@flareapp/node 0.4.0 → 0.6.0

package/README.md

@@ -67,9 +67,11 @@ http.createServer((req, res) => {
 When your authentication middleware resolves a user, attach it:
 
 ```ts
-flare.setUser({ id: user.id, email: user.email });
+flare.setUser({ id: user.id, email: user.email, fullName: user.name });
 ```
 
+Recognised fields: `id`, `email`, `fullName`, `ipAddress`. Extra keys are collected under `user.attributes`. `setUser` is scoped per request inside `runWithContext(...)`. Pass `null` to clear.
+
 You can also patch the request context after it was first set:
 
 ```ts

package/dist/index.cjs

@@ -305,9 +305,10 @@ function collectProcessAttributes() {
 *
 * 1. **Process info** — runtime version, pid, hostname, etc. Always present.
 * 2. **Active request scope** — method, path/url (with query-string keys
-*    redacted), headers (with the denylist applied), optional body, and
-*    authenticated user. Present when `runWithContext(...)` is active;
-*    falls back to the shared scope otherwise (no request attrs emitted then).
+*    redacted), headers (with the denylist applied), and optional body. Present
+*    when `runWithContext(...)` is active; falls back to the shared scope
+*    otherwise (no request attrs emitted then). User identity is no longer
+*    projected here: `Flare.setUser` writes it straight to `pendingAttributes`.
 *
 * Both `provider` and `getOptions` are passed in (not captured by reference to
 * concrete instances) so the closure stays decoupled from `NodeFlare`'s
@@ -323,8 +324,7 @@ function makeNodeContextCollector(provider, getOptions) {
 			"flare.entry_point.type": "server",
 			...collectProcessAttributes()
 		};
-		const scope = provider.active();
-		const { request } = scope;
+		const { request } = provider.active();
 		if (request.method) attrs["http.request.method"] = request.method;
 		if (request.path) {
 			const queryStart = request.path.indexOf("?");
@@ -344,12 +344,6 @@ function makeNodeContextCollector(provider, getOptions) {
 			const body = captureBody(request.body, contentType, opts);
 			if (body !== null) attrs["http.request.body"] = body;
 		}
-		if (scope.user) {
-			if (scope.user.id !== void 0) attrs["enduser.id"] = String(scope.user.id);
-			if (scope.user.email !== void 0) attrs["enduser.email"] = scope.user.email;
-			if (scope.user.username !== void 0) attrs["enduser.username"] = scope.user.username;
-			if (scope.user.ipAddress !== void 0) attrs["client.address"] = scope.user.ipAddress;
-		}
 		return attrs;
 	};
 }
@@ -482,7 +476,6 @@ var ProcessHandlerManager = class {
 //#region src/scope/NodeScope.ts
 var NodeScope = class extends _flareapp_core.Scope {
 	request = {};
-	user = null;
 };
 
 //#endregion
@@ -555,14 +548,6 @@ var AsyncLocalStorageScopeProvider = class {
 			...partial
 		};
 	}
-	/**
-	* Set the authenticated user on the current scope. Same in-scope vs
-	* fallback semantics as `mergeContext`.
-	*/
-	setUser(user) {
-		const scope = this.als.getStore() ?? this.fallback;
-		scope.user = user;
-	}
 };
 
 //#endregion
@@ -621,7 +606,7 @@ function isLocalFileUrl(url) {
 //#endregion
 //#region src/Flare.ts
 const NODE_SDK_NAME = "@flareapp/node";
-const NODE_SDK_VERSION = typeof process !== "undefined" && true ? "0.4.0" : "?";
+const NODE_SDK_VERSION = typeof process !== "undefined" && true ? "0.6.0" : "?";
 /**
 * Strip the `g` and `y` flags from a user-supplied regex.
 *
@@ -653,7 +638,7 @@ const DEFAULT_NODE_OPTIONS = {
 * Subclasses core's `Flare` and wires the Node-only seams in its constructor:
 *
 * - `AsyncLocalStorageScopeProvider` so each `runWithContext(...)` callback
-*   gets its own `NodeScope` (glows, attributes, user, entry-point, request),
+*   gets its own `NodeScope` (glows, attributes, entry-point, request),
 *   isolated from concurrent requests.
 * - `makeNodeContextCollector(...)` to project the current `NodeScope` and
 *   process info into report attributes (http.request.*, url.path, etc).
@@ -663,7 +648,7 @@ const DEFAULT_NODE_OPTIONS = {
 *   `unhandledRejection` listeners based on the current `NodeOptions`.
 *
 * Also adds Node-only API surface on top of core: `configureNode(...)`,
-* `runWithContext(...)`, `mergeContext(...)`, `setUser(...)`, `getContext()`,
+* `runWithContext(...)`, `mergeContext(...)`, `getContext()`,
 * `removeProcessListeners()`. Inherited core methods (`light`, `configure`,
 * `addContext`, `glow`, etc.) return `this`, so chaining keeps the
 * `NodeFlare` type and `configureNode(...)` stays callable mid-chain.
@@ -754,15 +739,6 @@ var NodeFlare = class extends _flareapp_core.Flare {
 		this.nodeScopeProvider.mergeContext(partial);
 	}
 	/**
-	* Attach an authenticated user to the active scope. Inside a request scope
-	* this is per-request; outside it lands on the fallback scope. The fields
-	* are projected to OTel-style keys (`enduser.id`, `enduser.email`,
-	* `enduser.username`, `client.address`) by the Node context collector.
-	*/
-	setUser(user) {
-		this.nodeScopeProvider.setUser(user);
-	}
-	/**
 	* Returns the request scope when called inside `runWithContext(...)`, or
 	* `null` outside. Intentionally returns `null` (not the fallback scope)
 	* when no request is active, so callers can distinguish "we are inside a

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { AttributeValue, Attributes, Config, ContextCollector, DEFAULT_URL_DENYLIST, EntryPointHandler, FileReader, Flare, Flare as Flare$1, FlushFn, FlushScheduler, Framework, GlobalScopeProvider, Glow, Logger, MessageLevel, NullFileReader, OverriddenGrouping, Report, Scope, Scope as Scope$1, ScopeProvider, SdkInfo, SpanEvent, StackFrame, convertToError, redactUrlQuery, resolveDenylist } from "@flareapp/core";
+import { AttributeValue, Attributes, Config, ContextCollector, DEFAULT_URL_DENYLIST, EntryPointHandler, FileReader, Flare, Flare as Flare$1, FlushFn, FlushScheduler, Framework, GlobalScopeProvider, Glow, Logger, MessageLevel, NullFileReader, OverriddenGrouping, Report, Scope, Scope as Scope$1, ScopeProvider, SdkInfo, SpanEvent, StackFrame, User, convertToError, redactUrlQuery, resolveDenylist } from "@flareapp/core";
 
 //#region src/types.d.ts
 type RequestContext = {
@@ -8,12 +8,6 @@ type RequestContext = {
   headers?: Record<string, string | string[] | undefined>;
   body?: unknown;
 };
-type User = {
-  id?: string | number;
-  email?: string;
-  username?: string;
-  ipAddress?: string;
-};
 type FatalMode = 'off' | 'report' | 'report-and-exit';
 type NodeOptions = {
   uncaughtExceptionMode?: FatalMode;
@@ -31,7 +25,6 @@ type NodeOptions = {
 //#region src/scope/NodeScope.d.ts
 declare class NodeScope extends Scope$1 {
   request: RequestContext;
-  user: User | null;
 }
 //#endregion
 //#region src/Flare.d.ts
@@ -41,7 +34,7 @@ declare class NodeScope extends Scope$1 {
  * Subclasses core's `Flare` and wires the Node-only seams in its constructor:
  *
  * - `AsyncLocalStorageScopeProvider` so each `runWithContext(...)` callback
- *   gets its own `NodeScope` (glows, attributes, user, entry-point, request),
+ *   gets its own `NodeScope` (glows, attributes, entry-point, request),
  *   isolated from concurrent requests.
  * - `makeNodeContextCollector(...)` to project the current `NodeScope` and
  *   process info into report attributes (http.request.*, url.path, etc).
@@ -51,7 +44,7 @@ declare class NodeScope extends Scope$1 {
  *   `unhandledRejection` listeners based on the current `NodeOptions`.
  *
  * Also adds Node-only API surface on top of core: `configureNode(...)`,
- * `runWithContext(...)`, `mergeContext(...)`, `setUser(...)`, `getContext()`,
+ * `runWithContext(...)`, `mergeContext(...)`, `getContext()`,
  * `removeProcessListeners()`. Inherited core methods (`light`, `configure`,
  * `addContext`, `glow`, etc.) return `this`, so chaining keeps the
  * `NodeFlare` type and `configureNode(...)` stays callable mid-chain.
@@ -107,13 +100,6 @@ declare class NodeFlare extends Flare$1 {
    * request scope but is NOT inherited by future `runWithContext(...)` calls.
    */
   mergeContext(partial: Partial<RequestContext>): void;
-  /**
-   * Attach an authenticated user to the active scope. Inside a request scope
-   * this is per-request; outside it lands on the fallback scope. The fields
-   * are projected to OTel-style keys (`enduser.id`, `enduser.email`,
-   * `enduser.username`, `client.address`) by the Node context collector.
-   */
-  setUser(user: User | null): void;
   /**
    * Returns the request scope when called inside `runWithContext(...)`, or
    * `null` outside. Intentionally returns `null` (not the fallback scope)

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { AttributeValue, Attributes, Config, ContextCollector, DEFAULT_URL_DENYLIST, EntryPointHandler, FileReader, Flare, Flare as Flare$1, FlushFn, FlushScheduler, Framework, GlobalScopeProvider, Glow, Logger, MessageLevel, NullFileReader, OverriddenGrouping, Report, Scope, Scope as Scope$1, ScopeProvider, SdkInfo, SpanEvent, StackFrame, convertToError, redactUrlQuery, resolveDenylist } from "@flareapp/core";
+import { AttributeValue, Attributes, Config, ContextCollector, DEFAULT_URL_DENYLIST, EntryPointHandler, FileReader, Flare, Flare as Flare$1, FlushFn, FlushScheduler, Framework, GlobalScopeProvider, Glow, Logger, MessageLevel, NullFileReader, OverriddenGrouping, Report, Scope, Scope as Scope$1, ScopeProvider, SdkInfo, SpanEvent, StackFrame, User, convertToError, redactUrlQuery, resolveDenylist } from "@flareapp/core";
 
 //#region src/types.d.ts
 type RequestContext = {
@@ -8,12 +8,6 @@ type RequestContext = {
   headers?: Record<string, string | string[] | undefined>;
   body?: unknown;
 };
-type User = {
-  id?: string | number;
-  email?: string;
-  username?: string;
-  ipAddress?: string;
-};
 type FatalMode = 'off' | 'report' | 'report-and-exit';
 type NodeOptions = {
   uncaughtExceptionMode?: FatalMode;
@@ -31,7 +25,6 @@ type NodeOptions = {
 //#region src/scope/NodeScope.d.ts
 declare class NodeScope extends Scope$1 {
   request: RequestContext;
-  user: User | null;
 }
 //#endregion
 //#region src/Flare.d.ts
@@ -41,7 +34,7 @@ declare class NodeScope extends Scope$1 {
  * Subclasses core's `Flare` and wires the Node-only seams in its constructor:
  *
  * - `AsyncLocalStorageScopeProvider` so each `runWithContext(...)` callback
- *   gets its own `NodeScope` (glows, attributes, user, entry-point, request),
+ *   gets its own `NodeScope` (glows, attributes, entry-point, request),
  *   isolated from concurrent requests.
  * - `makeNodeContextCollector(...)` to project the current `NodeScope` and
  *   process info into report attributes (http.request.*, url.path, etc).
@@ -51,7 +44,7 @@ declare class NodeScope extends Scope$1 {
  *   `unhandledRejection` listeners based on the current `NodeOptions`.
  *
  * Also adds Node-only API surface on top of core: `configureNode(...)`,
- * `runWithContext(...)`, `mergeContext(...)`, `setUser(...)`, `getContext()`,
+ * `runWithContext(...)`, `mergeContext(...)`, `getContext()`,
  * `removeProcessListeners()`. Inherited core methods (`light`, `configure`,
  * `addContext`, `glow`, etc.) return `this`, so chaining keeps the
  * `NodeFlare` type and `configureNode(...)` stays callable mid-chain.
@@ -107,13 +100,6 @@ declare class NodeFlare extends Flare$1 {
    * request scope but is NOT inherited by future `runWithContext(...)` calls.
    */
   mergeContext(partial: Partial<RequestContext>): void;
-  /**
-   * Attach an authenticated user to the active scope. Inside a request scope
-   * this is per-request; outside it lands on the fallback scope. The fields
-   * are projected to OTel-style keys (`enduser.id`, `enduser.email`,
-   * `enduser.username`, `client.address`) by the Node context collector.
-   */
-  setUser(user: User | null): void;
   /**
    * Returns the request scope when called inside `runWithContext(...)`, or
    * `null` outside. Intentionally returns `null` (not the fallback scope)

package/dist/index.mjs

@@ -276,9 +276,10 @@ function collectProcessAttributes() {
 *
 * 1. **Process info** — runtime version, pid, hostname, etc. Always present.
 * 2. **Active request scope** — method, path/url (with query-string keys
-*    redacted), headers (with the denylist applied), optional body, and
-*    authenticated user. Present when `runWithContext(...)` is active;
-*    falls back to the shared scope otherwise (no request attrs emitted then).
+*    redacted), headers (with the denylist applied), and optional body. Present
+*    when `runWithContext(...)` is active; falls back to the shared scope
+*    otherwise (no request attrs emitted then). User identity is no longer
+*    projected here: `Flare.setUser` writes it straight to `pendingAttributes`.
 *
 * Both `provider` and `getOptions` are passed in (not captured by reference to
 * concrete instances) so the closure stays decoupled from `NodeFlare`'s
@@ -294,8 +295,7 @@ function makeNodeContextCollector(provider, getOptions) {
 			"flare.entry_point.type": "server",
 			...collectProcessAttributes()
 		};
-		const scope = provider.active();
-		const { request } = scope;
+		const { request } = provider.active();
 		if (request.method) attrs["http.request.method"] = request.method;
 		if (request.path) {
 			const queryStart = request.path.indexOf("?");
@@ -315,12 +315,6 @@ function makeNodeContextCollector(provider, getOptions) {
 			const body = captureBody(request.body, contentType, opts);
 			if (body !== null) attrs["http.request.body"] = body;
 		}
-		if (scope.user) {
-			if (scope.user.id !== void 0) attrs["enduser.id"] = String(scope.user.id);
-			if (scope.user.email !== void 0) attrs["enduser.email"] = scope.user.email;
-			if (scope.user.username !== void 0) attrs["enduser.username"] = scope.user.username;
-			if (scope.user.ipAddress !== void 0) attrs["client.address"] = scope.user.ipAddress;
-		}
 		return attrs;
 	};
 }
@@ -453,7 +447,6 @@ var ProcessHandlerManager = class {
 //#region src/scope/NodeScope.ts
 var NodeScope = class extends Scope$1 {
 	request = {};
-	user = null;
 };
 
 //#endregion
@@ -526,14 +519,6 @@ var AsyncLocalStorageScopeProvider = class {
 			...partial
 		};
 	}
-	/**
-	* Set the authenticated user on the current scope. Same in-scope vs
-	* fallback semantics as `mergeContext`.
-	*/
-	setUser(user) {
-		const scope = this.als.getStore() ?? this.fallback;
-		scope.user = user;
-	}
 };
 
 //#endregion
@@ -592,7 +577,7 @@ function isLocalFileUrl(url) {
 //#endregion
 //#region src/Flare.ts
 const NODE_SDK_NAME = "@flareapp/node";
-const NODE_SDK_VERSION = typeof process !== "undefined" && true ? "0.4.0" : "?";
+const NODE_SDK_VERSION = typeof process !== "undefined" && true ? "0.6.0" : "?";
 /**
 * Strip the `g` and `y` flags from a user-supplied regex.
 *
@@ -624,7 +609,7 @@ const DEFAULT_NODE_OPTIONS = {
 * Subclasses core's `Flare` and wires the Node-only seams in its constructor:
 *
 * - `AsyncLocalStorageScopeProvider` so each `runWithContext(...)` callback
-*   gets its own `NodeScope` (glows, attributes, user, entry-point, request),
+*   gets its own `NodeScope` (glows, attributes, entry-point, request),
 *   isolated from concurrent requests.
 * - `makeNodeContextCollector(...)` to project the current `NodeScope` and
 *   process info into report attributes (http.request.*, url.path, etc).
@@ -634,7 +619,7 @@ const DEFAULT_NODE_OPTIONS = {
 *   `unhandledRejection` listeners based on the current `NodeOptions`.
 *
 * Also adds Node-only API surface on top of core: `configureNode(...)`,
-* `runWithContext(...)`, `mergeContext(...)`, `setUser(...)`, `getContext()`,
+* `runWithContext(...)`, `mergeContext(...)`, `getContext()`,
 * `removeProcessListeners()`. Inherited core methods (`light`, `configure`,
 * `addContext`, `glow`, etc.) return `this`, so chaining keeps the
 * `NodeFlare` type and `configureNode(...)` stays callable mid-chain.
@@ -725,15 +710,6 @@ var NodeFlare = class extends Flare$1 {
 		this.nodeScopeProvider.mergeContext(partial);
 	}
 	/**
-	* Attach an authenticated user to the active scope. Inside a request scope
-	* this is per-request; outside it lands on the fallback scope. The fields
-	* are projected to OTel-style keys (`enduser.id`, `enduser.email`,
-	* `enduser.username`, `client.address`) by the Node context collector.
-	*/
-	setUser(user) {
-		this.nodeScopeProvider.setUser(user);
-	}
-	/**
 	* Returns the request scope when called inside `runWithContext(...)`, or
 	* `null` outside. Intentionally returns `null` (not the fallback scope)
 	* when no request is active, so callers can distinguish "we are inside a

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@flareapp/node",
-    "version": "0.4.0",
+    "version": "0.6.0",
     "description": "Node.js SDK for flareapp.io",
     "homepage": "https://flareapp.io",
     "bugs": {
@@ -44,7 +44,7 @@
         "release": "release-it"
     },
     "dependencies": {
-        "@flareapp/core": "2.5.0"
+        "@flareapp/core": "2.6.0"
     },
     "devDependencies": {
         "tsdown": "^0.20.3",