@microsoft/power-apps-native-common 0.3.0 → 0.3.2

package/lib/NOTICE.txt

@@ -30,6 +30,32 @@ SOFTWARE.
 
 ========================================================================
 
+@microsoft/applicationinsights-channel-js 3.4.3
+--
+The MIT License (MIT)
+
+Copyright (c) Microsoft Corporation
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+========================================================================
+
 @microsoft/applicationinsights-core-js 3.4.3
 --
 The MIT License (MIT)

package/lib/commonjs/index.js

@@ -87,6 +87,12 @@ Object.defineProperty(exports, "regionToClusterCategory", {
     return _ClusterCategory.regionToClusterCategory;
   }
 });
+Object.defineProperty(exports, "resetDeviceId", {
+  enumerable: true,
+  get: function () {
+    return _DeviceIdUtils.resetDeviceId;
+  }
+});
 Object.defineProperty(exports, "resolveDeviceId", {
   enumerable: true,
   get: function () {
@@ -99,6 +105,12 @@ Object.defineProperty(exports, "resolveTelemetryLocation", {
     return _resolveTelemetryLocation.resolveTelemetryLocation;
   }
 });
+Object.defineProperty(exports, "resolveTelemetryLocationFromDataverseRegion", {
+  enumerable: true,
+  get: function () {
+    return _resolveTelemetryLocation.resolveTelemetryLocationFromDataverseRegion;
+  }
+});
 Object.defineProperty(exports, "sanitizeErrorString", {
   enumerable: true,
   get: function () {
@@ -129,6 +141,18 @@ Object.defineProperty(exports, "suppressKnownWarnings", {
     return _suppressKnownWarnings.suppressKnownWarnings;
   }
 });
+Object.defineProperty(exports, "tryResolveTelemetryLocationFromDataverseRegion", {
+  enumerable: true,
+  get: function () {
+    return _resolveTelemetryLocation.tryResolveTelemetryLocationFromDataverseRegion;
+  }
+});
+Object.defineProperty(exports, "tryResolveTelemetryLocationFromEnvironment", {
+  enumerable: true,
+  get: function () {
+    return _resolveTelemetryLocation.tryResolveTelemetryLocationFromEnvironment;
+  }
+});
 var _ConsoleAdapter = require("./telemetry/ConsoleAdapter.js");
 var _Logger = require("./telemetry/Logger.js");
 var _OneDsTelemetryProvider = require("./telemetry/OneDsTelemetryProvider.js");

package/lib/commonjs/telemetry/AnonymousTelemetry.js

@@ -0,0 +1,25 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.buildAnonymousTelemetryData = buildAnonymousTelemetryData;
+function buildAnonymousTelemetryData(event, appName, clusterCategory) {
+  const operationName = typeof event.properties.operationName === 'string' ? event.properties.operationName : undefined;
+  return {
+    app_Name: appName,
+    clusterCategory,
+    event_Name: event.eventName,
+    severity: event.severity,
+    timestamp: event.timestamp,
+    ...(event.duration !== undefined ? {
+      duration: event.duration
+    } : {}),
+    ...(operationName ? {
+      operation_Name: operationName
+    } : {}),
+    customDimensions: JSON.stringify(operationName ? {
+      operationName
+    } : {})
+  };
+}

package/lib/commonjs/telemetry/OneDsTelemetryProvider.js

@@ -8,6 +8,7 @@ var _applicationinsightsCoreJs = require("@microsoft/applicationinsights-core-js
 var _dsPostJs = require("@microsoft/1ds-post-js");
 var _GuidUtils = require("../utils/GuidUtils.js");
 var _PlatformInfoUtils = require("../utils/PlatformInfoUtils.js");
+var _AnonymousTelemetry = require("./AnonymousTelemetry.js");
 /*!
  * Copyright (C) Microsoft Corporation. All rights reserved.
  */
@@ -97,11 +98,14 @@ class OneDsTelemetryProvider {
   defaultProperties = {};
   constructor(config) {
     this._sessionId = (0, _GuidUtils.generateGuid)();
+    this.anonymous = config.anonymous ?? false;
+    this.telemetryLocation = config.telemetryLocation ?? 'global';
     this.appName = resolveAppName(config.clusterCategory);
     this.appVersion = config.appVersion ?? '';
     this.clientType = config.clientType;
     this.clusterCategory = config.clusterCategory;
     this.deviceId = config.deviceId ?? 'react-native';
+    this.includeUserIdentity = config.includeUserIdentity ?? false;
     this.minSeverity = config.minSeverity ?? 'info';
     const {
       osName,
@@ -128,15 +132,15 @@ class OneDsTelemetryProvider {
     if (config.commonProperties) {
       Object.assign(this.defaultProperties, config.commonProperties);
     }
-    const postChannel = new _dsPostJs.PostChannel();
+    this.postChannel = new _dsPostJs.PostChannel();
     const instrumentationKey = config.instrumentationKey ?? resolveInstrumentationKey(config.clusterCategory);
-    const collectorUrl = resolveCollectorUrl(config.clusterCategory, config.telemetryLocation);
+    const collectorUrl = resolveCollectorUrl(config.clusterCategory, this.telemetryLocation);
     const coreConfig = {
       instrumentationKey,
-      channels: [[postChannel]]
+      channels: [[this.postChannel]]
     };
     coreConfig.extensionConfig = {
-      [postChannel.identifier]: {
+      [this.postChannel.identifier]: {
         // Override endpoint explicitly — PostChannel reads overrideEndpointUrl
         // from its own extensionConfig, not from coreConfig.endpointUrl.
         overrideEndpointUrl: collectorUrl,
@@ -168,6 +172,7 @@ class OneDsTelemetryProvider {
       const ext = envelope.ext = envelope.ext ?? {};
       const utc = ext['utc'] = ext['utc'] ?? {};
       utc['eventFlags'] = (utc['eventFlags'] || 0) | 0x100000;
+      if (this.anonymous) return;
       const app = ext['app'] = ext['app'] ?? {};
       app['sesId'] = this._sessionId;
       if (this.appVersion) app['ver'] = this.appVersion; // → AppInfo_Version
@@ -193,6 +198,15 @@ class OneDsTelemetryProvider {
     this.core.addTelemetryInitializer(initializer);
   }
   track(event) {
+    if (this.anonymous) {
+      this.core.track({
+        name: 'event',
+        time: event.timestamp,
+        baseType: 'custom',
+        data: (0, _AnonymousTelemetry.buildAnonymousTelemetryData)(event, this.appName, this.clusterCategory)
+      });
+      return;
+    }
     const allProperties = {
       ...this.defaultProperties,
       ...event.properties
@@ -218,7 +232,7 @@ class OneDsTelemetryProvider {
     };
 
     // User identity promoted to top-level columns directly
-    if (this.userIdentity) {
+    if (this.includeUserIdentity && this.userIdentity) {
       data.objectId = this.userIdentity.objectId;
       data.tenantId = this.userIdentity.tenantId;
     }
@@ -246,6 +260,34 @@ class OneDsTelemetryProvider {
     };
     this.core.track(item);
   }
+  async resolveTelemetryLocation(telemetryLocation) {
+    if (!this.anonymous && telemetryLocation === this.telemetryLocation) return;
+    const previousResolution = this.locationResolution ?? Promise.resolve();
+    const currentResolution = previousResolution.catch(() => undefined).then(() => this.applyTelemetryLocation(telemetryLocation));
+    this.locationResolution = currentResolution;
+    try {
+      await currentResolution;
+    } finally {
+      if (this.locationResolution === currentResolution) {
+        this.locationResolution = undefined;
+      }
+    }
+  }
+  async applyTelemetryLocation(telemetryLocation) {
+    if (!this.anonymous && telemetryLocation === this.telemetryLocation) return;
+    if (telemetryLocation !== this.telemetryLocation) {
+      await this.flush();
+      this.core.updateCfg({
+        extensionConfig: {
+          [this.postChannel.identifier]: {
+            overrideEndpointUrl: resolveCollectorUrl(this.clusterCategory, telemetryLocation)
+          }
+        }
+      });
+      this.telemetryLocation = telemetryLocation;
+    }
+    this.anonymous = false;
+  }
   flush() {
     return new Promise(resolve => {
       this.core.flush(true, () => {

package/lib/commonjs/telemetry/TelemetrySanitizer.js

@@ -56,6 +56,13 @@ const SAS_KEY_SIG_RE = /(?:dsas_secret|sig)=[^#)\(<>\r\n\s'",\\_&]{8}[^#)\(<>\r\
  */
 const SYMM_KEY_256_RE = /[a-z0-9/+]{43}=/gi;
 
+/** Bearer credentials and compact JWTs embedded in otherwise arbitrary text. */
+const BEARER_CREDENTIAL_RE = /\bbearer\s+[a-z0-9._~+\/-]+=*/gi;
+const JWT_RE = /\beyJ[a-z0-9_-]+\.[a-z0-9_-]+\.[a-z0-9_-]+\b/gi;
+
+/** Query strings and fragments on absolute URLs commonly carry user context. */
+const URL_QUERY_OR_FRAGMENT_RE = /(https?:\/\/[^\s?#'"<>]+)[?#][^\s'"<>]*/gi;
+
 /**
  * Property key patterns that must never appear as telemetry values.
  * Checked case-insensitively against the full key name.
@@ -67,7 +74,7 @@ const SENSITIVE_KEY_RE = /password|secret|token|credential|auth(?:orization)?|be
  * Safe to use on error messages, URL paths, and arbitrary text.
  */
 function sanitizeErrorString(raw) {
-  return raw.replace(EMAIL_RE, '<upn>').replace(PRIVATE_IPV4_RE, (_, port) => port ? `<private-ip>${port}` : '<private-ip>').replace(GOOGLE_API_KEY_RE, '<credential>').replace(SAS_KEY_SIG_RE, '<credential>').replace(SYMM_KEY_256_RE, '<credential>');
+  return raw.replace(URL_QUERY_OR_FRAGMENT_RE, '$1').replace(EMAIL_RE, '<upn>').replace(PRIVATE_IPV4_RE, (_, port) => port ? `<private-ip>${port}` : '<private-ip>').replace(GOOGLE_API_KEY_RE, '<credential>').replace(SAS_KEY_SIG_RE, '<credential>').replace(SYMM_KEY_256_RE, '<credential>').replace(BEARER_CREDENTIAL_RE, 'Bearer <credential>').replace(JWT_RE, '<credential>');
 }
 
 /**
@@ -86,15 +93,29 @@ function sanitizeUrl(url) {
  *   - Non-string primitives passed through unchanged
  */
 function sanitizeProperties(props) {
+  return sanitizeRecord(props, new WeakSet(), 0);
+}
+const MAX_SANITIZE_DEPTH = 5;
+function sanitizeRecord(props, seen, depth) {
+  if (seen.has(props) || depth > MAX_SANITIZE_DEPTH) return {};
+  seen.add(props);
   const result = {};
   for (const [key, value] of Object.entries(props)) {
     if (SENSITIVE_KEY_RE.test(key)) {
       result[key] = '<redacted>';
-    } else if (typeof value === 'string') {
-      result[key] = sanitizeErrorString(value);
     } else {
-      result[key] = value;
+      result[key] = sanitizeValue(value, seen, depth + 1);
     }
   }
   return result;
+}
+function sanitizeValue(value, seen, depth) {
+  if (typeof value === 'string') return sanitizeErrorString(value);
+  if (value === null || typeof value !== 'object') return value;
+  if (depth > MAX_SANITIZE_DEPTH || seen.has(value)) return '<redacted>';
+  if (Array.isArray(value)) {
+    seen.add(value);
+    return value.map(item => sanitizeValue(item, seen, depth + 1));
+  }
+  return sanitizeRecord(value, seen, depth);
 }

package/lib/commonjs/telemetry/resolveTelemetryLocation.js

@@ -4,6 +4,9 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.resolveTelemetryLocation = resolveTelemetryLocation;
+exports.resolveTelemetryLocationFromDataverseRegion = resolveTelemetryLocationFromDataverseRegion;
+exports.tryResolveTelemetryLocationFromDataverseRegion = tryResolveTelemetryLocationFromDataverseRegion;
+exports.tryResolveTelemetryLocationFromEnvironment = tryResolveTelemetryLocationFromEnvironment;
 /*!
  * Copyright (C) Microsoft Corporation. All rights reserved.
  */
@@ -15,13 +18,23 @@ exports.resolveTelemetryLocation = resolveTelemetryLocation;
  * Source: `metadata.properties.location` in the BAP Get Environments API response.
  */
 const EU_BAP_LOCATIONS = new Set(['europe', 'france', 'germany', 'italy', 'poland', 'norway', 'sweden', 'switzerland', 'unitedkingdom']);
+const NON_EU_BAP_LOCATIONS = new Set(['asia', 'australia', 'brazil', 'canada', 'india', 'japan', 'korea', 'southafrica', 'southamerica', 'unitedarabemirates', 'unitedstates']);
+const EU_DATAVERSE_REGIONS = new Set(['che', 'emea', 'eur', 'fra', 'gbr', 'ger', 'ita', 'nor', 'pol', 'swe']);
+const NON_EU_DATAVERSE_REGIONS = new Set(['apac', 'aus', 'can', 'ind', 'jpn', 'kor', 'latam', 'nam', 'na', 'oce', 'sam', 'sgp', 'uae', 'usa']);
+function resolveKnownLocation(input, euValues, nonEuValues) {
+  const value = input?.trim().toLowerCase();
+  if (value && euValues.has(value)) return 'eu';
+  if (value && nonEuValues.has(value)) return 'global';
+  return undefined;
+}
 
 /**
  * Resolve the 1DS telemetry collector location from a Power Platform BAP
  * environment `location` string (`environment.properties.location`).
  * Returns `'eu'` when the location maps to the EU data boundary, routing
  * telemetry to `eu-mobile.events.data.microsoft.com` instead of the global
- * US collector.
+ * US collector. Missing or blank locations fail closed to the EU collector so
+ * telemetry emitted before the environment is known does not leave the EUDB.
  *
  * Mirrors the CLI's detection in `CliLogger.ts`:
  * ```
@@ -35,8 +48,21 @@ const EU_BAP_LOCATIONS = new Set(['europe', 'france', 'germany', 'italy', 'polan
  * resolveTelemetryLocation('unitedkingdom') // → 'eu'
  * resolveTelemetryLocation('italy')         // → 'eu'
  * resolveTelemetryLocation('unitedstates')  // → 'global'
+ * resolveTelemetryLocation()                // → 'eu'
  */
 function resolveTelemetryLocation(input) {
-  if (!input) return 'global';
-  return EU_BAP_LOCATIONS.has(input.trim().toLowerCase()) ? 'eu' : 'global';
+  return resolveKnownLocation(input, EU_BAP_LOCATIONS, NON_EU_BAP_LOCATIONS) ?? 'eu';
+}
+
+/** Resolve a Dataverse Global Discovery `Instance.Region` code. */
+function resolveTelemetryLocationFromDataverseRegion(input) {
+  return tryResolveTelemetryLocationFromDataverseRegion(input) ?? 'eu';
+}
+function tryResolveTelemetryLocationFromDataverseRegion(input) {
+  return resolveKnownLocation(input, EU_DATAVERSE_REGIONS, NON_EU_DATAVERSE_REGIONS);
+}
+
+/** Resolve launch metadata, falling back from BAP location to cluster geography. */
+function tryResolveTelemetryLocationFromEnvironment(location, clusterGeoShortName) {
+  return resolveKnownLocation(location, EU_BAP_LOCATIONS, NON_EU_BAP_LOCATIONS) ?? tryResolveTelemetryLocationFromDataverseRegion(clusterGeoShortName);
 }

package/lib/commonjs/telemetry/stringifyError.js

@@ -4,28 +4,20 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.stringifyError = stringifyError;
-var _TelemetrySanitizer = require("./TelemetrySanitizer.js");
 /*!
  * Copyright (C) Microsoft Corporation. All rights reserved.
  */
 
 /**
- * Converts an unknown thrown value to a string suitable for telemetry.
- * PII (email addresses, private IPv4 addresses) is redacted before the
- * string is returned.
+ * Classifies an unknown thrown value without exporting its message, stack, or
+ * serialized contents. Error prose is not a safe telemetry contract because
+ * upstream services may include customer data or credentials in it.
  */
 function stringifyError(error) {
-  let raw;
   if (error instanceof Error) {
-    raw = `${error.name}: ${error.message}${error.stack ? `\n${error.stack}` : ''}`;
-  } else if (typeof error === 'string') {
-    raw = error;
-  } else {
-    try {
-      raw = JSON.stringify(error);
-    } catch {
-      raw = String(error);
-    }
+    return error.name || error.constructor.name || 'Error';
   }
-  return (0, _TelemetrySanitizer.sanitizeErrorString)(raw);
+  if (typeof error === 'string') return 'StringError';
+  if (error && typeof error === 'object') return error.constructor?.name || 'ObjectError';
+  return `${typeof error}Error`;
 }

package/lib/commonjs/utils/DeviceIdUtils.js

@@ -3,10 +3,9 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
+exports.resetDeviceId = resetDeviceId;
 exports.resolveDeviceId = resolveDeviceId;
-var Application = _interopRequireWildcard(require("expo-application"));
 var SecureStore = _interopRequireWildcard(require("expo-secure-store"));
-var _reactNative = require("react-native");
 var _GuidUtils = require("./GuidUtils.js");
 function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function (e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, default: e }; if (null === e || "object" != typeof e && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (const t in e) "default" !== t && {}.hasOwnProperty.call(e, t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, t)) && (i.get || i.set) ? o(f, t, i) : f[t] = e[t]); return f; })(e, t); }
 /*!
@@ -18,18 +17,9 @@ function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r
 const DEVICE_ID_FALLBACK_KEY = 'microsoft.power-apps-native-common.device_id';
 
 /**
- * Returns a stable device identifier, preferring platform-native IDs that
- * survive app reinstalls:
- *
- * - **iOS**: `getIosIdForVendorAsync()` (IDFV) — stable while ≥1 app from the
- *   same vendor bundle prefix is installed. Resets only when ALL vendor apps
- *   are removed.
- * - **Android**: `getAndroidId()` (SSAID) — scoped to the app signing key on
- *   Android 8+; survives reinstalls as long as the signing key is unchanged.
- *
- * If the platform API returns null (rare edge cases: first boot, some emulators)
- * the function falls back to a UUID persisted in `expo-secure-store`, which on
- * iOS survives reinstalls via the Keychain and on Android is per-install only.
+ * Returns a random app-scoped telemetry identifier. It does not use IDFV,
+ * SSAID, or another platform device identifier, and can be rotated with
+ * `resetDeviceId()` for deletion and opt-out workflows.
  *
  * Pass the resolved value to `OneDsTelemetryProviderConfig.deviceId` at startup.
  *
@@ -42,20 +32,6 @@ const DEVICE_ID_FALLBACK_KEY = 'microsoft.power-apps-native-common.device_id';
  * ```
  */
 async function resolveDeviceId() {
-  if (_reactNative.Platform.OS === 'ios') {
-    const idfv = await Application.getIosIdForVendorAsync();
-    if (idfv) {
-      return idfv;
-    }
-  } else if (_reactNative.Platform.OS === 'android') {
-    const androidId = Application.getAndroidId();
-    if (androidId) {
-      return androidId;
-    }
-  }
-
-  // Fallback: stable UUID in SecureStore (iOS: survives reinstall via Keychain;
-  // Android: per-install only, but only reached when SSAID is unavailable).
   const existing = await SecureStore.getItemAsync(DEVICE_ID_FALLBACK_KEY);
   if (existing) {
     return existing;
@@ -63,4 +39,9 @@ async function resolveDeviceId() {
   const id = (0, _GuidUtils.generateGuid)();
   await SecureStore.setItemAsync(DEVICE_ID_FALLBACK_KEY, id);
   return id;
+}
+
+/** Deletes the app-scoped telemetry identifier so the next resolution rotates it. */
+async function resetDeviceId() {
+  await SecureStore.deleteItemAsync(DEVICE_ID_FALLBACK_KEY);
 }

package/lib/module/index.js

@@ -9,12 +9,12 @@ export { ConsoleAdapter } from "./telemetry/ConsoleAdapter.js";
 export { Logger } from "./telemetry/Logger.js";
 export { OneDsTelemetryProvider } from "./telemetry/OneDsTelemetryProvider.js";
 export { ApplicationInsightsTelemetryProvider } from "./telemetry/ApplicationInsightsTelemetryProvider.js";
-export { resolveTelemetryLocation } from "./telemetry/resolveTelemetryLocation.js";
+export { resolveTelemetryLocation, resolveTelemetryLocationFromDataverseRegion, tryResolveTelemetryLocationFromDataverseRegion, tryResolveTelemetryLocationFromEnvironment } from "./telemetry/resolveTelemetryLocation.js";
 export { stringifyError } from "./telemetry/stringifyError.js";
 export { sanitizeErrorString, sanitizeUrl, sanitizeProperties } from "./telemetry/TelemetrySanitizer.js";
 export { suppressKnownWarnings } from "./telemetry/suppressKnownWarnings.js";
 export { HttpClient, getHttpCorrelationProperties } from "./http/HttpClient.js";
-export { resolveDeviceId } from "./utils/DeviceIdUtils.js";
+export { resetDeviceId, resolveDeviceId } from "./utils/DeviceIdUtils.js";
 export { configureAppLogger, getAppLogger } from "./telemetry/AppLogger.js";
 export { configureCustomEventsLogger, getCustomEventsLogger } from "./telemetry/CustomEventsLogger.js";
 export { ScenarioResults, TelemetryEventNames } from "./telemetry/TelemetryTypes.js";

package/lib/module/telemetry/AnonymousTelemetry.js

@@ -0,0 +1,21 @@
+"use strict";
+
+export function buildAnonymousTelemetryData(event, appName, clusterCategory) {
+  const operationName = typeof event.properties.operationName === 'string' ? event.properties.operationName : undefined;
+  return {
+    app_Name: appName,
+    clusterCategory,
+    event_Name: event.eventName,
+    severity: event.severity,
+    timestamp: event.timestamp,
+    ...(event.duration !== undefined ? {
+      duration: event.duration
+    } : {}),
+    ...(operationName ? {
+      operation_Name: operationName
+    } : {}),
+    customDimensions: JSON.stringify(operationName ? {
+      operationName
+    } : {})
+  };
+}

package/lib/module/telemetry/OneDsTelemetryProvider.js

@@ -8,6 +8,7 @@ import { AppInsightsCore } from '@microsoft/applicationinsights-core-js';
 import { PostChannel } from '@microsoft/1ds-post-js';
 import { generateGuid } from "../utils/GuidUtils.js";
 import { resolvePlatformInfo } from "../utils/PlatformInfoUtils.js";
+import { buildAnonymousTelemetryData } from "./AnonymousTelemetry.js";
 /** 1DS Aria project IDs shared by the webplayer and CLI. */
 const AriaProjectIds = {
   Production: '5c3a61f48d7c4522912765ae7465ab5c-fb3d6606-fe59-4d6b-9bb1-5e993d889672-7138',
@@ -93,11 +94,14 @@ export class OneDsTelemetryProvider {
   defaultProperties = {};
   constructor(config) {
     this._sessionId = generateGuid();
+    this.anonymous = config.anonymous ?? false;
+    this.telemetryLocation = config.telemetryLocation ?? 'global';
     this.appName = resolveAppName(config.clusterCategory);
     this.appVersion = config.appVersion ?? '';
     this.clientType = config.clientType;
     this.clusterCategory = config.clusterCategory;
     this.deviceId = config.deviceId ?? 'react-native';
+    this.includeUserIdentity = config.includeUserIdentity ?? false;
     this.minSeverity = config.minSeverity ?? 'info';
     const {
       osName,
@@ -124,15 +128,15 @@ export class OneDsTelemetryProvider {
     if (config.commonProperties) {
       Object.assign(this.defaultProperties, config.commonProperties);
     }
-    const postChannel = new PostChannel();
+    this.postChannel = new PostChannel();
     const instrumentationKey = config.instrumentationKey ?? resolveInstrumentationKey(config.clusterCategory);
-    const collectorUrl = resolveCollectorUrl(config.clusterCategory, config.telemetryLocation);
+    const collectorUrl = resolveCollectorUrl(config.clusterCategory, this.telemetryLocation);
     const coreConfig = {
       instrumentationKey,
-      channels: [[postChannel]]
+      channels: [[this.postChannel]]
     };
     coreConfig.extensionConfig = {
-      [postChannel.identifier]: {
+      [this.postChannel.identifier]: {
         // Override endpoint explicitly — PostChannel reads overrideEndpointUrl
         // from its own extensionConfig, not from coreConfig.endpointUrl.
         overrideEndpointUrl: collectorUrl,
@@ -164,6 +168,7 @@ export class OneDsTelemetryProvider {
       const ext = envelope.ext = envelope.ext ?? {};
       const utc = ext['utc'] = ext['utc'] ?? {};
       utc['eventFlags'] = (utc['eventFlags'] || 0) | 0x100000;
+      if (this.anonymous) return;
       const app = ext['app'] = ext['app'] ?? {};
       app['sesId'] = this._sessionId;
       if (this.appVersion) app['ver'] = this.appVersion; // → AppInfo_Version
@@ -189,6 +194,15 @@ export class OneDsTelemetryProvider {
     this.core.addTelemetryInitializer(initializer);
   }
   track(event) {
+    if (this.anonymous) {
+      this.core.track({
+        name: 'event',
+        time: event.timestamp,
+        baseType: 'custom',
+        data: buildAnonymousTelemetryData(event, this.appName, this.clusterCategory)
+      });
+      return;
+    }
     const allProperties = {
       ...this.defaultProperties,
       ...event.properties
@@ -214,7 +228,7 @@ export class OneDsTelemetryProvider {
     };
 
     // User identity promoted to top-level columns directly
-    if (this.userIdentity) {
+    if (this.includeUserIdentity && this.userIdentity) {
       data.objectId = this.userIdentity.objectId;
       data.tenantId = this.userIdentity.tenantId;
     }
@@ -242,6 +256,34 @@ export class OneDsTelemetryProvider {
     };
     this.core.track(item);
   }
+  async resolveTelemetryLocation(telemetryLocation) {
+    if (!this.anonymous && telemetryLocation === this.telemetryLocation) return;
+    const previousResolution = this.locationResolution ?? Promise.resolve();
+    const currentResolution = previousResolution.catch(() => undefined).then(() => this.applyTelemetryLocation(telemetryLocation));
+    this.locationResolution = currentResolution;
+    try {
+      await currentResolution;
+    } finally {
+      if (this.locationResolution === currentResolution) {
+        this.locationResolution = undefined;
+      }
+    }
+  }
+  async applyTelemetryLocation(telemetryLocation) {
+    if (!this.anonymous && telemetryLocation === this.telemetryLocation) return;
+    if (telemetryLocation !== this.telemetryLocation) {
+      await this.flush();
+      this.core.updateCfg({
+        extensionConfig: {
+          [this.postChannel.identifier]: {
+            overrideEndpointUrl: resolveCollectorUrl(this.clusterCategory, telemetryLocation)
+          }
+        }
+      });
+      this.telemetryLocation = telemetryLocation;
+    }
+    this.anonymous = false;
+  }
   flush() {
     return new Promise(resolve => {
       this.core.flush(true, () => {

package/lib/module/telemetry/TelemetrySanitizer.js

@@ -50,6 +50,13 @@ const SAS_KEY_SIG_RE = /(?:dsas_secret|sig)=[^#)\(<>\r\n\s'",\\_&]{8}[^#)\(<>\r\
  */
 const SYMM_KEY_256_RE = /[a-z0-9/+]{43}=/gi;
 
+/** Bearer credentials and compact JWTs embedded in otherwise arbitrary text. */
+const BEARER_CREDENTIAL_RE = /\bbearer\s+[a-z0-9._~+\/-]+=*/gi;
+const JWT_RE = /\beyJ[a-z0-9_-]+\.[a-z0-9_-]+\.[a-z0-9_-]+\b/gi;
+
+/** Query strings and fragments on absolute URLs commonly carry user context. */
+const URL_QUERY_OR_FRAGMENT_RE = /(https?:\/\/[^\s?#'"<>]+)[?#][^\s'"<>]*/gi;
+
 /**
  * Property key patterns that must never appear as telemetry values.
  * Checked case-insensitively against the full key name.
@@ -61,7 +68,7 @@ const SENSITIVE_KEY_RE = /password|secret|token|credential|auth(?:orization)?|be
  * Safe to use on error messages, URL paths, and arbitrary text.
  */
 export function sanitizeErrorString(raw) {
-  return raw.replace(EMAIL_RE, '<upn>').replace(PRIVATE_IPV4_RE, (_, port) => port ? `<private-ip>${port}` : '<private-ip>').replace(GOOGLE_API_KEY_RE, '<credential>').replace(SAS_KEY_SIG_RE, '<credential>').replace(SYMM_KEY_256_RE, '<credential>');
+  return raw.replace(URL_QUERY_OR_FRAGMENT_RE, '$1').replace(EMAIL_RE, '<upn>').replace(PRIVATE_IPV4_RE, (_, port) => port ? `<private-ip>${port}` : '<private-ip>').replace(GOOGLE_API_KEY_RE, '<credential>').replace(SAS_KEY_SIG_RE, '<credential>').replace(SYMM_KEY_256_RE, '<credential>').replace(BEARER_CREDENTIAL_RE, 'Bearer <credential>').replace(JWT_RE, '<credential>');
 }
 
 /**
@@ -80,15 +87,29 @@ export function sanitizeUrl(url) {
  *   - Non-string primitives passed through unchanged
  */
 export function sanitizeProperties(props) {
+  return sanitizeRecord(props, new WeakSet(), 0);
+}
+const MAX_SANITIZE_DEPTH = 5;
+function sanitizeRecord(props, seen, depth) {
+  if (seen.has(props) || depth > MAX_SANITIZE_DEPTH) return {};
+  seen.add(props);
   const result = {};
   for (const [key, value] of Object.entries(props)) {
     if (SENSITIVE_KEY_RE.test(key)) {
       result[key] = '<redacted>';
-    } else if (typeof value === 'string') {
-      result[key] = sanitizeErrorString(value);
     } else {
-      result[key] = value;
+      result[key] = sanitizeValue(value, seen, depth + 1);
     }
   }
   return result;
+}
+function sanitizeValue(value, seen, depth) {
+  if (typeof value === 'string') return sanitizeErrorString(value);
+  if (value === null || typeof value !== 'object') return value;
+  if (depth > MAX_SANITIZE_DEPTH || seen.has(value)) return '<redacted>';
+  if (Array.isArray(value)) {
+    seen.add(value);
+    return value.map(item => sanitizeValue(item, seen, depth + 1));
+  }
+  return sanitizeRecord(value, seen, depth);
 }

package/lib/module/telemetry/resolveTelemetryLocation.js

@@ -11,13 +11,23 @@
  * Source: `metadata.properties.location` in the BAP Get Environments API response.
  */
 const EU_BAP_LOCATIONS = new Set(['europe', 'france', 'germany', 'italy', 'poland', 'norway', 'sweden', 'switzerland', 'unitedkingdom']);
+const NON_EU_BAP_LOCATIONS = new Set(['asia', 'australia', 'brazil', 'canada', 'india', 'japan', 'korea', 'southafrica', 'southamerica', 'unitedarabemirates', 'unitedstates']);
+const EU_DATAVERSE_REGIONS = new Set(['che', 'emea', 'eur', 'fra', 'gbr', 'ger', 'ita', 'nor', 'pol', 'swe']);
+const NON_EU_DATAVERSE_REGIONS = new Set(['apac', 'aus', 'can', 'ind', 'jpn', 'kor', 'latam', 'nam', 'na', 'oce', 'sam', 'sgp', 'uae', 'usa']);
+function resolveKnownLocation(input, euValues, nonEuValues) {
+  const value = input?.trim().toLowerCase();
+  if (value && euValues.has(value)) return 'eu';
+  if (value && nonEuValues.has(value)) return 'global';
+  return undefined;
+}
 
 /**
  * Resolve the 1DS telemetry collector location from a Power Platform BAP
  * environment `location` string (`environment.properties.location`).
  * Returns `'eu'` when the location maps to the EU data boundary, routing
  * telemetry to `eu-mobile.events.data.microsoft.com` instead of the global
- * US collector.
+ * US collector. Missing or blank locations fail closed to the EU collector so
+ * telemetry emitted before the environment is known does not leave the EUDB.
  *
  * Mirrors the CLI's detection in `CliLogger.ts`:
  * ```
@@ -31,8 +41,21 @@ const EU_BAP_LOCATIONS = new Set(['europe', 'france', 'germany', 'italy', 'polan
  * resolveTelemetryLocation('unitedkingdom') // → 'eu'
  * resolveTelemetryLocation('italy')         // → 'eu'
  * resolveTelemetryLocation('unitedstates')  // → 'global'
+ * resolveTelemetryLocation()                // → 'eu'
  */
 export function resolveTelemetryLocation(input) {
-  if (!input) return 'global';
-  return EU_BAP_LOCATIONS.has(input.trim().toLowerCase()) ? 'eu' : 'global';
+  return resolveKnownLocation(input, EU_BAP_LOCATIONS, NON_EU_BAP_LOCATIONS) ?? 'eu';
+}
+
+/** Resolve a Dataverse Global Discovery `Instance.Region` code. */
+export function resolveTelemetryLocationFromDataverseRegion(input) {
+  return tryResolveTelemetryLocationFromDataverseRegion(input) ?? 'eu';
+}
+export function tryResolveTelemetryLocationFromDataverseRegion(input) {
+  return resolveKnownLocation(input, EU_DATAVERSE_REGIONS, NON_EU_DATAVERSE_REGIONS);
+}
+
+/** Resolve launch metadata, falling back from BAP location to cluster geography. */
+export function tryResolveTelemetryLocationFromEnvironment(location, clusterGeoShortName) {
+  return resolveKnownLocation(location, EU_BAP_LOCATIONS, NON_EU_BAP_LOCATIONS) ?? tryResolveTelemetryLocationFromDataverseRegion(clusterGeoShortName);
 }

package/lib/module/telemetry/stringifyError.js

@@ -4,25 +4,16 @@
  * Copyright (C) Microsoft Corporation. All rights reserved.
  */
 
-import { sanitizeErrorString } from "./TelemetrySanitizer.js";
-
 /**
- * Converts an unknown thrown value to a string suitable for telemetry.
- * PII (email addresses, private IPv4 addresses) is redacted before the
- * string is returned.
+ * Classifies an unknown thrown value without exporting its message, stack, or
+ * serialized contents. Error prose is not a safe telemetry contract because
+ * upstream services may include customer data or credentials in it.
  */
 export function stringifyError(error) {
-  let raw;
   if (error instanceof Error) {
-    raw = `${error.name}: ${error.message}${error.stack ? `\n${error.stack}` : ''}`;
-  } else if (typeof error === 'string') {
-    raw = error;
-  } else {
-    try {
-      raw = JSON.stringify(error);
-    } catch {
-      raw = String(error);
-    }
+    return error.name || error.constructor.name || 'Error';
   }
-  return sanitizeErrorString(raw);
+  if (typeof error === 'string') return 'StringError';
+  if (error && typeof error === 'object') return error.constructor?.name || 'ObjectError';
+  return `${typeof error}Error`;
 }

package/lib/module/utils/DeviceIdUtils.js

@@ -4,9 +4,7 @@
  * Copyright (C) Microsoft Corporation. All rights reserved.
  */
 
-import * as Application from 'expo-application';
 import * as SecureStore from 'expo-secure-store';
-import { Platform } from 'react-native';
 import { generateGuid } from "./GuidUtils.js";
 
 // Fallback key used when the platform native ID is unavailable.
@@ -14,18 +12,9 @@ import { generateGuid } from "./GuidUtils.js";
 const DEVICE_ID_FALLBACK_KEY = 'microsoft.power-apps-native-common.device_id';
 
 /**
- * Returns a stable device identifier, preferring platform-native IDs that
- * survive app reinstalls:
- *
- * - **iOS**: `getIosIdForVendorAsync()` (IDFV) — stable while ≥1 app from the
- *   same vendor bundle prefix is installed. Resets only when ALL vendor apps
- *   are removed.
- * - **Android**: `getAndroidId()` (SSAID) — scoped to the app signing key on
- *   Android 8+; survives reinstalls as long as the signing key is unchanged.
- *
- * If the platform API returns null (rare edge cases: first boot, some emulators)
- * the function falls back to a UUID persisted in `expo-secure-store`, which on
- * iOS survives reinstalls via the Keychain and on Android is per-install only.
+ * Returns a random app-scoped telemetry identifier. It does not use IDFV,
+ * SSAID, or another platform device identifier, and can be rotated with
+ * `resetDeviceId()` for deletion and opt-out workflows.
  *
  * Pass the resolved value to `OneDsTelemetryProviderConfig.deviceId` at startup.
  *
@@ -38,20 +27,6 @@ const DEVICE_ID_FALLBACK_KEY = 'microsoft.power-apps-native-common.device_id';
  * ```
  */
 export async function resolveDeviceId() {
-  if (Platform.OS === 'ios') {
-    const idfv = await Application.getIosIdForVendorAsync();
-    if (idfv) {
-      return idfv;
-    }
-  } else if (Platform.OS === 'android') {
-    const androidId = Application.getAndroidId();
-    if (androidId) {
-      return androidId;
-    }
-  }
-
-  // Fallback: stable UUID in SecureStore (iOS: survives reinstall via Keychain;
-  // Android: per-install only, but only reached when SSAID is unavailable).
   const existing = await SecureStore.getItemAsync(DEVICE_ID_FALLBACK_KEY);
   if (existing) {
     return existing;
@@ -59,4 +34,9 @@ export async function resolveDeviceId() {
   const id = generateGuid();
   await SecureStore.setItemAsync(DEVICE_ID_FALLBACK_KEY, id);
   return id;
+}
+
+/** Deletes the app-scoped telemetry identifier so the next resolution rotates it. */
+export async function resetDeviceId() {
+  await SecureStore.deleteItemAsync(DEVICE_ID_FALLBACK_KEY);
 }

package/lib/typescript/commonjs/index.d.ts

@@ -7,12 +7,12 @@ export type { ILogger, ScenarioTracker } from './telemetry/ILogger';
 export { Logger } from './telemetry/Logger';
 export { OneDsTelemetryProvider } from './telemetry/OneDsTelemetryProvider';
 export { ApplicationInsightsTelemetryProvider } from './telemetry/ApplicationInsightsTelemetryProvider';
-export { resolveTelemetryLocation } from './telemetry/resolveTelemetryLocation';
+export { resolveTelemetryLocation, resolveTelemetryLocationFromDataverseRegion, tryResolveTelemetryLocationFromDataverseRegion, tryResolveTelemetryLocationFromEnvironment, } from './telemetry/resolveTelemetryLocation';
 export { stringifyError } from './telemetry/stringifyError';
 export { sanitizeErrorString, sanitizeUrl, sanitizeProperties } from './telemetry/TelemetrySanitizer';
 export { suppressKnownWarnings } from './telemetry/suppressKnownWarnings';
 export { HttpClient, getHttpCorrelationProperties } from './http/HttpClient';
-export { resolveDeviceId } from './utils/DeviceIdUtils';
+export { resetDeviceId, resolveDeviceId } from './utils/DeviceIdUtils';
 export { configureAppLogger, getAppLogger } from './telemetry/AppLogger';
 export { configureCustomEventsLogger, getCustomEventsLogger, } from './telemetry/CustomEventsLogger';
 export type { ICustomEventsLogger } from './telemetry/CustomEventsLogger';

package/lib/typescript/commonjs/telemetry/AnonymousTelemetry.d.ts

@@ -0,0 +1,4 @@
+import type { ClusterCategory } from '../types/ClusterCategory';
+import type { TelemetryEvent } from './TelemetryTypes';
+export declare function buildAnonymousTelemetryData(event: TelemetryEvent, appName: string, clusterCategory: ClusterCategory): Record<string, unknown>;
+//# sourceMappingURL=AnonymousTelemetry.d.ts.map

package/lib/typescript/commonjs/telemetry/OneDsTelemetryProvider.d.ts

@@ -1,8 +1,9 @@
 /*!
  * Copyright (C) Microsoft Corporation. All rights reserved.
  */
-import type { ITelemetryProvider, OneDsTelemetryProviderConfig, TelemetryEnvelope, TelemetryEvent, TelemetrySeverity, UserIdentity } from './TelemetryTypes';
+import type { ITelemetryProvider, OneDsTelemetryProviderConfig, TelemetryEnvelope, TelemetryEvent, TelemetryLocation, TelemetrySeverity, UserIdentity } from './TelemetryTypes';
 export declare class OneDsTelemetryProvider implements ITelemetryProvider {
+    private anonymous;
     private readonly appName;
     private readonly appVersion;
     private readonly clientType;
@@ -13,11 +14,15 @@ export declare class OneDsTelemetryProvider implements ITelemetryProvider {
     private readonly deviceMake;
     private readonly deviceModel;
     private readonly deviceType;
+    private readonly includeUserIdentity;
     private readonly osName;
     private readonly osVersion;
+    private readonly postChannel;
     private readonly userLocale;
     private readonly userTimeZone;
     private readonly propertyColumnMap;
+    private locationResolution?;
+    private telemetryLocation;
     readonly minSeverity: TelemetrySeverity;
     private _sessionId;
     private userIdentity?;
@@ -29,6 +34,8 @@ export declare class OneDsTelemetryProvider implements ITelemetryProvider {
      */
     addTelemetryInitializer(initializer: (envelope: TelemetryEnvelope) => void): void;
     track(event: TelemetryEvent): void;
+    resolveTelemetryLocation(telemetryLocation: TelemetryLocation): Promise<void>;
+    private applyTelemetryLocation;
     flush(): Promise<void>;
     teardown(): Promise<void>;
     get sessionId(): string;

package/lib/typescript/commonjs/telemetry/TelemetryTypes.d.ts

@@ -72,6 +72,8 @@ export interface OneDsTelemetryProviderConfig {
      * and pass the result here. Falls back to `'react-native'` if omitted.
      */
     deviceId?: string;
+    /** Include signed-in object and tenant IDs. Disabled by default. */
+    includeUserIdentity?: boolean;
     /**
      * 1DS instrumentation key (Aria project ID).
      * When omitted, resolved automatically from `clusterCategory`.
@@ -81,6 +83,11 @@ export interface OneDsTelemetryProviderConfig {
     minSeverity?: TelemetrySeverity;
     /** Data residency location. Default: 'global'. Set to 'eu' for European environments. */
     telemetryLocation?: TelemetryLocation;
+    /**
+     * Emit only non-identifying operational fields. Stable IDs, user identity,
+     * platform fingerprint fields, defaults, and arbitrary event properties are omitted.
+     */
+    anonymous?: boolean;
     commonProperties?: Record<string, string>;
     propertyColumnMap?: PropertyColumnMap;
     channelConfig?: Record<string, unknown>;

package/lib/typescript/commonjs/telemetry/resolveTelemetryLocation.d.ts

@@ -7,7 +7,8 @@ import type { TelemetryLocation } from './TelemetryTypes';
  * environment `location` string (`environment.properties.location`).
  * Returns `'eu'` when the location maps to the EU data boundary, routing
  * telemetry to `eu-mobile.events.data.microsoft.com` instead of the global
- * US collector.
+ * US collector. Missing or blank locations fail closed to the EU collector so
+ * telemetry emitted before the environment is known does not leave the EUDB.
  *
  * Mirrors the CLI's detection in `CliLogger.ts`:
  * ```
@@ -21,6 +22,12 @@ import type { TelemetryLocation } from './TelemetryTypes';
  * resolveTelemetryLocation('unitedkingdom') // → 'eu'
  * resolveTelemetryLocation('italy')         // → 'eu'
  * resolveTelemetryLocation('unitedstates')  // → 'global'
+ * resolveTelemetryLocation()                // → 'eu'
  */
 export declare function resolveTelemetryLocation(input?: string): TelemetryLocation;
+/** Resolve a Dataverse Global Discovery `Instance.Region` code. */
+export declare function resolveTelemetryLocationFromDataverseRegion(input?: string): TelemetryLocation;
+export declare function tryResolveTelemetryLocationFromDataverseRegion(input?: string): TelemetryLocation | undefined;
+/** Resolve launch metadata, falling back from BAP location to cluster geography. */
+export declare function tryResolveTelemetryLocationFromEnvironment(location?: string, clusterGeoShortName?: string): TelemetryLocation | undefined;
 //# sourceMappingURL=resolveTelemetryLocation.d.ts.map

package/lib/typescript/commonjs/telemetry/stringifyError.d.ts

@@ -2,9 +2,9 @@
  * Copyright (C) Microsoft Corporation. All rights reserved.
  */
 /**
- * Converts an unknown thrown value to a string suitable for telemetry.
- * PII (email addresses, private IPv4 addresses) is redacted before the
- * string is returned.
+ * Classifies an unknown thrown value without exporting its message, stack, or
+ * serialized contents. Error prose is not a safe telemetry contract because
+ * upstream services may include customer data or credentials in it.
  */
 export declare function stringifyError(error: unknown): string;
 //# sourceMappingURL=stringifyError.d.ts.map

package/lib/typescript/commonjs/utils/DeviceIdUtils.d.ts

@@ -2,18 +2,9 @@
  * Copyright (C) Microsoft Corporation. All rights reserved.
  */
 /**
- * Returns a stable device identifier, preferring platform-native IDs that
- * survive app reinstalls:
- *
- * - **iOS**: `getIosIdForVendorAsync()` (IDFV) — stable while ≥1 app from the
- *   same vendor bundle prefix is installed. Resets only when ALL vendor apps
- *   are removed.
- * - **Android**: `getAndroidId()` (SSAID) — scoped to the app signing key on
- *   Android 8+; survives reinstalls as long as the signing key is unchanged.
- *
- * If the platform API returns null (rare edge cases: first boot, some emulators)
- * the function falls back to a UUID persisted in `expo-secure-store`, which on
- * iOS survives reinstalls via the Keychain and on Android is per-install only.
+ * Returns a random app-scoped telemetry identifier. It does not use IDFV,
+ * SSAID, or another platform device identifier, and can be rotated with
+ * `resetDeviceId()` for deletion and opt-out workflows.
  *
  * Pass the resolved value to `OneDsTelemetryProviderConfig.deviceId` at startup.
  *
@@ -26,4 +17,6 @@
  * ```
  */
 export declare function resolveDeviceId(): Promise<string>;
+/** Deletes the app-scoped telemetry identifier so the next resolution rotates it. */
+export declare function resetDeviceId(): Promise<void>;
 //# sourceMappingURL=DeviceIdUtils.d.ts.map

package/lib/typescript/module/index.d.ts

@@ -7,12 +7,12 @@ export type { ILogger, ScenarioTracker } from './telemetry/ILogger.js';
 export { Logger } from './telemetry/Logger.js';
 export { OneDsTelemetryProvider } from './telemetry/OneDsTelemetryProvider.js';
 export { ApplicationInsightsTelemetryProvider } from './telemetry/ApplicationInsightsTelemetryProvider.js';
-export { resolveTelemetryLocation } from './telemetry/resolveTelemetryLocation.js';
+export { resolveTelemetryLocation, resolveTelemetryLocationFromDataverseRegion, tryResolveTelemetryLocationFromDataverseRegion, tryResolveTelemetryLocationFromEnvironment, } from './telemetry/resolveTelemetryLocation.js';
 export { stringifyError } from './telemetry/stringifyError.js';
 export { sanitizeErrorString, sanitizeUrl, sanitizeProperties } from './telemetry/TelemetrySanitizer.js';
 export { suppressKnownWarnings } from './telemetry/suppressKnownWarnings.js';
 export { HttpClient, getHttpCorrelationProperties } from './http/HttpClient.js';
-export { resolveDeviceId } from './utils/DeviceIdUtils.js';
+export { resetDeviceId, resolveDeviceId } from './utils/DeviceIdUtils.js';
 export { configureAppLogger, getAppLogger } from './telemetry/AppLogger.js';
 export { configureCustomEventsLogger, getCustomEventsLogger, } from './telemetry/CustomEventsLogger.js';
 export type { ICustomEventsLogger } from './telemetry/CustomEventsLogger.js';

package/lib/typescript/module/telemetry/AnonymousTelemetry.d.ts

@@ -0,0 +1,4 @@
+import type { ClusterCategory } from '../types/ClusterCategory.js';
+import type { TelemetryEvent } from './TelemetryTypes.js';
+export declare function buildAnonymousTelemetryData(event: TelemetryEvent, appName: string, clusterCategory: ClusterCategory): Record<string, unknown>;
+//# sourceMappingURL=AnonymousTelemetry.d.ts.map

package/lib/typescript/module/telemetry/OneDsTelemetryProvider.d.ts

@@ -1,8 +1,9 @@
 /*!
  * Copyright (C) Microsoft Corporation. All rights reserved.
  */
-import type { ITelemetryProvider, OneDsTelemetryProviderConfig, TelemetryEnvelope, TelemetryEvent, TelemetrySeverity, UserIdentity } from './TelemetryTypes.js';
+import type { ITelemetryProvider, OneDsTelemetryProviderConfig, TelemetryEnvelope, TelemetryEvent, TelemetryLocation, TelemetrySeverity, UserIdentity } from './TelemetryTypes.js';
 export declare class OneDsTelemetryProvider implements ITelemetryProvider {
+    private anonymous;
     private readonly appName;
     private readonly appVersion;
     private readonly clientType;
@@ -13,11 +14,15 @@ export declare class OneDsTelemetryProvider implements ITelemetryProvider {
     private readonly deviceMake;
     private readonly deviceModel;
     private readonly deviceType;
+    private readonly includeUserIdentity;
     private readonly osName;
     private readonly osVersion;
+    private readonly postChannel;
     private readonly userLocale;
     private readonly userTimeZone;
     private readonly propertyColumnMap;
+    private locationResolution?;
+    private telemetryLocation;
     readonly minSeverity: TelemetrySeverity;
     private _sessionId;
     private userIdentity?;
@@ -29,6 +34,8 @@ export declare class OneDsTelemetryProvider implements ITelemetryProvider {
      */
     addTelemetryInitializer(initializer: (envelope: TelemetryEnvelope) => void): void;
     track(event: TelemetryEvent): void;
+    resolveTelemetryLocation(telemetryLocation: TelemetryLocation): Promise<void>;
+    private applyTelemetryLocation;
     flush(): Promise<void>;
     teardown(): Promise<void>;
     get sessionId(): string;

package/lib/typescript/module/telemetry/TelemetryTypes.d.ts

@@ -72,6 +72,8 @@ export interface OneDsTelemetryProviderConfig {
      * and pass the result here. Falls back to `'react-native'` if omitted.
      */
     deviceId?: string;
+    /** Include signed-in object and tenant IDs. Disabled by default. */
+    includeUserIdentity?: boolean;
     /**
      * 1DS instrumentation key (Aria project ID).
      * When omitted, resolved automatically from `clusterCategory`.
@@ -81,6 +83,11 @@ export interface OneDsTelemetryProviderConfig {
     minSeverity?: TelemetrySeverity;
     /** Data residency location. Default: 'global'. Set to 'eu' for European environments. */
     telemetryLocation?: TelemetryLocation;
+    /**
+     * Emit only non-identifying operational fields. Stable IDs, user identity,
+     * platform fingerprint fields, defaults, and arbitrary event properties are omitted.
+     */
+    anonymous?: boolean;
     commonProperties?: Record<string, string>;
     propertyColumnMap?: PropertyColumnMap;
     channelConfig?: Record<string, unknown>;

package/lib/typescript/module/telemetry/resolveTelemetryLocation.d.ts

@@ -7,7 +7,8 @@ import type { TelemetryLocation } from './TelemetryTypes.js';
  * environment `location` string (`environment.properties.location`).
  * Returns `'eu'` when the location maps to the EU data boundary, routing
  * telemetry to `eu-mobile.events.data.microsoft.com` instead of the global
- * US collector.
+ * US collector. Missing or blank locations fail closed to the EU collector so
+ * telemetry emitted before the environment is known does not leave the EUDB.
  *
  * Mirrors the CLI's detection in `CliLogger.ts`:
  * ```
@@ -21,6 +22,12 @@ import type { TelemetryLocation } from './TelemetryTypes.js';
  * resolveTelemetryLocation('unitedkingdom') // → 'eu'
  * resolveTelemetryLocation('italy')         // → 'eu'
  * resolveTelemetryLocation('unitedstates')  // → 'global'
+ * resolveTelemetryLocation()                // → 'eu'
  */
 export declare function resolveTelemetryLocation(input?: string): TelemetryLocation;
+/** Resolve a Dataverse Global Discovery `Instance.Region` code. */
+export declare function resolveTelemetryLocationFromDataverseRegion(input?: string): TelemetryLocation;
+export declare function tryResolveTelemetryLocationFromDataverseRegion(input?: string): TelemetryLocation | undefined;
+/** Resolve launch metadata, falling back from BAP location to cluster geography. */
+export declare function tryResolveTelemetryLocationFromEnvironment(location?: string, clusterGeoShortName?: string): TelemetryLocation | undefined;
 //# sourceMappingURL=resolveTelemetryLocation.d.ts.map

package/lib/typescript/module/telemetry/stringifyError.d.ts

@@ -2,9 +2,9 @@
  * Copyright (C) Microsoft Corporation. All rights reserved.
  */
 /**
- * Converts an unknown thrown value to a string suitable for telemetry.
- * PII (email addresses, private IPv4 addresses) is redacted before the
- * string is returned.
+ * Classifies an unknown thrown value without exporting its message, stack, or
+ * serialized contents. Error prose is not a safe telemetry contract because
+ * upstream services may include customer data or credentials in it.
  */
 export declare function stringifyError(error: unknown): string;
 //# sourceMappingURL=stringifyError.d.ts.map

package/lib/typescript/module/utils/DeviceIdUtils.d.ts

@@ -2,18 +2,9 @@
  * Copyright (C) Microsoft Corporation. All rights reserved.
  */
 /**
- * Returns a stable device identifier, preferring platform-native IDs that
- * survive app reinstalls:
- *
- * - **iOS**: `getIosIdForVendorAsync()` (IDFV) — stable while ≥1 app from the
- *   same vendor bundle prefix is installed. Resets only when ALL vendor apps
- *   are removed.
- * - **Android**: `getAndroidId()` (SSAID) — scoped to the app signing key on
- *   Android 8+; survives reinstalls as long as the signing key is unchanged.
- *
- * If the platform API returns null (rare edge cases: first boot, some emulators)
- * the function falls back to a UUID persisted in `expo-secure-store`, which on
- * iOS survives reinstalls via the Keychain and on Android is per-install only.
+ * Returns a random app-scoped telemetry identifier. It does not use IDFV,
+ * SSAID, or another platform device identifier, and can be rotated with
+ * `resetDeviceId()` for deletion and opt-out workflows.
  *
  * Pass the resolved value to `OneDsTelemetryProviderConfig.deviceId` at startup.
  *
@@ -26,4 +17,6 @@
  * ```
  */
 export declare function resolveDeviceId(): Promise<string>;
+/** Deletes the app-scoped telemetry identifier so the next resolution rotates it. */
+export declare function resetDeviceId(): Promise<void>;
 //# sourceMappingURL=DeviceIdUtils.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@microsoft/power-apps-native-common",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "Shared utilities and types for Power Apps native packages",
   "author": "Microsoft Corporation",
   "license": "SEE LICENSE IN LICENSE",
@@ -53,7 +53,8 @@
   },
   "dependencies": {
     "@microsoft/1ds-post-js": "4.4.1",
-    "@microsoft/applicationinsights-core-js": "3.4.1",
+    "@microsoft/applicationinsights-channel-js": "3.4.3",
+    "@microsoft/applicationinsights-core-js": "3.4.3",
     "@microsoft/applicationinsights-react-native": "4.4.1",
     "@microsoft/applicationinsights-web": "3.4.3",
     "uuid": "^11.1.1"