@traceglass/otel 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Rahul Bhardwaj
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,70 @@
+# @traceglass/otel
+
+An OpenTelemetry **span processor** that writes [traceglass](https://www.npmjs.com/package/traceglass)
+runs. If your agent already emits `gen_ai.*` spans, this turns them into hash-chained,
+signed records from a config change — no code edits, no collector, no network.
+
+```bash
+npm install @traceglass/otel
+```
+
+## Register it — that is the whole integration
+
+```ts
+import { NodeTracerProvider } from '@opentelemetry/sdk-trace-node';
+import { TraceglassSpanProcessor } from '@traceglass/otel';
+
+const provider = new NodeTracerProvider({
+  spanProcessors: [new TraceglassSpanProcessor({ currency: 'INR' })],
+});
+provider.register();
+
+// ...your instrumented agent runs unchanged...
+
+await provider.shutdown(); // finalizes any still-open run
+```
+
+One **trace** becomes one run, id `otel-<traceId>`, finalized when its root span ends.
+Verify with `npx traceglass verify otel-<traceId>`, replay with `npx traceglass open`.
+
+## Span → step mapping
+
+Same attributes the offline OTLP ingester consumes (`traceglass ingest trace.json`), so a
+span records identically whichever path it takes:
+
+| Step field               | Attribute                                                                             |
+| ------------------------ | ------------------------------------------------------------------------------------- |
+| `type`                   | `traceglass.step.type`, else ERROR status → `error`, else inferred from the span name |
+| `label`                  | `traceglass.step.label`, else the span name                                           |
+| `toolName`               | `gen_ai.tool.name` / `traceglass.tool.name`                                           |
+| `tokens`                 | `gen_ai.usage.total_tokens`, else input + output tokens                               |
+| `cost`                   | `traceglass.cost`                                                                     |
+| `input`                  | `gen_ai.prompt` / `traceglass.input` (JSON strings are re-inflated)                   |
+| `output`                 | `gen_ai.completion` / `traceglass.output`                                             |
+| `dataPayload`            | `traceglass.data_payload`; otherwise every remaining attribute under `attributes`     |
+| `spanId`, `parentSpanId` | the real OTel ids, so a step points back at its span                                  |
+
+Run name and currency come from the resource (`traceglass.run.name`, `service.name`,
+`traceglass.run.currency`) unless you pass `name` / `currency`.
+
+That last payload row is why `gen_ai.request.model` survives into the record. Those keys
+are **dotted**, which is exactly the payload shape `tgcanon/2` had to fix — the tests
+record real dotted semantic-convention keys and then redact one, leaving the anchor and
+the chain intact.
+
+## Options worth knowing
+
+- `filter: (span) => boolean` — record only the spans you care about.
+- `recordAttributes: false` — skip the attribute snapshot.
+- `redactPatterns: ['email', 'credit-card']` — scrub at capture time, before hashing.
+- `dir: null` — record in memory only; `onRun` still receives each finalized run.
+- `onError` — recording failures are reported here (default: `process.emitWarning`) and
+  never thrown into your telemetry pipeline.
+
+- **Capture order is span-end order** and is never re-sorted; the chain is fixed as it is
+  written.
+- **Crash-safe:** an interrupted run leaves a journal `npx traceglass recover` finalizes
+  into a `failed` run that still verifies up to the crash point.
+- **Local-first:** written under `~/.traceglass` (or `TRACEGLASS_HOME`). Zero network
+  egress, and no `@opentelemetry/*` production dependency — the processor is structurally
+  typed against the SDK interfaces, so it runs against whatever OTel version you have.

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { TraceglassSpanProcessor, createTraceglassSpanProcessor, type TraceglassSpanProcessorOptions, } from './processor.js';
+export { MAPPED_ATTRIBUTES, SPAN_STATUS_ERROR, attributeSnapshot, deriveStepType, maybeJson, spanToStep, tokensFrom, type SpanMapOptions, } from './map.js';
+export { hrToMs, parentSpanIdOf, type AttributesLike, type HrTimeLike, type RecordableSpan, type SpanContextLike, type SpanProcessorLike, } from './span-types.js';
+export { RunWriter, type RunWriterOptions, type WriterStepInput } from './writer.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,uBAAuB,EACvB,6BAA6B,EAC7B,KAAK,8BAA8B,GACpC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,SAAS,EACT,UAAU,EACV,UAAU,EACV,KAAK,cAAc,GACpB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,MAAM,EACN,cAAc,EACd,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,6 @@
+// Public barrel for @traceglass/otel.
+export { TraceglassSpanProcessor, createTraceglassSpanProcessor, } from './processor.js';
+export { MAPPED_ATTRIBUTES, SPAN_STATUS_ERROR, attributeSnapshot, deriveStepType, maybeJson, spanToStep, tokensFrom, } from './map.js';
+export { hrToMs, parentSpanIdOf, } from './span-types.js';
+export { RunWriter } from './writer.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EACL,uBAAuB,EACvB,6BAA6B,GAE9B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,SAAS,EACT,UAAU,EACV,UAAU,GAEX,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,MAAM,EACN,cAAc,GAMf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,SAAS,EAA+C,MAAM,aAAa,CAAC"}

package/dist/map.d.ts

@@ -0,0 +1,52 @@
+import { type StepType } from '@traceglass/core';
+import { type AttributesLike, type RecordableSpan } from './span-types.js';
+import type { WriterStepInput } from './writer.js';
+/**
+ * Span → step mapping.
+ *
+ * The attribute names are deliberately the SAME set the offline OTLP ingester
+ * consumes (`packages/core/src/ingest/otel.ts`): `gen_ai.*` where a semantic
+ * convention exists, `traceglass.*` for the audit fields OTel has no convention
+ * for. A span that produces a given step through `traceglass ingest` produces
+ * the same step through this processor.
+ *
+ * Two deliberate additions over the ingester, both documented in the README:
+ *   1. a span whose status code is ERROR (2) becomes an `error` step, so a
+ *      failed run is recorded as failed. The ingester ignores span status.
+ *   2. attributes not copied verbatim into a step field are recorded as
+ *      `dataPayload.attributes` (unless `traceglass.data_payload` is set), so
+ *      `gen_ai.request.model` and friends survive into the record instead of
+ *      being dropped. Those keys are DOTTED, which is precisely the payload
+ *      shape `tgcanon/2` had to fix — see the tests.
+ */
+/** OTel `SpanStatusCode.ERROR`. */
+export declare const SPAN_STATUS_ERROR = 2;
+/** Attributes copied verbatim into a step field, hence excluded from the snapshot. */
+export declare const MAPPED_ATTRIBUTES: readonly ["traceglass.step.type", "traceglass.step.label", "traceglass.tool.name", "traceglass.cost", "traceglass.input", "traceglass.output", "traceglass.data_payload", "gen_ai.tool.name", "gen_ai.prompt", "gen_ai.completion"];
+/**
+ * Parse a value that may be a JSON string into structured data, else return it
+ * as-is. Same rule as the ingester: attributes are flat scalars on the wire, so
+ * a JSON-encoded prompt or payload has to be re-inflated to be readable (and
+ * redactable leaf by leaf) in the record.
+ */
+export declare function maybeJson(value: unknown): unknown;
+/** Token count: the reported total, else input+output, else the legacy names. */
+export declare function tokensFrom(attrs: AttributesLike): number;
+/**
+ * Step type: an explicit `traceglass.step.type` wins, then an ERROR span
+ * status, then the ingester's heuristics over the gen_ai attributes and the
+ * span name.
+ */
+export declare function deriveStepType(attrs: AttributesLike, name: string, statusCode?: number): StepType;
+/**
+ * Attributes not already copied into a step field, dotted keys intact.
+ * Undefined values are dropped (OTel allows them; JSON does not carry them).
+ */
+export declare function attributeSnapshot(attrs: AttributesLike): Record<string, unknown>;
+export interface SpanMapOptions {
+    /** Record unmapped span attributes as `dataPayload.attributes` (default true). */
+    recordAttributes?: boolean;
+}
+/** Map one ended span onto the step the writer will chain. */
+export declare function spanToStep(span: RecordableSpan, opts?: SpanMapOptions): WriterStepInput;
+//# sourceMappingURL=map.d.ts.map

package/dist/map.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"map.d.ts","sourceRoot":"","sources":["../src/map.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAA0B,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACnG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD;;;;;;;;;;;;;;;;;GAiBG;AAEH,mCAAmC;AACnC,eAAO,MAAM,iBAAiB,IAAI,CAAC;AAEnC,sFAAsF;AACtF,eAAO,MAAM,iBAAiB,qOAWpB,CAAC;AAYX;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAWjD;AAED,iFAAiF;AACjF,wBAAgB,UAAU,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAOxD;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,QAAQ,CAcjG;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAUhF;AAED,MAAM,WAAW,cAAc;IAC7B,kFAAkF;IAClF,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,8DAA8D;AAC9D,wBAAgB,UAAU,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,GAAE,cAAmB,GAAG,eAAe,CAoC3F"}

package/dist/map.js

@@ -0,0 +1,157 @@
+import { StepTypeSchema } from '@traceglass/core';
+import { hrToMs, parentSpanIdOf } from './span-types.js';
+/**
+ * Span → step mapping.
+ *
+ * The attribute names are deliberately the SAME set the offline OTLP ingester
+ * consumes (`packages/core/src/ingest/otel.ts`): `gen_ai.*` where a semantic
+ * convention exists, `traceglass.*` for the audit fields OTel has no convention
+ * for. A span that produces a given step through `traceglass ingest` produces
+ * the same step through this processor.
+ *
+ * Two deliberate additions over the ingester, both documented in the README:
+ *   1. a span whose status code is ERROR (2) becomes an `error` step, so a
+ *      failed run is recorded as failed. The ingester ignores span status.
+ *   2. attributes not copied verbatim into a step field are recorded as
+ *      `dataPayload.attributes` (unless `traceglass.data_payload` is set), so
+ *      `gen_ai.request.model` and friends survive into the record instead of
+ *      being dropped. Those keys are DOTTED, which is precisely the payload
+ *      shape `tgcanon/2` had to fix — see the tests.
+ */
+/** OTel `SpanStatusCode.ERROR`. */
+export const SPAN_STATUS_ERROR = 2;
+/** Attributes copied verbatim into a step field, hence excluded from the snapshot. */
+export const MAPPED_ATTRIBUTES = [
+    'traceglass.step.type',
+    'traceglass.step.label',
+    'traceglass.tool.name',
+    'traceglass.cost',
+    'traceglass.input',
+    'traceglass.output',
+    'traceglass.data_payload',
+    'gen_ai.tool.name',
+    'gen_ai.prompt',
+    'gen_ai.completion',
+];
+function str(value) {
+    return typeof value === 'string' ? value : undefined;
+}
+/** Finite non-negative number, else 0 — step fields reject anything else. */
+function num(value) {
+    const n = typeof value === 'number' ? value : typeof value === 'string' ? Number(value) : NaN;
+    return Number.isFinite(n) && n >= 0 ? n : 0;
+}
+/**
+ * Parse a value that may be a JSON string into structured data, else return it
+ * as-is. Same rule as the ingester: attributes are flat scalars on the wire, so
+ * a JSON-encoded prompt or payload has to be re-inflated to be readable (and
+ * redactable leaf by leaf) in the record.
+ */
+export function maybeJson(value) {
+    if (typeof value !== 'string')
+        return value;
+    const trimmed = value.trim();
+    if (trimmed.startsWith('{') || trimmed.startsWith('[')) {
+        try {
+            return JSON.parse(trimmed);
+        }
+        catch {
+            return value;
+        }
+    }
+    return value;
+}
+/** Token count: the reported total, else input+output, else the legacy names. */
+export function tokensFrom(attrs) {
+    const total = num(attrs['gen_ai.usage.total_tokens']);
+    if (total > 0)
+        return total;
+    const input = num(attrs['gen_ai.usage.input_tokens']) || num(attrs['gen_ai.usage.prompt_tokens']);
+    const output = num(attrs['gen_ai.usage.output_tokens']) || num(attrs['gen_ai.usage.completion_tokens']);
+    return input + output;
+}
+/**
+ * Step type: an explicit `traceglass.step.type` wins, then an ERROR span
+ * status, then the ingester's heuristics over the gen_ai attributes and the
+ * span name.
+ */
+export function deriveStepType(attrs, name, statusCode) {
+    const explicit = str(attrs['traceglass.step.type']);
+    if (explicit !== undefined) {
+        const parsed = StepTypeSchema.safeParse(explicit);
+        if (parsed.success)
+            return parsed.data;
+    }
+    if (statusCode === SPAN_STATUS_ERROR)
+        return 'error';
+    if (attrs['gen_ai.tool.name'] !== undefined || /tool|db|query|api/i.test(name))
+        return 'tool_call';
+    if (/reason|think|llm|completion/i.test(name))
+        return 'llm_reasoning';
+    if (/plan/i.test(name))
+        return 'plan';
+    if (/input|prompt|user/i.test(name))
+        return 'user_input';
+    if (/output|final|answer|decision/i.test(name))
+        return 'final_output';
+    return 'llm_reasoning';
+}
+/**
+ * Attributes not already copied into a step field, dotted keys intact.
+ * Undefined values are dropped (OTel allows them; JSON does not carry them).
+ */
+export function attributeSnapshot(attrs) {
+    const skip = new Set(MAPPED_ATTRIBUTES);
+    const out = {};
+    for (const key of Object.keys(attrs)) {
+        if (skip.has(key))
+            continue;
+        const value = attrs[key];
+        if (value === undefined)
+            continue;
+        out[key] = value;
+    }
+    return out;
+}
+/** Map one ended span onto the step the writer will chain. */
+export function spanToStep(span, opts = {}) {
+    const attrs = span.attributes;
+    const name = span.name;
+    const startMs = hrToMs(span.startTime);
+    const endMs = hrToMs(span.endTime);
+    const durationMs = span.duration
+        ? Math.max(0, Math.round(hrToMs(span.duration)))
+        : Math.max(0, Math.round(endMs - startMs));
+    const toolName = str(attrs['gen_ai.tool.name']) ?? str(attrs['traceglass.tool.name']);
+    const input = maybeJson(attrs['gen_ai.prompt'] ?? attrs['traceglass.input']);
+    const output = maybeJson(attrs['gen_ai.completion'] ?? attrs['traceglass.output']);
+    const explicitPayload = maybeJson(attrs['traceglass.data_payload']);
+    let dataPayload = explicitPayload;
+    if (dataPayload === undefined && opts.recordAttributes !== false) {
+        const snapshot = attributeSnapshot(attrs);
+        if (Object.keys(snapshot).length > 0)
+            dataPayload = { attributes: snapshot };
+    }
+    const parentSpanId = parentSpanIdOf(span);
+    const step = {
+        type: deriveStepType(attrs, name, span.status?.code),
+        label: str(attrs['traceglass.step.label']) ?? name,
+        startedAt: new Date(Math.round(startMs)).toISOString(),
+        durationMs,
+        tokens: tokensFrom(attrs),
+        cost: num(attrs['traceglass.cost']),
+        spanId: span.spanContext().spanId,
+    };
+    if (toolName !== undefined)
+        step.toolName = toolName;
+    if (parentSpanId !== '')
+        step.parentSpanId = parentSpanId;
+    if (input !== undefined)
+        step.input = input;
+    if (output !== undefined)
+        step.output = output;
+    if (dataPayload !== undefined)
+        step.dataPayload = dataPayload;
+    return step;
+}
+//# sourceMappingURL=map.js.map

package/dist/map.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"map.js","sourceRoot":"","sources":["../src/map.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAiB,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,cAAc,EAA4C,MAAM,iBAAiB,CAAC;AAGnG;;;;;;;;;;;;;;;;;GAiBG;AAEH,mCAAmC;AACnC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAEnC,sFAAsF;AACtF,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,sBAAsB;IACtB,uBAAuB;IACvB,sBAAsB;IACtB,iBAAiB;IACjB,kBAAkB;IAClB,mBAAmB;IACnB,yBAAyB;IACzB,kBAAkB;IAClB,eAAe;IACf,mBAAmB;CACX,CAAC;AAEX,SAAS,GAAG,CAAC,KAAc;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,6EAA6E;AAC7E,SAAS,GAAG,CAAC,KAAc;IACzB,MAAM,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9F,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,UAAU,CAAC,KAAqB;IAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACtD,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAClG,MAAM,MAAM,GACV,GAAG,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;IAC3F,OAAO,KAAK,GAAG,MAAM,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAqB,EAAE,IAAY,EAAE,UAAmB;IACrF,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACpD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACzC,CAAC;IACD,IAAI,UAAU,KAAK,iBAAiB;QAAE,OAAO,OAAO,CAAC;IACrD,IAAI,KAAK,CAAC,kBAAkB,CAAC,KAAK,SAAS,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5E,OAAO,WAAW,CAAC;IACrB,IAAI,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,eAAe,CAAC;IACtE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACtC,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC;IACzD,IAAI,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,cAAc,CAAC;IACtE,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAqB;IACrD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS,iBAAiB,CAAC,CAAC;IAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD,8DAA8D;AAC9D,MAAM,UAAU,UAAU,CAAC,IAAoB,EAAE,OAAuB,EAAE;IACxE,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ;QAC9B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC;IAE7C,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACtF,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACnF,MAAM,eAAe,GAAG,SAAS,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAEpE,IAAI,WAAW,GAAY,eAAe,CAAC;IAC3C,IAAI,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;QACjE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,WAAW,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IAC/E,CAAC;IAED,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAoB;QAC5B,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;QACpD,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,IAAI,IAAI;QAClD,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE;QACtD,UAAU;QACV,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC;QACzB,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACnC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,MAAM;KAClC,CAAC;IACF,IAAI,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACrD,IAAI,YAAY,KAAK,EAAE;QAAE,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IAC1D,IAAI,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IAC5C,IAAI,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IAC/C,IAAI,WAAW,KAAK,SAAS;QAAE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IAC9D,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/processor.d.ts

@@ -0,0 +1,84 @@
+import type { Run } from '@traceglass/core';
+import { type SpanMapOptions } from './map.js';
+import { type RecordableSpan, type SpanProcessorLike } from './span-types.js';
+/**
+ * OpenTelemetry span processor that writes traceglass runs.
+ *
+ * Register it on your existing tracer provider and an application that already
+ * emits `gen_ai.*` spans produces signed, hash-chained evidence with no code
+ * changes beyond the registration itself:
+ *
+ *   new NodeTracerProvider({ spanProcessors: [new TraceglassSpanProcessor()] })
+ *   // or, on OTel JS 1.x: provider.addSpanProcessor(new TraceglassSpanProcessor())
+ *
+ * One TRACE becomes one run. Spans are recorded as they END, which is when
+ * their duration, status and attributes are final; the chain is fixed in that
+ * arrival order and never re-sorted. A trace is finalized when its root span
+ * ends, and any still-open trace is finalized on `forceFlush()`/`shutdown()`.
+ *
+ * The processor never throws into the telemetry pipeline: a failure to record
+ * must not take down the application being recorded. Failures are reported
+ * through `onError` (default: `process.emitWarning`) so they are loud without
+ * being fatal — silence would be the worst outcome for an evidence tool.
+ *
+ * Zero network egress: everything is written under TRACEGLASS_HOME
+ * (default ~/.traceglass). This is not an exporter and talks to no collector.
+ */
+export interface TraceglassSpanProcessorOptions extends SpanMapOptions {
+    /**
+     * Run name. A function is called with the first span seen for a trace.
+     * Defaults to the resource's `traceglass.run.name`, then `service.name`,
+     * then `OpenTelemetry run`.
+     */
+    name?: string | ((span: RecordableSpan) => string);
+    /**
+     * Run id for a trace. Defaults to `otel-<traceId>`, which is unique per trace
+     * and points straight back at the trace in your tracing backend.
+     *
+     * Note the resource attribute `traceglass.run.id` — which the offline OTLP
+     * ingester honours — is deliberately NOT used here: one processor sees many
+     * traces from the same resource, and they must not all claim one run id.
+     */
+    runId?: (traceId: string, span: RecordableSpan) => string;
+    /** Currency for cost fields. Defaults to the resource's, then USD. */
+    currency?: string;
+    /** traceglass data dir; `null` records in memory only (useful in tests). */
+    dir?: string | null;
+    /** Per-leaf commitments so payloads can be redacted later (default on). */
+    redactable?: boolean;
+    /** Built-in redaction patterns applied at capture time, before hashing. */
+    redactPatterns?: string[];
+    /** Record only the spans this returns true for. Default: every ended span. */
+    filter?: (span: RecordableSpan) => boolean;
+    /** Finalize a trace's run when its root span ends. Default true. */
+    finalizeOnRootEnd?: boolean;
+    /** Called with each finalized run. */
+    onRun?: (run: Run) => void;
+    /** Called when recording a span or finalizing a run fails. */
+    onError?: (error: Error) => void;
+}
+export declare class TraceglassSpanProcessor implements SpanProcessorLike {
+    private readonly opts;
+    private readonly writers;
+    /** traceId -> how many runs have already been finalized for it. */
+    private readonly finalized;
+    private shutDown;
+    constructor(opts?: TraceglassSpanProcessorOptions);
+    /** Nothing to do on start: a span's attributes are not final until it ends. */
+    onStart(_span: unknown, _parentContext?: unknown): void;
+    onEnd(span: RecordableSpan): void;
+    /** Finalize every open run. Returns once they are stored. */
+    forceFlush(): Promise<void>;
+    /** Finalize every open run and stop recording. */
+    shutdown(): Promise<void>;
+    /** Finalize one trace's run early (e.g. a session boundary you know about). */
+    finalize(traceId: string): Run | null;
+    /** Run ids currently open, keyed by trace id. Mostly useful in tests. */
+    get openRuns(): Map<string, string>;
+    private writerFor;
+    private rememberFinalized;
+    private reportError;
+}
+/** Convenience factory, for config files that prefer a function call. */
+export declare function createTraceglassSpanProcessor(opts?: TraceglassSpanProcessorOptions): TraceglassSpanProcessor;
+//# sourceMappingURL=processor.d.ts.map

package/dist/processor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"processor.d.ts","sourceRoot":"","sources":["../src/processor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAkB,KAAK,cAAc,EAAE,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAG9F;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,WAAW,8BAA+B,SAAQ,cAAc;IACpE;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,cAAc,KAAK,MAAM,CAAC,CAAC;IACnD;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,KAAK,MAAM,CAAC;IAC1D,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,2EAA2E;IAC3E,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,8EAA8E;IAC9E,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,OAAO,CAAC;IAC3C,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,sCAAsC;IACtC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC;IAC3B,8DAA8D;IAC9D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAClC;AAcD,qBAAa,uBAAwB,YAAW,iBAAiB;IAC/D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAiC;IACtD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgC;IACxD,mEAAmE;IACnE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6B;IACvD,OAAO,CAAC,QAAQ,CAAS;gBAEb,IAAI,GAAE,8BAAmC;IAIrD,+EAA+E;IAC/E,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,OAAO,GAAG,IAAI;IAIvD,KAAK,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAsBjC,6DAA6D;IAC7D,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAK3B,kDAAkD;IAClD,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAMzB,+EAA+E;IAC/E,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,GAAG,GAAG,IAAI;IAerC,yEAAyE;IACzE,IAAI,QAAQ,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAElC;IAED,OAAO,CAAC,SAAS;IAqCjB,OAAO,CAAC,iBAAiB;IAUzB,OAAO,CAAC,WAAW;CAGpB;AAED,yEAAyE;AACzE,wBAAgB,6BAA6B,CAC3C,IAAI,GAAE,8BAAmC,GACxC,uBAAuB,CAEzB"}

package/dist/processor.js

@@ -0,0 +1,131 @@
+import { spanToStep } from './map.js';
+import { parentSpanIdOf } from './span-types.js';
+import { RunWriter } from './writer.js';
+/** How many finalized trace ids to remember for late-span detection. */
+const FINALIZED_MEMORY = 512;
+function defaultOnError(error) {
+    process.emitWarning(error, 'TraceglassOtelWarning');
+}
+function toError(value) {
+    if (value instanceof Error)
+        return value;
+    return new Error(typeof value === 'string' ? value : `non-Error thrown (${typeof value})`);
+}
+export class TraceglassSpanProcessor {
+    opts;
+    writers = new Map();
+    /** traceId -> how many runs have already been finalized for it. */
+    finalized = new Map();
+    shutDown = false;
+    constructor(opts = {}) {
+        this.opts = opts;
+    }
+    /** Nothing to do on start: a span's attributes are not final until it ends. */
+    onStart(_span, _parentContext) {
+        // intentionally empty
+    }
+    onEnd(span) {
+        try {
+            if (this.shutDown) {
+                throw new Error(`Span "${span.name}" ended after the traceglass processor was shut down; not recorded.`);
+            }
+            if (this.opts.filter && !this.opts.filter(span))
+                return;
+            const traceId = span.spanContext().traceId;
+            // Mapped BEFORE the writer exists, so a span this processor cannot map
+            // does not leave an empty journal behind for `traceglass recover`.
+            const stepInput = spanToStep(span, this.opts);
+            const writer = this.writerFor(traceId, span);
+            writer.step(stepInput);
+            if (this.opts.finalizeOnRootEnd !== false && parentSpanIdOf(span) === '') {
+                this.finalize(traceId);
+            }
+        }
+        catch (err) {
+            this.reportError(toError(err));
+        }
+    }
+    /** Finalize every open run. Returns once they are stored. */
+    forceFlush() {
+        for (const traceId of [...this.writers.keys()])
+            this.finalize(traceId);
+        return Promise.resolve();
+    }
+    /** Finalize every open run and stop recording. */
+    shutdown() {
+        const flushed = this.forceFlush();
+        this.shutDown = true;
+        return flushed;
+    }
+    /** Finalize one trace's run early (e.g. a session boundary you know about). */
+    finalize(traceId) {
+        const writer = this.writers.get(traceId);
+        if (!writer)
+            return null;
+        this.writers.delete(traceId);
+        this.rememberFinalized(traceId);
+        try {
+            const run = writer.end();
+            this.opts.onRun?.(run);
+            return run;
+        }
+        catch (err) {
+            this.reportError(toError(err));
+            return null;
+        }
+    }
+    /** Run ids currently open, keyed by trace id. Mostly useful in tests. */
+    get openRuns() {
+        return new Map([...this.writers].map(([traceId, w]) => [traceId, w.runId]));
+    }
+    writerFor(traceId, span) {
+        const existing = this.writers.get(traceId);
+        if (existing)
+            return existing;
+        const resource = span.resource?.attributes ?? {};
+        const resourceName = resource['traceglass.run.name'] ?? resource['service.name'];
+        const name = typeof this.opts.name === 'function'
+            ? this.opts.name(span)
+            : (this.opts.name ??
+                (typeof resourceName === 'string' ? resourceName : 'OpenTelemetry run'));
+        const resourceCurrency = resource['traceglass.run.currency'];
+        const currency = this.opts.currency ?? (typeof resourceCurrency === 'string' ? resourceCurrency : 'USD');
+        // A span arriving after its trace was already finalized (a late child, or a
+        // second root) opens a CONTINUATION run rather than being dropped: losing
+        // evidence silently is worse than an extra record, and reusing the run id
+        // would collide in the store.
+        const generation = this.finalized.get(traceId) ?? 0;
+        const base = this.opts.runId?.(traceId, span) ?? `otel-${traceId}`;
+        const id = generation === 0 ? base : `${base}-${generation + 1}`;
+        const writer = new RunWriter({
+            id,
+            name,
+            currency,
+            ...(this.opts.dir !== undefined ? { dir: this.opts.dir } : {}),
+            ...(this.opts.redactable !== undefined ? { redactable: this.opts.redactable } : {}),
+            ...(this.opts.redactPatterns !== undefined
+                ? { redactPatterns: this.opts.redactPatterns }
+                : {}),
+        });
+        this.writers.set(traceId, writer);
+        return writer;
+    }
+    rememberFinalized(traceId) {
+        this.finalized.set(traceId, (this.finalized.get(traceId) ?? 0) + 1);
+        // Bounded: a long-lived process must not grow a map per trace forever.
+        while (this.finalized.size > FINALIZED_MEMORY) {
+            const oldest = this.finalized.keys().next();
+            if (oldest.done)
+                break;
+            this.finalized.delete(oldest.value);
+        }
+    }
+    reportError(error) {
+        (this.opts.onError ?? defaultOnError)(error);
+    }
+}
+/** Convenience factory, for config files that prefer a function call. */
+export function createTraceglassSpanProcessor(opts = {}) {
+    return new TraceglassSpanProcessor(opts);
+}
+//# sourceMappingURL=processor.js.map

package/dist/processor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"processor.js","sourceRoot":"","sources":["../src/processor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAuB,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,cAAc,EAA+C,MAAM,iBAAiB,CAAC;AAC9F,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AA4DxC,wEAAwE;AACxE,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,SAAS,cAAc,CAAC,KAAY;IAClC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,qBAAqB,OAAO,KAAK,GAAG,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,OAAO,uBAAuB;IACjB,IAAI,CAAiC;IACrC,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;IACxD,mEAAmE;IAClD,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,QAAQ,GAAG,KAAK,CAAC;IAEzB,YAAY,OAAuC,EAAE;QACnD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,+EAA+E;IAC/E,OAAO,CAAC,KAAc,EAAE,cAAwB;QAC9C,sBAAsB;IACxB,CAAC;IAED,KAAK,CAAC,IAAoB;QACxB,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CACb,SAAS,IAAI,CAAC,IAAI,qEAAqE,CACxF,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,OAAO;YACxD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC;YAC3C,uEAAuE;YACvE,mEAAmE;YACnE,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvB,IAAI,IAAI,CAAC,IAAI,CAAC,iBAAiB,KAAK,KAAK,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;gBACzE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,UAAU;QACR,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,kDAAkD;IAClD,QAAQ;QACN,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,+EAA+E;IAC/E,QAAQ,CAAC,OAAe;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,IAAI,QAAQ;QACV,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IAEO,SAAS,CAAC,OAAe,EAAE,IAAoB;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,IAAI,EAAE,CAAC;QACjD,MAAM,YAAY,GAAG,QAAQ,CAAC,qBAAqB,CAAC,IAAI,QAAQ,CAAC,cAAc,CAAC,CAAC;QACjF,MAAM,IAAI,GACR,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU;YAClC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACtB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBACf,CAAC,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC/E,MAAM,gBAAgB,GAAG,QAAQ,CAAC,yBAAyB,CAAC,CAAC;QAC7D,MAAM,QAAQ,GACZ,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAE1F,4EAA4E;QAC5E,0EAA0E;QAC1E,0EAA0E;QAC1E,8BAA8B;QAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,QAAQ,OAAO,EAAE,CAAC;QACnE,MAAM,EAAE,GAAG,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QAEjE,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;YAC3B,EAAE;YACF,IAAI;YACJ,QAAQ;YACR,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,iBAAiB,CAAC,OAAe;QACvC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACpE,uEAAuE;QACvE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,gBAAgB,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,MAAM,CAAC,IAAI;gBAAE,MAAM;YACvB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,KAAY;QAC9B,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;CACF;AAED,yEAAyE;AACzE,MAAM,UAAU,6BAA6B,CAC3C,OAAuC,EAAE;IAEzC,OAAO,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC"}

package/dist/span-types.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Structural mirrors of the OpenTelemetry SDK types this processor reads.
+ *
+ * Nothing from `@opentelemetry/*` is imported. That is a supply-chain decision:
+ * the OTel JS SDK is a large, fast-moving dependency tree, and this package
+ * exists to make an AUDIT record — so it works against whatever OTel version
+ * the host application already installed instead of pinning a second one. The
+ * price is that compatibility has to be asserted rather than inferred; that
+ * assertion lives in `type-compat.ts` and is checked by `npm run typecheck`.
+ *
+ * Every member below is a strict subset of the real `ReadableSpan`, so a real
+ * span is assignable to `RecordableSpan` without a cast.
+ */
+/** OTel `HrTime`: [epoch seconds, nanoseconds]. */
+export type HrTimeLike = readonly [number, number];
+/**
+ * Attribute values are `string | number | boolean | Array<...>` in OTel. They
+ * are read as `unknown` and narrowed at runtime, which keeps this type a
+ * supertype of `Attributes` for every SDK version.
+ */
+export type AttributesLike = Readonly<Record<string, unknown>>;
+/** The subset of `SpanContext` needed to correlate a step with its trace. */
+export interface SpanContextLike {
+    readonly traceId: string;
+    readonly spanId: string;
+}
+/** The subset of `ReadableSpan` this processor consumes. */
+export interface RecordableSpan {
+    readonly name: string;
+    spanContext(): SpanContextLike;
+    readonly startTime: HrTimeLike;
+    readonly endTime: HrTimeLike;
+    /** Present on real spans; recomputed from start/end when absent. */
+    readonly duration?: HrTimeLike;
+    readonly attributes: AttributesLike;
+    /** `SpanStatusCode`: 0 UNSET, 1 OK, 2 ERROR. */
+    readonly status?: {
+        readonly code: number;
+        readonly message?: string;
+    };
+    /** OTel <= 1.x. Replaced by `parentSpanContext` in later releases. */
+    readonly parentSpanId?: string | undefined;
+    /** OTel >= 1.30 / 2.x. */
+    readonly parentSpanContext?: {
+        readonly spanId: string;
+    } | undefined;
+    readonly resource?: {
+        readonly attributes?: AttributesLike;
+    } | undefined;
+}
+/** The `SpanProcessor` surface an OTel `TracerProvider` calls. */
+export interface SpanProcessorLike {
+    onStart(span: unknown, parentContext?: unknown): void;
+    onEnd(span: RecordableSpan): void;
+    forceFlush(): Promise<void>;
+    shutdown(): Promise<void>;
+}
+/** Milliseconds since the epoch from an OTel `HrTime`. */
+export declare function hrToMs(hr: HrTimeLike | undefined): number;
+/** The span's parent id under either OTel spelling; '' for a root span. */
+export declare function parentSpanIdOf(span: RecordableSpan): string;
+//# sourceMappingURL=span-types.d.ts.map

package/dist/span-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"span-types.d.ts","sourceRoot":"","sources":["../src/span-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,mDAAmD;AACnD,MAAM,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEnD;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAE/D,6EAA6E;AAC7E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,WAAW,IAAI,eAAe,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,gDAAgD;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,sEAAsE;IACtE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,0BAA0B;IAC1B,QAAQ,CAAC,iBAAiB,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IACrE,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAA;KAAE,GAAG,SAAS,CAAC;CAC1E;AAED,kEAAkE;AAClE,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACtD,KAAK,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAAC;IAClC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,0DAA0D;AAC1D,wBAAgB,MAAM,CAAC,EAAE,EAAE,UAAU,GAAG,SAAS,GAAG,MAAM,CAIzD;AAED,2EAA2E;AAC3E,wBAAgB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAE3D"}

package/dist/span-types.js

@@ -0,0 +1,25 @@
+/**
+ * Structural mirrors of the OpenTelemetry SDK types this processor reads.
+ *
+ * Nothing from `@opentelemetry/*` is imported. That is a supply-chain decision:
+ * the OTel JS SDK is a large, fast-moving dependency tree, and this package
+ * exists to make an AUDIT record — so it works against whatever OTel version
+ * the host application already installed instead of pinning a second one. The
+ * price is that compatibility has to be asserted rather than inferred; that
+ * assertion lives in `type-compat.ts` and is checked by `npm run typecheck`.
+ *
+ * Every member below is a strict subset of the real `ReadableSpan`, so a real
+ * span is assignable to `RecordableSpan` without a cast.
+ */
+/** Milliseconds since the epoch from an OTel `HrTime`. */
+export function hrToMs(hr) {
+    if (!hr)
+        return 0;
+    const [seconds, nanos] = hr;
+    return seconds * 1000 + nanos / 1e6;
+}
+/** The span's parent id under either OTel spelling; '' for a root span. */
+export function parentSpanIdOf(span) {
+    return span.parentSpanId ?? span.parentSpanContext?.spanId ?? '';
+}
+//# sourceMappingURL=span-types.js.map

package/dist/span-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"span-types.js","sourceRoot":"","sources":["../src/span-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AA4CH,0DAA0D;AAC1D,MAAM,UAAU,MAAM,CAAC,EAA0B;IAC/C,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC;IAClB,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IAC5B,OAAO,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,GAAG,CAAC;AACtC,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,IAAoB;IACjD,OAAO,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,iBAAiB,EAAE,MAAM,IAAI,EAAE,CAAC;AACnE,CAAC"}

package/dist/type-compat.d.ts

@@ -0,0 +1,2 @@
+export declare const TYPE_COMPAT_ASSERTIONS = 4;
+//# sourceMappingURL=type-compat.d.ts.map

package/dist/type-compat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"type-compat.d.ts","sourceRoot":"","sources":["../src/type-compat.ts"],"names":[],"mappings":"AA8EA,eAAO,MAAM,sBAAsB,IAAI,CAAC"}

package/dist/type-compat.js

@@ -0,0 +1,10 @@
+const _v1 = true;
+const _v2 = true;
+const _registerable = _processor;
+const _alsoSatisfiesOwnInterface = _processor;
+export const TYPE_COMPAT_ASSERTIONS = 4;
+void _v1;
+void _v2;
+void _registerable;
+void _alsoSatisfiesOwnInterface;
+//# sourceMappingURL=type-compat.js.map

package/dist/type-compat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"type-compat.js","sourceRoot":"","sources":["../src/type-compat.ts"],"names":[],"mappings":"AA+DA,MAAM,GAAG,GAAoB,IAAI,CAAC;AAClC,MAAM,GAAG,GAAoB,IAAI,CAAC;AAWlC,MAAM,aAAa,GAA0B,UAAU,CAAC;AACxD,MAAM,0BAA0B,GAAsB,UAAU,CAAC;AAEjE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACxC,KAAK,GAAG,CAAC;AACT,KAAK,GAAG,CAAC;AACT,KAAK,aAAa,CAAC;AACnB,KAAK,0BAA0B,CAAC"}

package/dist/writer.d.ts

@@ -0,0 +1,79 @@
+import { type Run, type Step, type StepType } from '@traceglass/core';
+/**
+ * Capture-time chain writer for span-shaped input.
+ *
+ * This is deliberately NOT `@traceglass/sdk`'s `startRecording`. That recorder
+ * synthesizes a random `spanId` per step and has no way to accept a parent, so
+ * routing OTel through it would throw away the two identifiers that let an
+ * auditor tie a traceglass record back to the trace it came from. Everything
+ * else is the same contract, and the parts that matter are core's, not a second
+ * implementation of them:
+ *
+ *   - steps are hashed the moment they arrive (index = arrival order,
+ *     hash = hashStep(step, prevHash)), so the chain is fixed at capture time
+ *     and cannot be re-ordered afterwards;
+ *   - each step is appended to the same JSONL journal format the SDK writes, so
+ *     `traceglass live`, `traceglass recover` and the dashboard read an
+ *     in-flight OTel recording with no new machinery;
+ *   - finalization goes through core's `finalizeJournal`, which is the exact
+ *     code path `traceglass recover` uses — totals, anchor and the verify
+ *     self-check are computed once, in one place. A recovered journal and a
+ *     cleanly ended run are therefore byte-identical records.
+ */
+/** One step to append. Unlike the SDK recorder, span ids are caller-supplied. */
+export interface WriterStepInput {
+    type: StepType;
+    label: string;
+    startedAt: string;
+    durationMs: number;
+    tokens: number;
+    cost: number;
+    toolName?: string;
+    input?: unknown;
+    output?: unknown;
+    dataPayload?: unknown;
+    spanId: string;
+    parentSpanId?: string;
+}
+export interface RunWriterOptions {
+    id: string;
+    name: string;
+    currency?: string;
+    /**
+     * traceglass data dir (journal + SQLite store). Defaults to
+     * TRACEGLASS_HOME ?? ~/.traceglass. `null` keeps the run in memory only.
+     */
+    dir?: string | null;
+    /** Per-leaf commitments, so payloads can be redacted later (default on). */
+    redactable?: boolean;
+    /** Built-in pattern names scrubbed at capture time, before anything is hashed. */
+    redactPatterns?: string[];
+    /** Run start; defaults to now. */
+    startedAt?: string;
+}
+export declare class RunWriter {
+    readonly runId: string;
+    readonly startedAt: string;
+    private readonly dir;
+    private readonly meta;
+    private readonly journalFile;
+    private readonly redactable;
+    private readonly patterns;
+    private readonly steps;
+    private prevHash;
+    private ended;
+    constructor(opts: RunWriterOptions);
+    get stepCount(): number;
+    get isEnded(): boolean;
+    /** Append one step: scrubbed, committed, hashed and journaled before returning. */
+    step(input: WriterStepInput): Step;
+    /**
+     * Finalize: totals + warnings + anchor via core's journal finalizer, sign if
+     * keys exist, save, delete the journal. Synchronous — every write involved is
+     * (the SDK recorder's `end` is async only because its signature is).
+     */
+    end(opts?: {
+        status?: 'completed' | 'failed';
+    }): Run;
+}
+//# sourceMappingURL=writer.d.ts.map

package/dist/writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer.d.ts","sourceRoot":"","sources":["../src/writer.ts"],"names":[],"mappings":"AAGA,OAAO,EAaL,KAAK,GAAG,EACR,KAAK,IAAI,EACT,KAAK,QAAQ,EACd,MAAM,kBAAkB,CAAC;AAE1B;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,iFAAiF;AACjF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,kFAAkF;IAClF,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,kCAAkC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAmBD,qBAAa,SAAS;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAgB;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAc;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAgB;IAC5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAc;IACpC,OAAO,CAAC,QAAQ,CAAM;IACtB,OAAO,CAAC,KAAK,CAAS;gBAEV,IAAI,EAAE,gBAAgB;IAsBlC,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,IAAI,OAAO,IAAI,OAAO,CAErB;IAED,mFAAmF;IACnF,IAAI,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IA6ClC;;;;OAIG;IACH,GAAG,CAAC,IAAI,GAAE;QAAE,MAAM,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAA;KAAO,GAAG,GAAG;CA2BzD"}

package/dist/writer.js

@@ -0,0 +1,140 @@
+import { appendFileSync, existsSync, mkdirSync, readFileSync, unlinkSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { DEFAULT_HASH_VERSION, JOURNAL_FORMAT_VERSION, RunStore, buildCommitments, finalizeJournal, hashStep, journalLine, patternsByName, scrubStepPayload, signRun, } from '@traceglass/core';
+function defaultDir() {
+    return process.env.TRACEGLASS_HOME ?? join(homedir(), '.traceglass');
+}
+/**
+ * Load signing keys from <dir>/keys if present. Mirrors the CLI's key layout
+ * (packages/cli/src/keys.ts) and the SDK recorder's loader — the file paths are
+ * the contract between packages; the ~10 lines are duplicated to avoid pulling
+ * the CLI into a library dependency.
+ */
+function loadKeys(dir) {
+    const priv = join(dir, 'keys', 'private.pem');
+    const pub = join(dir, 'keys', 'public.pem');
+    if (!existsSync(priv) || !existsSync(pub))
+        return null;
+    return { privateKeyPem: readFileSync(priv, 'utf8'), publicKeyPem: readFileSync(pub, 'utf8') };
+}
+export class RunWriter {
+    runId;
+    startedAt;
+    dir;
+    meta;
+    journalFile;
+    redactable;
+    patterns;
+    steps = [];
+    prevHash = '';
+    ended = false;
+    constructor(opts) {
+        this.runId = opts.id;
+        this.startedAt = opts.startedAt ?? new Date().toISOString();
+        this.dir = opts.dir === null ? null : (opts.dir ?? defaultDir());
+        this.redactable = opts.redactable !== false;
+        this.patterns = opts.redactPatterns ? patternsByName(opts.redactPatterns) : [];
+        this.meta = {
+            kind: 'meta',
+            formatVersion: JOURNAL_FORMAT_VERSION,
+            id: this.runId,
+            name: opts.name,
+            currency: opts.currency ?? 'USD',
+            startedAt: this.startedAt,
+            hashVersion: DEFAULT_HASH_VERSION,
+        };
+        this.journalFile = this.dir ? join(this.dir, 'journal', `${this.runId}.jsonl`) : null;
+        if (this.journalFile && this.dir) {
+            mkdirSync(join(this.dir, 'journal'), { recursive: true });
+            appendFileSync(this.journalFile, journalLine(this.meta));
+        }
+    }
+    get stepCount() {
+        return this.steps.length;
+    }
+    get isEnded() {
+        return this.ended;
+    }
+    /** Append one step: scrubbed, committed, hashed and journaled before returning. */
+    step(input) {
+        if (this.ended)
+            throw new Error(`Recording "${this.runId}" has already ended.`);
+        const index = this.steps.length;
+        const hashVersion = DEFAULT_HASH_VERSION;
+        // Capture-time scrubbing runs BEFORE commitments/hashing, so a matched
+        // value is never committed to and never written anywhere.
+        let payload = {
+            ...(input.input !== undefined ? { input: input.input } : {}),
+            ...(input.output !== undefined ? { output: input.output } : {}),
+            ...(input.dataPayload !== undefined ? { dataPayload: input.dataPayload } : {}),
+        };
+        let redactions;
+        if (this.patterns.length > 0) {
+            const scrubbed = scrubStepPayload(payload, this.patterns, hashVersion);
+            payload = scrubbed.payload;
+            if (scrubbed.redactions.length > 0)
+                redactions = scrubbed.redactions;
+        }
+        const step = {
+            id: `${this.runId}:${index}`,
+            runId: this.runId,
+            index,
+            type: input.type,
+            label: input.label,
+            startedAt: input.startedAt,
+            durationMs: input.durationMs,
+            tokens: input.tokens,
+            cost: input.cost,
+            ...(input.toolName !== undefined ? { toolName: input.toolName } : {}),
+            ...payload,
+            spanId: input.spanId,
+            ...(input.parentSpanId !== undefined ? { parentSpanId: input.parentSpanId } : {}),
+            hash: '',
+            prevHash: this.prevHash,
+            ...(this.redactable ? buildCommitments(payload, hashVersion) : {}),
+            ...(redactions !== undefined ? { redactions } : {}),
+        };
+        step.hash = hashStep(step, this.prevHash, hashVersion);
+        this.prevHash = step.hash;
+        this.steps.push(step);
+        if (this.journalFile)
+            appendFileSync(this.journalFile, journalLine({ kind: 'step', step }));
+        return step;
+    }
+    /**
+     * Finalize: totals + warnings + anchor via core's journal finalizer, sign if
+     * keys exist, save, delete the journal. Synchronous — every write involved is
+     * (the SDK recorder's `end` is async only because its signature is).
+     */
+    end(opts = {}) {
+        if (this.ended)
+            throw new Error(`Recording "${this.runId}" has already ended.`);
+        this.ended = true;
+        if (this.steps.length === 0) {
+            throw new Error(`Recording "${this.runId}" has no steps; nothing to finalize.`);
+        }
+        const status = opts.status ?? (this.steps.some((s) => s.type === 'error') ? 'failed' : 'completed');
+        if (this.journalFile)
+            appendFileSync(this.journalFile, journalLine({ kind: 'end', status }));
+        // finalizeJournal verifies the assembled record and throws if the chain
+        // does not hold, so a broken run is never stored.
+        let run = finalizeJournal({ meta: this.meta, steps: this.steps, endedStatus: status });
+        if (this.dir) {
+            const keys = loadKeys(this.dir);
+            if (keys)
+                run = signRun(run, keys.privateKeyPem, keys.publicKeyPem);
+            const store = new RunStore(join(this.dir, 'traceglass.sqlite'));
+            try {
+                store.saveRun(run);
+            }
+            finally {
+                store.close();
+            }
+            if (this.journalFile)
+                unlinkSync(this.journalFile);
+        }
+        return run;
+    }
+}
+//# sourceMappingURL=writer.js.map

package/dist/writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer.js","sourceRoot":"","sources":["../src/writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1F,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,QAAQ,EACR,gBAAgB,EAChB,eAAe,EACf,QAAQ,EACR,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,OAAO,GAMR,MAAM,kBAAkB,CAAC;AAyD1B,SAAS,UAAU;IACjB,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,OAAO,EAAE,aAAa,EAAE,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;AAChG,CAAC;AAED,MAAM,OAAO,SAAS;IACX,KAAK,CAAS;IACd,SAAS,CAAS;IAEV,GAAG,CAAgB;IACnB,IAAI,CAAc;IAClB,WAAW,CAAgB;IAC3B,UAAU,CAAU;IACpB,QAAQ,CAAqB;IAC7B,KAAK,GAAW,EAAE,CAAC;IAC5B,QAAQ,GAAG,EAAE,CAAC;IACd,KAAK,GAAG,KAAK,CAAC;IAEtB,YAAY,IAAsB;QAChC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5D,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC;QAC5C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,IAAI,CAAC,IAAI,GAAG;YACV,IAAI,EAAE,MAAM;YACZ,aAAa,EAAE,sBAAsB;YACrC,EAAE,EAAE,IAAI,CAAC,KAAK;YACd,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK;YAChC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,oBAAoB;SAClC,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtF,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACjC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,mFAAmF;IACnF,IAAI,CAAC,KAAsB;QACzB,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,KAAK,sBAAsB,CAAC,CAAC;QAChF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAChC,MAAM,WAAW,GAAG,oBAAoB,CAAC;QAEzC,uEAAuE;QACvE,0DAA0D;QAC1D,IAAI,OAAO,GAAiE;YAC1E,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/E,CAAC;QACF,IAAI,UAA8B,CAAC;QACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YACvE,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;YAC3B,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBAAE,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;QACvE,CAAC;QAED,MAAM,IAAI,GAAS;YACjB,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,EAAE;YAC5B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,OAAO;YACV,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,IAAI,EAAE,EAAE;YACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,WAAW;YAAE,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5F,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,GAAG,CAAC,OAA4C,EAAE;QAChD,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,KAAK,sBAAsB,CAAC,CAAC;QAChF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,KAAK,sCAAsC,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACvF,IAAI,IAAI,CAAC,WAAW;YAAE,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAE7F,wEAAwE;QACxE,kDAAkD;QAClD,IAAI,GAAG,GAAG,eAAe,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QAEvF,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,IAAI;gBAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACpE,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC,CAAC;YAChE,IAAI,CAAC;gBACH,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;oBAAS,CAAC;gBACT,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,CAAC;YACD,IAAI,IAAI,CAAC,WAAW;gBAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "@traceglass/otel",
+  "version": "1.0.0",
+  "description": "OpenTelemetry span processor that records gen_ai.* spans as tamper-evident traceglass runs",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": "./dist/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "keywords": [
+    "opentelemetry",
+    "otel",
+    "gen-ai",
+    "ai",
+    "agents",
+    "audit",
+    "compliance"
+  ],
+  "license": "MIT",
+  "scripts": {
+    "build": "tsc -b",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@traceglass/core": "1.0.0"
+  }
+}