@skillsmith/core 0.9.0 → 0.11.0

package/dist/src/telemetry/wrap.d.ts

@@ -10,19 +10,40 @@
  * mutation) so arrow-const exports can be wrapped without mutation.
  * Applied review change H4: `framework` is captured per-call, not memoised.
  */
+import type { AgentMarker } from './agent-marker.js';
 type AnyFunction = (...args: never[]) => unknown;
 /**
- * Install (or clear) the per-process emission gate.
+ * Run `fn` with `enabled` installed as the emission-gate decision for every
+ * telemetry emit inside its async continuation. Concurrency-safe: parallel
+ * invocations each see only their own value; code outside any
+ * `runWithEmissionGate` scope falls back to the module `let` (default-suppress
+ * when that too is unset).
  *
- * Pass a predicate to enable telemetry only when the predicate returns true;
- * pass `undefined` to revert to the default-suppress behaviour. Callers should
- * always reset to `undefined` in a `finally` so a thrown handler does not
- * leak emission permission to the next request.
+ * Takes a resolved boolean VALUE (consent resolved once at dispatch) — contrast
+ * `setEmissionGate`, which takes a predicate thunk. The value is read live in
+ * the emit path, so an in-flight call always observes the gate active for ITS
+ * OWN scope, never a sibling's.
+ */
+export declare function runWithEmissionGate<T>(enabled: boolean, fn: () => Promise<T>): Promise<T>;
+/**
+ * Install (or clear) the process-wide FALLBACK emission gate.
  *
- * The predicate is evaluated once per call to a wrapped function, inside the
- * `finally` block, so it sees the live state of any per-request resolver.
+ * @deprecated Prefer `runWithEmissionGate`, which scopes the decision to a
+ * single call's async continuation and auto-unwinds — no reset discipline, no
+ * cross-call leak. `setEmissionGate` survives only as a test seam and the
+ * pre-SMI-5479 fallback: its predicate is consulted (evaluated once per wrapped
+ * call, in the `finally` block) ONLY when no `runWithEmissionGate` scope is
+ * active. Pass a predicate to enable emission when it returns true; pass
+ * `undefined` to revert to default-suppress.
  */
 export declare function setEmissionGate(gate: (() => boolean) | undefined): void;
+/**
+ * Run `fn` with `marker` installed as the agent-mediation context for every
+ * telemetry emit inside its async continuation. Concurrency-safe: parallel
+ * invocations each see only their own marker; code outside any
+ * `runWithMarkerContext` scope sees no marker (fields default false/false/null).
+ */
+export declare function runWithMarkerContext<T>(marker: AgentMarker, fn: () => Promise<T>): Promise<T>;
 /**
  * Options for `withTelemetry`.
  *

package/dist/src/telemetry/wrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrap.d.ts","sourceRoot":"","sources":["../../../src/telemetry/wrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAWH,KAAK,WAAW,GAAG,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,OAAO,CAAA;AAyBhD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,CAAC,MAAM,OAAO,CAAC,GAAG,SAAS,GAAG,IAAI,CAEvE;AAMD;;;;;;GAMG;AAMH,MAAM,WAAW,iBAAiB,CAAC,KAAK,SAAS,SAAS,OAAO,EAAE;IACjE,8EAA8E;IAC9E,MAAM,EAAE,UAAU,GAAG,KAAK,GAAG,kBAAkB,CAAA;IAC/C,qEAAqE;IACrE,cAAc,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,MAAM,CAAA;IACvC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,MAAM,CAAA;CAC3C;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,aAAa,CAAC,KAAK,SAAS,SAAS,OAAO,EAAE,EAAE,OAAO,EACrE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,EACvD,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,GAC7B,CAAC,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,CAoCtC;AAMD;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,WAAW,GAAG,OAAO,CAEtD"}
+{"version":3,"file":"wrap.d.ts","sourceRoot":"","sources":["../../../src/telemetry/wrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAWpD,KAAK,WAAW,GAAG,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,OAAO,CAAA;AAwChD;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEzF;AAOD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,CAAC,MAAM,OAAO,CAAC,GAAG,SAAS,GAAG,IAAI,CAEvE;AAsBD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAE7F;AAmCD;;;;;;GAMG;AAMH,MAAM,WAAW,iBAAiB,CAAC,KAAK,SAAS,SAAS,OAAO,EAAE;IACjE,8EAA8E;IAC9E,MAAM,EAAE,UAAU,GAAG,KAAK,GAAG,kBAAkB,CAAA;IAC/C,qEAAqE;IACrE,cAAc,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,MAAM,CAAA;IACvC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,MAAM,CAAA;CAC3C;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,aAAa,CAAC,KAAK,SAAS,SAAS,OAAO,EAAE,EAAE,OAAO,EACrE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,EACvD,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,GAC7B,CAAC,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,CA0FtC;AAMD;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,WAAW,GAAG,OAAO,CAEtD"}

package/dist/src/telemetry/wrap.gate.test.d.ts

@@ -0,0 +1,22 @@
+/**
+ * SMI-5479: `runWithEmissionGate` (AsyncLocalStorage emission gate) unit +
+ * concurrency coverage. Sibling to `wrap.test.ts` (split per the 500-line file
+ * gate); the pre-SMI-5479 module-`let` emission-gate cases stay in
+ * `wrap.test.ts` §9 untouched, proving the retained fallback's zero churn.
+ *
+ * Covers:
+ *   - T5: `runWithEmissionGate` unit — basic emit/suppress, nested scopes
+ *     (inner shadows outer), auto-unwind on return AND on throw,
+ *     ALS-store-beats-module-`let` precedence, fallback to the module `let`
+ *     when no store is present, and the false-shadow pin
+ *     (`setEmissionGate(() => true)` + active `runWithEmissionGate(false, …)`
+ *     → zero emit — pins `??` vs `||` at the emit read; an accidental `||`
+ *     would leak emission from a consent-off call).
+ *   - T3: parallel no-bleed for the GATE (P-5 heart) — manually-resolved
+ *     promises interleave one scope's exit against an in-flight call in another
+ *     scope; the in-flight call still emits per ITS OWN scope. The committed
+ *     regression pin for the `wrap.ts` ALS-precedence read — it fails if that
+ *     read is ever reverted to consult the module `let` only.
+ */
+export {};
+//# sourceMappingURL=wrap.gate.test.d.ts.map

package/dist/src/telemetry/wrap.gate.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap.gate.test.d.ts","sourceRoot":"","sources":["../../../src/telemetry/wrap.gate.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG"}

package/dist/src/telemetry/wrap.gate.test.js

@@ -0,0 +1,202 @@
+/**
+ * SMI-5479: `runWithEmissionGate` (AsyncLocalStorage emission gate) unit +
+ * concurrency coverage. Sibling to `wrap.test.ts` (split per the 500-line file
+ * gate); the pre-SMI-5479 module-`let` emission-gate cases stay in
+ * `wrap.test.ts` §9 untouched, proving the retained fallback's zero churn.
+ *
+ * Covers:
+ *   - T5: `runWithEmissionGate` unit — basic emit/suppress, nested scopes
+ *     (inner shadows outer), auto-unwind on return AND on throw,
+ *     ALS-store-beats-module-`let` precedence, fallback to the module `let`
+ *     when no store is present, and the false-shadow pin
+ *     (`setEmissionGate(() => true)` + active `runWithEmissionGate(false, …)`
+ *     → zero emit — pins `??` vs `||` at the emit read; an accidental `||`
+ *     would leak emission from a consent-off call).
+ *   - T3: parallel no-bleed for the GATE (P-5 heart) — manually-resolved
+ *     promises interleave one scope's exit against an in-flight call in another
+ *     scope; the in-flight call still emits per ITS OWN scope. The committed
+ *     regression pin for the `wrap.ts` ALS-precedence read — it fails if that
+ *     read is ever reverted to consult the module `let` only.
+ */
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import { withTelemetry, setEmissionGate, runWithEmissionGate } from './wrap.js';
+vi.mock('./posthog.js', () => ({
+    trackSkillInvoke: vi.fn(),
+}));
+// SMI-5615: test seam for the Wave-2 `logging/redact.ts` module — see
+// wrap.test.ts for rationale.
+vi.mock('../logging/redact.js', () => ({
+    redactSensitiveData: (s) => s,
+}));
+import { trackSkillInvoke } from './posthog.js';
+const mockTrack = vi.mocked(trackSkillInvoke);
+beforeEach(() => {
+    mockTrack.mockReset();
+    // No module `let` gate by default — the ALS scope is the unit under test.
+    // Cases that exercise the fallback / false-shadow install one explicitly.
+    setEmissionGate(undefined);
+});
+afterEach(() => {
+    setEmissionGate(undefined);
+    // The ALS gate needs no reset — `runWithEmissionGate` auto-scopes to its
+    // callback, so nothing can leak across tests.
+});
+const BASE_OPTS = {
+    source: 'mcp-tool',
+    extractSkillId: () => 'test/skill',
+};
+// ---------------------------------------------------------------------------
+// T5 — runWithEmissionGate unit
+// ---------------------------------------------------------------------------
+describe('runWithEmissionGate (T5 — ALS emission gate)', () => {
+    it('emits inside a runWithEmissionGate(true) scope', async () => {
+        const wrapped = withTelemetry(() => 'ok', BASE_OPTS);
+        await runWithEmissionGate(true, () => wrapped());
+        expect(mockTrack).toHaveBeenCalledOnce();
+    });
+    it('suppresses inside a runWithEmissionGate(false) scope', async () => {
+        const wrapped = withTelemetry(() => 'ok', BASE_OPTS);
+        await runWithEmissionGate(false, () => wrapped());
+        expect(mockTrack).not.toHaveBeenCalled();
+    });
+    it('nested scopes — inner false shadows outer true (no emit)', async () => {
+        const wrapped = withTelemetry(() => 'ok', BASE_OPTS);
+        await runWithEmissionGate(true, () => runWithEmissionGate(false, () => wrapped()));
+        expect(mockTrack).not.toHaveBeenCalled();
+    });
+    it('nested scopes — inner true shadows outer false (emit)', async () => {
+        const wrapped = withTelemetry(() => 'ok', BASE_OPTS);
+        await runWithEmissionGate(false, () => runWithEmissionGate(true, () => wrapped()));
+        expect(mockTrack).toHaveBeenCalledOnce();
+    });
+    it('auto-unwinds on return — a call after the scope resolves falls back to default-suppress', async () => {
+        const wrapped = withTelemetry(() => 'ok', BASE_OPTS);
+        await runWithEmissionGate(true, () => wrapped());
+        expect(mockTrack).toHaveBeenCalledOnce();
+        mockTrack.mockReset();
+        // Outside the scope now — no module gate installed → default-suppress.
+        await wrapped();
+        expect(mockTrack).not.toHaveBeenCalled();
+    });
+    it('auto-unwinds on throw — the scope does not leak to a later out-of-scope call', async () => {
+        const boom = withTelemetry(() => {
+            throw new Error('handler exploded');
+        }, BASE_OPTS);
+        await expect(runWithEmissionGate(true, () => boom())).rejects.toThrow('handler exploded');
+        // The throwing call itself emits (success:false) — the `finally` runs inside
+        // the still-live scope.
+        expect(mockTrack).toHaveBeenCalledOnce();
+        expect(mockTrack).toHaveBeenCalledWith(expect.objectContaining({ success: false }));
+        mockTrack.mockReset();
+        // The scope has unwound — a later out-of-scope call must not inherit `true`.
+        const wrapped = withTelemetry(() => 'ok', BASE_OPTS);
+        await wrapped();
+        expect(mockTrack).not.toHaveBeenCalled();
+    });
+    it('ALS store beats the module `let` — store true wins over a module-`let` false', async () => {
+        setEmissionGate(() => false);
+        const wrapped = withTelemetry(() => 'ok', BASE_OPTS);
+        await runWithEmissionGate(true, () => wrapped());
+        expect(mockTrack).toHaveBeenCalledOnce();
+    });
+    it('false-shadow pin (`??` not `||`) — store false wins over a permissive module `let`', async () => {
+        // The heart of the `??` vs `||` pin: a permissive module gate is installed,
+        // but an active consent-OFF ALS scope must suppress. `||` would let the
+        // module `true` leak emission from a consent-off call.
+        setEmissionGate(() => true);
+        const wrapped = withTelemetry(() => 'ok', BASE_OPTS);
+        await runWithEmissionGate(false, () => wrapped());
+        expect(mockTrack).not.toHaveBeenCalled();
+    });
+    it('falls back to the module `let` when no ALS scope is present (thunk true → emit)', async () => {
+        setEmissionGate(() => true);
+        const wrapped = withTelemetry(() => 'ok', BASE_OPTS);
+        await wrapped();
+        expect(mockTrack).toHaveBeenCalledOnce();
+    });
+    it('falls back to the module `let` when no ALS scope is present (thunk false → no emit)', async () => {
+        setEmissionGate(() => false);
+        const wrapped = withTelemetry(() => 'ok', BASE_OPTS);
+        await wrapped();
+        expect(mockTrack).not.toHaveBeenCalled();
+    });
+    it('default-suppress — no ALS scope and no module gate → no emit', async () => {
+        const wrapped = withTelemetry(() => 'ok', BASE_OPTS);
+        await wrapped();
+        expect(mockTrack).not.toHaveBeenCalled();
+    });
+});
+// ---------------------------------------------------------------------------
+// T3 — parallel no-bleed for the GATE (P-5 heart; committed regression pin)
+// ---------------------------------------------------------------------------
+describe('parallel no-bleed for the emission gate (T3 — P-5 invariant)', () => {
+    it('concurrent calls in different gate scopes each emit per their OWN scope', async () => {
+        // Failure mode this guards: if the emit read ignored the ALS store (a
+        // revert of the `wrap.ts` precedence read to the module `let` only), a
+        // consent-ON call's emit would be governed by whatever shared state last
+        // held — here call A's consent-OFF scope exiting mid-flight of B. Force the
+        // interleaving with manually-resolved promises: A (gate OFF) and B (gate
+        // ON) both start; A finishes (and must NOT emit) while B is still awaiting;
+        // then B finishes and MUST still emit per its own ON scope.
+        let releaseA;
+        let releaseB;
+        const blockA = new Promise((r) => (releaseA = r));
+        const blockB = new Promise((r) => (releaseB = r));
+        const emitted = [];
+        mockTrack.mockImplementation((p) => {
+            emitted.push(p.skillId);
+        });
+        const wrappedA = withTelemetry(async () => {
+            await blockA;
+            return 'A';
+        }, { ...BASE_OPTS, extractSkillId: () => 'tool-a' });
+        const wrappedB = withTelemetry(async () => {
+            await blockB;
+            return 'B';
+        }, { ...BASE_OPTS, extractSkillId: () => 'tool-b' });
+        // A in a consent-OFF scope, B in a consent-ON scope, both in flight.
+        const callA = runWithEmissionGate(false, () => wrappedA());
+        const callB = runWithEmissionGate(true, () => wrappedB());
+        // A completes (its `finally` runs inside A's OFF scope) while B still awaits.
+        releaseA();
+        await callA;
+        expect(emitted).toEqual([]); // A suppressed correctly; B not yet emitted.
+        // B completes — its emit reads B's OWN ON scope, not A's exited OFF scope.
+        releaseB();
+        await callB;
+        expect(emitted).toEqual(['tool-b']);
+    });
+    it('a sibling ON call still emits after a nested (middleware-style) ON scope unwinds', async () => {
+        // Models the double-gate reconciliation (Steps 2-3): an outer dispatch
+        // scope (ON) drives call X through a NESTED runWithEmissionGate (the
+        // middleware's own scope) that resolves and auto-unwinds first, while a
+        // sibling direct-dispatch call Y (ON) is still in flight. Y's emit must
+        // still fire — the inner scope's exit must not disturb Y's own scope.
+        let releaseX;
+        let releaseY;
+        const blockX = new Promise((r) => (releaseX = r));
+        const blockY = new Promise((r) => (releaseY = r));
+        const emitted = [];
+        mockTrack.mockImplementation((p) => {
+            emitted.push(p.skillId);
+        });
+        const wrappedX = withTelemetry(async () => {
+            await blockX;
+            return 'X';
+        }, { ...BASE_OPTS, extractSkillId: () => 'tool-x' });
+        const wrappedY = withTelemetry(async () => {
+            await blockY;
+            return 'Y';
+        }, { ...BASE_OPTS, extractSkillId: () => 'tool-y' });
+        // X: a nested ON scope inside an ON dispatch scope (the double-gate shape).
+        const callX = runWithEmissionGate(true, () => runWithEmissionGate(true, () => wrappedX()));
+        // Y: a sibling direct-dispatch ON scope, in flight.
+        const callY = runWithEmissionGate(true, () => wrappedY());
+        releaseX();
+        await callX;
+        releaseY();
+        await callY;
+        expect(emitted).toEqual(['tool-x', 'tool-y']);
+    });
+});
+//# sourceMappingURL=wrap.gate.test.js.map

package/dist/src/telemetry/wrap.gate.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap.gate.test.js","sourceRoot":"","sources":["../../../src/telemetry/wrap.gate.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACxE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAA;AAE/E,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7B,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE;CAC1B,CAAC,CAAC,CAAA;AAEH,sEAAsE;AACtE,8BAA8B;AAC9B,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC;IACrC,mBAAmB,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC;CACtC,CAAC,CAAC,CAAA;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,MAAM,SAAS,GAAG,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;AAE7C,UAAU,CAAC,GAAG,EAAE;IACd,SAAS,CAAC,SAAS,EAAE,CAAA;IACrB,0EAA0E;IAC1E,0EAA0E;IAC1E,eAAe,CAAC,SAAS,CAAC,CAAA;AAC5B,CAAC,CAAC,CAAA;AAEF,SAAS,CAAC,GAAG,EAAE;IACb,eAAe,CAAC,SAAS,CAAC,CAAA;IAC1B,yEAAyE;IACzE,8CAA8C;AAChD,CAAC,CAAC,CAAA;AAEF,MAAM,SAAS,GAAG;IAChB,MAAM,EAAE,UAAmB;IAC3B,cAAc,EAAE,GAAG,EAAE,CAAC,YAAY;CACnC,CAAA;AAED,8EAA8E;AAC9E,gCAAgC;AAChC,8EAA8E;AAE9E,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QACpD,MAAM,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;QAChD,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,EAAE,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QACpD,MAAM,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;QACjD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QACpD,MAAM,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QAClF,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QACpD,MAAM,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QAClF,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,EAAE,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACvG,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QACpD,MAAM,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;QAChD,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,EAAE,CAAA;QAExC,SAAS,CAAC,SAAS,EAAE,CAAA;QACrB,uEAAuE;QACvE,MAAM,OAAO,EAAE,CAAA;QACf,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,IAAI,GAAG,aAAa,CAAC,GAAU,EAAE;YACrC,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;QACrC,CAAC,EAAE,SAAS,CAAC,CAAA;QAEb,MAAM,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;QACzF,6EAA6E;QAC7E,wBAAwB;QACxB,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,EAAE,CAAA;QACxC,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;QAEnF,SAAS,CAAC,SAAS,EAAE,CAAA;QACrB,6EAA6E;QAC7E,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QACpD,MAAM,OAAO,EAAE,CAAA;QACf,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,eAAe,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAA;QAC5B,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QACpD,MAAM,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;QAChD,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,EAAE,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,4EAA4E;QAC5E,wEAAwE;QACxE,uDAAuD;QACvD,eAAe,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QAC3B,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QACpD,MAAM,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;QACjD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,eAAe,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QAC3B,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QACpD,MAAM,OAAO,EAAE,CAAA;QACf,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,EAAE,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,eAAe,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAA;QAC5B,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QACpD,MAAM,OAAO,EAAE,CAAA;QACf,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QACpD,MAAM,OAAO,EAAE,CAAA;QACf,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC1C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAE9E,QAAQ,CAAC,8DAA8D,EAAE,GAAG,EAAE;IAC5E,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,sEAAsE;QACtE,uEAAuE;QACvE,yEAAyE;QACzE,4EAA4E;QAC5E,yEAAyE;QACzE,4EAA4E;QAC5E,4DAA4D;QAC5D,IAAI,QAAqB,CAAA;QACzB,IAAI,QAAqB,CAAA;QACzB,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAA;QACvD,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAA;QAEvD,MAAM,OAAO,GAAa,EAAE,CAAA;QAC5B,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;YACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;QACzB,CAAC,CAAC,CAAA;QAEF,MAAM,QAAQ,GAAG,aAAa,CAC5B,KAAK,IAAI,EAAE;YACT,MAAM,MAAM,CAAA;YACZ,OAAO,GAAG,CAAA;QACZ,CAAC,EACD,EAAE,GAAG,SAAS,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CACjD,CAAA;QACD,MAAM,QAAQ,GAAG,aAAa,CAC5B,KAAK,IAAI,EAAE;YACT,MAAM,MAAM,CAAA;YACZ,OAAO,GAAG,CAAA;QACZ,CAAC,EACD,EAAE,GAAG,SAAS,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CACjD,CAAA;QAED,qEAAqE;QACrE,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAA;QAC1D,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAA;QAEzD,8EAA8E;QAC9E,QAAQ,EAAE,CAAA;QACV,MAAM,KAAK,CAAA;QACX,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA,CAAC,6CAA6C;QAEzE,2EAA2E;QAC3E,QAAQ,EAAE,CAAA;QACV,MAAM,KAAK,CAAA;QAEX,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,uEAAuE;QACvE,qEAAqE;QACrE,wEAAwE;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,IAAI,QAAqB,CAAA;QACzB,IAAI,QAAqB,CAAA;QACzB,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAA;QACvD,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAA;QAEvD,MAAM,OAAO,GAAa,EAAE,CAAA;QAC5B,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE;YACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;QACzB,CAAC,CAAC,CAAA;QAEF,MAAM,QAAQ,GAAG,aAAa,CAC5B,KAAK,IAAI,EAAE;YACT,MAAM,MAAM,CAAA;YACZ,OAAO,GAAG,CAAA;QACZ,CAAC,EACD,EAAE,GAAG,SAAS,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CACjD,CAAA;QACD,MAAM,QAAQ,GAAG,aAAa,CAC5B,KAAK,IAAI,EAAE;YACT,MAAM,MAAM,CAAA;YACZ,OAAO,GAAG,CAAA;QACZ,CAAC,EACD,EAAE,GAAG,SAAS,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CACjD,CAAA;QAED,4EAA4E;QAC5E,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QAC1F,oDAAoD;QACpD,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAA;QAEzD,QAAQ,EAAE,CAAA;QACV,MAAM,KAAK,CAAA;QACX,QAAQ,EAAE,CAAA;QACV,MAAM,KAAK,CAAA;QAEX,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/telemetry/wrap.js

@@ -10,43 +10,137 @@
  * mutation) so arrow-const exports can be wrapped without mutation.
  * Applied review change H4: `framework` is captured per-call, not memoised.
  */
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { randomUUID } from 'node:crypto';
 import { trackSkillInvoke } from './posthog.js';
+import { getCorrelationId, runWithCorrelationId } from '../logging/context.js';
+import { redactSensitiveData } from '../logging/redact.js';
 const wrapped = new Set();
 // ---------------------------------------------------------------------------
-// Emission gate (SMI-5019 wire-in)
+// Emission gate (SMI-5019 wire-in; SMI-5479 AsyncLocalStorage refactor)
 // ---------------------------------------------------------------------------
 //
-// Default-suppress: until an emission gate is installed via `setEmissionGate`,
-// `withTelemetry` does NOT emit. Privacy-safe by construction — consumers
-// (e.g. the mcp-server license-gate middleware) MUST call `setEmissionGate`
-// during request handling to enable emission for their context.
-//
-// The alternative (default-emit) would be backwards-compatible but risks
+// Default-suppress: until an emission gate is active, `withTelemetry` does NOT
+// emit. Privacy-safe by construction — the alternative (default-emit) risks
 // emitting telemetry for an unknown anonymous_id before consent has been
-// resolved. We pick the privacy-safe default per SMI-5019; a misconfigured
-// host that forgets to install a gate simply emits no telemetry, which is
-// observable (counts stay at zero) and recoverable.
+// resolved. We pick the privacy-safe default per SMI-5019; a misconfigured host
+// that never opens a gate simply emits no telemetry, which is observable
+// (counts stay at zero) and recoverable.
 //
-// Multi-tenancy caveat: the gate is module-scoped. For a single-tenant MCP
-// server process (the v1 shape) this is correct. A future multi-tenant
-// transport would need `AsyncLocalStorage`-backed per-request state — see
-// the matching caveat in `license.gate.ts`.
-let emissionGate;
+// Two gates feed the emit-path read (in the `finally` block below), in
+// precedence order:
+//
+//   1. `emissionGateStorage` (PRIMARY) — an `AsyncLocalStorage<boolean>`
+//      scoped per tool call via `runWithEmissionGate`. New call sites (the
+//      mcp-server dispatch handler + license-gate middleware) resolve consent
+//      ONCE at dispatch and pass that resolved VALUE into the scope; the store
+//      then governs every emit for the whole of that call's async
+//      continuation. Mirrors the marker-context ALS below one-for-one — the
+//      reason nested / concurrent installs are safe: `.run()` is reentrant and
+//      each async continuation is isolated, so a sibling call can never observe
+//      or clear this call's gate.
+//   2. `emissionGate` (FALLBACK) — a process-wide module `let`, a THUNK
+//      installed via `setEmissionGate`, consulted only when no ALS store is
+//      present. Retained solely as a test seam and a deprecated fallback for
+//      the pre-SMI-5479 shape; new production code MUST use
+//      `runWithEmissionGate`.
+//
+// Multi-tenancy caveat (RESOLVED by SMI-5479): the gate used to be purely
+// module-scoped, which a future multi-tenant transport could not share safely.
+// The `AsyncLocalStorage`-backed per-request state that caveat deferred is now
+// applied here — per-call scope isolates concurrent consents. See the matching
+// note in `license.gate.ts`.
+const emissionGateStorage = new AsyncLocalStorage();
 /**
- * Install (or clear) the per-process emission gate.
+ * Run `fn` with `enabled` installed as the emission-gate decision for every
+ * telemetry emit inside its async continuation. Concurrency-safe: parallel
+ * invocations each see only their own value; code outside any
+ * `runWithEmissionGate` scope falls back to the module `let` (default-suppress
+ * when that too is unset).
  *
- * Pass a predicate to enable telemetry only when the predicate returns true;
- * pass `undefined` to revert to the default-suppress behaviour. Callers should
- * always reset to `undefined` in a `finally` so a thrown handler does not
- * leak emission permission to the next request.
+ * Takes a resolved boolean VALUE (consent resolved once at dispatch) — contrast
+ * `setEmissionGate`, which takes a predicate thunk. The value is read live in
+ * the emit path, so an in-flight call always observes the gate active for ITS
+ * OWN scope, never a sibling's.
+ */
+export function runWithEmissionGate(enabled, fn) {
+    return emissionGateStorage.run(enabled, fn);
+}
+// Process-wide FALLBACK gate — a module `let` thunk (test-only / deprecated).
+// Superseded by `runWithEmissionGate`; retained so existing unit tests and any
+// pre-SMI-5479 caller keep working with zero churn.
+let emissionGate;
+/**
+ * Install (or clear) the process-wide FALLBACK emission gate.
  *
- * The predicate is evaluated once per call to a wrapped function, inside the
- * `finally` block, so it sees the live state of any per-request resolver.
+ * @deprecated Prefer `runWithEmissionGate`, which scopes the decision to a
+ * single call's async continuation and auto-unwinds — no reset discipline, no
+ * cross-call leak. `setEmissionGate` survives only as a test seam and the
+ * pre-SMI-5479 fallback: its predicate is consulted (evaluated once per wrapped
+ * call, in the `finally` block) ONLY when no `runWithEmissionGate` scope is
+ * active. Pass a predicate to enable emission when it returns true; pass
+ * `undefined` to revert to default-suppress.
  */
 export function setEmissionGate(gate) {
     emissionGate = gate;
 }
 // ---------------------------------------------------------------------------
+// Agent-mediation marker context (SMI-5456)
+// ---------------------------------------------------------------------------
+//
+// The three per-event marker fields (`agent_session`, `nudge_origin`,
+// `trigger_id`) do not live in the handler's arguments — they arrive on the MCP
+// request's `_meta` or a session marker file, both resolved by the dispatch
+// layer. The dispatcher runs each dispatch inside `runWithMarkerContext` and
+// `withTelemetry` reads the store live in its emit path — never memoised,
+// mirroring the per-call `framework` capture (H4).
+//
+// `AsyncLocalStorage` (not a module-scoped variable) because harnesses batch
+// PARALLEL tool calls to one server process (Claude Code emits multiple
+// tool_use blocks in one response). A module-scoped slot would let call A's
+// completion clear call B's still-in-flight marker — silently zeroing
+// `agent_session` on genuinely mediated calls and undercounting the mediation
+// gate metric. ALS scopes the marker to each call's own async continuation, so
+// concurrent calls cannot observe or clear each other's context.
+const markerStorage = new AsyncLocalStorage();
+/**
+ * Run `fn` with `marker` installed as the agent-mediation context for every
+ * telemetry emit inside its async continuation. Concurrency-safe: parallel
+ * invocations each see only their own marker; code outside any
+ * `runWithMarkerContext` scope sees no marker (fields default false/false/null).
+ */
+export function runWithMarkerContext(marker, fn) {
+    return markerStorage.run(marker, fn);
+}
+// ---------------------------------------------------------------------------
+// Error capture (SMI-5615)
+// ---------------------------------------------------------------------------
+//
+// `trackSkillInvoke` previously reported only `success: boolean` on failure —
+// the caught error was discarded entirely. No stack traces leave the machine:
+// only the error's class name and a redacted, truncated message ride the
+// already-consent-gated `skill_invoke` event.
+const MAX_ERROR_MESSAGE_LENGTH = 256;
+/** Extract a best-effort string message from an unknown caught value. */
+function errorMessageOf(e) {
+    if (e instanceof Error)
+        return e.message;
+    if (typeof e === 'string')
+        return e;
+    try {
+        return JSON.stringify(e);
+    }
+    catch {
+        return String(e);
+    }
+}
+/** Truncate a (already redacted) error message to `MAX_ERROR_MESSAGE_LENGTH`. */
+function truncateErrorMessage(message) {
+    return message.length > MAX_ERROR_MESSAGE_LENGTH
+        ? message.slice(0, MAX_ERROR_MESSAGE_LENGTH)
+        : message;
+}
+// ---------------------------------------------------------------------------
 // HOF
 // ---------------------------------------------------------------------------
 /**
@@ -69,39 +163,89 @@ export function setEmissionGate(gate) {
  */
 export function withTelemetry(handler, opts) {
     const wrappedFn = async (...args) => {
-        const start = Date.now();
-        const skillId = opts.extractSkillId(args);
-        // Per H4: evaluated per-call so a single server process can serve multiple
-        // clients with different frameworks on the same HTTP transport.
-        const framework = opts.extractFramework?.(args) ?? 'unknown';
-        let success = true;
-        try {
-            return await handler(...args);
-        }
-        catch (e) {
-            success = false;
-            throw e;
-        }
-        finally {
-            // Emit BEFORE the catch re-throw lands; swallow telemetry errors so they
-            // never affect the wrapped function's observable behaviour.
+        // SMI-5615 (F1 fix, corrected from the naive design): the correlation-ID
+        // scope wraps the ENTIRE body below — try *and* finally — not just the
+        // `handler(...args)` call. Installing it around only the handler would
+        // leave the finally block's emit path outside the ALS scope, so the
+        // `getCorrelationId()` read there would always see `undefined`, silently
+        // defeating the feature. Mint-if-absent (`getCorrelationId() ?? randomUUID()`)
+        // means a wrapped call nested inside another wrapped call's continuation
+        // inherits the outer ID instead of fragmenting one logical request's trace.
+        return runWithCorrelationId(getCorrelationId() ?? randomUUID(), async () => {
+            const start = Date.now();
+            const skillId = opts.extractSkillId(args);
+            // Per H4: evaluated per-call so a single server process can serve multiple
+            // clients with different frameworks on the same HTTP transport.
+            const framework = opts.extractFramework?.(args) ?? 'unknown';
+            let success = true;
+            let caughtError;
             try {
-                // SMI-5019 wire-in: consult the emission gate. Default-suppress when
-                // no gate is installed — see module-level comment for the rationale.
-                if (emissionGate && emissionGate()) {
-                    trackSkillInvoke({
-                        skillId,
-                        source: opts.source,
-                        framework,
-                        durationMs: Date.now() - start,
-                        success,
-                    });
-                }
+                return await handler(...args);
             }
-            catch {
-                // Intentionally swallowed — telemetry must never break user code.
+            catch (e) {
+                success = false;
+                caughtError = e;
+                throw e;
+            }
+            finally {
+                // Emit BEFORE the catch re-throw lands; swallow telemetry errors so they
+                // never affect the wrapped function's observable behaviour.
+                try {
+                    // SMI-5019 wire-in / SMI-5479 refactor: consult the emission gate. The
+                    // per-call ALS store (PRIMARY) wins over the module `let` thunk
+                    // (FALLBACK). `??` — not `||` — so an ALS `false` suppresses even when a
+                    // permissive module gate is installed: a consent-off scope must never
+                    // leak emission. Default-suppress holds when neither is present (no
+                    // store + no thunk → `undefined` → no emit).
+                    const gateOn = emissionGateStorage.getStore() ?? (emissionGate ? emissionGate() : undefined);
+                    if (gateOn) {
+                        // SMI-5456: thread the marker from this call's ALS scope into the
+                        // event. Read here (not memoised) so it reflects the marker installed
+                        // for THIS call's async continuation — concurrent calls each see
+                        // their own. Consent parity is automatic — these fields only ride an
+                        // event that the emission gate already permitted.
+                        const marker = markerStorage.getStore();
+                        trackSkillInvoke({
+                            skillId,
+                            source: opts.source,
+                            // Per-harness attribution: the marker channel's vocabulary-validated
+                            // `harness` wins over the extractor result — every MCP-tool call
+                            // site hardcodes `extractFramework: () => 'unknown'`, so without
+                            // this the per-harness split never survives to the wire. H4
+                            // (per-call, never memoised) is preserved: the ALS store IS
+                            // per-request state, read here on every emit. CLI / VS Code
+                            // callers never install marker context, so `getStore()` is
+                            // undefined there and their real extractors keep winning.
+                            framework: marker?.harness ?? framework,
+                            durationMs: Date.now() - start,
+                            success,
+                            agentSession: marker?.agentSession ?? false,
+                            nudgeOrigin: marker?.nudgeOrigin ?? false,
+                            triggerId: marker?.triggerId ?? null,
+                            // SMI-5615: cross-signal join key — a disk log line, an OTel span,
+                            // and this PostHog event for one failure share this ID. Read live
+                            // from the still-open scope established above (F1 fix), always
+                            // present regardless of success/failure.
+                            correlationId: getCorrelationId(),
+                            // SMI-5615: capture the previously-discarded error on failure only.
+                            // No stack traces leave the machine — class name + redacted,
+                            // truncated (<=256 char) message only.
+                            ...(success
+                                ? {}
+                                : {
+                                    errorName: caughtError instanceof Error
+                                        ? caughtError.constructor.name
+                                        : typeof caughtError,
+                                    errorMessage: truncateErrorMessage(redactSensitiveData(errorMessageOf(caughtError))),
+                                }),
+                        });
+                    }
+                }
+                catch {
+                    // Intentionally swallowed — telemetry must never break user code.
+                }
             }
-        }
+        });
     };
     wrapped.add(wrappedFn);
     return wrappedFn;

package/dist/src/telemetry/wrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrap.js","sourceRoot":"","sources":["../../../src/telemetry/wrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAW/C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAe,CAAA;AAEtC,8EAA8E;AAC9E,mCAAmC;AACnC,8EAA8E;AAC9E,EAAE;AACF,+EAA+E;AAC/E,0EAA0E;AAC1E,4EAA4E;AAC5E,gEAAgE;AAChE,EAAE;AACF,yEAAyE;AACzE,yEAAyE;AACzE,2EAA2E;AAC3E,0EAA0E;AAC1E,oDAAoD;AACpD,EAAE;AACF,2EAA2E;AAC3E,uEAAuE;AACvE,0EAA0E;AAC1E,4CAA4C;AAC5C,IAAI,YAAyC,CAAA;AAE7C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,IAAiC;IAC/D,YAAY,GAAG,IAAI,CAAA;AACrB,CAAC;AA+BD,8EAA8E;AAC9E,MAAM;AACN,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAuD,EACvD,IAA8B;IAE9B,MAAM,SAAS,GAAG,KAAK,EAAE,GAAG,IAAW,EAAoB,EAAE;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QACzC,2EAA2E;QAC3E,gEAAgE;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,IAAI,SAAS,CAAA;QAC5D,IAAI,OAAO,GAAG,IAAI,CAAA;QAClB,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,GAAG,IAAI,CAAC,CAAA;QAC/B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,GAAG,KAAK,CAAA;YACf,MAAM,CAAC,CAAA;QACT,CAAC;gBAAS,CAAC;YACT,yEAAyE;YACzE,4DAA4D;YAC5D,IAAI,CAAC;gBACH,qEAAqE;gBACrE,qEAAqE;gBACrE,IAAI,YAAY,IAAI,YAAY,EAAE,EAAE,CAAC;oBACnC,gBAAgB,CAAC;wBACf,OAAO;wBACP,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,SAAS;wBACT,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;wBAC9B,OAAO;qBACR,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;YACpE,CAAC;QACH,CAAC;IACH,CAAC,CAAA;IAED,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACtB,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,EAAe;IAC3C,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;AACxB,CAAC"}
+{"version":3,"file":"wrap.js","sourceRoot":"","sources":["../../../src/telemetry/wrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAE/C,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAW1D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAe,CAAA;AAEtC,8EAA8E;AAC9E,wEAAwE;AACxE,8EAA8E;AAC9E,EAAE;AACF,+EAA+E;AAC/E,4EAA4E;AAC5E,yEAAyE;AACzE,gFAAgF;AAChF,yEAAyE;AACzE,yCAAyC;AACzC,EAAE;AACF,uEAAuE;AACvE,oBAAoB;AACpB,EAAE;AACF,yEAAyE;AACzE,2EAA2E;AAC3E,8EAA8E;AAC9E,+EAA+E;AAC/E,kEAAkE;AAClE,4EAA4E;AAC5E,+EAA+E;AAC/E,gFAAgF;AAChF,kCAAkC;AAClC,wEAAwE;AACxE,4EAA4E;AAC5E,6EAA6E;AAC7E,4DAA4D;AAC5D,8BAA8B;AAC9B,EAAE;AACF,0EAA0E;AAC1E,+EAA+E;AAC/E,+EAA+E;AAC/E,+EAA+E;AAC/E,6BAA6B;AAC7B,MAAM,mBAAmB,GAAG,IAAI,iBAAiB,EAAW,CAAA;AAE5D;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAI,OAAgB,EAAE,EAAoB;IAC3E,OAAO,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;AAC7C,CAAC;AAED,8EAA8E;AAC9E,+EAA+E;AAC/E,oDAAoD;AACpD,IAAI,YAAyC,CAAA;AAE7C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,IAAiC;IAC/D,YAAY,GAAG,IAAI,CAAA;AACrB,CAAC;AAED,8EAA8E;AAC9E,4CAA4C;AAC5C,8EAA8E;AAC9E,EAAE;AACF,sEAAsE;AACtE,gFAAgF;AAChF,4EAA4E;AAC5E,6EAA6E;AAC7E,0EAA0E;AAC1E,mDAAmD;AACnD,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,4EAA4E;AAC5E,sEAAsE;AACtE,8EAA8E;AAC9E,+EAA+E;AAC/E,iEAAiE;AACjE,MAAM,aAAa,GAAG,IAAI,iBAAiB,EAAe,CAAA;AAE1D;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAI,MAAmB,EAAE,EAAoB;IAC/E,OAAO,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AACtC,CAAC;AAED,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAC9E,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,yEAAyE;AACzE,8CAA8C;AAE9C,MAAM,wBAAwB,GAAG,GAAG,CAAA;AAEpC,yEAAyE;AACzE,SAAS,cAAc,CAAC,CAAU;IAChC,IAAI,CAAC,YAAY,KAAK;QAAE,OAAO,CAAC,CAAC,OAAO,CAAA;IACxC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAA;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,CAAC,CAAC,CAAA;IAClB,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,SAAS,oBAAoB,CAAC,OAAe;IAC3C,OAAO,OAAO,CAAC,MAAM,GAAG,wBAAwB;QAC9C,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC;QAC5C,CAAC,CAAC,OAAO,CAAA;AACb,CAAC;AA+BD,8EAA8E;AAC9E,MAAM;AACN,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAuD,EACvD,IAA8B;IAE9B,MAAM,SAAS,GAAG,KAAK,EAAE,GAAG,IAAW,EAAoB,EAAE;QAC3D,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,oEAAoE;QACpE,yEAAyE;QACzE,+EAA+E;QAC/E,yEAAyE;QACzE,4EAA4E;QAC5E,OAAO,oBAAoB,CAAC,gBAAgB,EAAE,IAAI,UAAU,EAAE,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACxB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;YACzC,2EAA2E;YAC3E,gEAAgE;YAChE,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,IAAI,SAAS,CAAA;YAC5D,IAAI,OAAO,GAAG,IAAI,CAAA;YAClB,IAAI,WAAoB,CAAA;YACxB,IAAI,CAAC;gBACH,OAAO,MAAM,OAAO,CAAC,GAAG,IAAI,CAAC,CAAA;YAC/B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,GAAG,KAAK,CAAA;gBACf,WAAW,GAAG,CAAC,CAAA;gBACf,MAAM,CAAC,CAAA;YACT,CAAC;oBAAS,CAAC;gBACT,yEAAyE;gBACzE,4DAA4D;gBAC5D,IAAI,CAAC;oBACH,uEAAuE;oBACvE,gEAAgE;oBAChE,yEAAyE;oBACzE,sEAAsE;oBACtE,oEAAoE;oBACpE,6CAA6C;oBAC7C,MAAM,MAAM,GACV,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;oBAC/E,IAAI,MAAM,EAAE,CAAC;wBACX,kEAAkE;wBAClE,sEAAsE;wBACtE,iEAAiE;wBACjE,qEAAqE;wBACrE,kDAAkD;wBAClD,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAA;wBACvC,gBAAgB,CAAC;4BACf,OAAO;4BACP,MAAM,EAAE,IAAI,CAAC,MAAM;4BACnB,qEAAqE;4BACrE,iEAAiE;4BACjE,iEAAiE;4BACjE,4DAA4D;4BAC5D,4DAA4D;4BAC5D,4DAA4D;4BAC5D,2DAA2D;4BAC3D,0DAA0D;4BAC1D,SAAS,EAAE,MAAM,EAAE,OAAO,IAAI,SAAS;4BACvC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;4BAC9B,OAAO;4BACP,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,KAAK;4BAC3C,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,KAAK;4BACzC,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,IAAI;4BACpC,mEAAmE;4BACnE,kEAAkE;4BAClE,+DAA+D;4BAC/D,yCAAyC;4BACzC,aAAa,EAAE,gBAAgB,EAAE;4BACjC,oEAAoE;4BACpE,6DAA6D;4BAC7D,uCAAuC;4BACvC,GAAG,CAAC,OAAO;gCACT,CAAC,CAAC,EAAE;gCACJ,CAAC,CAAC;oCACE,SAAS,EACP,WAAW,YAAY,KAAK;wCAC1B,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI;wCAC9B,CAAC,CAAC,OAAO,WAAW;oCACxB,YAAY,EAAE,oBAAoB,CAChC,mBAAmB,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,CACjD;iCACF,CAAC;yBACP,CAAC,CAAA;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,kEAAkE;gBACpE,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACtB,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,EAAe;IAC3C,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;AACxB,CAAC"}

package/dist/src/telemetry/wrap.marker.test.d.ts

@@ -0,0 +1,16 @@
+/**
+ * SMI-5456: withTelemetry agent-mediation marker threading + Tier-2 framework
+ * emission. Sibling to `wrap.test.ts` (split per the 500-line file gate).
+ *
+ * Covers:
+ *   - marker context threaded into the emitted payload (via runWithMarkerContext)
+ *   - defaults false / false / null outside any marker scope
+ *   - consent parity (suppressed gate emits nothing, marker or not)
+ *   - concurrent no-bleed (P-5 invariant) — parallel calls each emit their
+ *     OWN marker; an unscoped call stays neutral while others' scopes are live
+ *   - per-framework emission incl. the opencode / hermes enum additions
+ *   - marker `harness` feeds the event's `framework` (single-point per-harness
+ *     attribution — MCP call sites hardcode `extractFramework: () => 'unknown'`)
+ */
+export {};
+//# sourceMappingURL=wrap.marker.test.d.ts.map

package/dist/src/telemetry/wrap.marker.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap.marker.test.d.ts","sourceRoot":"","sources":["../../../src/telemetry/wrap.marker.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}