@warlock.js/ai-panoptic 4.3.0 → 4.5.0

package/esm/collector/collector.d.mts

@@ -1,6 +1,24 @@
 import { CollectorContract } from "../contracts/collector.contract.mjs";
+import { ContentCaptureOptions } from "./content-capture.type.mjs";
 
 //#region ../@warlock.js/ai-panoptic/src/collector/collector.d.ts
+/**
+ * Notified when a registered exporter throws during `collect` / `flush` /
+ * `shutdown`. The failure stays isolated (the originating run never sees
+ * it) — this is purely a chance to surface it (route to your logger,
+ * bump a metric). Receives the exporter's `name` and the thrown error.
+ */
+type ExporterErrorHandler = (exporterName: string, error: unknown) => void;
+/** Options for {@link createCollector}. */
+type CollectorOptions = ContentCaptureOptions & {
+  /**
+   * Called when an exporter throws (and is isolated). Overrides the default
+   * one-time `console.warn` per exporter — route the failure to your own
+   * logger / metrics instead. Errors thrown by the handler itself are
+   * swallowed so observability never crashes the run.
+   */
+  onError?: ExporterErrorHandler;
+};
 /**
  * Create a Panoptic collector — the single integration point an app
  * wires into its agents/workflows (typically via the `onComplete`
@@ -13,7 +31,7 @@ import { CollectorContract } from "../contracts/collector.contract.mjs";
  * // on shutdown:
  * await collector.shutdown();
  */
-declare function createCollector(): CollectorContract;
+declare function createCollector(options?: CollectorOptions): CollectorContract;
 //#endregion
-export { createCollector };
+export { CollectorOptions, ExporterErrorHandler, createCollector };
 //# sourceMappingURL=collector.d.mts.map

package/esm/collector/collector.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"collector.d.mts","names":[],"sources":["../../../../../../../@warlock.js/ai-panoptic/src/collector/collector.ts"],"mappings":";;;;;AA8GA;;;;AAAoD;;;;;;iBAApC,eAAA,IAAmB,iBAAiB"}
+{"version":3,"file":"collector.d.mts","names":[],"sources":["../../../../../../../@warlock.js/ai-panoptic/src/collector/collector.ts"],"mappings":";;;;;;AAcA;;;;KAAY,oBAAA,IAAwB,YAAA,UAAsB,KAAc;AAGxE;AAAA,KAAY,gBAAA,GAAmB,qBAAA;;;;;;;EAO7B,OAAA,GAAU,oBAAoB;AAAA;;;;;;;;AAyJkD;;;;;iBAAlE,eAAA,CAAgB,OAAA,GAAS,gBAAA,GAAwB,iBAAiB"}

package/esm/collector/collector.mjs

@@ -16,18 +16,38 @@ import { reportToTrace } from "./report-to-trace.mjs";
 * into the originating run — `collect`, `flush`, and `shutdown` settle
 * every exporter independently (mirrors how the core event hooks
 * swallow consumer errors). One broken exporter can neither crash the
-* agent loop nor stop sibling exporters from receiving the trace.
+* agent loop nor stop sibling exporters from receiving the trace. The
+* failure is still **surfaced** — via the `onError` option, or a one-time
+* `console.warn` per exporter — so a misconfiguration (e.g. a missing
+* optional peer like `langfuse`) doesn't fail silently.
 */
 var Collector = class {
-	constructor() {
-		this.exporters = /* @__PURE__ */ new Map();
+	options;
+	/**
+	* Registered exporters in insertion order. A `Map` keyed by
+	* `ExporterContract.name` gives O(1) dedupe on `use` while preserving
+	* registration order for deterministic fan-out.
+	*/
+	exporters = /* @__PURE__ */ new Map();
+	/**
+	* Exporters already warned about on the default error path — so a
+	* persistent misconfiguration surfaces once, not on every trace.
+	*/
+	warnedExporters = /* @__PURE__ */ new Set();
+	/**
+	* Collector options: content capture threaded into every `toTrace`
+	* projection (`captureContent` populates span `input` / `output`), plus
+	* an optional `onError` for isolated exporter failures.
+	*/
+	constructor(options = {}) {
+		this.options = options;
 	}
 	use(exporter) {
 		if (!this.exporters.has(exporter.name)) this.exporters.set(exporter.name, exporter);
 		return this;
 	}
 	toTrace(report, rootError) {
-		return reportToTrace(report, rootError);
+		return reportToTrace(report, rootError, this.options);
 	}
 	async collect(report, rootError) {
 		const trace = this.toTrace(report, rootError);
@@ -64,9 +84,29 @@ var Collector = class {
 	* others — the contract's failure-isolation requirement.
 	*/
 	async settleAll(task) {
-		const runs = [...this.exporters.values()].map((exporter) => Promise.resolve().then(() => task(exporter)));
+		const runs = [...this.exporters.entries()].map(([name, exporter]) => Promise.resolve().then(() => task(exporter)).catch((error) => this.reportExporterError(name, error)));
 		await Promise.allSettled(runs);
 	}
+	/**
+	* Surface an isolated exporter failure. The originating run never sees it
+	* (the isolation guarantee holds), but a silent failure is the wrong
+	* default for a config error — e.g. a missing optional peer like
+	* `langfuse` would otherwise drop every trace with no signal. The
+	* supplied `onError` is called, or — by default — a `console.warn` is
+	* emitted ONCE per exporter so the cause is visible without spamming.
+	*/
+	reportExporterError(name, error) {
+		if (this.options.onError) {
+			try {
+				this.options.onError(name, error);
+			} catch {}
+			return;
+		}
+		if (this.warnedExporters.has(name)) return;
+		this.warnedExporters.add(name);
+		const message = error instanceof Error ? error.message : String(error);
+		console.warn(`[panoptic] exporter "${name}" failed and was isolated: ${message}`);
+	}
 };
 /**
 * Create a Panoptic collector — the single integration point an app
@@ -80,8 +120,8 @@ var Collector = class {
 * // on shutdown:
 * await collector.shutdown();
 */
-function createCollector() {
-	return new Collector();
+function createCollector(options = {}) {
+	return new Collector(options);
 }
 
 //#endregion

package/esm/collector/collector.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"collector.mjs","names":[],"sources":["../../../../../../../@warlock.js/ai-panoptic/src/collector/collector.ts"],"sourcesContent":["import type { BaseReport } from \"@warlock.js/ai\";\nimport type { CollectorContract } from \"../contracts/collector.contract\";\nimport type { ExporterContract } from \"../contracts/exporter.contract\";\nimport type { Trace } from \"../contracts/trace.type\";\nimport { walkSpans } from \"../exporters/utils/walk-spans\";\nimport { reportToTrace } from \"./report-to-trace\";\n\n/**\n * Drive the source end of the Panoptic pipeline: ingest core\n * `@warlock.js/ai` {@link BaseReport} trees, project them into {@link\n * Trace}s, and fan each trace out to every registered exporter.\n *\n * Owns exporter registration (deduped by `ExporterContract.name`), the\n * report→trace projection, and graceful shutdown so exporters drain\n * before exit. Instantiated fresh per collector via {@link\n * createCollector}; callers never see `new`.\n *\n * **Failure isolation.** An exporter that throws never propagates back\n * into the originating run — `collect`, `flush`, and `shutdown` settle\n * every exporter independently (mirrors how the core event hooks\n * swallow consumer errors). One broken exporter can neither crash the\n * agent loop nor stop sibling exporters from receiving the trace.\n */\nclass Collector implements CollectorContract {\n  /**\n   * Registered exporters in insertion order. A `Map` keyed by\n   * `ExporterContract.name` gives O(1) dedupe on `use` while preserving\n   * registration order for deterministic fan-out.\n   */\n  private readonly exporters = new Map<string, ExporterContract>();\n\n  public use(exporter: ExporterContract): this {\n    if (!this.exporters.has(exporter.name)) {\n      this.exporters.set(exporter.name, exporter);\n    }\n\n    return this;\n  }\n\n  public toTrace(report: BaseReport, rootError?: unknown): Trace {\n    return reportToTrace(report, rootError);\n  }\n\n  public async collect(report: BaseReport, rootError?: unknown): Promise<void> {\n    const trace = this.toTrace(report, rootError);\n\n    await this.dispatch(trace);\n  }\n\n  public async flush(): Promise<void> {\n    await this.settleAll((exporter) => exporter.flush?.());\n  }\n\n  public async shutdown(): Promise<void> {\n    await this.flush();\n\n    await this.settleAll((exporter) => exporter.shutdown?.());\n\n    this.exporters.clear();\n  }\n\n  /**\n   * Fan one trace out to every exporter and, when an exporter advertises\n   * the per-span hook, deliver every span in the finalized tree to it as\n   * well. `exportSpan` is a post-completion per-span hook (not a live /\n   * streaming feed — the trace is already finalized): we walk the tree in\n   * pre-order with {@link walkSpans} so the exporter sees the root and\n   * every descendant exactly once. Every invocation is isolated so a\n   * throwing exporter can't abort the dispatch to its siblings or escape\n   * into the originating run.\n   */\n  private async dispatch(trace: Trace): Promise<void> {\n    await this.settleAll(async (exporter) => {\n      await exporter.export(trace);\n\n      if (exporter.exportSpan !== undefined) {\n        for (const span of walkSpans(trace.root)) {\n          await exporter.exportSpan(span);\n        }\n      }\n    });\n  }\n\n  /**\n   * Run `task` against every registered exporter and wait for all of\n   * them to settle, swallowing individual rejections. `Promise.allSettled`\n   * guarantees one failure neither rejects the batch nor blocks the\n   * others — the contract's failure-isolation requirement.\n   */\n  private async settleAll(\n    task: (exporter: ExporterContract) => void | Promise<void>,\n  ): Promise<void> {\n    const runs = [...this.exporters.values()].map((exporter) => Promise.resolve().then(() => task(exporter)));\n\n    await Promise.allSettled(runs);\n  }\n}\n\n/**\n * Create a Panoptic collector — the single integration point an app\n * wires into its agents/workflows (typically via the `onComplete`\n * report hook). Register exporters with `use`, then feed finalized root\n * reports to `collect`.\n *\n * @example\n * const collector = createCollector().use(otelExporter).use(langfuseExporter);\n * agent.on(\"onComplete\", ({ result }) => collector.collect(result.report));\n * // on shutdown:\n * await collector.shutdown();\n */\nexport function createCollector(): CollectorContract {\n  return new Collector();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAuBA,IAAM,YAAN,MAA6C;;mCAMd,IAAI,IAA8B;;CAE/D,AAAO,IAAI,UAAkC;EAC3C,IAAI,CAAC,KAAK,UAAU,IAAI,SAAS,IAAI,GACnC,KAAK,UAAU,IAAI,SAAS,MAAM,QAAQ;EAG5C,OAAO;CACT;CAEA,AAAO,QAAQ,QAAoB,WAA4B;EAC7D,OAAO,cAAc,QAAQ,SAAS;CACxC;CAEA,MAAa,QAAQ,QAAoB,WAAoC;EAC3E,MAAM,QAAQ,KAAK,QAAQ,QAAQ,SAAS;EAE5C,MAAM,KAAK,SAAS,KAAK;CAC3B;CAEA,MAAa,QAAuB;EAClC,MAAM,KAAK,WAAW,aAAa,SAAS,QAAQ,CAAC;CACvD;CAEA,MAAa,WAA0B;EACrC,MAAM,KAAK,MAAM;EAEjB,MAAM,KAAK,WAAW,aAAa,SAAS,WAAW,CAAC;EAExD,KAAK,UAAU,MAAM;CACvB;;;;;;;;;;;CAYA,MAAc,SAAS,OAA6B;EAClD,MAAM,KAAK,UAAU,OAAO,aAAa;GACvC,MAAM,SAAS,OAAO,KAAK;GAE3B,IAAI,SAAS,eAAe,QAC1B,KAAK,MAAM,QAAQ,UAAU,MAAM,IAAI,GACrC,MAAM,SAAS,WAAW,IAAI;EAGpC,CAAC;CACH;;;;;;;CAQA,MAAc,UACZ,MACe;EACf,MAAM,OAAO,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC,CAAC,CAAC,KAAK,aAAa,QAAQ,QAAQ,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC;EAExG,MAAM,QAAQ,WAAW,IAAI;CAC/B;AACF;;;;;;;;;;;;;AAcA,SAAgB,kBAAqC;CACnD,OAAO,IAAI,UAAU;AACvB"}
+{"version":3,"file":"collector.mjs","names":[],"sources":["../../../../../../../@warlock.js/ai-panoptic/src/collector/collector.ts"],"sourcesContent":["import type { BaseReport } from \"@warlock.js/ai\";\nimport type { CollectorContract } from \"../contracts/collector.contract\";\nimport type { ExporterContract } from \"../contracts/exporter.contract\";\nimport type { Trace } from \"../contracts/trace.type\";\nimport { walkSpans } from \"../exporters/utils/walk-spans\";\nimport type { ContentCaptureOptions } from \"./content-capture.type\";\nimport { reportToTrace } from \"./report-to-trace\";\n\n/**\n * Notified when a registered exporter throws during `collect` / `flush` /\n * `shutdown`. The failure stays isolated (the originating run never sees\n * it) — this is purely a chance to surface it (route to your logger,\n * bump a metric). Receives the exporter's `name` and the thrown error.\n */\nexport type ExporterErrorHandler = (exporterName: string, error: unknown) => void;\n\n/** Options for {@link createCollector}. */\nexport type CollectorOptions = ContentCaptureOptions & {\n  /**\n   * Called when an exporter throws (and is isolated). Overrides the default\n   * one-time `console.warn` per exporter — route the failure to your own\n   * logger / metrics instead. Errors thrown by the handler itself are\n   * swallowed so observability never crashes the run.\n   */\n  onError?: ExporterErrorHandler;\n};\n\n/**\n * Drive the source end of the Panoptic pipeline: ingest core\n * `@warlock.js/ai` {@link BaseReport} trees, project them into {@link\n * Trace}s, and fan each trace out to every registered exporter.\n *\n * Owns exporter registration (deduped by `ExporterContract.name`), the\n * report→trace projection, and graceful shutdown so exporters drain\n * before exit. Instantiated fresh per collector via {@link\n * createCollector}; callers never see `new`.\n *\n * **Failure isolation.** An exporter that throws never propagates back\n * into the originating run — `collect`, `flush`, and `shutdown` settle\n * every exporter independently (mirrors how the core event hooks\n * swallow consumer errors). One broken exporter can neither crash the\n * agent loop nor stop sibling exporters from receiving the trace. The\n * failure is still **surfaced** — via the `onError` option, or a one-time\n * `console.warn` per exporter — so a misconfiguration (e.g. a missing\n * optional peer like `langfuse`) doesn't fail silently.\n */\nclass Collector implements CollectorContract {\n  /**\n   * Registered exporters in insertion order. A `Map` keyed by\n   * `ExporterContract.name` gives O(1) dedupe on `use` while preserving\n   * registration order for deterministic fan-out.\n   */\n  private readonly exporters = new Map<string, ExporterContract>();\n\n  /**\n   * Exporters already warned about on the default error path — so a\n   * persistent misconfiguration surfaces once, not on every trace.\n   */\n  private readonly warnedExporters = new Set<string>();\n\n  /**\n   * Collector options: content capture threaded into every `toTrace`\n   * projection (`captureContent` populates span `input` / `output`), plus\n   * an optional `onError` for isolated exporter failures.\n   */\n  public constructor(private readonly options: CollectorOptions = {}) {}\n\n  public use(exporter: ExporterContract): this {\n    if (!this.exporters.has(exporter.name)) {\n      this.exporters.set(exporter.name, exporter);\n    }\n\n    return this;\n  }\n\n  public toTrace(report: BaseReport, rootError?: unknown): Trace {\n    return reportToTrace(report, rootError, this.options);\n  }\n\n  public async collect(report: BaseReport, rootError?: unknown): Promise<void> {\n    const trace = this.toTrace(report, rootError);\n\n    await this.dispatch(trace);\n  }\n\n  public async flush(): Promise<void> {\n    await this.settleAll((exporter) => exporter.flush?.());\n  }\n\n  public async shutdown(): Promise<void> {\n    await this.flush();\n\n    await this.settleAll((exporter) => exporter.shutdown?.());\n\n    this.exporters.clear();\n  }\n\n  /**\n   * Fan one trace out to every exporter and, when an exporter advertises\n   * the per-span hook, deliver every span in the finalized tree to it as\n   * well. `exportSpan` is a post-completion per-span hook (not a live /\n   * streaming feed — the trace is already finalized): we walk the tree in\n   * pre-order with {@link walkSpans} so the exporter sees the root and\n   * every descendant exactly once. Every invocation is isolated so a\n   * throwing exporter can't abort the dispatch to its siblings or escape\n   * into the originating run.\n   */\n  private async dispatch(trace: Trace): Promise<void> {\n    await this.settleAll(async (exporter) => {\n      await exporter.export(trace);\n\n      if (exporter.exportSpan !== undefined) {\n        for (const span of walkSpans(trace.root)) {\n          await exporter.exportSpan(span);\n        }\n      }\n    });\n  }\n\n  /**\n   * Run `task` against every registered exporter and wait for all of\n   * them to settle, swallowing individual rejections. `Promise.allSettled`\n   * guarantees one failure neither rejects the batch nor blocks the\n   * others — the contract's failure-isolation requirement.\n   */\n  private async settleAll(\n    task: (exporter: ExporterContract) => void | Promise<void>,\n  ): Promise<void> {\n    const runs = [...this.exporters.entries()].map(([name, exporter]) =>\n      Promise.resolve()\n        .then(() => task(exporter))\n        .catch((error: unknown) => this.reportExporterError(name, error)),\n    );\n\n    await Promise.allSettled(runs);\n  }\n\n  /**\n   * Surface an isolated exporter failure. The originating run never sees it\n   * (the isolation guarantee holds), but a silent failure is the wrong\n   * default for a config error — e.g. a missing optional peer like\n   * `langfuse` would otherwise drop every trace with no signal. The\n   * supplied `onError` is called, or — by default — a `console.warn` is\n   * emitted ONCE per exporter so the cause is visible without spamming.\n   */\n  private reportExporterError(name: string, error: unknown): void {\n    if (this.options.onError) {\n      try {\n        this.options.onError(name, error);\n      } catch {\n        // Never let the error handler itself escape into the run.\n      }\n      return;\n    }\n\n    if (this.warnedExporters.has(name)) {\n      return;\n    }\n\n    this.warnedExporters.add(name);\n    const message = error instanceof Error ? error.message : String(error);\n    console.warn(`[panoptic] exporter \"${name}\" failed and was isolated: ${message}`);\n  }\n}\n\n/**\n * Create a Panoptic collector — the single integration point an app\n * wires into its agents/workflows (typically via the `onComplete`\n * report hook). Register exporters with `use`, then feed finalized root\n * reports to `collect`.\n *\n * @example\n * const collector = createCollector().use(otelExporter).use(langfuseExporter);\n * agent.on(\"onComplete\", ({ result }) => collector.collect(result.report));\n * // on shutdown:\n * await collector.shutdown();\n */\nexport function createCollector(options: CollectorOptions = {}): CollectorContract {\n  return new Collector(options);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA8CA,IAAM,YAAN,MAA6C;CAmBP;;;;;;CAbpC,AAAiB,4BAAY,IAAI,IAA8B;;;;;CAM/D,AAAiB,kCAAkB,IAAI,IAAY;;;;;;CAOnD,AAAO,YAAY,AAAiB,UAA4B,CAAC,GAAG;EAAhC;CAAiC;CAErE,AAAO,IAAI,UAAkC;EAC3C,IAAI,CAAC,KAAK,UAAU,IAAI,SAAS,IAAI,GACnC,KAAK,UAAU,IAAI,SAAS,MAAM,QAAQ;EAG5C,OAAO;CACT;CAEA,AAAO,QAAQ,QAAoB,WAA4B;EAC7D,OAAO,cAAc,QAAQ,WAAW,KAAK,OAAO;CACtD;CAEA,MAAa,QAAQ,QAAoB,WAAoC;EAC3E,MAAM,QAAQ,KAAK,QAAQ,QAAQ,SAAS;EAE5C,MAAM,KAAK,SAAS,KAAK;CAC3B;CAEA,MAAa,QAAuB;EAClC,MAAM,KAAK,WAAW,aAAa,SAAS,QAAQ,CAAC;CACvD;CAEA,MAAa,WAA0B;EACrC,MAAM,KAAK,MAAM;EAEjB,MAAM,KAAK,WAAW,aAAa,SAAS,WAAW,CAAC;EAExD,KAAK,UAAU,MAAM;CACvB;;;;;;;;;;;CAYA,MAAc,SAAS,OAA6B;EAClD,MAAM,KAAK,UAAU,OAAO,aAAa;GACvC,MAAM,SAAS,OAAO,KAAK;GAE3B,IAAI,SAAS,eAAe,QAC1B,KAAK,MAAM,QAAQ,UAAU,MAAM,IAAI,GACrC,MAAM,SAAS,WAAW,IAAI;EAGpC,CAAC;CACH;;;;;;;CAQA,MAAc,UACZ,MACe;EACf,MAAM,OAAO,CAAC,GAAG,KAAK,UAAU,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,cACrD,QAAQ,QAAQ,CAAC,CACd,WAAW,KAAK,QAAQ,CAAC,CAAC,CAC1B,OAAO,UAAmB,KAAK,oBAAoB,MAAM,KAAK,CAAC,CACpE;EAEA,MAAM,QAAQ,WAAW,IAAI;CAC/B;;;;;;;;;CAUA,AAAQ,oBAAoB,MAAc,OAAsB;EAC9D,IAAI,KAAK,QAAQ,SAAS;GACxB,IAAI;IACF,KAAK,QAAQ,QAAQ,MAAM,KAAK;GAClC,QAAQ,CAER;GACA;EACF;EAEA,IAAI,KAAK,gBAAgB,IAAI,IAAI,GAC/B;EAGF,KAAK,gBAAgB,IAAI,IAAI;EAC7B,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACrE,QAAQ,KAAK,wBAAwB,KAAK,6BAA6B,SAAS;CAClF;AACF;;;;;;;;;;;;;AAcA,SAAgB,gBAAgB,UAA4B,CAAC,GAAsB;CACjF,OAAO,IAAI,UAAU,OAAO;AAC9B"}

package/esm/collector/content-capture.type.d.mts

@@ -0,0 +1,52 @@
+import { ReportType } from "@warlock.js/ai";
+
+//#region ../@warlock.js/ai-panoptic/src/collector/content-capture.type.d.ts
+/**
+ * Masker applied to each captured content value before it lands on a
+ * span's `input` / `output`. Receives the raw value plus which node and
+ * field it came from; return the (possibly masked) value to store, or
+ * `undefined` to drop the field entirely. Use it to strip secrets / PII
+ * when content capture runs in a sensitive environment.
+ *
+ * @example
+ * const redactContent: ContentRedactor = (value, { field }) =>
+ *   field === "input" ? "[redacted prompt]" : value;
+ */
+type ContentRedactor = (value: unknown, meta: {
+  name: string;
+  type: ReportType;
+  field: "input" | "output";
+}) => unknown;
+/**
+ * Opt-in content capture for the report → trace projection. Off by
+ * default: span `input` / `output` stay absent because prompts,
+ * completions, and tool payloads are large and frequently sensitive.
+ *
+ * Enable it on the collector ({@link
+ * import("./collector").createCollector}) or the subscriber ({@link
+ * import("../panoptic/panoptic").panoptic}) to flow content into every
+ * exporter — `consoleExporter({ io: true })`, the file exporter's JSON,
+ * OTel `gen_ai.prompt` / `gen_ai.completion`, and Langfuse
+ * `input` / `output`.
+ */
+type ContentCaptureOptions = {
+  /**
+   * Copy the agent's first-trip prompt + final response, and each tool's
+   * args + result, onto `span.input` / `span.output`. Default `false`.
+   */
+  captureContent?: boolean; /** Optional masker applied to every captured value before it is stored. */
+  redactContent?: ContentRedactor;
+  /**
+   * When `true`, emit the agent's complete `CapturedMessage[]` (every
+   * trip, every role) onto `span.input` instead of the `[system, user]`
+   * first-trip array. Requires the upstream run to set `captureMessages`
+   * (core `@warlock.js/ai`) so the report carries a `messages` array — a
+   * no-op falling back to first-trip capture when it doesn't. The whole
+   * array is still passed through the {@link ContentRedactor} as a single
+   * value, so masking applies to captured history too. Default `false`.
+   */
+  fullHistory?: boolean;
+};
+//#endregion
+export { ContentCaptureOptions, ContentRedactor };
+//# sourceMappingURL=content-capture.type.d.mts.map

package/esm/collector/content-capture.type.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-capture.type.d.mts","names":[],"sources":["../../../../../../../@warlock.js/ai-panoptic/src/collector/content-capture.type.ts"],"mappings":";;;;;AAaA;;;;;;;;;KAAY,eAAA,IACV,KAAA,WACA,IAAA;EAAQ,IAAA;EAAc,IAAA,EAAM,UAAU;EAAE,KAAA;AAAA;;;;;;;;AAgC7B;;;;;KAjBD,qBAAA;;;;;EAKV,cAAA;EAEA,aAAA,GAAgB,eAAe;;;;;;;;;;EAU/B,WAAA;AAAA"}

package/esm/collector/extract-span-attributes.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"extract-span-attributes.d.mts","names":[],"sources":["../../../../../../../@warlock.js/ai-panoptic/src/collector/extract-span-attributes.ts"],"mappings":";;;;;AAqDA;;;;;;;;AAAiE;;;;;;;;;;;;iBAAjD,qBAAA,CAAsB,MAAA,EAAQ,UAAA,GAAa,MAAM"}
+{"version":3,"file":"extract-span-attributes.d.mts","names":[],"sources":["../../../../../../../@warlock.js/ai-panoptic/src/collector/extract-span-attributes.ts"],"mappings":";;;;;AAuDA;;;;;;;;AAAiE;;;;;;;;;;;;iBAAjD,qBAAA,CAAsB,MAAA,EAAQ,UAAA,GAAa,MAAM"}

package/esm/collector/extract-span-attributes.mjs

@@ -33,6 +33,7 @@ function extractSpanAttributes(report) {
 			addWorkflowAttributes(attributes, extensions);
 			break;
 		case "supervisor":
+		case "team":
 			addSupervisorAttributes(attributes, extensions);
 			break;
 		case "orchestrator":
@@ -50,6 +51,8 @@ function addAgentAttributes(attributes, extensions) {
 	if (Array.isArray(extensions.trips)) attributes["agent.trips"] = extensions.trips.length;
 	if (extensions.model?.name !== void 0) attributes["agent.model.name"] = extensions.model.name;
 	if (extensions.model?.provider !== void 0) attributes["agent.model.provider"] = extensions.model.provider;
+	if (extensions.promptName !== void 0) attributes["agent.promptName"] = extensions.promptName;
+	if (extensions.promptVersion !== void 0) attributes["agent.promptVersion"] = extensions.promptVersion;
 }
 function addWorkflowAttributes(attributes, extensions) {
 	if (extensions.workflowName !== void 0) attributes["workflow.name"] = extensions.workflowName;

package/esm/collector/extract-span-attributes.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"extract-span-attributes.mjs","names":[],"sources":["../../../../../../../@warlock.js/ai-panoptic/src/collector/extract-span-attributes.ts"],"sourcesContent":["import type { BaseReport } from \"@warlock.js/ai\";\n\n/**\n * Per-primitive `BaseReport` extension fields the collector surfaces as\n * span attributes. Declared as a structural superset (every field\n * optional) so a single reader can pull whatever the concrete report\n * carried without narrowing on `type` first — a `BaseReport` widened to\n * this shape exposes `undefined` for the fields its primitive doesn't\n * set, and the extractor simply skips those.\n *\n * Mirrors the public per-primitive report types in `@warlock.js/ai`\n * (`AgentReport`, `WorkflowReport`, `SupervisorReport`,\n * `OrchestratorReport`, `ToolCall`) — kept structural rather than a\n * union import so adding a new optional report field upstream is a\n * non-breaking read here.\n */\ntype ReportExtensions = {\n  model?: { name?: string; provider?: string };\n  trips?: unknown[];\n  workflowName?: string;\n  supervisorName?: string;\n  signature?: string;\n  terminatedBy?: string;\n  iterations?: number;\n  steps?: Record<string, unknown>;\n  turns?: unknown[];\n  turnIndex?: number;\n  tripIndex?: number;\n  recoveredFrom?: string;\n};\n\n/**\n * Build the free-form `TraceSpan.attributes` bag for one report node.\n *\n * The collector keeps the first-class span fields (identity, timing,\n * status, usage, error) on the span itself and routes everything\n * primitive-specific here — trip/step/iteration counts, the model\n * identity an agent ran against, the tool's originating trip index, a\n * supervisor's termination reason. Exporters forward this verbatim as\n * backend span attributes (OTel attributes, Langfuse metadata).\n *\n * Only populated keys are emitted; the function returns `undefined`\n * when the node carried no extra detail, so the optional\n * `TraceSpan.attributes` field stays absent rather than holding an\n * empty object (matches the contract's \"absent when empty\" note).\n *\n * Retry count is surfaced from the shared `BaseReport.attempts` for\n * every primitive so cost dashboards see the real call count.\n *\n * @example\n * const attributes = extractSpanAttributes(agentReport);\n * // { \"agent.trips\": 3, \"agent.model.name\": \"gpt-4o\", \"agent.model.provider\": \"openai\" }\n */\nexport function extractSpanAttributes(report: BaseReport): Record<string, unknown> | undefined {\n  const extensions = report as BaseReport & ReportExtensions;\n  const attributes: Record<string, unknown> = {};\n\n  if (report.attempts !== undefined && report.attempts.length > 0) {\n    attributes[\"retries\"] = report.attempts.length;\n  }\n\n  switch (report.type) {\n    case \"agent\": {\n      addAgentAttributes(attributes, extensions);\n      break;\n    }\n\n    case \"workflow\": {\n      addWorkflowAttributes(attributes, extensions);\n      break;\n    }\n\n    case \"supervisor\": {\n      addSupervisorAttributes(attributes, extensions);\n      break;\n    }\n\n    case \"orchestrator\": {\n      addOrchestratorAttributes(attributes, extensions);\n      break;\n    }\n\n    case \"tool\": {\n      addToolAttributes(attributes, extensions);\n      break;\n    }\n\n    default: {\n      break;\n    }\n  }\n\n  if (Object.keys(attributes).length === 0) {\n    return undefined;\n  }\n\n  return attributes;\n}\n\nfunction addAgentAttributes(attributes: Record<string, unknown>, extensions: ReportExtensions): void {\n  if (Array.isArray(extensions.trips)) {\n    attributes[\"agent.trips\"] = extensions.trips.length;\n  }\n\n  if (extensions.model?.name !== undefined) {\n    attributes[\"agent.model.name\"] = extensions.model.name;\n  }\n\n  if (extensions.model?.provider !== undefined) {\n    attributes[\"agent.model.provider\"] = extensions.model.provider;\n  }\n}\n\nfunction addWorkflowAttributes(attributes: Record<string, unknown>, extensions: ReportExtensions): void {\n  if (extensions.workflowName !== undefined) {\n    attributes[\"workflow.name\"] = extensions.workflowName;\n  }\n\n  if (extensions.signature !== undefined) {\n    attributes[\"workflow.signature\"] = extensions.signature;\n  }\n\n  if (extensions.steps !== undefined) {\n    attributes[\"workflow.steps\"] = Object.keys(extensions.steps).length;\n  }\n}\n\nfunction addSupervisorAttributes(attributes: Record<string, unknown>, extensions: ReportExtensions): void {\n  if (extensions.supervisorName !== undefined) {\n    attributes[\"supervisor.name\"] = extensions.supervisorName;\n  }\n\n  if (extensions.terminatedBy !== undefined) {\n    attributes[\"supervisor.terminatedBy\"] = extensions.terminatedBy;\n  }\n\n  if (extensions.iterations !== undefined) {\n    attributes[\"supervisor.iterations\"] = extensions.iterations;\n  }\n}\n\nfunction addOrchestratorAttributes(attributes: Record<string, unknown>, extensions: ReportExtensions): void {\n  if (extensions.turnIndex !== undefined) {\n    attributes[\"orchestrator.turnIndex\"] = extensions.turnIndex;\n  }\n\n  if (extensions.signature !== undefined) {\n    attributes[\"orchestrator.signature\"] = extensions.signature;\n  }\n\n  if (Array.isArray(extensions.turns)) {\n    attributes[\"orchestrator.turns\"] = extensions.turns.length;\n  }\n}\n\nfunction addToolAttributes(attributes: Record<string, unknown>, extensions: ReportExtensions): void {\n  if (extensions.tripIndex !== undefined) {\n    attributes[\"tool.tripIndex\"] = extensions.tripIndex;\n  }\n\n  if (extensions.recoveredFrom !== undefined) {\n    attributes[\"tool.recoveredFrom\"] = extensions.recoveredFrom;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAqDA,SAAgB,sBAAsB,QAAyD;CAC7F,MAAM,aAAa;CACnB,MAAM,aAAsC,CAAC;CAE7C,IAAI,OAAO,aAAa,UAAa,OAAO,SAAS,SAAS,GAC5D,WAAW,aAAa,OAAO,SAAS;CAG1C,QAAQ,OAAO,MAAf;EACE,KAAK;GACH,mBAAmB,YAAY,UAAU;GACzC;EAGF,KAAK;GACH,sBAAsB,YAAY,UAAU;GAC5C;EAGF,KAAK;GACH,wBAAwB,YAAY,UAAU;GAC9C;EAGF,KAAK;GACH,0BAA0B,YAAY,UAAU;GAChD;EAGF,KAAK;GACH,kBAAkB,YAAY,UAAU;GACxC;EAGF,SACE;CAEJ;CAEA,IAAI,OAAO,KAAK,UAAU,CAAC,CAAC,WAAW,GACrC;CAGF,OAAO;AACT;AAEA,SAAS,mBAAmB,YAAqC,YAAoC;CACnG,IAAI,MAAM,QAAQ,WAAW,KAAK,GAChC,WAAW,iBAAiB,WAAW,MAAM;CAG/C,IAAI,WAAW,OAAO,SAAS,QAC7B,WAAW,sBAAsB,WAAW,MAAM;CAGpD,IAAI,WAAW,OAAO,aAAa,QACjC,WAAW,0BAA0B,WAAW,MAAM;AAE1D;AAEA,SAAS,sBAAsB,YAAqC,YAAoC;CACtG,IAAI,WAAW,iBAAiB,QAC9B,WAAW,mBAAmB,WAAW;CAG3C,IAAI,WAAW,cAAc,QAC3B,WAAW,wBAAwB,WAAW;CAGhD,IAAI,WAAW,UAAU,QACvB,WAAW,oBAAoB,OAAO,KAAK,WAAW,KAAK,CAAC,CAAC;AAEjE;AAEA,SAAS,wBAAwB,YAAqC,YAAoC;CACxG,IAAI,WAAW,mBAAmB,QAChC,WAAW,qBAAqB,WAAW;CAG7C,IAAI,WAAW,iBAAiB,QAC9B,WAAW,6BAA6B,WAAW;CAGrD,IAAI,WAAW,eAAe,QAC5B,WAAW,2BAA2B,WAAW;AAErD;AAEA,SAAS,0BAA0B,YAAqC,YAAoC;CAC1G,IAAI,WAAW,cAAc,QAC3B,WAAW,4BAA4B,WAAW;CAGpD,IAAI,WAAW,cAAc,QAC3B,WAAW,4BAA4B,WAAW;CAGpD,IAAI,MAAM,QAAQ,WAAW,KAAK,GAChC,WAAW,wBAAwB,WAAW,MAAM;AAExD;AAEA,SAAS,kBAAkB,YAAqC,YAAoC;CAClG,IAAI,WAAW,cAAc,QAC3B,WAAW,oBAAoB,WAAW;CAG5C,IAAI,WAAW,kBAAkB,QAC/B,WAAW,wBAAwB,WAAW;AAElD"}
+{"version":3,"file":"extract-span-attributes.mjs","names":[],"sources":["../../../../../../../@warlock.js/ai-panoptic/src/collector/extract-span-attributes.ts"],"sourcesContent":["import type { BaseReport } from \"@warlock.js/ai\";\n\n/**\n * Per-primitive `BaseReport` extension fields the collector surfaces as\n * span attributes. Declared as a structural superset (every field\n * optional) so a single reader can pull whatever the concrete report\n * carried without narrowing on `type` first — a `BaseReport` widened to\n * this shape exposes `undefined` for the fields its primitive doesn't\n * set, and the extractor simply skips those.\n *\n * Mirrors the public per-primitive report types in `@warlock.js/ai`\n * (`AgentReport`, `WorkflowReport`, `SupervisorReport`,\n * `OrchestratorReport`, `ToolCall`) — kept structural rather than a\n * union import so adding a new optional report field upstream is a\n * non-breaking read here.\n */\ntype ReportExtensions = {\n  model?: { name?: string; provider?: string };\n  trips?: unknown[];\n  promptName?: string;\n  promptVersion?: string;\n  workflowName?: string;\n  supervisorName?: string;\n  signature?: string;\n  terminatedBy?: string;\n  iterations?: number;\n  steps?: Record<string, unknown>;\n  turns?: unknown[];\n  turnIndex?: number;\n  tripIndex?: number;\n  recoveredFrom?: string;\n};\n\n/**\n * Build the free-form `TraceSpan.attributes` bag for one report node.\n *\n * The collector keeps the first-class span fields (identity, timing,\n * status, usage, error) on the span itself and routes everything\n * primitive-specific here — trip/step/iteration counts, the model\n * identity an agent ran against, the tool's originating trip index, a\n * supervisor's termination reason. Exporters forward this verbatim as\n * backend span attributes (OTel attributes, Langfuse metadata).\n *\n * Only populated keys are emitted; the function returns `undefined`\n * when the node carried no extra detail, so the optional\n * `TraceSpan.attributes` field stays absent rather than holding an\n * empty object (matches the contract's \"absent when empty\" note).\n *\n * Retry count is surfaced from the shared `BaseReport.attempts` for\n * every primitive so cost dashboards see the real call count.\n *\n * @example\n * const attributes = extractSpanAttributes(agentReport);\n * // { \"agent.trips\": 3, \"agent.model.name\": \"gpt-4o\", \"agent.model.provider\": \"openai\" }\n */\nexport function extractSpanAttributes(report: BaseReport): Record<string, unknown> | undefined {\n  const extensions = report as BaseReport & ReportExtensions;\n  const attributes: Record<string, unknown> = {};\n\n  if (report.attempts !== undefined && report.attempts.length > 0) {\n    attributes[\"retries\"] = report.attempts.length;\n  }\n\n  switch (report.type) {\n    case \"agent\": {\n      addAgentAttributes(attributes, extensions);\n      break;\n    }\n\n    case \"workflow\": {\n      addWorkflowAttributes(attributes, extensions);\n      break;\n    }\n\n    case \"supervisor\":\n    case \"team\": {\n      // ai.team reuses the supervisor engine, so a team report carries the\n      // same supervisorName / terminatedBy / iterations fields.\n      addSupervisorAttributes(attributes, extensions);\n      break;\n    }\n\n    case \"orchestrator\": {\n      addOrchestratorAttributes(attributes, extensions);\n      break;\n    }\n\n    case \"tool\": {\n      addToolAttributes(attributes, extensions);\n      break;\n    }\n\n    default: {\n      break;\n    }\n  }\n\n  if (Object.keys(attributes).length === 0) {\n    return undefined;\n  }\n\n  return attributes;\n}\n\nfunction addAgentAttributes(attributes: Record<string, unknown>, extensions: ReportExtensions): void {\n  if (Array.isArray(extensions.trips)) {\n    attributes[\"agent.trips\"] = extensions.trips.length;\n  }\n\n  if (extensions.model?.name !== undefined) {\n    attributes[\"agent.model.name\"] = extensions.model.name;\n  }\n\n  if (extensions.model?.provider !== undefined) {\n    attributes[\"agent.model.provider\"] = extensions.model.provider;\n  }\n\n  // Prompt-version linkage (core `AgentReport.promptName` / `promptVersion`).\n  // Present only when the agent ran against a *named* `ai.prompts` builder;\n  // surfaced so the dashboard can group / filter runs by `name@version` and\n  // attribute behavior shifts to a specific prompt revision.\n  if (extensions.promptName !== undefined) {\n    attributes[\"agent.promptName\"] = extensions.promptName;\n  }\n\n  if (extensions.promptVersion !== undefined) {\n    attributes[\"agent.promptVersion\"] = extensions.promptVersion;\n  }\n}\n\nfunction addWorkflowAttributes(attributes: Record<string, unknown>, extensions: ReportExtensions): void {\n  if (extensions.workflowName !== undefined) {\n    attributes[\"workflow.name\"] = extensions.workflowName;\n  }\n\n  if (extensions.signature !== undefined) {\n    attributes[\"workflow.signature\"] = extensions.signature;\n  }\n\n  if (extensions.steps !== undefined) {\n    attributes[\"workflow.steps\"] = Object.keys(extensions.steps).length;\n  }\n}\n\nfunction addSupervisorAttributes(attributes: Record<string, unknown>, extensions: ReportExtensions): void {\n  if (extensions.supervisorName !== undefined) {\n    attributes[\"supervisor.name\"] = extensions.supervisorName;\n  }\n\n  if (extensions.terminatedBy !== undefined) {\n    attributes[\"supervisor.terminatedBy\"] = extensions.terminatedBy;\n  }\n\n  if (extensions.iterations !== undefined) {\n    attributes[\"supervisor.iterations\"] = extensions.iterations;\n  }\n}\n\nfunction addOrchestratorAttributes(attributes: Record<string, unknown>, extensions: ReportExtensions): void {\n  if (extensions.turnIndex !== undefined) {\n    attributes[\"orchestrator.turnIndex\"] = extensions.turnIndex;\n  }\n\n  if (extensions.signature !== undefined) {\n    attributes[\"orchestrator.signature\"] = extensions.signature;\n  }\n\n  if (Array.isArray(extensions.turns)) {\n    attributes[\"orchestrator.turns\"] = extensions.turns.length;\n  }\n}\n\nfunction addToolAttributes(attributes: Record<string, unknown>, extensions: ReportExtensions): void {\n  if (extensions.tripIndex !== undefined) {\n    attributes[\"tool.tripIndex\"] = extensions.tripIndex;\n  }\n\n  if (extensions.recoveredFrom !== undefined) {\n    attributes[\"tool.recoveredFrom\"] = extensions.recoveredFrom;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAuDA,SAAgB,sBAAsB,QAAyD;CAC7F,MAAM,aAAa;CACnB,MAAM,aAAsC,CAAC;CAE7C,IAAI,OAAO,aAAa,UAAa,OAAO,SAAS,SAAS,GAC5D,WAAW,aAAa,OAAO,SAAS;CAG1C,QAAQ,OAAO,MAAf;EACE,KAAK;GACH,mBAAmB,YAAY,UAAU;GACzC;EAGF,KAAK;GACH,sBAAsB,YAAY,UAAU;GAC5C;EAGF,KAAK;EACL,KAAK;GAGH,wBAAwB,YAAY,UAAU;GAC9C;EAGF,KAAK;GACH,0BAA0B,YAAY,UAAU;GAChD;EAGF,KAAK;GACH,kBAAkB,YAAY,UAAU;GACxC;EAGF,SACE;CAEJ;CAEA,IAAI,OAAO,KAAK,UAAU,CAAC,CAAC,WAAW,GACrC;CAGF,OAAO;AACT;AAEA,SAAS,mBAAmB,YAAqC,YAAoC;CACnG,IAAI,MAAM,QAAQ,WAAW,KAAK,GAChC,WAAW,iBAAiB,WAAW,MAAM;CAG/C,IAAI,WAAW,OAAO,SAAS,QAC7B,WAAW,sBAAsB,WAAW,MAAM;CAGpD,IAAI,WAAW,OAAO,aAAa,QACjC,WAAW,0BAA0B,WAAW,MAAM;CAOxD,IAAI,WAAW,eAAe,QAC5B,WAAW,sBAAsB,WAAW;CAG9C,IAAI,WAAW,kBAAkB,QAC/B,WAAW,yBAAyB,WAAW;AAEnD;AAEA,SAAS,sBAAsB,YAAqC,YAAoC;CACtG,IAAI,WAAW,iBAAiB,QAC9B,WAAW,mBAAmB,WAAW;CAG3C,IAAI,WAAW,cAAc,QAC3B,WAAW,wBAAwB,WAAW;CAGhD,IAAI,WAAW,UAAU,QACvB,WAAW,oBAAoB,OAAO,KAAK,WAAW,KAAK,CAAC,CAAC;AAEjE;AAEA,SAAS,wBAAwB,YAAqC,YAAoC;CACxG,IAAI,WAAW,mBAAmB,QAChC,WAAW,qBAAqB,WAAW;CAG7C,IAAI,WAAW,iBAAiB,QAC9B,WAAW,6BAA6B,WAAW;CAGrD,IAAI,WAAW,eAAe,QAC5B,WAAW,2BAA2B,WAAW;AAErD;AAEA,SAAS,0BAA0B,YAAqC,YAAoC;CAC1G,IAAI,WAAW,cAAc,QAC3B,WAAW,4BAA4B,WAAW;CAGpD,IAAI,WAAW,cAAc,QAC3B,WAAW,4BAA4B,WAAW;CAGpD,IAAI,MAAM,QAAQ,WAAW,KAAK,GAChC,WAAW,wBAAwB,WAAW,MAAM;AAExD;AAEA,SAAS,kBAAkB,YAAqC,YAAoC;CAClG,IAAI,WAAW,cAAc,QAC3B,WAAW,oBAAoB,WAAW;CAG5C,IAAI,WAAW,kBAAkB,QAC/B,WAAW,wBAAwB,WAAW;AAElD"}

package/esm/collector/index.d.mts

@@ -1,4 +1,5 @@
-import { createCollector } from "./collector.mjs";
+import { ContentCaptureOptions, ContentRedactor } from "./content-capture.type.mjs";
+import { CollectorOptions, ExporterErrorHandler, createCollector } from "./collector.mjs";
 import { reportToTrace } from "./report-to-trace.mjs";
 import { reportToSpan } from "./report-to-span.mjs";
 import { extractSpanAttributes } from "./extract-span-attributes.mjs";

package/esm/collector/index.mjs

@@ -0,0 +1,7 @@
+import { normalizeError } from "./normalize-error.mjs";
+import { extractSpanAttributes } from "./extract-span-attributes.mjs";
+import { reportToSpan } from "./report-to-span.mjs";
+import { reportToTrace } from "./report-to-trace.mjs";
+import { createCollector } from "./collector.mjs";
+
+export {  };

package/esm/collector/normalize-error.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"normalize-error.d.mts","names":[],"sources":["../../../../../../../@warlock.js/ai-panoptic/src/collector/normalize-error.ts"],"mappings":";;;;;AAsBA;;;;AAA8D;;;;;;;;;;;;;;iBAA9C,cAAA,CAAe,KAAA,YAAiB,cAAc"}
+{"version":3,"file":"normalize-error.d.mts","names":[],"sources":["../../../../../../../@warlock.js/ai-panoptic/src/collector/normalize-error.ts"],"mappings":";;;;;AAuBA;;;;AAA8D;;;;;;;;;;;;;;iBAA9C,cAAA,CAAe,KAAA,YAAiB,cAAc"}

package/esm/collector/normalize-error.mjs

@@ -1,3 +1,5 @@
+import { redact, scrubSecrets } from "@warlock.js/ai";
+
 //#region ../@warlock.js/ai-panoptic/src/collector/normalize-error.ts
 /**
 * Project a captured execution error onto the structural
@@ -23,7 +25,7 @@ function normalizeError(error) {
 	if (error === void 0 || error === null) return;
 	if (typeof error !== "object") return {
 		type: "Error",
-		message: String(error)
+		message: scrubSecrets(String(error))
 	};
 	const candidate = error;
 	const type = pickString(candidate.code) ?? pickString(candidate.name) ?? "Error";
@@ -31,9 +33,10 @@ function normalizeError(error) {
 	const stack = pickString(candidate.stack);
 	const normalized = {
 		type,
-		message
+		message: scrubSecrets(message)
 	};
-	if (stack !== void 0) normalized.stack = stack;
+	if (stack !== void 0) normalized.stack = scrubSecrets(stack);
+	if (candidate.cause !== void 0 && candidate.cause !== null) normalized.cause = typeof candidate.cause === "object" ? redact(candidate.cause) : scrubSecrets(String(candidate.cause));
 	return normalized;
 }
 /**

package/esm/collector/normalize-error.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"normalize-error.mjs","names":[],"sources":["../../../../../../../@warlock.js/ai-panoptic/src/collector/normalize-error.ts"],"sourcesContent":["import type { TraceSpanError } from \"../contracts/trace.type\";\n\n/**\n * Project a captured execution error onto the structural\n * {@link TraceSpanError} shape used on a failed / cancelled span.\n *\n * Source errors are typically `AIError` instances (every error surfaced\n * by `@warlock.js/ai` is one), but the collector never depends on the\n * concrete class — it reads only the structural surface (`name` / `code`\n * / `message` / `stack`) so a plain `Error`, an `AIError`, or any\n * thrown value all normalize identically. The result is a JSON-safe\n * plain object so it survives serialization to a backend collector\n * unchanged.\n *\n * The error `type` prefers the stable `code` (e.g. `\"RATE_LIMIT\"`) over\n * the class `name`, falling back to `name` and finally to the generic\n * `\"Error\"` so the field is always populated.\n *\n * @example\n * const spanError = normalizeError(report.error);\n * // { type: \"RATE_LIMIT\", message: \"429 Too Many Requests\", stack: \"...\" }\n */\nexport function normalizeError(error: unknown): TraceSpanError | undefined {\n  if (error === undefined || error === null) {\n    return undefined;\n  }\n\n  if (typeof error !== \"object\") {\n    return {\n      type: \"Error\",\n      message: String(error),\n    };\n  }\n\n  const candidate = error as {\n    code?: unknown;\n    name?: unknown;\n    message?: unknown;\n    stack?: unknown;\n  };\n\n  const type = pickString(candidate.code) ?? pickString(candidate.name) ?? \"Error\";\n  const message = pickString(candidate.message) ?? \"\";\n  const stack = pickString(candidate.stack);\n\n  const normalized: TraceSpanError = {\n    type,\n    message,\n  };\n\n  if (stack !== undefined) {\n    normalized.stack = stack;\n  }\n\n  return normalized;\n}\n\n/**\n * Return the value when it is a non-empty string, otherwise `undefined`.\n * Keeps `normalizeError` from promoting empty / non-string fields.\n */\nfunction pickString(value: unknown): string | undefined {\n  if (typeof value === \"string\" && value.length > 0) {\n    return value;\n  }\n\n  return undefined;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAsBA,SAAgB,eAAe,OAA4C;CACzE,IAAI,UAAU,UAAa,UAAU,MACnC;CAGF,IAAI,OAAO,UAAU,UACnB,OAAO;EACL,MAAM;EACN,SAAS,OAAO,KAAK;CACvB;CAGF,MAAM,YAAY;CAOlB,MAAM,OAAO,WAAW,UAAU,IAAI,KAAK,WAAW,UAAU,IAAI,KAAK;CACzE,MAAM,UAAU,WAAW,UAAU,OAAO,KAAK;CACjD,MAAM,QAAQ,WAAW,UAAU,KAAK;CAExC,MAAM,aAA6B;EACjC;EACA;CACF;CAEA,IAAI,UAAU,QACZ,WAAW,QAAQ;CAGrB,OAAO;AACT;;;;;AAMA,SAAS,WAAW,OAAoC;CACtD,IAAI,OAAO,UAAU,YAAY,MAAM,SAAS,GAC9C,OAAO;AAIX"}
+{"version":3,"file":"normalize-error.mjs","names":[],"sources":["../../../../../../../@warlock.js/ai-panoptic/src/collector/normalize-error.ts"],"sourcesContent":["import { redact, scrubSecrets } from \"@warlock.js/ai\";\nimport type { TraceSpanError } from \"../contracts/trace.type\";\n\n/**\n * Project a captured execution error onto the structural\n * {@link TraceSpanError} shape used on a failed / cancelled span.\n *\n * Source errors are typically `AIError` instances (every error surfaced\n * by `@warlock.js/ai` is one), but the collector never depends on the\n * concrete class — it reads only the structural surface (`name` / `code`\n * / `message` / `stack`) so a plain `Error`, an `AIError`, or any\n * thrown value all normalize identically. The result is a JSON-safe\n * plain object so it survives serialization to a backend collector\n * unchanged.\n *\n * The error `type` prefers the stable `code` (e.g. `\"RATE_LIMIT\"`) over\n * the class `name`, falling back to `name` and finally to the generic\n * `\"Error\"` so the field is always populated.\n *\n * @example\n * const spanError = normalizeError(report.error);\n * // { type: \"RATE_LIMIT\", message: \"429 Too Many Requests\", stack: \"...\" }\n */\nexport function normalizeError(error: unknown): TraceSpanError | undefined {\n  if (error === undefined || error === null) {\n    return undefined;\n  }\n\n  if (typeof error !== \"object\") {\n    return {\n      type: \"Error\",\n      message: scrubSecrets(String(error)),\n    };\n  }\n\n  const candidate = error as {\n    code?: unknown;\n    name?: unknown;\n    message?: unknown;\n    stack?: unknown;\n    cause?: unknown;\n  };\n\n  const type = pickString(candidate.code) ?? pickString(candidate.name) ?? \"Error\";\n  const message = pickString(candidate.message) ?? \"\";\n  const stack = pickString(candidate.stack);\n\n  // Scrub free-text secrets (Bearer tokens, api keys) from the message and\n  // stack, and deep-redact the cause (a raw provider SDK error can carry\n  // auth/cookie headers) before either is stored or exported (S4).\n  const normalized: TraceSpanError = {\n    type,\n    message: scrubSecrets(message),\n  };\n\n  if (stack !== undefined) {\n    normalized.stack = scrubSecrets(stack);\n  }\n\n  if (candidate.cause !== undefined && candidate.cause !== null) {\n    normalized.cause =\n      typeof candidate.cause === \"object\"\n        ? redact(candidate.cause)\n        : scrubSecrets(String(candidate.cause));\n  }\n\n  return normalized;\n}\n\n/**\n * Return the value when it is a non-empty string, otherwise `undefined`.\n * Keeps `normalizeError` from promoting empty / non-string fields.\n */\nfunction pickString(value: unknown): string | undefined {\n  if (typeof value === \"string\" && value.length > 0) {\n    return value;\n  }\n\n  return undefined;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAuBA,SAAgB,eAAe,OAA4C;CACzE,IAAI,UAAU,UAAa,UAAU,MACnC;CAGF,IAAI,OAAO,UAAU,UACnB,OAAO;EACL,MAAM;EACN,SAAS,aAAa,OAAO,KAAK,CAAC;CACrC;CAGF,MAAM,YAAY;CAQlB,MAAM,OAAO,WAAW,UAAU,IAAI,KAAK,WAAW,UAAU,IAAI,KAAK;CACzE,MAAM,UAAU,WAAW,UAAU,OAAO,KAAK;CACjD,MAAM,QAAQ,WAAW,UAAU,KAAK;CAKxC,MAAM,aAA6B;EACjC;EACA,SAAS,aAAa,OAAO;CAC/B;CAEA,IAAI,UAAU,QACZ,WAAW,QAAQ,aAAa,KAAK;CAGvC,IAAI,UAAU,UAAU,UAAa,UAAU,UAAU,MACvD,WAAW,QACT,OAAO,UAAU,UAAU,WACvB,OAAO,UAAU,KAAK,IACtB,aAAa,OAAO,UAAU,KAAK,CAAC;CAG5C,OAAO;AACT;;;;;AAMA,SAAS,WAAW,OAAoC;CACtD,IAAI,OAAO,UAAU,YAAY,MAAM,SAAS,GAC9C,OAAO;AAIX"}

package/esm/collector/report-to-span.d.mts

@@ -1,4 +1,5 @@
 import { TraceSpan } from "../contracts/trace.type.mjs";
+import { ContentCaptureOptions } from "./content-capture.type.mjs";
 import { BaseReport } from "@warlock.js/ai";
 
 //#region ../@warlock.js/ai-panoptic/src/collector/report-to-span.d.ts
@@ -17,6 +18,12 @@ import { BaseReport } from "@warlock.js/ai";
  * identity, tool trip index) is routed into the optional `attributes`
  * bag via {@link extractSpanAttributes}.
  *
+ * When {@link ContentCaptureOptions.captureContent} is set, the raw
+ * prompt/response (agents) and args/result (tools) are additionally
+ * copied onto `span.input` / `span.output` — off by default because
+ * payloads are large and often sensitive. A {@link ContentRedactor} can
+ * mask each value first.
+ *
  * No external lookup is needed — a `BaseReport` already carries
  * everything a span requires, so a collector can flatten a tree without
  * consulting any other source.
@@ -25,7 +32,7 @@ import { BaseReport } from "@warlock.js/ai";
  * const root = reportToSpan(result.report);
  * console.log(root.spanId, root.traceId, root.children.length);
  */
-declare function reportToSpan(report: BaseReport): TraceSpan;
+declare function reportToSpan(report: BaseReport, options?: ContentCaptureOptions): TraceSpan;
 //#endregion
 export { reportToSpan };
 //# sourceMappingURL=report-to-span.d.mts.map

package/esm/collector/report-to-span.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"report-to-span.d.mts","names":[],"sources":["../../../../../../../@warlock.js/ai-panoptic/src/collector/report-to-span.ts"],"mappings":";;;;;;AA4BA;;;;;;;;AAA2D;;;;;;;;;;;;;iBAA3C,YAAA,CAAa,MAAA,EAAQ,UAAA,GAAa,SAAS"}
+{"version":3,"file":"report-to-span.d.mts","names":[],"sources":["../../../../../../../@warlock.js/ai-panoptic/src/collector/report-to-span.ts"],"mappings":";;;;;;;AAmCA;;;;;;;;;;;;;;AAA4F;;;;;;;;;;;;;iBAA5E,YAAA,CAAa,MAAA,EAAQ,UAAA,EAAY,OAAA,GAAU,qBAAA,GAAwB,SAAA"}

package/esm/collector/report-to-span.mjs

@@ -17,6 +17,12 @@ import { extractSpanAttributes } from "./extract-span-attributes.mjs";
 * identity, tool trip index) is routed into the optional `attributes`
 * bag via {@link extractSpanAttributes}.
 *
+* When {@link ContentCaptureOptions.captureContent} is set, the raw
+* prompt/response (agents) and args/result (tools) are additionally
+* copied onto `span.input` / `span.output` — off by default because
+* payloads are large and often sensitive. A {@link ContentRedactor} can
+* mask each value first.
+*
 * No external lookup is needed — a `BaseReport` already carries
 * everything a span requires, so a collector can flatten a tree without
 * consulting any other source.
@@ -25,7 +31,7 @@ import { extractSpanAttributes } from "./extract-span-attributes.mjs";
 * const root = reportToSpan(result.report);
 * console.log(root.spanId, root.traceId, root.children.length);
 */
-function reportToSpan(report) {
+function reportToSpan(report, options) {
 	const span = {
 		spanId: report.runId,
 		traceId: report.rootRunId,
@@ -36,7 +42,7 @@ function reportToSpan(report) {
 		endedAt: report.endedAt,
 		duration: report.duration,
 		usage: report.usage,
-		children: report.children.map(reportToSpan)
+		children: report.children.map((child) => reportToSpan(child, options))
 	};
 	if (report.parentRunId !== void 0) span.parentSpanId = report.parentRunId;
 	if (report.sessionId !== void 0) span.sessionId = report.sessionId;
@@ -45,8 +51,87 @@ function reportToSpan(report) {
 	if (error !== void 0) span.error = error;
 	const attributes = extractSpanAttributes(report);
 	if (attributes !== void 0) span.attributes = attributes;
+	if (options?.captureContent) captureContent(span, report, options);
 	return span;
 }
+/**
+* Copy the node's raw content onto `span.input` / `span.output`.
+*
+* - Tools carry the call arguments + return value directly on the report
+*   (`ToolCall.input` / `ToolCall.output`).
+* - Agents carry a `trips[]` history plus the resolved `systemPrompt`. The
+*   input is emitted as a `[system, user]` chat array — so backends like
+*   Langfuse render the full prompt as sent — or the bare user string when
+*   there's no system prompt. The output is the last NON-EMPTY trip
+*   `output` (the final response text); a failed / max-trips run can end on
+*   a trip whose `output` is `""` or tool-call-only, so we scan back for the
+*   last one that carried text. Intermediate trips store a `"[tool results]"`
+*   placeholder upstream.
+* - When {@link ContentCaptureOptions.fullHistory} is on AND the agent run
+*   opted into `captureMessages` (so the report carries a `messages`
+*   array), the *whole* `CapturedMessage[]` is emitted as `span.input`
+*   instead of the `[system, user]` first-trip array — every role, every
+*   trip. The output stays the last non-empty trip output. When `messages`
+*   is absent the branch falls back to today's first-trip logic, so a run
+*   that didn't opt in degrades gracefully.
+*
+* Each value is passed through the optional {@link ContentRedactor};
+* a redactor returning `undefined` drops the field. Under `fullHistory`
+* the redactor receives the full array as a single value.
+*/
+function captureContent(span, report, options) {
+	const node = report;
+	const redact = options.redactContent;
+	let input;
+	let output;
+	if (report.type === "tool") {
+		input = node.input;
+		output = node.output;
+	} else if (options.fullHistory && Array.isArray(node.messages) && node.messages.length > 0) {
+		input = node.messages;
+		output = Array.isArray(node.trips) ? lastNonEmptyOutput(node.trips) : void 0;
+	} else if (Array.isArray(node.trips) && node.trips.length > 0) {
+		const userInput = node.trips[0]?.input;
+		input = typeof node.systemPrompt === "string" && node.systemPrompt.length > 0 ? [{
+			role: "system",
+			content: node.systemPrompt
+		}, {
+			role: "user",
+			content: userInput
+		}] : userInput;
+		output = lastNonEmptyOutput(node.trips);
+	}
+	if (input !== void 0) {
+		const value = redact ? redact(input, {
+			name: span.name,
+			type: span.type,
+			field: "input"
+		}) : input;
+		if (value !== void 0) span.input = value;
+	}
+	if (output !== void 0) {
+		const value = redact ? redact(output, {
+			name: span.name,
+			type: span.type,
+			field: "output"
+		}) : output;
+		if (value !== void 0) span.output = value;
+	}
+}
+/**
+* The last trip output that actually carries text — the agent's final
+* response on the happy path. A failed or max-trips run can end on a trip
+* whose `output` is `""` or tool-call-only, so we scan backwards for the
+* last trip that produced text rather than blindly taking the final trip
+* (which would surface an empty string). Returns `undefined` when no trip
+* produced any output.
+*/
+function lastNonEmptyOutput(trips) {
+	for (let i = trips.length - 1; i >= 0; i -= 1) {
+		const out = trips[i]?.output;
+		if (typeof out === "string" ? out.length > 0 : out !== void 0) return out;
+	}
+}
 
 //#endregion
 export { reportToSpan };

package/esm/collector/report-to-span.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"report-to-span.mjs","names":[],"sources":["../../../../../../../@warlock.js/ai-panoptic/src/collector/report-to-span.ts"],"sourcesContent":["import type { BaseReport } from \"@warlock.js/ai\";\nimport type { TraceSpan } from \"../contracts/trace.type\";\nimport { extractSpanAttributes } from \"./extract-span-attributes\";\nimport { normalizeError } from \"./normalize-error\";\n\n/**\n * Project one {@link BaseReport} node — and its entire subtree — into a\n * {@link TraceSpan}. Pure and recursive: identity, timing, status, and\n * the rolled-up `usage` map across 1:1 from the report; lineage maps\n * `runId → spanId`, `parentRunId → parentSpanId`, `rootRunId → traceId`;\n * children recurse in invocation order so the span tree mirrors the\n * report tree exactly.\n *\n * The error is normalized to the JSON-safe {@link\n * import(\"../contracts/trace.type\").TraceSpanError} shape only when the\n * node carried one (failed / cancelled). Primitive-specific detail that\n * has no first-class span field (trip / step / iteration counts, model\n * identity, tool trip index) is routed into the optional `attributes`\n * bag via {@link extractSpanAttributes}.\n *\n * No external lookup is needed — a `BaseReport` already carries\n * everything a span requires, so a collector can flatten a tree without\n * consulting any other source.\n *\n * @example\n * const root = reportToSpan(result.report);\n * console.log(root.spanId, root.traceId, root.children.length);\n */\nexport function reportToSpan(report: BaseReport): TraceSpan {\n  const span: TraceSpan = {\n    spanId: report.runId,\n    traceId: report.rootRunId,\n    name: report.name,\n    type: report.type,\n    status: report.status,\n    startedAt: report.startedAt,\n    endedAt: report.endedAt,\n    duration: report.duration,\n    usage: report.usage,\n    children: report.children.map(reportToSpan),\n  };\n\n  if (report.parentRunId !== undefined) {\n    span.parentSpanId = report.parentRunId;\n  }\n\n  if (report.sessionId !== undefined) {\n    span.sessionId = report.sessionId;\n  }\n\n  if (report.version !== undefined) {\n    span.version = report.version;\n  }\n\n  const error = normalizeError((report as { error?: unknown }).error);\n  if (error !== undefined) {\n    span.error = error;\n  }\n\n  const attributes = extractSpanAttributes(report);\n  if (attributes !== undefined) {\n    span.attributes = attributes;\n  }\n\n  return span;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,SAAgB,aAAa,QAA+B;CAC1D,MAAM,OAAkB;EACtB,QAAQ,OAAO;EACf,SAAS,OAAO;EAChB,MAAM,OAAO;EACb,MAAM,OAAO;EACb,QAAQ,OAAO;EACf,WAAW,OAAO;EAClB,SAAS,OAAO;EAChB,UAAU,OAAO;EACjB,OAAO,OAAO;EACd,UAAU,OAAO,SAAS,IAAI,YAAY;CAC5C;CAEA,IAAI,OAAO,gBAAgB,QACzB,KAAK,eAAe,OAAO;CAG7B,IAAI,OAAO,cAAc,QACvB,KAAK,YAAY,OAAO;CAG1B,IAAI,OAAO,YAAY,QACrB,KAAK,UAAU,OAAO;CAGxB,MAAM,QAAQ,eAAgB,OAA+B,KAAK;CAClE,IAAI,UAAU,QACZ,KAAK,QAAQ;CAGf,MAAM,aAAa,sBAAsB,MAAM;CAC/C,IAAI,eAAe,QACjB,KAAK,aAAa;CAGpB,OAAO;AACT"}
+{"version":3,"file":"report-to-span.mjs","names":[],"sources":["../../../../../../../@warlock.js/ai-panoptic/src/collector/report-to-span.ts"],"sourcesContent":["import type { BaseReport } from \"@warlock.js/ai\";\nimport type { TraceSpan } from \"../contracts/trace.type\";\nimport type { ContentCaptureOptions, ContentRedactor } from \"./content-capture.type\";\nimport { extractSpanAttributes } from \"./extract-span-attributes\";\nimport { normalizeError } from \"./normalize-error\";\n\n/**\n * Project one {@link BaseReport} node — and its entire subtree — into a\n * {@link TraceSpan}. Pure and recursive: identity, timing, status, and\n * the rolled-up `usage` map across 1:1 from the report; lineage maps\n * `runId → spanId`, `parentRunId → parentSpanId`, `rootRunId → traceId`;\n * children recurse in invocation order so the span tree mirrors the\n * report tree exactly.\n *\n * The error is normalized to the JSON-safe {@link\n * import(\"../contracts/trace.type\").TraceSpanError} shape only when the\n * node carried one (failed / cancelled). Primitive-specific detail that\n * has no first-class span field (trip / step / iteration counts, model\n * identity, tool trip index) is routed into the optional `attributes`\n * bag via {@link extractSpanAttributes}.\n *\n * When {@link ContentCaptureOptions.captureContent} is set, the raw\n * prompt/response (agents) and args/result (tools) are additionally\n * copied onto `span.input` / `span.output` — off by default because\n * payloads are large and often sensitive. A {@link ContentRedactor} can\n * mask each value first.\n *\n * No external lookup is needed — a `BaseReport` already carries\n * everything a span requires, so a collector can flatten a tree without\n * consulting any other source.\n *\n * @example\n * const root = reportToSpan(result.report);\n * console.log(root.spanId, root.traceId, root.children.length);\n */\nexport function reportToSpan(report: BaseReport, options?: ContentCaptureOptions): TraceSpan {\n  const span: TraceSpan = {\n    spanId: report.runId,\n    traceId: report.rootRunId,\n    name: report.name,\n    type: report.type,\n    status: report.status,\n    startedAt: report.startedAt,\n    endedAt: report.endedAt,\n    duration: report.duration,\n    usage: report.usage,\n    children: report.children.map((child) => reportToSpan(child, options)),\n  };\n\n  if (report.parentRunId !== undefined) {\n    span.parentSpanId = report.parentRunId;\n  }\n\n  if (report.sessionId !== undefined) {\n    span.sessionId = report.sessionId;\n  }\n\n  if (report.version !== undefined) {\n    span.version = report.version;\n  }\n\n  const error = normalizeError((report as { error?: unknown }).error);\n  if (error !== undefined) {\n    span.error = error;\n  }\n\n  const attributes = extractSpanAttributes(report);\n  if (attributes !== undefined) {\n    span.attributes = attributes;\n  }\n\n  if (options?.captureContent) {\n    captureContent(span, report, options);\n  }\n\n  return span;\n}\n\n/** Per-primitive content fields read off a widened report node. */\ntype ContentReport = {\n  input?: unknown;\n  output?: unknown;\n  systemPrompt?: string;\n  trips?: Array<{ input?: unknown; output?: unknown }>;\n  /**\n   * The full assembled conversation an agent run captured when its\n   * `captureMessages` option was set (core `AgentReport.messages`).\n   * Present only on opted-in agent runs; absent otherwise.\n   */\n  messages?: unknown;\n};\n\n/**\n * Copy the node's raw content onto `span.input` / `span.output`.\n *\n * - Tools carry the call arguments + return value directly on the report\n *   (`ToolCall.input` / `ToolCall.output`).\n * - Agents carry a `trips[]` history plus the resolved `systemPrompt`. The\n *   input is emitted as a `[system, user]` chat array — so backends like\n *   Langfuse render the full prompt as sent — or the bare user string when\n *   there's no system prompt. The output is the last NON-EMPTY trip\n *   `output` (the final response text); a failed / max-trips run can end on\n *   a trip whose `output` is `\"\"` or tool-call-only, so we scan back for the\n *   last one that carried text. Intermediate trips store a `\"[tool results]\"`\n *   placeholder upstream.\n * - When {@link ContentCaptureOptions.fullHistory} is on AND the agent run\n *   opted into `captureMessages` (so the report carries a `messages`\n *   array), the *whole* `CapturedMessage[]` is emitted as `span.input`\n *   instead of the `[system, user]` first-trip array — every role, every\n *   trip. The output stays the last non-empty trip output. When `messages`\n *   is absent the branch falls back to today's first-trip logic, so a run\n *   that didn't opt in degrades gracefully.\n *\n * Each value is passed through the optional {@link ContentRedactor};\n * a redactor returning `undefined` drops the field. Under `fullHistory`\n * the redactor receives the full array as a single value.\n */\nfunction captureContent(\n  span: TraceSpan,\n  report: BaseReport,\n  options: ContentCaptureOptions,\n): void {\n  const node = report as BaseReport & ContentReport;\n  const redact = options.redactContent;\n\n  let input: unknown;\n  let output: unknown;\n\n  if (report.type === \"tool\") {\n    input = node.input;\n    output = node.output;\n  } else if (\n    options.fullHistory &&\n    Array.isArray(node.messages) &&\n    node.messages.length > 0\n  ) {\n    // Full-history capture: the entire assembled conversation as a single\n    // input value. Output remains the agent's final response text.\n    input = node.messages;\n    output = Array.isArray(node.trips) ? lastNonEmptyOutput(node.trips) : undefined;\n  } else if (Array.isArray(node.trips) && node.trips.length > 0) {\n    const userInput = node.trips[0]?.input;\n    // Emit a [system, user] chat array when the agent carried a system\n    // prompt, so backends (Langfuse) render the full prompt as sent;\n    // otherwise keep the bare user string.\n    input =\n      typeof node.systemPrompt === \"string\" && node.systemPrompt.length > 0\n        ? [\n            { role: \"system\", content: node.systemPrompt },\n            { role: \"user\", content: userInput },\n          ]\n        : userInput;\n    output = lastNonEmptyOutput(node.trips);\n  }\n\n  if (input !== undefined) {\n    const value = redact ? redact(input, { name: span.name, type: span.type, field: \"input\" }) : input;\n    if (value !== undefined) {\n      span.input = value;\n    }\n  }\n\n  if (output !== undefined) {\n    const value = redact ? redact(output, { name: span.name, type: span.type, field: \"output\" }) : output;\n    if (value !== undefined) {\n      span.output = value;\n    }\n  }\n}\n\n/**\n * The last trip output that actually carries text — the agent's final\n * response on the happy path. A failed or max-trips run can end on a trip\n * whose `output` is `\"\"` or tool-call-only, so we scan backwards for the\n * last trip that produced text rather than blindly taking the final trip\n * (which would surface an empty string). Returns `undefined` when no trip\n * produced any output.\n */\nfunction lastNonEmptyOutput(trips: Array<{ output?: unknown }>): unknown {\n  for (let i = trips.length - 1; i >= 0; i -= 1) {\n    const out = trips[i]?.output;\n    const hasText = typeof out === \"string\" ? out.length > 0 : out !== undefined;\n\n    if (hasText) {\n      return out;\n    }\n  }\n\n  return undefined;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCA,SAAgB,aAAa,QAAoB,SAA4C;CAC3F,MAAM,OAAkB;EACtB,QAAQ,OAAO;EACf,SAAS,OAAO;EAChB,MAAM,OAAO;EACb,MAAM,OAAO;EACb,QAAQ,OAAO;EACf,WAAW,OAAO;EAClB,SAAS,OAAO;EAChB,UAAU,OAAO;EACjB,OAAO,OAAO;EACd,UAAU,OAAO,SAAS,KAAK,UAAU,aAAa,OAAO,OAAO,CAAC;CACvE;CAEA,IAAI,OAAO,gBAAgB,QACzB,KAAK,eAAe,OAAO;CAG7B,IAAI,OAAO,cAAc,QACvB,KAAK,YAAY,OAAO;CAG1B,IAAI,OAAO,YAAY,QACrB,KAAK,UAAU,OAAO;CAGxB,MAAM,QAAQ,eAAgB,OAA+B,KAAK;CAClE,IAAI,UAAU,QACZ,KAAK,QAAQ;CAGf,MAAM,aAAa,sBAAsB,MAAM;CAC/C,IAAI,eAAe,QACjB,KAAK,aAAa;CAGpB,IAAI,SAAS,gBACX,eAAe,MAAM,QAAQ,OAAO;CAGtC,OAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;;;AAyCA,SAAS,eACP,MACA,QACA,SACM;CACN,MAAM,OAAO;CACb,MAAM,SAAS,QAAQ;CAEvB,IAAI;CACJ,IAAI;CAEJ,IAAI,OAAO,SAAS,QAAQ;EAC1B,QAAQ,KAAK;EACb,SAAS,KAAK;CAChB,OAAO,IACL,QAAQ,eACR,MAAM,QAAQ,KAAK,QAAQ,KAC3B,KAAK,SAAS,SAAS,GACvB;EAGA,QAAQ,KAAK;EACb,SAAS,MAAM,QAAQ,KAAK,KAAK,IAAI,mBAAmB,KAAK,KAAK,IAAI;CACxE,OAAO,IAAI,MAAM,QAAQ,KAAK,KAAK,KAAK,KAAK,MAAM,SAAS,GAAG;EAC7D,MAAM,YAAY,KAAK,MAAM,EAAE,EAAE;EAIjC,QACE,OAAO,KAAK,iBAAiB,YAAY,KAAK,aAAa,SAAS,IAChE,CACE;GAAE,MAAM;GAAU,SAAS,KAAK;EAAa,GAC7C;GAAE,MAAM;GAAQ,SAAS;EAAU,CACrC,IACA;EACN,SAAS,mBAAmB,KAAK,KAAK;CACxC;CAEA,IAAI,UAAU,QAAW;EACvB,MAAM,QAAQ,SAAS,OAAO,OAAO;GAAE,MAAM,KAAK;GAAM,MAAM,KAAK;GAAM,OAAO;EAAQ,CAAC,IAAI;EAC7F,IAAI,UAAU,QACZ,KAAK,QAAQ;CAEjB;CAEA,IAAI,WAAW,QAAW;EACxB,MAAM,QAAQ,SAAS,OAAO,QAAQ;GAAE,MAAM,KAAK;GAAM,MAAM,KAAK;GAAM,OAAO;EAAS,CAAC,IAAI;EAC/F,IAAI,UAAU,QACZ,KAAK,SAAS;CAElB;AACF;;;;;;;;;AAUA,SAAS,mBAAmB,OAA6C;CACvE,KAAK,IAAI,IAAI,MAAM,SAAS,GAAG,KAAK,GAAG,KAAK,GAAG;EAC7C,MAAM,MAAM,MAAM,EAAE,EAAE;EAGtB,IAFgB,OAAO,QAAQ,WAAW,IAAI,SAAS,IAAI,QAAQ,QAGjE,OAAO;CAEX;AAGF"}

package/esm/collector/report-to-trace.d.mts

@@ -1,4 +1,5 @@
 import { Trace } from "../contracts/trace.type.mjs";
+import { ContentCaptureOptions } from "./content-capture.type.mjs";
 import { BaseReport } from "@warlock.js/ai";
 
 //#region ../@warlock.js/ai-panoptic/src/collector/report-to-trace.d.ts
@@ -19,17 +20,20 @@ import { BaseReport } from "@warlock.js/ai";
  * without dispatching to exporters.
  *
  * The optional `rootError` threads the failing run's envelope error
- * (`BaseResult.error`) onto the root span. The error lives on the result
- * envelope, never on the `BaseReport` tree, so without this a failed root
- * would export `status` with no error type/message. Applied only when the
- * root span carries none of its own; the subtree projection stays pure
- * (each child surfaces its own report-level error, if any).
+ * (`BaseResult.error`) onto the root span — a fallback for callers that
+ * hold the result envelope (the `attach`/middleware path). Root primitives
+ * now also stamp their terminal error onto the report itself
+ * (`BaseReport.error`), so the observe path — which delivers only the
+ * report, never the envelope — still surfaces a failed root's error.
+ * `rootError` is applied only when the projected root span carries none of
+ * its own; the subtree projection stays pure (each child surfaces its own
+ * report-level error, if any).
  *
  * @example
  * const trace = reportToTrace(result.report, result.error);
  * console.log(trace.traceId, trace.usage.total, trace.duration);
  */
-declare function reportToTrace(report: BaseReport, rootError?: unknown): Trace;
+declare function reportToTrace(report: BaseReport, rootError?: unknown, options?: ContentCaptureOptions): Trace;
 //#endregion
 export { reportToTrace };
 //# sourceMappingURL=report-to-trace.d.mts.map

package/esm/collector/report-to-trace.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"report-to-trace.d.mts","names":[],"sources":["../../../../../../../@warlock.js/ai-panoptic/src/collector/report-to-trace.ts"],"mappings":";;;;;;AAgCA;;;;;;;;;AAA6E;;;;;;;;;;;;;;;;iBAA7D,aAAA,CAAc,MAAA,EAAQ,UAAA,EAAY,SAAA,aAAsB,KAAK"}
+{"version":3,"file":"report-to-trace.d.mts","names":[],"sources":["../../../../../../../@warlock.js/ai-panoptic/src/collector/report-to-trace.ts"],"mappings":";;;;;;;AAoCA;;;;;;;;;;;;;;;AAIQ;;;;;;;;;;;;;iBAJQ,aAAA,CACd,MAAA,EAAQ,UAAA,EACR,SAAA,YACA,OAAA,GAAU,qBAAA,GACT,KAAA"}

package/esm/collector/report-to-trace.mjs

@@ -19,18 +19,21 @@ import { reportToSpan } from "./report-to-span.mjs";
 * without dispatching to exporters.
 *
 * The optional `rootError` threads the failing run's envelope error
-* (`BaseResult.error`) onto the root span. The error lives on the result
-* envelope, never on the `BaseReport` tree, so without this a failed root
-* would export `status` with no error type/message. Applied only when the
-* root span carries none of its own; the subtree projection stays pure
-* (each child surfaces its own report-level error, if any).
+* (`BaseResult.error`) onto the root span — a fallback for callers that
+* hold the result envelope (the `attach`/middleware path). Root primitives
+* now also stamp their terminal error onto the report itself
+* (`BaseReport.error`), so the observe path — which delivers only the
+* report, never the envelope — still surfaces a failed root's error.
+* `rootError` is applied only when the projected root span carries none of
+* its own; the subtree projection stays pure (each child surfaces its own
+* report-level error, if any).
 *
 * @example
 * const trace = reportToTrace(result.report, result.error);
 * console.log(trace.traceId, trace.usage.total, trace.duration);
 */
-function reportToTrace(report, rootError) {
-	const root = reportToSpan(report);
+function reportToTrace(report, rootError, options) {
+	const root = reportToSpan(report, options);
 	if (root.error === void 0) {
 		const error = normalizeError(rootError);
 		if (error !== void 0) root.error = error;

package/esm/collector/report-to-trace.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"report-to-trace.mjs","names":[],"sources":["../../../../../../../@warlock.js/ai-panoptic/src/collector/report-to-trace.ts"],"sourcesContent":["import type { BaseReport } from \"@warlock.js/ai\";\nimport type { Trace } from \"../contracts/trace.type\";\nimport { normalizeError } from \"./normalize-error\";\nimport { reportToSpan } from \"./report-to-span\";\n\n/**\n * Project an outermost {@link BaseReport} (one whole `.execute()` /\n * `.invoke()` run) into a {@link Trace} — the root {@link\n * import(\"../contracts/trace.type\").TraceSpan} plus the trace-wide\n * rollups exporters need without re-walking the tree.\n *\n * The trace-level identity and rollups all read off the root span the\n * projection already built (`traceId`, `usage`, timing), so the trace\n * envelope never disagrees with its own root. `reportSchemaVersion` is\n * mirrored from the root report when present (it is stamped only on\n * root nodes upstream) so exporters can branch on the source shape.\n *\n * Pure — the same input always yields the same trace. The collector\n * exposes this as `toTrace` so callers can inspect the normalized shape\n * without dispatching to exporters.\n *\n * The optional `rootError` threads the failing run's envelope error\n * (`BaseResult.error`) onto the root span. The error lives on the result\n * envelope, never on the `BaseReport` tree, so without this a failed root\n * would export `status` with no error type/message. Applied only when the\n * root span carries none of its own; the subtree projection stays pure\n * (each child surfaces its own report-level error, if any).\n *\n * @example\n * const trace = reportToTrace(result.report, result.error);\n * console.log(trace.traceId, trace.usage.total, trace.duration);\n */\nexport function reportToTrace(report: BaseReport, rootError?: unknown): Trace {\n  const root = reportToSpan(report);\n\n  if (root.error === undefined) {\n    const error = normalizeError(rootError);\n\n    if (error !== undefined) {\n      root.error = error;\n    }\n  }\n\n  const trace: Trace = {\n    traceId: root.traceId,\n    root,\n    startedAt: root.startedAt,\n    endedAt: root.endedAt,\n    duration: root.duration,\n    usage: root.usage,\n  };\n\n  if (root.sessionId !== undefined) {\n    trace.sessionId = root.sessionId;\n  }\n\n  if (report.reportSchemaVersion !== undefined) {\n    trace.reportSchemaVersion = report.reportSchemaVersion;\n  }\n\n  return trace;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCA,SAAgB,cAAc,QAAoB,WAA4B;CAC5E,MAAM,OAAO,aAAa,MAAM;CAEhC,IAAI,KAAK,UAAU,QAAW;EAC5B,MAAM,QAAQ,eAAe,SAAS;EAEtC,IAAI,UAAU,QACZ,KAAK,QAAQ;CAEjB;CAEA,MAAM,QAAe;EACnB,SAAS,KAAK;EACd;EACA,WAAW,KAAK;EAChB,SAAS,KAAK;EACd,UAAU,KAAK;EACf,OAAO,KAAK;CACd;CAEA,IAAI,KAAK,cAAc,QACrB,MAAM,YAAY,KAAK;CAGzB,IAAI,OAAO,wBAAwB,QACjC,MAAM,sBAAsB,OAAO;CAGrC,OAAO;AACT"}
+{"version":3,"file":"report-to-trace.mjs","names":[],"sources":["../../../../../../../@warlock.js/ai-panoptic/src/collector/report-to-trace.ts"],"sourcesContent":["import type { BaseReport } from \"@warlock.js/ai\";\nimport type { Trace } from \"../contracts/trace.type\";\nimport type { ContentCaptureOptions } from \"./content-capture.type\";\nimport { normalizeError } from \"./normalize-error\";\nimport { reportToSpan } from \"./report-to-span\";\n\n/**\n * Project an outermost {@link BaseReport} (one whole `.execute()` /\n * `.invoke()` run) into a {@link Trace} — the root {@link\n * import(\"../contracts/trace.type\").TraceSpan} plus the trace-wide\n * rollups exporters need without re-walking the tree.\n *\n * The trace-level identity and rollups all read off the root span the\n * projection already built (`traceId`, `usage`, timing), so the trace\n * envelope never disagrees with its own root. `reportSchemaVersion` is\n * mirrored from the root report when present (it is stamped only on\n * root nodes upstream) so exporters can branch on the source shape.\n *\n * Pure — the same input always yields the same trace. The collector\n * exposes this as `toTrace` so callers can inspect the normalized shape\n * without dispatching to exporters.\n *\n * The optional `rootError` threads the failing run's envelope error\n * (`BaseResult.error`) onto the root span — a fallback for callers that\n * hold the result envelope (the `attach`/middleware path). Root primitives\n * now also stamp their terminal error onto the report itself\n * (`BaseReport.error`), so the observe path — which delivers only the\n * report, never the envelope — still surfaces a failed root's error.\n * `rootError` is applied only when the projected root span carries none of\n * its own; the subtree projection stays pure (each child surfaces its own\n * report-level error, if any).\n *\n * @example\n * const trace = reportToTrace(result.report, result.error);\n * console.log(trace.traceId, trace.usage.total, trace.duration);\n */\nexport function reportToTrace(\n  report: BaseReport,\n  rootError?: unknown,\n  options?: ContentCaptureOptions,\n): Trace {\n  const root = reportToSpan(report, options);\n\n  if (root.error === undefined) {\n    const error = normalizeError(rootError);\n\n    if (error !== undefined) {\n      root.error = error;\n    }\n  }\n\n  const trace: Trace = {\n    traceId: root.traceId,\n    root,\n    startedAt: root.startedAt,\n    endedAt: root.endedAt,\n    duration: root.duration,\n    usage: root.usage,\n  };\n\n  if (root.sessionId !== undefined) {\n    trace.sessionId = root.sessionId;\n  }\n\n  if (report.reportSchemaVersion !== undefined) {\n    trace.reportSchemaVersion = report.reportSchemaVersion;\n  }\n\n  return trace;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,SAAgB,cACd,QACA,WACA,SACO;CACP,MAAM,OAAO,aAAa,QAAQ,OAAO;CAEzC,IAAI,KAAK,UAAU,QAAW;EAC5B,MAAM,QAAQ,eAAe,SAAS;EAEtC,IAAI,UAAU,QACZ,KAAK,QAAQ;CAEjB;CAEA,MAAM,QAAe;EACnB,SAAS,KAAK;EACd;EACA,WAAW,KAAK;EAChB,SAAS,KAAK;EACd,UAAU,KAAK;EACf,OAAO,KAAK;CACd;CAEA,IAAI,KAAK,cAAc,QACrB,MAAM,YAAY,KAAK;CAGzB,IAAI,OAAO,wBAAwB,QACjC,MAAM,sBAAsB,OAAO;CAGrC,OAAO;AACT"}