@senpi/runtime 3.0.6-dev.runtime-phase-2.20260630134145 → 3.0.6-dev.runtime-phase-2.20260630134307

package/dist/telemetry/trace-identity.js

@@ -0,0 +1,58 @@
+/**
+ * Pure, vendor-neutral mapping `IdentityEnvelope → senpi.* attributes`, set per-trace
+ * at each root span's birth. Per-runtime identity can't live on the process-global OTel
+ * resource — N wallets share one process, so a resource attribute would stamp the first
+ * runtime's value onto everyone's telemetry (see `otel-sdk.ts` SCOPING note).
+ *
+ * The actual stamping is HyperDX's `setTraceAttributes` (rides every span in the trace),
+ * called at the root-span seams — NOT here: importing `@hyperdx/node-opentelemetry`
+ * captures its OTLP transport env at module-load, so it must stay behind code that runs
+ * only after `initOtelSdk()`.
+ */
+import { isOtelInitialized } from "./otel-sdk.js";
+import { createLogger } from "../utils/logger.js";
+const logger = createLogger("telemetry/trace-identity");
+/**
+ * Map the runtime {@link IdentityEnvelope} to its `senpi.*` trace attributes. Optional
+ * envelope fields are omitted when unset rather than emitted as empty/undefined, so a
+ * trace never carries a hollow `senpi.config.hash=""`.
+ */
+export function identityTraceAttributes(identity) {
+    const attributes = {
+        "senpi.strategy.address": identity.strategyAddress,
+        "senpi.recipe": identity.recipe,
+        "senpi.runtime": identity.runtime,
+        "senpi.boot.id": identity.bootId,
+    };
+    if (identity.recipeVersion !== undefined) {
+        attributes["senpi.recipe.version"] = String(identity.recipeVersion);
+    }
+    if (identity.configHash !== undefined) {
+        attributes["senpi.config.hash"] = identity.configHash;
+    }
+    return attributes;
+}
+/**
+ * Stamp the runtime's `senpi.*` identity onto the active trace via HyperDX's
+ * `setTraceAttributes`, which rides every span in the trace. Call it from a root-span
+ * seam (inside an active span's context) so the whole trace carries the identity.
+ *
+ * No-ops until the SDK is initialised: the import is dynamic so `@hyperdx/node-opentelemetry`
+ * (which captures its OTLP env at module-load) only loads after `initOtelSdk()`, and there is
+ * no trace to stamp before then. Best-effort: a failure is logged and swallowed — tracing must
+ * never break trading.
+ */
+export async function setTraceIdentityAttributes(identity) {
+    if (!isOtelInitialized())
+        return;
+    try {
+        const hyperdx = (await import("@hyperdx/node-opentelemetry"));
+        hyperdx.setTraceAttributes(identityTraceAttributes(identity));
+    }
+    catch (err) {
+        logger.warn("failed to stamp per-trace identity attributes", {
+            err: err instanceof Error ? err.message : String(err),
+        });
+    }
+}
+//# sourceMappingURL=trace-identity.js.map

package/dist/telemetry/trace-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-identity.js","sourceRoot":"","sources":["../../src/telemetry/trace-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,0BAA0B,CAAC,CAAC;AAExD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAA0B;IAChE,MAAM,UAAU,GAAe;QAC7B,wBAAwB,EAAE,QAAQ,CAAC,eAAe;QAClD,cAAc,EAAE,QAAQ,CAAC,MAAM;QAC/B,eAAe,EAAE,QAAQ,CAAC,OAAO;QACjC,eAAe,EAAE,QAAQ,CAAC,MAAM;KACjC,CAAC;IACF,IAAI,QAAQ,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACzC,UAAU,CAAC,sBAAsB,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACtC,UAAU,CAAC,mBAAmB,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC;IACxD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,QAA0B;IACzE,IAAI,CAAC,iBAAiB,EAAE;QAAE,OAAO;IACjC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAE3D,CAAC;QACF,OAAO,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,+CAA+C,EAAE;YAC3D,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/telemetry/tracing.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The one place runtime code touches the OTel trace API: manual spans are created
+ * exclusively through {@link withSpan}. Vendor-neutral (depends only on
+ * `@opentelemetry/api`); the SDK itself is stood up in `otel-sdk.ts`. When the SDK
+ * is not initialised (telemetry off, or under test) the API resolves a no-op tracer,
+ * so `withSpan` runs the callback with near-zero overhead — no `enabled` gate needed.
+ */
+import { type Span, type Attributes, type Tracer } from "@opentelemetry/api";
+/** The single tracer for our manual spans. Resolves the no-op tracer pre-init. */
+export declare function getTracer(): Tracer;
+/**
+ * Run `fn` inside a new active span, standardising the lifecycle:
+ *
+ * - `startActiveSpan`, so the span is the active context: auto-instrumented HTTP
+ *   children and nested {@link withSpan} calls nest under it while work stays on the
+ *   synchronous `await` chain. (`startSpan` would detach children into roots.)
+ * - Passes the span **handle** into `fn` — use it for `addEvent`/`setAttribute`/
+ *   `recordException`, never `trace.getActiveSpan()` (ambiguous under concurrent
+ *   sibling spans, e.g. a `Promise.all` fan-out).
+ * - On throw: records the exception, sets ERROR status, then **rethrows** — tracing
+ *   observes, never alters control flow. Pass `options.expected` to mark control-flow
+ *   throws (e.g. `SkipScan`) that should propagate *without* painting the span red.
+ * - Always ends the span (`finally`), so a span can never leak.
+ *
+ * Tracing must never break runtime code: the span operations are guarded so a throw
+ * from the SDK — or from a caller's `expected` predicate — can neither mask `fn`'s
+ * error nor corrupt its result.
+ */
+export declare function withSpan<T>(name: string, attributes: Attributes, fn: (span: Span) => Promise<T>, options?: {
+    expected?: (err: unknown) => boolean;
+}): Promise<T>;
+//# sourceMappingURL=tracing.d.ts.map

package/dist/telemetry/tracing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracing.d.ts","sourceRoot":"","sources":["../../src/telemetry/tracing.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAGL,KAAK,IAAI,EACT,KAAK,UAAU,EACf,KAAK,MAAM,EACZ,MAAM,oBAAoB,CAAC;AAK5B,kFAAkF;AAClF,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EACxB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,UAAU,EACtB,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAC9B,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAA;CAAE,GACjD,OAAO,CAAC,CAAC,CAAC,CA8BZ"}

package/dist/telemetry/tracing.js

@@ -0,0 +1,70 @@
+/**
+ * The one place runtime code touches the OTel trace API: manual spans are created
+ * exclusively through {@link withSpan}. Vendor-neutral (depends only on
+ * `@opentelemetry/api`); the SDK itself is stood up in `otel-sdk.ts`. When the SDK
+ * is not initialised (telemetry off, or under test) the API resolves a no-op tracer,
+ * so `withSpan` runs the callback with near-zero overhead — no `enabled` gate needed.
+ */
+import { trace, SpanStatusCode, } from "@opentelemetry/api";
+/** Instrumentation scope for every span this runtime creates. */
+const TRACER_NAME = "senpi-trading-runtime";
+/** The single tracer for our manual spans. Resolves the no-op tracer pre-init. */
+export function getTracer() {
+    return trace.getTracer(TRACER_NAME);
+}
+/**
+ * Run `fn` inside a new active span, standardising the lifecycle:
+ *
+ * - `startActiveSpan`, so the span is the active context: auto-instrumented HTTP
+ *   children and nested {@link withSpan} calls nest under it while work stays on the
+ *   synchronous `await` chain. (`startSpan` would detach children into roots.)
+ * - Passes the span **handle** into `fn` — use it for `addEvent`/`setAttribute`/
+ *   `recordException`, never `trace.getActiveSpan()` (ambiguous under concurrent
+ *   sibling spans, e.g. a `Promise.all` fan-out).
+ * - On throw: records the exception, sets ERROR status, then **rethrows** — tracing
+ *   observes, never alters control flow. Pass `options.expected` to mark control-flow
+ *   throws (e.g. `SkipScan`) that should propagate *without* painting the span red.
+ * - Always ends the span (`finally`), so a span can never leak.
+ *
+ * Tracing must never break runtime code: the span operations are guarded so a throw
+ * from the SDK — or from a caller's `expected` predicate — can neither mask `fn`'s
+ * error nor corrupt its result.
+ */
+export function withSpan(name, attributes, fn, options) {
+    return getTracer().startActiveSpan(name, { attributes }, async (span) => {
+        try {
+            return await fn(span);
+        }
+        catch (err) {
+            let expected = false;
+            try {
+                expected = options?.expected?.(err) ?? false;
+            }
+            catch {
+                // A throwing predicate must never mask the real error; treat as unexpected.
+            }
+            if (expected)
+                throw err;
+            try {
+                span.recordException(err);
+                span.setStatus({
+                    code: SpanStatusCode.ERROR,
+                    message: err instanceof Error ? err.message : String(err),
+                });
+            }
+            catch {
+                // A tracing failure must never replace the real error the caller needs.
+            }
+            throw err;
+        }
+        finally {
+            try {
+                span.end();
+            }
+            catch {
+                // Span teardown must never break the caller's result or error.
+            }
+        }
+    });
+}
+//# sourceMappingURL=tracing.js.map

package/dist/telemetry/tracing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracing.js","sourceRoot":"","sources":["../../src/telemetry/tracing.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,KAAK,EACL,cAAc,GAIf,MAAM,oBAAoB,CAAC;AAE5B,iEAAiE;AACjE,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAE5C,kFAAkF;AAClF,MAAM,UAAU,SAAS;IACvB,OAAO,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,QAAQ,CACtB,IAAY,EACZ,UAAsB,EACtB,EAA8B,EAC9B,OAAkD;IAElD,OAAO,SAAS,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtE,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,CAAC;gBACH,QAAQ,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,4EAA4E;YAC9E,CAAC;YACD,IAAI,QAAQ;gBAAE,MAAM,GAAG,CAAC;YACxB,IAAI,CAAC;gBACH,IAAI,CAAC,eAAe,CAAC,GAAY,CAAC,CAAC;gBACnC,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,cAAc,CAAC,KAAK;oBAC1B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBAC1D,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,wEAAwE;YAC1E,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,+DAA+D;YACjE,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/types/scanner.d.ts

@@ -71,5 +71,7 @@ export interface ScanResult {
     reason?: string;
     /** Aggregated run metrics/details. */
     summary: Record<string, unknown>;
+    /** Telemetry-owned per-run id; join key linking scanner.run → signal.process. */
+    runId?: string;
 }
 //# sourceMappingURL=scanner.d.ts.map

package/dist/types/scanner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../../src/types/scanner.ts"],"names":[],"mappings":"AAEA,6EAA6E;AAC7E,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC;AAC/B,2CAA2C;AAC3C,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAIhC,uEAAuE;AACvE,oBAAY,UAAU;IACpB,EAAE,OAAO;IACT,SAAS,cAAc;IACvB,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,KAAK,UAAU;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,MAAM;IACrB,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,SAAS,EAAE,SAAS,CAAC;IACrB,mEAAmE;IACnE,UAAU,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,4DAA4D;IAC5D,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IACnC,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,mEAAmE;AACnE,MAAM,WAAW,UAAU;IACzB,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,SAAS,EAAE,SAAS,CAAC;IACrB,0DAA0D;IAC1D,MAAM,EAAE,UAAU,CAAC;IACnB,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,oDAAoD;IACpD,eAAe,EAAE,MAAM,CAAC;IACxB,sCAAsC;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC"}
+{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../../src/types/scanner.ts"],"names":[],"mappings":"AAEA,6EAA6E;AAC7E,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC;AAC/B,2CAA2C;AAC3C,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAIhC,uEAAuE;AACvE,oBAAY,UAAU;IACpB,EAAE,OAAO;IACT,SAAS,cAAc;IACvB,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,KAAK,UAAU;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,MAAM;IACrB,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,SAAS,EAAE,SAAS,CAAC;IACrB,mEAAmE;IACnE,UAAU,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,4DAA4D;IAC5D,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;IACnC,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,mEAAmE;AACnE,MAAM,WAAW,UAAU;IACzB,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,SAAS,EAAE,SAAS,CAAC;IACrB,0DAA0D;IAC1D,MAAM,EAAE,UAAU,CAAC;IACnB,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,oDAAoD;IACpD,eAAe,EAAE,MAAM,CAAC;IACxB,sCAAsC;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@senpi/runtime",
-  "version": "3.0.6-dev.runtime-phase-2.20260630134145",
+  "version": "3.0.6-dev.runtime-phase-2.20260630134307",
   "description": "Senpi runtime plugin for OpenClaw",
   "type": "module",
   "main": "dist/index.js",
@@ -34,6 +34,7 @@
     "@anthropic-ai/sdk": "^0.39.0",
     "@hyperdx/node-opentelemetry": "^0.11.0",
     "@modelcontextprotocol/sdk": "^1.0.0",
+    "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/instrumentation-undici": "^0.28.0",
     "@sinclair/typebox": "^0.34.0",
     "async-retry": "^1.3.3",
@@ -49,6 +50,8 @@
     "openclaw": ">=2026.5.0"
   },
   "devDependencies": {
+    "@opentelemetry/context-async-hooks": "^2.8.0",
+    "@opentelemetry/sdk-trace-base": "^2.8.0",
     "@types/async-retry": "^1.4.9",
     "@types/node": "^22.0.0",
     "tsx": "^4.21.0",