        mode: report.mode,
+    });
+    Sentry.metrics.count("agent.subagent.runs", 1, { attributes });
+    if (report.durationMs !== undefined) {
+        Sentry.metrics.distribution("agent.subagent.duration", report.durationMs, {
+            unit: "millisecond",
+            attributes,
+        });
+    }
+    addLifecycleBreadcrumb("agent.subagent.completed", {
+        item_id: report.itemId,
+        status: report.status,
+        profile: report.profile,
+        mode: report.mode,
+        turns: report.turns,
+        tool_calls: report.toolCalls,
+        tokens: report.tokens,
+        cost_usd: report.costUsd,
+        duration_ms: report.durationMs,
+        cleanup_pending: report.cleanupPending,
+    });
+    if (!UNEXPECTED_SUBAGENT_STATUSES.has(report.status))
+        return undefined;
+    const errorClass = sanitizeTelemetryString((report.error ?? report.status).split(":")[0].trim()).slice(0, MAX_FINGERPRINT_CLASS_LENGTH);
+    return captureSentryError(new Error(`Subagent ${report.status}: ${report.error ?? "no error detail"}`), {
+        domain: "subagent",
+        surface: "subagent_tool",
+        operation: "run",
+        severity: "error",
+        toolName: "subagent",
+        fingerprint: ["subagent", report.status, errorClass],
+        tags: {
+            subagent_status: report.status,
+            subagent_profile: report.profile,
+            subagent_mode: report.mode,
+            cleanup_pending: report.cleanupPending,
+        },
+        context: {
+            itemId: report.itemId,
+            error: report.error,
+            turns: report.turns,
+            toolCalls: report.toolCalls,
+            tokens: report.tokens,
+            costUsd: report.costUsd,
+            durationMs: report.durationMs,
+        },
+    });
+}
+/**
+ * A subagent that never started: unknown profile, ungranted tool, or a
+ * harness rejection. The throw still reaches the parent model as a tool
+ * error; this only makes sure it also reaches Sentry.
+ */
+export function reportSubagentLaunchError(error, report) {
+    return captureSentryError(error, {
+        domain: "subagent",
+        surface: "subagent_tool",
+        operation: "launch",
+        severity: "error",
+        toolName: "subagent",
+        tags: { subagent_profile: report.profile, subagent_mode: report.mode },
+        context: { itemId: report.itemId },
+    });
+}
 //# sourceMappingURL=sentry.js.map