@raindrop-ai/opencode-plugin 0.0.11 → 0.0.13

package/dist/index.cjs

@@ -24,124 +24,7 @@ __export(index_exports, {
 });
 module.exports = __toCommonJS(index_exports);
 
-// src/config.ts
-var import_node_fs = require("fs");
-var import_node_os = require("os");
-var import_node_path = require("path");
-function loadConfig(projectDirectory) {
-  var _a, _b, _c, _d, _e, _f, _g;
-  let merged = {};
-  const configPaths = [
-    (0, import_node_path.join)((0, import_node_os.homedir)(), ".config", "opencode", "raindrop.json"),
-    (0, import_node_path.join)(projectDirectory, ".opencode", "raindrop.json")
-  ];
-  for (const configPath of configPaths) {
-    try {
-      if ((0, import_node_fs.existsSync)(configPath)) {
-        const content = (0, import_node_fs.readFileSync)(configPath, "utf-8");
-        const parsed = JSON.parse(content);
-        merged = { ...merged, ...parsed };
-      }
-    } catch (e) {
-    }
-  }
-  let eventMetadata;
-  const envMeta = process.env["RAINDROP_EVENT_METADATA"];
-  if (envMeta) {
-    try {
-      eventMetadata = JSON.parse(envMeta);
-    } catch (e) {
-    }
-  }
-  return {
-    writeKey: (_b = (_a = process.env["RAINDROP_WRITE_KEY"]) != null ? _a : merged.write_key) != null ? _b : "",
-    endpoint: (_d = (_c = process.env["RAINDROP_API_URL"]) != null ? _c : merged.api_url) != null ? _d : "https://api.raindrop.ai/v1",
-    eventName: (_e = merged.event_name) != null ? _e : "opencode_session",
-    debug: process.env["RAINDROP_DEBUG"] === "true" ? true : (_f = merged.debug) != null ? _f : false,
-    captureSystemPrompt: process.env["RAINDROP_CAPTURE_SYSTEM_PROMPT"] !== void 0 ? process.env["RAINDROP_CAPTURE_SYSTEM_PROMPT"] === "true" : (_g = merged.capture_system_prompt) != null ? _g : false,
-    eventMetadata
-  };
-}
-
-// package.json
-var package_default = {
-  name: "@raindrop-ai/opencode-plugin",
-  version: "0.0.11",
-  description: "Raindrop observability plugin for OpenCode \u2014 automatic session/event/span tracing",
-  type: "module",
-  main: "dist/index.js",
-  module: "dist/index.js",
-  types: "dist/index.d.ts",
-  license: "MIT",
-  repository: {
-    type: "git",
-    url: "git+https://github.com/raindrop-ai/raindrop-js.git",
-    directory: "packages/opencode-plugin"
-  },
-  homepage: "https://github.com/raindrop-ai/raindrop-js/tree/main/packages/opencode-plugin#readme",
-  bugs: {
-    url: "https://github.com/raindrop-ai/raindrop-js/issues"
-  },
-  exports: {
-    ".": {
-      types: "./dist/index.d.ts",
-      import: "./dist/index.js",
-      require: "./dist/index.cjs"
-    }
-  },
-  sideEffects: false,
-  files: [
-    "dist/**"
-  ],
-  scripts: {
-    build: "tsup",
-    dev: "tsup --watch",
-    clean: "rm -rf dist",
-    test: "cd tests && pnpm test"
-  },
-  peerDependencies: {
-    "@opencode-ai/plugin": ">=1.3.0",
-    "@opencode-ai/sdk": ">=1.3.0"
-  },
-  peerDependenciesMeta: {
-    "@opencode-ai/sdk": {
-      optional: true
-    }
-  },
-  devDependencies: {
-    "@raindrop-ai/core": "workspace:*",
-    "@opencode-ai/plugin": "^1.3.3",
-    "@opencode-ai/sdk": "^1.3.3",
-    "@types/node": "^20.11.17",
-    tsup: "^8.4.0",
-    typescript: "^5.3.3"
-  },
-  tsup: {
-    entry: [
-      "src/index.ts"
-    ],
-    format: [
-      "cjs",
-      "esm"
-    ],
-    dts: {
-      resolve: true
-    },
-    clean: true,
-    noExternal: [
-      "@raindrop-ai/core"
-    ]
-  },
-  publishConfig: {
-    access: "public"
-  }
-};
-
-// src/package-info.ts
-var PLUGIN_NAME = package_default.name;
-var PLUGIN_VERSION = package_default.version;
-
-// ../core/dist/chunk-4UCYIEH4.js
+// ../core/dist/chunk-U5HUTMR5.js
 function getCrypto() {
   const c = globalThis.crypto;
   return c;
@@ -188,6 +71,8 @@ function base64Encode(bytes) {
 function generateId() {
   return base64Encode(randomBytes(12)).replace(/[+/=]/g, "").slice(0, 16);
 }
+var DEFAULT_REQUEST_TIMEOUT_MS = 3e4;
+var MAX_RETRY_DELAY_MS = 3e4;
 function wait(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
@@ -195,6 +80,46 @@ function formatEndpoint(endpoint) {
   if (!endpoint) return void 0;
   return endpoint.endsWith("/") ? endpoint : `${endpoint}/`;
 }
+function redactUrlForLog(url) {
+  try {
+    const parsed = new URL(url);
+    parsed.username = "";
+    parsed.password = "";
+    parsed.search = "";
+    parsed.hash = "";
+    return parsed.toString();
+  } catch (e) {
+    return "<unparseable-url>";
+  }
+}
+var RATE_LIMITED_LOG_INTERVAL_MS = 3e4;
+var rateLimitedLogLast = /* @__PURE__ */ new Map();
+function rateLimitedLog(key, log) {
+  const now = Date.now();
+  const last = rateLimitedLogLast.get(key);
+  if (last !== void 0 && now - last < RATE_LIMITED_LOG_INTERVAL_MS) {
+    return false;
+  }
+  rateLimitedLogLast.set(key, now);
+  log();
+  return true;
+}
+async function raceWithTimeout(promise, timeoutMs) {
+  let timer;
+  const settledInTime = await Promise.race([
+    promise.then(
+      () => true,
+      () => true
+    ),
+    new Promise((resolve) => {
+      var _a;
+      timer = setTimeout(() => resolve(false), Math.max(0, timeoutMs));
+      (_a = timer.unref) == null ? void 0 : _a.call(timer);
+    })
+  ]);
+  if (timer) clearTimeout(timer);
+  return settledInTime;
+}
 function parseRetryAfter(headers) {
   var _a;
   const value = (_a = headers.get("Retry-After")) != null ? _a : headers.get("retry-after");
@@ -211,12 +136,12 @@ function parseRetryAfter(headers) {
 function getRetryDelayMs(attemptNumber, previousError) {
   if (previousError && typeof previousError === "object" && previousError !== null && "retryAfterMs" in previousError) {
     const v = previousError.retryAfterMs;
-    if (typeof v === "number") return Math.max(0, v);
+    if (typeof v === "number") return Math.min(Math.max(0, v), MAX_RETRY_DELAY_MS);
   }
   if (attemptNumber <= 1) return 0;
   const base = 500;
   const factor = Math.pow(2, attemptNumber - 2);
-  return base * factor;
+  return Math.min(base * factor, MAX_RETRY_DELAY_MS);
 }
 async function withRetry(operation, opName, opts) {
   const prefix = opts.sdkName ? `[raindrop-ai/${opts.sdkName}]` : "[raindrop-ai/core]";
@@ -251,7 +176,9 @@ async function withRetry(operation, opName, opts) {
   throw lastError instanceof Error ? lastError : new Error(String(lastError));
 }
 async function postJson(url, body, headers, opts) {
-  const opName = `POST ${url}`;
+  var _a;
+  const opName = `POST ${redactUrlForLog(url)}`;
+  const timeoutMs = (_a = opts.timeoutMs) != null ? _a : DEFAULT_REQUEST_TIMEOUT_MS;
   await withRetry(
     async () => {
       const resp = await fetch(url, {
@@ -260,7 +187,8 @@ async function postJson(url, body, headers, opts) {
           "Content-Type": "application/json",
           ...headers
         },
-        body: JSON.stringify(body)
+        body: JSON.stringify(body),
+        signal: AbortSignal.timeout(timeoutMs)
       });
       if (!resp.ok) {
         const text = await resp.text().catch(() => "");
@@ -277,6 +205,27 @@ async function postJson(url, body, headers, opts) {
     opts
   );
 }
+var DEFAULT_MAX_TEXT_FIELD_CHARS = 1e6;
+var TRUNCATION_MARKER = "...[truncated by raindrop]";
+var currentDefaultMaxTextFieldChars = DEFAULT_MAX_TEXT_FIELD_CHARS;
+function resolveMaxTextFieldChars(value) {
+  if (typeof value === "number" && Number.isFinite(value) && value > 0) {
+    return Math.floor(value);
+  }
+  return currentDefaultMaxTextFieldChars;
+}
+function truncateToLimit(text, limit) {
+  if (limit > TRUNCATION_MARKER.length) {
+    return text.slice(0, limit - TRUNCATION_MARKER.length) + TRUNCATION_MARKER;
+  }
+  return text.slice(0, Math.max(0, limit));
+}
+function capText(value, limit) {
+  if (typeof value !== "string") return value;
+  const max = limit != null ? limit : currentDefaultMaxTextFieldChars;
+  if (value.length <= max) return value;
+  return truncateToLimit(value, max);
+}
 var SpanStatusCode = {
   UNSET: 0,
   OK: 1,
@@ -334,6 +283,93 @@ function buildExportTraceServiceRequest(spans, serviceName = "raindrop.core", se
     ]
   };
 }
+var LOCAL_DEBUGGER_ENV_VAR = "RAINDROP_LOCAL_DEBUGGER";
+var WORKSHOP_ENV_VAR = "RAINDROP_WORKSHOP";
+var DEFAULT_LOCAL_WORKSHOP_URL = "http://localhost:5899/v1/";
+function readEnvVar(name) {
+  var _a;
+  try {
+    const env = (_a = globalThis == null ? void 0 : globalThis.process) == null ? void 0 : _a.env;
+    if (env && typeof env[name] === "string" && env[name].length > 0) {
+      return env[name];
+    }
+  } catch (e) {
+  }
+  return void 0;
+}
+function readWorkshopEnv() {
+  const raw = readEnvVar(WORKSHOP_ENV_VAR);
+  if (raw === void 0) return void 0;
+  const trimmed = raw.trim();
+  if (trimmed.length === 0) return void 0;
+  if (/^https?:\/\//i.test(trimmed)) return { url: trimmed };
+  if (/^(1|true|yes|on)$/i.test(trimmed)) return "enable";
+  if (/^(0|false|no|off)$/i.test(trimmed)) return "disable";
+  return void 0;
+}
+function isLocalDevHost(hostname) {
+  if (!hostname) return false;
+  if (hostname === "localhost" || hostname === "127.0.0.1" || hostname === "0.0.0.0" || hostname === "::1") {
+    return true;
+  }
+  if (hostname.endsWith(".localhost")) return true;
+  return false;
+}
+function readRuntimeHostname() {
+  try {
+    const loc = globalThis == null ? void 0 : globalThis.location;
+    if (loc && typeof loc.hostname === "string" && loc.hostname.length > 0) {
+      return loc.hostname;
+    }
+  } catch (e) {
+  }
+  return void 0;
+}
+function shouldAutoEnableLocalWorkshop() {
+  if (isLocalDevHost(readRuntimeHostname())) return true;
+  if (readEnvVar("NODE_ENV") === "development") return true;
+  return false;
+}
+function resolveLocalDebuggerBaseUrl(baseUrl) {
+  var _a, _b, _c;
+  if (baseUrl === null) return null;
+  if (typeof baseUrl === "string" && baseUrl.length > 0) {
+    return (_a = formatEndpoint(baseUrl)) != null ? _a : null;
+  }
+  const explicitUrlEnv = readEnvVar(LOCAL_DEBUGGER_ENV_VAR);
+  if (explicitUrlEnv) return (_b = formatEndpoint(explicitUrlEnv)) != null ? _b : null;
+  const workshopEnv = readWorkshopEnv();
+  if (workshopEnv === "disable") return null;
+  if (workshopEnv === "enable") return DEFAULT_LOCAL_WORKSHOP_URL;
+  if (workshopEnv && "url" in workshopEnv) return (_c = formatEndpoint(workshopEnv.url)) != null ? _c : null;
+  if (shouldAutoEnableLocalWorkshop()) return DEFAULT_LOCAL_WORKSHOP_URL;
+  return null;
+}
+function mirrorTraceExportToLocalDebugger(body, options = {}) {
+  var _a;
+  const baseUrl = resolveLocalDebuggerBaseUrl(options.baseUrl);
+  if (!baseUrl) return;
+  void postJson(`${baseUrl}traces`, body, {}, {
+    maxAttempts: 1,
+    debug: (_a = options.debug) != null ? _a : false,
+    sdkName: options.sdkName
+  }).catch(() => {
+  });
+}
+function mirrorPartialEventToLocalDebugger(event, options = {}) {
+  var _a;
+  const baseUrl = resolveLocalDebuggerBaseUrl(options.baseUrl);
+  if (!baseUrl) return;
+  const headers = options.writeKey ? { Authorization: `Bearer ${options.writeKey}` } : {};
+  void postJson(`${baseUrl}events/track_partial`, event, headers, {
+    maxAttempts: 1,
+    debug: (_a = options.debug) != null ? _a : false,
+    sdkName: options.sdkName
+  }).catch(() => {
+  });
+}
+var SHUTDOWN_DEADLINE_MS = 1e4;
+var POST_SHUTDOWN_TIMEOUT_MS = 5e3;
 function mergePatches(target, source) {
   var _a, _b, _c, _d;
   const out = { ...target, ...source };
@@ -351,7 +387,8 @@ var EventShipper = class {
     this.sticky = /* @__PURE__ */ new Map();
     this.timers = /* @__PURE__ */ new Map();
     this.inFlight = /* @__PURE__ */ new Set();
-    var _a, _b, _c, _d, _e, _f, _g;
+    this.hasShutdown = false;
+    var _a, _b, _c, _d, _e, _f, _g, _h;
     this.writeKey = (_a = opts.writeKey) == null ? void 0 : _a.trim();
     this.baseUrl = (_b = formatEndpoint(opts.endpoint)) != null ? _b : "https://api.raindrop.ai/v1/";
     this.enabled = opts.enabled !== false;
@@ -360,11 +397,16 @@ var EventShipper = class {
     this.sdkName = (_d = opts.sdkName) != null ? _d : "core";
     this.prefix = `[raindrop-ai/${this.sdkName}]`;
     this.defaultEventName = (_e = opts.defaultEventName) != null ? _e : "ai_generation";
+    this.maxTextFieldCharsOpt = opts.maxTextFieldChars;
+    this.localDebuggerUrl = (_f = resolveLocalDebuggerBaseUrl(opts.localDebuggerUrl)) != null ? _f : void 0;
+    if (this.debug && this.localDebuggerUrl) {
+      console.log(`${this.prefix} Local debugger mirroring: ${this.localDebuggerUrl}`);
+    }
     const isNode = typeof process !== "undefined" && typeof process.version === "string";
     this.context = {
       library: {
-        name: (_f = opts.libraryName) != null ? _f : "@raindrop-ai/core",
-        version: (_g = opts.libraryVersion) != null ? _g : "0.0.0"
+        name: (_g = opts.libraryName) != null ? _g : "@raindrop-ai/core",
+        version: (_h = opts.libraryVersion) != null ? _h : "0.0.0"
       },
       metadata: {
         jsRuntime: isNode ? "node" : "web",
@@ -378,10 +420,52 @@ var EventShipper = class {
   authHeaders() {
     return this.writeKey ? { Authorization: `Bearer ${this.writeKey}` } : {};
   }
+  /**
+   * Build the retry/timeout options for one POST, honoring the shutdown
+   * deadline. Returns `null` when the shutdown drain window is exhausted —
+   * the caller must drop the payload (with a rate-limited warning) instead
+   * of issuing a request that could outlive process exit.
+   *
+   * Checked fresh on EVERY send, so a shutdown that begins while the flush
+   * path is mid-drain takes effect immediately: no further retries, and the
+   * per-attempt timeout is clamped to the remaining window. After
+   * `shutdown()` returns (deadline cleared, `hasShutdown` still set),
+   * sends — late callers, or flush work the deadline abandoned mid-drain —
+   * run as a single short attempt rather than regaining the full retry
+   * schedule.
+   */
+  requestOpts() {
+    if (this.shutdownDeadlineAt !== void 0) {
+      const remainingMs = this.shutdownDeadlineAt - Date.now();
+      if (remainingMs <= 0) return null;
+      return {
+        maxAttempts: 1,
+        debug: this.debug,
+        sdkName: this.sdkName,
+        timeoutMs: Math.min(DEFAULT_REQUEST_TIMEOUT_MS, remainingMs)
+      };
+    }
+    if (this.hasShutdown) {
+      return {
+        maxAttempts: 1,
+        debug: this.debug,
+        sdkName: this.sdkName,
+        timeoutMs: POST_SHUTDOWN_TIMEOUT_MS
+      };
+    }
+    return { maxAttempts: 3, debug: this.debug, sdkName: this.sdkName };
+  }
   async patch(eventId, patch) {
     var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k;
     if (!this.enabled) return;
     if (!eventId || !eventId.trim()) return;
+    const maxChars = resolveMaxTextFieldChars(this.maxTextFieldCharsOpt);
+    if (typeof patch.input === "string" && patch.input.length > maxChars) {
+      patch = { ...patch, input: capText(patch.input, maxChars) };
+    }
+    if (typeof patch.output === "string" && patch.output.length > maxChars) {
+      patch = { ...patch, output: capText(patch.output, maxChars) };
+    }
     if (this.debug) {
       console.log(`${this.prefix} queue patch`, {
         eventId,
@@ -428,9 +512,16 @@ var EventShipper = class {
     })));
   }
   async shutdown() {
-    for (const t of this.timers.values()) clearTimeout(t);
-    this.timers.clear();
-    await this.flush();
+    this.hasShutdown = true;
+    this.shutdownDeadlineAt = Date.now() + SHUTDOWN_DEADLINE_MS;
+    try {
+      for (const t of this.timers.values()) clearTimeout(t);
+      this.timers.clear();
+      const settled = await raceWithTimeout(this.flush(), SHUTDOWN_DEADLINE_MS);
+      if (!settled) this.warnShutdownDrop("in-flight request(s) at shutdown");
+    } finally {
+      this.shutdownDeadlineAt = void 0;
+    }
   }
   async trackSignal(signal) {
     var _a, _b;
@@ -450,16 +541,21 @@ var EventShipper = class {
         }
       }
     ];
+    if (!this.writeKey) return;
     const url = `${this.baseUrl}signals/track`;
+    const opts = this.requestOpts();
+    if (!opts) {
+      this.warnShutdownDrop("signal");
+      return;
+    }
     try {
-      await postJson(url, body, this.authHeaders(), {
-        maxAttempts: 3,
-        debug: this.debug,
-        sdkName: this.sdkName
-      });
+      await postJson(url, body, this.authHeaders(), opts);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
-      console.warn(`${this.prefix} failed to send signal (dropping): ${msg}`);
+      rateLimitedLog(
+        `${this.prefix}.send_signal_failed`,
+        () => console.warn(`${this.prefix} failed to send signal (dropping): ${msg}`)
+      );
     }
   }
   async identify(users) {
@@ -480,19 +576,30 @@ var EventShipper = class {
         traits: (_a = user.traits) != null ? _a : {}
       };
     });
+    if (!this.writeKey) return;
     if (body.length === 0) return;
     const url = `${this.baseUrl}users/identify`;
+    const opts = this.requestOpts();
+    if (!opts) {
+      this.warnShutdownDrop("identify");
+      return;
+    }
     try {
-      await postJson(url, body, this.authHeaders(), {
-        maxAttempts: 3,
-        debug: this.debug,
-        sdkName: this.sdkName
-      });
+      await postJson(url, body, this.authHeaders(), opts);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
-      console.warn(`${this.prefix} failed to send identify (dropping): ${msg}`);
+      rateLimitedLog(
+        `${this.prefix}.send_identify_failed`,
+        () => console.warn(`${this.prefix} failed to send identify (dropping): ${msg}`)
+      );
     }
   }
+  warnShutdownDrop(what) {
+    rateLimitedLog(
+      `${this.prefix}.shutdown_deadline`,
+      () => console.warn(`${this.prefix} shutdown flush deadline exceeded; dropping ${what}`)
+    );
+  }
   async flushOne(eventId) {
     var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m;
     if (!this.enabled) return;
@@ -556,11 +663,25 @@ var EventShipper = class {
         endpoint: url
       });
     }
-    const p = postJson(url, payload, this.authHeaders(), {
-      maxAttempts: 3,
-      debug: this.debug,
-      sdkName: this.sdkName
-    });
+    if (this.localDebuggerUrl) {
+      mirrorPartialEventToLocalDebugger(payload, {
+        baseUrl: this.localDebuggerUrl,
+        writeKey: this.writeKey,
+        debug: this.debug,
+        sdkName: this.sdkName
+      });
+    }
+    if (!this.writeKey) {
+      if (!isPending) this.sticky.delete(eventId);
+      return;
+    }
+    const opts = this.requestOpts();
+    if (!opts) {
+      this.warnShutdownDrop(`track_partial ${eventId}`);
+      if (!isPending) this.sticky.delete(eventId);
+      return;
+    }
+    const p = postJson(url, payload, this.authHeaders(), opts);
     this.inFlight.add(p);
     try {
       try {
@@ -570,7 +691,10 @@ var EventShipper = class {
         }
       } catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
-        console.warn(`${this.prefix} failed to send track_partial (dropping): ${msg}`);
+        rateLimitedLog(
+          `${this.prefix}.send_track_partial_failed`,
+          () => console.warn(`${this.prefix} failed to send track_partial (dropping): ${msg}`)
+        );
       }
     } finally {
       this.inFlight.delete(p);
@@ -580,28 +704,114 @@ var EventShipper = class {
     }
   }
 };
-var LOCAL_DEBUGGER_ENV_VAR = "RAINDROP_LOCAL_DEBUGGER";
-function resolveLocalDebuggerBaseUrl(baseUrl) {
-  var _a, _b, _c;
-  const resolved = (_b = baseUrl != null ? baseUrl : typeof process !== "undefined" ? (_a = process.env) == null ? void 0 : _a[LOCAL_DEBUGGER_ENV_VAR] : void 0) != null ? _b : null;
-  return resolved ? (_c = formatEndpoint(resolved)) != null ? _c : null : null;
+var DEFAULT_SECRET_KEY_NAMES = [
+  "apikey",
+  "apisecret",
+  "apitoken",
+  "secretaccesskey",
+  "sessiontoken",
+  "privatekey",
+  "privatekeyid",
+  "clientsecret",
+  "accesstoken",
+  "refreshtoken",
+  "oauthtoken",
+  "bearertoken",
+  "authorization",
+  "password",
+  "passphrase"
+];
+var REDACTED_PLACEHOLDER = "[REDACTED]";
+function normalizeKeyName(name) {
+  return name.toLowerCase().replace(/[-_.]/g, "");
 }
-function mirrorTraceExportToLocalDebugger(body, options = {}) {
-  var _a;
-  const baseUrl = resolveLocalDebuggerBaseUrl(options.baseUrl);
-  if (!baseUrl) return;
-  void postJson(`${baseUrl}traces`, body, {}, {
-    maxAttempts: 1,
-    debug: (_a = options.debug) != null ? _a : false,
-    sdkName: options.sdkName
-  }).catch(() => {
-  });
+function redactSecretsInObject(value, options) {
+  var _a, _b;
+  const normalizedSecretSet = buildSecretSet((_a = options == null ? void 0 : options.secretKeyNames) != null ? _a : DEFAULT_SECRET_KEY_NAMES);
+  const placeholder = (_b = options == null ? void 0 : options.placeholder) != null ? _b : REDACTED_PLACEHOLDER;
+  const seen = /* @__PURE__ */ new WeakSet();
+  const walk = (node) => {
+    if (node === null || typeof node !== "object") return node;
+    if (seen.has(node)) return "[CIRCULAR]";
+    seen.add(node);
+    if (Array.isArray(node)) {
+      return node.map((item) => walk(item));
+    }
+    const out = {};
+    for (const [k, v] of Object.entries(node)) {
+      if (normalizedSecretSet.has(normalizeKeyName(k))) {
+        out[k] = placeholder;
+      } else {
+        out[k] = walk(v);
+      }
+    }
+    return out;
+  };
+  return walk(value);
+}
+function buildSecretSet(names) {
+  const set = /* @__PURE__ */ new Set();
+  for (const name of names) set.add(normalizeKeyName(name));
+  return set;
+}
+var DEFAULT_REDACT_ATTRIBUTE_KEYS = [
+  "ai.request.providerOptions",
+  "ai.response.providerMetadata"
+];
+function defaultTransformSpan(span) {
+  const attrs = span.attributes;
+  if (!attrs || attrs.length === 0) return span;
+  let nextAttrs;
+  for (let i = 0; i < attrs.length; i++) {
+    const attr = attrs[i];
+    const redacted = redactJsonAttributeValue(attr.key, attr.value);
+    if (redacted === void 0) continue;
+    if (!nextAttrs) nextAttrs = attrs.slice();
+    nextAttrs[i] = { key: attr.key, value: redacted };
+  }
+  if (!nextAttrs) return span;
+  return { ...span, attributes: nextAttrs };
+}
+var REDACT_JSON_ATTRIBUTE_KEYS = new Set(DEFAULT_REDACT_ATTRIBUTE_KEYS);
+function redactJsonAttributeValue(key, value) {
+  if (!REDACT_JSON_ATTRIBUTE_KEYS.has(key)) return void 0;
+  const json = value.stringValue;
+  if (typeof json !== "string" || json.length === 0) return void 0;
+  let parsed;
+  try {
+    parsed = JSON.parse(json);
+  } catch (e) {
+    return void 0;
+  }
+  const scrubbed = redactSecretsInObject(parsed);
+  let scrubbedJson;
+  try {
+    scrubbedJson = JSON.stringify(scrubbed);
+  } catch (e) {
+    return void 0;
+  }
+  if (scrubbedJson === json) return void 0;
+  return { stringValue: scrubbedJson };
+}
+function applyOtelSpanAttributeLimit(limit) {
+  var _a, _b;
+  try {
+    const raw = (_b = (_a = globalThis == null ? void 0 : globalThis.process) == null ? void 0 : _a.env) == null ? void 0 : _b.OTEL_SPAN_ATTRIBUTE_VALUE_LENGTH_LIMIT;
+    if (!raw) return limit;
+    const parsed = Number.parseInt(raw, 10);
+    if (Number.isFinite(parsed) && parsed > 0) {
+      return Math.min(limit, parsed);
+    }
+  } catch (e) {
+  }
+  return limit;
 }
 var TraceShipper = class {
   constructor(opts) {
     this.queue = [];
     this.inFlight = /* @__PURE__ */ new Set();
-    var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j;
+    this.hasShutdown = false;
+    var _a, _b, _c, _d, _e, _f, _g, _h, _i;
     this.writeKey = (_a = opts.writeKey) == null ? void 0 : _a.trim();
     this.baseUrl = (_b = formatEndpoint(opts.endpoint)) != null ? _b : "https://api.raindrop.ai/v1/";
     this.enabled = opts.enabled !== false;
@@ -614,13 +824,79 @@ var TraceShipper = class {
     this.prefix = `[raindrop-ai/${this.sdkName}]`;
     this.serviceName = (_g = opts.serviceName) != null ? _g : "raindrop.core";
     this.serviceVersion = (_h = opts.serviceVersion) != null ? _h : "0.0.0";
-    const localDebugger = typeof process !== "undefined" ? (_i = process.env) == null ? void 0 : _i.RAINDROP_LOCAL_DEBUGGER : void 0;
-    if (localDebugger) {
-      this.localDebuggerUrl = (_j = resolveLocalDebuggerBaseUrl(localDebugger)) != null ? _j : void 0;
-      if (this.debug) {
-        console.log(`${this.prefix} Local debugger mirroring: ${this.localDebuggerUrl}`);
+    this.localDebuggerUrl = (_i = resolveLocalDebuggerBaseUrl(opts.localDebuggerUrl)) != null ? _i : void 0;
+    if (this.debug && this.localDebuggerUrl) {
+      console.log(`${this.prefix} Local debugger mirroring: ${this.localDebuggerUrl}`);
+    }
+    this.transformSpanHook = opts.transformSpan;
+    this.disableDefaultRedaction = opts.disableDefaultRedaction === true;
+    this.maxTextFieldCharsOpt = opts.maxTextFieldChars;
+  }
+  /**
+   * Cap every string attribute value on the span. O(#attributes) length
+   * checks; only oversized values pay a slice. Runs AFTER the redaction
+   * pipeline so the default secret-scrub still sees parseable JSON in
+   * `ai.request.providerOptions` / `ai.response.providerMetadata` (capping
+   * first could cut a JSON blob mid-way, fail the parse, and ship secrets
+   * in the surviving prefix).
+   *
+   * A stricter `OTEL_SPAN_ATTRIBUTE_VALUE_LENGTH_LIMIT` env var is honored
+   * for span content, matching the Python SDK and the OTel SDK convention.
+   */
+  capSpanAttributes(span) {
+    var _a;
+    const maxChars = applyOtelSpanAttributeLimit(
+      resolveMaxTextFieldChars(this.maxTextFieldCharsOpt)
+    );
+    const attrs = span.attributes;
+    if (!attrs || attrs.length === 0) return span;
+    let nextAttrs;
+    for (let i = 0; i < attrs.length; i++) {
+      const attr = attrs[i];
+      const value = (_a = attr.value) == null ? void 0 : _a.stringValue;
+      if (typeof value !== "string" || value.length <= maxChars) continue;
+      if (!nextAttrs) nextAttrs = attrs.slice();
+      nextAttrs[i] = {
+        key: attr.key,
+        value: { ...attr.value, stringValue: capText(value, maxChars) }
+      };
+    }
+    if (!nextAttrs) return span;
+    return { ...span, attributes: nextAttrs };
+  }
+  /**
+   * Apply the user `transformSpan` hook (if any) followed by the default
+   * redactor (unless disabled). Returns either the (possibly new) span to
+   * ship, or `null` to drop the span entirely.
+   *
+   * Ordering: user hook runs first so callers can rewrite the span freely
+   * (rename attrs, add new ones, scrub things the default doesn't know
+   * about). The default redactor then runs on whatever the user produced,
+   * acting as the always-on floor for documented BYOK secrets. If the user
+   * sets `disableDefaultRedaction: true`, the floor is skipped.
+   *
+   * Fail-closed: if the user hook throws, the span is dropped — a buggy
+   * hook can never accidentally ship raw, un-redacted spans.
+   */
+  redactSpan(span) {
+    let current = span;
+    if (this.transformSpanHook) {
+      try {
+        const result = this.transformSpanHook(current);
+        if (result === null) return null;
+        if (result !== void 0) current = result;
+      } catch (err) {
+        if (this.debug) {
+          const msg = err instanceof Error ? err.message : String(err);
+          console.warn(`${this.prefix} transformSpan hook threw: ${msg}`);
+        }
+        return null;
       }
     }
+    if (!this.disableDefaultRedaction) {
+      current = defaultTransformSpan(current);
+    }
+    return this.capSpanAttributes(current);
   }
   isDebugEnabled() {
     return this.debug;
@@ -638,8 +914,8 @@ var TraceShipper = class {
     ];
     if ((_b = args.attributes) == null ? void 0 : _b.length) attrs.push(...args.attributes);
     const span = { ids, name: args.name, startTimeUnixNano: started, attributes: attrs };
-    if (this.localDebuggerUrl) {
-      const openSpan = buildOtlpSpan({
+    this.mirrorToLocalDebugger(
+      buildOtlpSpan({
         ids: span.ids,
         name: span.name,
         startTimeUnixNano: span.startTimeUnixNano,
@@ -647,16 +923,21 @@ var TraceShipper = class {
         // placeholder — will be updated on endSpan
         attributes: span.attributes,
         status: { code: SpanStatusCode.UNSET }
-      });
-      const body = buildExportTraceServiceRequest([openSpan], this.serviceName, this.serviceVersion);
-      mirrorTraceExportToLocalDebugger(body, {
-        baseUrl: this.localDebuggerUrl,
-        debug: false,
-        sdkName: this.sdkName
-      });
-    }
+      })
+    );
     return span;
   }
+  mirrorToLocalDebugger(span) {
+    if (!this.localDebuggerUrl) return;
+    const redacted = this.redactSpan(span);
+    if (redacted === null) return;
+    const body = buildExportTraceServiceRequest([redacted], this.serviceName, this.serviceVersion);
+    mirrorTraceExportToLocalDebugger(body, {
+      baseUrl: this.localDebuggerUrl,
+      debug: false,
+      sdkName: this.sdkName
+    });
+  }
   endSpan(span, extra) {
     var _a, _b;
     if (span.endTimeUnixNano) return;
@@ -678,14 +959,7 @@ var TraceShipper = class {
       status
     });
     this.enqueue(otlp);
-    if (this.localDebuggerUrl) {
-      const body = buildExportTraceServiceRequest([otlp], this.serviceName, this.serviceVersion);
-      mirrorTraceExportToLocalDebugger(body, {
-        baseUrl: this.localDebuggerUrl,
-        debug: false,
-        sdkName: this.sdkName
-      });
-    }
+    this.mirrorToLocalDebugger(otlp);
   }
   createSpan(args) {
     var _a;
@@ -703,14 +977,7 @@ var TraceShipper = class {
       status: args.status
     });
     this.enqueue(otlp);
-    if (this.localDebuggerUrl) {
-      const body = buildExportTraceServiceRequest([otlp], this.serviceName, this.serviceVersion);
-      mirrorTraceExportToLocalDebugger(body, {
-        baseUrl: this.localDebuggerUrl,
-        debug: false,
-        sdkName: this.sdkName
-      });
-    }
+    this.mirrorToLocalDebugger(otlp);
   }
   enqueue(span) {
     if (!this.enabled) return;
@@ -722,10 +989,12 @@ var TraceShipper = class {
         )}`
       );
     }
+    const redacted = this.redactSpan(span);
+    if (redacted === null) return;
     if (this.queue.length >= this.maxQueueSize) {
       this.queue.shift();
     }
-    this.queue.push(span);
+    this.queue.push(redacted);
     if (this.queue.length >= this.maxBatchSize) {
       void this.flush().catch(() => {
       });
@@ -747,6 +1016,17 @@ var TraceShipper = class {
     }
     while (this.queue.length > 0) {
       const batch = this.queue.splice(0, this.maxBatchSize);
+      if (!this.writeKey) continue;
+      const opts = this.requestOpts();
+      if (!opts) {
+        rateLimitedLog(
+          `${this.prefix}.shutdown_deadline`,
+          () => console.warn(
+            `${this.prefix} shutdown flush deadline exceeded; dropping ${batch.length} spans`
+          )
+        );
+        continue;
+      }
       const body = buildExportTraceServiceRequest(batch, this.serviceName, this.serviceVersion);
       const url = `${this.baseUrl}traces`;
       if (this.debug) {
@@ -755,11 +1035,7 @@ var TraceShipper = class {
           endpoint: url
         });
       }
-      const p = postJson(url, body, this.authHeaders(), {
-        maxAttempts: 3,
-        debug: this.debug,
-        sdkName: this.sdkName
-      });
+      const p = postJson(url, body, this.authHeaders(), opts);
       this.inFlight.add(p);
       try {
         try {
@@ -767,21 +1043,61 @@ var TraceShipper = class {
           if (this.debug) console.log(`${this.prefix} sent ${batch.length} spans`);
         } catch (err) {
           const msg = err instanceof Error ? err.message : String(err);
-          console.warn(`${this.prefix} failed to send ${batch.length} spans: ${msg}`);
+          rateLimitedLog(
+            `${this.prefix}.send_spans_failed`,
+            () => console.warn(`${this.prefix} failed to send ${batch.length} spans: ${msg}`)
+          );
         }
       } finally {
         this.inFlight.delete(p);
       }
     }
   }
+  /** See EventShipper.requestOpts — same shutdown-budget semantics. */
+  requestOpts() {
+    if (this.shutdownDeadlineAt !== void 0) {
+      const remainingMs = this.shutdownDeadlineAt - Date.now();
+      if (remainingMs <= 0) return null;
+      return {
+        maxAttempts: 1,
+        debug: this.debug,
+        sdkName: this.sdkName,
+        timeoutMs: Math.min(DEFAULT_REQUEST_TIMEOUT_MS, remainingMs)
+      };
+    }
+    if (this.hasShutdown) {
+      return {
+        maxAttempts: 1,
+        debug: this.debug,
+        sdkName: this.sdkName,
+        timeoutMs: POST_SHUTDOWN_TIMEOUT_MS
+      };
+    }
+    return { maxAttempts: 3, debug: this.debug, sdkName: this.sdkName };
+  }
   async shutdown() {
-    if (this.timer) {
-      clearTimeout(this.timer);
-      this.timer = void 0;
+    this.hasShutdown = true;
+    this.shutdownDeadlineAt = Date.now() + SHUTDOWN_DEADLINE_MS;
+    try {
+      if (this.timer) {
+        clearTimeout(this.timer);
+        this.timer = void 0;
+      }
+      const drain = async () => {
+        await this.flush();
+        await Promise.all([...this.inFlight].map((p) => p.catch(() => {
+        })));
+      };
+      const settled = await raceWithTimeout(drain(), SHUTDOWN_DEADLINE_MS);
+      if (!settled) {
+        rateLimitedLog(
+          `${this.prefix}.shutdown_deadline`,
+          () => console.warn(`${this.prefix} shutdown flush deadline exceeded; abandoning in-flight spans`)
+        );
+      }
+    } finally {
+      this.shutdownDeadlineAt = void 0;
     }
-    await this.flush();
-    await Promise.all([...this.inFlight].map((p) => p.catch(() => {
-    })));
   }
 };
 
@@ -789,6 +1105,134 @@ var TraceShipper = class {
 var import_async_hooks = require("async_hooks");
 globalThis.RAINDROP_ASYNC_LOCAL_STORAGE = import_async_hooks.AsyncLocalStorage;
 
+// src/config.ts
+var import_node_fs = require("fs");
+var import_node_os = require("os");
+var import_node_path = require("path");
+function loadConfig(projectDirectory) {
+  var _a, _b, _c, _d, _e, _f, _g;
+  let merged = {};
+  const configPaths = [
+    (0, import_node_path.join)((0, import_node_os.homedir)(), ".config", "opencode", "raindrop.json"),
+    (0, import_node_path.join)(projectDirectory, ".opencode", "raindrop.json")
+  ];
+  for (const configPath of configPaths) {
+    try {
+      if ((0, import_node_fs.existsSync)(configPath)) {
+        const content = (0, import_node_fs.readFileSync)(configPath, "utf-8");
+        const parsed = JSON.parse(content);
+        merged = { ...merged, ...parsed };
+      }
+    } catch (e) {
+    }
+  }
+  let eventMetadata;
+  const envMeta = process.env["RAINDROP_EVENT_METADATA"];
+  if (envMeta) {
+    try {
+      eventMetadata = JSON.parse(envMeta);
+    } catch (e) {
+    }
+  }
+  return {
+    writeKey: (_b = (_a = process.env["RAINDROP_WRITE_KEY"]) != null ? _a : merged.write_key) != null ? _b : "",
+    endpoint: (_d = (_c = process.env["RAINDROP_API_URL"]) != null ? _c : merged.api_url) != null ? _d : "https://api.raindrop.ai/v1",
+    eventName: (_e = merged.event_name) != null ? _e : "opencode_session",
+    debug: process.env["RAINDROP_DEBUG"] === "true" ? true : (_f = merged.debug) != null ? _f : false,
+    captureSystemPrompt: process.env["RAINDROP_CAPTURE_SYSTEM_PROMPT"] !== void 0 ? process.env["RAINDROP_CAPTURE_SYSTEM_PROMPT"] === "true" : (_g = merged.capture_system_prompt) != null ? _g : false,
+    eventMetadata,
+    localWorkshopUrl: resolveLocalWorkshopUrl(merged.local_workshop_url)
+  };
+}
+function resolveLocalWorkshopUrl(fileValue) {
+  const envValue = process.env["RAINDROP_LOCAL_WORKSHOP_URL"];
+  if (envValue !== void 0) {
+    if (envValue === "" || envValue.toLowerCase() === "null" || envValue.toLowerCase() === "false") {
+      return null;
+    }
+    return envValue;
+  }
+  return fileValue;
+}
+
+// package.json
+var package_default = {
+  name: "@raindrop-ai/opencode-plugin",
+  version: "0.0.13",
+  description: "Raindrop observability plugin for OpenCode \u2014 automatic session/event/span tracing",
+  type: "module",
+  main: "dist/index.js",
+  module: "dist/index.js",
+  types: "dist/index.d.ts",
+  license: "MIT",
+  repository: {
+    type: "git",
+    url: "git+https://github.com/raindrop-ai/raindrop-js.git",
+    directory: "packages/opencode-plugin"
+  },
+  homepage: "https://github.com/raindrop-ai/raindrop-js/tree/main/packages/opencode-plugin#readme",
+  bugs: {
+    url: "https://github.com/raindrop-ai/raindrop-js/issues"
+  },
+  exports: {
+    ".": {
+      types: "./dist/index.d.ts",
+      import: "./dist/index.js",
+      require: "./dist/index.cjs"
+    }
+  },
+  sideEffects: false,
+  files: [
+    "dist/**"
+  ],
+  scripts: {
+    build: "tsup",
+    dev: "tsup --watch",
+    clean: "rm -rf dist",
+    test: "cd tests && pnpm test"
+  },
+  peerDependencies: {
+    "@opencode-ai/plugin": ">=1.3.0",
+    "@opencode-ai/sdk": ">=1.3.0"
+  },
+  peerDependenciesMeta: {
+    "@opencode-ai/sdk": {
+      optional: true
+    }
+  },
+  devDependencies: {
+    "@raindrop-ai/core": "workspace:*",
+    "@opencode-ai/plugin": "^1.3.3",
+    "@opencode-ai/sdk": "^1.3.3",
+    "@types/node": "^20.11.17",
+    tsup: "^8.4.0",
+    typescript: "^5.3.3"
+  },
+  tsup: {
+    entry: [
+      "src/index.ts"
+    ],
+    format: [
+      "cjs",
+      "esm"
+    ],
+    dts: {
+      resolve: true
+    },
+    clean: true,
+    noExternal: [
+      "@raindrop-ai/core"
+    ]
+  },
+  publishConfig: {
+    access: "public"
+  }
+};
+
+// src/package-info.ts
+var PLUGIN_NAME = package_default.name;
+var PLUGIN_VERSION = package_default.version;
+
 // src/shipper.ts
 var EventShipper2 = class extends EventShipper {
   constructor(opts) {
@@ -824,6 +1268,86 @@ var TraceShipper2 = class extends TraceShipper {
   }
 };
 
+// src/bounded.ts
+var TRUNCATION_MARKER2 = "...[truncated by raindrop]";
+var MAX_TEXT_FIELD_CHARS = 1e6;
+var MAX_BOUNDED_DEPTH = 12;
+function truncateToLimit2(text, limit) {
+  if (text.length <= limit) return text;
+  if (limit > TRUNCATION_MARKER2.length) {
+    return text.slice(0, limit - TRUNCATION_MARKER2.length) + TRUNCATION_MARKER2;
+  }
+  return text.slice(0, limit);
+}
+function capText2(value, limit = MAX_TEXT_FIELD_CHARS) {
+  if (value.length <= limit) return value;
+  return truncateToLimit2(value, limit);
+}
+function boundedClone2(value, budget, depth) {
+  if (budget.remaining <= 0) return TRUNCATION_MARKER2;
+  if (typeof value === "string") {
+    if (value.length > budget.remaining) {
+      const taken = value.slice(0, Math.max(0, budget.remaining)) + TRUNCATION_MARKER2;
+      budget.remaining = 0;
+      return taken;
+    }
+    budget.remaining -= Math.max(value.length, 1);
+    return value;
+  }
+  if (value === null || typeof value === "number" || typeof value === "boolean") {
+    budget.remaining -= 8;
+    return value;
+  }
+  if (typeof value !== "object") {
+    budget.remaining -= 8;
+    return value;
+  }
+  if (depth >= MAX_BOUNDED_DEPTH) {
+    budget.remaining -= 16;
+    return `<max depth: ${TRUNCATION_MARKER2}>`;
+  }
+  const withToJson = value;
+  if (typeof withToJson.toJSON === "function") {
+    try {
+      return boundedClone2(withToJson.toJSON(), budget, depth + 1);
+    } catch (e) {
+    }
+  }
+  if (Array.isArray(value)) {
+    const out2 = [];
+    for (const item of value) {
+      if (budget.remaining <= 0) {
+        out2.push(TRUNCATION_MARKER2);
+        break;
+      }
+      out2.push(boundedClone2(item, budget, depth + 1));
+    }
+    return out2;
+  }
+  const out = {};
+  for (const key of Object.keys(value)) {
+    if (budget.remaining <= 0) {
+      out["..."] = TRUNCATION_MARKER2;
+      break;
+    }
+    budget.remaining -= Math.max(key.length, 1);
+    out[key] = boundedClone2(value[key], budget, depth + 1);
+  }
+  return out;
+}
+function boundedStringify(value, limit = MAX_TEXT_FIELD_CHARS) {
+  var _a;
+  try {
+    if (typeof value === "string") {
+      return truncateToLimit2(JSON.stringify(capText2(value, limit)), limit);
+    }
+    const pruned = boundedClone2(value, { remaining: limit + TRUNCATION_MARKER2.length + 256 }, 0);
+    return truncateToLimit2((_a = JSON.stringify(pruned)) != null ? _a : "", limit);
+  } catch (e) {
+    return capText2(String(value), limit);
+  }
+}
+
 // src/tracing-linkage-helpers.ts
 function createSessionParentMapHelpers({
   sessions: sessions2,
@@ -901,6 +1425,15 @@ function createSessionParentMapHelpers({
 }
 
 // src/tracing.ts
+var ERROR_LOG_INTERVAL_MS = 3e4;
+var lastErrorLogAt = /* @__PURE__ */ new Map();
+function rateLimitedErrorLog(key, message) {
+  const now = Date.now();
+  const last = lastErrorLogAt.get(key);
+  if (last !== void 0 && now - last < ERROR_LOG_INTERVAL_MS) return;
+  lastErrorLogAt.set(key, now);
+  console.log(message);
+}
 var sessions = /* @__PURE__ */ new Map();
 var taskContexts = /* @__PURE__ */ new Map();
 var runningTaskCallsBySession = /* @__PURE__ */ new Map();
@@ -959,6 +1492,19 @@ function endPendingToolSpanWithError(state, callID, tool, toolCallArgs, errorMes
   }
   return true;
 }
+function unwrapQuotes(s) {
+  if (s.length < 2) return s;
+  const first = s[0];
+  const last = s[s.length - 1];
+  if ((first === '"' || first === "'") && first === last) return s.slice(1, -1);
+  return s;
+}
+function buildPromptMessages(systemPrompt, userInput) {
+  const messages = [];
+  if (systemPrompt) messages.push({ role: "system", content: systemPrompt });
+  messages.push({ role: "user", content: unwrapQuotes(userInput) });
+  return JSON.stringify(messages);
+}
 function getHostname() {
   var _a;
   try {
@@ -1040,7 +1586,7 @@ function createHooks(config, worktree, directory, eventShipper, traceShipper) {
           const state = sessions.get(partSessionID);
           if (!state) return;
           if (partObj["type"] === "text" && typeof partObj["text"] === "string") {
-            state.outputParts.set(messageId, partObj["text"]);
+            state.outputParts.set(messageId, capText2(partObj["text"]));
           } else if (partObj["type"] === "tool" && messageId) {
             const tool = partObj["tool"];
             const callID = partObj["callID"];
@@ -1070,7 +1616,7 @@ function createHooks(config, worktree, directory, eventShipper, traceShipper) {
               if (typeof errorMessage !== "string" || errorMessage === "")
                 throw new Error("message.part.updated: error tool state must have error string");
               const input = toolState["input"];
-              const toolCallArgs = input === void 0 ? void 0 : typeof input === "string" ? input : JSON.stringify(input);
+              const toolCallArgs = input === void 0 ? void 0 : typeof input === "string" ? capText2(input) : boundedStringify(input);
               if (endPendingToolSpanWithError(
                 state,
                 callID,
@@ -1083,7 +1629,7 @@ function createHooks(config, worktree, directory, eventShipper, traceShipper) {
               }
             }
           } else if (partObj["type"] === "reasoning" && typeof partObj["text"] === "string") {
-            state.reasoningParts.set(messageId, partObj["text"]);
+            state.reasoningParts.set(messageId, capText2(partObj["text"]));
           }
         } else if (event.type === "message.updated") {
           const msgInfo = props["info"];
@@ -1184,9 +1730,14 @@ type: ${name != null ? name : "UnknownError"}`;
           const rootSpan = state.currentRootSpan;
           const isCompaction = state.isCompacting === true;
           if (state.parentId) {
+            const userInput = unwrapQuotes(state.currentInput);
             const llmAttrs = [
               attrString("ai.operationId", "generateText"),
-              attrString("ai.prompt", state.currentInput),
+              attrString("ai.prompt", userInput),
+              attrString(
+                "ai.prompt.messages",
+                buildPromptMessages(state.currentSystemPrompt, state.currentInput)
+              ),
               attrString("ai.response.text", outputText),
               attrString("gen_ai.system", providerID),
               attrString("gen_ai.request.model", modelID),
@@ -1231,9 +1782,14 @@ type: ${name != null ? name : "UnknownError"}`;
             });
           } else {
             rootSpan.name = isCompaction ? "ai.compaction" : modelName;
+            const userInput = unwrapQuotes(state.currentInput);
             const rootAttrs = [
               attrString("ai.operationId", "generateText"),
-              attrString("ai.prompt", state.currentInput),
+              attrString("ai.prompt", userInput),
+              attrString(
+                "ai.prompt.messages",
+                buildPromptMessages(state.currentSystemPrompt, state.currentInput)
+              ),
               attrString("ai.response.text", outputText),
               attrString("gen_ai.system", providerID),
               attrString("gen_ai.request.model", modelID),
@@ -1340,7 +1896,8 @@ type: ${errorName != null ? errorName : "UnknownError"}`;
           sessions.delete(String(errorSessionID));
         }
       } catch (err) {
-        console.log(
+        rateLimitedErrorLog(
+          "event",
           `[raindrop-ai/opencode-plugin] [error] Error in event hook: ${err instanceof Error ? err.message : String(err)}`
         );
       }
@@ -1396,7 +1953,7 @@ type: ${errorName != null ? errorName : "UnknownError"}`;
           ...promptMeta,
           properties: baseMeta.properties || promptMeta.properties ? { ...(_a = baseMeta.properties) != null ? _a : {}, ...(_b = promptMeta.properties) != null ? _b : {} } : void 0
         };
-        const userText = textParts.join("\n");
+        const userText = capText2(textParts.join("\n"));
         state.currentInput = userText;
         if (state.parentId) {
           if (!state.parentTaskSpanIds || !state.parentEventContext) {
@@ -1505,7 +2062,8 @@ type: ${errorName != null ? errorName : "UnknownError"}`;
           });
         }
       } catch (err) {
-        console.log(
+        rateLimitedErrorLog(
+          "tool.execute.before",
           `[raindrop-ai/opencode-plugin] [error] Error in tool.execute.before hook: ${err instanceof Error ? err.message : String(err)}`
         );
       }
@@ -1520,7 +2078,7 @@ type: ${errorName != null ? errorName : "UnknownError"}`;
         if (!state || !state.currentEventId) return;
         if (args === void 0 || args === null)
           throw new Error("tool.execute.after: args is required");
-        const toolCallArgs = typeof args === "string" ? args : JSON.stringify(args);
+        const toolCallArgs = typeof args === "string" ? capText2(args) : boundedStringify(args);
         const startInfo = state.toolSpanStarts.get(callID);
         state.toolSpanStarts.delete(callID);
         const resultMetadata = result.metadata;
@@ -1533,13 +2091,7 @@ type: ${errorName != null ? errorName : "UnknownError"}`;
           const endTimeUnixNano = nowUnixNanoString();
           if (!("output" in result) || result.output === void 0)
             throw new Error("tool.execute.after: result.output is required");
-          let toolResult;
-          try {
-            toolResult = JSON.stringify(result.output);
-          } catch (err) {
-            const msg = err instanceof Error ? err.message : String(err);
-            throw new Error(`tool.execute.after: result.output must be JSON-serializable: ${msg}`);
-          }
+          const toolResult = boundedStringify(result.output);
           if (startInfo.liveSpan) {
             traceShipper.endSpan(startInfo.liveSpan, {
               attributes: [
@@ -1568,7 +2120,8 @@ type: ${errorName != null ? errorName : "UnknownError"}`;
           markTaskCallFinished(sessionID, callID);
         }
       } catch (err) {
-        console.log(
+        rateLimitedErrorLog(
+          "tool.execute.after",
           `[raindrop-ai/opencode-plugin] [error] Error in tool.execute.after hook: ${err instanceof Error ? err.message : String(err)}`
         );
       }
@@ -1585,7 +2138,8 @@ type: ${errorName != null ? errorName : "UnknownError"}`;
           state.isCompacting = true;
         }
       } catch (err) {
-        console.log(
+        rateLimitedErrorLog(
+          "experimental.session.compacting",
           `[raindrop-ai/opencode-plugin] [error] Error in experimental.session.compacting hook: ${err instanceof Error ? err.message : String(err)}`
         );
       }
@@ -1604,11 +2158,12 @@ type: ${errorName != null ? errorName : "UnknownError"}`;
           sessions.set(sessionID, state);
         }
         const MAX_SYSTEM_PROMPT_LENGTH = 32768;
-        const TRUNCATION_MARKER = "\n...[truncated]";
+        const TRUNCATION_MARKER3 = "\n...[truncated]";
         const joined = output.system.join("\n\n");
-        state.currentSystemPrompt = joined.length > MAX_SYSTEM_PROMPT_LENGTH ? joined.slice(0, MAX_SYSTEM_PROMPT_LENGTH - TRUNCATION_MARKER.length) + TRUNCATION_MARKER : joined;
+        state.currentSystemPrompt = joined.length > MAX_SYSTEM_PROMPT_LENGTH ? joined.slice(0, MAX_SYSTEM_PROMPT_LENGTH - TRUNCATION_MARKER3.length) + TRUNCATION_MARKER3 : joined;
       } catch (err) {
-        console.log(
+        rateLimitedErrorLog(
+          "experimental.chat.system.transform",
           `[raindrop-ai/opencode-plugin] [error] Error in experimental.chat.system.transform hook: ${err instanceof Error ? err.message : String(err)}`
         );
       }
@@ -1624,25 +2179,33 @@ async function plugin(input) {
     console.log(`[raindrop-ai/opencode-plugin] [${level}] ${message}`);
   }
   appLog("info", `Loading ${PLUGIN_NAME} v${PLUGIN_VERSION}`);
-  if (!config.writeKey) {
+  const resolvedLocalUrl = resolveLocalDebuggerBaseUrl(config.localWorkshopUrl);
+  const hasLocalDestination = resolvedLocalUrl !== null;
+  if (!config.writeKey && !hasLocalDestination) {
     appLog(
       "warn",
-      "RAINDROP_WRITE_KEY not set \u2014 Raindrop tracing disabled. Set it in your environment or in ~/.config/opencode/raindrop.json."
+      "RAINDROP_WRITE_KEY not set and no local Workshop daemon detected \u2014 Raindrop tracing disabled. Set RAINDROP_WRITE_KEY for cloud, or RAINDROP_LOCAL_WORKSHOP_URL / RAINDROP_LOCAL_DEBUGGER for local-only mode."
     );
     return {};
   }
   if (config.debug) {
-    appLog("info", `Raindrop tracing enabled (endpoint: ${config.endpoint})`);
+    const destinations = [
+      config.writeKey ? `cloud (${config.endpoint})` : null,
+      resolvedLocalUrl ? `local Workshop (${resolvedLocalUrl})` : null
+    ].filter(Boolean);
+    appLog("info", `Raindrop tracing enabled \u2014 destinations: ${destinations.join(", ")}`);
   }
   const eventShipper = new EventShipper2({
     writeKey: config.writeKey,
     endpoint: config.endpoint,
-    debug: config.debug
+    debug: config.debug,
+    localDebuggerUrl: config.localWorkshopUrl
   });
   const traceShipper = new TraceShipper2({
     writeKey: config.writeKey,
     endpoint: config.endpoint,
-    debug: config.debug
+    debug: config.debug,
+    localDebuggerUrl: config.localWorkshopUrl
   });
   const worktree = (_a = input.worktree) != null ? _a : input.directory;
   const hooks = createHooks(