promptfoo 0.121.5 → 0.121.8

package/dist/src/{openclaw-DA8U4DsD.js → openclaw-CWOm2eOr.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { C as getConfigDirectoryPath, O as getEnvString, s as logger } from "./logger-BbY6ypFL.js";
-import { m as REQUEST_TIMEOUT_MS, n as fetchWithProxy } from "./fetch-B6ch2nU2.js";
-import { n as VERSION } from "./version-CbpiUINz.js";
-import { t as OpenAiChatCompletionProvider } from "./chat-BLOdH60v.js";
-import { t as OpenAiEmbeddingProvider } from "./embedding-DNRvZwRN.js";
-import { t as OpenAiResponsesProvider } from "./responses-B8haB-mD.js";
-import { n as sha256 } from "./createHash-DPpsZgFF.js";
+import { _ as REQUEST_TIMEOUT_MS, n as fetchWithProxy } from "./fetch-Cpf1U1nO.js";
+import { n as VERSION } from "./version-F0YDgb7J.js";
+import { n as sha256 } from "./createHash-CgRvs4Fn.js";
+import { t as OpenAiChatCompletionProvider } from "./chat-DTdf-J5Q.js";
+import { t as OpenAiEmbeddingProvider } from "./embedding-CU78FMnw.js";
+import { t as OpenAiResponsesProvider } from "./responses-CrmWv6iz.js";
 import fs from "fs";
 import path from "path";
 import os from "os";
@@ -324,6 +324,7 @@ function resolveGatewayPortOverride(env) {
 	return Number.isInteger(parsedPort) && parsedPort > 0 && parsedPort <= 65535 ? parsedPort : void 0;
 }
 function toAuthSecret(kind, value) {
+	if (typeof value !== "string") return;
 	const trimmed = value?.trim();
 	return trimmed ? {
 		kind,
@@ -912,7 +913,7 @@ var OpenClawAgentProvider = class {
 	}
 	resolveScopesForDeviceToken(deviceToken) {
 		if (this.hasExplicitScopes) return this.scopes;
-		return deviceToken.scopes && deviceToken.scopes.length > 0 ? deviceToken.scopes : this.scopes;
+		return normalizeScopes([...this.scopes, ...deviceToken.scopes || []]);
 	}
 	storeDeviceTokenFromHello(payload, authState) {
 		if (!authState?.deviceIdentity) return;
@@ -1198,4 +1199,4 @@ function createOpenClawProvider(providerPath, providerOptions = {}, env) {
 //#endregion
 export { createOpenClawProvider };
 
-//# sourceMappingURL=openclaw-DA8U4DsD.js.map
+//# sourceMappingURL=openclaw-CWOm2eOr.js.map

package/dist/src/{openclaw-DObVgpjC.js → openclaw-Cdk9JKfY.js}

@@ -1,10 +1,10 @@
 import { T as getEnvString, a as logger, x as getConfigDirectoryPath } from "./logger-Ct2S6Yx-.js";
-import { t as fetchWithProxy, u as REQUEST_TIMEOUT_MS } from "./fetch-D9xxyC1p.js";
-import { n as VERSION } from "./version-CbuBKu2U.js";
-import { t as OpenAiChatCompletionProvider } from "./chat-Cx_LkwvZ.js";
-import { t as OpenAiEmbeddingProvider } from "./embedding-ChS1ivFS.js";
-import { t as OpenAiResponsesProvider } from "./responses-BiaBguAu.js";
-import { n as sha256 } from "./createHash-Un4Q_huE.js";
+import { p as REQUEST_TIMEOUT_MS, t as fetchWithProxy } from "./fetch-Doks14zQ.js";
+import { n as VERSION } from "./version-qVEN5qCm.js";
+import { n as sha256 } from "./createHash-BtbSX3mj.js";
+import { t as OpenAiChatCompletionProvider } from "./chat-BBEnnpQk.js";
+import { t as OpenAiEmbeddingProvider } from "./embedding-CStK0TV6.js";
+import { t as OpenAiResponsesProvider } from "./responses-BVi7xIdv.js";
 import fs from "fs";
 import path from "path";
 import os from "os";
@@ -323,6 +323,7 @@ function resolveGatewayPortOverride(env) {
 	return Number.isInteger(parsedPort) && parsedPort > 0 && parsedPort <= 65535 ? parsedPort : void 0;
 }
 function toAuthSecret(kind, value) {
+	if (typeof value !== "string") return;
 	const trimmed = value?.trim();
 	return trimmed ? {
 		kind,
@@ -911,7 +912,7 @@ var OpenClawAgentProvider = class {
 	}
 	resolveScopesForDeviceToken(deviceToken) {
 		if (this.hasExplicitScopes) return this.scopes;
-		return deviceToken.scopes && deviceToken.scopes.length > 0 ? deviceToken.scopes : this.scopes;
+		return normalizeScopes([...this.scopes, ...deviceToken.scopes || []]);
 	}
 	storeDeviceTokenFromHello(payload, authState) {
 		if (!authState?.deviceIdentity) return;
@@ -1197,4 +1198,4 @@ function createOpenClawProvider(providerPath, providerOptions = {}, env) {
 //#endregion
 export { createOpenClawProvider };
 
-//# sourceMappingURL=openclaw-DObVgpjC.js.map
+//# sourceMappingURL=openclaw-Cdk9JKfY.js.map

package/dist/src/{openclaw-Bq7RVR3k.js → openclaw-DhF8rUpI.js}

@@ -1,10 +1,10 @@
 import { T as getEnvString, a as logger, x as getConfigDirectoryPath } from "./logger-KD8JjCRJ.js";
-import { h as REQUEST_TIMEOUT_MS, t as fetchWithProxy } from "./fetch-Y5qX_kST.js";
-import { n as VERSION } from "./version-0frU0UTr.js";
-import { n as sha256 } from "./createHash-4gFQpDDv.js";
-import { t as OpenAiChatCompletionProvider } from "./chat-DChSH_Es.js";
-import { t as OpenAiResponsesProvider } from "./responses-1ztiVYsx.js";
-import { t as OpenAiEmbeddingProvider } from "./embedding-D_bI4NDq.js";
+import { t as fetchWithProxy, v as REQUEST_TIMEOUT_MS } from "./fetch-BSSAcMxf.js";
+import { n as VERSION } from "./version-CHR-EFec.js";
+import { n as sha256 } from "./createHash-CGVzWdjj.js";
+import { t as OpenAiChatCompletionProvider } from "./chat-BSos6PvZ.js";
+import { t as OpenAiResponsesProvider } from "./responses-5Gf5HNOi.js";
+import { t as OpenAiEmbeddingProvider } from "./embedding-CV8lmCnU.js";
 import fs from "fs";
 import path from "path";
 import os from "os";
@@ -323,6 +323,7 @@ function resolveGatewayPortOverride(env) {
 	return Number.isInteger(parsedPort) && parsedPort > 0 && parsedPort <= 65535 ? parsedPort : void 0;
 }
 function toAuthSecret(kind, value) {
+	if (typeof value !== "string") return;
 	const trimmed = value?.trim();
 	return trimmed ? {
 		kind,
@@ -911,7 +912,7 @@ var OpenClawAgentProvider = class {
 	}
 	resolveScopesForDeviceToken(deviceToken) {
 		if (this.hasExplicitScopes) return this.scopes;
-		return deviceToken.scopes && deviceToken.scopes.length > 0 ? deviceToken.scopes : this.scopes;
+		return normalizeScopes([...this.scopes, ...deviceToken.scopes || []]);
 	}
 	storeDeviceTokenFromHello(payload, authState) {
 		if (!authState?.deviceIdentity) return;
@@ -1197,4 +1198,4 @@ function createOpenClawProvider(providerPath, providerOptions = {}, env) {
 //#endregion
 export { createOpenClawProvider };
 
-//# sourceMappingURL=openclaw-Bq7RVR3k.js.map
+//# sourceMappingURL=openclaw-DhF8rUpI.js.map

package/dist/src/{opencode-sdk-BB40Wir1.js → opencode-sdk-BRjiPV-g.js}

@@ -1,6 +1,6 @@
 import { T as getEnvString, a as logger, k as state, t as getLogLevel } from "./logger-KD8JjCRJ.js";
 import { r as importModule } from "./esm-B6whoAcf.js";
-import { i as initializeAgenticCache, n as generateCacheKey, r as getCachedResponse, t as cacheResponse } from "./agentic-utils-BclbiXiq.js";
+import { i as initializeAgenticCache, n as generateCacheKey, r as getCachedResponse, t as cacheResponse } from "./agentic-utils-GdToujHu.js";
 import { createRequire } from "node:module";
 import fs from "fs";
 import path from "path";
@@ -57,6 +57,38 @@ function getSessionPath(sessionId) {
 		sessionID: sessionId
 	};
 }
+/**
+* Convert the user-facing object-shaped permission config into the
+* rule-array shape required by the v2 `session.create.permission` API.
+*
+* - `{ bash: 'allow' }` → `[{ permission: 'bash', pattern: '*', action: 'allow' }]`
+* - `{ bash: { 'git *': 'allow', '*': 'ask' } }` → two rules with the
+*   corresponding glob pattern preserved per entry.
+*
+* Returns `undefined` when the config has no usable entries so callers can
+* omit the field entirely.
+*/
+function convertPermissionConfigToRuleset(config) {
+	if (!config) return;
+	const rules = [];
+	for (const [tool, value] of Object.entries(config)) {
+		if (value === void 0) continue;
+		if (typeof value === "string") {
+			rules.push({
+				permission: tool,
+				pattern: "*",
+				action: value
+			});
+			continue;
+		}
+		if (value && typeof value === "object") for (const [pattern, action] of Object.entries(value)) rules.push({
+			permission: tool,
+			pattern,
+			action
+		});
+	}
+	return rules.length > 0 ? rules : void 0;
+}
 function tryParseJson(value) {
 	try {
 		return JSON.stringify(JSON.parse(value));
@@ -432,7 +464,10 @@ var OpenCodeSDKProvider = class {
 	buildCreateSessionParameters(config, sessionQuery) {
 		if (!this.opencodeModule) throw new Error("OpenCode SDK module is not loaded");
 		const createBody = { title: `promptfoo-${Date.now()}` };
-		if (config.permission && this.opencodeModule.apiVersion === "v2") createBody.permission = config.permission;
+		if (config.permission && this.opencodeModule.apiVersion === "v2") {
+			const ruleset = convertPermissionConfigToRuleset(config.permission);
+			if (ruleset) createBody.permission = ruleset;
+		}
 		if (this.opencodeModule.apiVersion === "v2") return {
 			...sessionQuery,
 			...createBody
@@ -555,4 +590,4 @@ var OpenCodeSDKProvider = class {
 //#endregion
 export { OpenCodeSDKProvider };
 
-//# sourceMappingURL=opencode-sdk-BB40Wir1.js.map
+//# sourceMappingURL=opencode-sdk-BRjiPV-g.js.map

package/dist/src/{opencode-sdk-CeqiOcOU.cjs → opencode-sdk-CPFMw0ed.cjs}

@@ -1,14 +1,15 @@
-const require_logger = require("./logger-COuQb2xB.cjs");
-const require_esm = require("./esm-B_rGuPTo.cjs");
-const require_agentic_utils = require("./agentic-utils-D2x0wGhB.cjs");
+const require_rolldown_runtime = require("./rolldown-runtime-D_mwlA32.cjs");
+const require_logger = require("./logger-cfNpzI4o.cjs");
+const require_esm = require("./esm-BIKakvNa.cjs");
+const require_agentic_utils = require("./agentic-utils-C-A92xhn.cjs");
 let fs = require("fs");
-fs = require_logger.__toESM(fs);
+fs = require_rolldown_runtime.__toESM(fs, 1);
 let path = require("path");
-path = require_logger.__toESM(path);
+path = require_rolldown_runtime.__toESM(path, 1);
 let os = require("os");
-os = require_logger.__toESM(os);
+os = require_rolldown_runtime.__toESM(os, 1);
 let dedent = require("dedent");
-dedent = require_logger.__toESM(dedent);
+dedent = require_rolldown_runtime.__toESM(dedent, 1);
 let node_module = require("node:module");
 //#region src/providers/opencode-sdk.ts
 /**
@@ -61,6 +62,38 @@ function getSessionPath(sessionId) {
 		sessionID: sessionId
 	};
 }
+/**
+* Convert the user-facing object-shaped permission config into the
+* rule-array shape required by the v2 `session.create.permission` API.
+*
+* - `{ bash: 'allow' }` → `[{ permission: 'bash', pattern: '*', action: 'allow' }]`
+* - `{ bash: { 'git *': 'allow', '*': 'ask' } }` → two rules with the
+*   corresponding glob pattern preserved per entry.
+*
+* Returns `undefined` when the config has no usable entries so callers can
+* omit the field entirely.
+*/
+function convertPermissionConfigToRuleset(config) {
+	if (!config) return;
+	const rules = [];
+	for (const [tool, value] of Object.entries(config)) {
+		if (value === void 0) continue;
+		if (typeof value === "string") {
+			rules.push({
+				permission: tool,
+				pattern: "*",
+				action: value
+			});
+			continue;
+		}
+		if (value && typeof value === "object") for (const [pattern, action] of Object.entries(value)) rules.push({
+			permission: tool,
+			pattern,
+			action
+		});
+	}
+	return rules.length > 0 ? rules : void 0;
+}
 function tryParseJson(value) {
 	try {
 		return JSON.stringify(JSON.parse(value));
@@ -436,7 +469,10 @@ var OpenCodeSDKProvider = class {
 	buildCreateSessionParameters(config, sessionQuery) {
 		if (!this.opencodeModule) throw new Error("OpenCode SDK module is not loaded");
 		const createBody = { title: `promptfoo-${Date.now()}` };
-		if (config.permission && this.opencodeModule.apiVersion === "v2") createBody.permission = config.permission;
+		if (config.permission && this.opencodeModule.apiVersion === "v2") {
+			const ruleset = convertPermissionConfigToRuleset(config.permission);
+			if (ruleset) createBody.permission = ruleset;
+		}
 		if (this.opencodeModule.apiVersion === "v2") return {
 			...sessionQuery,
 			...createBody
@@ -559,4 +595,4 @@ var OpenCodeSDKProvider = class {
 //#endregion
 exports.OpenCodeSDKProvider = OpenCodeSDKProvider;
 
-//# sourceMappingURL=opencode-sdk-CeqiOcOU.cjs.map
+//# sourceMappingURL=opencode-sdk-CPFMw0ed.cjs.map

package/dist/src/{opencode-sdk-BM1UAIv1.js → opencode-sdk-CaSOCsBA.js}

@@ -1,6 +1,6 @@
 import { T as getEnvString, a as logger, k as state, t as getLogLevel } from "./logger-Ct2S6Yx-.js";
-import { r as importModule } from "./esm-BRkfNsYs.js";
-import { i as initializeAgenticCache, n as generateCacheKey, r as getCachedResponse, t as cacheResponse } from "./agentic-utils-Ba67xmgs.js";
+import { r as importModule } from "./esm-BTK1W7lG.js";
+import { i as initializeAgenticCache, n as generateCacheKey, r as getCachedResponse, t as cacheResponse } from "./agentic-utils-DmoS_S4B.js";
 import { createRequire } from "node:module";
 import fs from "fs";
 import path from "path";
@@ -57,6 +57,38 @@ function getSessionPath(sessionId) {
 		sessionID: sessionId
 	};
 }
+/**
+* Convert the user-facing object-shaped permission config into the
+* rule-array shape required by the v2 `session.create.permission` API.
+*
+* - `{ bash: 'allow' }` → `[{ permission: 'bash', pattern: '*', action: 'allow' }]`
+* - `{ bash: { 'git *': 'allow', '*': 'ask' } }` → two rules with the
+*   corresponding glob pattern preserved per entry.
+*
+* Returns `undefined` when the config has no usable entries so callers can
+* omit the field entirely.
+*/
+function convertPermissionConfigToRuleset(config) {
+	if (!config) return;
+	const rules = [];
+	for (const [tool, value] of Object.entries(config)) {
+		if (value === void 0) continue;
+		if (typeof value === "string") {
+			rules.push({
+				permission: tool,
+				pattern: "*",
+				action: value
+			});
+			continue;
+		}
+		if (value && typeof value === "object") for (const [pattern, action] of Object.entries(value)) rules.push({
+			permission: tool,
+			pattern,
+			action
+		});
+	}
+	return rules.length > 0 ? rules : void 0;
+}
 function tryParseJson(value) {
 	try {
 		return JSON.stringify(JSON.parse(value));
@@ -432,7 +464,10 @@ var OpenCodeSDKProvider = class {
 	buildCreateSessionParameters(config, sessionQuery) {
 		if (!this.opencodeModule) throw new Error("OpenCode SDK module is not loaded");
 		const createBody = { title: `promptfoo-${Date.now()}` };
-		if (config.permission && this.opencodeModule.apiVersion === "v2") createBody.permission = config.permission;
+		if (config.permission && this.opencodeModule.apiVersion === "v2") {
+			const ruleset = convertPermissionConfigToRuleset(config.permission);
+			if (ruleset) createBody.permission = ruleset;
+		}
 		if (this.opencodeModule.apiVersion === "v2") return {
 			...sessionQuery,
 			...createBody
@@ -555,4 +590,4 @@ var OpenCodeSDKProvider = class {
 //#endregion
 export { OpenCodeSDKProvider };
 
-//# sourceMappingURL=opencode-sdk-BM1UAIv1.js.map
+//# sourceMappingURL=opencode-sdk-CaSOCsBA.js.map

package/dist/src/{opencode-sdk-ChdK7F7z.js → opencode-sdk-CqkyG8De.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { N as state, O as getEnvString, n as getLogLevel, s as logger } from "./logger-BbY6ypFL.js";
-import { r as importModule } from "./esm-BX8fwlAO.js";
-import { i as initializeAgenticCache, n as generateCacheKey, r as getCachedResponse, t as cacheResponse } from "./agentic-utils-B5krlibj.js";
+import { r as importModule } from "./esm-Bexx2PFc.js";
+import { i as initializeAgenticCache, n as generateCacheKey, r as getCachedResponse, t as cacheResponse } from "./agentic-utils-BJKAkz2e.js";
 import { createRequire } from "node:module";
 import fs from "fs";
 import path from "path";
@@ -58,6 +58,38 @@ function getSessionPath(sessionId) {
 		sessionID: sessionId
 	};
 }
+/**
+* Convert the user-facing object-shaped permission config into the
+* rule-array shape required by the v2 `session.create.permission` API.
+*
+* - `{ bash: 'allow' }` → `[{ permission: 'bash', pattern: '*', action: 'allow' }]`
+* - `{ bash: { 'git *': 'allow', '*': 'ask' } }` → two rules with the
+*   corresponding glob pattern preserved per entry.
+*
+* Returns `undefined` when the config has no usable entries so callers can
+* omit the field entirely.
+*/
+function convertPermissionConfigToRuleset(config) {
+	if (!config) return;
+	const rules = [];
+	for (const [tool, value] of Object.entries(config)) {
+		if (value === void 0) continue;
+		if (typeof value === "string") {
+			rules.push({
+				permission: tool,
+				pattern: "*",
+				action: value
+			});
+			continue;
+		}
+		if (value && typeof value === "object") for (const [pattern, action] of Object.entries(value)) rules.push({
+			permission: tool,
+			pattern,
+			action
+		});
+	}
+	return rules.length > 0 ? rules : void 0;
+}
 function tryParseJson(value) {
 	try {
 		return JSON.stringify(JSON.parse(value));
@@ -433,7 +465,10 @@ var OpenCodeSDKProvider = class {
 	buildCreateSessionParameters(config, sessionQuery) {
 		if (!this.opencodeModule) throw new Error("OpenCode SDK module is not loaded");
 		const createBody = { title: `promptfoo-${Date.now()}` };
-		if (config.permission && this.opencodeModule.apiVersion === "v2") createBody.permission = config.permission;
+		if (config.permission && this.opencodeModule.apiVersion === "v2") {
+			const ruleset = convertPermissionConfigToRuleset(config.permission);
+			if (ruleset) createBody.permission = ruleset;
+		}
 		if (this.opencodeModule.apiVersion === "v2") return {
 			...sessionQuery,
 			...createBody
@@ -556,4 +591,4 @@ var OpenCodeSDKProvider = class {
 //#endregion
 export { OpenCodeSDKProvider };
 
-//# sourceMappingURL=opencode-sdk-ChdK7F7z.js.map
+//# sourceMappingURL=opencode-sdk-CqkyG8De.js.map

package/dist/src/{otlpReceiver-UYMQx3sy.js → otlpReceiver--gTpSagc.js}

@@ -1,8 +1,10 @@
 #!/usr/bin/env node
 import { s as logger } from "./logger-BbY6ypFL.js";
-import { t as getDirectory } from "./esm-BX8fwlAO.js";
-import { n as getTraceStore } from "./store-CPh25336.js";
+import { t as getDirectory } from "./esm-Bexx2PFc.js";
+import { n as getTraceStore } from "./store-DKd5592Q.js";
+import { n as PROMPTFOO_RESOURCE_ATTR_TRACE_ID, t as PROMPTFOO_RESOURCE_ATTR_PARENT_SPAN_ID } from "./resourceAttributes-D1jP3kL5.js";
 import path from "path";
+import crypto from "node:crypto";
 import express from "express";
 import protobuf from "protobufjs";
 //#region src/tracing/protobuf.ts
@@ -83,6 +85,33 @@ async function decodeExportTraceServiceRequest(data) {
 }
 //#endregion
 //#region src/tracing/otlpReceiver.ts
+const LOG_EVENT_NAME_DENYLIST = new Set(["claude_code.tracing"]);
+const LOG_SPAN_DURATION_MS = 1;
+const MAX_BODY_AS_NAME_LENGTH = 128;
+const SEVERITY_NUMBER_ERROR = 17;
+const MAX_LOG_BODY_ATTR_LENGTH = 8192;
+function truncateLogBody(value) {
+	if (typeof value !== "string") return value;
+	if (value.length <= MAX_LOG_BODY_ATTR_LENGTH) return value;
+	return `${value.slice(0, MAX_LOG_BODY_ATTR_LENGTH - 15)}... [truncated]`;
+}
+const BASE64_ZERO_SPAN_ID = /^A{11,12}=?$/;
+function isZeroSpanId(id) {
+	return /^0+$/.test(id) || BASE64_ZERO_SPAN_ID.test(id);
+}
+function randomSpanId() {
+	return crypto.randomBytes(8).toString("hex");
+}
+function getStringAttribute(attributes, key) {
+	const value = attributes[key];
+	return typeof value === "string" ? value : void 0;
+}
+function resolveLogSpanName(attributes, bodyValue) {
+	const eventName = attributes["event.name"] ?? attributes["claude_code.event.name"];
+	if (typeof eventName === "string" && eventName.length > 0) return eventName;
+	if (typeof bodyValue === "string" && bodyValue.length > 0 && bodyValue.length <= MAX_BODY_AS_NAME_LENGTH) return bodyValue;
+	return "otel.log";
+}
 const SPAN_KIND_MAP = {
 	0: "unspecified",
 	1: "internal",
@@ -141,6 +170,21 @@ var OTLPReceiver = class {
 			limit: "10mb",
 			type: (req) => this.acceptFormats.includes("protobuf") && getRequestFormat(req.headers["content-type"]) === "protobuf"
 		}));
+		this.app.use("/v1/logs", (req, res, next) => {
+			if (req.method !== "POST") {
+				next();
+				return;
+			}
+			if (getRequestFormat(req.headers["content-type"]) !== "json") {
+				res.status(415).json({ error: "Only application/json is supported for /v1/logs" });
+				return;
+			}
+			next();
+		});
+		this.app.use("/v1/logs", express.json({
+			limit: "10mb",
+			type: (req) => getRequestFormat(req.headers["content-type"]) === "json"
+		}));
 		logger.debug("[OtlpReceiver] Middleware configured for accepted OTLP formats");
 	}
 	setupRoutes() {
@@ -164,6 +208,17 @@ var OTLPReceiver = class {
 				this.handleProcessingError(error, res);
 			}
 		});
+		this.app.post("/v1/logs", async (req, res) => {
+			logger.debug("[OtlpReceiver] Received logs request");
+			try {
+				const traces = this.parseOTLPLogsJSONRequest(req.body);
+				logger.debug(`[OtlpReceiver] Parsed ${traces.length} logs into span records`);
+				if (traces.length > 0) await this.persistTraces(this.groupTraces(traces));
+				res.status(200).json({ partialSuccess: {} });
+			} catch (error) {
+				this.handleProcessingError(error, res);
+			}
+		});
 		this.app.get("/health", (_req, res) => {
 			logger.debug("[OtlpReceiver] Health check requested");
 			res.status(200).json({ status: "ok" });
@@ -295,6 +350,67 @@ var OTLPReceiver = class {
 		}
 		return traces;
 	}
+	parseOTLPLogsJSONRequest(body) {
+		const traces = [];
+		const resourceLogs = body?.resourceLogs ?? [];
+		logger.debug(`[OtlpReceiver] Parsing logs request with ${resourceLogs.length} resource logs`);
+		for (const resourceLog of resourceLogs) {
+			const resourceAttributes = this.parseAttributes(resourceLog.resource?.attributes);
+			for (const scopeLog of resourceLog.scopeLogs ?? []) for (const log of scopeLog.logRecords ?? []) try {
+				const parsed = this.logRecordToParsedTrace(log, scopeLog, resourceAttributes);
+				if (parsed) traces.push(parsed);
+			} catch (err) {
+				logger.warn(`[OtlpReceiver] Skipping malformed log record in scope ${scopeLog.scope?.name ?? "(unknown)"}: ${err}`);
+			}
+		}
+		return traces;
+	}
+	logRecordToParsedTrace(log, scopeLog, resourceAttributes) {
+		const rawTraceId = log.traceId ?? getStringAttribute(resourceAttributes, "promptfoo.trace_id");
+		if (!rawTraceId) {
+			logger.debug(`[OtlpReceiver] Dropping log: no traceId and no ${PROMPTFOO_RESOURCE_ATTR_TRACE_ID} resource attribute (scope=${scopeLog.scope?.name ?? "unknown"}). Ensure TRACEPARENT is propagated or OTEL_RESOURCE_ATTRIBUTES is set by the provider.`);
+			return null;
+		}
+		const traceId = this.convertId(rawTraceId, 32);
+		if (traceId.length !== 32 || !/^[0-9a-f]+$/.test(traceId)) {
+			logger.debug(`[OtlpReceiver] Dropping log: invalid trace_id shape '${rawTraceId}'`);
+			return null;
+		}
+		const attributes = {
+			...resourceAttributes,
+			...this.parseAttributes(log.attributes),
+			"otel.scope.name": scopeLog.scope?.name,
+			"otel.scope.version": scopeLog.scope?.version,
+			"otel.log.severity_number": log.severityNumber,
+			"otel.log.severity_text": log.severityText
+		};
+		const bodyValue = log.body ? this.parseAttributeValue(log.body) : void 0;
+		const name = resolveLogSpanName(attributes, bodyValue);
+		if (LOG_EVENT_NAME_DENYLIST.has(name)) {
+			logger.debug(`[OtlpReceiver] Dropping log: event '${name}' is in the denylist`);
+			return null;
+		}
+		if (bodyValue !== void 0) attributes["otel.log.body"] = truncateLogBody(bodyValue);
+		const timeNano = log.timeUnixNano ?? log.observedTimeUnixNano;
+		const startTime = timeNano ? Number(timeNano) / 1e6 : Date.now();
+		const endTime = startTime + LOG_SPAN_DURATION_MS;
+		const rawParentSpanId = !!log.spanId && !isZeroSpanId(log.spanId) ? log.spanId : getStringAttribute(resourceAttributes, PROMPTFOO_RESOURCE_ATTR_PARENT_SPAN_ID);
+		const parentSpanId = rawParentSpanId ? this.convertId(rawParentSpanId, 16) : void 0;
+		const severityIsError = typeof log.severityNumber === "number" && log.severityNumber >= SEVERITY_NUMBER_ERROR;
+		return {
+			traceId,
+			span: {
+				spanId: randomSpanId(),
+				parentSpanId,
+				name,
+				startTime,
+				endTime,
+				attributes,
+				statusCode: 1,
+				statusMessage: severityIsError ? log.severityText : void 0
+			}
+		};
+	}
 	async parseOTLPProtobufRequest(body) {
 		const decoded = await decodeExportTraceServiceRequest(body);
 		logger.debug(`[OtlpReceiver] Parsing protobuf request with ${decoded.resourceSpans?.length || 0} resource spans`);
@@ -463,4 +579,4 @@ async function stopOTLPReceiver() {
 //#endregion
 export { startOTLPReceiver, stopOTLPReceiver };
 
-//# sourceMappingURL=otlpReceiver-UYMQx3sy.js.map
+//# sourceMappingURL=otlpReceiver--gTpSagc.js.map