@narumitw/pi-langfuse 0.50.6 → 0.51.1

package/README.md

@@ -11,7 +11,8 @@ Export Pi agent runs, model generations, retries, tools, compaction, usage, and
 - Captures final tool inputs and outputs, progress timing, duration, failures, and structural compaction events.
 - Adds session, context, Git branch, commit, and aggregate counters as searchable metadata.
 - Supports metadata-only tracing when content capture is disabled.
-- Reads credentials only from a private local settings file and redacts them from exported data.
+- Keeps the default extension's credentials in a private local settings file and redacts them from exported data.
+- Supports multiple concurrent Pi sessions through one process-owned runtime without sharing session trace state.
 - Batches exports without delaying normal completion and isolates its OpenTelemetry provider from other extensions.
 
 ## 📦 Install
@@ -43,6 +44,76 @@ Review this extension and its data-export behavior before installing it.
 Run `/langfuse`, choose **Set up Langfuse for this Pi agent directory**, enter your credentials, and restart Pi.
 New agent runs are then traced with the saved content-capture and metadata settings.
 
+## 🧩 Host application embedding
+
+A host that manages multiple Pi sessions can share one process-level runtime and create one tracing controller for each session:
+
+```ts
+import { DefaultResourceLoader, createAgentSession } from "@earendil-works/pi-coding-agent";
+import {
+  createLangfuseRuntime,
+  createPiLangfuseSession,
+} from "@narumitw/pi-langfuse";
+
+const runtime = await createLangfuseRuntime({
+  config: { environment: "production" },
+  // publicKey, secretKey, baseUrl, and release may come from standard Langfuse env vars.
+});
+
+const tracing = createPiLangfuseSession(runtime, {
+  traceName: "support-agent",
+  sessionId: hostSessionId,
+  userId: accountId,
+  tags: ["support"],
+  metadata: { tenant: tenantId },
+  captureContent: false,
+  onTraceId: (traceId) => correlateTrace(hostSessionId, traceId),
+});
+
+const resourceLoader = new DefaultResourceLoader({
+  ...hostResourceOptions,
+  noExtensions: true, // Keep auto-discovered extensions out of this controlled host session.
+  extensionFactories: [{ name: "langfuse", factory: tracing.extension }],
+});
+await resourceLoader.reload();
+const { session } = await createAgentSession({
+  ...hostSessionOptions,
+  resourceLoader,
+});
+await session.bindExtensions({});
+
+tracing.setRequestId(incomingRequestId); // Applies to the next root trace only.
+await session.prompt(userPrompt);
+
+// When this session ends:
+await tracing.dispose();
+session.dispose();
+
+// Once, after every hosted session has been disposed:
+await runtime.shutdown();
+```
+
+Create the runtime once per process, create a separate controller per Pi `AgentSession`, and explicitly dispose the controller because `AgentSession.dispose()` does not emit Pi's `session_shutdown` event.
+The controller's extension factory may be reused when that session's resource loader reloads, but it must not be attached to another active `AgentSession`.
+Controller disposal ends only that session's open observations; it never flushes or shuts down the shared exporter.
+`runtime.shutdown()` rejects new work, disposes any remaining controllers, flushes, and shuts down the provider once.
+Both operations are idempotent.
+
+Do not also auto-load this package's default extension into a session that uses `tracing.extension`, or that session will be traced twice.
+One process supports one active Langfuse credential/endpoint combination; creating a conflicting runtime fails and requires a process restart rather than replacing the active provider.
+Restart the process before switching from a package version that uses an older runtime protocol so two providers cannot initialize concurrently.
+
+Host runtime fields resolve independently in this order: `config`, the supplied `env` object (or `process.env`), then defaults.
+The supported names are `LANGFUSE_PUBLIC_KEY`, `LANGFUSE_SECRET_KEY`, `LANGFUSE_BASE_URL`, `LANGFUSE_TRACING_ENVIRONMENT`, and `LANGFUSE_RELEASE`.
+Pass `env: false` to disable environment access.
+The default extension always uses its validated `pi-langfuse.json` with `env: false`, so its existing settings behavior does not change.
+
+`setRequestId()` snapshots `pi.request.id` when the next root trace starts; changing or clearing it never rewrites an active trace.
+`traceName` changes only the Langfuse trace name; schema-v2 observation names and hierarchy stay unchanged.
+`onTraceId` runs once after each root is created, including automatic-continuation roots, and callback errors are intentionally ignored so host code cannot corrupt tracing cleanup.
+Custom metadata is sanitized, bounded, and exported even when `captureContent` is `false`; package-owned `pi.*` fields cannot be overridden.
+Treat custom metadata, tags, session IDs, user IDs, request IDs, and trace names as exported data.
+
 ## ⚙️ Settings
 
 Run the interactive manager and choose **Set up Langfuse for this Pi agent directory** or **Update Langfuse for this Pi agent directory**:
@@ -156,6 +227,9 @@ The request snapshot is the payload visible to this handler, not a guaranteed fi
 A later extension can still replace it.
 Final assistant content is reconciled from `turn_end` and `agent_end` after message transformation.
 A recovered sequence such as `429 -> 200` remains queryable in HTTP metadata but is not an error; the final assistant outcome decides generation severity.
+A provider request becomes a `pi.llm` generation only when Pi emits an assistant lifecycle event.
+Cache-warming requests emit provider hooks without that lifecycle, so they are excluded instead of becoming orphaned or interrupted ordinary generations.
+Dedicated cache-warm observations are deferred until Pi exposes a deterministic request-kind and completion signal.
 
 ### Tool and compaction fields
 
@@ -224,9 +298,13 @@ Compaction summaries, tool partial results, opaque continuation signatures, auth
 ```text
 packages/pi-langfuse/
 ├── src/                               # Authoritative implementation and helpers
-│   ├── index.ts                       # Thin Pi entrypoint
-│   └── langfuse.ts                    # Tracing lifecycle and command
-├── dist/                              # Generated Jiti runtime
+│   ├── index.ts                       # Thin default and public entrypoint
+│   ├── langfuse.ts                    # Default settings and command adapter
+│   ├── pi-session.ts                  # Per-session Pi lifecycle controller
+│   ├── runtime-core.ts                # Process-runtime ownership
+│   ├── runtime.ts                     # Lazy production Langfuse runtime
+│   └── tracing.ts                     # Schema-v2 observation recorder
+├── dist/                              # Generated Node, declaration, and Jiti runtime
 ├── scripts/build-runtime.mjs          # Runtime builder
 └── test/                              # Behavior and lifecycle coverage
 ```

package/dist/chunks/chunk-DBQAWNKG.ts

@@ -0,0 +1,316 @@
+// @generated by scripts/build-runtime.mjs; do not edit.
+// @ts-nocheck -- the generated entry uses a .ts extension for Pi's Jiti loader.
+
+// src/config.ts
+import { randomUUID } from "node:crypto";
+import { chmod, mkdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { getAgentDir } from "@earendil-works/pi-coding-agent";
+var CONFIG_FILE_NAME = "pi-langfuse.json";
+var DEFAULT_BASE_URL = "https://us.cloud.langfuse.com";
+function langfuseConfigPath() {
+  return join(getAgentDir(), CONFIG_FILE_NAME);
+}
+var configSaveQueues = /* @__PURE__ */ new Map();
+function writeLangfuseConfig(patch, path = langfuseConfigPath()) {
+  const previous = configSaveQueues.get(path) ?? Promise.resolve();
+  const operation = previous.then(() => writeLangfuseConfigNow(patch, path));
+  const tail = operation.then(
+    () => void 0,
+    () => void 0
+  );
+  configSaveQueues.set(path, tail);
+  void tail.then(() => {
+    if (configSaveQueues.get(path) === tail) configSaveQueues.delete(path);
+  });
+  return operation;
+}
+async function writeLangfuseConfigNow(patch, path) {
+  const currentDocument = await readLangfuseDocumentForUpdate(path);
+  const normalized = normalizeLangfuseConfig({ ...currentDocument, ...patch });
+  if (!normalized.ok) throw new Error(normalized.reason);
+  const {
+    publicKey: _publicKey,
+    secretKey: _secretKey,
+    baseUrl: _baseUrl,
+    environment: _environment,
+    release: _release,
+    userId: _userId,
+    captureContent: _captureContent,
+    ...unknownFields
+  } = currentDocument;
+  const nextDocument = { ...unknownFields, ...normalized.config };
+  await mkdir(dirname(path), { recursive: true, mode: 448 });
+  const tempPath = `${path}.${process.pid}.${randomUUID()}.tmp`;
+  try {
+    await writeFile(tempPath, `${JSON.stringify(nextDocument, null, 2)}
+`, {
+      encoding: "utf8",
+      mode: 384
+    });
+    await chmod(tempPath, 384);
+    await rename(tempPath, path);
+    return normalized.config;
+  } catch (error) {
+    await rm(tempPath, { force: true }).catch(() => void 0);
+    throw error;
+  }
+}
+async function readLangfuseDocumentForUpdate(path) {
+  let parsed;
+  try {
+    parsed = JSON.parse(await readFile(path, "utf8"));
+  } catch (error) {
+    if (isNodeError(error) && error.code === "ENOENT") return {};
+    throw new Error(
+      `Cannot update ${CONFIG_FILE_NAME} because the existing file is malformed or unreadable; repair it first.`
+    );
+  }
+  const normalized = normalizeLangfuseConfig(parsed);
+  if (!normalized.ok) {
+    throw new Error(
+      `Cannot update ${CONFIG_FILE_NAME} because the existing file has invalid recognized fields; repair it first.`
+    );
+  }
+  return { ...parsed };
+}
+async function loadLangfuseConfig(path = langfuseConfigPath()) {
+  await configSaveQueues.get(path);
+  const warnings = [];
+  const permissionFailure = await ensurePrivatePermissions(path, warnings);
+  if (permissionFailure) {
+    return {
+      ok: false,
+      path,
+      warnings,
+      reason: `Refusing to load credentials: ${permissionFailure}`
+    };
+  }
+  let text;
+  try {
+    text = await readFile(path, "utf8");
+  } catch (error) {
+    if (isNodeError(error) && error.code === "ENOENT") {
+      return { ok: false, path, warnings, reason: `Configuration file not found: ${path}` };
+    }
+    return {
+      ok: false,
+      path,
+      warnings,
+      reason: `Failed to read ${path}: ${formatError(error)}`
+    };
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    return {
+      ok: false,
+      path,
+      warnings,
+      reason: `Failed to parse ${path} as JSON; repair the file before retrying.`
+    };
+  }
+  const normalized = normalizeLangfuseConfig(parsed);
+  if (!normalized.ok) return { ok: false, path, warnings, reason: normalized.reason };
+  return { ok: true, config: normalized.config, path, warnings };
+}
+function normalizeLangfuseConfig(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return { ok: false, reason: "pi-langfuse.json must contain a JSON object." };
+  }
+  const input = value;
+  const publicKey = normalizeString(input.publicKey);
+  const secretKey = normalizeString(input.secretKey);
+  if (!publicKey) {
+    return { ok: false, reason: "pi-langfuse.json requires a literal publicKey string." };
+  }
+  if (!secretKey) {
+    return { ok: false, reason: "pi-langfuse.json requires a literal secretKey string." };
+  }
+  if (isInterpolation(publicKey)) {
+    return {
+      ok: false,
+      reason: "pi-langfuse.json publicKey must be literal; environment and command interpolation are not supported."
+    };
+  }
+  if (isInterpolation(secretKey)) {
+    return {
+      ok: false,
+      reason: "pi-langfuse.json secretKey must be literal; environment and command interpolation are not supported."
+    };
+  }
+  const rawBaseUrl = input.baseUrl === void 0 ? DEFAULT_BASE_URL : normalizeString(input.baseUrl);
+  if (!rawBaseUrl) {
+    return { ok: false, reason: "pi-langfuse.json baseUrl must be a non-empty string." };
+  }
+  const baseUrl = normalizeBaseUrl(rawBaseUrl);
+  if (!baseUrl) {
+    return {
+      ok: false,
+      reason: "pi-langfuse.json baseUrl must use HTTP or HTTPS without credentials, a query, or a fragment."
+    };
+  }
+  if (input.captureContent !== void 0 && typeof input.captureContent !== "boolean") {
+    return { ok: false, reason: "pi-langfuse.json captureContent must be a boolean." };
+  }
+  const environment = optionalString(input.environment, "environment");
+  if (!environment.ok) return environment;
+  if (environment.value && (environment.value.length > 40 || !/^(?!langfuse)[a-z0-9_-]+$/u.test(environment.value))) {
+    return {
+      ok: false,
+      reason: "pi-langfuse.json environment must be at most 40 lowercase letters, numbers, hyphens, or underscores and must not start with langfuse."
+    };
+  }
+  const release = optionalString(input.release, "release");
+  if (!release.ok) return release;
+  const userId = optionalString(input.userId, "userId");
+  if (!userId.ok) return userId;
+  if (userId.value && userId.value.length > 200) {
+    return { ok: false, reason: "pi-langfuse.json userId must be at most 200 characters." };
+  }
+  return {
+    ok: true,
+    config: {
+      publicKey,
+      secretKey,
+      baseUrl,
+      ...environment.value ? { environment: environment.value } : {},
+      ...release.value ? { release: release.value } : {},
+      ...userId.value ? { userId: userId.value } : {},
+      captureContent: input.captureContent ?? true
+    }
+  };
+}
+async function ensurePrivatePermissions(path, warnings) {
+  try {
+    const file = await stat(path);
+    if ((file.mode & 511) !== 384) {
+      await chmod(path, 384);
+      const repaired = await stat(path);
+      if ((repaired.mode & 511) !== 384) {
+        throw new Error(`permissions remained ${(repaired.mode & 511).toString(8)}`);
+      }
+      warnings.push(`Restricted ${path} permissions to 0600.`);
+    }
+  } catch (error) {
+    if (isNodeError(error) && error.code === "ENOENT") return void 0;
+    const failure = `Failed to enforce 0600 permissions for ${path}: ${formatError(error)}`;
+    warnings.push(failure);
+    return failure;
+  }
+  return void 0;
+}
+function normalizeBaseUrl(value) {
+  try {
+    const url = new URL(value);
+    if (url.protocol !== "http:" && url.protocol !== "https:") return void 0;
+    if (url.username || url.password || url.search || url.hash) return void 0;
+    return url.toString().replace(/\/+$/, "");
+  } catch {
+    return void 0;
+  }
+}
+function optionalString(value, name) {
+  if (value === void 0) return { ok: true };
+  const normalized = normalizeString(value);
+  return normalized ? { ok: true, value: normalized } : { ok: false, reason: `pi-langfuse.json ${name} must be a non-empty string.` };
+}
+function normalizeString(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+function isInterpolation(value) {
+  return value.startsWith("$") || value.startsWith("!");
+}
+function isNodeError(error) {
+  return error instanceof Error && "code" in error;
+}
+function formatError(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+
+// src/runtime-core.ts
+var RUNTIME_INTERNAL_KEY = /* @__PURE__ */ Symbol.for("@narumitw/pi-langfuse/runtime-internal/v2");
+var ManagedLangfuseRuntime = class {
+  constructor(backend) {
+    this.backend = backend;
+  }
+  backend;
+  state = "open";
+  sessionDisposers = /* @__PURE__ */ new Set();
+  flushQueue = Promise.resolve();
+  shutdownPromise;
+  get closed() {
+    return this.state !== "open";
+  }
+  registerSession(disposer) {
+    if (this.state !== "open") throw new Error("Langfuse runtime is shutting down or already closed.");
+    this.sessionDisposers.add(disposer);
+    return () => this.sessionDisposers.delete(disposer);
+  }
+  flush() {
+    if (this.state !== "open") {
+      return Promise.reject(new Error("Langfuse runtime is shutting down or already closed."));
+    }
+    const operation = this.flushQueue.then(() => this.backend.forceFlush());
+    this.flushQueue = operation.then(
+      () => void 0,
+      () => void 0
+    );
+    return operation;
+  }
+  shutdown() {
+    if (this.shutdownPromise) return this.shutdownPromise;
+    this.state = "closing";
+    this.shutdownPromise = this.shutdownNow();
+    return this.shutdownPromise;
+  }
+  async shutdownNow() {
+    const errors = [];
+    for (const dispose of [...this.sessionDisposers]) {
+      try {
+        await dispose("Langfuse runtime shut down before the Pi session was disposed.");
+      } catch (error) {
+        errors.push(error);
+      }
+    }
+    this.sessionDisposers.clear();
+    await this.flushQueue;
+    try {
+      await this.backend.forceFlush();
+    } catch (error) {
+      errors.push(error);
+    }
+    try {
+      await this.backend.shutdown();
+    } catch (error) {
+      errors.push(error);
+    } finally {
+      this.state = "closed";
+    }
+    if (errors.length === 1) throw errors[0];
+    if (errors.length > 1) throw new AggregateError(errors, "Langfuse runtime shutdown failed.");
+  }
+};
+function getLangfuseRuntimeInternal(runtime) {
+  const internal = runtime[RUNTIME_INTERNAL_KEY];
+  if (!internal) throw new Error("Langfuse runtime was not created by @narumitw/pi-langfuse.");
+  return internal;
+}
+function createLangfuseRuntimeFromBackend(backend) {
+  return registerLangfuseRuntime(new ManagedLangfuseRuntime(backend));
+}
+function registerLangfuseRuntime(runtime) {
+  Object.defineProperty(runtime, RUNTIME_INTERNAL_KEY, { value: runtime });
+  return runtime;
+}
+
+export {
+  DEFAULT_BASE_URL,
+  writeLangfuseConfig,
+  loadLangfuseConfig,
+  normalizeLangfuseConfig,
+  getLangfuseRuntimeInternal,
+  createLangfuseRuntimeFromBackend
+};
+//# sourceMappingURL=chunk-DBQAWNKG.ts.map

package/dist/chunks/chunk-DBQAWNKG.ts.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/config.ts", "../../src/runtime-core.ts"],
+  "sourcesContent": ["import { randomUUID } from \"node:crypto\";\nimport { chmod, mkdir, readFile, rename, rm, stat, writeFile } from \"node:fs/promises\";\nimport { dirname, join } from \"node:path\";\nimport { getAgentDir } from \"@earendil-works/pi-coding-agent\";\n\nconst CONFIG_FILE_NAME = \"pi-langfuse.json\";\nexport const DEFAULT_BASE_URL = \"https://us.cloud.langfuse.com\";\n\nexport interface LangfuseConfig {\n  publicKey: string;\n  secretKey: string;\n  baseUrl: string;\n  environment?: string;\n  release?: string;\n  userId?: string;\n  captureContent: boolean;\n}\n\nexport type LangfuseConfigPatch = Partial<LangfuseConfig>;\n\nexport type LangfuseConfigResult =\n  | { ok: true; config: LangfuseConfig; path: string; warnings: string[] }\n  | { ok: false; path: string; warnings: string[]; reason: string };\n\nexport function langfuseConfigPath(): string {\n  return join(getAgentDir(), CONFIG_FILE_NAME);\n}\n\nconst configSaveQueues = new Map<string, Promise<void>>();\n\nexport async function waitForLangfuseConfigWrites(path = langfuseConfigPath()): Promise<void> {\n  await configSaveQueues.get(path);\n}\n\nexport function writeLangfuseConfig(patch: LangfuseConfigPatch, path = langfuseConfigPath()): Promise<LangfuseConfig> {\n  const previous = configSaveQueues.get(path) ?? Promise.resolve();\n  const operation = previous.then(() => writeLangfuseConfigNow(patch, path));\n  const tail = operation.then(\n    () => undefined,\n    () => undefined,\n  );\n  configSaveQueues.set(path, tail);\n  void tail.then(() => {\n    if (configSaveQueues.get(path) === tail) configSaveQueues.delete(path);\n  });\n  return operation;\n}\n\nasync function writeLangfuseConfigNow(patch: LangfuseConfigPatch, path: string): Promise<LangfuseConfig> {\n  const currentDocument = await readLangfuseDocumentForUpdate(path);\n  const normalized = normalizeLangfuseConfig({ ...currentDocument, ...patch });\n  if (!normalized.ok) throw new Error(normalized.reason);\n  const {\n    publicKey: _publicKey,\n    secretKey: _secretKey,\n    baseUrl: _baseUrl,\n    environment: _environment,\n    release: _release,\n    userId: _userId,\n    captureContent: _captureContent,\n    ...unknownFields\n  } = currentDocument;\n  const nextDocument = { ...unknownFields, ...normalized.config };\n\n  await mkdir(dirname(path), { recursive: true, mode: 0o700 });\n  const tempPath = `${path}.${process.pid}.${randomUUID()}.tmp`;\n  try {\n    await writeFile(tempPath, `${JSON.stringify(nextDocument, null, 2)}\\n`, {\n      encoding: \"utf8\",\n      mode: 0o600,\n    });\n    await chmod(tempPath, 0o600);\n    await rename(tempPath, path);\n    return normalized.config;\n  } catch (error) {\n    await rm(tempPath, { force: true }).catch(() => undefined);\n    throw error;\n  }\n}\n\nasync function readLangfuseDocumentForUpdate(path: string): Promise<Record<string, unknown>> {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(await readFile(path, \"utf8\")) as unknown;\n  } catch (error) {\n    if (isNodeError(error) && error.code === \"ENOENT\") return {};\n    throw new Error(\n      `Cannot update ${CONFIG_FILE_NAME} because the existing file is malformed or unreadable; repair it first.`,\n    );\n  }\n  const normalized = normalizeLangfuseConfig(parsed);\n  if (!normalized.ok) {\n    throw new Error(\n      `Cannot update ${CONFIG_FILE_NAME} because the existing file has invalid recognized fields; repair it first.`,\n    );\n  }\n  return { ...(parsed as Record<string, unknown>) };\n}\n\nexport async function loadLangfuseConfig(path = langfuseConfigPath()): Promise<LangfuseConfigResult> {\n  await configSaveQueues.get(path);\n  const warnings: string[] = [];\n  const permissionFailure = await ensurePrivatePermissions(path, warnings);\n  if (permissionFailure) {\n    return {\n      ok: false,\n      path,\n      warnings,\n      reason: `Refusing to load credentials: ${permissionFailure}`,\n    };\n  }\n\n  let text: string;\n  try {\n    text = await readFile(path, \"utf8\");\n  } catch (error) {\n    if (isNodeError(error) && error.code === \"ENOENT\") {\n      return { ok: false, path, warnings, reason: `Configuration file not found: ${path}` };\n    }\n    return {\n      ok: false,\n      path,\n      warnings,\n      reason: `Failed to read ${path}: ${formatError(error)}`,\n    };\n  }\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(text) as unknown;\n  } catch {\n    return {\n      ok: false,\n      path,\n      warnings,\n      reason: `Failed to parse ${path} as JSON; repair the file before retrying.`,\n    };\n  }\n\n  const normalized = normalizeLangfuseConfig(parsed);\n  if (!normalized.ok) return { ok: false, path, warnings, reason: normalized.reason };\n  return { ok: true, config: normalized.config, path, warnings };\n}\n\nexport function normalizeLangfuseConfig(\n  value: unknown,\n): { ok: true; config: LangfuseConfig } | { ok: false; reason: string } {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    return { ok: false, reason: \"pi-langfuse.json must contain a JSON object.\" };\n  }\n  const input = value as Record<string, unknown>;\n  const publicKey = normalizeString(input.publicKey);\n  const secretKey = normalizeString(input.secretKey);\n  if (!publicKey) {\n    return { ok: false, reason: \"pi-langfuse.json requires a literal publicKey string.\" };\n  }\n  if (!secretKey) {\n    return { ok: false, reason: \"pi-langfuse.json requires a literal secretKey string.\" };\n  }\n  if (isInterpolation(publicKey)) {\n    return {\n      ok: false,\n      reason: \"pi-langfuse.json publicKey must be literal; environment and command interpolation are not supported.\",\n    };\n  }\n  if (isInterpolation(secretKey)) {\n    return {\n      ok: false,\n      reason: \"pi-langfuse.json secretKey must be literal; environment and command interpolation are not supported.\",\n    };\n  }\n\n  const rawBaseUrl = input.baseUrl === undefined ? DEFAULT_BASE_URL : normalizeString(input.baseUrl);\n  if (!rawBaseUrl) {\n    return { ok: false, reason: \"pi-langfuse.json baseUrl must be a non-empty string.\" };\n  }\n  const baseUrl = normalizeBaseUrl(rawBaseUrl);\n  if (!baseUrl) {\n    return {\n      ok: false,\n      reason: \"pi-langfuse.json baseUrl must use HTTP or HTTPS without credentials, a query, or a fragment.\",\n    };\n  }\n\n  if (input.captureContent !== undefined && typeof input.captureContent !== \"boolean\") {\n    return { ok: false, reason: \"pi-langfuse.json captureContent must be a boolean.\" };\n  }\n  const environment = optionalString(input.environment, \"environment\");\n  if (!environment.ok) return environment;\n  if (environment.value && (environment.value.length > 40 || !/^(?!langfuse)[a-z0-9_-]+$/u.test(environment.value))) {\n    return {\n      ok: false,\n      reason:\n        \"pi-langfuse.json environment must be at most 40 lowercase letters, numbers, hyphens, or underscores and must not start with langfuse.\",\n    };\n  }\n  const release = optionalString(input.release, \"release\");\n  if (!release.ok) return release;\n  const userId = optionalString(input.userId, \"userId\");\n  if (!userId.ok) return userId;\n  if (userId.value && userId.value.length > 200) {\n    return { ok: false, reason: \"pi-langfuse.json userId must be at most 200 characters.\" };\n  }\n\n  return {\n    ok: true,\n    config: {\n      publicKey,\n      secretKey,\n      baseUrl,\n      ...(environment.value ? { environment: environment.value } : {}),\n      ...(release.value ? { release: release.value } : {}),\n      ...(userId.value ? { userId: userId.value } : {}),\n      captureContent: input.captureContent ?? true,\n    },\n  };\n}\n\nasync function ensurePrivatePermissions(path: string, warnings: string[]): Promise<string | undefined> {\n  try {\n    const file = await stat(path);\n    if ((file.mode & 0o777) !== 0o600) {\n      await chmod(path, 0o600);\n      const repaired = await stat(path);\n      if ((repaired.mode & 0o777) !== 0o600) {\n        throw new Error(`permissions remained ${(repaired.mode & 0o777).toString(8)}`);\n      }\n      warnings.push(`Restricted ${path} permissions to 0600.`);\n    }\n  } catch (error) {\n    if (isNodeError(error) && error.code === \"ENOENT\") return undefined;\n    const failure = `Failed to enforce 0600 permissions for ${path}: ${formatError(error)}`;\n    warnings.push(failure);\n    return failure;\n  }\n  return undefined;\n}\n\nfunction normalizeBaseUrl(value: string): string | undefined {\n  try {\n    const url = new URL(value);\n    if (url.protocol !== \"http:\" && url.protocol !== \"https:\") return undefined;\n    if (url.username || url.password || url.search || url.hash) return undefined;\n    return url.toString().replace(/\\/+$/, \"\");\n  } catch {\n    return undefined;\n  }\n}\n\nfunction optionalString(value: unknown, name: string): { ok: true; value?: string } | { ok: false; reason: string } {\n  if (value === undefined) return { ok: true };\n  const normalized = normalizeString(value);\n  return normalized\n    ? { ok: true, value: normalized }\n    : { ok: false, reason: `pi-langfuse.json ${name} must be a non-empty string.` };\n}\n\nfunction normalizeString(value: unknown): string | undefined {\n  return typeof value === \"string\" && value.trim() ? value.trim() : undefined;\n}\n\nfunction isInterpolation(value: string): boolean {\n  return value.startsWith(\"$\") || value.startsWith(\"!\");\n}\n\nfunction isNodeError(error: unknown): error is NodeJS.ErrnoException {\n  return error instanceof Error && \"code\" in error;\n}\n\nfunction formatError(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n", "import type { TraceBackend } from \"./tracing.js\";\n\nexport interface LangfuseRuntimeConfig {\n  publicKey?: string;\n  secretKey?: string;\n  baseUrl?: string;\n  environment?: string;\n  release?: string;\n}\n\nexport interface CreateLangfuseRuntimeOptions {\n  config?: LangfuseRuntimeConfig;\n  env?: NodeJS.ProcessEnv | false;\n}\n\nexport interface LangfuseRuntime {\n  readonly closed: boolean;\n  flush(): Promise<void>;\n  shutdown(): Promise<void>;\n}\n\ntype RuntimeSessionDisposer = (statusMessage: string) => void | Promise<void>;\n\nexport interface LangfuseRuntimeInternal extends LangfuseRuntime {\n  readonly backend: TraceBackend;\n  registerSession(disposer: RuntimeSessionDisposer): () => void;\n}\n\nconst RUNTIME_INTERNAL_KEY = Symbol.for(\"@narumitw/pi-langfuse/runtime-internal/v2\");\n\nclass ManagedLangfuseRuntime implements LangfuseRuntimeInternal {\n  private state: \"open\" | \"closing\" | \"closed\" = \"open\";\n  private readonly sessionDisposers = new Set<RuntimeSessionDisposer>();\n  private flushQueue = Promise.resolve();\n  private shutdownPromise: Promise<void> | undefined;\n\n  constructor(readonly backend: TraceBackend) {}\n\n  get closed(): boolean {\n    return this.state !== \"open\";\n  }\n\n  registerSession(disposer: RuntimeSessionDisposer): () => void {\n    if (this.state !== \"open\") throw new Error(\"Langfuse runtime is shutting down or already closed.\");\n    this.sessionDisposers.add(disposer);\n    return () => this.sessionDisposers.delete(disposer);\n  }\n\n  flush(): Promise<void> {\n    if (this.state !== \"open\") {\n      return Promise.reject(new Error(\"Langfuse runtime is shutting down or already closed.\"));\n    }\n    const operation = this.flushQueue.then(() => this.backend.forceFlush());\n    this.flushQueue = operation.then(\n      () => undefined,\n      () => undefined,\n    );\n    return operation;\n  }\n\n  shutdown(): Promise<void> {\n    if (this.shutdownPromise) return this.shutdownPromise;\n    this.state = \"closing\";\n    this.shutdownPromise = this.shutdownNow();\n    return this.shutdownPromise;\n  }\n\n  private async shutdownNow(): Promise<void> {\n    const errors: unknown[] = [];\n    for (const dispose of [...this.sessionDisposers]) {\n      try {\n        await dispose(\"Langfuse runtime shut down before the Pi session was disposed.\");\n      } catch (error) {\n        errors.push(error);\n      }\n    }\n    this.sessionDisposers.clear();\n\n    await this.flushQueue;\n    try {\n      await this.backend.forceFlush();\n    } catch (error) {\n      errors.push(error);\n    }\n    try {\n      await this.backend.shutdown();\n    } catch (error) {\n      errors.push(error);\n    } finally {\n      this.state = \"closed\";\n    }\n\n    if (errors.length === 1) throw errors[0];\n    if (errors.length > 1) throw new AggregateError(errors, \"Langfuse runtime shutdown failed.\");\n  }\n}\n\nexport function getLangfuseRuntimeInternal(runtime: LangfuseRuntime): LangfuseRuntimeInternal {\n  const internal = (runtime as LangfuseRuntime & { [key: symbol]: LangfuseRuntimeInternal | undefined })[\n    RUNTIME_INTERNAL_KEY\n  ];\n  if (!internal) throw new Error(\"Langfuse runtime was not created by @narumitw/pi-langfuse.\");\n  return internal;\n}\n\nexport function createLangfuseRuntimeFromBackend(backend: TraceBackend): LangfuseRuntime {\n  return registerLangfuseRuntime(new ManagedLangfuseRuntime(backend));\n}\n\nexport function registerLangfuseRuntime(runtime: LangfuseRuntimeInternal): LangfuseRuntimeInternal {\n  Object.defineProperty(runtime, RUNTIME_INTERNAL_KEY, { value: runtime });\n  return runtime;\n}\n"],
+  "mappings": ";;;;AAAA,SAAS,kBAAkB;AAC3B,SAAS,OAAO,OAAO,UAAU,QAAQ,IAAI,MAAM,iBAAiB;AACpE,SAAS,SAAS,YAAY;AAC9B,SAAS,mBAAmB;AAE5B,IAAM,mBAAmB;AAClB,IAAM,mBAAmB;AAkBzB,SAAS,qBAA6B;AAC3C,SAAO,KAAK,YAAY,GAAG,gBAAgB;AAC7C;AAEA,IAAM,mBAAmB,oBAAI,IAA2B;AAMjD,SAAS,oBAAoB,OAA4B,OAAO,mBAAmB,GAA4B;AACpH,QAAM,WAAW,iBAAiB,IAAI,IAAI,KAAK,QAAQ,QAAQ;AAC/D,QAAM,YAAY,SAAS,KAAK,MAAM,uBAAuB,OAAO,IAAI,CAAC;AACzE,QAAM,OAAO,UAAU;AAAA,IACrB,MAAM;AAAA,IACN,MAAM;AAAA,EACR;AACA,mBAAiB,IAAI,MAAM,IAAI;AAC/B,OAAK,KAAK,KAAK,MAAM;AACnB,QAAI,iBAAiB,IAAI,IAAI,MAAM,KAAM,kBAAiB,OAAO,IAAI;AAAA,EACvE,CAAC;AACD,SAAO;AACT;AAEA,eAAe,uBAAuB,OAA4B,MAAuC;AACvG,QAAM,kBAAkB,MAAM,8BAA8B,IAAI;AAChE,QAAM,aAAa,wBAAwB,EAAE,GAAG,iBAAiB,GAAG,MAAM,CAAC;AAC3E,MAAI,CAAC,WAAW,GAAI,OAAM,IAAI,MAAM,WAAW,MAAM;AACrD,QAAM;AAAA,IACJ,WAAW;AAAA,IACX,WAAW;AAAA,IACX,SAAS;AAAA,IACT,aAAa;AAAA,IACb,SAAS;AAAA,IACT,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,GAAG;AAAA,EACL,IAAI;AACJ,QAAM,eAAe,EAAE,GAAG,eAAe,GAAG,WAAW,OAAO;AAE9D,QAAM,MAAM,QAAQ,IAAI,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC3D,QAAM,WAAW,GAAG,IAAI,IAAI,QAAQ,GAAG,IAAI,WAAW,CAAC;AACvD,MAAI;AACF,UAAM,UAAU,UAAU,GAAG,KAAK,UAAU,cAAc,MAAM,CAAC,CAAC;AAAA,GAAM;AAAA,MACtE,UAAU;AAAA,MACV,MAAM;AAAA,IACR,CAAC;AACD,UAAM,MAAM,UAAU,GAAK;AAC3B,UAAM,OAAO,UAAU,IAAI;AAC3B,WAAO,WAAW;AAAA,EACpB,SAAS,OAAO;AACd,UAAM,GAAG,UAAU,EAAE,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM,MAAS;AACzD,UAAM;AAAA,EACR;AACF;AAEA,eAAe,8BAA8B,MAAgD;AAC3F,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,MAAM,SAAS,MAAM,MAAM,CAAC;AAAA,EAClD,SAAS,OAAO;AACd,QAAI,YAAY,KAAK,KAAK,MAAM,SAAS,SAAU,QAAO,CAAC;AAC3D,UAAM,IAAI;AAAA,MACR,iBAAiB,gBAAgB;AAAA,IACnC;AAAA,EACF;AACA,QAAM,aAAa,wBAAwB,MAAM;AACjD,MAAI,CAAC,WAAW,IAAI;AAClB,UAAM,IAAI;AAAA,MACR,iBAAiB,gBAAgB;AAAA,IACnC;AAAA,EACF;AACA,SAAO,EAAE,GAAI,OAAmC;AAClD;AAEA,eAAsB,mBAAmB,OAAO,mBAAmB,GAAkC;AACnG,QAAM,iBAAiB,IAAI,IAAI;AAC/B,QAAM,WAAqB,CAAC;AAC5B,QAAM,oBAAoB,MAAM,yBAAyB,MAAM,QAAQ;AACvE,MAAI,mBAAmB;AACrB,WAAO;AAAA,MACL,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA,QAAQ,iCAAiC,iBAAiB;AAAA,IAC5D;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,SAAS,MAAM,MAAM;AAAA,EACpC,SAAS,OAAO;AACd,QAAI,YAAY,KAAK,KAAK,MAAM,SAAS,UAAU;AACjD,aAAO,EAAE,IAAI,OAAO,MAAM,UAAU,QAAQ,iCAAiC,IAAI,GAAG;AAAA,IACtF;AACA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA,QAAQ,kBAAkB,IAAI,KAAK,YAAY,KAAK,CAAC;AAAA,IACvD;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,IAAI;AAAA,EAC1B,QAAQ;AACN,WAAO;AAAA,MACL,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,MACA,QAAQ,mBAAmB,IAAI;AAAA,IACjC;AAAA,EACF;AAEA,QAAM,aAAa,wBAAwB,MAAM;AACjD,MAAI,CAAC,WAAW,GAAI,QAAO,EAAE,IAAI,OAAO,MAAM,UAAU,QAAQ,WAAW,OAAO;AAClF,SAAO,EAAE,IAAI,MAAM,QAAQ,WAAW,QAAQ,MAAM,SAAS;AAC/D;AAEO,SAAS,wBACd,OACsE;AACtE,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AAC/D,WAAO,EAAE,IAAI,OAAO,QAAQ,+CAA+C;AAAA,EAC7E;AACA,QAAM,QAAQ;AACd,QAAM,YAAY,gBAAgB,MAAM,SAAS;AACjD,QAAM,YAAY,gBAAgB,MAAM,SAAS;AACjD,MAAI,CAAC,WAAW;AACd,WAAO,EAAE,IAAI,OAAO,QAAQ,wDAAwD;AAAA,EACtF;AACA,MAAI,CAAC,WAAW;AACd,WAAO,EAAE,IAAI,OAAO,QAAQ,wDAAwD;AAAA,EACtF;AACA,MAAI,gBAAgB,SAAS,GAAG;AAC9B,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ;AAAA,IACV;AAAA,EACF;AACA,MAAI,gBAAgB,SAAS,GAAG;AAC9B,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,QAAM,aAAa,MAAM,YAAY,SAAY,mBAAmB,gBAAgB,MAAM,OAAO;AACjG,MAAI,CAAC,YAAY;AACf,WAAO,EAAE,IAAI,OAAO,QAAQ,uDAAuD;AAAA,EACrF;AACA,QAAM,UAAU,iBAAiB,UAAU;AAC3C,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,MAAI,MAAM,mBAAmB,UAAa,OAAO,MAAM,mBAAmB,WAAW;AACnF,WAAO,EAAE,IAAI,OAAO,QAAQ,qDAAqD;AAAA,EACnF;AACA,QAAM,cAAc,eAAe,MAAM,aAAa,aAAa;AACnE,MAAI,CAAC,YAAY,GAAI,QAAO;AAC5B,MAAI,YAAY,UAAU,YAAY,MAAM,SAAS,MAAM,CAAC,6BAA6B,KAAK,YAAY,KAAK,IAAI;AACjH,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QACE;AAAA,IACJ;AAAA,EACF;AACA,QAAM,UAAU,eAAe,MAAM,SAAS,SAAS;AACvD,MAAI,CAAC,QAAQ,GAAI,QAAO;AACxB,QAAM,SAAS,eAAe,MAAM,QAAQ,QAAQ;AACpD,MAAI,CAAC,OAAO,GAAI,QAAO;AACvB,MAAI,OAAO,SAAS,OAAO,MAAM,SAAS,KAAK;AAC7C,WAAO,EAAE,IAAI,OAAO,QAAQ,0DAA0D;AAAA,EACxF;AAEA,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAI,YAAY,QAAQ,EAAE,aAAa,YAAY,MAAM,IAAI,CAAC;AAAA,MAC9D,GAAI,QAAQ,QAAQ,EAAE,SAAS,QAAQ,MAAM,IAAI,CAAC;AAAA,MAClD,GAAI,OAAO,QAAQ,EAAE,QAAQ,OAAO,MAAM,IAAI,CAAC;AAAA,MAC/C,gBAAgB,MAAM,kBAAkB;AAAA,IAC1C;AAAA,EACF;AACF;AAEA,eAAe,yBAAyB,MAAc,UAAiD;AACrG,MAAI;AACF,UAAM,OAAO,MAAM,KAAK,IAAI;AAC5B,SAAK,KAAK,OAAO,SAAW,KAAO;AACjC,YAAM,MAAM,MAAM,GAAK;AACvB,YAAM,WAAW,MAAM,KAAK,IAAI;AAChC,WAAK,SAAS,OAAO,SAAW,KAAO;AACrC,cAAM,IAAI,MAAM,yBAAyB,SAAS,OAAO,KAAO,SAAS,CAAC,CAAC,EAAE;AAAA,MAC/E;AACA,eAAS,KAAK,cAAc,IAAI,uBAAuB;AAAA,IACzD;AAAA,EACF,SAAS,OAAO;AACd,QAAI,YAAY,KAAK,KAAK,MAAM,SAAS,SAAU,QAAO;AAC1D,UAAM,UAAU,0CAA0C,IAAI,KAAK,YAAY,KAAK,CAAC;AACrF,aAAS,KAAK,OAAO;AACrB,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,OAAmC;AAC3D,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,KAAK;AACzB,QAAI,IAAI,aAAa,WAAW,IAAI,aAAa,SAAU,QAAO;AAClE,QAAI,IAAI,YAAY,IAAI,YAAY,IAAI,UAAU,IAAI,KAAM,QAAO;AACnE,WAAO,IAAI,SAAS,EAAE,QAAQ,QAAQ,EAAE;AAAA,EAC1C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,eAAe,OAAgB,MAA4E;AAClH,MAAI,UAAU,OAAW,QAAO,EAAE,IAAI,KAAK;AAC3C,QAAM,aAAa,gBAAgB,KAAK;AACxC,SAAO,aACH,EAAE,IAAI,MAAM,OAAO,WAAW,IAC9B,EAAE,IAAI,OAAO,QAAQ,oBAAoB,IAAI,+BAA+B;AAClF;AAEA,SAAS,gBAAgB,OAAoC;AAC3D,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,IAAI,MAAM,KAAK,IAAI;AACpE;AAEA,SAAS,gBAAgB,OAAwB;AAC/C,SAAO,MAAM,WAAW,GAAG,KAAK,MAAM,WAAW,GAAG;AACtD;AAEA,SAAS,YAAY,OAAgD;AACnE,SAAO,iBAAiB,SAAS,UAAU;AAC7C;AAEA,SAAS,YAAY,OAAwB;AAC3C,SAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC9D;;;ACnPA,IAAM,uBAAuB,uBAAO,IAAI,2CAA2C;AAEnF,IAAM,yBAAN,MAAgE;AAAA,EAM9D,YAAqB,SAAuB;AAAvB;AAAA,EAAwB;AAAA,EAAxB;AAAA,EALb,QAAuC;AAAA,EAC9B,mBAAmB,oBAAI,IAA4B;AAAA,EAC5D,aAAa,QAAQ,QAAQ;AAAA,EAC7B;AAAA,EAIR,IAAI,SAAkB;AACpB,WAAO,KAAK,UAAU;AAAA,EACxB;AAAA,EAEA,gBAAgB,UAA8C;AAC5D,QAAI,KAAK,UAAU,OAAQ,OAAM,IAAI,MAAM,sDAAsD;AACjG,SAAK,iBAAiB,IAAI,QAAQ;AAClC,WAAO,MAAM,KAAK,iBAAiB,OAAO,QAAQ;AAAA,EACpD;AAAA,EAEA,QAAuB;AACrB,QAAI,KAAK,UAAU,QAAQ;AACzB,aAAO,QAAQ,OAAO,IAAI,MAAM,sDAAsD,CAAC;AAAA,IACzF;AACA,UAAM,YAAY,KAAK,WAAW,KAAK,MAAM,KAAK,QAAQ,WAAW,CAAC;AACtE,SAAK,aAAa,UAAU;AAAA,MAC1B,MAAM;AAAA,MACN,MAAM;AAAA,IACR;AACA,WAAO;AAAA,EACT;AAAA,EAEA,WAA0B;AACxB,QAAI,KAAK,gBAAiB,QAAO,KAAK;AACtC,SAAK,QAAQ;AACb,SAAK,kBAAkB,KAAK,YAAY;AACxC,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAc,cAA6B;AACzC,UAAM,SAAoB,CAAC;AAC3B,eAAW,WAAW,CAAC,GAAG,KAAK,gBAAgB,GAAG;AAChD,UAAI;AACF,cAAM,QAAQ,gEAAgE;AAAA,MAChF,SAAS,OAAO;AACd,eAAO,KAAK,KAAK;AAAA,MACnB;AAAA,IACF;AACA,SAAK,iBAAiB,MAAM;AAE5B,UAAM,KAAK;AACX,QAAI;AACF,YAAM,KAAK,QAAQ,WAAW;AAAA,IAChC,SAAS,OAAO;AACd,aAAO,KAAK,KAAK;AAAA,IACnB;AACA,QAAI;AACF,YAAM,KAAK,QAAQ,SAAS;AAAA,IAC9B,SAAS,OAAO;AACd,aAAO,KAAK,KAAK;AAAA,IACnB,UAAE;AACA,WAAK,QAAQ;AAAA,IACf;AAEA,QAAI,OAAO,WAAW,EAAG,OAAM,OAAO,CAAC;AACvC,QAAI,OAAO,SAAS,EAAG,OAAM,IAAI,eAAe,QAAQ,mCAAmC;AAAA,EAC7F;AACF;AAEO,SAAS,2BAA2B,SAAmD;AAC5F,QAAM,WAAY,QAChB,oBACF;AACA,MAAI,CAAC,SAAU,OAAM,IAAI,MAAM,4DAA4D;AAC3F,SAAO;AACT;AAEO,SAAS,iCAAiC,SAAwC;AACvF,SAAO,wBAAwB,IAAI,uBAAuB,OAAO,CAAC;AACpE;AAEO,SAAS,wBAAwB,SAA2D;AACjG,SAAO,eAAe,SAAS,sBAAsB,EAAE,OAAO,QAAQ,CAAC;AACvE,SAAO;AACT;",
+  "names": []
+}