@genn-inc/cluebase-frontend-sdk 0.0.1 → 0.0.2

package/dist/instrumentation/action.js

@@ -35,7 +35,7 @@ const ensureCssEscape = () => {
         },
     });
 };
-const emitElementClicked = (context, target, occurredAtMs) => {
+const emitElementClicked = (context, target, occurredAtMs, event) => {
     const displayTarget = resolveClickDisplayTarget(target);
     if (context.shouldIgnoreElement?.(displayTarget)) {
         return;
@@ -92,6 +92,7 @@ const emitElementClicked = (context, target, occurredAtMs) => {
             ...buildScreenActionNamingEvidence(displayTarget),
         },
     });
+    context.bindEventContext?.(event);
     maybeEmitAriaToggleChanged(context, displayTarget);
 };
 const maybeEmitAriaToggleChanged = (context, element) => {
@@ -156,7 +157,7 @@ export const startActionCapture = (context) => {
             return;
         }
         try {
-            emitElementClicked(context, event.target, Date.now());
+            emitElementClicked(context, event.target, Date.now(), event);
         }
         catch (error) {
             context.onInternalError("capture/action:click", error);

package/dist/instrumentation/cluebase-authored-attributes.d.ts

@@ -1,4 +1,2 @@
-/** 部品自身が測った値（文字列など）の属性名。 */
 export declare function cluebaseAuthoredPropertyAttribute(name: string): string;
-/** 部品自身が測った値（数値）の属性名。 */
 export declare function cluebaseAuthoredMetricAttribute(name: string): string;

package/dist/instrumentation/cluebase-authored-attributes.js

@@ -1,32 +1,9 @@
-/**
- * 配る部品**自身が測った値**を封筒に載せる時の、属性の名前。
- *
- * 顧客が `track` で付けた項目は `cluebase.properties.<綴り>` /
- * `cluebase.metrics.<綴り>` という封筒で運ばれます。**配る部品も同じ封筒を使う**
- * ため、封筒を開けた受け口から見ると、顧客が名付けた業務項目と、部品が測った
- * 値の区別が付きません。
- *
- * 実際にそれが起きました。分析が `duration_ms` を顧客の業務項目だと解釈し、
- * 利用者へ**「duration_ms を測りました」**と答えました（実測 2026-08-15）。
- *
- * そこで、部品が測った値は封筒の中で**予約された名前**（`cluebase.` で始まる）を
- * 名乗ります。顧客の項目がこの接頭辞を持つことはないため、封筒を開けた時点で
- * 混ざりません。**顧客が偶然 `request_kind` という業務項目を送ってきても、
- * それは顧客のものとして扱われます。**
- *
- * **受け口側で名前を付け替えていません。** 付け替える形にすると、受け口が
- * 「部品が送る綴り」の一覧を持つことになり、その一覧が古くなります
- * （`CLAUDE.md` §0.2）。**名乗るのは名付けた側の責任です。**
- */
 const RESERVED_FIELD_KEY_PREFIX = "cluebase.";
-/** 顧客の項目が運ばれる封筒。部品が測った値も同じ封筒を使う。 */
 const PROPERTY_ENVELOPE_PREFIX = "cluebase.properties.";
 const METRIC_ENVELOPE_PREFIX = "cluebase.metrics.";
-/** 部品自身が測った値（文字列など）の属性名。 */
 export function cluebaseAuthoredPropertyAttribute(name) {
     return `${PROPERTY_ENVELOPE_PREFIX}${RESERVED_FIELD_KEY_PREFIX}${name}`;
 }
-/** 部品自身が測った値（数値）の属性名。 */
 export function cluebaseAuthoredMetricAttribute(name) {
     return `${METRIC_ENVELOPE_PREFIX}${RESERVED_FIELD_KEY_PREFIX}${name}`;
 }

package/dist/instrumentation/common.d.ts

@@ -1,73 +1,10 @@
-/**
- * Shared instrumentation helpers used across multiple capture modules
- * (network, performance, navigation, etc.).
- *
- * The most important contract here is URL sanitization for any payload
- * that may carry the user's current browsing URL. The page URL must never
- * be emitted with query string intact, because OAuth callback /
- * password-reset / magic-link flows place secret tokens in the query
- * string. Any instrumentation module that needs a "page URL" field on
- * its outgoing event payload MUST go through `currentPageUrl()` here.
- *
- * Previously `instrumentation/performance.ts` emitted
- * `pageUrl: window.location.href` directly while
- * `instrumentation/network.ts` had its own internal stripping helper.
- * This module unifies the behavior so all callers share a single
- * implementation and a single test surface.
- */
-/**
- * Resolves `value` to a URL, falling back to the current document
- * location for relative URLs. Returns `null` if neither parsing succeeds.
- */
 export declare const resolveUrlAgainstCurrentLocation: (value: string) => URL | null;
-/**
- * Strips the query string and hash from the given URL, returning
- * `origin + pathname` only. Falls back to a `split("?")` form if URL
- * parsing fails so callers never receive a query-bearing string.
- *
- * The query string is the primary leak surface for OAuth callbacks
- * (`?code=...&state=...`) and password reset links (`?token=...`).
- */
 export declare const stripQueryFromUrl: (url: string) => string;
-/**
- * Returns the current page URL with all query parameters and hash
- * fragments stripped. Returns `null` if `globalThis.location` is not
- * available (e.g., non-browser environments).
- *
- * THIS IS THE ONLY APPROVED WAY TO POPULATE A `pageUrl` FIELD ON ANY
- * INSTRUMENTATION EVENT PAYLOAD. Do not use `window.location.href`
- * directly.
- */
 export declare const currentPageUrl: () => string | null;
-/**
- * Single sentinel marker used by Cluebase-owned History API wrappers. OTel-owned
- * navigation instrumentation may patch history independently and must remain
- * the primary navigation source.
- */
 export declare const HISTORY_WRAPPED_MARKER: "__cluebaseHistoryWrapped";
-/**
- * Type guard for a history.pushState / replaceState function that
- * carries the unified Cluebase sentinel marker. Use this in any module
- * that monkey-patches the History API.
- */
 export type HistoryWrappedFn<T extends History["pushState"] | History["replaceState"] = History["pushState"] | History["replaceState"]> = T & {
     [HISTORY_WRAPPED_MARKER]?: true;
 };
-/**
- * Returns true if either history.pushState or history.replaceState
- * is already Cluebase-wrapped.
- */
-/**
- * 差し替え済みかを見る側が、履歴の口に実際に求めるもの。
- *
- * **`History` 全体を求めていました。** ここで読むのは 2 つだけなので、試験の
- * 作り物は `as unknown as History` で嘘をつくしかない状態でした（`tests/README.md` §10）。
- */
 export type WrappableHistory = Pick<History, "pushState" | "replaceState">;
 export declare const isHistoryAlreadyCluebaseWrapped: (historyApi: WrappableHistory) => boolean;
-/**
- * 画面操作 1 種類を指す安定キー。意味層は操作の identity 単位で行動名を付けるため、
- * 通信経路 (method / path) を持たない画面操作にも同じ粒度の識別子が要る。
- * 画面と操作対象の安定キーの組で「どの画面のどの操作か」を表す。
- */
 export declare const buildPrimaryActionKey: (screenKey: string | null | undefined, targetStableKey: string | null | undefined) => string | null;

package/dist/instrumentation/common.js

@@ -1,24 +1,3 @@
-/**
- * Shared instrumentation helpers used across multiple capture modules
- * (network, performance, navigation, etc.).
- *
- * The most important contract here is URL sanitization for any payload
- * that may carry the user's current browsing URL. The page URL must never
- * be emitted with query string intact, because OAuth callback /
- * password-reset / magic-link flows place secret tokens in the query
- * string. Any instrumentation module that needs a "page URL" field on
- * its outgoing event payload MUST go through `currentPageUrl()` here.
- *
- * Previously `instrumentation/performance.ts` emitted
- * `pageUrl: window.location.href` directly while
- * `instrumentation/network.ts` had its own internal stripping helper.
- * This module unifies the behavior so all callers share a single
- * implementation and a single test surface.
- */
-/**
- * Resolves `value` to a URL, falling back to the current document
- * location for relative URLs. Returns `null` if neither parsing succeeds.
- */
 export const resolveUrlAgainstCurrentLocation = (value) => {
     try {
         return new URL(value);
@@ -38,14 +17,6 @@ export const resolveUrlAgainstCurrentLocation = (value) => {
         return null;
     }
 };
-/**
- * Strips the query string and hash from the given URL, returning
- * `origin + pathname` only. Falls back to a `split("?")` form if URL
- * parsing fails so callers never receive a query-bearing string.
- *
- * The query string is the primary leak surface for OAuth callbacks
- * (`?code=...&state=...`) and password reset links (`?token=...`).
- */
 export const stripQueryFromUrl = (url) => {
     try {
         const resolvedUrl = resolveUrlAgainstCurrentLocation(url);
@@ -58,33 +29,14 @@ export const stripQueryFromUrl = (url) => {
         return url.split("?")[0] ?? url;
     }
 };
-/**
- * Returns the current page URL with all query parameters and hash
- * fragments stripped. Returns `null` if `globalThis.location` is not
- * available (e.g., non-browser environments).
- *
- * THIS IS THE ONLY APPROVED WAY TO POPULATE A `pageUrl` FIELD ON ANY
- * INSTRUMENTATION EVENT PAYLOAD. Do not use `window.location.href`
- * directly.
- */
 export const currentPageUrl = () => {
     const href = globalThis.location?.href;
     return href ? stripQueryFromUrl(href) : null;
 };
-/**
- * Single sentinel marker used by Cluebase-owned History API wrappers. OTel-owned
- * navigation instrumentation may patch history independently and must remain
- * the primary navigation source.
- */
 export const HISTORY_WRAPPED_MARKER = "__cluebaseHistoryWrapped";
 export const isHistoryAlreadyCluebaseWrapped = (historyApi) => {
     const push = historyApi.pushState;
     const replace = historyApi.replaceState;
     return Boolean(push[HISTORY_WRAPPED_MARKER] || replace[HISTORY_WRAPPED_MARKER]);
 };
-/**
- * 画面操作 1 種類を指す安定キー。意味層は操作の identity 単位で行動名を付けるため、
- * 通信経路 (method / path) を持たない画面操作にも同じ粒度の識別子が要る。
- * 画面と操作対象の安定キーの組で「どの画面のどの操作か」を表す。
- */
 export const buildPrimaryActionKey = (screenKey, targetStableKey) => screenKey && targetStableKey ? `${screenKey}#${targetStableKey}` : null;

package/dist/instrumentation/dom.d.ts

@@ -5,40 +5,15 @@ export declare const getElementRole: (element: Element) => string | null;
 export declare const getElementPlaceholder: (element: Element) => string | null;
 export declare const getElementAriaLabel: (element: Element) => string | null;
 export declare const getElementSectionHeading: (element: Element) => string | null;
-/** どの段が名前を決めたか。伏せられていても残る**機械が決めた値**です。 */
 export type AccessibleNameSource = "aria_labelledby" | "aria_label" | "native_label" | "content" | "title";
 export type AccessibleName = {
     name: string;
     source: AccessibleNameSource;
 };
-/**
- * 要素の名前を **1 本**に決めます。
- *
- * 順序は W3C の名前算出 (Accessible Name Computation) に従います。
- * `aria-labelledby` → `aria-label` → 対応ラベル / `alt` → 要素内の文言 → `title`。
- * **自前の優先順を作ってはいけません。** 顧客の画面を読み上げる道具が名乗る名前と
- * 食い違う名前を保管すると、行動の名付けが「利用者が見ている名前」から離れます。
- *
- * 生の候補を並べて持たないのも同じ理由です。どれを採るかを後段でもう一度決めると、
- * 決め方が 2 つになります。
- */
 export declare const getAccessibleName: (element: Element) => AccessibleName | null;
 export declare const getElementLabel: (element: Element) => string | null;
-/**
- * 押された要素の**祖先の並び**。`main > form[role=search] > button` の形で返します。
- *
- * 綴りは**機械が決めた値だけ**で作ります (要素の種類と役割)。顧客が書いた文言を
- * 混ぜないので、文言を伏せた状態でも「画面のどのまとまりの中の操作か」が残ります。
- */
 export declare const getAncestorChain: (element: Element) => string | null;
-/** 画面の題。頁が何の画面かを表す、顧客が書いた文言です。 */
 export declare const getDocumentTitle: (element: Element) => string | null;
-/**
- * 押した後に行く先。`href` を持つ要素はその値を返します。
- *
- * 問い合わせ文字列は落とします。**そこに載るのは利用者ごとに違う値**で、
- * 名前に入れると行動の型が利用者の数だけ増えます。
- */
 export declare const getNavigationHref: (element: Element) => string | null;
 export declare const resolveClickDisplayTarget: (element: Element) => Element;
 export declare const shouldCaptureClickTarget: (element: Element) => boolean;

package/dist/instrumentation/dom.js

@@ -82,19 +82,6 @@ const normalizeHumanText = (value) => {
     const normalized = value?.replace(/\s+/g, " ").trim() ?? "";
     return normalized ? normalized.slice(0, 120) : null;
 };
-const getSelectSelectionLabel = (element) => {
-    const labels = Array.from(element.selectedOptions)
-        .map((option) => normalizeHumanText(option.label || option.textContent))
-        .filter((value) => Boolean(value));
-    const uniqueLabels = Array.from(new Set(labels));
-    if (uniqueLabels.length === 0) {
-        return null;
-    }
-    if (uniqueLabels.length <= 3) {
-        return uniqueLabels.join(", ");
-    }
-    return `${uniqueLabels.slice(0, 3).join(", ")} +${uniqueLabels.length - 3}`;
-};
 const SECTION_CONTAINER_SELECTOR = [
     "section",
     "article",
@@ -180,8 +167,11 @@ const getAssociatedLabel = (element) => {
     return null;
 };
 const readElementContentLabel = (element) => {
-    if (element instanceof HTMLSelectElement) {
-        return getSelectSelectionLabel(element);
+    if (element instanceof HTMLInputElement ||
+        element instanceof HTMLTextAreaElement ||
+        element instanceof HTMLSelectElement ||
+        (element instanceof HTMLElement && element.isContentEditable)) {
+        return null;
     }
     const ownText = Array.from(element.childNodes)
         .filter((node) => node.nodeType === Node.TEXT_NODE)
@@ -237,17 +227,6 @@ const readNativeHostLabel = (element) => {
     }
     return null;
 };
-/**
- * 要素の名前を **1 本**に決めます。
- *
- * 順序は W3C の名前算出 (Accessible Name Computation) に従います。
- * `aria-labelledby` → `aria-label` → 対応ラベル / `alt` → 要素内の文言 → `title`。
- * **自前の優先順を作ってはいけません。** 顧客の画面を読み上げる道具が名乗る名前と
- * 食い違う名前を保管すると、行動の名付けが「利用者が見ている名前」から離れます。
- *
- * 生の候補を並べて持たないのも同じ理由です。どれを採るかを後段でもう一度決めると、
- * 決め方が 2 つになります。
- */
 export const getAccessibleName = (element) => {
     const labelledBy = readAriaLabelledBy(element);
     if (labelledBy) {
@@ -272,16 +251,8 @@ export const getAccessibleName = (element) => {
     return null;
 };
 export const getElementLabel = (element) => getAccessibleName(element)?.name ?? null;
-// 祖先の並びは深さと長さの両方で止めます。深い画面ほど並びが伸びるため、
-// 深さだけで止めると 1 件あたりの大きさが顧客の画面構造に引きずられます。
 const MAX_ANCESTOR_CHAIN_DEPTH = 6;
 const MAX_ANCESTOR_CHAIN_LENGTH = 200;
-/**
- * 押された要素の**祖先の並び**。`main > form[role=search] > button` の形で返します。
- *
- * 綴りは**機械が決めた値だけ**で作ります (要素の種類と役割)。顧客が書いた文言を
- * 混ぜないので、文言を伏せた状態でも「画面のどのまとまりの中の操作か」が残ります。
- */
 export const getAncestorChain = (element) => {
     const segments = [];
     let current = element.parentElement;
@@ -299,14 +270,7 @@ export const getAncestorChain = (element) => {
     }
     return segments.join(" > ").slice(0, MAX_ANCESTOR_CHAIN_LENGTH);
 };
-/** 画面の題。頁が何の画面かを表す、顧客が書いた文言です。 */
 export const getDocumentTitle = (element) => normalizeHumanText(element.ownerDocument?.title ?? null);
-/**
- * 押した後に行く先。`href` を持つ要素はその値を返します。
- *
- * 問い合わせ文字列は落とします。**そこに載るのは利用者ごとに違う値**で、
- * 名前に入れると行動の型が利用者の数だけ増えます。
- */
 export const getNavigationHref = (element) => {
     const href = element.getAttribute("href");
     if (!href?.trim()) {

package/dist/instrumentation/drag.js

@@ -23,8 +23,6 @@ export const startDragCapture = (context) => {
     if (typeof document === "undefined") {
         return { stop: () => undefined };
     }
-    // Drop payload summaries are retained as Cluebase-only UX evidence; accepted
-    // browser OTel instrumentation does not expose this committed drop signal.
     const dropHandler = (event) => {
         if (context.getConsent() === "denied") {
             return;
@@ -68,6 +66,7 @@ export const startDragCapture = (context) => {
                     dragTypes: dragPayload.dragTypes,
                 },
             });
+            context.bindEventContext?.(event);
         }
         catch (error) {
             context.onInternalError("capture/drag:drop", error);

package/dist/instrumentation/form.js

@@ -49,8 +49,6 @@ export const startFormCapture = (context) => {
     if (typeof document === "undefined") {
         return { stop: () => undefined };
     }
-    // OTel browser user-action covers the submitter click; this retains
-    // Cluebase-only form validation outcome evidence that OTel does not provide.
     const submitHandler = (event) => {
         if (context.getConsent() === "denied") {
             return;
@@ -118,6 +116,7 @@ export const startFormCapture = (context) => {
                     ...buildScreenActionNamingEvidence(submitter ?? target),
                 },
             });
+            context.bindEventContext?.(event);
         }
         catch (error) {
             context.onInternalError("capture/form:submit", error);

package/dist/instrumentation/input.js

@@ -24,9 +24,7 @@ export const startInputCapture = (context) => {
         return { stop: () => undefined };
     }
     const dirtyControls = new Set();
-    // OTel user-action covers discrete clicks; committed field values,
-    // selections, toggles, and file counts are Cluebase-only UX evidence.
-    const emitCommit = (target) => {
+    const emitCommit = (target, sourceEvent) => {
         if (context.getConsent() === "denied") {
             return;
         }
@@ -73,24 +71,24 @@ export const startInputCapture = (context) => {
                         inputValueMeta: buildLocalValueDescriptor(target.value),
                     },
                 });
+                if (sourceEvent)
+                    context.bindEventContext?.(sourceEvent);
                 return;
             }
             if (target instanceof HTMLSelectElement) {
                 const selectedOptions = Array.from(target.selectedOptions);
                 const selectedValues = selectedOptions.map((option) => option.value);
-                const selectedOptionLabels = selectedOptions
-                    .map((option) => (option.label || option.textContent || "").replace(/\s+/g, " ").trim())
-                    .filter((value) => value.length > 0);
                 context.onEvent({
                     type: "selection_committed",
                     occurredAtMs: Date.now(),
                     payload: {
                         ...commonPayload,
                         selectedCount: selectedValues.length,
-                        selectedOptionLabels,
                         selectedValueMeta: buildLocalValueDescriptor(selectedValues),
                     },
                 });
+                if (sourceEvent)
+                    context.bindEventContext?.(sourceEvent);
                 return;
             }
             if (target instanceof HTMLInputElement && target.type === "file") {
@@ -107,6 +105,8 @@ export const startInputCapture = (context) => {
                         fileDescriptors,
                     },
                 });
+                if (sourceEvent)
+                    context.bindEventContext?.(sourceEvent);
                 return;
             }
             context.onEvent({
@@ -117,6 +117,8 @@ export const startInputCapture = (context) => {
                     inputValueMeta: buildLocalValueDescriptor(getElementValue(target)),
                 },
             });
+            if (sourceEvent)
+                context.bindEventContext?.(sourceEvent);
             if (isDeferredCommitElement(target)) {
                 dirtyControls.delete(target);
             }
@@ -146,7 +148,7 @@ export const startInputCapture = (context) => {
         if (!isInputCaptureElement(target)) {
             return;
         }
-        emitCommit(target);
+        emitCommit(target, event);
     };
     const flushDirtyControls = () => {
         for (const target of Array.from(dirtyControls)) {

package/dist/instrumentation/naming-evidence.d.ts

@@ -1,15 +1,3 @@
-/**
- * 画面上の操作が**何なのか**を後段が言い当てるための材料。
- *
- * 名付ける相手は、押された要素そのものを見られません。ここで採らなかったものは
- * 「無かった」のと同じになります。実測では、要素の鍵だけを渡した押下が
- * `execute_primary_action` / 確信度 0.18 になりました。
- *
- * 文言 (名前・題・行き先) は顧客が書いたもので、個人に結び付く値が混ざり得ます。
- * 伏せるかどうかは受付側が顧客の設定 1 本で決めるので、ここでは伏せません。
- * **文言が伏せられても、役割・祖先の並び・安定した識別子だけで慎重な一般名が
- * 作れる**ように、機械が決めた値を必ず一緒に載せます。
- */
 export type ScreenActionNamingEvidence = {
     accessibleName: string | null;
     accessibleNameSource: string | null;

package/dist/instrumentation/navigation.js

@@ -71,8 +71,6 @@ export const startNavigationCapture = (context) => {
                 viewId: previousViewId,
                 screenKey: currentSnapshot.screenKey,
                 path: currentSnapshot.path,
-                // 離脱イベントは遷移後に送られるため、周囲の文脈から URL を取ると
-                // 次の画面を指す。離れた画面自身の URL を payload で名乗る。
                 urlCanonical: currentSnapshot.urlCanonical,
                 timeOnPageMs: Math.max(0, now - viewEnteredAtMs),
             },

package/dist/instrumentation/network-request.d.ts

@@ -21,6 +21,7 @@ export type RequestTraceContext = {
     parentSpanId: string | null;
     requestId: string;
     requestSpanId: string;
+    actionId: string | null;
     interactionId: string;
     interactionInitiator?: string | null;
     interactionStartEventKind?: string | null;
@@ -54,6 +55,7 @@ export type NetworkRequestMeta = {
     parentSpanId: string | null;
     requestId: string;
     requestSpanId: string;
+    actionId: string | null;
     interactionId: string;
     interactionInitiator: string | null;
     interactionStartEventKind: string | null;
@@ -61,7 +63,6 @@ export type NetworkRequestMeta = {
     viewId: string | null;
     requestHeaders: HeaderRecord;
     queryKeys: string[];
-    /** 値を持たない入れ物。顧客が名指しした項目だけ、方針が届いた時に値を持つ。 */
     requestParametersSnapshot: ParameterSnapshotBundle;
     requestMetadataSummary: RequestMetadataSummary;
     requestShapeEvidence: RequestShapeEvidence;
@@ -97,7 +98,6 @@ export declare const createRequestMeta: (input: {
     defaultRequestKind: "fetch" | "xhr";
     traceContext: RequestTraceContext;
     startedAtMs?: number;
-    /** 顧客が init で足した落とす項目名。既定の落とす表は下の組み立てが自分で読む。 */
     deniedKeys?: readonly string[];
 }) => NetworkRequestMeta;
 export {};

package/dist/instrumentation/network-request.js

@@ -236,8 +236,6 @@ export const createRequestMeta = (input) => {
     const sanitizedRequestHeaders = sanitizeHeaders(input.requestHeaders);
     const normalizedRequestBody = normalizeBody(input.body);
     const requestShape = resolveRequestShape(input.rawUrl);
-    // 顧客の値が入る面。**既定は全部伏せる。**顧客が画面で名指しした項目だけを
-    // `allowedPaths` が平文にする。方針がまだ届いていない間は空なので、伏せた側へ倒れる。
     const requestParametersSnapshot = buildParameterSnapshotBundle({ query: queryValues, body: normalizedRequestBody }, {
         allowedPaths: allowedValuePathsFor({
             method: input.method,
@@ -264,6 +262,7 @@ export const createRequestMeta = (input) => {
         parentSpanId: traceContext.parentSpanId,
         requestId: traceContext.requestId,
         requestSpanId: traceContext.requestSpanId,
+        actionId: traceContext.actionId ?? null,
         interactionId,
         interactionInitiator: traceContext.interactionInitiator ??
             (interactionId ? null : "background"),

package/dist/instrumentation/network-span-attributes.d.ts

@@ -1,11 +1,4 @@
 import { type Span } from "@opentelemetry/api";
-/**
- * 属性を書き込む側が、span に実際に求めるもの。
- *
- * **`Span` 全体（11 member）を求めていました。** ここで使うのは 2 つだけなので、
- * 試験の作り物は残りを持てず `as unknown as Span` で嘘をつくしかない状態でした
- * （`tests/README.md` §10）。3 つ目を使い始めたら、ここが変わって作り物が落ちます。
- */
 export type AttributeWritableSpan = {
     [K in "setAttribute" | "setStatus"]: (...args: Parameters<Span[K]>) => unknown;
 };

package/dist/instrumentation/network-span-attributes.js

@@ -56,6 +56,7 @@ const setRequestSpanAttributes = (span, meta, eventName, status, observationCont
     span.setAttribute("cluebase.path_template", meta.pathTemplate);
     setOptionalString(span, "cluebase.target_service", meta.targetService);
     setOptionalString(span, "cluebase.parent_span_id", meta.parentSpanId);
+    setOptionalString(span, "cluebase.action.id", meta.actionId);
     setOptionalString(span, "cluebase.interaction.id", meta.interactionId);
     setOptionalString(span, "cluebase.interaction.initiator", meta.interactionInitiator);
     setOptionalString(span, "cluebase.interaction.start_event_kind", meta.interactionStartEventKind);
@@ -79,8 +80,6 @@ const setRequestSpanAttributes = (span, meta, eventName, status, observationCont
     setOptionalStringArray(span, cluebaseAuthoredPropertyAttribute("graphql_top_level_fields"), requestEvidence.graphqlTopLevelFields);
     setOptionalNumber(span, cluebaseAuthoredMetricAttribute("request_size_bytes"), meta.requestSizeBytes);
     span.setAttribute(cluebaseAuthoredPropertyAttribute("request_field_paths"), meta.queryKeys);
-    // 顧客の値が入る面。**値は入れ物の中で伏せられている。**顧客が画面で名指しした
-    // 項目だけが値を持ち、その項目名は下の控えに並ぶ。
     setJsonRecordAttribute(span, "cluebase.request_parameters_snapshot_json", meta.requestParametersSnapshot.snapshot);
     setJsonRecordAttribute(span, "cluebase.request_metadata_json", {
         ...meta.requestMetadataSummary,
@@ -142,7 +141,6 @@ export const setResponseSpanAttributes = (span, meta, input) => {
         deniedKeys: input.deniedKeys ?? [],
     });
     setJsonRecordAttribute(span, "cluebase.response_parameters_snapshot_json", responseParametersSnapshot.snapshot);
-    // 平文で残した項目の控え。面をまたいで 1 本にする。空なら属性を出さない。
     setOptionalStringArray(span, "cluebase.privacy.allowed_keys", [
         ...new Set([
             ...meta.requestParametersSnapshot.allowedValueKeys,

package/dist/instrumentation/network.js

@@ -18,7 +18,6 @@ let fetchInstrumentation = null;
 let xhrInstrumentation = null;
 let cluebaseNetworkPropagatorRegistered = false;
 const REQUEST_LIFECYCLE_ORPHAN_TIMEOUT_MS = 30000;
-// OTel fetch waits 300ms for browser resource timing before ending spans.
 const FETCH_SPAN_END_SETTLE_MS = 350;
 const pendingFetchSpanEndWaits = new Set();
 class ManagedFetchInstrumentation extends FetchInstrumentation {
@@ -70,6 +69,9 @@ const toTraceHeaders = (capture, traceContext) => {
     if (traceContext.parentSpanId) {
         headers["x-cluebase-parent-span-id"] = traceContext.parentSpanId;
     }
+    if (traceContext.actionId) {
+        headers["x-cluebase-action-id"] = traceContext.actionId;
+    }
     if (traceContext.interactionId) {
         headers["x-cluebase-interaction-id"] = traceContext.interactionId;
     }
@@ -99,6 +101,7 @@ const traceContextFromMeta = (meta) => ({
     parentSpanId: meta.parentSpanId,
     requestId: meta.requestId,
     requestSpanId: meta.requestSpanId,
+    actionId: meta.actionId,
     interactionId: meta.interactionId,
     interactionInitiator: meta.interactionInitiator,
     interactionStartEventKind: meta.interactionStartEventKind,
@@ -108,6 +111,7 @@ const CLUEBASE_NETWORK_PROPAGATION_FIELDS = [
     "x-cluebase-trace-id",
     "x-cluebase-request-id",
     "x-cluebase-request-span-id",
+    "x-cluebase-action-id",
     "x-cluebase-parent-span-id",
     "x-cluebase-interaction-id",
     "x-cluebase-origin-frontend-interaction-id",
@@ -471,6 +475,7 @@ export const startNetworkCapture = (context, options = {}) => {
                 parentSpanId: null,
                 requestId: generateRequestId(),
                 requestSpanId: generateRequestSpanId(),
+                actionId: null,
                 interactionId: generateInteractionId(),
                 interactionInitiator: null,
                 interactionStartEventKind: null,

package/dist/instrumentation/page.js

@@ -4,8 +4,6 @@ export const startPageCapture = (context) => {
         return { stop: () => undefined };
     }
     let pageEnteredAtMs = Date.now();
-    // Page-view events are emitted from OTel navigation/document-load signals.
-    // This module only keeps Cluebase-specific time-on-page evidence.
     const handlePageLeave = () => {
         if (context.getConsent() === "denied") {
             return;

package/dist/instrumentation/performance.js

@@ -92,7 +92,6 @@ const observeEntryType = (observers, entryType, callback) => {
         observers.push(observer);
     }
     catch {
-        // Some browsers expose an entry type but still reject buffered observation.
     }
 };
 const readPerformanceNavigation = () => {
@@ -233,9 +232,6 @@ export const startPerformanceCapture = (context) => {
             occurredAtMs: Date.now(),
             payload: {
                 viewId,
-                // must strip query string to avoid leaking OAuth
-                // callback / password-reset / magic-link tokens that may
-                // live in `window.location.href`. See `instrumentation/common.ts`.
                 pageUrl: currentPageUrl() ?? "",
                 collectorName: "performance_rum",
                 aggregationKind: "per_view_window",
@@ -305,9 +301,6 @@ export const startPerformanceCapture = (context) => {
     window.addEventListener("pointerdown", interactionHandler, true);
     window.addEventListener("pagehide", pageHideHandler, true);
     document.addEventListener("visibilitychange", visibilityHandler, true);
-    // Long tasks and resource load failures are retained as Cluebase summary-only
-    // UX evidence because the accepted browser OTel modules above cover
-    // document load and Web Vitals, not this per-view aggregate.
     observeEntryType(observers, "longtask", (list) => {
         for (const entry of list.getEntries()) {
             const nearInteraction = state.lastInteractionAtMs !== null &&

package/dist/integrations/react-router.js

@@ -18,9 +18,6 @@ export const attachReactRouterIntegration = (options) => {
         options.onRouteChange(lastPath, nextPath);
         lastPath = nextPath;
     };
-    // Idempotent guard for Cluebase-owned History API wrappers. OTel navigation
-    // instrumentation may patch history separately and remains the primary
-    // navigation source.
     const sentinelPushState = history.pushState;
     const sentinelReplaceState = history.replaceState;
     const alreadyWrapped = isHistoryAlreadyCluebaseWrapped(history);

package/dist/internal/internal-log.d.ts

@@ -1,10 +1,3 @@
-/**
- * SDK-internal diagnostic logger for the Frontend SDK.
- *
- * Mirror of Node SDK ``internal-log.ts`` and Python SDK ``_internal_log.py``.
- * Exposes a single configurable {@link InternalLogger}. Default is a no-op
- * so the SDK does not write to the host page's console.
- */
 export type InternalLogContext = {
     [key: string]: string | number | boolean | null;
 };