@senpi/runtime 3.0.6-dev.skill-manager-v2.20260629194505 → 3.0.9-dev.20260710204324

package/dist/telemetry/spans/gen-ai.js

@@ -0,0 +1,339 @@
+/**
+ * gen_ai / MCP span mapping — the one place that turns extracted hook content (or on-site
+ * MCP call data) into OpenTelemetry GenAI/MCP semantic-convention span attributes (the
+ * `GEN_AI` keys below). Standard keys only — no OpenClaw `openclaw.content.*` mirror, no
+ * OpenInference `input.value`/`output.value` aliases; `gen_ai.system_instructions` is the
+ * spec's underscore form.
+ *
+ * Content (messages, system instructions, tool args/result) is the highest-PII surface, so
+ * it is always redacted *before* stamping and capped *after* (sanitize → redact → cap) so a
+ * truncated value can't re-expose a partial secret. If the redactor fails to load, content is
+ * dropped rather than emitted unredacted.
+ */
+import { SpanStatusCode } from "@opentelemetry/api";
+import { createLogger } from "../../utils/logger.js";
+import { createOpenRedactionAdapter, redactStringsDeep, } from "./redact-pii.js";
+import { sanitizePayloadValue } from "./sanitize-payload.js";
+const logger = createLogger("[senpi-core][gen-ai]");
+// ─── Caps ─────────────────────────────────────────────────────────────────────
+/**
+ * Max chars per content attribute value, applied after redaction. A transport-safety
+ * cap that sits far under the OTLP/HTTP request-body limit (~20 MiB), not a backend
+ * storage limit — content this size is rare and we'd rather truncate than risk a
+ * rejected export.
+ */
+export const MAX_OTEL_CONTENT_ATTRIBUTE_CHARS = 256 * 1024;
+/** Max items per message / tool-definition array, applied after redaction. */
+export const MAX_OTEL_CONTENT_ARRAY_ITEMS = 200;
+/** Suffix appended when a non-array (string/object) value is tail-truncated to fit the cap. */
+const TRUNCATION_SUFFIX = "…[truncated]";
+// ─── GenAI semantic-convention attribute keys ────────────────────────────────
+export const GEN_AI = {
+    OPERATION_NAME: "gen_ai.operation.name",
+    CONVERSATION_ID: "gen_ai.conversation.id",
+    PROVIDER_NAME: "gen_ai.provider.name",
+    REQUEST_MODEL: "gen_ai.request.model",
+    REQUEST_TEMPERATURE: "gen_ai.request.temperature",
+    REQUEST_MAX_TOKENS: "gen_ai.request.max_tokens",
+    RESPONSE_MODEL: "gen_ai.response.model",
+    RESPONSE_FINISH_REASONS: "gen_ai.response.finish_reasons",
+    USAGE_INPUT_TOKENS: "gen_ai.usage.input_tokens",
+    USAGE_OUTPUT_TOKENS: "gen_ai.usage.output_tokens",
+    USAGE_CACHE_READ_TOKENS: "gen_ai.usage.cache_read_tokens",
+    USAGE_CACHE_WRITE_TOKENS: "gen_ai.usage.cache_write_tokens",
+    USAGE_TOTAL_TOKENS: "gen_ai.usage.total_tokens",
+    SYSTEM_INSTRUCTIONS: "gen_ai.system_instructions",
+    INPUT_MESSAGES: "gen_ai.input.messages",
+    OUTPUT_MESSAGES: "gen_ai.output.messages",
+    TOOL_DEFINITIONS: "gen_ai.tool.definitions",
+    AGENT_NAME: "gen_ai.agent.name",
+    TOOL_NAME: "gen_ai.tool.name",
+    TOOL_CALL_ID: "gen_ai.tool.call.id",
+    TOOL_CALL_ARGUMENTS: "gen_ai.tool.call.arguments",
+    TOOL_CALL_RESULT: "gen_ai.tool.call.result",
+};
+// ─── Content redactor (always on) ────────────────────────────────────────────
+let redactorPromise = null;
+/**
+ * Lazily build (once) the shared content redactor. Cached after first call so the
+ * OpenRedaction `enableCache` amortises multi-turn runs. Returns null only if the
+ * adapter fails to load (logged once) — callers then drop the content rather than
+ * emit it unredacted.
+ */
+async function getContentRedactor() {
+    if (redactorPromise === null) {
+        redactorPromise = createOpenRedactionAdapter().catch((err) => {
+            logger.warn("content redactor init failed; gen_ai content will be dropped until restart", err instanceof Error ? err : new Error(String(err)));
+            return null;
+        });
+    }
+    return redactorPromise;
+}
+/** Reset the cached redactor (tests only). */
+export function __resetContentRedactorForTest() {
+    redactorPromise = null;
+}
+// ─── Redact → cap → serialize ────────────────────────────────────────────────
+/** Build the elision marker prepended when older array elements are dropped. */
+function elisionMarker(droppedCount) {
+    return {
+        role: "system",
+        parts: [{ type: "text", content: `[${droppedCount} earlier messages elided]` }],
+    };
+}
+/**
+ * Cap an array (e.g. message history) keeping the NEWEST content. Trims the item count
+ * to the last {@link MAX_OTEL_CONTENT_ARRAY_ITEMS}, then — when the serialized JSON still
+ * exceeds the char cap — drops whole elements from the front (oldest) until it fits,
+ * prepending a single elision marker so the gap is visible. Returns the serialized string.
+ */
+function serializeArrayWithCap(value) {
+    let items = value.length > MAX_OTEL_CONTENT_ARRAY_ITEMS
+        ? value.slice(value.length - MAX_OTEL_CONTENT_ARRAY_ITEMS)
+        : value.slice();
+    const itemsTrimmed = value.length - items.length;
+    let dropped = 0;
+    let serialized = JSON.stringify(items);
+    while (serialized.length > MAX_OTEL_CONTENT_ATTRIBUTE_CHARS && items.length > 0) {
+        items.shift();
+        dropped += 1;
+        serialized = JSON.stringify([elisionMarker(itemsTrimmed + dropped), ...items]);
+    }
+    if (dropped > 0)
+        return serialized;
+    if (itemsTrimmed > 0)
+        return JSON.stringify([elisionMarker(itemsTrimmed), ...items]);
+    return serialized;
+}
+/**
+ * Tail-truncate a non-array serialized string to the char cap and append a compact
+ * suffix. Acceptable for non-cumulative values (system instructions, tool args/result)
+ * where the attribute is a plain string, not history we need to keep parseable.
+ */
+function capString(serialized) {
+    if (serialized.length <= MAX_OTEL_CONTENT_ATTRIBUTE_CHARS)
+        return serialized;
+    const keep = MAX_OTEL_CONTENT_ATTRIBUTE_CHARS - TRUNCATION_SUFFIX.length;
+    return serialized.slice(0, Math.max(0, keep)) + TRUNCATION_SUFFIX;
+}
+/**
+ * Turn a content value into a capped JSON string with PII redacted: sanitize framework
+ * metadata, redact (when a redactor is available), then serialize within the caps.
+ * Array content keeps the newest items (dropping oldest with a visible elision marker,
+ * so the result stays valid JSON); non-array content is tail-truncated with a suffix.
+ * Returns `undefined` when the value is empty. Never throws — a failure drops the value.
+ */
+export async function redactAndCapContent(value) {
+    if (value === undefined || value === null)
+        return undefined;
+    try {
+        const sanitized = sanitizePayloadValue(value);
+        const redactor = await getContentRedactor();
+        // Fail closed: if the redactor didn't load, drop the content rather than emit it
+        // unredacted — it is the highest-PII surface.
+        if (!redactor)
+            return undefined;
+        const redacted = await redactStringsDeep(sanitized, redactor);
+        if (typeof redacted === "string") {
+            return redacted.length === 0 ? undefined : capString(redacted);
+        }
+        if (Array.isArray(redacted)) {
+            const serialized = serializeArrayWithCap(redacted);
+            return serialized.length === 0 ? undefined : serialized;
+        }
+        const serialized = JSON.stringify(redacted);
+        if (serialized === undefined || serialized.length === 0)
+            return undefined;
+        return capString(serialized);
+    }
+    catch (err) {
+        logger.warn("failed to redact/serialize gen_ai content; dropping value", {
+            err: err instanceof Error ? err.message : String(err),
+        });
+        return undefined;
+    }
+}
+/** Redact + cap a content value and stamp it onto the span (when capture is on and non-empty). */
+export async function setGenAiContentAttribute(span, key, value) {
+    // Skip the whole redact/serialize pass when the span won't keep the result — telemetry
+    // off (no-op span) or sampled out. This keeps the cost off the hot path for callers that
+    // stamp content around a live call (e.g. MCP tool args/result on every trade).
+    if (!span.isRecording())
+        return;
+    const out = await redactAndCapContent(value);
+    if (out !== undefined) {
+        try {
+            span.setAttribute(key, out);
+        }
+        catch {
+            // Tracing must never break the caller.
+        }
+    }
+}
+// ─── Metadata helpers ────────────────────────────────────────────────────────
+/** Set every defined value in `attrs` on the span, skipping undefined/null. Never throws. */
+export function setDefinedAttributes(span, attrs) {
+    try {
+        for (const [k, v] of Object.entries(attrs)) {
+            if (v !== undefined && v !== null)
+                span.setAttribute(k, v);
+        }
+    }
+    catch {
+        // Tracing must never break the caller.
+    }
+}
+/** Low-cardinality `error.type` for the spec: error.name, the string itself, else "_OTHER". */
+export function errorTypeOf(error) {
+    if (error instanceof Error)
+        return error.name;
+    if (typeof error === "string")
+        return error;
+    return "_OTHER";
+}
+/**
+ * Mark a span as failed: record the exception, set ERROR status, and stamp the spec's
+ * low-cardinality `error.type`. Never throws.
+ */
+export function recordSpanError(span, error) {
+    try {
+        span.recordException(error instanceof Error ? error : { message: String(error) });
+        span.setStatus({
+            code: SpanStatusCode.ERROR,
+            message: error instanceof Error ? error.message : String(error),
+        });
+        span.setAttribute("error.type", errorTypeOf(error));
+    }
+    catch {
+        // Tracing must never break the caller.
+    }
+}
+// ─── Value coercion ──────────────────────────────────────────────────────────
+/** First finite number among the candidates, else undefined. */
+export function firstNumber(...values) {
+    for (const v of values) {
+        if (typeof v === "number" && Number.isFinite(v))
+            return v;
+    }
+    return undefined;
+}
+/** Normalize a finish-reason value to a string array (gen_ai.response.finish_reasons is an array). */
+export function toFinishReasons(value) {
+    if (value === undefined || value === null)
+        return undefined;
+    if (Array.isArray(value)) {
+        const out = value.filter((v) => typeof v === "string");
+        return out.length > 0 ? out : undefined;
+    }
+    if (typeof value === "string" && value.length > 0)
+        return [value];
+    return undefined;
+}
+// ─── gen_ai message normalization ─────────────────────────────────────────────
+// Shape input/output messages into the spec's `{ role, parts: [...] }` structure
+// (parts are typed: text / tool_call / tool_call_response), matching the native
+// gateway mapping so the gen_ai views render identically. Unknown content is kept
+// as a native nested object (not stringified) rather than dropped, so the single
+// outer serialize escapes it exactly once.
+function isRecord(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function textPart(content) {
+    return { type: "text", content };
+}
+function toolCallResponsePart(part) {
+    return {
+        type: "tool_call_response",
+        ...(typeof part.id === "string" ? { id: part.id } : {}),
+        result: part.result ?? part.response ?? part.content ?? "",
+    };
+}
+/** Turn a message's `content` (string, array of blocks, or object) into typed parts. */
+function contentParts(value) {
+    if (typeof value === "string")
+        return value.length > 0 ? [textPart(value)] : [];
+    if (!Array.isArray(value)) {
+        if (value === undefined || value === null)
+            return [];
+        // Keep an unknown object as a native nested part — the single outer
+        // JSON.stringify in redactAndCapContent serializes it exactly once
+        // (pre-stringifying here would double-escape its sub-structures).
+        if (isRecord(value))
+            return [value];
+        return [textPart(String(value))];
+    }
+    const parts = [];
+    for (const part of value) {
+        if (typeof part === "string") {
+            if (part.length > 0)
+                parts.push(textPart(part));
+            continue;
+        }
+        if (!isRecord(part))
+            continue;
+        if (typeof part.text === "string") {
+            parts.push(textPart(part.text));
+        }
+        else if (part.type === "text" && typeof part.content === "string") {
+            parts.push(textPart(part.content));
+        }
+        else if ((part.type === "tool_call" || part.type === "toolCall") && typeof part.name === "string") {
+            parts.push({
+                type: "tool_call",
+                name: part.name,
+                ...(typeof part.id === "string" ? { id: part.id } : {}),
+                ...(part.arguments !== undefined ? { arguments: part.arguments } : {}),
+            });
+        }
+        else if (part.type === "tool_call_response") {
+            parts.push(toolCallResponsePart(part));
+        }
+        else {
+            // Unknown part kept as a native nested object (not stringified) so the
+            // single outer JSON.stringify serializes it once — preserving its real
+            // fields rather than escaping them into a text blob.
+            parts.push(part);
+        }
+    }
+    return parts;
+}
+function normalizeGenAiMessage(value, fallbackRole) {
+    if (typeof value === "string") {
+        return value.length > 0 ? { role: fallbackRole, parts: [textPart(value)] } : undefined;
+    }
+    if (!isRecord(value))
+        return undefined;
+    const rawRole = typeof value.role === "string" ? value.role : fallbackRole;
+    const role = rawRole === "toolResult" ? "tool" : rawRole;
+    let parts;
+    if (role === "tool") {
+        const explicit = contentParts(value.parts);
+        parts =
+            explicit.length > 0
+                ? explicit
+                : [toolCallResponsePart({ id: value.toolCallId, result: value.content ?? "" })];
+    }
+    else {
+        parts = contentParts(value.parts ?? value.content);
+    }
+    if (parts.length === 0)
+        return undefined;
+    const finish = typeof value.finish_reason === "string"
+        ? value.finish_reason
+        : typeof value.stopReason === "string"
+            ? value.stopReason
+            : undefined;
+    return { role, parts, ...(finish ? { finish_reason: finish } : {}) };
+}
+/** Normalize a list of raw provider messages into spec `{ role, parts }` objects. */
+export function normalizeGenAiMessages(value, fallbackRole) {
+    const source = Array.isArray(value) ? value : value === undefined || value === null ? [] : [value];
+    const out = [];
+    for (const item of source) {
+        const msg = normalizeGenAiMessage(item, fallbackRole);
+        if (msg)
+            out.push(msg);
+    }
+    return out.length > 0 ? out : undefined;
+}
+//# sourceMappingURL=gen-ai.js.map

package/dist/telemetry/spans/gen-ai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gen-ai.js","sourceRoot":"","sources":["../../../src/telemetry/spans/gen-ai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAEL,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,MAAM,GAAG,YAAY,CAAC,sBAAsB,CAAC,CAAC;AAEpD,iFAAiF;AAEjF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAG,GAAG,IAAI,CAAC;AAC3D,8EAA8E;AAC9E,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAChD,+FAA+F;AAC/F,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAEzC,gFAAgF;AAEhF,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,cAAc,EAAE,uBAAuB;IACvC,eAAe,EAAE,wBAAwB;IACzC,aAAa,EAAE,sBAAsB;IACrC,aAAa,EAAE,sBAAsB;IACrC,mBAAmB,EAAE,4BAA4B;IACjD,kBAAkB,EAAE,2BAA2B;IAC/C,cAAc,EAAE,uBAAuB;IACvC,uBAAuB,EAAE,gCAAgC;IACzD,kBAAkB,EAAE,2BAA2B;IAC/C,mBAAmB,EAAE,4BAA4B;IACjD,uBAAuB,EAAE,gCAAgC;IACzD,wBAAwB,EAAE,iCAAiC;IAC3D,kBAAkB,EAAE,2BAA2B;IAC/C,mBAAmB,EAAE,4BAA4B;IACjD,cAAc,EAAE,uBAAuB;IACvC,eAAe,EAAE,wBAAwB;IACzC,gBAAgB,EAAE,yBAAyB;IAC3C,UAAU,EAAE,mBAAmB;IAC/B,SAAS,EAAE,kBAAkB;IAC7B,YAAY,EAAE,qBAAqB;IACnC,mBAAmB,EAAE,4BAA4B;IACjD,gBAAgB,EAAE,yBAAyB;CACnC,CAAC;AAEX,gFAAgF;AAEhF,IAAI,eAAe,GAAuC,IAAI,CAAC;AAE/D;;;;;GAKG;AACH,KAAK,UAAU,kBAAkB;IAC/B,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,eAAe,GAAG,0BAA0B,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAC3D,MAAM,CAAC,IAAI,CACT,4EAA4E,EAC5E,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACpD,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,6BAA6B;IAC3C,eAAe,GAAG,IAAI,CAAC;AACzB,CAAC;AAED,gFAAgF;AAEhF,gFAAgF;AAChF,SAAS,aAAa,CAAC,YAAoB;IACzC,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,YAAY,2BAA2B,EAAE,CAAC;KAChF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,KAAgB;IAC7C,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,4BAA4B;QACrD,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,4BAA4B,CAAC;QAC1D,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAClB,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAEjD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,UAAU,CAAC,MAAM,GAAG,gCAAgC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChF,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,CAAC;QACb,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,YAAY,GAAG,OAAO,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IACnC,IAAI,YAAY,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;IACrF,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,UAAkB;IACnC,IAAI,UAAU,CAAC,MAAM,IAAI,gCAAgC;QAAE,OAAO,UAAU,CAAC;IAC7E,MAAM,IAAI,GAAG,gCAAgC,GAAG,iBAAiB,CAAC,MAAM,CAAC;IACzE,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,iBAAiB,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAc;IACtD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,kBAAkB,EAAE,CAAC;QAC5C,iFAAiF;QACjF,8CAA8C;QAC9C,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC9D,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;YACnD,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;QAC1D,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1E,OAAO,SAAS,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,2DAA2D,EAAE;YACvE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACtD,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAU,EACV,GAAW,EACX,KAAc;IAEd,uFAAuF;IACvF,yFAAyF;IACzF,+EAA+E;IAC/E,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,OAAO;IAChC,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;IACH,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF,6FAA6F;AAC7F,MAAM,UAAU,oBAAoB,CAAC,IAAU,EAAE,KAAiB;IAChE,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;gBAAE,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAU,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAU,EAAE,KAAc;IACxD,IAAI,CAAC;QACH,IAAI,CAAC,eAAe,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,cAAc,CAAC,KAAK;YAC1B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAChE,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF,gEAAgE;AAChE,MAAM,UAAU,WAAW,CAAC,GAAG,MAAiB;IAC9C,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAa,CAAC;QACnE,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAClE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,iFAAiF;AACjF,iFAAiF;AACjF,gFAAgF;AAChF,kFAAkF;AAClF,iFAAiF;AACjF,2CAA2C;AAE3C,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,oBAAoB,CAAC,IAA6B;IACzD,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,GAAG,CAAC,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE;KAC3D,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QACrD,oEAAoE;QACpE,mEAAmE;QACnE,kEAAkE;QAClE,IAAI,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,KAAK,GAA8B,EAAE,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAChD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QAC9B,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACpE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACrC,CAAC;aAAM,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpG,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,GAAG,CAAC,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvE,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,uEAAuE;YACvE,uEAAuE;YACvE,qDAAqD;YACrD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAAc,EACd,YAAkC;IAElC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;IAC3E,MAAM,IAAI,GAAG,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACzD,IAAI,KAAgC,CAAC;IACrC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3C,KAAK;YACH,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACjB,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,CAAC,oBAAoB,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IACtF,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,MAAM,GACV,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;QACrC,CAAC,CAAC,KAAK,CAAC,aAAa;QACrB,CAAC,CAAC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;YACpC,CAAC,CAAC,KAAK,CAAC,UAAU;YAClB,CAAC,CAAC,SAAS,CAAC;IAClB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,sBAAsB,CACpC,KAAc,EACd,YAAkC;IAElC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnG,MAAM,GAAG,GAAmC,EAAE,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,qBAAqB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACtD,IAAI,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC"}

package/dist/telemetry/spans/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Span telemetry — barrel export.
+ *
+ * Agent telemetry (LLM / tool / subagent / MCP) is emitted as real OTel gen_ai spans
+ * through the shared tracer: the gateway hooks via {@link registerSpanHooks}, on-site
+ * MCP calls via `SenpiClient.callTool` (both using the {@link module:gen-ai} mapping).
+ */
+export { HEADER_CORRELATION_ID, HEADER_ADDRESS, HEADER_RECIPE_NAME, HEADER_RUNTIME_ID, HEADER_RUNTIME_VERSION, } from "./constants.js";
+export { registerSpanHooks, type RegisterSpanHooksOptions, type SpanHooksPluginApi, } from "./span-hooks.js";
+export { GEN_AI, setGenAiContentAttribute, redactAndCapContent, } from "./gen-ai.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/telemetry/spans/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/telemetry/spans/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,GACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,MAAM,EACN,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,aAAa,CAAC"}

package/dist/telemetry/spans/index.js

@@ -0,0 +1,11 @@
+/**
+ * Span telemetry — barrel export.
+ *
+ * Agent telemetry (LLM / tool / subagent / MCP) is emitted as real OTel gen_ai spans
+ * through the shared tracer: the gateway hooks via {@link registerSpanHooks}, on-site
+ * MCP calls via `SenpiClient.callTool` (both using the {@link module:gen-ai} mapping).
+ */
+export { HEADER_CORRELATION_ID, HEADER_ADDRESS, HEADER_RECIPE_NAME, HEADER_RUNTIME_ID, HEADER_RUNTIME_VERSION, } from "./constants.js";
+export { registerSpanHooks, } from "./span-hooks.js";
+export { GEN_AI, setGenAiContentAttribute, redactAndCapContent, } from "./gen-ai.js";
+//# sourceMappingURL=index.js.map

package/dist/telemetry/spans/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/telemetry/spans/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,iBAAiB,GAGlB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,MAAM,EACN,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,aAAa,CAAC"}

package/dist/{tracking → telemetry}/spans/redact-pii.d.ts

@@ -1,24 +1,19 @@
 /**
- * PII + secret redaction for span payloads.
+ * PII + secret redaction for span content.
  *
- * Walks the `data` field of each span and replaces matches in string values
- * before the batch hits the wire. Runs at flush time (async) — the underlying
- * redactor is async, and the producer is fire-and-forget, so we pay the
- * latency on the network-bound path rather than on the caller's enqueue call.
+ * Walks a JSON-shaped value and replaces matches in string values. Reused by the
+ * gen_ai content path (`gen-ai.ts`), which redacts conversation/tool content inline
+ * before stamping it onto a span (awaited per call).
  *
  * Scope (see createOpenRedactionAdapter): emails, phones (US, international,
  * India, China, South Korea, Japan, UK mobile, Brazil), ~28 vendor API keys
  * / tokens (AWS, GitHub, Stripe, OpenAI, etc.), EVM private keys, Anthropic
  * `sk-ant-*` keys, generic `sk-*` keys, and BIP39 mnemonic phrases.
  *
- * Integration point: BatchingSpanTransport.flush() applies this to every
- * span in the batch before JSON.stringify. Only `span.data` is walked;
- * top-level columns (`address`, `correlationId`, etc.) are non-PII identifiers
- * and stay as-is.
- *
- * Off by default. Enable with `SENPI_PII_REDACTION_ENABLED=true`.
+ * The process-wide default redactor is registered unconditionally at plugin
+ * boot (see initDefaultPiiRedactor), so the event-log redact-field path
+ * (`logger.event()`) is scrubbed without an env gate.
  */
-import type { TrackingSpan } from "./types.js";
 /** Minimal interface so tests can inject a synchronous stub. */
 export interface PiiRedactor {
     redact(text: string): Promise<string>;
@@ -30,18 +25,21 @@ export interface PiiRedactor {
  * when nothing changes — useful for short-circuit downstream comparisons.
  */
 export declare function redactStringsDeep(value: unknown, redactor: PiiRedactor): Promise<unknown>;
+export declare function setDefaultPiiRedactor(r: PiiRedactor | null): void;
+export declare function getDefaultPiiRedactor(): PiiRedactor | null;
 /**
- * Redact PII inside `span.data` only. Top-level structural fields (address,
- * correlationId, runId, etc.) are non-PII identifiers and skipped.
+ * Register the process-wide default PII redactor at plugin boot. Always on, no
+ * env gate: `logger.event()` redact fields (free-text LLM reasoning, venue
+ * errors, raw signals) are scrubbed on the live path.
  *
- * Returns the same span if nothing changed (avoids object allocation when no
- * PII was found).
+ * Fire-and-forget and never awaited, so it adds no boot latency and can't
+ * introduce a boot failure mode. The OpenRedaction + bip39 imports are dynamic,
+ * so they cold-start here; until the promise resolves `getDefaultPiiRedactor()`
+ * is null and the event path fails safe (drops the fields rather than emitting
+ * them raw). On install failure the redactor stays null — the fields keep being
+ * dropped, never leaked.
  */
-export declare function redactSpanData(span: TrackingSpan, redactor: PiiRedactor): Promise<TrackingSpan>;
-export declare function setDefaultPiiRedactor(r: PiiRedactor | null): void;
-export declare function getDefaultPiiRedactor(): PiiRedactor | null;
-/** Reads SENPI_PII_REDACTION_ENABLED. Truthy only on exact "true". */
-export declare function isPiiRedactionEnabled(): boolean;
+export declare function initDefaultPiiRedactor(): void;
 /**
  * Find BIP39-mnemonic spans in `text` using a true sliding window — not
  * a greedy regex with a post-hoc validator.

package/dist/telemetry/spans/redact-pii.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-pii.d.ts","sourceRoot":"","sources":["../../../src/telemetry/spans/redact-pii.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAMH,gEAAgE;AAChE,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACvC;AAQD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,WAAW,GACpB,OAAO,CAAC,OAAO,CAAC,CAgClB;AAUD,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,WAAW,GAAG,IAAI,GAAG,IAAI,CAEjE;AAED,wBAAgB,qBAAqB,IAAI,WAAW,GAAG,IAAI,CAE1D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,IAAI,IAAI,CAc7C;AAwOD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,GACjB,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CA0CvC;AAsBD;;;;GAIG;AACH,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAI/E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAsB,0BAA0B,IAAI,OAAO,CAAC,WAAW,CAAC,CAkCvE"}

package/dist/{tracking → telemetry}/spans/redact-pii.js

@@ -1,22 +1,18 @@
 /**
- * PII + secret redaction for span payloads.
+ * PII + secret redaction for span content.
  *
- * Walks the `data` field of each span and replaces matches in string values
- * before the batch hits the wire. Runs at flush time (async) — the underlying
- * redactor is async, and the producer is fire-and-forget, so we pay the
- * latency on the network-bound path rather than on the caller's enqueue call.
+ * Walks a JSON-shaped value and replaces matches in string values. Reused by the
+ * gen_ai content path (`gen-ai.ts`), which redacts conversation/tool content inline
+ * before stamping it onto a span (awaited per call).
  *
  * Scope (see createOpenRedactionAdapter): emails, phones (US, international,
  * India, China, South Korea, Japan, UK mobile, Brazil), ~28 vendor API keys
  * / tokens (AWS, GitHub, Stripe, OpenAI, etc.), EVM private keys, Anthropic
  * `sk-ant-*` keys, generic `sk-*` keys, and BIP39 mnemonic phrases.
  *
- * Integration point: BatchingSpanTransport.flush() applies this to every
- * span in the batch before JSON.stringify. Only `span.data` is walked;
- * top-level columns (`address`, `correlationId`, etc.) are non-PII identifiers
- * and stay as-is.
- *
- * Off by default. Enable with `SENPI_PII_REDACTION_ENABLED=true`.
+ * The process-wide default redactor is registered unconditionally at plugin
+ * boot (see initDefaultPiiRedactor), so the event-log redact-field path
+ * (`logger.event()`) is scrubbed without an env gate.
  */
 import { createLogger } from "../../utils/logger.js";
 const logger = createLogger("[senpi-core][redact-pii]");
@@ -64,25 +60,11 @@ export async function redactStringsDeep(value, redactor) {
     }
     return value;
 }
-/**
- * Redact PII inside `span.data` only. Top-level structural fields (address,
- * correlationId, runId, etc.) are non-PII identifiers and skipped.
- *
- * Returns the same span if nothing changed (avoids object allocation when no
- * PII was found).
- */
-export async function redactSpanData(span, redactor) {
-    if (!span.data || typeof span.data !== "object")
-        return span;
-    const next = await redactStringsDeep(span.data, redactor);
-    if (next === span.data)
-        return span;
-    return { ...span, data: next };
-}
 // ─── Default redactor lifecycle ────────────────────────────────────────────
 //
-// The runtime registers a default redactor at startup when the feature flag is
-// on; transports look it up via getDefaultPiiRedactor(). Tests can override.
+// The plugin registers a default redactor at boot (always on); the event-log
+// redact-field path (`logger.event()`) looks it up via getDefaultPiiRedactor().
+// Tests can override.
 let defaultRedactor = null;
 export function setDefaultPiiRedactor(r) {
     defaultRedactor = r;
@@ -90,9 +72,27 @@ export function setDefaultPiiRedactor(r) {
 export function getDefaultPiiRedactor() {
     return defaultRedactor;
 }
-/** Reads SENPI_PII_REDACTION_ENABLED. Truthy only on exact "true". */
-export function isPiiRedactionEnabled() {
-    return process.env.SENPI_PII_REDACTION_ENABLED === "true";
+/**
+ * Register the process-wide default PII redactor at plugin boot. Always on, no
+ * env gate: `logger.event()` redact fields (free-text LLM reasoning, venue
+ * errors, raw signals) are scrubbed on the live path.
+ *
+ * Fire-and-forget and never awaited, so it adds no boot latency and can't
+ * introduce a boot failure mode. The OpenRedaction + bip39 imports are dynamic,
+ * so they cold-start here; until the promise resolves `getDefaultPiiRedactor()`
+ * is null and the event path fails safe (drops the fields rather than emitting
+ * them raw). On install failure the redactor stays null — the fields keep being
+ * dropped, never leaked.
+ */
+export function initDefaultPiiRedactor() {
+    createOpenRedactionAdapter()
+        .then((redactor) => {
+        setDefaultPiiRedactor(redactor);
+        logger.info("PII redaction ready — event redact fields scrubbed for emails, international phones (US/IN/CN/KR/JP/UK/BR/+intl), vendor API keys, EVM private keys, and BIP39 mnemonics before emit");
+    })
+        .catch((err) => {
+        logger.warn("PII redaction init failed — event evidence will be DROPPED (never emitted raw); check openredaction install", { err: err instanceof Error ? err.message : String(err) });
+    });
 }
 /**
  * Built-in OpenRedaction pattern types we allowlist for span redaction.
@@ -118,6 +118,10 @@ export function isPiiRedactionEnabled() {
  *     in some contexts via undocumented filters; replacing it with our own
  *     custom version gives us deterministic behavior.
  *   - `TURKEY_ID` — personal national ID, not a credential.
+ *   - `CARD_AUTH_CODE` — over-broad: emits the `[AUTH_*]` label on ordinary
+ *     auth vocabulary ("authenticate", "sensitive", "command", "credentials"),
+ *     which made captured prompts/content unreadable. Card CVV/CVC codes are
+ *     near-zero-likelihood in this runtime's content, so it's dropped entirely.
  */
 const ALLOWLISTED_PATTERN_TYPES = [
     // Contact PII (phones come from custom patterns below)
@@ -127,7 +131,6 @@ const ALLOWLISTED_PATTERN_TYPES = [
     "AWS_SECRET_KEY",
     "AZURE_STORAGE_KEY",
     "BEARER_TOKEN",
-    "CARD_AUTH_CODE",
     "DOCKER_AUTH",
     "FIREBASE_API_KEY",
     "GENERIC_API_KEY",

package/dist/telemetry/spans/redact-pii.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-pii.js","sourceRoot":"","sources":["../../../src/telemetry/spans/redact-pii.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,MAAM,MAAM,GAAG,YAAY,CAAC,0BAA0B,CAAC,CAAC;AAOxD,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAc,EACd,QAAqB;IAErB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE;gBAC7D,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBACrD,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;aAC5B,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CACvD,CAAC;QACF,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5D,CAAC;IACD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,iBAAiB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAU,CAAC,CAChG,CAAC;QACF,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;YAC7B,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACX,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,GAAG,IAAI,CAAC;QACrC,CAAC;QACD,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,EAAE;AACF,6EAA6E;AAC7E,gFAAgF;AAChF,sBAAsB;AAEtB,IAAI,eAAe,GAAuB,IAAI,CAAC;AAE/C,MAAM,UAAU,qBAAqB,CAAC,CAAqB;IACzD,eAAe,GAAG,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB;IACpC,0BAA0B,EAAE;SACzB,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QACjB,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CACT,sLAAsL,CACvL,CAAC;IACJ,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,MAAM,CAAC,IAAI,CACT,6GAA6G,EAC7G,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC1D,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,yBAAyB,GAAG;IAChC,uDAAuD;IACvD,OAAO;IACP,mCAAmC;IACnC,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;IACnB,cAAc;IACd,aAAa;IACb,kBAAkB;IAClB,iBAAiB;IACjB,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,gBAAgB;IAChB,WAAW;IACX,mBAAmB;IACnB,iBAAiB;IACjB,WAAW;IACX,qBAAqB;IACrB,aAAa;IACb,gBAAgB;IAChB,aAAa;IACb,YAAY;IACZ,kBAAkB;IAClB,aAAa;IACb,iBAAiB;IACjB,gBAAgB;IAChB,gBAAgB;IAChB,eAAe;CACP,CAAC;AAEX;;;;;;;;;;GAUG;AACH,MAAM,cAAc,GAOf;IACH;QACE,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,0BAA0B;QACjC,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,kBAAkB;QAC/B,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,0DAA0D;KACxE;IACD;QACE,IAAI,EAAE,UAAU;QAChB,sEAAsE;QACtE,qEAAqE;QACrE,KAAK,EAAE,8EAA8E;QACrF,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,gBAAgB;QAC7B,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,0EAA0E;KACxF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,8CAA8C;QACrD,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,gBAAgB;QAC7B,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,iEAAiE;KAC/E;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,wDAAwD;QAC/D,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,gBAAgB;QAC7B,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,qEAAqE;KACnF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,0DAA0D;QACjE,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,gBAAgB;QAC7B,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,oEAAoE;KAClF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,sDAAsD;QAC7D,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,gBAAgB;QAC7B,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,kEAAkE;KAChF;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,uDAAuD;QAC9D,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,gBAAgB;QAC7B,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,yCAAyC;KACvD;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,uDAAuD;QAC9D,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,gBAAgB;QAC7B,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,yDAAyD;KACvE;CACF,CAAC;AAEF;;;;;GAKG;AACH,IAAI,YAAY,GAAuB,IAAI,CAAC;AAC5C,KAAK,UAAU,eAAe;IAC5B,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAGjC,CAAC;IACF,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC;IAC1D,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,KAAK,UAAU,mBAAmB;IAWhC,OAAO;QACL,GAAG,cAAc;QACjB;YACE,IAAI,EAAE,oBAAoB;YAC1B,KAAK,EAAE,wBAAwB;YAC/B,QAAQ,EAAE,GAAG;YACb,WAAW,EAAE,sBAAsB;YACnC,QAAQ,EAAE,UAAU;YACpB,WAAW,EAAE,0FAA0F;SACxG;QACD;YACE,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,kDAAkD;YACzD,QAAQ,EAAE,GAAG;YACb,WAAW,EAAE,qBAAqB;YAClC,QAAQ,EAAE,UAAU;SACrB;QACD;YACE,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,gEAAgE;YACvE,QAAQ,EAAE,GAAG;YACb,WAAW,EAAE,cAAc;YAC3B,QAAQ,EAAE,UAAU;YACpB,WAAW,EAAE,yDAAyD;SACvE;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,KAAkB;IAElB,MAAM,MAAM,GAAwD,EAAE,CAAC;IACvE,MAAM,MAAM,GAAG,SAAS,CAAC;IACzB,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACzC,MAAM,KAAK,GAA0C,EAAE,CAAC;IACxD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACzB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;YAChC,IAAI,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC,MAAM;gBAAE,SAAS;YACxC,IAAI,KAAK,GAAG,IAAI,CAAC;YACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnC,KAAK,GAAG,KAAK,CAAC;oBACd,MAAM;gBACR,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACV,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;oBACnE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;wBACvB,KAAK,GAAG,KAAK,CAAC;wBACd,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,IAAI,CAAC;oBACT,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK;oBACtB,GAAG,EAAE,MAAM,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG;iBAC/B,CAAC,CAAC;gBACH,CAAC,IAAI,KAAK,CAAC;gBACX,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,CAAC,EAAE,CAAC;IACpB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,IAAI,eAAe,GAAG,CAAC,CAAC;AACxB,SAAS,mBAAmB,CAC1B,IAAY,EACZ,KAA4C;IAE5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,uEAAuE;QACvE,2DAA2D;QAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,EAAE,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAClE,GAAG,IAAI,aAAa,MAAM,GAAG,CAAC;QAC9B,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC;IACpB,CAAC;IACD,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IAAY;IAC5D,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7C,OAAO,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B;IAC9C,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,MAAM,mBAAmB,EAAE,CAAC;IACnD,2EAA2E;IAC3E,0EAA0E;IAC1E,gEAAgE;IAChE,MAAM,OAAO,GAAG;QACd,QAAQ,EAAE,CAAC,GAAG,yBAAyB,CAAC;QACxC,cAAc;QACd,qBAAqB,EAAE,KAAK;QAC5B,eAAe,EAAE,KAAK;QACtB,WAAW,EAAE,IAAI;QACjB,SAAS,EAAE,GAAG;QACd,iEAAiE;QACjE,uEAAuE;QACvE,uEAAuE;QACvE,yEAAyE;QACzE,yBAAyB,EAAE,KAAK;QAChC,mBAAmB,EAAE,GAAG;KACoC,CAAC;IAC/D,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IAC5C,wEAAwE;IACxE,0BAA0B;IAC1B,MAAM,eAAe,EAAE,CAAC;IACxB,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,IAAY;YACvB,sEAAsE;YACtE,sEAAsE;YACtE,qDAAqD;YACrD,MAAM,WAAW,GAAG,MAAM,2BAA2B,CAAC,IAAI,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAClD,OAAO,MAAM,CAAC,QAAQ,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/telemetry/spans/sanitize-payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-payload.d.ts","sourceRoot":"","sources":["../../../src/telemetry/spans/sanitize-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAWH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAY3D;AAQD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAwB5D"}

package/dist/telemetry/spans/sanitize-payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-payload.js","sourceRoot":"","sources":["../../../src/telemetry/spans/sanitize-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,wBAAwB,GAC5B,+GAA+G,CAAC;AAClH,MAAM,2BAA2B,GAAG,6BAA6B,CAAC;AAClE,MAAM,0BAA0B,GAC9B,uEAAuE,CAAC;AAC1E,MAAM,oBAAoB,GAAG,4DAA4D,CAAC;AAC1F,MAAM,0BAA0B,GAC9B,yKAAyK,CAAC;AAE5K,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,MAAM,kBAAkB,GAAG,KAAK;SAC7B,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC;SACxB,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;SACrB,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACzB,MAAM,sBAAsB,GAAG,kBAAkB;SAC9C,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC;SACxC,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC;SACvC,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC;SACvC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC;SACjC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC9B,OAAO,sBAAsB,CAAC,OAAO,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAC9B,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,GAAG,IAAI,CAAC;YACvC,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IAChC,CAAC;IACD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAC9C,IAAI,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;YACtB,IAAI,SAAS,KAAK,KAAK;gBAAE,OAAO,GAAG,IAAI,CAAC;QAC1C,CAAC;QACD,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IAChC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/telemetry/spans/span-hooks.d.ts

@@ -0,0 +1,18 @@
+/** Minimal shape of the OpenClaw plugin API surface we need. */
+export interface SpanHooksPluginApi {
+    on(hookName: string, handler: (...args: unknown[]) => void | Promise<void>, opts?: {
+        priority?: number;
+    }): void;
+}
+export interface RegisterSpanHooksOptions {
+    api: SpanHooksPluginApi;
+}
+/**
+ * Grace window the `agent_end` sweep holds a finished model span before ending it, so a
+ * trailing `llm_output` (observed ~1 ms later in the codex/harness flow, but timed generously)
+ * can finalize it with token usage + output messages first. Unref'd, so it never holds the
+ * process open; an orphan run with no `llm_output` lets the timer end the span.
+ */
+export declare const MODEL_SPAN_END_GRACE_MS = 2000;
+export declare function registerSpanHooks(options: RegisterSpanHooksOptions): void;
+//# sourceMappingURL=span-hooks.d.ts.map

package/dist/telemetry/spans/span-hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"span-hooks.d.ts","sourceRoot":"","sources":["../../../src/telemetry/spans/span-hooks.ts"],"names":[],"mappings":"AA6DA,gEAAgE;AAChE,MAAM,WAAW,kBAAkB;IACjC,EAAE,CACA,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EACrD,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3B,IAAI,CAAC;CACT;AAED,MAAM,WAAW,wBAAwB;IACvC,GAAG,EAAE,kBAAkB,CAAC;CACzB;AAED;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAW5C,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,CA2kBzE"}