@genn-inc/cluebase-frontend-sdk 0.0.1 → 0.0.3

package/dist/index.js

@@ -1,7 +1,6 @@
 import { parseSendableUrl } from "./provider/config.js";
 import { createCluebaseBrowserSdk } from "./provider/sdk.js";
-// SDK は host application 内で singleton として動く。
-// 同じ tab で複数回 import されても 1 instance に統合する。
+import { reportSdkError } from "./provider/sdk-error.js";
 const GLOBAL_SDK_KEY = "__cluebase_frontend_sdk_singleton__";
 const globalWithCluebaseSdk = globalThis;
 const existingSdk = globalWithCluebaseSdk[GLOBAL_SDK_KEY];
@@ -9,7 +8,8 @@ const internalSdk = existingSdk ?? createCluebaseBrowserSdk();
 if (!existingSdk) {
     globalWithCluebaseSdk[GLOBAL_SDK_KEY] = internalSdk;
 }
-const reportPublicSdkError = (operation) => {
+const reportPublicSdkError = (operation, error) => {
+    reportSdkError(operation, error);
     try {
         if (typeof console !== "undefined" && typeof console.warn === "function") {
             console.warn(`[cluebase] ${operation} failed`, {
@@ -18,29 +18,24 @@ const reportPublicSdkError = (operation) => {
         }
     }
     catch {
-        // Cluebase は host application を絶対に失敗させない。
     }
 };
 const safeCall = (operation, callback) => {
     try {
         callback();
     }
-    catch {
-        reportPublicSdkError(operation);
+    catch (error) {
+        reportPublicSdkError(operation, error);
     }
 };
 const safeAsyncCall = async (operation, callback) => {
     try {
         await callback();
     }
-    catch {
-        reportPublicSdkError(operation);
+    catch (error) {
+        reportPublicSdkError(operation, error);
     }
 };
-// `privacy.allowedValuePaths` used to let the caller name the request/response
-// fields that may leave the browser in clear text. That choice now belongs to
-// the Cluebase privacy screen and reaches the SDK through the delivered privacy
-// policy, so the option has nothing left to apply to.
 const REMOVED_PRIVACY_OPTIONS = {
     allowedValuePaths: "cluebase.init: 'privacy.allowedValuePaths' was removed in " +
         "@genn-inc/cluebase-frontend-sdk 0.0.1. The fields allowed to leave the browser in " +
@@ -49,22 +44,7 @@ const REMOVED_PRIVACY_OPTIONS = {
         "and select those fields in the Cluebase privacy screen instead. Until then " +
         "every value stays masked.",
 };
-const REQUIRED_INIT_OPTIONS = [
-    "endpoint",
-    "projectKey",
-];
-/**
- * Raise on a setup mistake instead of collecting nothing and warning once.
- *
- * This is the one place `cluebase.init` is allowed to throw. The `cluebase.*`
- * never-propagate contract exists so a telemetry fault cannot break a page the
- * visitor is using; it is not there to hide a setting that quietly stopped
- * applying, nor a key the caller forgot. Both mistakes come from the build's
- * own configuration, so they surface on the developer's first page load rather
- * than on a visitor's — and left silent they are invisible afterwards: the page
- * renders, `getDiagnostics()` reports an open lifecycle with no errors, and not
- * one event is ever delivered.
- */
+const REQUIRED_INIT_OPTIONS = ["projectKey"];
 const validateInitOptions = (options) => {
     const privacy = options.privacy ?? {};
     for (const [name, message] of Object.entries(REMOVED_PRIVACY_OPTIONS)) {
@@ -72,8 +52,6 @@ const validateInitOptions = (options) => {
             throw new Error(message);
         }
     }
-    // Anything that is not a string reads as absent, so a stray `undefined` from
-    // the bundler's env replacement cannot become the literal "undefined" endpoint.
     const missing = REQUIRED_INIT_OPTIONS.filter((name) => {
         const value = options[name];
         return typeof value !== "string" || value.trim() === "";
@@ -83,12 +61,15 @@ const validateInitOptions = (options) => {
             `${missing.length === 1 ? "is" : "are"} required and must be a non-empty ` +
             "string. Cluebase collects nothing until every required option is set. Pass " +
             "them from your environment, for example " +
-            "endpoint=NEXT_PUBLIC_CLUEBASE_API_BASE_URL and " +
-            "projectKey=NEXT_PUBLIC_CLUEBASE_PROJECT_KEY.");
+            "projectKey=NEXT_PUBLIC_CLUEBASE_PROJECT_KEY. The endpoint is optional " +
+            "and defaults to the hosted Cluebase API.");
+    }
+    if (options.endpoint !== undefined &&
+        typeof options.endpoint !== "string") {
+        throw new Error("cluebase.init: 'endpoint' must be a string when provided. Omit it to " +
+            "use the hosted Cluebase endpoint.");
     }
-    // Reporting a typo against the setting that caused it, rather than letting
-    // it surface later as delivery that never arrives.
-    if (parseSendableUrl(options.endpoint) === null) {
+    if (options.endpoint?.trim() && parseSendableUrl(options.endpoint) === null) {
         throw new Error(`cluebase.init: 'endpoint' must be an absolute http:// or https:// URL, but ` +
             `received ${JSON.stringify(options.endpoint)}. An endpoint the SDK cannot ` +
             "send to loses every event just as silently as one that was never passed. " +
@@ -96,15 +77,8 @@ const validateInitOptions = (options) => {
             "endpoint=NEXT_PUBLIC_CLUEBASE_API_BASE_URL.");
     }
 };
-// Public API — namespace `cluebase` の 8 method
 const cluebase = {
-    /**
-     * SDK を初期化する。 `endpoint` / `projectKey` は必須で、 欠けていれば送信を
-     * 黙って捨てずに throw する。
-     */
     init(options) {
-        // Thrown before `safeCall` so the caller actually sees it; see
-        // `validateInitOptions`.
         validateInitOptions(options);
         safeCall("init", () => {
             internalSdk.init(options);
@@ -142,7 +116,6 @@ const cluebase = {
     async close() {
         await safeAsyncCall("close", () => internalSdk.close());
     },
-    // 内部 metrics 取得 (= 顧客 debug 用、 production では通常不要)
     getInternalMetrics() {
         return internalSdk.getInternalMetrics();
     },
@@ -150,7 +123,6 @@ const cluebase = {
         return internalSdk.getDiagnostics();
     },
 };
-// OTel-core exporter surface for advanced host integrations.
 export { EXPORT_RESULT_FAILED, EXPORT_RESULT_SUCCESS, ObservationSourceEventExporter, } from "./exporter/observation-source-event-exporter.js";
 export { attachNextRouterIntegration } from "./integrations/next-router.js";
 export { attachReactRouterIntegration } from "./integrations/react-router.js";

package/dist/instrumentation/action.js

@@ -35,7 +35,7 @@ const ensureCssEscape = () => {
         },
     });
 };
-const emitElementClicked = (context, target, occurredAtMs) => {
+const emitElementClicked = (context, target, occurredAtMs, event) => {
     const displayTarget = resolveClickDisplayTarget(target);
     if (context.shouldIgnoreElement?.(displayTarget)) {
         return;
@@ -92,6 +92,7 @@ const emitElementClicked = (context, target, occurredAtMs) => {
             ...buildScreenActionNamingEvidence(displayTarget),
         },
     });
+    context.bindEventContext?.(event);
     maybeEmitAriaToggleChanged(context, displayTarget);
 };
 const maybeEmitAriaToggleChanged = (context, element) => {
@@ -156,7 +157,7 @@ export const startActionCapture = (context) => {
             return;
         }
         try {
-            emitElementClicked(context, event.target, Date.now());
+            emitElementClicked(context, event.target, Date.now(), event);
         }
         catch (error) {
             context.onInternalError("capture/action:click", error);

package/dist/instrumentation/cluebase-authored-attributes.d.ts

@@ -1,4 +1,2 @@
-/** 部品自身が測った値（文字列など）の属性名。 */
 export declare function cluebaseAuthoredPropertyAttribute(name: string): string;
-/** 部品自身が測った値（数値）の属性名。 */
 export declare function cluebaseAuthoredMetricAttribute(name: string): string;

package/dist/instrumentation/cluebase-authored-attributes.js

@@ -1,32 +1,9 @@
-/**
- * 配る部品**自身が測った値**を封筒に載せる時の、属性の名前。
- *
- * 顧客が `track` で付けた項目は `cluebase.properties.<綴り>` /
- * `cluebase.metrics.<綴り>` という封筒で運ばれます。**配る部品も同じ封筒を使う**
- * ため、封筒を開けた受け口から見ると、顧客が名付けた業務項目と、部品が測った
- * 値の区別が付きません。
- *
- * 実際にそれが起きました。分析が `duration_ms` を顧客の業務項目だと解釈し、
- * 利用者へ**「duration_ms を測りました」**と答えました（実測 2026-08-15）。
- *
- * そこで、部品が測った値は封筒の中で**予約された名前**（`cluebase.` で始まる）を
- * 名乗ります。顧客の項目がこの接頭辞を持つことはないため、封筒を開けた時点で
- * 混ざりません。**顧客が偶然 `request_kind` という業務項目を送ってきても、
- * それは顧客のものとして扱われます。**
- *
- * **受け口側で名前を付け替えていません。** 付け替える形にすると、受け口が
- * 「部品が送る綴り」の一覧を持つことになり、その一覧が古くなります
- * （`CLAUDE.md` §0.2）。**名乗るのは名付けた側の責任です。**
- */
 const RESERVED_FIELD_KEY_PREFIX = "cluebase.";
-/** 顧客の項目が運ばれる封筒。部品が測った値も同じ封筒を使う。 */
 const PROPERTY_ENVELOPE_PREFIX = "cluebase.properties.";
 const METRIC_ENVELOPE_PREFIX = "cluebase.metrics.";
-/** 部品自身が測った値（文字列など）の属性名。 */
 export function cluebaseAuthoredPropertyAttribute(name) {
     return `${PROPERTY_ENVELOPE_PREFIX}${RESERVED_FIELD_KEY_PREFIX}${name}`;
 }
-/** 部品自身が測った値（数値）の属性名。 */
 export function cluebaseAuthoredMetricAttribute(name) {
     return `${METRIC_ENVELOPE_PREFIX}${RESERVED_FIELD_KEY_PREFIX}${name}`;
 }

package/dist/instrumentation/common.d.ts

@@ -1,73 +1,10 @@
-/**
- * Shared instrumentation helpers used across multiple capture modules
- * (network, performance, navigation, etc.).
- *
- * The most important contract here is URL sanitization for any payload
- * that may carry the user's current browsing URL. The page URL must never
- * be emitted with query string intact, because OAuth callback /
- * password-reset / magic-link flows place secret tokens in the query
- * string. Any instrumentation module that needs a "page URL" field on
- * its outgoing event payload MUST go through `currentPageUrl()` here.
- *
- * Previously `instrumentation/performance.ts` emitted
- * `pageUrl: window.location.href` directly while
- * `instrumentation/network.ts` had its own internal stripping helper.
- * This module unifies the behavior so all callers share a single
- * implementation and a single test surface.
- */
-/**
- * Resolves `value` to a URL, falling back to the current document
- * location for relative URLs. Returns `null` if neither parsing succeeds.
- */
 export declare const resolveUrlAgainstCurrentLocation: (value: string) => URL | null;
-/**
- * Strips the query string and hash from the given URL, returning
- * `origin + pathname` only. Falls back to a `split("?")` form if URL
- * parsing fails so callers never receive a query-bearing string.
- *
- * The query string is the primary leak surface for OAuth callbacks
- * (`?code=...&state=...`) and password reset links (`?token=...`).
- */
 export declare const stripQueryFromUrl: (url: string) => string;
-/**
- * Returns the current page URL with all query parameters and hash
- * fragments stripped. Returns `null` if `globalThis.location` is not
- * available (e.g., non-browser environments).
- *
- * THIS IS THE ONLY APPROVED WAY TO POPULATE A `pageUrl` FIELD ON ANY
- * INSTRUMENTATION EVENT PAYLOAD. Do not use `window.location.href`
- * directly.
- */
 export declare const currentPageUrl: () => string | null;
-/**
- * Single sentinel marker used by Cluebase-owned History API wrappers. OTel-owned
- * navigation instrumentation may patch history independently and must remain
- * the primary navigation source.
- */
 export declare const HISTORY_WRAPPED_MARKER: "__cluebaseHistoryWrapped";
-/**
- * Type guard for a history.pushState / replaceState function that
- * carries the unified Cluebase sentinel marker. Use this in any module
- * that monkey-patches the History API.
- */
 export type HistoryWrappedFn<T extends History["pushState"] | History["replaceState"] = History["pushState"] | History["replaceState"]> = T & {
     [HISTORY_WRAPPED_MARKER]?: true;
 };
-/**
- * Returns true if either history.pushState or history.replaceState
- * is already Cluebase-wrapped.
- */
-/**
- * 差し替え済みかを見る側が、履歴の口に実際に求めるもの。
- *
- * **`History` 全体を求めていました。** ここで読むのは 2 つだけなので、試験の
- * 作り物は `as unknown as History` で嘘をつくしかない状態でした（`tests/README.md` §10）。
- */
 export type WrappableHistory = Pick<History, "pushState" | "replaceState">;
 export declare const isHistoryAlreadyCluebaseWrapped: (historyApi: WrappableHistory) => boolean;
-/**
- * 画面操作 1 種類を指す安定キー。意味層は操作の identity 単位で行動名を付けるため、
- * 通信経路 (method / path) を持たない画面操作にも同じ粒度の識別子が要る。
- * 画面と操作対象の安定キーの組で「どの画面のどの操作か」を表す。
- */
 export declare const buildPrimaryActionKey: (screenKey: string | null | undefined, targetStableKey: string | null | undefined) => string | null;

package/dist/instrumentation/common.js

@@ -1,24 +1,3 @@
-/**
- * Shared instrumentation helpers used across multiple capture modules
- * (network, performance, navigation, etc.).
- *
- * The most important contract here is URL sanitization for any payload
- * that may carry the user's current browsing URL. The page URL must never
- * be emitted with query string intact, because OAuth callback /
- * password-reset / magic-link flows place secret tokens in the query
- * string. Any instrumentation module that needs a "page URL" field on
- * its outgoing event payload MUST go through `currentPageUrl()` here.
- *
- * Previously `instrumentation/performance.ts` emitted
- * `pageUrl: window.location.href` directly while
- * `instrumentation/network.ts` had its own internal stripping helper.
- * This module unifies the behavior so all callers share a single
- * implementation and a single test surface.
- */
-/**
- * Resolves `value` to a URL, falling back to the current document
- * location for relative URLs. Returns `null` if neither parsing succeeds.
- */
 export const resolveUrlAgainstCurrentLocation = (value) => {
     try {
         return new URL(value);
@@ -38,14 +17,6 @@ export const resolveUrlAgainstCurrentLocation = (value) => {
         return null;
     }
 };
-/**
- * Strips the query string and hash from the given URL, returning
- * `origin + pathname` only. Falls back to a `split("?")` form if URL
- * parsing fails so callers never receive a query-bearing string.
- *
- * The query string is the primary leak surface for OAuth callbacks
- * (`?code=...&state=...`) and password reset links (`?token=...`).
- */
 export const stripQueryFromUrl = (url) => {
     try {
         const resolvedUrl = resolveUrlAgainstCurrentLocation(url);
@@ -58,33 +29,14 @@ export const stripQueryFromUrl = (url) => {
         return url.split("?")[0] ?? url;
     }
 };
-/**
- * Returns the current page URL with all query parameters and hash
- * fragments stripped. Returns `null` if `globalThis.location` is not
- * available (e.g., non-browser environments).
- *
- * THIS IS THE ONLY APPROVED WAY TO POPULATE A `pageUrl` FIELD ON ANY
- * INSTRUMENTATION EVENT PAYLOAD. Do not use `window.location.href`
- * directly.
- */
 export const currentPageUrl = () => {
     const href = globalThis.location?.href;
     return href ? stripQueryFromUrl(href) : null;
 };
-/**
- * Single sentinel marker used by Cluebase-owned History API wrappers. OTel-owned
- * navigation instrumentation may patch history independently and must remain
- * the primary navigation source.
- */
 export const HISTORY_WRAPPED_MARKER = "__cluebaseHistoryWrapped";
 export const isHistoryAlreadyCluebaseWrapped = (historyApi) => {
     const push = historyApi.pushState;
     const replace = historyApi.replaceState;
     return Boolean(push[HISTORY_WRAPPED_MARKER] || replace[HISTORY_WRAPPED_MARKER]);
 };
-/**
- * 画面操作 1 種類を指す安定キー。意味層は操作の identity 単位で行動名を付けるため、
- * 通信経路 (method / path) を持たない画面操作にも同じ粒度の識別子が要る。
- * 画面と操作対象の安定キーの組で「どの画面のどの操作か」を表す。
- */
 export const buildPrimaryActionKey = (screenKey, targetStableKey) => screenKey && targetStableKey ? `${screenKey}#${targetStableKey}` : null;

package/dist/instrumentation/dom.d.ts

@@ -5,40 +5,15 @@ export declare const getElementRole: (element: Element) => string | null;
 export declare const getElementPlaceholder: (element: Element) => string | null;
 export declare const getElementAriaLabel: (element: Element) => string | null;
 export declare const getElementSectionHeading: (element: Element) => string | null;
-/** どの段が名前を決めたか。伏せられていても残る**機械が決めた値**です。 */
 export type AccessibleNameSource = "aria_labelledby" | "aria_label" | "native_label" | "content" | "title";
 export type AccessibleName = {
     name: string;
     source: AccessibleNameSource;
 };
-/**
- * 要素の名前を **1 本**に決めます。
- *
- * 順序は W3C の名前算出 (Accessible Name Computation) に従います。
- * `aria-labelledby` → `aria-label` → 対応ラベル / `alt` → 要素内の文言 → `title`。
- * **自前の優先順を作ってはいけません。** 顧客の画面を読み上げる道具が名乗る名前と
- * 食い違う名前を保管すると、行動の名付けが「利用者が見ている名前」から離れます。
- *
- * 生の候補を並べて持たないのも同じ理由です。どれを採るかを後段でもう一度決めると、
- * 決め方が 2 つになります。
- */
 export declare const getAccessibleName: (element: Element) => AccessibleName | null;
 export declare const getElementLabel: (element: Element) => string | null;
-/**
- * 押された要素の**祖先の並び**。`main > form[role=search] > button` の形で返します。
- *
- * 綴りは**機械が決めた値だけ**で作ります (要素の種類と役割)。顧客が書いた文言を
- * 混ぜないので、文言を伏せた状態でも「画面のどのまとまりの中の操作か」が残ります。
- */
 export declare const getAncestorChain: (element: Element) => string | null;
-/** 画面の題。頁が何の画面かを表す、顧客が書いた文言です。 */
 export declare const getDocumentTitle: (element: Element) => string | null;
-/**
- * 押した後に行く先。`href` を持つ要素はその値を返します。
- *
- * 問い合わせ文字列は落とします。**そこに載るのは利用者ごとに違う値**で、
- * 名前に入れると行動の型が利用者の数だけ増えます。
- */
 export declare const getNavigationHref: (element: Element) => string | null;
 export declare const resolveClickDisplayTarget: (element: Element) => Element;
 export declare const shouldCaptureClickTarget: (element: Element) => boolean;

package/dist/instrumentation/dom.js

@@ -82,19 +82,6 @@ const normalizeHumanText = (value) => {
     const normalized = value?.replace(/\s+/g, " ").trim() ?? "";
     return normalized ? normalized.slice(0, 120) : null;
 };
-const getSelectSelectionLabel = (element) => {
-    const labels = Array.from(element.selectedOptions)
-        .map((option) => normalizeHumanText(option.label || option.textContent))
-        .filter((value) => Boolean(value));
-    const uniqueLabels = Array.from(new Set(labels));
-    if (uniqueLabels.length === 0) {
-        return null;
-    }
-    if (uniqueLabels.length <= 3) {
-        return uniqueLabels.join(", ");
-    }
-    return `${uniqueLabels.slice(0, 3).join(", ")} +${uniqueLabels.length - 3}`;
-};
 const SECTION_CONTAINER_SELECTOR = [
     "section",
     "article",
@@ -180,8 +167,11 @@ const getAssociatedLabel = (element) => {
     return null;
 };
 const readElementContentLabel = (element) => {
-    if (element instanceof HTMLSelectElement) {
-        return getSelectSelectionLabel(element);
+    if (element instanceof HTMLInputElement ||
+        element instanceof HTMLTextAreaElement ||
+        element instanceof HTMLSelectElement ||
+        (element instanceof HTMLElement && element.isContentEditable)) {
+        return null;
     }
     const ownText = Array.from(element.childNodes)
         .filter((node) => node.nodeType === Node.TEXT_NODE)
@@ -237,17 +227,6 @@ const readNativeHostLabel = (element) => {
     }
     return null;
 };
-/**
- * 要素の名前を **1 本**に決めます。
- *
- * 順序は W3C の名前算出 (Accessible Name Computation) に従います。
- * `aria-labelledby` → `aria-label` → 対応ラベル / `alt` → 要素内の文言 → `title`。
- * **自前の優先順を作ってはいけません。** 顧客の画面を読み上げる道具が名乗る名前と
- * 食い違う名前を保管すると、行動の名付けが「利用者が見ている名前」から離れます。
- *
- * 生の候補を並べて持たないのも同じ理由です。どれを採るかを後段でもう一度決めると、
- * 決め方が 2 つになります。
- */
 export const getAccessibleName = (element) => {
     const labelledBy = readAriaLabelledBy(element);
     if (labelledBy) {
@@ -272,16 +251,8 @@ export const getAccessibleName = (element) => {
     return null;
 };
 export const getElementLabel = (element) => getAccessibleName(element)?.name ?? null;
-// 祖先の並びは深さと長さの両方で止めます。深い画面ほど並びが伸びるため、
-// 深さだけで止めると 1 件あたりの大きさが顧客の画面構造に引きずられます。
 const MAX_ANCESTOR_CHAIN_DEPTH = 6;
 const MAX_ANCESTOR_CHAIN_LENGTH = 200;
-/**
- * 押された要素の**祖先の並び**。`main > form[role=search] > button` の形で返します。
- *
- * 綴りは**機械が決めた値だけ**で作ります (要素の種類と役割)。顧客が書いた文言を
- * 混ぜないので、文言を伏せた状態でも「画面のどのまとまりの中の操作か」が残ります。
- */
 export const getAncestorChain = (element) => {
     const segments = [];
     let current = element.parentElement;
@@ -299,14 +270,7 @@ export const getAncestorChain = (element) => {
     }
     return segments.join(" > ").slice(0, MAX_ANCESTOR_CHAIN_LENGTH);
 };
-/** 画面の題。頁が何の画面かを表す、顧客が書いた文言です。 */
 export const getDocumentTitle = (element) => normalizeHumanText(element.ownerDocument?.title ?? null);
-/**
- * 押した後に行く先。`href` を持つ要素はその値を返します。
- *
- * 問い合わせ文字列は落とします。**そこに載るのは利用者ごとに違う値**で、
- * 名前に入れると行動の型が利用者の数だけ増えます。
- */
 export const getNavigationHref = (element) => {
     const href = element.getAttribute("href");
     if (!href?.trim()) {

package/dist/instrumentation/drag.js

@@ -23,8 +23,6 @@ export const startDragCapture = (context) => {
     if (typeof document === "undefined") {
         return { stop: () => undefined };
     }
-    // Drop payload summaries are retained as Cluebase-only UX evidence; accepted
-    // browser OTel instrumentation does not expose this committed drop signal.
     const dropHandler = (event) => {
         if (context.getConsent() === "denied") {
             return;
@@ -68,6 +66,7 @@ export const startDragCapture = (context) => {
                     dragTypes: dragPayload.dragTypes,
                 },
             });
+            context.bindEventContext?.(event);
         }
         catch (error) {
             context.onInternalError("capture/drag:drop", error);

package/dist/instrumentation/form.js

@@ -49,8 +49,6 @@ export const startFormCapture = (context) => {
     if (typeof document === "undefined") {
         return { stop: () => undefined };
     }
-    // OTel browser user-action covers the submitter click; this retains
-    // Cluebase-only form validation outcome evidence that OTel does not provide.
     const submitHandler = (event) => {
         if (context.getConsent() === "denied") {
             return;
@@ -118,6 +116,7 @@ export const startFormCapture = (context) => {
                     ...buildScreenActionNamingEvidence(submitter ?? target),
                 },
             });
+            context.bindEventContext?.(event);
         }
         catch (error) {
             context.onInternalError("capture/form:submit", error);

package/dist/instrumentation/input.js

@@ -24,9 +24,7 @@ export const startInputCapture = (context) => {
         return { stop: () => undefined };
     }
     const dirtyControls = new Set();
-    // OTel user-action covers discrete clicks; committed field values,
-    // selections, toggles, and file counts are Cluebase-only UX evidence.
-    const emitCommit = (target) => {
+    const emitCommit = (target, sourceEvent) => {
         if (context.getConsent() === "denied") {
             return;
         }
@@ -73,24 +71,24 @@ export const startInputCapture = (context) => {
                         inputValueMeta: buildLocalValueDescriptor(target.value),
                     },
                 });
+                if (sourceEvent)
+                    context.bindEventContext?.(sourceEvent);
                 return;
             }
             if (target instanceof HTMLSelectElement) {
                 const selectedOptions = Array.from(target.selectedOptions);
                 const selectedValues = selectedOptions.map((option) => option.value);
-                const selectedOptionLabels = selectedOptions
-                    .map((option) => (option.label || option.textContent || "").replace(/\s+/g, " ").trim())
-                    .filter((value) => value.length > 0);
                 context.onEvent({
                     type: "selection_committed",
                     occurredAtMs: Date.now(),
                     payload: {
                         ...commonPayload,
                         selectedCount: selectedValues.length,
-                        selectedOptionLabels,
                         selectedValueMeta: buildLocalValueDescriptor(selectedValues),
                     },
                 });
+                if (sourceEvent)
+                    context.bindEventContext?.(sourceEvent);
                 return;
             }
             if (target instanceof HTMLInputElement && target.type === "file") {
@@ -107,6 +105,8 @@ export const startInputCapture = (context) => {
                         fileDescriptors,
                     },
                 });
+                if (sourceEvent)
+                    context.bindEventContext?.(sourceEvent);
                 return;
             }
             context.onEvent({
@@ -117,6 +117,8 @@ export const startInputCapture = (context) => {
                     inputValueMeta: buildLocalValueDescriptor(getElementValue(target)),
                 },
             });
+            if (sourceEvent)
+                context.bindEventContext?.(sourceEvent);
             if (isDeferredCommitElement(target)) {
                 dirtyControls.delete(target);
             }
@@ -146,7 +148,7 @@ export const startInputCapture = (context) => {
         if (!isInputCaptureElement(target)) {
             return;
         }
-        emitCommit(target);
+        emitCommit(target, event);
     };
     const flushDirtyControls = () => {
         for (const target of Array.from(dirtyControls)) {

package/dist/instrumentation/naming-evidence.d.ts

@@ -1,15 +1,3 @@
-/**
- * 画面上の操作が**何なのか**を後段が言い当てるための材料。
- *
- * 名付ける相手は、押された要素そのものを見られません。ここで採らなかったものは
- * 「無かった」のと同じになります。実測では、要素の鍵だけを渡した押下が
- * `execute_primary_action` / 確信度 0.18 になりました。
- *
- * 文言 (名前・題・行き先) は顧客が書いたもので、個人に結び付く値が混ざり得ます。
- * 伏せるかどうかは受付側が顧客の設定 1 本で決めるので、ここでは伏せません。
- * **文言が伏せられても、役割・祖先の並び・安定した識別子だけで慎重な一般名が
- * 作れる**ように、機械が決めた値を必ず一緒に載せます。
- */
 export type ScreenActionNamingEvidence = {
     accessibleName: string | null;
     accessibleNameSource: string | null;

package/dist/instrumentation/navigation.js

@@ -71,8 +71,6 @@ export const startNavigationCapture = (context) => {
                 viewId: previousViewId,
                 screenKey: currentSnapshot.screenKey,
                 path: currentSnapshot.path,
-                // 離脱イベントは遷移後に送られるため、周囲の文脈から URL を取ると
-                // 次の画面を指す。離れた画面自身の URL を payload で名乗る。
                 urlCanonical: currentSnapshot.urlCanonical,
                 timeOnPageMs: Math.max(0, now - viewEnteredAtMs),
             },

package/dist/instrumentation/network-request.d.ts

@@ -21,6 +21,7 @@ export type RequestTraceContext = {
     parentSpanId: string | null;
     requestId: string;
     requestSpanId: string;
+    actionId: string | null;
     interactionId: string;
     interactionInitiator?: string | null;
     interactionStartEventKind?: string | null;
@@ -54,6 +55,7 @@ export type NetworkRequestMeta = {
     parentSpanId: string | null;
     requestId: string;
     requestSpanId: string;
+    actionId: string | null;
     interactionId: string;
     interactionInitiator: string | null;
     interactionStartEventKind: string | null;
@@ -61,7 +63,6 @@ export type NetworkRequestMeta = {
     viewId: string | null;
     requestHeaders: HeaderRecord;
     queryKeys: string[];
-    /** 値を持たない入れ物。顧客が名指しした項目だけ、方針が届いた時に値を持つ。 */
     requestParametersSnapshot: ParameterSnapshotBundle;
     requestMetadataSummary: RequestMetadataSummary;
     requestShapeEvidence: RequestShapeEvidence;
@@ -97,7 +98,6 @@ export declare const createRequestMeta: (input: {
     defaultRequestKind: "fetch" | "xhr";
     traceContext: RequestTraceContext;
     startedAtMs?: number;
-    /** 顧客が init で足した落とす項目名。既定の落とす表は下の組み立てが自分で読む。 */
     deniedKeys?: readonly string[];
 }) => NetworkRequestMeta;
 export {};

package/dist/instrumentation/network-request.js

@@ -236,8 +236,6 @@ export const createRequestMeta = (input) => {
     const sanitizedRequestHeaders = sanitizeHeaders(input.requestHeaders);
     const normalizedRequestBody = normalizeBody(input.body);
     const requestShape = resolveRequestShape(input.rawUrl);
-    // 顧客の値が入る面。**既定は全部伏せる。**顧客が画面で名指しした項目だけを
-    // `allowedPaths` が平文にする。方針がまだ届いていない間は空なので、伏せた側へ倒れる。
     const requestParametersSnapshot = buildParameterSnapshotBundle({ query: queryValues, body: normalizedRequestBody }, {
         allowedPaths: allowedValuePathsFor({
             method: input.method,
@@ -264,6 +262,7 @@ export const createRequestMeta = (input) => {
         parentSpanId: traceContext.parentSpanId,
         requestId: traceContext.requestId,
         requestSpanId: traceContext.requestSpanId,
+        actionId: traceContext.actionId ?? null,
         interactionId,
         interactionInitiator: traceContext.interactionInitiator ??
             (interactionId ? null : "background"),