@senpi/runtime 3.0.6-dev.skill-manager-v2.20260629194505 → 3.0.9-dev.runtime-phase-2.20260707070820

package/dist/telemetry/otel-sdk.js

@@ -0,0 +1,297 @@
+/**
+ * OpenTelemetry SDK stand-up: HyperDX's OTel distribution (`@hyperdx/node-opentelemetry`)
+ * — auto-instrumentation + uncaught-exception capture — against a self-hosted OTLP collector,
+ * with a process-stable resource-attribute set.
+ *
+ * Init runs from plugin `register()` (process scope): the agent hooks register there, before
+ * any runtime, and emit through this SDK's tracer. Only process-stable values ride the resource
+ * (`service.*`, `deployment.environment`, `user.id`), so init need not wait for a runtime.
+ *
+ * Gated by OTLP-config presence: inits iff an OTLP endpoint env is set (no enable flag, no
+ * localhost default). No endpoint ⇒ no SDK and the global tracer/logger no-op. If a non-noop
+ * global `TracerProvider` already exists (the gateway's `diagnostics-otel` owns it), we stand
+ * down and emit through the global API — one SDK per process, first writer wins.
+ *
+ * The package is imported dynamically: it reads `OTEL_EXPORTER_OTLP_*` at module-load and
+ * exposes no init() option for them, so the env must be set first. Under openclaw the operator
+ * sets all of these (the SDK derives none):
+ *   OTEL_EXPORTER_OTLP_ENDPOINT / _TRACES_ENDPOINT / _LOGS_ENDPOINT / _METRICS_ENDPOINT / _HEADERS
+ * See docs/runtime-docs/runtime-api.md (Tracing).
+ */
+import { randomUUID } from "node:crypto";
+import { trace } from "@opentelemetry/api";
+import { createLogger } from "../utils/logger.js";
+const logger = createLogger("telemetry/otel-sdk");
+/** Per-signal OTLP endpoint env vars; presence of any (or the base) is the on-switch. */
+const OTLP_ENDPOINT_ENV_VARS = [
+    "OTEL_EXPORTER_OTLP_ENDPOINT",
+    "OTEL_EXPORTER_OTLP_TRACES_ENDPOINT",
+    "OTEL_EXPORTER_OTLP_LOGS_ENDPOINT",
+    "OTEL_EXPORTER_OTLP_METRICS_ENDPOINT",
+];
+/** True when any OTLP endpoint env is set — the gate for standing up the plugin's SDK. */
+export function isOtlpEndpointConfigured() {
+    return OTLP_ENDPOINT_ENV_VARS.some((name) => {
+        const value = process.env[name];
+        return typeof value === "string" && value.trim().length > 0;
+    });
+}
+/**
+ * True when a real (non-noop) global `TracerProvider` is already registered — i.e.
+ * another SDK (the gateway's `diagnostics-otel`) owns the slot. The global API hands
+ * back a `ProxyTracerProvider` until `setGlobalTracerProvider` runs; before that its
+ * delegate is the no-op provider. We detect "real" by checking whether a delegate
+ * provider has been set: `getDelegate()` exists on the proxy and differs from the
+ * no-op. Best-effort — on any uncertainty we treat it as "not owned" and init our own.
+ */
+function globalTracerProviderIsReal() {
+    try {
+        const provider = trace.getTracerProvider();
+        if (typeof provider?.getDelegate !== "function") {
+            // Not a ProxyTracerProvider — a concrete provider is registered directly.
+            return true;
+        }
+        const delegate = provider.getDelegate();
+        if (delegate == null)
+            return false;
+        // The proxy's default delegate is the NoopTracerProvider; anything else is real.
+        return delegate.constructor?.name !== "NoopTracerProvider";
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Process-level instance id for `service.instance.id`. Distinct from the
+ * per-runtime `IdentityEnvelope.bootId`: resource attributes are process-global,
+ * so this must identify the PROCESS (disambiguating restarts), not a single
+ * runtime — N runtimes share one of these.
+ */
+const PROCESS_INSTANCE_ID = randomUUID();
+/**
+ * Re-enable the undici (global `fetch`) auto-instrumentation after `hyperdx.init()`.
+ *
+ * HyperDX's `init()` leaves undici disabled: across init it calls
+ * `setConfig → enable (subscribe undici:request:*) → disable`, with no re-enable
+ * (observed by instrumenting the class). So `undici:request:create` ends with no
+ * subscribers and no `fetch()` produces an HTTP client span — untracing everything on
+ * global `fetch`: the Senpi MCP client (`StreamableHTTPClientTransport`), the LLM
+ * client, etc. (`net`/`dns`/`tls` are independent and still emit, so connections show
+ * up while the requests riding them don't.)
+ *
+ * Fix: enable our own `UndiciInstrumentation`; with no provider set it resolves the
+ * global one `init()` registered, and HyperDX's instance stays disabled (no double
+ * instrumentation). Best-effort — a failure must not fail boot. Also a prerequisite
+ * for the manual `mcp.*`/`dsl.*` spans, which assume outbound `fetch` calls
+ * auto-nest as HTTP children.
+ *
+ * Seen with `@hyperdx/node-opentelemetry` 0.11 / `instrumentation-undici` 0.28, Node 24
+ * — re-check on upgrade; drop if HyperDX stops disabling undici.
+ */
+async function reinstrumentUndici() {
+    try {
+        const mod = (await import("@opentelemetry/instrumentation-undici"));
+        new mod.UndiciInstrumentation().enable();
+        logger.debug("undici (fetch) instrumentation re-enabled post-init");
+    }
+    catch (err) {
+        logger.warn("failed to re-enable undici instrumentation; fetch client spans will be missing", {
+            err: err instanceof Error ? err.message : String(err),
+        });
+    }
+}
+/** Process-global once-only guard; resource attributes are immutable after init(). */
+let initialized = false;
+/**
+ * Reference to the loaded HyperDX module, captured at init so {@link shutdownOtelSdk}
+ * can flush the SDK without a second dynamic import. Process-global like the SDK itself.
+ */
+let hyperdxModule;
+/**
+ * Whether {@link initOtelSdk} has completed. Code that loads `@hyperdx/node-opentelemetry`
+ * lazily (e.g. per-trace attribute stamping) gates on this so the package — which captures
+ * its OTLP transport env at module-load — never loads when telemetry is disabled or under test.
+ */
+export function isOtelInitialized() {
+    return initialized;
+}
+/**
+ * Decode the `senpi_user_id` claim from a JWT without verifying its signature.
+ * Returns `undefined` for any non-JWT / malformed / missing-claim input; never throws.
+ *
+ * The claim name is assumed, not confirmed against a real token — if the id lives
+ * under a different claim (e.g. `sub`), this must change before `user.id` is trusted.
+ */
+export function decodeSenpiUserId(token) {
+    if (typeof token !== "string" || token.length === 0)
+        return undefined;
+    try {
+        const segments = token.split(".");
+        if (segments.length < 2)
+            return undefined;
+        const payloadSegment = segments[1];
+        if (!payloadSegment)
+            return undefined;
+        const json = Buffer.from(payloadSegment, "base64url").toString("utf8");
+        if (json.length === 0)
+            return undefined;
+        const payload = JSON.parse(json);
+        const claim = payload?.senpi_user_id;
+        // Only string/number; anything else (object/array) would coerce to junk.
+        if (typeof claim !== "string" && typeof claim !== "number")
+            return undefined;
+        const asString = String(claim);
+        return asString.length > 0 ? asString : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Build the `OTEL_RESOURCE_ATTRIBUTES` value as a `key=value,key=value` string.
+ * Values are percent-encoded so spaces/commas stay valid; empty keys are omitted.
+ *
+ * SCOPING (multi-runtime): resource attributes are process-global and immutable
+ * after the first init(), but N runtimes (one per wallet) share one process — so
+ * only PROCESS-STABLE values belong here. We carry:
+ *   - service.name, service.version, deployment.environment — process-stable.
+ *   - service.instance.id — a PROCESS-level id ({@link PROCESS_INSTANCE_ID}), not
+ *     the per-runtime `IdentityEnvelope.bootId`.
+ *   - user.id — process-stable: single-tenant, one SENPI_API_KEY = one user for
+ *     the whole process, so it is the same across every runtime here.
+ *
+ * The per-runtime keys (senpi.strategy.address, senpi.recipe, senpi.recipe.version,
+ * senpi.runtime, senpi.group, senpi.config.hash) are deliberately OMITTED — on a process-global
+ * resource they would stamp the first runtime's value onto every other runtime's
+ * telemetry. They ride per-trace via `setTraceAttributes` and per-log via the logger's
+ * emit-time identity stamp (both reading the same per-runtime identity context).
+ */
+export function buildOtelResourceAttributes(serviceName, extras) {
+    const pairs = [
+        ["service.name", serviceName],
+        ["service.instance.id", extras.serviceInstanceId],
+        ["service.version", extras.serviceVersion],
+        ["deployment.environment", extras.deploymentEnvironment],
+        ["user.id", extras.userId],
+    ];
+    return pairs
+        .filter(([, value]) => value !== undefined && String(value).length > 0)
+        .map(([key, value]) => `${key}=${encodeURIComponent(String(value))}`)
+        .join(",");
+}
+/** `service.name` for the plugin-owned resource; matches the tracer/logger scope. */
+const SERVICE_NAME = "senpi-trading-runtime";
+/**
+ * Initialise the OTel SDK. Idempotent, side-effecting, and never crashes boot:
+ * no-ops when no OTLP endpoint is configured, when a real global TracerProvider
+ * already exists (the gateway owns it — we emit through the global API instead),
+ * when already initialised, or under test.
+ */
+export async function initOtelSdk(params) {
+    if (initialized)
+        return;
+    // Presence of OTLP config is the on-switch — no endpoint means telemetry off.
+    if (!isOtlpEndpointConfigured()) {
+        logger.debug("OTel SDK init skipped: no OTLP endpoint configured");
+        return;
+    }
+    // Stand down if another SDK (the gateway's diagnostics-otel) already owns the
+    // global provider — a second registration drops spans and splits resource identity.
+    if (globalTracerProviderIsReal()) {
+        logger.info("OTel SDK init skipped: a global TracerProvider already exists; emitting through the global API");
+        initialized = true;
+        return;
+    }
+    // Skip under test: the SDK would start exporters and patch core modules during vitest.
+    if (process.env.VITEST || process.env.NODE_ENV === "test") {
+        logger.debug("OTel SDK init skipped: running under test");
+        return;
+    }
+    try {
+        // Commit the guard before any fallible work: a failed init must not let a
+        // later caller re-enter and double-append OTEL_RESOURCE_ATTRIBUTES.
+        initialized = true;
+        // Source the environment label from NODE_ENV (Node-standard). Pass the value
+        // through verbatim (so `staging`/custom envs are faithful), defaulting to
+        // "development" when unset/empty — a label must never claim production by
+        // accident; prod deployments set NODE_ENV=production as standard practice.
+        const nodeEnv = process.env.NODE_ENV?.trim();
+        const deploymentEnvironment = nodeEnv && nodeEnv.length > 0 ? nodeEnv : "development";
+        const userId = decodeSenpiUserId(params.userToken);
+        // Append to any host-set value rather than clobber operator attrs.
+        const ourAttrs = buildOtelResourceAttributes(SERVICE_NAME, {
+            serviceInstanceId: PROCESS_INSTANCE_ID,
+            serviceVersion: params.serviceVersion,
+            deploymentEnvironment,
+            userId,
+        });
+        const existingAttrs = process.env.OTEL_RESOURCE_ATTRIBUTES?.trim();
+        process.env.OTEL_RESOURCE_ATTRIBUTES = existingAttrs
+            ? `${existingAttrs},${ourAttrs}`
+            : ourAttrs;
+        // Dynamic import: loads only now, after the endpoint env is confirmed set.
+        const hyperdx = (await import("@hyperdx/node-opentelemetry"));
+        hyperdxModule = hyperdx;
+        hyperdx.init({
+            // No apiKey on init(): the exporter authenticates to the collector via the
+            // Authorization header in OTEL_EXPORTER_OTLP_HEADERS (read from env at
+            // module-load), not through the SDK's HyperDX apiKey field.
+            service: SERVICE_NAME,
+            // Off: createLogger() emits structured LogRecords through the OTel Logs API directly,
+            // so capturing console.* would duplicate every log (flattened, lossy) into the collector.
+            // stdout is untouched — the local human line still prints.
+            consoleCapture: false,
+            experimentalExceptionCapture: true,
+            // Don't let HyperDX install its own SIGTERM/SIGINT handlers. Its default
+            // handler calls process.exit() once its own _shutdown() settles, without
+            // awaiting our teardown. OpenClaw owns process lifecycle and drives
+            // Runtime.stop() → disposeRecording(), whose recording-batcher drain is an
+            // async network flush; HyperDX's exit would preempt that and drop buffered
+            // rows. Leaving this false hands shutdown ordering back to the gateway.
+            stopOnTerminationSignals: false,
+            // Arms setTraceAttributes: without it the span processor that copies per-trace
+            // identity onto every span and log stays disabled, and the stamping no-ops.
+            betaMode: true,
+        });
+        await reinstrumentUndici();
+        logger.info("OTel SDK initialised", {
+            service: SERVICE_NAME,
+            endpoint: process.env.OTEL_EXPORTER_OTLP_ENDPOINT,
+            deploymentEnvironment,
+        });
+    }
+    catch (err) {
+        logger.warn("OTel SDK init failed; continuing without telemetry transport", {
+            err: err instanceof Error ? err.message : String(err),
+        });
+    }
+}
+/**
+ * Flush and stop the OTel SDK. Best-effort, idempotent, never throws.
+ *
+ * Required because {@link initOtelSdk} disables HyperDX's own SIGTERM handler
+ * (`stopOnTerminationSignals: false`) — that handler was the SDK's only on-exit
+ * flush, so without an explicit shutdown the span/log batch processors' buffers
+ * are dropped at process exit. The SDK is process-global (one per process,
+ * shared across all hosted runtimes), so this must be called ONCE at process /
+ * plugin teardown, after every span has been emitted — never per-runtime, which
+ * would cut off telemetry for sibling runtimes still running.
+ */
+export async function shutdownOtelSdk() {
+    if (!initialized || !hyperdxModule)
+        return;
+    // Flip the guard first so a concurrent/duplicate teardown can't double-shutdown.
+    initialized = false;
+    const mod = hyperdxModule;
+    hyperdxModule = undefined;
+    try {
+        await mod.shutdown();
+        logger.debug("OTel SDK shut down (final flush complete)");
+    }
+    catch (err) {
+        logger.warn("OTel SDK shutdown failed; buffered spans/logs may be lost", {
+            err: err instanceof Error ? err.message : String(err),
+        });
+    }
+}
+//# sourceMappingURL=otel-sdk.js.map

package/dist/telemetry/otel-sdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otel-sdk.js","sourceRoot":"","sources":["../../src/telemetry/otel-sdk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,oBAAoB,CAAC,CAAC;AAElD,yFAAyF;AACzF,MAAM,sBAAsB,GAAG;IAC7B,6BAA6B;IAC7B,oCAAoC;IACpC,kCAAkC;IAClC,qCAAqC;CAC7B,CAAC;AAEX,0FAA0F;AAC1F,MAAM,UAAU,wBAAwB;IACtC,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,0BAA0B;IACjC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,EAEvC,CAAC;QACF,IAAI,OAAO,QAAQ,EAAE,WAAW,KAAK,UAAU,EAAE,CAAC;YAChD,0EAA0E;YAC1E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAqD,CAAC;QAC3F,IAAI,QAAQ,IAAI,IAAI;YAAE,OAAO,KAAK,CAAC;QACnC,iFAAiF;QACjF,OAAO,QAAQ,CAAC,WAAW,EAAE,IAAI,KAAK,oBAAoB,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,UAAU,EAAE,CAAC;AAuBzC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,KAAK,UAAU,kBAAkB;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,uCAAuC,CAAC,CAEjE,CAAC;QACF,IAAI,GAAG,CAAC,qBAAqB,EAAE,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,gFAAgF,EAAE;YAC5F,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,IAAI,WAAW,GAAG,KAAK,CAAC;AAExB;;;GAGG;AACH,IAAI,aAAwC,CAAC;AAE7C;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAyB;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,cAAc;YAAE,OAAO,SAAS,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;QAC5D,MAAM,KAAK,GAAG,OAAO,EAAE,aAAa,CAAC;QACrC,yEAAyE;QACzE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC7E,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAcD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,2BAA2B,CACzC,WAAmB,EACnB,MAA0B;IAE1B,MAAM,KAAK,GAAiD;QAC1D,CAAC,cAAc,EAAE,WAAW,CAAC;QAC7B,CAAC,qBAAqB,EAAE,MAAM,CAAC,iBAAiB,CAAC;QACjD,CAAC,iBAAiB,EAAE,MAAM,CAAC,cAAc,CAAC;QAC1C,CAAC,wBAAwB,EAAE,MAAM,CAAC,qBAAqB,CAAC;QACxD,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;KAC3B,CAAC;IAEF,OAAO,KAAK;SACT,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;SACtE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;SACpE,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AASD,qFAAqF;AACrF,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAyB;IACzD,IAAI,WAAW;QAAE,OAAO;IAExB,8EAA8E;IAC9E,IAAI,CAAC,wBAAwB,EAAE,EAAE,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IAED,8EAA8E;IAC9E,oFAAoF;IACpF,IAAI,0BAA0B,EAAE,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CACT,gGAAgG,CACjG,CAAC;QACF,WAAW,GAAG,IAAI,CAAC;QACnB,OAAO;IACT,CAAC;IAED,uFAAuF;IACvF,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,0EAA0E;QAC1E,oEAAoE;QACpE,WAAW,GAAG,IAAI,CAAC;QACnB,6EAA6E;QAC7E,0EAA0E;QAC1E,0EAA0E;QAC1E,2EAA2E;QAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC7C,MAAM,qBAAqB,GAAG,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;QACtF,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEnD,mEAAmE;QACnE,MAAM,QAAQ,GAAG,2BAA2B,CAAC,YAAY,EAAE;YACzD,iBAAiB,EAAE,mBAAmB;YACtC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,qBAAqB;YACrB,MAAM;SACP,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,aAAa;YAClD,CAAC,CAAC,GAAG,aAAa,IAAI,QAAQ,EAAE;YAChC,CAAC,CAAC,QAAQ,CAAC;QAEb,2EAA2E;QAC3E,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAA6B,CAAC;QAC1F,aAAa,GAAG,OAAO,CAAC;QAExB,OAAO,CAAC,IAAI,CAAC;YACX,2EAA2E;YAC3E,uEAAuE;YACvE,4DAA4D;YAC5D,OAAO,EAAE,YAAY;YACrB,sFAAsF;YACtF,0FAA0F;YAC1F,2DAA2D;YAC3D,cAAc,EAAE,KAAK;YACrB,4BAA4B,EAAE,IAAI;YAClC,yEAAyE;YACzE,yEAAyE;YACzE,oEAAoE;YACpE,2EAA2E;YAC3E,2EAA2E;YAC3E,wEAAwE;YACxE,wBAAwB,EAAE,KAAK;YAC/B,+EAA+E;YAC/E,4EAA4E;YAC5E,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,MAAM,kBAAkB,EAAE,CAAC;QAE3B,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE;YAClC,OAAO,EAAE,YAAY;YACrB,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B;YACjD,qBAAqB;SACtB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,8DAA8D,EAAE;YAC1E,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC,WAAW,IAAI,CAAC,aAAa;QAAE,OAAO;IAC3C,iFAAiF;IACjF,WAAW,GAAG,KAAK,CAAC;IACpB,MAAM,GAAG,GAAG,aAAa,CAAC;IAC1B,aAAa,GAAG,SAAS,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,2DAA2D,EAAE;YACvE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/telemetry/spans/constants.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Span telemetry constants.
+ *
+ * Header names used to cross the runtime → OpenClaw HTTP boundary so the
+ * gateway-side hooks can stamp senpi identity onto the gen_ai spans.
+ */
+export declare const HEADER_CORRELATION_ID = "x-senpi-correlation-id";
+export declare const HEADER_ADDRESS = "x-senpi-address";
+export declare const HEADER_RECIPE_NAME = "x-senpi-recipe-name";
+export declare const HEADER_RUNTIME_ID = "x-senpi-runtime-id";
+export declare const HEADER_RUNTIME_VERSION = "x-senpi-runtime-version";
+//# sourceMappingURL=constants.d.ts.map

package/dist/telemetry/spans/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/telemetry/spans/constants.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAO,MAAM,qBAAqB,2BAA2B,CAAC;AAC9D,eAAO,MAAM,cAAc,oBAAoB,CAAC;AAChD,eAAO,MAAM,kBAAkB,wBAAwB,CAAC;AACxD,eAAO,MAAM,iBAAiB,uBAAuB,CAAC;AACtD,eAAO,MAAM,sBAAsB,4BAA4B,CAAC"}

package/dist/telemetry/spans/constants.js

@@ -0,0 +1,12 @@
+/**
+ * Span telemetry constants.
+ *
+ * Header names used to cross the runtime → OpenClaw HTTP boundary so the
+ * gateway-side hooks can stamp senpi identity onto the gen_ai spans.
+ */
+export const HEADER_CORRELATION_ID = "x-senpi-correlation-id";
+export const HEADER_ADDRESS = "x-senpi-address";
+export const HEADER_RECIPE_NAME = "x-senpi-recipe-name";
+export const HEADER_RUNTIME_ID = "x-senpi-runtime-id";
+export const HEADER_RUNTIME_VERSION = "x-senpi-runtime-version";
+//# sourceMappingURL=constants.js.map

package/dist/telemetry/spans/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/telemetry/spans/constants.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAC9D,MAAM,CAAC,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAChD,MAAM,CAAC,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AACxD,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AACtD,MAAM,CAAC,MAAM,sBAAsB,GAAG,yBAAyB,CAAC"}

package/dist/telemetry/spans/gen-ai.d.ts

@@ -0,0 +1,74 @@
+/**
+ * gen_ai / MCP span mapping — the one place that turns extracted hook content (or on-site
+ * MCP call data) into OpenTelemetry GenAI/MCP semantic-convention span attributes (the
+ * `GEN_AI` keys below). Standard keys only — no OpenClaw `openclaw.content.*` mirror, no
+ * OpenInference `input.value`/`output.value` aliases; `gen_ai.system_instructions` is the
+ * spec's underscore form.
+ *
+ * Content (messages, system instructions, tool args/result) is the highest-PII surface, so
+ * it is always redacted *before* stamping and capped *after* (sanitize → redact → cap) so a
+ * truncated value can't re-expose a partial secret. If the redactor fails to load, content is
+ * dropped rather than emitted unredacted.
+ */
+import type { Attributes, Span } from "@opentelemetry/api";
+/**
+ * Max chars per content attribute value, applied after redaction. A transport-safety
+ * cap that sits far under the OTLP/HTTP request-body limit (~20 MiB), not a backend
+ * storage limit — content this size is rare and we'd rather truncate than risk a
+ * rejected export.
+ */
+export declare const MAX_OTEL_CONTENT_ATTRIBUTE_CHARS: number;
+/** Max items per message / tool-definition array, applied after redaction. */
+export declare const MAX_OTEL_CONTENT_ARRAY_ITEMS = 200;
+export declare const GEN_AI: {
+    readonly OPERATION_NAME: "gen_ai.operation.name";
+    readonly CONVERSATION_ID: "gen_ai.conversation.id";
+    readonly PROVIDER_NAME: "gen_ai.provider.name";
+    readonly REQUEST_MODEL: "gen_ai.request.model";
+    readonly REQUEST_TEMPERATURE: "gen_ai.request.temperature";
+    readonly REQUEST_MAX_TOKENS: "gen_ai.request.max_tokens";
+    readonly RESPONSE_MODEL: "gen_ai.response.model";
+    readonly RESPONSE_FINISH_REASONS: "gen_ai.response.finish_reasons";
+    readonly USAGE_INPUT_TOKENS: "gen_ai.usage.input_tokens";
+    readonly USAGE_OUTPUT_TOKENS: "gen_ai.usage.output_tokens";
+    readonly USAGE_CACHE_READ_TOKENS: "gen_ai.usage.cache_read_tokens";
+    readonly USAGE_CACHE_WRITE_TOKENS: "gen_ai.usage.cache_write_tokens";
+    readonly USAGE_TOTAL_TOKENS: "gen_ai.usage.total_tokens";
+    readonly SYSTEM_INSTRUCTIONS: "gen_ai.system_instructions";
+    readonly INPUT_MESSAGES: "gen_ai.input.messages";
+    readonly OUTPUT_MESSAGES: "gen_ai.output.messages";
+    readonly TOOL_DEFINITIONS: "gen_ai.tool.definitions";
+    readonly AGENT_NAME: "gen_ai.agent.name";
+    readonly TOOL_NAME: "gen_ai.tool.name";
+    readonly TOOL_CALL_ID: "gen_ai.tool.call.id";
+    readonly TOOL_CALL_ARGUMENTS: "gen_ai.tool.call.arguments";
+    readonly TOOL_CALL_RESULT: "gen_ai.tool.call.result";
+};
+/** Reset the cached redactor (tests only). */
+export declare function __resetContentRedactorForTest(): void;
+/**
+ * Turn a content value into a capped JSON string with PII redacted: sanitize framework
+ * metadata, redact (when a redactor is available), then serialize within the caps.
+ * Array content keeps the newest items (dropping oldest with a visible elision marker,
+ * so the result stays valid JSON); non-array content is tail-truncated with a suffix.
+ * Returns `undefined` when the value is empty. Never throws — a failure drops the value.
+ */
+export declare function redactAndCapContent(value: unknown): Promise<string | undefined>;
+/** Redact + cap a content value and stamp it onto the span (when capture is on and non-empty). */
+export declare function setGenAiContentAttribute(span: Span, key: string, value: unknown): Promise<void>;
+/** Set every defined value in `attrs` on the span, skipping undefined/null. Never throws. */
+export declare function setDefinedAttributes(span: Span, attrs: Attributes): void;
+/** Low-cardinality `error.type` for the spec: error.name, the string itself, else "_OTHER". */
+export declare function errorTypeOf(error: unknown): string;
+/**
+ * Mark a span as failed: record the exception, set ERROR status, and stamp the spec's
+ * low-cardinality `error.type`. Never throws.
+ */
+export declare function recordSpanError(span: Span, error: unknown): void;
+/** First finite number among the candidates, else undefined. */
+export declare function firstNumber(...values: unknown[]): number | undefined;
+/** Normalize a finish-reason value to a string array (gen_ai.response.finish_reasons is an array). */
+export declare function toFinishReasons(value: unknown): string[] | undefined;
+/** Normalize a list of raw provider messages into spec `{ role, parts }` objects. */
+export declare function normalizeGenAiMessages(value: unknown, fallbackRole: "user" | "assistant"): Array<Record<string, unknown>> | undefined;
+//# sourceMappingURL=gen-ai.d.ts.map

package/dist/telemetry/spans/gen-ai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gen-ai.d.ts","sourceRoot":"","sources":["../../../src/telemetry/spans/gen-ai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAc3D;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,QAAa,CAAC;AAC3D,8EAA8E;AAC9E,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAMhD,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;CAuBT,CAAC;AAyBX,8CAA8C;AAC9C,wBAAgB,6BAA6B,IAAI,IAAI,CAEpD;AA+CD;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAyBrF;AAED,kGAAkG;AAClG,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,IAAI,CAAC,CAaf;AAID,6FAA6F;AAC7F,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAQxE;AAED,+FAA+F;AAC/F,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAIlD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAWhE;AAID,gEAAgE;AAChE,wBAAgB,WAAW,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,SAAS,CAKpE;AAED,sGAAsG;AACtG,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,GAAG,SAAS,CAQpE;AAgGD,qFAAqF;AACrF,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,YAAY,EAAE,MAAM,GAAG,WAAW,GACjC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAQ5C"}