@raindrop-ai/pi-agent 0.0.3 → 0.0.4

package/README.md

@@ -1,6 +1,6 @@
 # @raindrop-ai/pi-agent
 
-Automatic observability for [Pi Agent](https://github.com/badlogic/pi-mono) with [Raindrop](https://raindrop.ai). Captures agent runs, LLM generations, tool calls, and token usage.
+Automatic observability for [Pi Agent](https://github.com/earendil-works/pi) with [Raindrop](https://raindrop.ai). Captures agent runs, LLM generations, tool calls, and token usage.
 
 Two entry points:
 
@@ -10,8 +10,8 @@ Two entry points:
 ## Quick Start — Programmatic
 
 ```typescript
-import { Agent } from "@mariozechner/pi-agent-core";
-import { getModel } from "@mariozechner/pi-ai";
+import { Agent } from "@earendil-works/pi-agent-core";
+import { getModel } from "@earendil-works/pi-ai";
 import { createRaindropPiAgent } from "@raindrop-ai/pi-agent";
 
 const raindrop = createRaindropPiAgent({
@@ -41,7 +41,7 @@ Set `RAINDROP_WRITE_KEY` in your environment. Traces appear automatically.
 
 ## Documentation
 
-See the full [Pi Agent docs](https://docs.raindrop.ai/sdk/pi-agent) for configuration, per-subscribe overrides, and extension settings.
+See the full [Pi Agent docs](https://www.raindrop.ai/docs/integrations/pi-agent/) for configuration, per-subscribe overrides, and extension settings.
 
 ## License
 

package/dist/{chunk-MHIMKMK7.js → chunk-EWIO36KH.js}

@@ -1,4 +1,4 @@
-// ../core/dist/chunk-OLYXZCOK.js
+// ../core/dist/chunk-VUNUOE2X.js
 function getCrypto() {
   const c = globalThis.crypto;
   return c;
@@ -551,6 +551,95 @@ var EventShipper = class {
     }
   }
 };
+var DEFAULT_SECRET_KEY_NAMES = [
+  "apikey",
+  "apisecret",
+  "apitoken",
+  "secretaccesskey",
+  "sessiontoken",
+  "privatekey",
+  "privatekeyid",
+  "clientsecret",
+  "accesstoken",
+  "refreshtoken",
+  "oauthtoken",
+  "bearertoken",
+  "authorization",
+  "password",
+  "passphrase"
+];
+var REDACTED_PLACEHOLDER = "[REDACTED]";
+function normalizeKeyName(name) {
+  return name.toLowerCase().replace(/[-_.]/g, "");
+}
+function redactSecretsInObject(value, options) {
+  var _a, _b;
+  const normalizedSecretSet = buildSecretSet((_a = options == null ? void 0 : options.secretKeyNames) != null ? _a : DEFAULT_SECRET_KEY_NAMES);
+  const placeholder = (_b = options == null ? void 0 : options.placeholder) != null ? _b : REDACTED_PLACEHOLDER;
+  const seen = /* @__PURE__ */ new WeakSet();
+  const walk = (node) => {
+    if (node === null || typeof node !== "object") return node;
+    if (seen.has(node)) return "[CIRCULAR]";
+    seen.add(node);
+    if (Array.isArray(node)) {
+      return node.map((item) => walk(item));
+    }
+    const out = {};
+    for (const [k, v] of Object.entries(node)) {
+      if (normalizedSecretSet.has(normalizeKeyName(k))) {
+        out[k] = placeholder;
+      } else {
+        out[k] = walk(v);
+      }
+    }
+    return out;
+  };
+  return walk(value);
+}
+function buildSecretSet(names) {
+  const set = /* @__PURE__ */ new Set();
+  for (const name of names) set.add(normalizeKeyName(name));
+  return set;
+}
+var DEFAULT_REDACT_ATTRIBUTE_KEYS = [
+  "ai.request.providerOptions",
+  "ai.response.providerMetadata"
+];
+function defaultTransformSpan(span) {
+  const attrs = span.attributes;
+  if (!attrs || attrs.length === 0) return span;
+  let nextAttrs;
+  for (let i = 0; i < attrs.length; i++) {
+    const attr = attrs[i];
+    const redacted = redactJsonAttributeValue(attr.key, attr.value);
+    if (redacted === void 0) continue;
+    if (!nextAttrs) nextAttrs = attrs.slice();
+    nextAttrs[i] = { key: attr.key, value: redacted };
+  }
+  if (!nextAttrs) return span;
+  return { ...span, attributes: nextAttrs };
+}
+var REDACT_JSON_ATTRIBUTE_KEYS = new Set(DEFAULT_REDACT_ATTRIBUTE_KEYS);
+function redactJsonAttributeValue(key, value) {
+  if (!REDACT_JSON_ATTRIBUTE_KEYS.has(key)) return void 0;
+  const json = value.stringValue;
+  if (typeof json !== "string" || json.length === 0) return void 0;
+  let parsed;
+  try {
+    parsed = JSON.parse(json);
+  } catch (e) {
+    return void 0;
+  }
+  const scrubbed = redactSecretsInObject(parsed);
+  let scrubbedJson;
+  try {
+    scrubbedJson = JSON.stringify(scrubbed);
+  } catch (e) {
+    return void 0;
+  }
+  if (scrubbedJson === json) return void 0;
+  return { stringValue: scrubbedJson };
+}
 var TraceShipper = class {
   constructor(opts) {
     this.queue = [];
@@ -572,6 +661,42 @@ var TraceShipper = class {
     if (this.debug && this.localDebuggerUrl) {
       console.log(`${this.prefix} Local debugger mirroring: ${this.localDebuggerUrl}`);
     }
+    this.transformSpanHook = opts.transformSpan;
+    this.disableDefaultRedaction = opts.disableDefaultRedaction === true;
+  }
+  /**
+   * Apply the user `transformSpan` hook (if any) followed by the default
+   * redactor (unless disabled). Returns either the (possibly new) span to
+   * ship, or `null` to drop the span entirely.
+   *
+   * Ordering: user hook runs first so callers can rewrite the span freely
+   * (rename attrs, add new ones, scrub things the default doesn't know
+   * about). The default redactor then runs on whatever the user produced,
+   * acting as the always-on floor for documented BYOK secrets. If the user
+   * sets `disableDefaultRedaction: true`, the floor is skipped.
+   *
+   * Fail-closed: if the user hook throws, the span is dropped — a buggy
+   * hook can never accidentally ship raw, un-redacted spans.
+   */
+  redactSpan(span) {
+    let current = span;
+    if (this.transformSpanHook) {
+      try {
+        const result = this.transformSpanHook(current);
+        if (result === null) return null;
+        if (result !== void 0) current = result;
+      } catch (err) {
+        if (this.debug) {
+          const msg = err instanceof Error ? err.message : String(err);
+          console.warn(`${this.prefix} transformSpan hook threw: ${msg}`);
+        }
+        return null;
+      }
+    }
+    if (!this.disableDefaultRedaction) {
+      current = defaultTransformSpan(current);
+    }
+    return current;
   }
   isDebugEnabled() {
     return this.debug;
@@ -589,8 +714,8 @@ var TraceShipper = class {
     ];
     if ((_b = args.attributes) == null ? void 0 : _b.length) attrs.push(...args.attributes);
     const span = { ids, name: args.name, startTimeUnixNano: started, attributes: attrs };
-    if (this.localDebuggerUrl) {
-      const openSpan = buildOtlpSpan({
+    this.mirrorToLocalDebugger(
+      buildOtlpSpan({
         ids: span.ids,
         name: span.name,
         startTimeUnixNano: span.startTimeUnixNano,
@@ -598,16 +723,21 @@ var TraceShipper = class {
         // placeholder — will be updated on endSpan
         attributes: span.attributes,
         status: { code: SpanStatusCode.UNSET }
-      });
-      const body = buildExportTraceServiceRequest([openSpan], this.serviceName, this.serviceVersion);
-      mirrorTraceExportToLocalDebugger(body, {
-        baseUrl: this.localDebuggerUrl,
-        debug: false,
-        sdkName: this.sdkName
-      });
-    }
+      })
+    );
     return span;
   }
+  mirrorToLocalDebugger(span) {
+    if (!this.localDebuggerUrl) return;
+    const redacted = this.redactSpan(span);
+    if (redacted === null) return;
+    const body = buildExportTraceServiceRequest([redacted], this.serviceName, this.serviceVersion);
+    mirrorTraceExportToLocalDebugger(body, {
+      baseUrl: this.localDebuggerUrl,
+      debug: false,
+      sdkName: this.sdkName
+    });
+  }
   endSpan(span, extra) {
     var _a, _b;
     if (span.endTimeUnixNano) return;
@@ -629,14 +759,7 @@ var TraceShipper = class {
       status
     });
     this.enqueue(otlp);
-    if (this.localDebuggerUrl) {
-      const body = buildExportTraceServiceRequest([otlp], this.serviceName, this.serviceVersion);
-      mirrorTraceExportToLocalDebugger(body, {
-        baseUrl: this.localDebuggerUrl,
-        debug: false,
-        sdkName: this.sdkName
-      });
-    }
+    this.mirrorToLocalDebugger(otlp);
   }
   createSpan(args) {
     var _a;
@@ -654,14 +777,7 @@ var TraceShipper = class {
       status: args.status
     });
     this.enqueue(otlp);
-    if (this.localDebuggerUrl) {
-      const body = buildExportTraceServiceRequest([otlp], this.serviceName, this.serviceVersion);
-      mirrorTraceExportToLocalDebugger(body, {
-        baseUrl: this.localDebuggerUrl,
-        debug: false,
-        sdkName: this.sdkName
-      });
-    }
+    this.mirrorToLocalDebugger(otlp);
   }
   enqueue(span) {
     if (!this.enabled) return;
@@ -673,10 +789,12 @@ var TraceShipper = class {
         )}`
       );
     }
+    const redacted = this.redactSpan(span);
+    if (redacted === null) return;
     if (this.queue.length >= this.maxQueueSize) {
       this.queue.shift();
     }
-    this.queue.push(span);
+    this.queue.push(redacted);
     if (this.queue.length >= this.maxBatchSize) {
       void this.flush().catch(() => {
       });
@@ -744,7 +862,7 @@ globalThis.RAINDROP_ASYNC_LOCAL_STORAGE = AsyncLocalStorage;
 // package.json
 var package_default = {
   name: "@raindrop-ai/pi-agent",
-  version: "0.0.3",
+  version: "0.0.4",
   description: "Raindrop observability for Pi Agent \u2014 automatic tracing via subscriber or pi-coding-agent extension",
   type: "module",
   license: "MIT",
@@ -794,18 +912,18 @@ var package_default = {
     "test:watch": "vitest"
   },
   peerDependencies: {
-    "@mariozechner/pi-agent-core": ">=0.60.0",
-    "@mariozechner/pi-coding-agent": ">=0.65.2"
+    "@earendil-works/pi-agent-core": ">=0.74.0",
+    "@earendil-works/pi-coding-agent": ">=0.74.0"
   },
   peerDependenciesMeta: {
-    "@mariozechner/pi-coding-agent": {
+    "@earendil-works/pi-coding-agent": {
       optional: true
     }
   },
   devDependencies: {
     "@raindrop-ai/core": "workspace:*",
-    "@mariozechner/pi-agent-core": "^0.66.0",
-    "@mariozechner/pi-coding-agent": "^0.66.0",
+    "@earendil-works/pi-agent-core": "^0.78.0",
+    "@earendil-works/pi-coding-agent": "^0.78.0",
     "@types/node": "^20.11.17",
     msw: "^2.12.7",
     tsup: "^8.5.1",

package/dist/extension.cjs

@@ -25,7 +25,7 @@ __export(extension_exports, {
 });
 module.exports = __toCommonJS(extension_exports);
 
-// ../core/dist/chunk-OLYXZCOK.js
+// ../core/dist/chunk-VUNUOE2X.js
 function getCrypto() {
   const c = globalThis.crypto;
   return c;
@@ -567,6 +567,95 @@ var EventShipper = class {
     }
   }
 };
+var DEFAULT_SECRET_KEY_NAMES = [
+  "apikey",
+  "apisecret",
+  "apitoken",
+  "secretaccesskey",
+  "sessiontoken",
+  "privatekey",
+  "privatekeyid",
+  "clientsecret",
+  "accesstoken",
+  "refreshtoken",
+  "oauthtoken",
+  "bearertoken",
+  "authorization",
+  "password",
+  "passphrase"
+];
+var REDACTED_PLACEHOLDER = "[REDACTED]";
+function normalizeKeyName(name) {
+  return name.toLowerCase().replace(/[-_.]/g, "");
+}
+function redactSecretsInObject(value, options) {
+  var _a, _b;
+  const normalizedSecretSet = buildSecretSet((_a = options == null ? void 0 : options.secretKeyNames) != null ? _a : DEFAULT_SECRET_KEY_NAMES);
+  const placeholder = (_b = options == null ? void 0 : options.placeholder) != null ? _b : REDACTED_PLACEHOLDER;
+  const seen = /* @__PURE__ */ new WeakSet();
+  const walk = (node) => {
+    if (node === null || typeof node !== "object") return node;
+    if (seen.has(node)) return "[CIRCULAR]";
+    seen.add(node);
+    if (Array.isArray(node)) {
+      return node.map((item) => walk(item));
+    }
+    const out = {};
+    for (const [k, v] of Object.entries(node)) {
+      if (normalizedSecretSet.has(normalizeKeyName(k))) {
+        out[k] = placeholder;
+      } else {
+        out[k] = walk(v);
+      }
+    }
+    return out;
+  };
+  return walk(value);
+}
+function buildSecretSet(names) {
+  const set = /* @__PURE__ */ new Set();
+  for (const name of names) set.add(normalizeKeyName(name));
+  return set;
+}
+var DEFAULT_REDACT_ATTRIBUTE_KEYS = [
+  "ai.request.providerOptions",
+  "ai.response.providerMetadata"
+];
+function defaultTransformSpan(span) {
+  const attrs = span.attributes;
+  if (!attrs || attrs.length === 0) return span;
+  let nextAttrs;
+  for (let i = 0; i < attrs.length; i++) {
+    const attr = attrs[i];
+    const redacted = redactJsonAttributeValue(attr.key, attr.value);
+    if (redacted === void 0) continue;
+    if (!nextAttrs) nextAttrs = attrs.slice();
+    nextAttrs[i] = { key: attr.key, value: redacted };
+  }
+  if (!nextAttrs) return span;
+  return { ...span, attributes: nextAttrs };
+}
+var REDACT_JSON_ATTRIBUTE_KEYS = new Set(DEFAULT_REDACT_ATTRIBUTE_KEYS);
+function redactJsonAttributeValue(key, value) {
+  if (!REDACT_JSON_ATTRIBUTE_KEYS.has(key)) return void 0;
+  const json = value.stringValue;
+  if (typeof json !== "string" || json.length === 0) return void 0;
+  let parsed;
+  try {
+    parsed = JSON.parse(json);
+  } catch (e) {
+    return void 0;
+  }
+  const scrubbed = redactSecretsInObject(parsed);
+  let scrubbedJson;
+  try {
+    scrubbedJson = JSON.stringify(scrubbed);
+  } catch (e) {
+    return void 0;
+  }
+  if (scrubbedJson === json) return void 0;
+  return { stringValue: scrubbedJson };
+}
 var TraceShipper = class {
   constructor(opts) {
     this.queue = [];
@@ -588,6 +677,42 @@ var TraceShipper = class {
     if (this.debug && this.localDebuggerUrl) {
       console.log(`${this.prefix} Local debugger mirroring: ${this.localDebuggerUrl}`);
     }
+    this.transformSpanHook = opts.transformSpan;
+    this.disableDefaultRedaction = opts.disableDefaultRedaction === true;
+  }
+  /**
+   * Apply the user `transformSpan` hook (if any) followed by the default
+   * redactor (unless disabled). Returns either the (possibly new) span to
+   * ship, or `null` to drop the span entirely.
+   *
+   * Ordering: user hook runs first so callers can rewrite the span freely
+   * (rename attrs, add new ones, scrub things the default doesn't know
+   * about). The default redactor then runs on whatever the user produced,
+   * acting as the always-on floor for documented BYOK secrets. If the user
+   * sets `disableDefaultRedaction: true`, the floor is skipped.
+   *
+   * Fail-closed: if the user hook throws, the span is dropped — a buggy
+   * hook can never accidentally ship raw, un-redacted spans.
+   */
+  redactSpan(span) {
+    let current = span;
+    if (this.transformSpanHook) {
+      try {
+        const result = this.transformSpanHook(current);
+        if (result === null) return null;
+        if (result !== void 0) current = result;
+      } catch (err) {
+        if (this.debug) {
+          const msg = err instanceof Error ? err.message : String(err);
+          console.warn(`${this.prefix} transformSpan hook threw: ${msg}`);
+        }
+        return null;
+      }
+    }
+    if (!this.disableDefaultRedaction) {
+      current = defaultTransformSpan(current);
+    }
+    return current;
   }
   isDebugEnabled() {
     return this.debug;
@@ -605,8 +730,8 @@ var TraceShipper = class {
     ];
     if ((_b = args.attributes) == null ? void 0 : _b.length) attrs.push(...args.attributes);
     const span = { ids, name: args.name, startTimeUnixNano: started, attributes: attrs };
-    if (this.localDebuggerUrl) {
-      const openSpan = buildOtlpSpan({
+    this.mirrorToLocalDebugger(
+      buildOtlpSpan({
         ids: span.ids,
         name: span.name,
         startTimeUnixNano: span.startTimeUnixNano,
@@ -614,16 +739,21 @@ var TraceShipper = class {
         // placeholder — will be updated on endSpan
         attributes: span.attributes,
         status: { code: SpanStatusCode.UNSET }
-      });
-      const body = buildExportTraceServiceRequest([openSpan], this.serviceName, this.serviceVersion);
-      mirrorTraceExportToLocalDebugger(body, {
-        baseUrl: this.localDebuggerUrl,
-        debug: false,
-        sdkName: this.sdkName
-      });
-    }
+      })
+    );
     return span;
   }
+  mirrorToLocalDebugger(span) {
+    if (!this.localDebuggerUrl) return;
+    const redacted = this.redactSpan(span);
+    if (redacted === null) return;
+    const body = buildExportTraceServiceRequest([redacted], this.serviceName, this.serviceVersion);
+    mirrorTraceExportToLocalDebugger(body, {
+      baseUrl: this.localDebuggerUrl,
+      debug: false,
+      sdkName: this.sdkName
+    });
+  }
   endSpan(span, extra) {
     var _a, _b;
     if (span.endTimeUnixNano) return;
@@ -645,14 +775,7 @@ var TraceShipper = class {
       status
     });
     this.enqueue(otlp);
-    if (this.localDebuggerUrl) {
-      const body = buildExportTraceServiceRequest([otlp], this.serviceName, this.serviceVersion);
-      mirrorTraceExportToLocalDebugger(body, {
-        baseUrl: this.localDebuggerUrl,
-        debug: false,
-        sdkName: this.sdkName
-      });
-    }
+    this.mirrorToLocalDebugger(otlp);
   }
   createSpan(args) {
     var _a;
@@ -670,14 +793,7 @@ var TraceShipper = class {
       status: args.status
     });
     this.enqueue(otlp);
-    if (this.localDebuggerUrl) {
-      const body = buildExportTraceServiceRequest([otlp], this.serviceName, this.serviceVersion);
-      mirrorTraceExportToLocalDebugger(body, {
-        baseUrl: this.localDebuggerUrl,
-        debug: false,
-        sdkName: this.sdkName
-      });
-    }
+    this.mirrorToLocalDebugger(otlp);
   }
   enqueue(span) {
     if (!this.enabled) return;
@@ -689,10 +805,12 @@ var TraceShipper = class {
         )}`
       );
     }
+    const redacted = this.redactSpan(span);
+    if (redacted === null) return;
     if (this.queue.length >= this.maxQueueSize) {
       this.queue.shift();
     }
-    this.queue.push(span);
+    this.queue.push(redacted);
     if (this.queue.length >= this.maxBatchSize) {
       void this.flush().catch(() => {
       });
@@ -814,7 +932,7 @@ function resolveLocalWorkshopUrl(fileValue) {
 // package.json
 var package_default = {
   name: "@raindrop-ai/pi-agent",
-  version: "0.0.3",
+  version: "0.0.4",
   description: "Raindrop observability for Pi Agent \u2014 automatic tracing via subscriber or pi-coding-agent extension",
   type: "module",
   license: "MIT",
@@ -864,18 +982,18 @@ var package_default = {
     "test:watch": "vitest"
   },
   peerDependencies: {
-    "@mariozechner/pi-agent-core": ">=0.60.0",
-    "@mariozechner/pi-coding-agent": ">=0.65.2"
+    "@earendil-works/pi-agent-core": ">=0.74.0",
+    "@earendil-works/pi-coding-agent": ">=0.74.0"
   },
   peerDependenciesMeta: {
-    "@mariozechner/pi-coding-agent": {
+    "@earendil-works/pi-coding-agent": {
       optional: true
     }
   },
   devDependencies: {
     "@raindrop-ai/core": "workspace:*",
-    "@mariozechner/pi-agent-core": "^0.66.0",
-    "@mariozechner/pi-coding-agent": "^0.66.0",
+    "@earendil-works/pi-agent-core": "^0.78.0",
+    "@earendil-works/pi-coding-agent": "^0.78.0",
     "@types/node": "^20.11.17",
     msw: "^2.12.7",
     tsup: "^8.5.1",

package/dist/extension.d.cts

@@ -1,5 +1,5 @@
-import { ExtensionAPI } from '@mariozechner/pi-coding-agent';
-import { E as EventShipper$1, T as TraceShipper$1, O as OtlpSpan } from './index.d-CtwaEReY.cjs';
+import { ExtensionAPI } from '@earendil-works/pi-coding-agent';
+import { E as EventShipper$1, T as TraceShipper$1, O as OtlpSpan } from './index.d-Cxs_NTx0.cjs';
 
 interface EventMetadata {
     userId?: string;

package/dist/extension.d.ts

@@ -1,5 +1,5 @@
-import { ExtensionAPI } from '@mariozechner/pi-coding-agent';
-import { E as EventShipper$1, T as TraceShipper$1, O as OtlpSpan } from './index.d-CtwaEReY.js';
+import { ExtensionAPI } from '@earendil-works/pi-coding-agent';
+import { E as EventShipper$1, T as TraceShipper$1, O as OtlpSpan } from './index.d-Cxs_NTx0.js';
 
 interface EventMetadata {
     userId?: string;

package/dist/extension.js

@@ -13,7 +13,7 @@ import {
   resolveLocalDebuggerBaseUrl,
   safeStringify,
   truncate
-} from "./chunk-MHIMKMK7.js";
+} from "./chunk-EWIO36KH.js";
 
 // src/internal/config.ts
 import { existsSync, readFileSync } from "fs";

package/dist/index.cjs

@@ -24,7 +24,7 @@ __export(index_exports, {
 });
 module.exports = __toCommonJS(index_exports);
 
-// ../core/dist/chunk-OLYXZCOK.js
+// ../core/dist/chunk-VUNUOE2X.js
 function getCrypto() {
   const c = globalThis.crypto;
   return c;
@@ -574,6 +574,95 @@ var EventShipper = class {
     }
   }
 };
+var DEFAULT_SECRET_KEY_NAMES = [
+  "apikey",
+  "apisecret",
+  "apitoken",
+  "secretaccesskey",
+  "sessiontoken",
+  "privatekey",
+  "privatekeyid",
+  "clientsecret",
+  "accesstoken",
+  "refreshtoken",
+  "oauthtoken",
+  "bearertoken",
+  "authorization",
+  "password",
+  "passphrase"
+];
+var REDACTED_PLACEHOLDER = "[REDACTED]";
+function normalizeKeyName(name) {
+  return name.toLowerCase().replace(/[-_.]/g, "");
+}
+function redactSecretsInObject(value, options) {
+  var _a, _b;
+  const normalizedSecretSet = buildSecretSet((_a = options == null ? void 0 : options.secretKeyNames) != null ? _a : DEFAULT_SECRET_KEY_NAMES);
+  const placeholder = (_b = options == null ? void 0 : options.placeholder) != null ? _b : REDACTED_PLACEHOLDER;
+  const seen = /* @__PURE__ */ new WeakSet();
+  const walk = (node) => {
+    if (node === null || typeof node !== "object") return node;
+    if (seen.has(node)) return "[CIRCULAR]";
+    seen.add(node);
+    if (Array.isArray(node)) {
+      return node.map((item) => walk(item));
+    }
+    const out = {};
+    for (const [k, v] of Object.entries(node)) {
+      if (normalizedSecretSet.has(normalizeKeyName(k))) {
+        out[k] = placeholder;
+      } else {
+        out[k] = walk(v);
+      }
+    }
+    return out;
+  };
+  return walk(value);
+}
+function buildSecretSet(names) {
+  const set = /* @__PURE__ */ new Set();
+  for (const name of names) set.add(normalizeKeyName(name));
+  return set;
+}
+var DEFAULT_REDACT_ATTRIBUTE_KEYS = [
+  "ai.request.providerOptions",
+  "ai.response.providerMetadata"
+];
+function defaultTransformSpan(span) {
+  const attrs = span.attributes;
+  if (!attrs || attrs.length === 0) return span;
+  let nextAttrs;
+  for (let i = 0; i < attrs.length; i++) {
+    const attr = attrs[i];
+    const redacted = redactJsonAttributeValue(attr.key, attr.value);
+    if (redacted === void 0) continue;
+    if (!nextAttrs) nextAttrs = attrs.slice();
+    nextAttrs[i] = { key: attr.key, value: redacted };
+  }
+  if (!nextAttrs) return span;
+  return { ...span, attributes: nextAttrs };
+}
+var REDACT_JSON_ATTRIBUTE_KEYS = new Set(DEFAULT_REDACT_ATTRIBUTE_KEYS);
+function redactJsonAttributeValue(key, value) {
+  if (!REDACT_JSON_ATTRIBUTE_KEYS.has(key)) return void 0;
+  const json = value.stringValue;
+  if (typeof json !== "string" || json.length === 0) return void 0;
+  let parsed;
+  try {
+    parsed = JSON.parse(json);
+  } catch (e) {
+    return void 0;
+  }
+  const scrubbed = redactSecretsInObject(parsed);
+  let scrubbedJson;
+  try {
+    scrubbedJson = JSON.stringify(scrubbed);
+  } catch (e) {
+    return void 0;
+  }
+  if (scrubbedJson === json) return void 0;
+  return { stringValue: scrubbedJson };
+}
 var TraceShipper = class {
   constructor(opts) {
     this.queue = [];
@@ -595,6 +684,42 @@ var TraceShipper = class {
     if (this.debug && this.localDebuggerUrl) {
       console.log(`${this.prefix} Local debugger mirroring: ${this.localDebuggerUrl}`);
     }
+    this.transformSpanHook = opts.transformSpan;
+    this.disableDefaultRedaction = opts.disableDefaultRedaction === true;
+  }
+  /**
+   * Apply the user `transformSpan` hook (if any) followed by the default
+   * redactor (unless disabled). Returns either the (possibly new) span to
+   * ship, or `null` to drop the span entirely.
+   *
+   * Ordering: user hook runs first so callers can rewrite the span freely
+   * (rename attrs, add new ones, scrub things the default doesn't know
+   * about). The default redactor then runs on whatever the user produced,
+   * acting as the always-on floor for documented BYOK secrets. If the user
+   * sets `disableDefaultRedaction: true`, the floor is skipped.
+   *
+   * Fail-closed: if the user hook throws, the span is dropped — a buggy
+   * hook can never accidentally ship raw, un-redacted spans.
+   */
+  redactSpan(span) {
+    let current = span;
+    if (this.transformSpanHook) {
+      try {
+        const result = this.transformSpanHook(current);
+        if (result === null) return null;
+        if (result !== void 0) current = result;
+      } catch (err) {
+        if (this.debug) {
+          const msg = err instanceof Error ? err.message : String(err);
+          console.warn(`${this.prefix} transformSpan hook threw: ${msg}`);
+        }
+        return null;
+      }
+    }
+    if (!this.disableDefaultRedaction) {
+      current = defaultTransformSpan(current);
+    }
+    return current;
   }
   isDebugEnabled() {
     return this.debug;
@@ -612,8 +737,8 @@ var TraceShipper = class {
     ];
     if ((_b = args.attributes) == null ? void 0 : _b.length) attrs.push(...args.attributes);
     const span = { ids, name: args.name, startTimeUnixNano: started, attributes: attrs };
-    if (this.localDebuggerUrl) {
-      const openSpan = buildOtlpSpan({
+    this.mirrorToLocalDebugger(
+      buildOtlpSpan({
         ids: span.ids,
         name: span.name,
         startTimeUnixNano: span.startTimeUnixNano,
@@ -621,16 +746,21 @@ var TraceShipper = class {
         // placeholder — will be updated on endSpan
         attributes: span.attributes,
         status: { code: SpanStatusCode.UNSET }
-      });
-      const body = buildExportTraceServiceRequest([openSpan], this.serviceName, this.serviceVersion);
-      mirrorTraceExportToLocalDebugger(body, {
-        baseUrl: this.localDebuggerUrl,
-        debug: false,
-        sdkName: this.sdkName
-      });
-    }
+      })
+    );
     return span;
   }
+  mirrorToLocalDebugger(span) {
+    if (!this.localDebuggerUrl) return;
+    const redacted = this.redactSpan(span);
+    if (redacted === null) return;
+    const body = buildExportTraceServiceRequest([redacted], this.serviceName, this.serviceVersion);
+    mirrorTraceExportToLocalDebugger(body, {
+      baseUrl: this.localDebuggerUrl,
+      debug: false,
+      sdkName: this.sdkName
+    });
+  }
   endSpan(span, extra) {
     var _a, _b;
     if (span.endTimeUnixNano) return;
@@ -652,14 +782,7 @@ var TraceShipper = class {
       status
     });
     this.enqueue(otlp);
-    if (this.localDebuggerUrl) {
-      const body = buildExportTraceServiceRequest([otlp], this.serviceName, this.serviceVersion);
-      mirrorTraceExportToLocalDebugger(body, {
-        baseUrl: this.localDebuggerUrl,
-        debug: false,
-        sdkName: this.sdkName
-      });
-    }
+    this.mirrorToLocalDebugger(otlp);
   }
   createSpan(args) {
     var _a;
@@ -677,14 +800,7 @@ var TraceShipper = class {
       status: args.status
     });
     this.enqueue(otlp);
-    if (this.localDebuggerUrl) {
-      const body = buildExportTraceServiceRequest([otlp], this.serviceName, this.serviceVersion);
-      mirrorTraceExportToLocalDebugger(body, {
-        baseUrl: this.localDebuggerUrl,
-        debug: false,
-        sdkName: this.sdkName
-      });
-    }
+    this.mirrorToLocalDebugger(otlp);
   }
   enqueue(span) {
     if (!this.enabled) return;
@@ -696,10 +812,12 @@ var TraceShipper = class {
         )}`
       );
     }
+    const redacted = this.redactSpan(span);
+    if (redacted === null) return;
     if (this.queue.length >= this.maxQueueSize) {
       this.queue.shift();
     }
-    this.queue.push(span);
+    this.queue.push(redacted);
     if (this.queue.length >= this.maxBatchSize) {
       void this.flush().catch(() => {
       });
@@ -767,7 +885,7 @@ globalThis.RAINDROP_ASYNC_LOCAL_STORAGE = import_async_hooks.AsyncLocalStorage;
 // package.json
 var package_default = {
   name: "@raindrop-ai/pi-agent",
-  version: "0.0.3",
+  version: "0.0.4",
   description: "Raindrop observability for Pi Agent \u2014 automatic tracing via subscriber or pi-coding-agent extension",
   type: "module",
   license: "MIT",
@@ -817,18 +935,18 @@ var package_default = {
     "test:watch": "vitest"
   },
   peerDependencies: {
-    "@mariozechner/pi-agent-core": ">=0.60.0",
-    "@mariozechner/pi-coding-agent": ">=0.65.2"
+    "@earendil-works/pi-agent-core": ">=0.74.0",
+    "@earendil-works/pi-coding-agent": ">=0.74.0"
   },
   peerDependenciesMeta: {
-    "@mariozechner/pi-coding-agent": {
+    "@earendil-works/pi-coding-agent": {
       optional: true
     }
   },
   devDependencies: {
     "@raindrop-ai/core": "workspace:*",
-    "@mariozechner/pi-agent-core": "^0.66.0",
-    "@mariozechner/pi-coding-agent": "^0.66.0",
+    "@earendil-works/pi-agent-core": "^0.78.0",
+    "@earendil-works/pi-coding-agent": "^0.78.0",
     "@types/node": "^20.11.17",
     msw: "^2.12.7",
     tsup: "^8.5.1",

package/dist/{index.d-CtwaEReY.d.cts → index.d-Cxs_NTx0.d.cts}

@@ -117,6 +117,23 @@ declare class EventShipper {
     identify(users: IdentifyInput | IdentifyInput[]): Promise<void>;
     private flushOne;
 }
+/**
+ * Hook fired per OTLP span right before the span is shipped (to the Raindrop
+ * API and to a local debugger). Lets callers inspect, rewrite, or drop the
+ * entire span — not just individual attributes — which is more flexible than
+ * an attribute-level hook (you can rename attributes, add new ones, drop the
+ * span outright, etc.).
+ *
+ * Return values:
+ *   - `undefined` or the same span: ship the span unchanged.
+ *   - a new `OtlpSpan`: ship the returned span in place of the original.
+ *   - `null`: drop the span entirely from every ship path.
+ *
+ * The hook runs on the hot path — keep it synchronous and side-effect-free.
+ * If the hook throws, the span is dropped (fail-closed) so a buggy hook can
+ * never accidentally ship raw, un-redacted spans.
+ */
+type TransformSpanHook = (span: OtlpSpan) => OtlpSpan | null | undefined;
 
 type InternalSpan = {
     ids: SpanIds;
@@ -142,6 +159,40 @@ type TraceShipperOptions = {
      * Pass `null` to opt out of all mirroring (including auto-detect).
      */
     localDebuggerUrl?: string | null;
+    /**
+     * Per-span hook that fires for every OTLP span right before the span is
+     * shipped (both to the Raindrop API and to a local debugger). Lets callers
+     * inspect, rewrite, or drop entire spans — rename attributes, add new ones,
+     * scrub additional secret-shaped values inside `ai.prompt.messages` /
+     * `ai.toolCall.args`, etc.
+     *
+     * Return values:
+     *   - `undefined` or the same span reference: ship the span unchanged.
+     *   - a new `OtlpSpan`: ship the returned span in place of the original.
+     *   - `null`: drop the span entirely from every ship path.
+     *
+     * The hook runs BEFORE the default redactor (which is the always-on floor
+     * for documented BYOK secrets). The default redactor still runs on the
+     * post-transform span unless `disableDefaultRedaction` is set, so even if
+     * a custom transform overlooks a secret-shaped attribute, the floor catches
+     * it.
+     *
+     * The hook runs on the hot path — keep it synchronous and side-effect-free.
+     * If the hook itself throws, the span is dropped (fail-closed) so a buggy
+     * hook can never accidentally ship raw, un-redacted spans.
+     */
+    transformSpan?: TransformSpanHook;
+    /**
+     * Disable the built-in default span transformer (which scrubs documented
+     * secret-shaped properties — `apiKey`, `secretAccessKey`, `privateKey`,
+     * etc. — inside `ai.request.providerOptions` and
+     * `ai.response.providerMetadata`).
+     *
+     * Default: `false` (i.e. default redaction is on). Setting this to `true`
+     * disables the floor entirely; provide a custom `transformSpan` if you
+     * still want some redaction in that case.
+     */
+    disableDefaultRedaction?: boolean;
 };
 declare class TraceShipper {
     private baseUrl;
@@ -161,7 +212,24 @@ declare class TraceShipper {
     private inFlight;
     /** URL of the local debugger / Workshop daemon, when one is reachable. */
     private localDebuggerUrl;
+    private transformSpanHook;
+    private disableDefaultRedaction;
     constructor(opts: TraceShipperOptions);
+    /**
+     * Apply the user `transformSpan` hook (if any) followed by the default
+     * redactor (unless disabled). Returns either the (possibly new) span to
+     * ship, or `null` to drop the span entirely.
+     *
+     * Ordering: user hook runs first so callers can rewrite the span freely
+     * (rename attrs, add new ones, scrub things the default doesn't know
+     * about). The default redactor then runs on whatever the user produced,
+     * acting as the always-on floor for documented BYOK secrets. If the user
+     * sets `disableDefaultRedaction: true`, the floor is skipped.
+     *
+     * Fail-closed: if the user hook throws, the span is dropped — a buggy
+     * hook can never accidentally ship raw, un-redacted spans.
+     */
+    private redactSpan;
     isDebugEnabled(): boolean;
     private authHeaders;
     startSpan(args: {
@@ -175,6 +243,7 @@ declare class TraceShipper {
         attributes?: Array<OtlpKeyValue | undefined>;
         startTimeUnixNano?: string;
     }): InternalSpan;
+    private mirrorToLocalDebugger;
     endSpan(span: InternalSpan, extra?: {
         attributes?: InternalSpan["attributes"];
         error?: unknown;

package/dist/{index.d-CtwaEReY.d.ts → index.d-Cxs_NTx0.d.ts}

@@ -117,6 +117,23 @@ declare class EventShipper {
     identify(users: IdentifyInput | IdentifyInput[]): Promise<void>;
     private flushOne;
 }
+/**
+ * Hook fired per OTLP span right before the span is shipped (to the Raindrop
+ * API and to a local debugger). Lets callers inspect, rewrite, or drop the
+ * entire span — not just individual attributes — which is more flexible than
+ * an attribute-level hook (you can rename attributes, add new ones, drop the
+ * span outright, etc.).
+ *
+ * Return values:
+ *   - `undefined` or the same span: ship the span unchanged.
+ *   - a new `OtlpSpan`: ship the returned span in place of the original.
+ *   - `null`: drop the span entirely from every ship path.
+ *
+ * The hook runs on the hot path — keep it synchronous and side-effect-free.
+ * If the hook throws, the span is dropped (fail-closed) so a buggy hook can
+ * never accidentally ship raw, un-redacted spans.
+ */
+type TransformSpanHook = (span: OtlpSpan) => OtlpSpan | null | undefined;
 
 type InternalSpan = {
     ids: SpanIds;
@@ -142,6 +159,40 @@ type TraceShipperOptions = {
      * Pass `null` to opt out of all mirroring (including auto-detect).
      */
     localDebuggerUrl?: string | null;
+    /**
+     * Per-span hook that fires for every OTLP span right before the span is
+     * shipped (both to the Raindrop API and to a local debugger). Lets callers
+     * inspect, rewrite, or drop entire spans — rename attributes, add new ones,
+     * scrub additional secret-shaped values inside `ai.prompt.messages` /
+     * `ai.toolCall.args`, etc.
+     *
+     * Return values:
+     *   - `undefined` or the same span reference: ship the span unchanged.
+     *   - a new `OtlpSpan`: ship the returned span in place of the original.
+     *   - `null`: drop the span entirely from every ship path.
+     *
+     * The hook runs BEFORE the default redactor (which is the always-on floor
+     * for documented BYOK secrets). The default redactor still runs on the
+     * post-transform span unless `disableDefaultRedaction` is set, so even if
+     * a custom transform overlooks a secret-shaped attribute, the floor catches
+     * it.
+     *
+     * The hook runs on the hot path — keep it synchronous and side-effect-free.
+     * If the hook itself throws, the span is dropped (fail-closed) so a buggy
+     * hook can never accidentally ship raw, un-redacted spans.
+     */
+    transformSpan?: TransformSpanHook;
+    /**
+     * Disable the built-in default span transformer (which scrubs documented
+     * secret-shaped properties — `apiKey`, `secretAccessKey`, `privateKey`,
+     * etc. — inside `ai.request.providerOptions` and
+     * `ai.response.providerMetadata`).
+     *
+     * Default: `false` (i.e. default redaction is on). Setting this to `true`
+     * disables the floor entirely; provide a custom `transformSpan` if you
+     * still want some redaction in that case.
+     */
+    disableDefaultRedaction?: boolean;
 };
 declare class TraceShipper {
     private baseUrl;
@@ -161,7 +212,24 @@ declare class TraceShipper {
     private inFlight;
     /** URL of the local debugger / Workshop daemon, when one is reachable. */
     private localDebuggerUrl;
+    private transformSpanHook;
+    private disableDefaultRedaction;
     constructor(opts: TraceShipperOptions);
+    /**
+     * Apply the user `transformSpan` hook (if any) followed by the default
+     * redactor (unless disabled). Returns either the (possibly new) span to
+     * ship, or `null` to drop the span entirely.
+     *
+     * Ordering: user hook runs first so callers can rewrite the span freely
+     * (rename attrs, add new ones, scrub things the default doesn't know
+     * about). The default redactor then runs on whatever the user produced,
+     * acting as the always-on floor for documented BYOK secrets. If the user
+     * sets `disableDefaultRedaction: true`, the floor is skipped.
+     *
+     * Fail-closed: if the user hook throws, the span is dropped — a buggy
+     * hook can never accidentally ship raw, un-redacted spans.
+     */
+    private redactSpan;
     isDebugEnabled(): boolean;
     private authHeaders;
     startSpan(args: {
@@ -175,6 +243,7 @@ declare class TraceShipper {
         attributes?: Array<OtlpKeyValue | undefined>;
         startTimeUnixNano?: string;
     }): InternalSpan;
+    private mirrorToLocalDebugger;
     endSpan(span: InternalSpan, extra?: {
         attributes?: InternalSpan["attributes"];
         error?: unknown;

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { Agent } from '@mariozechner/pi-agent-core';
-import { A as Attachment } from './index.d-CtwaEReY.cjs';
+import { Agent } from '@earendil-works/pi-agent-core';
+import { A as Attachment } from './index.d-Cxs_NTx0.cjs';
 
 /**
  * Options for the Raindrop Pi Agent client.
@@ -125,7 +125,7 @@ interface RaindropPiAgentClient {
  *
  * @example
  * ```typescript
- * import { Agent } from "@mariozechner/pi-agent-core";
+ * import { Agent } from "@earendil-works/pi-agent-core";
  * import { createRaindropPiAgent } from "@raindrop-ai/pi-agent";
  *
  * const raindrop = createRaindropPiAgent({

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { Agent } from '@mariozechner/pi-agent-core';
-import { A as Attachment } from './index.d-CtwaEReY.js';
+import { Agent } from '@earendil-works/pi-agent-core';
+import { A as Attachment } from './index.d-Cxs_NTx0.js';
 
 /**
  * Options for the Raindrop Pi Agent client.
@@ -125,7 +125,7 @@ interface RaindropPiAgentClient {
  *
  * @example
  * ```typescript
- * import { Agent } from "@mariozechner/pi-agent-core";
+ * import { Agent } from "@earendil-works/pi-agent-core";
  * import { createRaindropPiAgent } from "@raindrop-ai/pi-agent";
  *
  * const raindrop = createRaindropPiAgent({

package/dist/index.js

@@ -16,7 +16,7 @@ import {
   resolveLocalDebuggerBaseUrl,
   safeStringify,
   truncate
-} from "./chunk-MHIMKMK7.js";
+} from "./chunk-EWIO36KH.js";
 
 // src/internal/subscriber.ts
 function createSubscriber(agent, eventShipper, traceShipper, defaultOptions, options, debug) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@raindrop-ai/pi-agent",
-  "version": "0.0.3",
+  "version": "0.0.4",
   "description": "Raindrop observability for Pi Agent — automatic tracing via subscriber or pi-coding-agent extension",
   "type": "module",
   "license": "MIT",
@@ -43,23 +43,23 @@
     "README.md"
   ],
   "peerDependencies": {
-    "@mariozechner/pi-agent-core": ">=0.60.0",
-    "@mariozechner/pi-coding-agent": ">=0.65.2"
+    "@earendil-works/pi-agent-core": ">=0.74.0",
+    "@earendil-works/pi-coding-agent": ">=0.74.0"
   },
   "peerDependenciesMeta": {
-    "@mariozechner/pi-coding-agent": {
+    "@earendil-works/pi-coding-agent": {
       "optional": true
     }
   },
   "devDependencies": {
-    "@mariozechner/pi-agent-core": "^0.66.0",
-    "@mariozechner/pi-coding-agent": "^0.66.0",
+    "@earendil-works/pi-agent-core": "^0.78.0",
+    "@earendil-works/pi-coding-agent": "^0.78.0",
     "@types/node": "^20.11.17",
     "msw": "^2.12.7",
     "tsup": "^8.5.1",
     "typescript": "^5.7.3",
     "vitest": "^2.1.9",
-    "@raindrop-ai/core": "0.0.1"
+    "@raindrop-ai/core": "0.0.2"
   },
   "tsup": {
     "entry": [