
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@playwright-opentelemetry/trace-api
Advanced tools
H3-based API library for storing and serving Playwright OpenTelemetry traces in S3-compatible storage.
H3-based API library for storing and serving Playwright OpenTelemetry traces in S3-compatible object storage.
The Trace API is a customizable library that can be deployed to Cloudflare Workers, Deno, Bun, Node.js, or any platform supporting web-standard Request/Response handlers. It provides endpoints for writing OTLP trace data, registering expected Playwright trace IDs, and Playwright screenshots, then serves them in a format compatible with the trace viewer. Test metadata is stored on the root playwright.test span.
Reporter uploads follow Playwright trace retention by default. If Playwright does not produce or retain a trace for a test, no remote trace data is uploaded for that test and viewer read endpoints may return 404. Configure use.playwrightOpentelemetry.trace to override that decision for OpenTelemetry output independently of Playwright's own use.trace setting.
import { createTraceApi } from '@playwright-opentelemetry/trace-api';
const api = createTraceApi({
storageConfig: {
bucket: 'my-traces',
endpoint: 'https://xxx.r2.cloudflarestorage.com',
accessKeyId: env.R2_ACCESS_KEY_ID,
secretAccessKey: env.R2_SECRET_ACCESS_KEY,
region: 'auto',
},
});
export default {
fetch: api.fetch,
};
For maximum flexibility, compose your own API using individual handlers:
import { H3, getHeader, createError } from 'h3';
import {
createS3Storage,
createOtlpHandler,
createPlaywrightHandler,
createViewerHandler,
OTLP_TRACES_WRITE_PATH,
PLAYWRIGHT_REPORTER_WRITE_PATH,
TRACE_VIEWER_READ_PATH,
} from '@playwright-opentelemetry/trace-api';
const storage = createS3Storage({
bucket: 'my-traces',
endpoint: env.R2_ENDPOINT,
accessKeyId: env.R2_ACCESS_KEY_ID,
secretAccessKey: env.R2_SECRET_ACCESS_KEY,
});
const app = new H3();
// Authentication middleware for write endpoints
const authMiddleware = async (event) => {
const token = getHeader(event, 'authorization')?.replace('Bearer ', '');
if (!token || !await validateToken(token)) {
throw createError({ statusCode: 401, message: 'Unauthorized' });
}
};
// Apply auth to write endpoints
app.use(OTLP_TRACES_WRITE_PATH, authMiddleware);
app.use(PLAYWRIGHT_REPORTER_WRITE_PATH, authMiddleware);
// Add handlers
// /v1/traces/
app.post(OTLP_TRACES_WRITE_PATH, createOtlpHandler({ storage }));
// /playwright-otel-reporter/v1/**
app.put(PLAYWRIGHT_REPORTER_WRITE_PATH, createPlaywrightHandler({ storage }));
// /playwright-otel-trace-viewer/v1/**
app.get(TRACE_VIEWER_READ_PATH, createViewerHandler({ storage }));
export default {
fetch: app.fetch,
};
Deno:
import { createTraceApi } from '@playwright-opentelemetry/trace-api';
const api = createTraceApi({ storageConfig: { ... } });
Deno.serve({ port: 3000 }, api.fetch);
Bun:
import { createTraceApi } from '@playwright-opentelemetry/trace-api';
const api = createTraceApi({ storageConfig: { ... } });
export default {
port: 3000,
fetch: api.fetch,
};
Node.js:
import { serve } from 'h3/node';
import { createTraceApi } from '@playwright-opentelemetry/trace-api';
const api = createTraceApi({ storageConfig: { ... } });
serve(api, { port: 3000 });
interface TraceApiConfig {
storage?: TraceStorage;
storageConfig?: {
bucket: string;
endpoint: string;
accessKeyId: string;
secretAccessKey: string;
region?: string; // Default: 'auto'
};
resolvePath?: (event: H3Event, path: string) => Promise<string> | string;
corsOrigin?: string | false;
}
Provide either storage for a custom TraceStorage implementation or storageConfig to create the built-in S3-compatible storage.
Write Endpoints:
POST /v1/traces
Content-Type: application/json
Body: Standard OTLP JSON payload
Partitions OTLP spans by trace ID and writes OTLP-shaped fragments to traces/{traceId}/traces/{requestId}.json. The fragment filename is a unique request ID, not a service name or span ID.
OTLP requests from the Playwright reporter include X-Playwright-Otel-Source: reporter and are stored directly. Other OTLP requests are only stored when traces/{traceId}/.expected already exists. Unknown trace IDs are silently dropped with HTTP 200, so exporters do not retry unrelated telemetry.
PUT /playwright-otel-reporter/v1/expected-trace
X-Trace-Id: {traceId}
Writes a zero-byte expected-trace marker to traces/{traceId}/.expected. The Playwright fixture sends this before the test body runs when the configured trace mode could retain the current attempt, which allows app-under-test telemetry that received the propagated traceparent header to be admitted.
PUT /playwright-otel-reporter/v1/screenshots.zip
X-Trace-Id: {traceId}
Body: ZIP containing manifest.json and screenshots/*
Writes the screenshot bundle to traces/{traceId}/screenshots.zip.
Read Endpoints:
GET /playwright-otel-trace-viewer/v1/{traceId}/traces
GET /playwright-otel-trace-viewer/v1/{traceId}/screenshots.zip
Serves merged OTLP trace data and the stored screenshot ZIP expected by the trace viewer. The trace endpoint returns 404 when no trace fragments exist. A missing screenshot ZIP returns 404; the viewer treats that as no screenshots.
Configure your S3-compatible bucket with a lifecycle rule to expire traces after the desired retention period.
aws s3api put-bucket-lifecycle-configuration \
--bucket my-traces \
--lifecycle-configuration '{
"Rules": [{
"ID": "ExpireTraces",
"Status": "Enabled",
"Filter": { "Prefix": "traces/" },
"Expiration": { "Days": 30 }
}]
}'
wrangler r2 bucket lifecycle set my-traces --rules '[{
"id": "expire-traces",
"enabled": true,
"conditions": { "prefix": "traces/" },
"deleteObjectsTransition": { "daysAfterUpload": 30 }
}]'
s3://bucket/
└── traces/
└── {traceId}/
├── .expected
├── traces/
│ └── {requestId}.json
└── screenshots.zip
FAQs
H3-based API library for storing and serving Playwright OpenTelemetry traces in S3-compatible storage.
The npm package @playwright-opentelemetry/trace-api receives a total of 2,578 weekly downloads. As such, @playwright-opentelemetry/trace-api popularity was classified as popular.
We found that @playwright-opentelemetry/trace-api demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.