@microsoft/power-apps-native-common 0.2.2 → 0.3.2

package/lib/module/telemetry/OneDsTelemetryProvider.js

@@ -8,6 +8,7 @@ import { AppInsightsCore } from '@microsoft/applicationinsights-core-js';
 import { PostChannel } from '@microsoft/1ds-post-js';
 import { generateGuid } from "../utils/GuidUtils.js";
 import { resolvePlatformInfo } from "../utils/PlatformInfoUtils.js";
+import { buildAnonymousTelemetryData } from "./AnonymousTelemetry.js";
 /** 1DS Aria project IDs shared by the webplayer and CLI. */
 const AriaProjectIds = {
   Production: '5c3a61f48d7c4522912765ae7465ab5c-fb3d6606-fe59-4d6b-9bb1-5e993d889672-7138',
@@ -93,11 +94,14 @@ export class OneDsTelemetryProvider {
   defaultProperties = {};
   constructor(config) {
     this._sessionId = generateGuid();
+    this.anonymous = config.anonymous ?? false;
+    this.telemetryLocation = config.telemetryLocation ?? 'global';
     this.appName = resolveAppName(config.clusterCategory);
     this.appVersion = config.appVersion ?? '';
     this.clientType = config.clientType;
     this.clusterCategory = config.clusterCategory;
     this.deviceId = config.deviceId ?? 'react-native';
+    this.includeUserIdentity = config.includeUserIdentity ?? false;
     this.minSeverity = config.minSeverity ?? 'info';
     const {
       osName,
@@ -124,15 +128,15 @@ export class OneDsTelemetryProvider {
     if (config.commonProperties) {
       Object.assign(this.defaultProperties, config.commonProperties);
     }
-    const postChannel = new PostChannel();
+    this.postChannel = new PostChannel();
     const instrumentationKey = config.instrumentationKey ?? resolveInstrumentationKey(config.clusterCategory);
-    const collectorUrl = resolveCollectorUrl(config.clusterCategory, config.telemetryLocation);
+    const collectorUrl = resolveCollectorUrl(config.clusterCategory, this.telemetryLocation);
     const coreConfig = {
       instrumentationKey,
-      channels: [[postChannel]]
+      channels: [[this.postChannel]]
     };
     coreConfig.extensionConfig = {
-      [postChannel.identifier]: {
+      [this.postChannel.identifier]: {
         // Override endpoint explicitly — PostChannel reads overrideEndpointUrl
         // from its own extensionConfig, not from coreConfig.endpointUrl.
         overrideEndpointUrl: collectorUrl,
@@ -164,6 +168,7 @@ export class OneDsTelemetryProvider {
       const ext = envelope.ext = envelope.ext ?? {};
       const utc = ext['utc'] = ext['utc'] ?? {};
       utc['eventFlags'] = (utc['eventFlags'] || 0) | 0x100000;
+      if (this.anonymous) return;
       const app = ext['app'] = ext['app'] ?? {};
       app['sesId'] = this._sessionId;
       if (this.appVersion) app['ver'] = this.appVersion; // → AppInfo_Version
@@ -189,6 +194,15 @@ export class OneDsTelemetryProvider {
     this.core.addTelemetryInitializer(initializer);
   }
   track(event) {
+    if (this.anonymous) {
+      this.core.track({
+        name: 'event',
+        time: event.timestamp,
+        baseType: 'custom',
+        data: buildAnonymousTelemetryData(event, this.appName, this.clusterCategory)
+      });
+      return;
+    }
     const allProperties = {
       ...this.defaultProperties,
       ...event.properties
@@ -214,7 +228,7 @@ export class OneDsTelemetryProvider {
     };
 
     // User identity promoted to top-level columns directly
-    if (this.userIdentity) {
+    if (this.includeUserIdentity && this.userIdentity) {
       data.objectId = this.userIdentity.objectId;
       data.tenantId = this.userIdentity.tenantId;
     }
@@ -242,6 +256,34 @@ export class OneDsTelemetryProvider {
     };
     this.core.track(item);
   }
+  async resolveTelemetryLocation(telemetryLocation) {
+    if (!this.anonymous && telemetryLocation === this.telemetryLocation) return;
+    const previousResolution = this.locationResolution ?? Promise.resolve();
+    const currentResolution = previousResolution.catch(() => undefined).then(() => this.applyTelemetryLocation(telemetryLocation));
+    this.locationResolution = currentResolution;
+    try {
+      await currentResolution;
+    } finally {
+      if (this.locationResolution === currentResolution) {
+        this.locationResolution = undefined;
+      }
+    }
+  }
+  async applyTelemetryLocation(telemetryLocation) {
+    if (!this.anonymous && telemetryLocation === this.telemetryLocation) return;
+    if (telemetryLocation !== this.telemetryLocation) {
+      await this.flush();
+      this.core.updateCfg({
+        extensionConfig: {
+          [this.postChannel.identifier]: {
+            overrideEndpointUrl: resolveCollectorUrl(this.clusterCategory, telemetryLocation)
+          }
+        }
+      });
+      this.telemetryLocation = telemetryLocation;
+    }
+    this.anonymous = false;
+  }
   flush() {
     return new Promise(resolve => {
       this.core.flush(true, () => {

package/lib/module/telemetry/TelemetrySanitizer.js

@@ -50,6 +50,13 @@ const SAS_KEY_SIG_RE = /(?:dsas_secret|sig)=[^#)\(<>\r\n\s'",\\_&]{8}[^#)\(<>\r\
  */
 const SYMM_KEY_256_RE = /[a-z0-9/+]{43}=/gi;
 
+/** Bearer credentials and compact JWTs embedded in otherwise arbitrary text. */
+const BEARER_CREDENTIAL_RE = /\bbearer\s+[a-z0-9._~+\/-]+=*/gi;
+const JWT_RE = /\beyJ[a-z0-9_-]+\.[a-z0-9_-]+\.[a-z0-9_-]+\b/gi;
+
+/** Query strings and fragments on absolute URLs commonly carry user context. */
+const URL_QUERY_OR_FRAGMENT_RE = /(https?:\/\/[^\s?#'"<>]+)[?#][^\s'"<>]*/gi;
+
 /**
  * Property key patterns that must never appear as telemetry values.
  * Checked case-insensitively against the full key name.
@@ -61,7 +68,7 @@ const SENSITIVE_KEY_RE = /password|secret|token|credential|auth(?:orization)?|be
  * Safe to use on error messages, URL paths, and arbitrary text.
  */
 export function sanitizeErrorString(raw) {
-  return raw.replace(EMAIL_RE, '<upn>').replace(PRIVATE_IPV4_RE, (_, port) => port ? `<private-ip>${port}` : '<private-ip>').replace(GOOGLE_API_KEY_RE, '<credential>').replace(SAS_KEY_SIG_RE, '<credential>').replace(SYMM_KEY_256_RE, '<credential>');
+  return raw.replace(URL_QUERY_OR_FRAGMENT_RE, '$1').replace(EMAIL_RE, '<upn>').replace(PRIVATE_IPV4_RE, (_, port) => port ? `<private-ip>${port}` : '<private-ip>').replace(GOOGLE_API_KEY_RE, '<credential>').replace(SAS_KEY_SIG_RE, '<credential>').replace(SYMM_KEY_256_RE, '<credential>').replace(BEARER_CREDENTIAL_RE, 'Bearer <credential>').replace(JWT_RE, '<credential>');
 }
 
 /**
@@ -80,15 +87,29 @@ export function sanitizeUrl(url) {
  *   - Non-string primitives passed through unchanged
  */
 export function sanitizeProperties(props) {
+  return sanitizeRecord(props, new WeakSet(), 0);
+}
+const MAX_SANITIZE_DEPTH = 5;
+function sanitizeRecord(props, seen, depth) {
+  if (seen.has(props) || depth > MAX_SANITIZE_DEPTH) return {};
+  seen.add(props);
   const result = {};
   for (const [key, value] of Object.entries(props)) {
     if (SENSITIVE_KEY_RE.test(key)) {
       result[key] = '<redacted>';
-    } else if (typeof value === 'string') {
-      result[key] = sanitizeErrorString(value);
     } else {
-      result[key] = value;
+      result[key] = sanitizeValue(value, seen, depth + 1);
     }
   }
   return result;
+}
+function sanitizeValue(value, seen, depth) {
+  if (typeof value === 'string') return sanitizeErrorString(value);
+  if (value === null || typeof value !== 'object') return value;
+  if (depth > MAX_SANITIZE_DEPTH || seen.has(value)) return '<redacted>';
+  if (Array.isArray(value)) {
+    seen.add(value);
+    return value.map(item => sanitizeValue(item, seen, depth + 1));
+  }
+  return sanitizeRecord(value, seen, depth);
 }

package/lib/module/telemetry/resolveTelemetryLocation.js

@@ -11,13 +11,23 @@
  * Source: `metadata.properties.location` in the BAP Get Environments API response.
  */
 const EU_BAP_LOCATIONS = new Set(['europe', 'france', 'germany', 'italy', 'poland', 'norway', 'sweden', 'switzerland', 'unitedkingdom']);
+const NON_EU_BAP_LOCATIONS = new Set(['asia', 'australia', 'brazil', 'canada', 'india', 'japan', 'korea', 'southafrica', 'southamerica', 'unitedarabemirates', 'unitedstates']);
+const EU_DATAVERSE_REGIONS = new Set(['che', 'emea', 'eur', 'fra', 'gbr', 'ger', 'ita', 'nor', 'pol', 'swe']);
+const NON_EU_DATAVERSE_REGIONS = new Set(['apac', 'aus', 'can', 'ind', 'jpn', 'kor', 'latam', 'nam', 'na', 'oce', 'sam', 'sgp', 'uae', 'usa']);
+function resolveKnownLocation(input, euValues, nonEuValues) {
+  const value = input?.trim().toLowerCase();
+  if (value && euValues.has(value)) return 'eu';
+  if (value && nonEuValues.has(value)) return 'global';
+  return undefined;
+}
 
 /**
  * Resolve the 1DS telemetry collector location from a Power Platform BAP
  * environment `location` string (`environment.properties.location`).
  * Returns `'eu'` when the location maps to the EU data boundary, routing
  * telemetry to `eu-mobile.events.data.microsoft.com` instead of the global
- * US collector.
+ * US collector. Missing or blank locations fail closed to the EU collector so
+ * telemetry emitted before the environment is known does not leave the EUDB.
  *
  * Mirrors the CLI's detection in `CliLogger.ts`:
  * ```
@@ -31,8 +41,21 @@ const EU_BAP_LOCATIONS = new Set(['europe', 'france', 'germany', 'italy', 'polan
  * resolveTelemetryLocation('unitedkingdom') // → 'eu'
  * resolveTelemetryLocation('italy')         // → 'eu'
  * resolveTelemetryLocation('unitedstates')  // → 'global'
+ * resolveTelemetryLocation()                // → 'eu'
  */
 export function resolveTelemetryLocation(input) {
-  if (!input) return 'global';
-  return EU_BAP_LOCATIONS.has(input.trim().toLowerCase()) ? 'eu' : 'global';
+  return resolveKnownLocation(input, EU_BAP_LOCATIONS, NON_EU_BAP_LOCATIONS) ?? 'eu';
+}
+
+/** Resolve a Dataverse Global Discovery `Instance.Region` code. */
+export function resolveTelemetryLocationFromDataverseRegion(input) {
+  return tryResolveTelemetryLocationFromDataverseRegion(input) ?? 'eu';
+}
+export function tryResolveTelemetryLocationFromDataverseRegion(input) {
+  return resolveKnownLocation(input, EU_DATAVERSE_REGIONS, NON_EU_DATAVERSE_REGIONS);
+}
+
+/** Resolve launch metadata, falling back from BAP location to cluster geography. */
+export function tryResolveTelemetryLocationFromEnvironment(location, clusterGeoShortName) {
+  return resolveKnownLocation(location, EU_BAP_LOCATIONS, NON_EU_BAP_LOCATIONS) ?? tryResolveTelemetryLocationFromDataverseRegion(clusterGeoShortName);
 }

package/lib/module/telemetry/stringifyError.js

@@ -4,25 +4,16 @@
  * Copyright (C) Microsoft Corporation. All rights reserved.
  */
 
-import { sanitizeErrorString } from "./TelemetrySanitizer.js";
-
 /**
- * Converts an unknown thrown value to a string suitable for telemetry.
- * PII (email addresses, private IPv4 addresses) is redacted before the
- * string is returned.
+ * Classifies an unknown thrown value without exporting its message, stack, or
+ * serialized contents. Error prose is not a safe telemetry contract because
+ * upstream services may include customer data or credentials in it.
  */
 export function stringifyError(error) {
-  let raw;
   if (error instanceof Error) {
-    raw = `${error.name}: ${error.message}${error.stack ? `\n${error.stack}` : ''}`;
-  } else if (typeof error === 'string') {
-    raw = error;
-  } else {
-    try {
-      raw = JSON.stringify(error);
-    } catch {
-      raw = String(error);
-    }
+    return error.name || error.constructor.name || 'Error';
   }
-  return sanitizeErrorString(raw);
+  if (typeof error === 'string') return 'StringError';
+  if (error && typeof error === 'object') return error.constructor?.name || 'ObjectError';
+  return `${typeof error}Error`;
 }

package/lib/module/utils/DeviceIdUtils.js

@@ -4,9 +4,7 @@
  * Copyright (C) Microsoft Corporation. All rights reserved.
  */
 
-import * as Application from 'expo-application';
 import * as SecureStore from 'expo-secure-store';
-import { Platform } from 'react-native';
 import { generateGuid } from "./GuidUtils.js";
 
 // Fallback key used when the platform native ID is unavailable.
@@ -14,18 +12,9 @@ import { generateGuid } from "./GuidUtils.js";
 const DEVICE_ID_FALLBACK_KEY = 'microsoft.power-apps-native-common.device_id';
 
 /**
- * Returns a stable device identifier, preferring platform-native IDs that
- * survive app reinstalls:
- *
- * - **iOS**: `getIosIdForVendorAsync()` (IDFV) — stable while ≥1 app from the
- *   same vendor bundle prefix is installed. Resets only when ALL vendor apps
- *   are removed.
- * - **Android**: `getAndroidId()` (SSAID) — scoped to the app signing key on
- *   Android 8+; survives reinstalls as long as the signing key is unchanged.
- *
- * If the platform API returns null (rare edge cases: first boot, some emulators)
- * the function falls back to a UUID persisted in `expo-secure-store`, which on
- * iOS survives reinstalls via the Keychain and on Android is per-install only.
+ * Returns a random app-scoped telemetry identifier. It does not use IDFV,
+ * SSAID, or another platform device identifier, and can be rotated with
+ * `resetDeviceId()` for deletion and opt-out workflows.
  *
  * Pass the resolved value to `OneDsTelemetryProviderConfig.deviceId` at startup.
  *
@@ -38,20 +27,6 @@ const DEVICE_ID_FALLBACK_KEY = 'microsoft.power-apps-native-common.device_id';
  * ```
  */
 export async function resolveDeviceId() {
-  if (Platform.OS === 'ios') {
-    const idfv = await Application.getIosIdForVendorAsync();
-    if (idfv) {
-      return idfv;
-    }
-  } else if (Platform.OS === 'android') {
-    const androidId = Application.getAndroidId();
-    if (androidId) {
-      return androidId;
-    }
-  }
-
-  // Fallback: stable UUID in SecureStore (iOS: survives reinstall via Keychain;
-  // Android: per-install only, but only reached when SSAID is unavailable).
   const existing = await SecureStore.getItemAsync(DEVICE_ID_FALLBACK_KEY);
   if (existing) {
     return existing;
@@ -59,4 +34,9 @@ export async function resolveDeviceId() {
   const id = generateGuid();
   await SecureStore.setItemAsync(DEVICE_ID_FALLBACK_KEY, id);
   return id;
+}
+
+/** Deletes the app-scoped telemetry identifier so the next resolution rotates it. */
+export async function resetDeviceId() {
+  await SecureStore.deleteItemAsync(DEVICE_ID_FALLBACK_KEY);
 }

package/lib/typescript/commonjs/index.d.ts

@@ -7,15 +7,15 @@ export type { ILogger, ScenarioTracker } from './telemetry/ILogger';
 export { Logger } from './telemetry/Logger';
 export { OneDsTelemetryProvider } from './telemetry/OneDsTelemetryProvider';
 export { ApplicationInsightsTelemetryProvider } from './telemetry/ApplicationInsightsTelemetryProvider';
-export { resolveTelemetryLocation } from './telemetry/resolveTelemetryLocation';
+export { resolveTelemetryLocation, resolveTelemetryLocationFromDataverseRegion, tryResolveTelemetryLocationFromDataverseRegion, tryResolveTelemetryLocationFromEnvironment, } from './telemetry/resolveTelemetryLocation';
 export { stringifyError } from './telemetry/stringifyError';
 export { sanitizeErrorString, sanitizeUrl, sanitizeProperties } from './telemetry/TelemetrySanitizer';
 export { suppressKnownWarnings } from './telemetry/suppressKnownWarnings';
 export { HttpClient, getHttpCorrelationProperties } from './http/HttpClient';
-export { resolveDeviceId } from './utils/DeviceIdUtils';
+export { resetDeviceId, resolveDeviceId } from './utils/DeviceIdUtils';
 export { configureAppLogger, getAppLogger } from './telemetry/AppLogger';
-export { configureCustomerTelemetryLogger, getCustomerTelemetryLogger, } from './telemetry/CustomerTelemetryLogger';
-export type { ICustomerTelemetryLogger } from './telemetry/CustomerTelemetryLogger';
+export { configureCustomEventsLogger, getCustomEventsLogger, } from './telemetry/CustomEventsLogger';
+export type { ICustomEventsLogger } from './telemetry/CustomEventsLogger';
 export type { ITelemetryProvider, LoggerConfig, OneDsTelemetryProviderConfig, ApplicationInsightsTelemetryProviderConfig, PropertyColumnMap, TelemetryEnvelope, TelemetryEvent, TelemetryLocation, TelemetrySeverity, UserIdentity, } from './telemetry/TelemetryTypes';
 export { ScenarioResults, TelemetryEventNames } from './telemetry/TelemetryTypes';
 export type { ClusterCategory, Region } from './types/ClusterCategory';

package/lib/typescript/commonjs/telemetry/AnonymousTelemetry.d.ts

@@ -0,0 +1,4 @@
+import type { ClusterCategory } from '../types/ClusterCategory';
+import type { TelemetryEvent } from './TelemetryTypes';
+export declare function buildAnonymousTelemetryData(event: TelemetryEvent, appName: string, clusterCategory: ClusterCategory): Record<string, unknown>;
+//# sourceMappingURL=AnonymousTelemetry.d.ts.map

package/lib/typescript/commonjs/telemetry/CustomEventsLogger.d.ts

@@ -0,0 +1,21 @@
+/*!
+ * Copyright (C) Microsoft Corporation. All rights reserved.
+ */
+import type { ILogger, ScenarioTracker } from './ILogger';
+export interface ICustomEventsLogger {
+    trackEvent(name: string, properties?: Record<string, unknown>): void;
+    trackError(name: string, error?: unknown, properties?: Record<string, unknown>): void;
+    trackScenario(name: string, properties?: Record<string, unknown>): ScenarioTracker;
+    flush(): Promise<void>;
+}
+/**
+ * Configures the custom-events singleton. Hosting infrastructure owns
+ * this function; application code should use getCustomEventsLogger().
+ */
+export declare function configureCustomEventsLogger(logger: ILogger): void;
+/**
+ * Returns the app's custom-events logger. It is a safe no-op until the
+ * host configures an Application Insights provider.
+ */
+export declare function getCustomEventsLogger(): ICustomEventsLogger;
+//# sourceMappingURL=CustomEventsLogger.d.ts.map

package/lib/typescript/commonjs/telemetry/OneDsTelemetryProvider.d.ts

@@ -1,8 +1,9 @@
 /*!
  * Copyright (C) Microsoft Corporation. All rights reserved.
  */
-import type { ITelemetryProvider, OneDsTelemetryProviderConfig, TelemetryEnvelope, TelemetryEvent, TelemetrySeverity, UserIdentity } from './TelemetryTypes';
+import type { ITelemetryProvider, OneDsTelemetryProviderConfig, TelemetryEnvelope, TelemetryEvent, TelemetryLocation, TelemetrySeverity, UserIdentity } from './TelemetryTypes';
 export declare class OneDsTelemetryProvider implements ITelemetryProvider {
+    private anonymous;
     private readonly appName;
     private readonly appVersion;
     private readonly clientType;
@@ -13,11 +14,15 @@ export declare class OneDsTelemetryProvider implements ITelemetryProvider {
     private readonly deviceMake;
     private readonly deviceModel;
     private readonly deviceType;
+    private readonly includeUserIdentity;
     private readonly osName;
     private readonly osVersion;
+    private readonly postChannel;
     private readonly userLocale;
     private readonly userTimeZone;
     private readonly propertyColumnMap;
+    private locationResolution?;
+    private telemetryLocation;
     readonly minSeverity: TelemetrySeverity;
     private _sessionId;
     private userIdentity?;
@@ -29,6 +34,8 @@ export declare class OneDsTelemetryProvider implements ITelemetryProvider {
      */
     addTelemetryInitializer(initializer: (envelope: TelemetryEnvelope) => void): void;
     track(event: TelemetryEvent): void;
+    resolveTelemetryLocation(telemetryLocation: TelemetryLocation): Promise<void>;
+    private applyTelemetryLocation;
     flush(): Promise<void>;
     teardown(): Promise<void>;
     get sessionId(): string;

package/lib/typescript/commonjs/telemetry/TelemetryTypes.d.ts

@@ -72,6 +72,8 @@ export interface OneDsTelemetryProviderConfig {
      * and pass the result here. Falls back to `'react-native'` if omitted.
      */
     deviceId?: string;
+    /** Include signed-in object and tenant IDs. Disabled by default. */
+    includeUserIdentity?: boolean;
     /**
      * 1DS instrumentation key (Aria project ID).
      * When omitted, resolved automatically from `clusterCategory`.
@@ -81,12 +83,17 @@ export interface OneDsTelemetryProviderConfig {
     minSeverity?: TelemetrySeverity;
     /** Data residency location. Default: 'global'. Set to 'eu' for European environments. */
     telemetryLocation?: TelemetryLocation;
+    /**
+     * Emit only non-identifying operational fields. Stable IDs, user identity,
+     * platform fingerprint fields, defaults, and arbitrary event properties are omitted.
+     */
+    anonymous?: boolean;
     commonProperties?: Record<string, string>;
     propertyColumnMap?: PropertyColumnMap;
     channelConfig?: Record<string, unknown>;
 }
 export interface ApplicationInsightsTelemetryProviderConfig {
-    /** Connection string for the C1-owned workspace-based Application Insights resource. */
+    /** Connection string for the customer-owned workspace-based Application Insights resource. */
     connectionString: string;
     /** Stable generated-app identifier added to every telemetry item. */
     appId: string;

package/lib/typescript/commonjs/telemetry/resolveTelemetryLocation.d.ts

@@ -7,7 +7,8 @@ import type { TelemetryLocation } from './TelemetryTypes';
  * environment `location` string (`environment.properties.location`).
  * Returns `'eu'` when the location maps to the EU data boundary, routing
  * telemetry to `eu-mobile.events.data.microsoft.com` instead of the global
- * US collector.
+ * US collector. Missing or blank locations fail closed to the EU collector so
+ * telemetry emitted before the environment is known does not leave the EUDB.
  *
  * Mirrors the CLI's detection in `CliLogger.ts`:
  * ```
@@ -21,6 +22,12 @@ import type { TelemetryLocation } from './TelemetryTypes';
  * resolveTelemetryLocation('unitedkingdom') // → 'eu'
  * resolveTelemetryLocation('italy')         // → 'eu'
  * resolveTelemetryLocation('unitedstates')  // → 'global'
+ * resolveTelemetryLocation()                // → 'eu'
  */
 export declare function resolveTelemetryLocation(input?: string): TelemetryLocation;
+/** Resolve a Dataverse Global Discovery `Instance.Region` code. */
+export declare function resolveTelemetryLocationFromDataverseRegion(input?: string): TelemetryLocation;
+export declare function tryResolveTelemetryLocationFromDataverseRegion(input?: string): TelemetryLocation | undefined;
+/** Resolve launch metadata, falling back from BAP location to cluster geography. */
+export declare function tryResolveTelemetryLocationFromEnvironment(location?: string, clusterGeoShortName?: string): TelemetryLocation | undefined;
 //# sourceMappingURL=resolveTelemetryLocation.d.ts.map

package/lib/typescript/commonjs/telemetry/stringifyError.d.ts

@@ -2,9 +2,9 @@
  * Copyright (C) Microsoft Corporation. All rights reserved.
  */
 /**
- * Converts an unknown thrown value to a string suitable for telemetry.
- * PII (email addresses, private IPv4 addresses) is redacted before the
- * string is returned.
+ * Classifies an unknown thrown value without exporting its message, stack, or
+ * serialized contents. Error prose is not a safe telemetry contract because
+ * upstream services may include customer data or credentials in it.
  */
 export declare function stringifyError(error: unknown): string;
 //# sourceMappingURL=stringifyError.d.ts.map

package/lib/typescript/commonjs/utils/DeviceIdUtils.d.ts

@@ -2,18 +2,9 @@
  * Copyright (C) Microsoft Corporation. All rights reserved.
  */
 /**
- * Returns a stable device identifier, preferring platform-native IDs that
- * survive app reinstalls:
- *
- * - **iOS**: `getIosIdForVendorAsync()` (IDFV) — stable while ≥1 app from the
- *   same vendor bundle prefix is installed. Resets only when ALL vendor apps
- *   are removed.
- * - **Android**: `getAndroidId()` (SSAID) — scoped to the app signing key on
- *   Android 8+; survives reinstalls as long as the signing key is unchanged.
- *
- * If the platform API returns null (rare edge cases: first boot, some emulators)
- * the function falls back to a UUID persisted in `expo-secure-store`, which on
- * iOS survives reinstalls via the Keychain and on Android is per-install only.
+ * Returns a random app-scoped telemetry identifier. It does not use IDFV,
+ * SSAID, or another platform device identifier, and can be rotated with
+ * `resetDeviceId()` for deletion and opt-out workflows.
  *
  * Pass the resolved value to `OneDsTelemetryProviderConfig.deviceId` at startup.
  *
@@ -26,4 +17,6 @@
  * ```
  */
 export declare function resolveDeviceId(): Promise<string>;
+/** Deletes the app-scoped telemetry identifier so the next resolution rotates it. */
+export declare function resetDeviceId(): Promise<void>;
 //# sourceMappingURL=DeviceIdUtils.d.ts.map

package/lib/typescript/module/index.d.ts

@@ -7,15 +7,15 @@ export type { ILogger, ScenarioTracker } from './telemetry/ILogger.js';
 export { Logger } from './telemetry/Logger.js';
 export { OneDsTelemetryProvider } from './telemetry/OneDsTelemetryProvider.js';
 export { ApplicationInsightsTelemetryProvider } from './telemetry/ApplicationInsightsTelemetryProvider.js';
-export { resolveTelemetryLocation } from './telemetry/resolveTelemetryLocation.js';
+export { resolveTelemetryLocation, resolveTelemetryLocationFromDataverseRegion, tryResolveTelemetryLocationFromDataverseRegion, tryResolveTelemetryLocationFromEnvironment, } from './telemetry/resolveTelemetryLocation.js';
 export { stringifyError } from './telemetry/stringifyError.js';
 export { sanitizeErrorString, sanitizeUrl, sanitizeProperties } from './telemetry/TelemetrySanitizer.js';
 export { suppressKnownWarnings } from './telemetry/suppressKnownWarnings.js';
 export { HttpClient, getHttpCorrelationProperties } from './http/HttpClient.js';
-export { resolveDeviceId } from './utils/DeviceIdUtils.js';
+export { resetDeviceId, resolveDeviceId } from './utils/DeviceIdUtils.js';
 export { configureAppLogger, getAppLogger } from './telemetry/AppLogger.js';
-export { configureCustomerTelemetryLogger, getCustomerTelemetryLogger, } from './telemetry/CustomerTelemetryLogger.js';
-export type { ICustomerTelemetryLogger } from './telemetry/CustomerTelemetryLogger.js';
+export { configureCustomEventsLogger, getCustomEventsLogger, } from './telemetry/CustomEventsLogger.js';
+export type { ICustomEventsLogger } from './telemetry/CustomEventsLogger.js';
 export type { ITelemetryProvider, LoggerConfig, OneDsTelemetryProviderConfig, ApplicationInsightsTelemetryProviderConfig, PropertyColumnMap, TelemetryEnvelope, TelemetryEvent, TelemetryLocation, TelemetrySeverity, UserIdentity, } from './telemetry/TelemetryTypes.js';
 export { ScenarioResults, TelemetryEventNames } from './telemetry/TelemetryTypes.js';
 export type { ClusterCategory, Region } from './types/ClusterCategory.js';

package/lib/typescript/module/telemetry/AnonymousTelemetry.d.ts

@@ -0,0 +1,4 @@
+import type { ClusterCategory } from '../types/ClusterCategory.js';
+import type { TelemetryEvent } from './TelemetryTypes.js';
+export declare function buildAnonymousTelemetryData(event: TelemetryEvent, appName: string, clusterCategory: ClusterCategory): Record<string, unknown>;
+//# sourceMappingURL=AnonymousTelemetry.d.ts.map

package/lib/typescript/module/telemetry/CustomEventsLogger.d.ts

@@ -0,0 +1,21 @@
+/*!
+ * Copyright (C) Microsoft Corporation. All rights reserved.
+ */
+import type { ILogger, ScenarioTracker } from './ILogger.js';
+export interface ICustomEventsLogger {
+    trackEvent(name: string, properties?: Record<string, unknown>): void;
+    trackError(name: string, error?: unknown, properties?: Record<string, unknown>): void;
+    trackScenario(name: string, properties?: Record<string, unknown>): ScenarioTracker;
+    flush(): Promise<void>;
+}
+/**
+ * Configures the custom-events singleton. Hosting infrastructure owns
+ * this function; application code should use getCustomEventsLogger().
+ */
+export declare function configureCustomEventsLogger(logger: ILogger): void;
+/**
+ * Returns the app's custom-events logger. It is a safe no-op until the
+ * host configures an Application Insights provider.
+ */
+export declare function getCustomEventsLogger(): ICustomEventsLogger;
+//# sourceMappingURL=CustomEventsLogger.d.ts.map

package/lib/typescript/module/telemetry/OneDsTelemetryProvider.d.ts

@@ -1,8 +1,9 @@
 /*!
  * Copyright (C) Microsoft Corporation. All rights reserved.
  */
-import type { ITelemetryProvider, OneDsTelemetryProviderConfig, TelemetryEnvelope, TelemetryEvent, TelemetrySeverity, UserIdentity } from './TelemetryTypes.js';
+import type { ITelemetryProvider, OneDsTelemetryProviderConfig, TelemetryEnvelope, TelemetryEvent, TelemetryLocation, TelemetrySeverity, UserIdentity } from './TelemetryTypes.js';
 export declare class OneDsTelemetryProvider implements ITelemetryProvider {
+    private anonymous;
     private readonly appName;
     private readonly appVersion;
     private readonly clientType;
@@ -13,11 +14,15 @@ export declare class OneDsTelemetryProvider implements ITelemetryProvider {
     private readonly deviceMake;
     private readonly deviceModel;
     private readonly deviceType;
+    private readonly includeUserIdentity;
     private readonly osName;
     private readonly osVersion;
+    private readonly postChannel;
     private readonly userLocale;
     private readonly userTimeZone;
     private readonly propertyColumnMap;
+    private locationResolution?;
+    private telemetryLocation;
     readonly minSeverity: TelemetrySeverity;
     private _sessionId;
     private userIdentity?;
@@ -29,6 +34,8 @@ export declare class OneDsTelemetryProvider implements ITelemetryProvider {
      */
     addTelemetryInitializer(initializer: (envelope: TelemetryEnvelope) => void): void;
     track(event: TelemetryEvent): void;
+    resolveTelemetryLocation(telemetryLocation: TelemetryLocation): Promise<void>;
+    private applyTelemetryLocation;
     flush(): Promise<void>;
     teardown(): Promise<void>;
     get sessionId(): string;

package/lib/typescript/module/telemetry/TelemetryTypes.d.ts

@@ -72,6 +72,8 @@ export interface OneDsTelemetryProviderConfig {
      * and pass the result here. Falls back to `'react-native'` if omitted.
      */
     deviceId?: string;
+    /** Include signed-in object and tenant IDs. Disabled by default. */
+    includeUserIdentity?: boolean;
     /**
      * 1DS instrumentation key (Aria project ID).
      * When omitted, resolved automatically from `clusterCategory`.
@@ -81,12 +83,17 @@ export interface OneDsTelemetryProviderConfig {
     minSeverity?: TelemetrySeverity;
     /** Data residency location. Default: 'global'. Set to 'eu' for European environments. */
     telemetryLocation?: TelemetryLocation;
+    /**
+     * Emit only non-identifying operational fields. Stable IDs, user identity,
+     * platform fingerprint fields, defaults, and arbitrary event properties are omitted.
+     */
+    anonymous?: boolean;
     commonProperties?: Record<string, string>;
     propertyColumnMap?: PropertyColumnMap;
     channelConfig?: Record<string, unknown>;
 }
 export interface ApplicationInsightsTelemetryProviderConfig {
-    /** Connection string for the C1-owned workspace-based Application Insights resource. */
+    /** Connection string for the customer-owned workspace-based Application Insights resource. */
     connectionString: string;
     /** Stable generated-app identifier added to every telemetry item. */
     appId: string;

package/lib/typescript/module/telemetry/resolveTelemetryLocation.d.ts

@@ -7,7 +7,8 @@ import type { TelemetryLocation } from './TelemetryTypes.js';
  * environment `location` string (`environment.properties.location`).
  * Returns `'eu'` when the location maps to the EU data boundary, routing
  * telemetry to `eu-mobile.events.data.microsoft.com` instead of the global
- * US collector.
+ * US collector. Missing or blank locations fail closed to the EU collector so
+ * telemetry emitted before the environment is known does not leave the EUDB.
  *
  * Mirrors the CLI's detection in `CliLogger.ts`:
  * ```
@@ -21,6 +22,12 @@ import type { TelemetryLocation } from './TelemetryTypes.js';
  * resolveTelemetryLocation('unitedkingdom') // → 'eu'
  * resolveTelemetryLocation('italy')         // → 'eu'
  * resolveTelemetryLocation('unitedstates')  // → 'global'
+ * resolveTelemetryLocation()                // → 'eu'
  */
 export declare function resolveTelemetryLocation(input?: string): TelemetryLocation;
+/** Resolve a Dataverse Global Discovery `Instance.Region` code. */
+export declare function resolveTelemetryLocationFromDataverseRegion(input?: string): TelemetryLocation;
+export declare function tryResolveTelemetryLocationFromDataverseRegion(input?: string): TelemetryLocation | undefined;
+/** Resolve launch metadata, falling back from BAP location to cluster geography. */
+export declare function tryResolveTelemetryLocationFromEnvironment(location?: string, clusterGeoShortName?: string): TelemetryLocation | undefined;
 //# sourceMappingURL=resolveTelemetryLocation.d.ts.map