@lunora/agent 1.0.0-alpha.6 → 1.0.0-alpha.61

package/dist/sandbox.mjs

@@ -1,113 +1 @@
-import { LunoraError } from '@lunora/errors';
-import { jsonSchema } from 'ai';
-import { toFunctionReference, SANDBOX_INVOKE_PATH } from './packem_shared/AGENT_MODULE-Dnt_-AAT.mjs';
-
-const SANDBOX_REF = toFunctionReference(SANDBOX_INVOKE_PATH);
-const DEFAULT_BROWSER_DESCRIPTION = 'Drive a headless browser: screenshot a page, render it to PDF, read its HTML content, or scrape it. Set `op` to "screenshot" | "pdf" | "content" | "scrape" and pass the target `url`.';
-const DEFAULT_CONTAINER_DESCRIPTION = 'Talk to a sandboxed container: `fetch` an HTTP path on it, or `exec` a command inside it. Set `op` to "fetch" (with `path`) or "exec" (with `command`).';
-const DEFAULT_FS_DESCRIPTION = 'Read and write files in a persistent sandbox filesystem. Set `op` to "ls" (list a directory), "read", "write" (with `content`), "rm", or "stat", and pass `path`.';
-const defaultFsGate = (input) => input.op === "write" || input.op === "rm";
-const FS_TOOL_SCHEMA = jsonSchema({
-  properties: {
-    content: { description: "write: the file contents.", type: "string" },
-    op: { description: "The filesystem operation to run.", enum: ["ls", "read", "write", "rm", "stat"], type: "string" },
-    path: { description: "The file or directory path, relative to the sandbox root.", type: "string" }
-  },
-  required: ["op"],
-  type: "object"
-});
-const BROWSER_TOOL_SCHEMA = jsonSchema({
-  properties: {
-    fullPage: { description: "screenshot: capture the full scrollable page rather than just the viewport.", type: "boolean" },
-    op: { description: "The browser operation to run.", enum: ["screenshot", "scrape", "pdf", "content"], type: "string" },
-    selector: { description: "scrape: optional CSS selector hint to narrow the extraction.", type: "string" },
-    type: { description: "screenshot: image encoding (default png).", enum: ["png", "jpeg"], type: "string" },
-    url: { description: "The URL to operate on.", type: "string" }
-  },
-  required: ["op", "url"],
-  type: "object"
-});
-const CONTAINER_EXEC_ROUTE = "/exec";
-const CONTAINER_PATH_QUERY_SPLIT = /[?#]/u;
-const normalizeContainerPath = (path) => {
-  const [raw = ""] = (path ?? "").split(CONTAINER_PATH_QUERY_SPLIT);
-  const segments = [];
-  for (const segment of raw.split("/")) {
-    if (segment === "" || segment === ".") {
-      continue;
-    }
-    if (segment === "..") {
-      segments.pop();
-      continue;
-    }
-    segments.push(segment);
-  }
-  return `/${segments.join("/")}`;
-};
-const NON_IDEMPOTENT_METHODS = /* @__PURE__ */ new Set(["DELETE", "PATCH", "POST", "PUT"]);
-const defaultContainerGate = (input) => {
-  if (input.op === "exec") {
-    return true;
-  }
-  if (normalizeContainerPath(input.path) === CONTAINER_EXEC_ROUTE) {
-    return true;
-  }
-  return NON_IDEMPOTENT_METHODS.has((input.method ?? "GET").toUpperCase());
-};
-const CONTAINER_TOOL_SCHEMA = jsonSchema({
-  properties: {
-    args: { description: "exec: command arguments.", items: { type: "string" }, type: "array" },
-    body: { description: "fetch: request body.", type: "string" },
-    command: { description: "exec: the command to run.", type: "string" },
-    method: { description: "fetch: HTTP method (default GET).", type: "string" },
-    op: { description: "The container operation to run.", enum: ["fetch", "exec"], type: "string" },
-    path: { description: "fetch: request path on the container (e.g. /health).", type: "string" }
-  },
-  required: ["op"],
-  type: "object"
-});
-const browserTool = (options = {}) => {
-  return {
-    description: options.description ?? DEFAULT_BROWSER_DESCRIPTION,
-    // Pin `kind` LAST so out-of-schema model input can never override it.
-    execute: (input, context) => context.run(SANDBOX_REF, { ...input, kind: "browser" }),
-    inputSchema: BROWSER_TOOL_SCHEMA,
-    isLunoraAgentTool: true,
-    ...options.needsApproval === void 0 ? {} : { needsApproval: options.needsApproval }
-  };
-};
-const containerTool = (name, options = {}) => {
-  if (typeof name !== "string" || name.length === 0) {
-    throw new LunoraError("INTERNAL", "@lunora/agent: containerTool requires a container `name` (the ctx.containers.<name> key from lunora/containers.ts)");
-  }
-  const needsApproval = options.needsApproval ?? defaultContainerGate;
-  return {
-    description: options.description ?? DEFAULT_CONTAINER_DESCRIPTION,
-    // Pin `kind`/`name` LAST so out-of-schema model input can never override
-    // the authoritative container the author pinned.
-    execute: (input, context) => context.run(SANDBOX_REF, { ...input, kind: "container", name }),
-    inputSchema: CONTAINER_TOOL_SCHEMA,
-    isLunoraAgentTool: true,
-    needsApproval
-  };
-};
-const fsTool = (bucket, options = {}) => {
-  if (typeof bucket !== "string" || bucket.length === 0) {
-    throw new LunoraError("INTERNAL", "@lunora/agent: fsTool requires an R2 `bucket` binding name (the r2_bucket declared in wrangler.jsonc)");
-  }
-  return {
-    description: options.description ?? DEFAULT_FS_DESCRIPTION,
-    // Pin kind/bucket/root LAST so out-of-schema model input can never override
-    // the authoritative bucket + sandbox root the author pinned. `root` may be
-    // a function of the ctx (per-run/owner isolation), resolved here.
-    execute: (input, context) => {
-      const root = typeof options.root === "function" ? options.root(context) : options.root ?? "";
-      return context.run(SANDBOX_REF, { ...input, bucket, kind: "fs", root });
-    },
-    inputSchema: FS_TOOL_SCHEMA,
-    isLunoraAgentTool: true,
-    needsApproval: options.needsApproval ?? defaultFsGate
-  };
-};
-
-export { browserTool, containerTool, fsTool };
+import{LunoraError as a}from"@lunora/errors";import{jsonSchema as i}from"ai";import{toFunctionReference as p,SANDBOX_INVOKE_PATH as c}from"./packem_shared/AGENT_MODULE-M4D1EejI.mjs";const s=p(c),d='Drive a headless browser: screenshot a page, render it to PDF, read its HTML content, or scrape it. Set `op` to "screenshot" | "pdf" | "content" | "scrape" and pass the target `url`.',h='Talk to a sandboxed container: `fetch` an HTTP path on it, or `exec` a command inside it. Set `op` to "fetch" (with `path`) or "exec" (with `command`).',l='Read and write files in a persistent sandbox filesystem. Set `op` to "ls" (list a directory), "read", "write" (with `content`), "rm", or "stat", and pass `path`.',u=e=>e.op==="write"||e.op==="rm",T=i({properties:{content:{description:"write: the file contents.",type:"string"},op:{description:"The filesystem operation to run.",enum:["ls","read","write","rm","stat"],type:"string"},path:{description:"The file or directory path, relative to the sandbox root.",type:"string"}},required:["op"],type:"object"}),m=i({properties:{fullPage:{description:"screenshot: capture the full scrollable page rather than just the viewport.",type:"boolean"},op:{description:"The browser operation to run.",enum:["screenshot","scrape","pdf","content"],type:"string"},selector:{description:"scrape: optional CSS selector hint to narrow the extraction.",type:"string"},type:{description:"screenshot: image encoding (default png).",enum:["png","jpeg"],type:"string"},url:{description:"The URL to operate on.",type:"string"}},required:["op","url"],type:"object"}),g=new Set(["DELETE","PATCH","POST","PUT"]),f=e=>e.op==="exec"||g.has((e.method??"GET").toUpperCase()),y=i({properties:{args:{description:"exec: command arguments.",items:{type:"string"},type:"array"},body:{description:"fetch: request body.",type:"string"},command:{description:"exec: the command to run.",type:"string"},method:{description:"fetch: HTTP method (default GET).",type:"string"},op:{description:"The container operation to run.",enum:["fetch","exec"],type:"string"},path:{description:"fetch: request path on the container (e.g. /health).",type:"string"}},required:["op"],type:"object"}),w=(e={})=>({description:e.description??d,execute:(t,r)=>r.run(s,{...t,kind:"browser"}),inputSchema:m,isLunoraAgentTool:!0,...e.needsApproval===void 0?{}:{needsApproval:e.needsApproval}}),O=(e,t={})=>{if(typeof e!="string"||e.length===0)throw new a("INTERNAL","@lunora/agent: containerTool requires a container `name` (the ctx.containers.<name> key from lunora/containers.ts)");const r=t.needsApproval??f;return{description:t.description??h,execute:(o,n)=>n.run(s,{...o,kind:"container",name:e}),inputSchema:y,isLunoraAgentTool:!0,needsApproval:r}},_=(e,t={})=>{if(typeof e!="string"||e.length===0)throw new a("INTERNAL","@lunora/agent: fsTool requires an R2 `bucket` binding name (the r2_bucket declared in wrangler.jsonc)");return{description:t.description??l,execute:(r,o)=>{const n=typeof t.root=="function"?t.root(o):t.root??"";return o.run(s,{...r,bucket:e,kind:"fs",root:n})},inputSchema:T,isLunoraAgentTool:!0,needsApproval:t.needsApproval??u}};export{w as browserTool,O as containerTool,_ as fsTool};

package/dist/skill-markdown.d.mts

@@ -0,0 +1,36 @@
+import { S as SkillMarkdownExtras, d as SkillDefinition } from "./packem_shared/types.d-eCuvcLzf.mjs";
+import '@lunora/mail/inbound';
+import 'ai';
+/**
+ * Declare a skill whose prose lives in a markdown file.
+ *
+ * ```ts
+ * import triage from "./skills/triage/SKILL.md?raw";
+ * import { functionTool } from "@lunora/agent";
+ * import { skillFromMarkdown } from "@lunora/agent/skill-markdown";
+ *
+ * export const triageSkill = skillFromMarkdown(triage, {
+ *     tools: { searchCode: functionTool(api.code.search, { ... }) },
+ * });
+ * ```
+ *
+ * ```md
+ * ---
+ * name: triage
+ * ---
+ * Reproduce the report before proposing a cause. Cite the failing test.
+ * ```
+ *
+ * The split is the point: the instructions are the part a non-author reads,
+ * reviews and copies between projects, so they belong in a file that is legible
+ * on its own — and the `name` travels WITH that file, so a skill can move
+ * without a matching TypeScript wrapper. Tools and `knowledge` stay in code,
+ * because they are code.
+ *
+ * Getting the markdown here is the caller's job (`?raw` under Vite, a build-time
+ * import elsewhere) — a Worker has no filesystem to read it from at runtime, so
+ * this takes the string rather than a path.
+ * @experimental
+ */
+declare const skillFromMarkdown: (markdown: string, extras?: SkillMarkdownExtras) => SkillDefinition;
+export { type SkillMarkdownExtras, skillFromMarkdown };

package/dist/skill-markdown.d.ts

@@ -0,0 +1,36 @@
+import { S as SkillMarkdownExtras, d as SkillDefinition } from "./packem_shared/types.d-eCuvcLzf.js";
+import '@lunora/mail/inbound';
+import 'ai';
+/**
+ * Declare a skill whose prose lives in a markdown file.
+ *
+ * ```ts
+ * import triage from "./skills/triage/SKILL.md?raw";
+ * import { functionTool } from "@lunora/agent";
+ * import { skillFromMarkdown } from "@lunora/agent/skill-markdown";
+ *
+ * export const triageSkill = skillFromMarkdown(triage, {
+ *     tools: { searchCode: functionTool(api.code.search, { ... }) },
+ * });
+ * ```
+ *
+ * ```md
+ * ---
+ * name: triage
+ * ---
+ * Reproduce the report before proposing a cause. Cite the failing test.
+ * ```
+ *
+ * The split is the point: the instructions are the part a non-author reads,
+ * reviews and copies between projects, so they belong in a file that is legible
+ * on its own — and the `name` travels WITH that file, so a skill can move
+ * without a matching TypeScript wrapper. Tools and `knowledge` stay in code,
+ * because they are code.
+ *
+ * Getting the markdown here is the caller's job (`?raw` under Vite, a build-time
+ * import elsewhere) — a Worker has no filesystem to read it from at runtime, so
+ * this takes the string rather than a path.
+ * @experimental
+ */
+declare const skillFromMarkdown: (markdown: string, extras?: SkillMarkdownExtras) => SkillDefinition;
+export { type SkillMarkdownExtras, skillFromMarkdown };

package/dist/skill-markdown.mjs

@@ -0,0 +1 @@
+import{LunoraError as o}from"@lunora/errors";import{parse as s}from"yaml";import{defineSkill as l}from"./packem_shared/defineSkill-DGGvDWNq.mjs";const m=/^\uFEFF?[ \t]*---[ \t]*\r?\n/u,h=/^---[ \t]*$/mu,c=t=>{const r=m.exec(t);if(!r)return{body:t.trim(),data:{}};const n=t.slice(r[0].length),e=h.exec(n);if(!e)throw new o("INTERNAL","@lunora/agent: the skill markdown opens with `---` but never closes the frontmatter block. Add a closing `---` on its own line.");let a;try{a=s(n.slice(0,e.index))}catch(i){throw new o("INTERNAL",`@lunora/agent: the skill markdown has invalid YAML frontmatter — ${i instanceof Error?i.message:String(i)}`)}return{body:n.slice(e.index+e[0].length).trim(),data:typeof a=="object"&&a!==null?a:{}}},w=(t,r={})=>{if(typeof t!="string")throw new o("INTERNAL",`@lunora/agent: skillFromMarkdown expects the markdown SOURCE as a string, got ${typeof t}`);const{body:n,data:e}=c(t);if(e.name!==void 0&&typeof e.name!="string")throw new o("INTERNAL",`@lunora/agent: the skill markdown's \`name\` must be a string, got ${Array.isArray(e.name)?"array":typeof e.name}. Quote it if the value looks like a number or a boolean (\`name: "2fa"\`).`);if(typeof e.name!="string")throw new o("INTERNAL","@lunora/agent: skillFromMarkdown found no `name` in the markdown frontmatter. Open the file with a `---` line, put `name: <identifier>` on its own line, and close it with `---`. Other keys are parsed and ignored — only `name` is read here.");if(n==="")throw new o("INTERNAL",`@lunora/agent: the skill markdown for "${e.name}" has no body — the instructions below the closing \`---\` are what the skill contributes.`);return l({...r,instructions:n,name:e.name})};export{w as skillFromMarkdown};

package/dist/telemetry/index.d.mts

@@ -122,6 +122,87 @@ interface ConsoleTelemetryOptions extends CommonOptions {
  * @experimental
  */
 declare const consoleTelemetry: (options?: ConsoleTelemetryOptions) => Telemetry;
+/**
+ * Options for {@link otlpTelemetry}.
+ * @experimental
+ */
+interface OtlpTelemetryOptions extends CommonOptions {
+  /**
+   * Conversation / session id to tag each generation span with, emitted as the
+   * `gen_ai.conversation.id` semantic-convention attribute so a multi-turn
+   * conversation's model turns group in the trace store. On a deployed agent the
+   * platform wiring passes the run's `threadKey` here automatically (one thread =
+   * one conversation). Omitted → the attribute is absent (backward-compatible),
+   * and each turn's span is ungrouped.
+   */
+  conversationId?: string;
+  /**
+   * The OTLP-over-HTTP collector base endpoint (e.g. the Lunora Cloud's `/v1`
+   * base). Spans are POSTed to `${endpoint}/v1/traces`; a trailing slash is
+   * tolerated. On the platform this is the injected `LUNORA_OTLP_ENDPOINT`.
+   */
+  endpoint: string;
+  /**
+   * Extra headers merged onto every POST — typically the correlation headers
+   * the platform injects. `Content-Type: application/json` is set by default.
+   */
+  headers?: Record<string, string>;
+  /** `service.name` resource attribute on every span. Defaults to `lunora`. */
+  serviceName?: string;
+  /**
+   * Bearer token added as `Authorization: Bearer` (wins over any authorization
+   * in `headers`) — the injected `LUNORA_OTLP_TOKEN`. Omit for an
+   * unauthenticated collector.
+   */
+  token?: string;
+  /**
+   * Trace id (32-hex) to hang every span of this run under, so one agent run
+   * reads as one trace. Pass a stable id derived from the run (e.g. the
+   * workflow run id). Omitted → each span mints its own trace id (still valid,
+   * just ungrouped).
+   */
+  traceId?: string;
+  /**
+   * The Worker request's `waitUntil`, so a fire-and-forget export survives
+   * isolate teardown after the turn returns. Omit and the send degrades to
+   * best-effort.
+   */
+  waitUntil?: (promise: Promise<unknown>) => void;
+}
+/**
+ * An OTLP-over-HTTP telemetry integration for `@lunora/agent`.
+ *
+ * The OTLP counterpart to the `sentryTelemetry` / `braintrustTelemetry` bridges:
+ * it wraps each language-model call and tool execution in an OTLP **span**
+ * (`gen_ai.*` semantic-convention attributes — model, provider, token usage,
+ * tool name) and ships it to a collector, so agent generations land in the same
+ * trace store as the rest of an app's telemetry (the Lunora Cloud, or any OTel
+ * collector). Plug it into `defineAgent({ telemetry: { isEnabled: true,
+ * integrations: [otlpTelemetry({ endpoint, token })] } })`.
+ *
+ * Emitting inside the turn's execution wrapper means one span per **real** turn:
+ * the agent loop memoizes each `step.do('llm:turn:N')`, so a Workflow replay
+ * returns the cached result without re-invoking `execute`, and no duplicate span
+ * is emitted. Privacy-safe by default — `recordInputs`/`recordOutputs` both
+ * default `false`, so no prompt or generated text leaves the worker without an
+ * explicit opt-in; only structural metadata + token counts are recorded.
+ *
+ * Each export is fire-and-forget (registered with `waitUntil` when supplied);
+ * every rejection is swallowed so a flaky collector never surfaces to the run.
+ *
+ * Two deliberate differences from the SDK-backed bridges, which delegate to a
+ * host tracer. First, no `onError`: a failed call already emits a span with
+ * `status.code === 2`, so the failure is on the trace and there is no host client
+ * to also notify. Second, flat not nested: every span gets `traceId` (shared when
+ * `traceId` is set) but no `parentSpanId`, so model-call and tool spans are
+ * siblings under the run rather than a tree — OTLP has no ambient span context to
+ * parent to here.
+ * @param options `endpoint` (+ optional `token`/`headers`/`serviceName`),
+ * `traceId` to group a run's spans, `waitUntil`, and the `recordInputs`/
+ * `recordOutputs` privacy flags.
+ * @experimental
+ */
+declare const otlpTelemetry: (options: OtlpTelemetryOptions) => Telemetry;
 /**
  * The minimal, **structural** slice of `@sentry/cloudflare` (equivalently
  * `@sentry/node`/`@sentry/browser`) this bridge needs. `@sentry/cloudflare` is
@@ -170,4 +251,58 @@ interface SentryTelemetryOptions extends CommonOptions {
  * @experimental
  */
 declare const sentryTelemetry: (options: SentryTelemetryOptions) => Telemetry;
-export { type BraintrustLike, type BraintrustSpan, type BraintrustTelemetryOptions, type CommonOptions, type ConsoleLogLevel, type ConsoleLogger, type ConsoleTelemetryOptions, type SentryLike, type SentryTelemetryOptions, braintrustTelemetry, combineTelemetry, consoleTelemetry, sentryTelemetry };
+export {
+/**
+ * `@lunora/agent/telemetry` — observability integrations for `@lunora/agent`.
+ *
+ * Every export here produces an ai@7 `Telemetry` object suitable for the
+ * `integrations` array of `TelemetryOptions` (`defineAgent({ telemetry: {
+ * isEnabled: true, integrations: [...] } })`). `consoleTelemetry` is a
+ * zero-dependency structured console tracer; `combineTelemetry` fans the
+ * lifecycle out to several integrations and nests their execution wrappers;
+ * `sentryTelemetry` / `braintrustTelemetry` are dependency-injected bridges (the
+ * app passes its own Sentry namespace / Braintrust logger, so the heavy SDKs are
+ * never imported here); and `otlpTelemetry` ships `gen_ai.*` spans over
+ * OTLP-over-HTTP to any collector (the Lunora Cloud, or your own), so agent
+ * generations land in the same trace store as the rest of the app.
+ *
+ * All integrations are privacy-safe by default (`recordInputs` / `recordOutputs`
+ * both default `false`), so nothing sensitive is recorded without opt-in.
+ */
+type BraintrustLike,
+/**
+ * `@lunora/agent/telemetry` — observability integrations for `@lunora/agent`.
+ *
+ * Every export here produces an ai@7 `Telemetry` object suitable for the
+ * `integrations` array of `TelemetryOptions` (`defineAgent({ telemetry: {
+ * isEnabled: true, integrations: [...] } })`). `consoleTelemetry` is a
+ * zero-dependency structured console tracer; `combineTelemetry` fans the
+ * lifecycle out to several integrations and nests their execution wrappers;
+ * `sentryTelemetry` / `braintrustTelemetry` are dependency-injected bridges (the
+ * app passes its own Sentry namespace / Braintrust logger, so the heavy SDKs are
+ * never imported here); and `otlpTelemetry` ships `gen_ai.*` spans over
+ * OTLP-over-HTTP to any collector (the Lunora Cloud, or your own), so agent
+ * generations land in the same trace store as the rest of the app.
+ *
+ * All integrations are privacy-safe by default (`recordInputs` / `recordOutputs`
+ * both default `false`), so nothing sensitive is recorded without opt-in.
+ */
+type BraintrustSpan,
+/**
+ * `@lunora/agent/telemetry` — observability integrations for `@lunora/agent`.
+ *
+ * Every export here produces an ai@7 `Telemetry` object suitable for the
+ * `integrations` array of `TelemetryOptions` (`defineAgent({ telemetry: {
+ * isEnabled: true, integrations: [...] } })`). `consoleTelemetry` is a
+ * zero-dependency structured console tracer; `combineTelemetry` fans the
+ * lifecycle out to several integrations and nests their execution wrappers;
+ * `sentryTelemetry` / `braintrustTelemetry` are dependency-injected bridges (the
+ * app passes its own Sentry namespace / Braintrust logger, so the heavy SDKs are
+ * never imported here); and `otlpTelemetry` ships `gen_ai.*` spans over
+ * OTLP-over-HTTP to any collector (the Lunora Cloud, or your own), so agent
+ * generations land in the same trace store as the rest of the app.
+ *
+ * All integrations are privacy-safe by default (`recordInputs` / `recordOutputs`
+ * both default `false`), so nothing sensitive is recorded without opt-in.
+ */
+type BraintrustTelemetryOptions, type CommonOptions, type ConsoleLogLevel, type ConsoleLogger, type ConsoleTelemetryOptions, type OtlpTelemetryOptions, type SentryLike, type SentryTelemetryOptions, braintrustTelemetry, combineTelemetry, consoleTelemetry, otlpTelemetry, sentryTelemetry };

package/dist/telemetry/index.d.ts

@@ -122,6 +122,87 @@ interface ConsoleTelemetryOptions extends CommonOptions {
  * @experimental
  */
 declare const consoleTelemetry: (options?: ConsoleTelemetryOptions) => Telemetry;
+/**
+ * Options for {@link otlpTelemetry}.
+ * @experimental
+ */
+interface OtlpTelemetryOptions extends CommonOptions {
+  /**
+   * Conversation / session id to tag each generation span with, emitted as the
+   * `gen_ai.conversation.id` semantic-convention attribute so a multi-turn
+   * conversation's model turns group in the trace store. On a deployed agent the
+   * platform wiring passes the run's `threadKey` here automatically (one thread =
+   * one conversation). Omitted → the attribute is absent (backward-compatible),
+   * and each turn's span is ungrouped.
+   */
+  conversationId?: string;
+  /**
+   * The OTLP-over-HTTP collector base endpoint (e.g. the Lunora Cloud's `/v1`
+   * base). Spans are POSTed to `${endpoint}/v1/traces`; a trailing slash is
+   * tolerated. On the platform this is the injected `LUNORA_OTLP_ENDPOINT`.
+   */
+  endpoint: string;
+  /**
+   * Extra headers merged onto every POST — typically the correlation headers
+   * the platform injects. `Content-Type: application/json` is set by default.
+   */
+  headers?: Record<string, string>;
+  /** `service.name` resource attribute on every span. Defaults to `lunora`. */
+  serviceName?: string;
+  /**
+   * Bearer token added as `Authorization: Bearer` (wins over any authorization
+   * in `headers`) — the injected `LUNORA_OTLP_TOKEN`. Omit for an
+   * unauthenticated collector.
+   */
+  token?: string;
+  /**
+   * Trace id (32-hex) to hang every span of this run under, so one agent run
+   * reads as one trace. Pass a stable id derived from the run (e.g. the
+   * workflow run id). Omitted → each span mints its own trace id (still valid,
+   * just ungrouped).
+   */
+  traceId?: string;
+  /**
+   * The Worker request's `waitUntil`, so a fire-and-forget export survives
+   * isolate teardown after the turn returns. Omit and the send degrades to
+   * best-effort.
+   */
+  waitUntil?: (promise: Promise<unknown>) => void;
+}
+/**
+ * An OTLP-over-HTTP telemetry integration for `@lunora/agent`.
+ *
+ * The OTLP counterpart to the `sentryTelemetry` / `braintrustTelemetry` bridges:
+ * it wraps each language-model call and tool execution in an OTLP **span**
+ * (`gen_ai.*` semantic-convention attributes — model, provider, token usage,
+ * tool name) and ships it to a collector, so agent generations land in the same
+ * trace store as the rest of an app's telemetry (the Lunora Cloud, or any OTel
+ * collector). Plug it into `defineAgent({ telemetry: { isEnabled: true,
+ * integrations: [otlpTelemetry({ endpoint, token })] } })`.
+ *
+ * Emitting inside the turn's execution wrapper means one span per **real** turn:
+ * the agent loop memoizes each `step.do('llm:turn:N')`, so a Workflow replay
+ * returns the cached result without re-invoking `execute`, and no duplicate span
+ * is emitted. Privacy-safe by default — `recordInputs`/`recordOutputs` both
+ * default `false`, so no prompt or generated text leaves the worker without an
+ * explicit opt-in; only structural metadata + token counts are recorded.
+ *
+ * Each export is fire-and-forget (registered with `waitUntil` when supplied);
+ * every rejection is swallowed so a flaky collector never surfaces to the run.
+ *
+ * Two deliberate differences from the SDK-backed bridges, which delegate to a
+ * host tracer. First, no `onError`: a failed call already emits a span with
+ * `status.code === 2`, so the failure is on the trace and there is no host client
+ * to also notify. Second, flat not nested: every span gets `traceId` (shared when
+ * `traceId` is set) but no `parentSpanId`, so model-call and tool spans are
+ * siblings under the run rather than a tree — OTLP has no ambient span context to
+ * parent to here.
+ * @param options `endpoint` (+ optional `token`/`headers`/`serviceName`),
+ * `traceId` to group a run's spans, `waitUntil`, and the `recordInputs`/
+ * `recordOutputs` privacy flags.
+ * @experimental
+ */
+declare const otlpTelemetry: (options: OtlpTelemetryOptions) => Telemetry;
 /**
  * The minimal, **structural** slice of `@sentry/cloudflare` (equivalently
  * `@sentry/node`/`@sentry/browser`) this bridge needs. `@sentry/cloudflare` is
@@ -170,4 +251,58 @@ interface SentryTelemetryOptions extends CommonOptions {
  * @experimental
  */
 declare const sentryTelemetry: (options: SentryTelemetryOptions) => Telemetry;
-export { type BraintrustLike, type BraintrustSpan, type BraintrustTelemetryOptions, type CommonOptions, type ConsoleLogLevel, type ConsoleLogger, type ConsoleTelemetryOptions, type SentryLike, type SentryTelemetryOptions, braintrustTelemetry, combineTelemetry, consoleTelemetry, sentryTelemetry };
+export {
+/**
+ * `@lunora/agent/telemetry` — observability integrations for `@lunora/agent`.
+ *
+ * Every export here produces an ai@7 `Telemetry` object suitable for the
+ * `integrations` array of `TelemetryOptions` (`defineAgent({ telemetry: {
+ * isEnabled: true, integrations: [...] } })`). `consoleTelemetry` is a
+ * zero-dependency structured console tracer; `combineTelemetry` fans the
+ * lifecycle out to several integrations and nests their execution wrappers;
+ * `sentryTelemetry` / `braintrustTelemetry` are dependency-injected bridges (the
+ * app passes its own Sentry namespace / Braintrust logger, so the heavy SDKs are
+ * never imported here); and `otlpTelemetry` ships `gen_ai.*` spans over
+ * OTLP-over-HTTP to any collector (the Lunora Cloud, or your own), so agent
+ * generations land in the same trace store as the rest of the app.
+ *
+ * All integrations are privacy-safe by default (`recordInputs` / `recordOutputs`
+ * both default `false`), so nothing sensitive is recorded without opt-in.
+ */
+type BraintrustLike,
+/**
+ * `@lunora/agent/telemetry` — observability integrations for `@lunora/agent`.
+ *
+ * Every export here produces an ai@7 `Telemetry` object suitable for the
+ * `integrations` array of `TelemetryOptions` (`defineAgent({ telemetry: {
+ * isEnabled: true, integrations: [...] } })`). `consoleTelemetry` is a
+ * zero-dependency structured console tracer; `combineTelemetry` fans the
+ * lifecycle out to several integrations and nests their execution wrappers;
+ * `sentryTelemetry` / `braintrustTelemetry` are dependency-injected bridges (the
+ * app passes its own Sentry namespace / Braintrust logger, so the heavy SDKs are
+ * never imported here); and `otlpTelemetry` ships `gen_ai.*` spans over
+ * OTLP-over-HTTP to any collector (the Lunora Cloud, or your own), so agent
+ * generations land in the same trace store as the rest of the app.
+ *
+ * All integrations are privacy-safe by default (`recordInputs` / `recordOutputs`
+ * both default `false`), so nothing sensitive is recorded without opt-in.
+ */
+type BraintrustSpan,
+/**
+ * `@lunora/agent/telemetry` — observability integrations for `@lunora/agent`.
+ *
+ * Every export here produces an ai@7 `Telemetry` object suitable for the
+ * `integrations` array of `TelemetryOptions` (`defineAgent({ telemetry: {
+ * isEnabled: true, integrations: [...] } })`). `consoleTelemetry` is a
+ * zero-dependency structured console tracer; `combineTelemetry` fans the
+ * lifecycle out to several integrations and nests their execution wrappers;
+ * `sentryTelemetry` / `braintrustTelemetry` are dependency-injected bridges (the
+ * app passes its own Sentry namespace / Braintrust logger, so the heavy SDKs are
+ * never imported here); and `otlpTelemetry` ships `gen_ai.*` spans over
+ * OTLP-over-HTTP to any collector (the Lunora Cloud, or your own), so agent
+ * generations land in the same trace store as the rest of the app.
+ *
+ * All integrations are privacy-safe by default (`recordInputs` / `recordOutputs`
+ * both default `false`), so nothing sensitive is recorded without opt-in.
+ */
+type BraintrustTelemetryOptions, type CommonOptions, type ConsoleLogLevel, type ConsoleLogger, type ConsoleTelemetryOptions, type OtlpTelemetryOptions, type SentryLike, type SentryTelemetryOptions, braintrustTelemetry, combineTelemetry, consoleTelemetry, otlpTelemetry, sentryTelemetry };

package/dist/telemetry/index.mjs

@@ -1,4 +1 @@
-export { braintrustTelemetry } from '../packem_shared/braintrustTelemetry-wuGDErob.mjs';
-export { combineTelemetry } from '../packem_shared/combineTelemetry-DCyaaWAI.mjs';
-export { consoleTelemetry } from '../packem_shared/consoleTelemetry-z2MiP1jt.mjs';
-export { sentryTelemetry } from '../packem_shared/sentryTelemetry-CgqFJyLO.mjs';
+import{braintrustTelemetry as o}from"../packem_shared/braintrustTelemetry-CoYK-pq7.mjs";import{combineTelemetry as m}from"../packem_shared/combineTelemetry-DgE9W9G8.mjs";import{consoleTelemetry as p}from"../packem_shared/consoleTelemetry-BZY3Y-Ly.mjs";import{otlpTelemetry as f}from"../packem_shared/otlpTelemetry-yAjOjxn0.mjs";import{sentryTelemetry as T}from"../packem_shared/sentryTelemetry-CPqEbFPA.mjs";export{o as braintrustTelemetry,m as combineTelemetry,p as consoleTelemetry,f as otlpTelemetry,T as sentryTelemetry};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/agent",
-  "version": "1.0.0-alpha.6",
+  "version": "1.0.0-alpha.61",
   "description": "Durable AI agents for Lunora: defineAgent compiles a replay-safe tool-loop onto Cloudflare Workflows, with DO SQLite threads and live message subscriptions",
   "keywords": [
     "agent",
@@ -62,6 +62,14 @@
       "types": "./dist/naming.d.ts",
       "import": "./dist/naming.mjs"
     },
+    "./skill-markdown": {
+      "types": "./dist/skill-markdown.d.ts",
+      "import": "./dist/skill-markdown.mjs"
+    },
+    "./reply": {
+      "types": "./dist/reply.d.ts",
+      "import": "./dist/reply.mjs"
+    },
     "./sandbox": {
       "types": "./dist/sandbox.d.ts",
       "import": "./dist/sandbox.mjs"
@@ -76,14 +84,15 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/ai": "1.0.0-alpha.17",
-    "@lunora/errors": "1.0.0-alpha.6",
-    "@lunora/mail": "1.0.0-alpha.16",
-    "@lunora/server": "1.0.0-alpha.29",
-    "@lunora/values": "1.0.0-alpha.9",
-    "@lunora/workflow": "1.0.0-alpha.11",
-    "@modelcontextprotocol/sdk": "^1.29.0",
-    "ai": "7.0.31"
+    "@lunora/ai": "1.0.0-alpha.60",
+    "@lunora/errors": "1.0.0-alpha.22",
+    "@lunora/mail": "1.0.0-alpha.51",
+    "@lunora/server": "1.0.0-alpha.80",
+    "@lunora/values": "1.0.0-alpha.27",
+    "@lunora/workflow": "1.0.0-alpha.31",
+    "@modelcontextprotocol/sdk": "^1.30.0",
+    "ai": "7.0.59",
+    "yaml": "^2.9.0"
   },
   "engines": {
     "node": "^22.15.0 || >=24.11.0"

package/dist/packem_shared/AGENT_MODULE-Dnt_-AAT.mjs

@@ -1,24 +0,0 @@
-const AGENT_MODULE = "agents";
-const SANDBOX_MODULE = "sandbox";
-const SANDBOX_INVOKE_PATH = `${SANDBOX_MODULE}:invoke`;
-const DEFAULT_AGENT_FUNCTION_PATHS = {
-  appendMessage: `${AGENT_MODULE}:agentAppendMessage`,
-  ensureThread: `${AGENT_MODULE}:agentEnsureThread`,
-  episodeRecall: `${AGENT_MODULE}:agentEpisodeRecall`,
-  episodeUpsert: `${AGENT_MODULE}:agentEpisodeUpsert`,
-  graphTraverse: `${AGENT_MODULE}:agentGraphTraverse`,
-  graphUpsert: `${AGENT_MODULE}:agentGraphUpsert`,
-  listMessages: `${AGENT_MODULE}:agentMessages`,
-  patchThread: `${AGENT_MODULE}:agentPatchThread`,
-  run: `${AGENT_MODULE}:agentRun`,
-  setState: `${AGENT_MODULE}:agentSetState`,
-  state: `${AGENT_MODULE}:agentState`
-};
-const toFunctionReference = (source) => {
-  if (typeof source === "string") {
-    return { __lunoraRef: source };
-  }
-  return source;
-};
-
-export { AGENT_MODULE, DEFAULT_AGENT_FUNCTION_PATHS, SANDBOX_INVOKE_PATH, SANDBOX_MODULE, toFunctionReference };