@raindrop-ai/pi-agent 0.0.4 → 0.0.5

package/dist/{index.d-Cxs_NTx0.d.cts → index.d-CRPiWjXE.d.cts}

@@ -35,7 +35,6 @@ type SpanIds = {
     spanIdB64: string;
     parentSpanIdB64?: string;
 };
-
 type Attachment = {
     type: string;
     role: string;
@@ -84,6 +83,14 @@ type EventShipperOptions = {
      * Pass `null` to opt out of all mirroring (including auto-detect).
      */
     localDebuggerUrl?: string | null;
+    /**
+     * Per-field character cap applied to event input/output BEFORE buffering
+     * or serialization, so oversized payloads cost the cap — not the payload —
+     * on the calling code path. Truncated fields end with
+     * `...[truncated by raindrop]` and never exceed the cap, marker included.
+     * Defaults to 1,000,000 (matching the Python SDK).
+     */
+    maxTextFieldChars?: number;
 };
 declare class EventShipper {
     private baseUrl;
@@ -99,11 +106,39 @@ declare class EventShipper {
     private sticky;
     private timers;
     private inFlight;
+    private maxTextFieldCharsOpt;
+    /**
+     * Epoch ms deadline while `shutdown()` is draining; undefined otherwise.
+     * Checked before every POST issued during the final flush.
+     */
+    private shutdownDeadlineAt;
+    /**
+     * Set once `shutdown()` begins and never cleared. Sends issued after the
+     * drain window (stragglers, or flush work the deadline abandoned
+     * mid-drain) run as a single short attempt instead of regaining the full
+     * retry schedule.
+     */
+    private hasShutdown;
     /** URL of the local debugger / Workshop daemon, when one is reachable. */
     private localDebuggerUrl;
     constructor(opts: EventShipperOptions);
     isDebugEnabled(): boolean;
     private authHeaders;
+    /**
+     * Build the retry/timeout options for one POST, honoring the shutdown
+     * deadline. Returns `null` when the shutdown drain window is exhausted —
+     * the caller must drop the payload (with a rate-limited warning) instead
+     * of issuing a request that could outlive process exit.
+     *
+     * Checked fresh on EVERY send, so a shutdown that begins while the flush
+     * path is mid-drain takes effect immediately: no further retries, and the
+     * per-attempt timeout is clamped to the remaining window. After
+     * `shutdown()` returns (deadline cleared, `hasShutdown` still set),
+     * sends — late callers, or flush work the deadline abandoned mid-drain —
+     * run as a single short attempt rather than regaining the full retry
+     * schedule.
+     */
+    private requestOpts;
     patch(eventId: string, patch: Patch): Promise<void>;
     finish(eventId: string, patch: {
         output?: string;
@@ -115,6 +150,7 @@ declare class EventShipper {
     shutdown(): Promise<void>;
     trackSignal(signal: SignalInput): Promise<void>;
     identify(users: IdentifyInput | IdentifyInput[]): Promise<void>;
+    private warnShutdownDrop;
     private flushOne;
 }
 /**
@@ -193,6 +229,15 @@ type TraceShipperOptions = {
      * still want some redaction in that case.
      */
     disableDefaultRedaction?: boolean;
+    /**
+     * Per-attribute character cap applied to every span attribute string value
+     * right before the span enters a ship path, so a multi-MB prompt/tool
+     * payload can never make the batch `JSON.stringify` (which runs on the
+     * event loop) cost seconds. Truncated values end with
+     * `...[truncated by raindrop]` and never exceed the cap, marker included.
+     * Defaults to 1,000,000 (matching the Python SDK).
+     */
+    maxTextFieldChars?: number;
 };
 declare class TraceShipper {
     private baseUrl;
@@ -214,7 +259,32 @@ declare class TraceShipper {
     private localDebuggerUrl;
     private transformSpanHook;
     private disableDefaultRedaction;
+    private maxTextFieldCharsOpt;
+    /**
+     * Epoch ms deadline while `shutdown()` is draining; undefined otherwise.
+     * Checked before every batch POST issued during the final flush.
+     */
+    private shutdownDeadlineAt;
+    /**
+     * Set once `shutdown()` begins and never cleared. Sends issued after the
+     * drain window (stragglers, or flush work the deadline abandoned
+     * mid-drain) run as a single short attempt instead of regaining the full
+     * retry schedule.
+     */
+    private hasShutdown;
     constructor(opts: TraceShipperOptions);
+    /**
+     * Cap every string attribute value on the span. O(#attributes) length
+     * checks; only oversized values pay a slice. Runs AFTER the redaction
+     * pipeline so the default secret-scrub still sees parseable JSON in
+     * `ai.request.providerOptions` / `ai.response.providerMetadata` (capping
+     * first could cut a JSON blob mid-way, fail the parse, and ship secrets
+     * in the surviving prefix).
+     *
+     * A stricter `OTEL_SPAN_ATTRIBUTE_VALUE_LENGTH_LIMIT` env var is honored
+     * for span content, matching the Python SDK and the OTel SDK convention.
+     */
+    private capSpanAttributes;
     /**
      * Apply the user `transformSpan` hook (if any) followed by the default
      * redactor (unless disabled). Returns either the (possibly new) span to
@@ -264,6 +334,8 @@ declare class TraceShipper {
     }): void;
     enqueue(span: OtlpSpan): void;
     flush(): Promise<void>;
+    /** See EventShipper.requestOpts — same shutdown-budget semantics. */
+    private requestOpts;
     shutdown(): Promise<void>;
 }
 

package/dist/{index.d-Cxs_NTx0.d.ts → index.d-CRPiWjXE.d.ts}

@@ -35,7 +35,6 @@ type SpanIds = {
     spanIdB64: string;
     parentSpanIdB64?: string;
 };
-
 type Attachment = {
     type: string;
     role: string;
@@ -84,6 +83,14 @@ type EventShipperOptions = {
      * Pass `null` to opt out of all mirroring (including auto-detect).
      */
     localDebuggerUrl?: string | null;
+    /**
+     * Per-field character cap applied to event input/output BEFORE buffering
+     * or serialization, so oversized payloads cost the cap — not the payload —
+     * on the calling code path. Truncated fields end with
+     * `...[truncated by raindrop]` and never exceed the cap, marker included.
+     * Defaults to 1,000,000 (matching the Python SDK).
+     */
+    maxTextFieldChars?: number;
 };
 declare class EventShipper {
     private baseUrl;
@@ -99,11 +106,39 @@ declare class EventShipper {
     private sticky;
     private timers;
     private inFlight;
+    private maxTextFieldCharsOpt;
+    /**
+     * Epoch ms deadline while `shutdown()` is draining; undefined otherwise.
+     * Checked before every POST issued during the final flush.
+     */
+    private shutdownDeadlineAt;
+    /**
+     * Set once `shutdown()` begins and never cleared. Sends issued after the
+     * drain window (stragglers, or flush work the deadline abandoned
+     * mid-drain) run as a single short attempt instead of regaining the full
+     * retry schedule.
+     */
+    private hasShutdown;
     /** URL of the local debugger / Workshop daemon, when one is reachable. */
     private localDebuggerUrl;
     constructor(opts: EventShipperOptions);
     isDebugEnabled(): boolean;
     private authHeaders;
+    /**
+     * Build the retry/timeout options for one POST, honoring the shutdown
+     * deadline. Returns `null` when the shutdown drain window is exhausted —
+     * the caller must drop the payload (with a rate-limited warning) instead
+     * of issuing a request that could outlive process exit.
+     *
+     * Checked fresh on EVERY send, so a shutdown that begins while the flush
+     * path is mid-drain takes effect immediately: no further retries, and the
+     * per-attempt timeout is clamped to the remaining window. After
+     * `shutdown()` returns (deadline cleared, `hasShutdown` still set),
+     * sends — late callers, or flush work the deadline abandoned mid-drain —
+     * run as a single short attempt rather than regaining the full retry
+     * schedule.
+     */
+    private requestOpts;
     patch(eventId: string, patch: Patch): Promise<void>;
     finish(eventId: string, patch: {
         output?: string;
@@ -115,6 +150,7 @@ declare class EventShipper {
     shutdown(): Promise<void>;
     trackSignal(signal: SignalInput): Promise<void>;
     identify(users: IdentifyInput | IdentifyInput[]): Promise<void>;
+    private warnShutdownDrop;
     private flushOne;
 }
 /**
@@ -193,6 +229,15 @@ type TraceShipperOptions = {
      * still want some redaction in that case.
      */
     disableDefaultRedaction?: boolean;
+    /**
+     * Per-attribute character cap applied to every span attribute string value
+     * right before the span enters a ship path, so a multi-MB prompt/tool
+     * payload can never make the batch `JSON.stringify` (which runs on the
+     * event loop) cost seconds. Truncated values end with
+     * `...[truncated by raindrop]` and never exceed the cap, marker included.
+     * Defaults to 1,000,000 (matching the Python SDK).
+     */
+    maxTextFieldChars?: number;
 };
 declare class TraceShipper {
     private baseUrl;
@@ -214,7 +259,32 @@ declare class TraceShipper {
     private localDebuggerUrl;
     private transformSpanHook;
     private disableDefaultRedaction;
+    private maxTextFieldCharsOpt;
+    /**
+     * Epoch ms deadline while `shutdown()` is draining; undefined otherwise.
+     * Checked before every batch POST issued during the final flush.
+     */
+    private shutdownDeadlineAt;
+    /**
+     * Set once `shutdown()` begins and never cleared. Sends issued after the
+     * drain window (stragglers, or flush work the deadline abandoned
+     * mid-drain) run as a single short attempt instead of regaining the full
+     * retry schedule.
+     */
+    private hasShutdown;
     constructor(opts: TraceShipperOptions);
+    /**
+     * Cap every string attribute value on the span. O(#attributes) length
+     * checks; only oversized values pay a slice. Runs AFTER the redaction
+     * pipeline so the default secret-scrub still sees parseable JSON in
+     * `ai.request.providerOptions` / `ai.response.providerMetadata` (capping
+     * first could cut a JSON blob mid-way, fail the parse, and ship secrets
+     * in the surviving prefix).
+     *
+     * A stricter `OTEL_SPAN_ATTRIBUTE_VALUE_LENGTH_LIMIT` env var is honored
+     * for span content, matching the Python SDK and the OTel SDK convention.
+     */
+    private capSpanAttributes;
     /**
      * Apply the user `transformSpan` hook (if any) followed by the default
      * redactor (unless disabled). Returns either the (possibly new) span to
@@ -264,6 +334,8 @@ declare class TraceShipper {
     }): void;
     enqueue(span: OtlpSpan): void;
     flush(): Promise<void>;
+    /** See EventShipper.requestOpts — same shutdown-budget semantics. */
+    private requestOpts;
     shutdown(): Promise<void>;
 }
 

package/dist/index.d.cts

@@ -1,5 +1,5 @@
 import { Agent } from '@earendil-works/pi-agent-core';
-import { A as Attachment } from './index.d-Cxs_NTx0.cjs';
+import { A as Attachment } from './index.d-CRPiWjXE.cjs';
 
 /**
  * Options for the Raindrop Pi Agent client.

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { Agent } from '@earendil-works/pi-agent-core';
-import { A as Attachment } from './index.d-Cxs_NTx0.js';
+import { A as Attachment } from './index.d-CRPiWjXE.js';
 
 /**
  * Options for the Raindrop Pi Agent client.

package/dist/index.js

@@ -3,6 +3,7 @@ import {
   TraceShipper,
   attrInt,
   attrString,
+  capText,
   extractAssistantText,
   extractModelName,
   extractTokenUsage,
@@ -16,7 +17,7 @@ import {
   resolveLocalDebuggerBaseUrl,
   safeStringify,
   truncate
-} from "./chunk-EWIO36KH.js";
+} from "./chunk-2NGOEVWI.js";
 
 // src/internal/subscriber.ts
 function createSubscriber(agent, eventShipper, traceShipper, defaultOptions, options, debug) {
@@ -105,9 +106,10 @@ function createSubscriber(agent, eventShipper, traceShipper, defaultOptions, opt
       if (!currentRun) return;
       const userText = extractUserText(message);
       if (userText !== void 0) {
-        currentRun.currentInput = userText;
+        const cappedInput = capText(userText);
+        currentRun.currentInput = cappedInput;
         if (eventShipper) {
-          eventShipper.patch(currentRun.eventId, { input: userText }).catch(() => {
+          eventShipper.patch(currentRun.eventId, { input: cappedInput }).catch(() => {
           });
         }
         return;
@@ -276,7 +278,7 @@ function createSubscriber(agent, eventShipper, traceShipper, defaultOptions, opt
         traceShipper.endSpan(run.currentTurnSpan);
         run.currentTurnSpan = void 0;
       }
-      const outputText = run.outputParts.join("");
+      const outputText = capText(run.outputParts.join(""));
       if (traceShipper && run.rootSpan) {
         const rootAttrs = [
           attrString("ai.operationId", "generateText")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@raindrop-ai/pi-agent",
-  "version": "0.0.4",
+  "version": "0.0.5",
   "description": "Raindrop observability for Pi Agent — automatic tracing via subscriber or pi-coding-agent extension",
   "type": "module",
   "license": "MIT",
@@ -59,7 +59,7 @@
     "tsup": "^8.5.1",
     "typescript": "^5.7.3",
     "vitest": "^2.1.9",
-    "@raindrop-ai/core": "0.0.2"
+    "@raindrop-ai/core": "0.0.3"
   },
   "tsup": {
     "entry": [