Add JavaScript span transform plugins

[Stephen Belanger (Qard)]

Summary

• add ordered synchronous JavaScript span transforms powered by per-worker QuickJS runtimes
• bridge spans and context directly with rquickjs-serde, using strict result decoding without intermediate JSON text
• expose operation, source, session ID, and an environment snapshot captured once when each daemon worker processor is constructed
• canonicalize plugin paths to absolute paths before validation and persistent enable storage
• persist enabled plugins for ordinary sessions while keeping managed runs and import/attach plugin chains invocation-local
• replay raw journal events through the resumed session's current plugin chain
• isolate failures per plugin and worker so successful plugins continue running while diagnostics remain bounded

Example

Create a synchronous ES module:

// tag-ci.mjs
export default function tagCi(span, context) {
  if (!context.env.CI) return span;

  return {
    ...span,
    tags: [...new Set([...(span.tags ?? []), "ci"])],
    metadata: {
      ...(span.metadata ?? {}),
      deployment: context.env.DEPLOYMENT_ENV ?? "unknown",
      trace_source: context.source,
    },
  };
}

Choose the scope when registering it:

# Persist an ordered global chain for ordinary Codex sessions.
bt trace enable codex --plugin ./redact.mjs --plugin ./tag-ci.mjs

# Only local.mjs runs for this managed invocation; enabled plugins are not merged.
bt trace run --plugin ./local.mjs codex -- "summarize this change"

# Only sanitize-history.mjs runs for this import; enabled plugins are not merged.
bt trace import codex SESSION_ID --plugin ./sanitize-history.mjs

Each function receives the previous plugin's returned span plus { operation, source, session_id, env }. Plugins may change span content but not span_id, root_span_id, or parent_span_ids.

Raw input events are journaled before transformation. On recovery, an ordinary session uses the current globally configured plugin chain, while an isolated managed session continues using its invocation-local chain. Import and attach are separate from journal recovery and use only their command-line plugins.

See the README examples for redaction, environment handling, chaining, replay, and security guidance.

Validation

• cargo test --manifest-path bt-daemon/Cargo.toml --all-features --locked
• cargo clippy --manifest-path bt-daemon/Cargo.toml --all-targets --all-features --locked -- -D warnings
• cargo fmt --manifest-path bt-daemon/Cargo.toml -- --check
• cargo metadata --manifest-path bt-daemon/Cargo.toml --locked --no-deps --format-version 1
• make test
• git diff --check

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.