@autter/runtime-node 1.5.0 → 1.6.1

package/dist/index.js

@@ -2,6 +2,8 @@ import {
   CODE_PATTERN,
   DEFAULT_REQUEST_ID_HEADER,
   RuntimeError,
+  addBreadcrumb,
+  breadcrumbEventAttributes,
   captureExceptionAsLog,
   compileIgnore,
   configureRuntimeLogger,
@@ -15,7 +17,10 @@ import {
   errorCodeOf,
   errorInternal,
   fileSink,
+  fingerprintEventAttributes,
+  fingerprintValues,
   flushRuntimeLogs,
+  isError,
   isRuntimeErrorLike,
   local,
   makeRedactor,
@@ -35,13 +40,15 @@ import {
   runtimeContext,
   runtimeLogStats,
   runtimeLogger,
+  sanitizeBreadcrumbs,
   shutdownRuntimeLogger,
+  splitFingerprint,
   toClientError,
   withRuntimeOperation
-} from "./chunk-3TJHUCZ6.js";
+} from "./chunk-5KISVAVB.js";
 import {
   runDoctor
-} from "./chunk-ZS4WQJQR.js";
+} from "./chunk-L5ENELB2.js";
 import {
   COMPAT_MANIFEST,
   CountingExporter,
@@ -60,9 +67,10 @@ import {
   observeIngesterResponse,
   registerFlushTarget,
   setDebugMode,
+  sharedSlot,
   telemetryStats,
   unregisterFlushTargets
-} from "./chunk-L7HWKMCZ.js";
+} from "./chunk-HRDELHZP.js";
 
 // src/relay.ts
 var IpWindow = class {
@@ -102,6 +110,7 @@ var EVENT_TYPES = /* @__PURE__ */ new Set([
   "timing"
 ]);
 var SEVERITIES = /* @__PURE__ */ new Set(["fatal", "error", "warning", "info"]);
+var TRACE_ID = /^(?!0{32})[0-9a-f]{32}$/;
 var CONTEXT_MAX_DEPTH = 6;
 var CONTEXT_MAX_NODES = 256;
 var CONTEXT_MAX_STRING = 4e3;
@@ -214,6 +223,27 @@ function relayContext(raw, redactor) {
   const bounded = boundContext(raw);
   return Array.isArray(bounded) ? {} : { context: redactor(bounded) };
 }
+function relayBreadcrumbs(raw, redactor) {
+  const breadcrumbs = sanitizeBreadcrumbs(raw, redactor);
+  return breadcrumbs ? { breadcrumbs } : {};
+}
+var DEBUG_ID_RE = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
+function relayDebugIds(raw, redactor) {
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return {};
+  const debugIds = {};
+  let count = 0;
+  for (const [url, id] of Object.entries(raw)) {
+    if (count >= 50) break;
+    if (typeof id !== "string" || !DEBUG_ID_RE.test(id) || url.length > 1e3) continue;
+    debugIds[redactor.text(url.split(/[?#]/)[0])] = id.toLowerCase();
+    count++;
+  }
+  return count ? { debugIds } : {};
+}
+function relayFingerprint(raw, redactor) {
+  const values = fingerprintValues(raw, redactor.text);
+  return values ? { fingerprint: Array.isArray(raw) ? values : values[0] } : {};
+}
 var defaultRelayRedactor = makeRedactor(true);
 function sanitizeBrowserPayload(raw, redactor = defaultRelayRedactor) {
   if (typeof raw !== "object" || raw === null) return null;
@@ -241,7 +271,11 @@ function sanitizeBrowserPayload(raw, redactor = defaultRelayRedactor) {
       ...typeof e.line === "number" ? { line: e.line } : {},
       ...typeof e.column === "number" ? { column: e.column } : {},
       ...typeof e.route === "string" ? { route: e.route.split("?")[0].slice(0, 1e3) } : {},
-      ...typeof e.context === "object" && e.context !== null ? relayContext(e.context, redactor) : {}
+      ...typeof e.context === "object" && e.context !== null ? relayContext(e.context, redactor) : {},
+      ...relayBreadcrumbs(e.breadcrumbs, redactor),
+      ...relayDebugIds(e.debugIds, redactor),
+      ...relayFingerprint(e.fingerprint, redactor),
+      ...typeof e.traceId === "string" && TRACE_ID.test(e.traceId) ? { traceId: e.traceId } : {}
     });
   }
   return {
@@ -275,6 +309,9 @@ function forward(payload, opts) {
     );
     observeIngesterResponse({ status: response.status, headers: response.headers });
     for (const feature of featuresForBrowserEvents(types)) noteCompatFeature(feature);
+    if ((payload.events ?? []).some((e) => e.traceId)) {
+      noteCompatFeature("browser_trace_propagation");
+    }
     noteRelayRejection(types, response.status, response.headers);
   }).catch((err) => {
     (opts.onError ?? ((e) => console.warn("autter relay forward failed:", e)))(
@@ -413,7 +450,7 @@ import {
   SpanStatusCode,
   TraceFlags
 } from "@opentelemetry/api";
-import { getRPCMetadata, RPCType } from "@opentelemetry/core";
+import { getRPCMetadata as getRPCMetadata2, RPCType as RPCType2 } from "@opentelemetry/core";
 import {
   AggregationTemporalityPreference,
   OTLPMetricExporter
@@ -442,6 +479,89 @@ import { Resource } from "@opentelemetry/resources";
 import {
   AggregationTemporality
 } from "@opentelemetry/sdk-metrics";
+
+// src/url-query.ts
+var URL_KEYS = ["http.target", "http.url", "url.full", "url.original", "url.path"];
+var QUERY_KEY = "url.query";
+var NAME_KEYS = ["next.span_name"];
+var MASK = "[redacted]";
+var SCHEME = /^[a-z][a-z0-9+.-]*:\/\//i;
+function splitUrl(value) {
+  const from = SCHEME.test(value) ? value.indexOf("://") + 3 : 0;
+  const question = value.indexOf("?", from);
+  const hash = value.indexOf("#", from);
+  const at = question < 0 ? hash : hash < 0 ? question : Math.min(question, hash);
+  if (at < 0) return null;
+  const query = at === question ? value.slice(at + 1, hash > at ? hash : void 0) : null;
+  return { base: value.slice(0, at), query };
+}
+function decodeName(raw) {
+  try {
+    return decodeURIComponent(raw.replace(/\+/g, " "));
+  } catch {
+    return raw;
+  }
+}
+function makeUrlQueryPolicy(keepQueryParams = []) {
+  const keep = new Set(keepQueryParams.filter((name) => typeof name === "string"));
+  const maskQuery = (query) => {
+    const out = [];
+    for (const part of query.split("&")) {
+      if (!part) continue;
+      const eq = part.indexOf("=");
+      const name = eq < 0 ? part : part.slice(0, eq);
+      if (keep.size && keep.has(decodeName(name))) out.push(part);
+      else if (eq < 0) out.push(MASK);
+      else out.push(eq === part.length - 1 ? part : `${name}=${MASK}`);
+    }
+    return out.join("&");
+  };
+  const stripName = (name) => {
+    if (!name.includes("?") && !name.includes("#")) return name;
+    return name.split(" ").map((token) => {
+      if (!token.startsWith("/") && !SCHEME.test(token)) return token;
+      return splitUrl(token)?.base ?? token;
+    }).join(" ");
+  };
+  return {
+    attributes(attributes) {
+      let out = null;
+      const set = (key, value) => {
+        out ??= { ...attributes };
+        out[key] = value;
+      };
+      let dropped = null;
+      for (const key of URL_KEYS) {
+        const value = attributes[key];
+        if (typeof value !== "string") continue;
+        const split = splitUrl(value);
+        if (!split) continue;
+        set(key, split.base);
+        if (split.query) dropped ??= split.query;
+      }
+      for (const key of NAME_KEYS) {
+        const value = attributes[key];
+        if (typeof value !== "string") continue;
+        const stripped = stripName(value);
+        if (stripped !== value) set(key, stripped);
+      }
+      const current = attributes[QUERY_KEY];
+      if (typeof current === "string") {
+        const masked = maskQuery(current.startsWith("?") ? current.slice(1) : current);
+        if (masked !== current) set(QUERY_KEY, masked);
+      } else if (current !== void 0) {
+        set(QUERY_KEY, MASK);
+      } else if (dropped !== null) {
+        const masked = maskQuery(dropped);
+        if (masked) set(QUERY_KEY, masked);
+      }
+      return out ?? attributes;
+    },
+    name: stripName
+  };
+}
+
+// src/redact-exporter.ts
 var scrubbedResources = /* @__PURE__ */ new WeakMap();
 function redactResource(resource, redactor) {
   const cached = scrubbedResources.get(resource);
@@ -450,17 +570,41 @@ function redactResource(resource, redactor) {
   scrubbedResources.set(resource, scrubbed);
   return scrubbed;
 }
-function redactSpan(span, redactor) {
-  const status = span.status.message ? { ...span.status, message: redactor.text(span.status.message) } : span.status;
+var DEFAULT_QUERY_POLICY = makeUrlQueryPolicy();
+function stripQueries(span, query) {
+  const name = query.name(span.name);
+  const attributes = query.attributes(span.attributes);
+  if (name === span.name && attributes === span.attributes) return span;
+  return wrap(span, { name, attributes });
+}
+function wrap(span, fields) {
   return {
-    name: redactor.text(span.name),
+    name: fields.name,
     kind: span.kind,
     spanContext: () => span.spanContext(),
     parentSpanId: span.parentSpanId,
     startTime: span.startTime,
     endTime: span.endTime,
+    status: fields.status ?? span.status,
+    attributes: fields.attributes,
+    links: fields.links ?? span.links,
+    events: fields.events ?? span.events,
+    duration: span.duration,
+    ended: span.ended,
+    resource: fields.resource ?? span.resource,
+    instrumentationLibrary: span.instrumentationLibrary,
+    droppedAttributesCount: span.droppedAttributesCount,
+    droppedEventsCount: span.droppedEventsCount,
+    droppedLinksCount: span.droppedLinksCount
+  };
+}
+function redactSpan(span, redactor, query = DEFAULT_QUERY_POLICY) {
+  if (!redactor.enabled) return stripQueries(span, query);
+  const status = span.status.message ? { ...span.status, message: redactor.text(span.status.message) } : span.status;
+  return wrap(span, {
+    name: query.name(redactor.text(span.name)),
     status,
-    attributes: redactor.exported(span.attributes),
+    attributes: query.attributes(redactor.exported(span.attributes)),
     links: span.links.map(
       (link) => link.attributes ? { ...link, attributes: redactor.exported(link.attributes) } : link
     ),
@@ -469,34 +613,27 @@ function redactSpan(span, redactor) {
       name: redactor.text(event.name),
       ...event.attributes ? { attributes: redactor.exported(event.attributes) } : {}
     })),
-    duration: span.duration,
-    ended: span.ended,
-    resource: redactResource(span.resource, redactor),
-    instrumentationLibrary: span.instrumentationLibrary,
-    droppedAttributesCount: span.droppedAttributesCount,
-    droppedEventsCount: span.droppedEventsCount,
-    droppedLinksCount: span.droppedLinksCount
-  };
+    resource: redactResource(span.resource, redactor)
+  });
 }
 var RedactingSpanExporter = class {
-  constructor(inner, redactor) {
+  constructor(inner, redactor, query = DEFAULT_QUERY_POLICY) {
     this.inner = inner;
     this.redactor = redactor;
+    this.query = query;
   }
   inner;
   redactor;
+  query;
   export(spans, resultCallback) {
     const redactor = this.redactor();
-    let scrubbed = spans;
+    const scrubbed = [];
     let failed = 0;
-    if (redactor.enabled) {
-      scrubbed = [];
-      for (const span of spans) {
-        try {
-          scrubbed.push(redactSpan(span, redactor));
-        } catch {
-          failed++;
-        }
+    for (const span of spans) {
+      try {
+        scrubbed.push(redactSpan(span, redactor, this.query));
+      } catch {
+        failed++;
       }
     }
     if (!failed) {
@@ -602,14 +739,20 @@ function startMemoryMetrics() {
 // src/requests.ts
 import { AsyncResource } from "async_hooks";
 import { context, trace } from "@opentelemetry/api";
+import { getRPCMetadata, RPCType } from "@opentelemetry/core";
 var REQUEST_STATE = /* @__PURE__ */ Symbol.for("autter.runtime.request");
 var BOUND = /* @__PURE__ */ Symbol.for("autter.runtime.bound");
-var CAPTURED = /* @__PURE__ */ new WeakSet();
+var CAPTURED = sharedSlot("requests", () => ({ captured: /* @__PURE__ */ new WeakSet() })).captured;
 var capturer = () => {
 };
 function setRequestExceptionCapturer(fn) {
   capturer = fn;
 }
+var annotator = () => {
+};
+function setRequestSpanAnnotator(fn) {
+  annotator = fn;
+}
 function markCaptured(error) {
   if (error && typeof error === "object") CAPTURED.add(error);
 }
@@ -624,23 +767,54 @@ function expressRouteOf(req) {
 function defaultShouldCapture(error) {
   return error instanceof RuntimeError || errorCodeOf(error) !== void 0 || responseStatusOf(error) >= 500;
 }
-function captureAtBoundary(error, state, rule = void 0) {
-  const wanted = typeof rule === "function" ? rule(error) : rule === void 0 ? defaultShouldCapture(error) : rule;
+function onRequestSpan(fn) {
+  const active = context.active();
+  const metadata = getRPCMetadata(active);
+  const span = metadata?.type === RPCType.HTTP ? metadata.span : void 0;
+  if (!span || !span.isRecording() || trace.getSpan(active) === span) {
+    fn();
+    return;
+  }
+  context.with(trace.setSpan(active, span), fn);
+}
+function captureAtBoundary(error, state, rule = void 0, attributes) {
+  let wanted;
+  try {
+    wanted = typeof rule === "function" ? rule(error) : rule === void 0 ? defaultShouldCapture(error) : rule;
+  } catch {
+    wanted = false;
+  }
   if (!wanted) return;
   if (error && typeof error === "object" && CAPTURED.has(error)) return;
   markCaptured(error);
   try {
-    if (state && !state.sealed) local.run(state, () => capturer(error));
-    else capturer(error);
+    const run = () => onRequestSpan(() => capturer(error, attributes));
+    if (state && !state.sealed) local.run(state, run);
+    else run();
   } catch {
   }
 }
+function requestStateOf(req) {
+  if (!req || typeof req !== "object") return void 0;
+  return req[REQUEST_STATE];
+}
+function captureRequestError(error, attributes) {
+  if (error && typeof error === "object" && CAPTURED.has(error)) {
+    if (!attributes) return;
+    try {
+      onRequestSpan(() => annotator(attributes));
+    } catch {
+    }
+    return;
+  }
+  captureAtBoundary(error, currentOperation(), true, attributes);
+}
 function bindEmitter(emitter, state) {
   const target = emitter;
   if (!target || typeof target !== "object" || target[BOUND]) return;
   target[BOUND] = true;
   const wrappers = /* @__PURE__ */ new WeakMap();
-  const wrap = (listener) => {
+  const wrap2 = (listener) => {
     if (typeof listener !== "function") return listener;
     let wrapped = wrappers.get(listener);
     if (!wrapped) {
@@ -664,7 +838,7 @@ function bindEmitter(emitter, state) {
     const original = target[method];
     if (typeof original !== "function") continue;
     target[method] = function(event, listener) {
-      return original.call(this, event, wrap(listener));
+      return original.call(this, event, wrap2(listener));
     };
   }
   for (const method of ["removeListener", "off"]) {
@@ -976,7 +1150,140 @@ function startHookRequest(res) {
   local.enterWith(state);
 }
 
+// src/unhandled-rejections.ts
+var MODES = /* @__PURE__ */ new Set([
+  "throw",
+  "strict",
+  "warn",
+  "warn-with-error-code",
+  "none"
+]);
+var LISTENER_MARK = /* @__PURE__ */ Symbol.for("autter.runtime.unhandledRejection.listener");
+var HANDLED_KEY = /* @__PURE__ */ Symbol.for("autter.runtime.unhandledRejection.handled");
+function handledPromises() {
+  const registry = globalThis;
+  let set = registry[HANDLED_KEY];
+  if (!set) {
+    set = /* @__PURE__ */ new WeakSet();
+    registry[HANDLED_KEY] = set;
+  }
+  return set;
+}
+var recorded = /* @__PURE__ */ new WeakSet();
+function markRecorded(reason) {
+  if (!reason || typeof reason !== "object") return;
+  recorded.add(reason);
+  setImmediate(() => recorded.delete(reason)).unref?.();
+}
+function recordedAsRejection(error) {
+  return !!error && typeof error === "object" && recorded.has(error);
+}
+function splitOptions(value) {
+  return value ? value.split(/\s+/).filter(Boolean) : [];
+}
+function unhandledRejectionsMode(execArgv = process.execArgv, nodeOptions = process.env.NODE_OPTIONS) {
+  const args = [...splitOptions(nodeOptions), ...execArgv];
+  let mode = "throw";
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i] ?? "";
+    if (!arg.startsWith("--")) continue;
+    const eq = arg.indexOf("=");
+    const name = (eq < 0 ? arg : arg.slice(0, eq)).replace(/_/g, "-");
+    if (name !== "--unhandled-rejections") continue;
+    const value = eq < 0 ? args[++i] : arg.slice(eq + 1);
+    if (value && MODES.has(value))
+      mode = value;
+  }
+  return mode;
+}
+function isErrorLike(value) {
+  try {
+    return typeof value === "object" && value !== null && Object.prototype.hasOwnProperty.call(value, "stack");
+  } catch {
+    return false;
+  }
+}
+function describeReason(reason) {
+  if (typeof reason !== "object" && typeof reason !== "function" || reason === null) {
+    try {
+      return String(reason);
+    } catch {
+      return typeof reason;
+    }
+  }
+  try {
+    const proto = Object.getPrototypeOf(reason);
+    const ctor = proto?.constructor;
+    const name = typeof ctor === "function" ? ctor.name : "";
+    return name ? `#<${name}>` : "[object Object]";
+  } catch {
+    return "[object Object]";
+  }
+}
+function toUncaught(reason, from) {
+  if (isErrorLike(reason)) return reason;
+  const error = new Error(
+    `This error originated either by throwing inside of an async function without a catch block, or by rejecting a promise which was not handled with .catch(). The promise rejected with the reason "${describeReason(reason)}".`
+  );
+  error.name = "UnhandledPromiseRejection";
+  error.code = "ERR_UNHANDLED_REJECTION";
+  Error.captureStackTrace?.(error, from);
+  return error;
+}
+var warningId = 0;
+function emitNodeWarning(reason) {
+  try {
+    const text = isErrorLike(reason) ? String(reason.stack) : describeReason(reason);
+    process.emitWarning(text, "UnhandledPromiseRejectionWarning");
+    process.emitWarning(
+      `Unhandled promise rejection. This error originated either by throwing inside of an async function without a catch block, or by rejecting a promise which was not handled with .catch(). To terminate the node process on unhandled promise rejection, use the CLI flag \`--unhandled-rejections=strict\` (see https://nodejs.org/api/cli.html#cli_unhandled_rejections_mode). (rejection id: ${++warningId})`,
+      "UnhandledPromiseRejectionWarning"
+    );
+  } catch {
+  }
+}
+function installUnhandledRejectionCapture(capture, mode = unhandledRejectionsMode()) {
+  if (mode === "strict") return () => {
+  };
+  const listener = (reason, promise) => {
+    try {
+      if (promise && typeof promise === "object") {
+        const handled = handledPromises();
+        if (handled.has(promise)) return;
+        handled.add(promise);
+      }
+      const alone = process.listeners("unhandledRejection").every((fn) => fn[LISTENER_MARK] === true);
+      if (alone && mode === "throw") {
+        const error = toUncaught(reason, listener);
+        process.nextTick(() => {
+          throw error;
+        });
+        return;
+      }
+      if (alone && mode === "warn-with-error-code") {
+        emitNodeWarning(reason);
+        process.exitCode = 1;
+      }
+      markRecorded(reason);
+      capture(reason);
+    } catch {
+    }
+  };
+  listener[LISTENER_MARK] = true;
+  process.on("unhandledRejection", listener);
+  return () => {
+    process.off("unhandledRejection", listener);
+  };
+}
+
 // src/server.ts
+var S = sharedSlot("server", () => ({
+  active: null,
+  alwaysOnProvider: null,
+  redactor: makeRedactor(true),
+  loggerOnlyCapture: null,
+  hookRequests: false
+}));
 var LLM_MARKER_ATTRIBUTES = [
   "gen_ai.operation.name",
   "gen_ai.system",
@@ -1104,9 +1411,9 @@ var ErrorTraceRetentionProcessor = class {
   }
   /** Promote the active trace, if any — called on captured errors. */
   retainActiveTrace() {
-    const active2 = trace2.getActiveSpan()?.spanContext();
-    if (!active2 || (active2.traceFlags & TraceFlags.SAMPLED) !== 0) return;
-    const entry = this.entryFor(active2.traceId);
+    const active = trace2.getActiveSpan()?.spanContext();
+    if (!active || (active.traceFlags & TraceFlags.SAMPLED) !== 0) return;
+    const entry = this.entryFor(active.traceId);
     if (entry.retained) return;
     entry.retained = true;
     this.flush(entry);
@@ -1173,7 +1480,7 @@ function llmBaseAttributes(info) {
     ...info.sessionId ? { "autter.session_id": info.sessionId } : {},
     // Caller-supplied extras go through redaction like every other
     // custom attribute family (prompts can contain emails/keys).
-    ...info.attributes ? activeRedactor(info.attributes) : {}
+    ...info.attributes ? S.redactor(info.attributes) : {}
   };
 }
 function usageAttributes(usage) {
@@ -1214,7 +1521,7 @@ async function runLlmSpan(tracer, info, fn) {
     },
     setResponseModel,
     setModel: setResponseModel,
-    setAttributes: (attributes) => span.setAttributes(activeRedactor(attributes))
+    setAttributes: (attributes) => span.setAttributes(S.redactor(attributes))
   };
   try {
     const result = await context2.with(
@@ -1225,7 +1532,7 @@ async function runLlmSpan(tracer, info, fn) {
     return result;
   } catch (err) {
     recordError(span, err);
-    if (err instanceof Error) span.setAttribute("error.type", err.name);
+    if (isError(err)) span.setAttribute("error.type", err.name);
     throw err;
   } finally {
     span.end();
@@ -1247,7 +1554,7 @@ function recordLlmCall(tracer, call) {
   );
   if (call.error !== void 0 && call.error !== null) {
     recordError(span, call.error);
-    if (call.error instanceof Error) {
+    if (isError(call.error)) {
       span.setAttribute("error.type", call.error.name);
     }
   } else {
@@ -1275,24 +1582,25 @@ async function runWithSpan(tracer, name, fn, attributes, links) {
   }
 }
 function recordError(span, err) {
-  const isError = err instanceof Error;
-  const message = activeRedactor.text(isError ? err.message : String(err));
-  if (isError) {
+  const isErr = isError(err);
+  const message = S.redactor.text(isErr ? err.message : String(err));
+  if (isErr) {
     span.addEvent("exception", {
       "exception.type": err.name,
       "exception.message": message,
-      ...err.stack ? { "exception.stacktrace": activeRedactor.text(err.stack) } : {}
+      ...err.stack ? { "exception.stacktrace": S.redactor.text(err.stack) } : {},
+      ...breadcrumbEventAttributes(S.redactor.text, err)
     });
   }
   span.setStatus({ code: SpanStatusCode.ERROR, message });
 }
 function redactWithActive(attributes) {
-  return activeRedactor(attributes);
+  return S.redactor(attributes);
 }
 function captureExpressRoute(_span, response) {
   if (!(response instanceof ServerResponse)) return;
-  const rpcMetadata = getRPCMetadata(context2.active());
-  if (rpcMetadata?.type !== RPCType.HTTP) return;
+  const rpcMetadata = getRPCMetadata2(context2.active());
+  if (rpcMetadata?.type !== RPCType2.HTTP) return;
   const setRoute = () => {
     if (rpcMetadata.route) return;
     const route = expressRouteOf(response.req);
@@ -1300,42 +1608,41 @@ function captureExpressRoute(_span, response) {
   };
   response.prependListener("finish", setRoute);
   response.prependListener("close", setRoute);
-  if (hookRequests) startHookRequest(response);
+  if (S.hookRequests) startHookRequest(response);
 }
-var hookRequests = false;
 function structuredErrorAttributes(error) {
   const attrs = { ...errorAttributes(error, { causes: false }) };
   const internal = errorInternal(error);
   if (internal) {
     try {
       attrs["autter.error.internal"] = JSON.stringify(
-        activeRedactor(internal)
+        S.redactor(internal)
       ).slice(0, 4e3);
     } catch {
     }
   }
   return attrs;
 }
-var active = null;
-var activeAlwaysOnProvider = null;
-var activeRedactor = makeRedactor(true);
 function initAutterServer(options) {
-  if (active) return active;
+  if (S.active) return S.active;
   const endpoint = (options.endpoint ?? "https://otlp.autter.dev").replace(
     /\/$/,
     ""
   );
   const headers = { authorization: `Bearer ${options.apiKey}` };
+  const redactor = makeRedactor(options.redactAttributes ?? true);
+  const queryPolicy = makeUrlQueryPolicy(options.keepQueryParams);
   const traceExporter = () => new CountingExporter(
     new RedactingSpanExporter(
       new OTLPTraceExporter({ url: `${endpoint}/v1/traces`, headers }),
-      () => activeRedactor
+      () => redactor,
+      queryPolicy
     )
   );
   const environment = options.environment ?? process.env.NODE_ENV ?? "production";
   if (isDebugEnabled() || options.debug === true) setDebugMode(true);
   debugLog(`initialising service=${options.service} endpoint=${endpoint}`);
-  activeRedactor = makeRedactor(options.redactAttributes ?? true);
+  S.redactor = redactor;
   const distro = options.distro ?? SDK_IDENTITY;
   configureCompatCheck({ endpoint, enabled: options.compatCheck !== false, sdk: distro });
   const resource = new Resource2({
@@ -1352,8 +1659,15 @@ function initAutterServer(options) {
     // would double-count every sampled request).
     "autter.metrics_wired": true
   });
+  const rootSampler = new TraceIdRatioBasedSampler(options.traceSampleRate ?? 0.01);
   const headSampler = new ParentBasedSampler({
-    root: new TraceIdRatioBasedSampler(options.traceSampleRate ?? 0.01)
+    root: rootSampler,
+    // Browsers (runtime-browser's traceparent) send unsampled parents: they
+    // make no sampling decision. Apply this service's own rate to such
+    // requests instead of never head-sampling them. The ratio sampler is
+    // deterministic by trace id, so services sharing a rate still agree
+    // with an upstream service that chose not to sample.
+    remoteParentNotSampled: rootSampler
   });
   const retainOnError = options.retainTracesOnError !== false;
   const slowThresholdMs = Number.isFinite(options.retainTracesAboveMs) ? Math.max(0, options.retainTracesAboveMs) : 0;
@@ -1377,7 +1691,7 @@ function initAutterServer(options) {
         // 60 s export.
         temporalityPreference: AggregationTemporalityPreference.DELTA
       }),
-      () => activeRedactor
+      () => redactor
     ),
     exportIntervalMillis: options.metricIntervalMs ?? 6e4
   });
@@ -1420,18 +1734,22 @@ function initAutterServer(options) {
   function captureException2(error, attributes) {
     errorTraceBuffer?.retainActiveTrace();
     telemetryStats.markCaptured();
-    const isError = error instanceof Error;
-    const message = activeRedactor.text(isError ? error.message : String(error));
-    const stackText = isError && error.stack ? activeRedactor.text(error.stack) : "";
-    const redacted = activeRedactor(attributes);
+    const isErr = isError(error);
+    const message = redactor.text(isErr ? error.message : String(error));
+    const stackText = isErr && error.stack ? redactor.text(error.stack) : "";
+    const split = splitFingerprint(attributes);
+    const fingerprint = fingerprintEventAttributes(split.fingerprint, redactor.text);
+    if (fingerprint["autter.fingerprint"]) noteCompatFeature("fingerprint_override");
+    const redacted = redactor(split.attributes);
     const activeSpan = trace2.getActiveSpan();
     const reuseActive = activeSpan?.isRecording() === true;
-    const span = reuseActive ? activeSpan : errorTracer.startSpan(isError ? error.name : "Error");
+    const span = reuseActive ? activeSpan : errorTracer.startSpan(isErr ? error.name : "Error");
     const structured = structuredErrorAttributes(error);
     const causes = errorAttributes(error);
-    const declared = Object.fromEntries(
-      Object.entries(causes).filter(([key]) => key !== "autter.error.internal")
-    );
+    const declared = {
+      ...Object.fromEntries(Object.entries(causes).filter(([key]) => key !== "autter.error.internal")),
+      ...fingerprint
+    };
     const requestId = currentOperation()?.requestId;
     span.setAttributes({
       "autter.severity": "error",
@@ -1441,23 +1759,25 @@ function initAutterServer(options) {
     });
     markCaptured(error);
     noteOperationError(error);
-    notifyException(error, redacted);
-    if (isError && stackText) {
+    notifyException(error, { ...redacted, ...fingerprint });
+    if (isErr && stackText) {
       span.addEvent("exception", {
         "exception.type": error.name,
         "exception.message": message,
         "exception.stacktrace": stackText,
         ...redacted["autter.handled"] === true ? { "autter.handled": true, "autter.sampled": redacted["autter.sampled"] === true } : {},
-        ...declared
+        ...declared,
+        ...breadcrumbEventAttributes(redactor.text, error)
       });
     } else {
       const stack = new Error().stack?.split("\n").filter((line, i) => i === 0 || !line.includes("captureException")).join("\n");
       span.addEvent("exception", {
-        "exception.type": isError ? error.name : "Error",
+        "exception.type": isErr ? error.name : "Error",
         "exception.message": message,
-        ...stack ? { "exception.stacktrace": activeRedactor.text(stack) } : {},
+        ...stack ? { "exception.stacktrace": redactor.text(stack) } : {},
         ...redacted["autter.handled"] === true ? { "autter.handled": true, "autter.sampled": redacted["autter.sampled"] === true } : {},
-        ...declared
+        ...declared,
+        ...breadcrumbEventAttributes(redactor.text, error)
       });
     }
     span.setStatus({ code: SpanStatusCode.ERROR, message });
@@ -1469,15 +1789,16 @@ function initAutterServer(options) {
     }
     telemetryStats.markCaptured();
     const stack = new Error().stack?.split("\n").filter((line, i) => i === 0 || !line.includes("captureMessage")).join("\n");
-    const safeMessage = activeRedactor.text(message);
+    const safeMessage = redactor.text(message);
     const span = errorTracer.startSpan("Message", {
-      attributes: { "autter.severity": severity, ...activeRedactor(attributes) }
+      attributes: { "autter.severity": severity, ...redactor(attributes) }
     });
     span.addEvent("exception", {
       "exception.type": "Message",
       "exception.message": safeMessage,
-      ...stack ? { "exception.stacktrace": activeRedactor.text(stack) } : {},
-      "autter.severity": severity
+      ...stack ? { "exception.stacktrace": redactor.text(stack) } : {},
+      "autter.severity": severity,
+      ...breadcrumbEventAttributes(redactor.text)
     });
     span.setStatus({ code: SpanStatusCode.ERROR, message: safeMessage });
     span.end();
@@ -1488,11 +1809,11 @@ function initAutterServer(options) {
     const activeSpan = trace2.getActiveSpan();
     const reuseActive = activeSpan?.isRecording() === true;
     const span = reuseActive ? activeSpan : errorTracer.startSpan("OutcomeFailure");
-    const safeOutcome = activeRedactor({ "autter.outcome.name": name.slice(0, 200), "autter.outcome.message": message.slice(0, 1e3) });
+    const safeOutcome = redactor({ "autter.outcome.name": name.slice(0, 200), "autter.outcome.message": message.slice(0, 1e3) });
     const safeName = String(safeOutcome["autter.outcome.name"] ?? "operation");
     const safeMessage = String(safeOutcome["autter.outcome.message"] ?? "failed");
     span.addEvent("autter.outcome", {
-      ...activeRedactor(attributes),
+      ...redactor(attributes),
       "autter.outcome.status": "error",
       "autter.outcome.name": safeName,
       "autter.outcome.message": safeMessage
@@ -1508,17 +1829,26 @@ function initAutterServer(options) {
     distro,
     release: options.release,
     options: options.logging,
-    redact: activeRedactor,
-    run: (name, fn, attributes, links) => runWithSpan(processTracer, name, fn, activeRedactor(attributes), links),
+    redact: redactor,
+    run: (name, fn, attributes, links) => runWithSpan(processTracer, name, fn, redactor(attributes), links),
     reportOutcome: reportOutcome2
   });
-  hookRequests = options.logging?.requests === true;
+  S.hookRequests = options.logging?.requests === true;
+  let onCrash = null;
+  let uninstallRejections = null;
   if (options.captureGlobalErrors !== false) {
-    process.on("uncaughtExceptionMonitor", (err) => {
+    onCrash = (err) => {
+      if (recordedAsRejection(err)) return;
       captureException2(err, { "autter.unhandled": true });
       if (options.autoFlush === false) void Promise.resolve(flushTarget.forceFlush()).catch(() => {
       });
-    });
+    };
+    process.on("uncaughtExceptionMonitor", onCrash);
+    if (options.captureUnhandledRejections !== false) {
+      uninstallRejections = installUnhandledRejectionCapture(
+        (reason) => captureException2(reason, { "autter.unhandled_rejection": true })
+      );
+    }
   }
   const flushTarget = {
     forceFlush: async () => {
@@ -1546,15 +1876,20 @@ function initAutterServer(options) {
     captureException: captureException2,
     captureMessage: captureMessage2,
     reportOutcome: reportOutcome2,
-    withProcessSpan: (name, fn, attributes) => runWithSpan(processTracer, name, fn, activeRedactor(attributes)),
+    withProcessSpan: (name, fn, attributes) => runWithSpan(processTracer, name, fn, redactor(attributes)),
     withLlmCall: (info, fn) => runLlmSpan(llmTracer, info, fn),
     trackLlmCall: (call) => recordLlmCall(llmTracer, call),
     shutdown: async () => {
       const logShutdown = await Promise.allSettled([shutdownRuntimeLogger()]);
-      hookRequests = false;
+      if (onCrash) process.off("uncaughtExceptionMonitor", onCrash);
+      uninstallRejections?.();
       stopMemoryMetrics?.();
-      active = null;
-      activeAlwaysOnProvider = null;
+      if (S.active === server) {
+        S.active = null;
+        S.alwaysOnProvider = null;
+        S.hookRequests = false;
+        S.redactor = makeRedactor(true);
+      }
       autoFlushHandle?.dispose();
       autoFlushHandle = null;
       unregisterFlushTargets();
@@ -1563,75 +1898,81 @@ function initAutterServer(options) {
       if (logShutdown[0]?.status === "rejected") throw logShutdown[0].reason;
     }
   };
-  active = server;
-  activeAlwaysOnProvider = alwaysOnProvider;
+  S.active = server;
+  S.alwaysOnProvider = alwaysOnProvider;
   return server;
 }
 function captureException(error, attributes) {
-  if (active) {
-    active.captureException(error, attributes);
+  if (S.active) {
+    S.active.captureException(error, attributes);
     return;
   }
-  if (loggerOnlyCapture) {
-    loggerOnlyCapture(error, attributes);
+  if (S.loggerOnlyCapture) {
+    S.loggerOnlyCapture(error, attributes);
     return;
   }
   markCaptured(error);
   noteOperationError(error);
-  notifyException(error, attributes);
-  const span = trace2.getTracer("autter-errors").startSpan(error instanceof Error ? error.name : "Error", {
-    attributes: activeRedactor(attributes)
+  const split = splitFingerprint(attributes);
+  const fingerprint = fingerprintEventAttributes(split.fingerprint, S.redactor.text);
+  notifyException(error, { ...split.attributes, ...fingerprint });
+  const span = trace2.getTracer("autter-errors").startSpan(isError(error) ? error.name : "Error", {
+    attributes: { ...S.redactor(split.attributes), ...fingerprint }
   });
   recordError(span, error);
   span.end();
 }
-var loggerOnlyCapture = null;
 function setLoggerOnlyCapture(fn) {
-  loggerOnlyCapture = fn;
+  S.loggerOnlyCapture = fn;
 }
 function serverActive() {
-  return active !== null;
+  return S.active !== null;
 }
-setRequestExceptionCapturer((error) => captureException(error));
+setRequestExceptionCapturer((error, attributes) => captureException(error, attributes));
+setRequestSpanAnnotator((attributes) => {
+  const span = trace2.getActiveSpan();
+  if (span?.isRecording()) span.setAttributes(S.redactor(splitFingerprint(attributes).attributes));
+});
 function withProcessSpan(name, fn, attributes) {
-  if (active) return active.withProcessSpan(name, fn, attributes);
+  if (S.active) return S.active.withProcessSpan(name, fn, attributes);
   return runWithSpan(
     trace2.getTracer("autter-processes"),
     name,
     fn,
-    activeRedactor(attributes)
+    S.redactor(attributes)
   );
 }
 function withLlmCall(info, fn) {
-  if (active) return active.withLlmCall(info, fn);
+  if (S.active) return S.active.withLlmCall(info, fn);
   return runLlmSpan(trace2.getTracer("autter-llm"), info, fn);
 }
 function trackLlmCall(call) {
-  if (active) {
-    active.trackLlmCall(call);
+  if (S.active) {
+    S.active.trackLlmCall(call);
     return;
   }
   recordLlmCall(trace2.getTracer("autter-llm"), call);
 }
 function captureMessage(message, severity = "warning", attributes) {
-  if (active) {
-    active.captureMessage(message, severity, attributes);
+  if (S.active) {
+    S.active.captureMessage(message, severity, attributes);
     return;
   }
-  const safeMessage = activeRedactor.text(message);
+  const safeMessage = S.redactor.text(message);
   const span = trace2.getTracer("autter-errors").startSpan("Message", {
-    attributes: { "autter.severity": severity, ...activeRedactor(attributes) }
+    attributes: { "autter.severity": severity, ...S.redactor(attributes) }
   });
   span.addEvent("exception", {
     "exception.type": "Message",
     "exception.message": safeMessage,
-    "autter.severity": severity
+    "autter.severity": severity,
+    ...breadcrumbEventAttributes(S.redactor.text)
   });
   span.setStatus({ code: SpanStatusCode.ERROR, message: safeMessage });
   span.end();
 }
 function reportOutcome(name, message, attributes) {
-  if (active) return active.reportOutcome(name, message, attributes);
+  if (S.active) return S.active.reportOutcome(name, message, attributes);
   const span = trace2.getTracer("autter-outcomes").startSpan("OutcomeFailure");
   const safeOutcome = redactAttributes({ "autter.outcome.name": name.slice(0, 200), "autter.outcome.message": message.slice(0, 1e3) });
   const safeName = String(safeOutcome["autter.outcome.name"] ?? "operation");
@@ -1653,13 +1994,13 @@ function makeSafeCapture(options) {
   };
 }
 function alwaysOnTracer(name) {
-  return activeAlwaysOnProvider ? activeAlwaysOnProvider.getTracer(name) : trace2.getTracer(name);
+  return S.alwaysOnProvider ? S.alwaysOnProvider.getTracer(name) : trace2.getTracer(name);
 }
 function autterLlmTracer() {
   return alwaysOnTracer("autter-llm");
 }
 async function emitLlmSelftestTrace() {
-  const provider = activeAlwaysOnProvider;
+  const provider = S.alwaysOnProvider;
   if (!provider) {
     throw new Error(
       "emitLlmSelftestTrace() requires initAutterServer() to have been called"
@@ -1917,14 +2258,14 @@ function startCaughtExceptionSampler(options = {}) {
   const rate = Math.max(0, Math.min(1, options.sampleRate ?? 0.01));
   const cap = Math.max(1, Math.min(100, options.maxPerMinute ?? 10));
   const session = new inspector.Session();
-  let active2 = true;
+  let active = true;
   let minute = 0;
   let sent = 0;
   session.connect();
   session.on("Debugger.paused", (message) => {
     session.post("Debugger.resume", () => {
     });
-    if (!active2 || message.params.reason !== "exception") return;
+    if (!active || message.params.reason !== "exception") return;
     const nowMinute = Math.floor(Date.now() / 6e4);
     if (nowMinute !== minute) {
       minute = nowMinute;
@@ -1939,30 +2280,66 @@ function startCaughtExceptionSampler(options = {}) {
     error.stack = `${error.name}: ${error.message}
 ${frames.join("\n")}`;
     queueMicrotask(() => {
-      if (active2) captureException(error, { "autter.handled": true, "autter.sampled": true });
+      if (active) captureException(error, { "autter.handled": true, "autter.sampled": true });
     });
   });
   session.post("Debugger.enable", (error) => {
-    if (!error && active2) session.post("Debugger.setPauseOnExceptions", { state: "all" }, () => {
+    if (!error && active) session.post("Debugger.setPauseOnExceptions", { state: "all" }, () => {
     });
   });
   return { stop() {
-    if (!active2) return;
-    active2 = false;
+    if (!active) return;
+    active = false;
     session.post("Debugger.setPauseOnExceptions", { state: "none" }, () => {
       session.post("Debugger.disable", () => session.disconnect());
     });
   } };
 }
 
+// src/framework-errors.ts
+function recordBoundaryError(error, req, rule) {
+  try {
+    const state = requestStateOf(req);
+    if (state) noteOperationError(error, false, state);
+    captureAtBoundary(error, state, rule);
+  } catch {
+  }
+}
+function autterErrorHandler(options = {}) {
+  return function autterErrorHandlerMiddleware(error, req, _res, next) {
+    recordBoundaryError(error, req, options.capture);
+    next(error);
+  };
+}
+function autterFastifyErrors(fastify, options, done) {
+  const rule = options?.capture;
+  fastify.addHook("onError", ((request, _reply, error, next) => {
+    recordBoundaryError(error, request?.raw, rule);
+    next();
+  }));
+  done?.();
+}
+autterFastifyErrors[/* @__PURE__ */ Symbol.for("skip-override")] = true;
+autterFastifyErrors[/* @__PURE__ */ Symbol.for("fastify.display-name")] = "autter-runtime-errors";
+function autterKoa(options = {}) {
+  return async function autterKoaMiddleware(ctx, next) {
+    try {
+      await next();
+    } catch (error) {
+      recordBoundaryError(error, ctx?.req, options.capture);
+      throw error;
+    }
+  };
+}
+
 // src/logging-only.ts
 import {
   SpanStatusCode as SpanStatusCode3,
   trace as trace3
 } from "@opentelemetry/api";
-var activeLogging = null;
+var L = sharedSlot("logging", () => ({ active: null }));
 function initAutterLogging(options) {
-  if (activeLogging) return activeLogging;
+  if (L.active) return L.active;
   if (serverActive()) {
     console.warn(
       "[autter-runtime] initAutterLogging() ignored: initAutterServer() is already active and includes logging"
@@ -1982,14 +2359,16 @@ function initAutterLogging(options) {
   debugLog(`initialising logger-only service=${options.service} endpoint=${endpoint}`);
   function captureException2(error, attributes) {
     markCaptured(error);
-    const redacted = redact(attributes);
+    const split = splitFingerprint(attributes);
+    const fingerprint = fingerprintEventAttributes(split.fingerprint, redact.text);
+    const redacted = redact(split.attributes);
     const span = trace3.getActiveSpan();
     if (mode === "auto" && span?.isRecording()) {
       noteOperationError(error);
-      notifyException(error, redacted);
+      notifyException(error, { ...redacted, ...fingerprint });
       span.setAttributes({ "autter.severity": "error", ...redacted, ...structuredErrorAttributes(error) });
-      const declared = errorAttributes(error);
-      if (error instanceof Error) {
+      const declared = { ...errorAttributes(error), ...fingerprint };
+      if (isError(error)) {
         span.addEvent("exception", {
           "exception.type": error.name,
           "exception.message": error.message,
@@ -2005,12 +2384,12 @@ function initAutterLogging(options) {
       }
       span.setStatus({
         code: SpanStatusCode3.ERROR,
-        message: error instanceof Error ? error.message : String(error)
+        message: isError(error) ? error.message : String(error)
       });
       return;
     }
-    notifyException(error, redacted);
-    captureExceptionAsLog(error, redacted);
+    notifyException(error, { ...redacted, ...fingerprint });
+    captureExceptionAsLog(error, { ...redacted, ...fingerprint });
   }
   const captured = /* @__PURE__ */ new WeakSet();
   configureRuntimeLogger({
@@ -2037,9 +2416,18 @@ function initAutterLogging(options) {
     }
   });
   setLoggerOnlyCapture(captureException2);
-  const onCrash = (error) => captureException2(error, { "autter.unhandled": true });
-  if (options.captureGlobalErrors !== false)
+  const onCrash = (error) => {
+    if (recordedAsRejection(error)) return;
+    captureException2(error, { "autter.unhandled": true });
+  };
+  let uninstallRejections = null;
+  if (options.captureGlobalErrors !== false) {
     process.on("uncaughtExceptionMonitor", onCrash);
+    if (options.captureUnhandledRejections !== false)
+      uninstallRejections = installUnhandledRejectionCapture(
+        (reason) => captureException2(reason, { "autter.unhandled_rejection": true })
+      );
+  }
   registerFlushTarget("logging", { forceFlush: () => flushRuntimeLogs() });
   let autoFlushHandle = options.autoFlush === false ? null : installAutterAutoFlush();
   const handle = {
@@ -2047,15 +2435,17 @@ function initAutterLogging(options) {
     flush: flushRuntimeLogs,
     shutdown: async () => {
       process.off("uncaughtExceptionMonitor", onCrash);
+      uninstallRejections?.();
+      uninstallRejections = null;
       setLoggerOnlyCapture(null);
       autoFlushHandle?.dispose();
       autoFlushHandle = null;
       unregisterFlushTargets();
-      activeLogging = null;
+      if (L.active === handle) L.active = null;
       await shutdownRuntimeLogger();
     }
   };
-  activeLogging = handle;
+  L.active = handle;
   return handle;
 }
 
@@ -2152,11 +2542,16 @@ export {
   INGESTER_VERSION_HEADER,
   RuntimeError,
   SDK_IDENTITY,
+  addBreadcrumb,
+  autterErrorHandler,
   autterErrorResponse,
   autterFastify,
+  autterFastifyErrors,
+  autterKoa,
   autterRequests,
   captureException,
   captureMessage,
+  captureRequestError,
   consoleSink,
   createBrowserRelayFetchHandler,
   createBrowserRelayHandler,
@@ -2191,6 +2586,7 @@ export {
   startCaughtExceptionSampler,
   toClientError,
   trackLlmCall,
+  unhandledRejectionsMode,
   withLlmCall,
   withProcessSpan,
   withRuntimeOperation,