@okfetch/otel 0.5.0

package/README.md

@@ -0,0 +1,125 @@
+# @okfetch/otel
+
+`@okfetch/otel` is an [OpenTelemetry](https://opentelemetry.io/) tracing plugin for okfetch request lifecycles.
+
+It gives you a ready-made `OkfetchPlugin` that records **one `CLIENT` span per request**, covering every retry attempt, with:
+
+- the request method, URL, path, and query string
+- explicitly selected request and response headers, with sensitive values redacted
+- the response status code
+- optional request and response body sizes when they can be observed accurately
+- a `traceparent` header on the outgoing request so downstream services join the trace
+
+Request and response bodies are never recorded.
+
+## Installation
+
+```bash
+bun add @okfetch/otel @okfetch/fetch @opentelemetry/api
+```
+
+```bash
+npm install @okfetch/otel @okfetch/fetch @opentelemetry/api
+```
+
+You also need an OpenTelemetry SDK registered as the global tracer provider (for example `@opentelemetry/sdk-node`). Without one, the plugin is a no-op.
+
+## Usage
+
+```ts
+import { okfetch } from "@okfetch/fetch";
+import { otel } from "@okfetch/otel";
+
+const result = await okfetch("https://api.example.com/todos/:id", {
+  params: { id: 1 },
+  plugins: [otel()],
+  query: { include: "owner" },
+});
+```
+
+Put `otel()` after plugins that add headers if you want those headers captured on the span. Header capture is opt-in, as required by the OpenTelemetry security guidance.
+
+## API
+
+`otel(options?)`
+
+Options:
+
+- `tracer?: Tracer` - tracer used to start spans. Defaults to `trace.getTracer("@okfetch/otel")` from the global provider.
+- `captureRequestHeaders?: boolean | readonly string[]` - request header names to record as `http.request.header.<name>`. Defaults to none. Pass `true` to explicitly capture every request header.
+- `captureResponseHeaders?: boolean | readonly string[]` - response header names to record as `http.response.header.<name>`. Defaults to none. Pass `true` to explicitly capture every response header.
+- `captureBodySizes?: boolean` - record payload body sizes when Fetch exposes enough information to do so accurately. Defaults to `false`.
+- `knownMethods?: readonly string[]` - case-sensitive methods known to the instrumentation. Replaces `DEFAULT_KNOWN_HTTP_METHODS` entirely.
+- `propagateTraceContext?: boolean` - inject W3C `traceparent` / `tracestate` headers into the request. Defaults to `true`.
+- `redact?: { headers?, queryParams?, values? }` - what to redact. `headers` and `queryParams` match names; `values` matches header and query values regardless of name. Each entry is either an array that **replaces** the defaults, or a function that **receives the defaults** and returns the list to use.
+
+```ts
+otel({
+  captureRequestHeaders: ["content-type", "x-tenant"],
+  captureResponseHeaders: ["content-type", "x-request-id"],
+  redact: {
+    // extend the defaults
+    headers: (defaults) => [...defaults, "x-tenant", /^x-internal-/i],
+    // replace the defaults entirely
+    queryParams: ["customer_id"],
+    // also redact any value that looks like an internal ticket id
+    values: (defaults) => [...defaults, /^TKT-/],
+  },
+});
+```
+
+Exports:
+
+- `DEFAULT_REDACTED_HEADERS` - `authorization`, `proxy-authorization`, `cookie`, `set-cookie`, `x-api-key`, `x-auth-token`, `api-key`, `x-amz-security-token`, `x-amz-credential`, `x-amz-signature`, plus `DEFAULT_REDACTED_NAME_PATTERN`
+- `DEFAULT_KNOWN_HTTP_METHODS` - the RFC 9110 methods plus `PATCH` and `QUERY`
+- `DEFAULT_REDACTED_QUERY_PARAMS` - common credential parameter names such as `token`, `access_token`, `api_key`, `password`, `secret`, `signature`, the OAuth grant parameters `code`, `code_verifier`, `client_assertion`, `assertion`, the AWS SigV4 presigned-URL fields `X-Amz-Credential`, `X-Amz-Security-Token`, `X-Amz-Signature`, plus `DEFAULT_REDACTED_NAME_PATTERN`
+- `DEFAULT_REDACTED_NAME_PATTERN` - a pattern included in both default lists; any name containing `auth`, `bearer`, `cred`, `jwt`, `otp`, `passw`, `private`, `secret`, `session`, `sig`, `token`, or `api-key` is redacted even when not listed explicitly. Replacing a list with an array drops it, so include it yourself if you still want it.
+- `DEFAULT_REDACTED_VALUE_PATTERNS` - patterns applied to every header and query value whatever its name: JWTs (`eyJ...` with three segments) and HTTP authentication credentials (`Bearer`, `Basic`, `Digest`, `Negotiate`, `Token`, `OAuth`, `AWS4-HMAC-SHA256` prefixes)
+- `RedactionMatcher`, `RedactionList`, `RedactionOption`, `ValuePatternList`, `ValuePatternOption` - the types behind the `redact` option
+- `HeaderCaptureOption` - the type accepted by the request and response header capture options
+- `REDACTED_VALUE` - the `REDACTED` placeholder written in place of redacted values
+
+Name matching is case-insensitive for both headers and query parameters. Redaction errs on the side of hiding too much: a name such as `X-Session-Id` is redacted because it matches the default pattern, and a JWT sent under a harmless-looking name is redacted because of its value.
+
+## What It Records
+
+Span name: `{method}`, or `{method} {path template}` when the request uses `params` (for example `GET /todos/:id`).
+
+Attributes follow the OpenTelemetry HTTP semantic conventions where one exists:
+
+| Attribute                      | Value                                                                        |
+| ------------------------------ | ---------------------------------------------------------------------------- |
+| `http.request.method`          | Known request method, or `_OTHER`                                            |
+| `http.request.method_original` | Original method when `http.request.method` is `_OTHER`                       |
+| `http.request.body.size`       | Request payload bytes, when enabled and accurately observable                |
+| `http.request.header.<name>`   | Explicitly selected request header values, with sensitive values redacted    |
+| `http.request.resend_count`    | Number of retries performed                                                  |
+| `http.response.body.size`      | Response payload bytes from `Content-Length`, when enabled and applicable    |
+| `http.response.header.<name>`  | Explicitly selected response header values, with sensitive values redacted   |
+| `http.response.status_code`    | Status code of the final response                                            |
+| `url.full`                     | Full URL with redacted query parameters and credentials, fragment dropped    |
+| `url.scheme`                   | URL scheme                                                                   |
+| `url.path`                     | URL path                                                                     |
+| `url.query`                    | Query string with redacted parameters (omitted when empty)                   |
+| `url.template`                 | Path template when `params` are used, without query, fragment or credentials |
+| `server.address`               | Hostname                                                                     |
+| `server.port`                  | Explicit or scheme-default server port                                       |
+| `error.type`                   | Status code for API errors, otherwise the okfetch error tag                  |
+| `okfetch.error.tag`            | okfetch error tag (`ApiError`, `FetchError`, ...)                            |
+| `okfetch.validation.issues`    | Formatted schema issues for validation failures                              |
+
+Failure handling:
+
+- `ApiError` (non-2xx): span status `ERROR`; `http.response.status_code` carries the reason, so no redundant status description is set
+- `FetchError`, `TimeoutError`, `ParseError`, `PluginError`: span status `ERROR` with the error message, plus an `exception` event via `span.recordException`
+- `ValidationError`: the same failure details, with formatted schema issues added to the status message, exception message and `okfetch.validation.issues`
+
+Every retry adds an `okfetch.retry` event carrying the attempt number, the error tag, and the status code when a response was received.
+
+### HTTP registry coverage
+
+The plugin emits every HTTP registry attribute that applies to a Fetch client and can be observed accurately. `http.connection.state` belongs to connection-pool metrics, and `http.route` belongs to server spans, so neither applies. Fetch does not expose protocol framing or total bytes on the wire, so `http.request.size` and `http.response.size` are intentionally omitted rather than estimated. Response body size is omitted for `HEAD`, `204`, and `304` responses and whenever no valid `Content-Length` is available. Deprecated HTTP attributes are never emitted.
+
+## Relationship To `@okfetch/fetch`
+
+This package is just a plugin built on top of the public `OkfetchPlugin` interface from `@okfetch/fetch`. It only depends on `@opentelemetry/api`, so it works with any OpenTelemetry SDK setup.

package/dist/index.cjs

@@ -0,0 +1,354 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let _opentelemetry_api = require("@opentelemetry/api");
+//#region packages/otel/index.ts
+const PLUGIN_NAME = "otel";
+const PLUGIN_VERSION = "0.1.0";
+const TRACER_NAME = "@okfetch/otel";
+/** HTTP methods known by default, as defined by the HTTP semantic conventions. */
+const DEFAULT_KNOWN_HTTP_METHODS = [
+	"CONNECT",
+	"DELETE",
+	"GET",
+	"HEAD",
+	"OPTIONS",
+	"PATCH",
+	"POST",
+	"PUT",
+	"QUERY",
+	"TRACE"
+];
+/** Value written in place of redacted headers and query parameters. */
+const REDACTED_VALUE = "REDACTED";
+/**
+* Header and query parameter names matching this pattern are redacted even
+* when they are not listed explicitly, so vendor-specific credential fields
+* such as `X-Amz-Security-Token` or `X-Goog-Signature` never leak. It is part
+* of both default lists.
+*/
+const DEFAULT_REDACTED_NAME_PATTERN = /auth|bearer|cred|jwt|otp|passw|private|secret|session|sig|token|api[-_]?key/i;
+/**
+* Header and query parameter values matching one of these patterns are
+* redacted whatever their name, so a credential carried under an arbitrary
+* name (`X-JWT`, `blob`, ...) still never reaches telemetry. Covers JWTs and
+* HTTP authentication credentials (`Bearer`, `Basic`, `Digest`, ...).
+*/
+const DEFAULT_REDACTED_VALUE_PATTERNS = [/^eyJ[\w-]+\.[\w-]+\.[\w-]*$/, /^(?:Bearer|Basic|Digest|Negotiate|Token|OAuth|AWS4-HMAC-SHA256)\s/i];
+/** Request headers whose values are never recorded on spans. */
+const DEFAULT_REDACTED_HEADERS = [
+	"authorization",
+	"proxy-authorization",
+	"cookie",
+	"set-cookie",
+	"x-api-key",
+	"x-auth-token",
+	"api-key",
+	"x-amz-security-token",
+	"x-amz-credential",
+	"x-amz-signature",
+	DEFAULT_REDACTED_NAME_PATTERN
+];
+/** Query parameters whose values are never recorded on spans. */
+const DEFAULT_REDACTED_QUERY_PARAMS = [
+	"access_token",
+	"api_key",
+	"apikey",
+	"assertion",
+	"auth",
+	"authorization",
+	"awsaccesskeyid",
+	"client_assertion",
+	"client_secret",
+	"code",
+	"code_verifier",
+	"id_token",
+	"key",
+	"password",
+	"refresh_token",
+	"secret",
+	"sig",
+	"signature",
+	"token",
+	"x-amz-credential",
+	"x-amz-security-token",
+	"x-amz-signature",
+	"x-goog-signature",
+	DEFAULT_REDACTED_NAME_PATTERN
+];
+const stateKey = Symbol.for("@okfetch/otel:state");
+const getState = (carrier) => carrier[stateKey];
+const pathParamPattern = /:[A-Za-z_]\w*(?=[/?#]|$)/;
+const userInfoPattern = /^([a-z][a-z\d+.-]*:\/\/)[^/]*@/i;
+const contentLengthPattern = /^\d+$/;
+/**
+* Reduces a raw request URL to its low-cardinality absolute-path template.
+* Query values, fragments, origins, and embedded credentials are excluded.
+*/
+const toTemplate = (rawUrl) => {
+	const [withoutQuery = ""] = rawUrl.split(/[?#]/, 1);
+	const withoutUserInfo = withoutQuery.replace(userInfoPattern, "$1");
+	if (!pathParamPattern.test(withoutUserInfo)) return;
+	try {
+		return new URL(withoutUserInfo).pathname;
+	} catch {
+		return withoutUserInfo;
+	}
+};
+const headersSetter = { set: (carrier, key, value) => {
+	carrier.set(key, value);
+} };
+const resolveList = (defaults, option) => {
+	if (option === void 0) return defaults;
+	if (Array.isArray(option)) return option;
+	return option(defaults);
+};
+const testPattern = (pattern, input) => {
+	pattern.lastIndex = 0;
+	return pattern.test(input);
+};
+const createValueMatcher = (patterns) => (value) => patterns.some((pattern) => testPattern(pattern, value));
+const createNameMatcher = (list) => {
+	const names = /* @__PURE__ */ new Set();
+	const patterns = [];
+	for (const matcher of list) if (typeof matcher === "string") names.add(matcher.toLowerCase());
+	else patterns.push(matcher);
+	return (name) => names.has(name.toLowerCase()) || patterns.some((pattern) => testPattern(pattern, name));
+};
+const resolveCapturedHeaders = (option) => option === true ? true : new Set(option === false || option === void 0 ? [] : option.map((name) => name.toLowerCase()));
+const resolveOptions = (options) => ({
+	captureBodySizes: options?.captureBodySizes ?? false,
+	capturedRequestHeaders: resolveCapturedHeaders(options?.captureRequestHeaders),
+	capturedResponseHeaders: resolveCapturedHeaders(options?.captureResponseHeaders),
+	propagateTraceContext: options?.propagateTraceContext ?? true,
+	isRedactedHeader: createNameMatcher(resolveList(DEFAULT_REDACTED_HEADERS, options?.redact?.headers)),
+	isRedactedQueryParam: createNameMatcher(resolveList(DEFAULT_REDACTED_QUERY_PARAMS, options?.redact?.queryParams)),
+	isRedactedValue: createValueMatcher(resolveList(DEFAULT_REDACTED_VALUE_PATTERNS, options?.redact?.values)),
+	knownMethods: new Set(options?.knownMethods ?? DEFAULT_KNOWN_HTTP_METHODS),
+	tracer: options?.tracer ?? _opentelemetry_api.trace.getTracer(TRACER_NAME, PLUGIN_VERSION)
+});
+const getMethodAttributes = (method, knownMethods) => {
+	const semanticMethod = knownMethods.has(method) ? method : "_OTHER";
+	const attributes = { "http.request.method": semanticMethod };
+	if (method !== semanticMethod) attributes["http.request.method_original"] = method;
+	return attributes;
+};
+const getContentLength = (headers) => {
+	const value = headers.get("content-length")?.trim();
+	if (!value || !contentLengthPattern.test(value)) return;
+	const size = Number(value);
+	return Number.isSafeInteger(size) ? size : void 0;
+};
+const getRequestBodySize = (body, headers) => {
+	if (body === void 0) return;
+	const contentLength = getContentLength(headers);
+	if (contentLength !== void 0) return contentLength;
+	if (headers.has("content-encoding")) return;
+	if (typeof body === "string") return new TextEncoder().encode(body).byteLength;
+	if (body instanceof URLSearchParams) return new TextEncoder().encode(body.toString()).byteLength;
+	if (body instanceof Blob) return body.size;
+	if (body instanceof ArrayBuffer || ArrayBuffer.isView(body)) return body.byteLength;
+};
+const shouldCaptureHeader = (capturedHeaders, name) => capturedHeaders === true || capturedHeaders.has(name);
+const captureHeaders = (attributes, prefix, headers, capturedHeaders, options) => {
+	for (const [name, value] of headers) {
+		if (!shouldCaptureHeader(capturedHeaders, name)) continue;
+		const shouldRedact = options.isRedactedHeader(name) || options.isRedactedValue(value);
+		attributes[`${prefix}.${name}`] = [shouldRedact ? REDACTED_VALUE : value];
+	}
+};
+const getServerPort = (url) => {
+	if (url.port) return Number(url.port);
+	if (url.protocol === "http:") return 80;
+	if (url.protocol === "https:") return 443;
+};
+const redactUrl = (url, options) => {
+	const redacted = new URL(url.toString());
+	redacted.hash = "";
+	if (redacted.username) redacted.username = REDACTED_VALUE;
+	if (redacted.password) redacted.password = REDACTED_VALUE;
+	for (const name of new Set(redacted.searchParams.keys())) if (options.isRedactedQueryParam(name) || redacted.searchParams.getAll(name).some(options.isRedactedValue)) redacted.searchParams.set(name, REDACTED_VALUE);
+	return redacted;
+};
+const buildRequestAttributes = (ctx, template, options) => {
+	const url = redactUrl(ctx.url, options);
+	const attributes = {
+		...getMethodAttributes(ctx.method, options.knownMethods),
+		"server.address": url.hostname,
+		"url.full": url.toString(),
+		"url.path": url.pathname,
+		"url.scheme": url.protocol.replace(/:$/, "")
+	};
+	const serverPort = getServerPort(url);
+	if (serverPort !== void 0) attributes["server.port"] = serverPort;
+	if (url.search) attributes["url.query"] = url.search.slice(1);
+	if (template) attributes["url.template"] = template;
+	if (options.captureBodySizes) {
+		const bodySize = getRequestBodySize(ctx.body, ctx.headers);
+		if (bodySize !== void 0) attributes["http.request.body.size"] = bodySize;
+	}
+	captureHeaders(attributes, "http.request.header", ctx.headers, options.capturedRequestHeaders, options);
+	return attributes;
+};
+const startSpan = (ctx, state, options) => {
+	const method = options.knownMethods.has(ctx.method) ? ctx.method : "HTTP";
+	const name = state.template ? `${method} ${state.template}` : method;
+	return options.tracer.startSpan(name, {
+		attributes: buildRequestAttributes(ctx, state.template, options),
+		kind: _opentelemetry_api.SpanKind.CLIENT
+	}, _opentelemetry_api.context.active());
+};
+/**
+* Injects trace context headers into a copy of the request headers. A
+* propagator failure is recorded on the span and the request proceeds without
+* propagation headers: telemetry must never fail the request or leave the
+* span open.
+*/
+const injectTraceContext = (ctx, span) => {
+	const headers = new Headers(ctx.headers);
+	try {
+		_opentelemetry_api.propagation.inject(_opentelemetry_api.trace.setSpan(_opentelemetry_api.context.active(), span), headers, headersSetter);
+	} catch (error) {
+		span.addEvent("okfetch.propagation_failed", { "exception.message": error instanceof Error ? error.message : String(error) });
+		return ctx;
+	}
+	return {
+		...ctx,
+		headers
+	};
+};
+const endSpan = (state) => {
+	if (state.ended) return;
+	state.ended = true;
+	state.span?.end();
+};
+const recordResponse = (span, ctx, response, options) => {
+	const attributes = { "http.response.status_code": response.status };
+	if (options.captureBodySizes && ctx.method !== "HEAD" && response.status !== 204 && response.status !== 304) {
+		const bodySize = getContentLength(response.headers);
+		if (bodySize !== void 0) attributes["http.response.body.size"] = bodySize;
+	}
+	captureHeaders(attributes, "http.response.header", response.headers, options.capturedResponseHeaders, options);
+	span.setAttributes(attributes);
+};
+const recordFailure = (span, ctx, response, error, options) => {
+	span.setAttribute("okfetch.error.tag", error._tag);
+	if (response) recordResponse(span, ctx, response, options);
+	if (error._tag === "ApiError") {
+		span.setAttributes({
+			"error.type": String(error.statusCode),
+			"http.response.status_code": error.statusCode
+		});
+		span.setStatus({ code: _opentelemetry_api.SpanStatusCode.ERROR });
+		return;
+	}
+	if (error._tag === "ValidationError") {
+		const issues = error.issues.map((issue) => {
+			const path = issue.path?.map((segment) => String(typeof segment === "object" ? segment.key : segment)).join(".");
+			return path ? `${path}: ${issue.message}` : issue.message;
+		});
+		const message = issues.length > 0 ? `${error.message}: ${issues.join("; ")}` : error.message;
+		span.setAttribute("okfetch.validation.issues", issues);
+		span.setAttribute("error.type", error._tag);
+		span.recordException({
+			message,
+			name: error._tag,
+			stack: error.stack
+		});
+		span.setStatus({
+			code: _opentelemetry_api.SpanStatusCode.ERROR,
+			message
+		});
+		return;
+	}
+	span.setAttribute("error.type", error._tag);
+	span.recordException(error);
+	span.setStatus({
+		code: _opentelemetry_api.SpanStatusCode.ERROR,
+		message: error.message
+	});
+};
+/**
+* Creates an OpenTelemetry plugin that records a single `CLIENT` span per
+* okfetch request, spanning every retry attempt.
+*
+* The span records HTTP client attributes available through Fetch and marks
+* failures using the OpenTelemetry HTTP span conventions. Request and response
+* bodies are never recorded.
+*/
+const otel = (options) => {
+	const resolved = resolveOptions(options);
+	const init = ({ options: requestOptions, url }) => {
+		const state = {
+			ended: false,
+			resendCount: 0,
+			template: requestOptions.params === void 0 ? void 0 : toTemplate(url)
+		};
+		return {
+			options: {
+				...requestOptions,
+				[stateKey]: state
+			},
+			url
+		};
+	};
+	const onRequest = (ctx) => {
+		const state = getState(ctx) ?? {
+			ended: false,
+			resendCount: 0
+		};
+		let nextCtx = {
+			...ctx,
+			[stateKey]: state
+		};
+		if (state.span) {
+			state.resendCount += 1;
+			state.span.setAttribute("http.request.resend_count", state.resendCount);
+		} else state.span = startSpan(nextCtx, state, resolved);
+		if (resolved.propagateTraceContext) nextCtx = {
+			...injectTraceContext(nextCtx, state.span),
+			[stateKey]: state
+		};
+		return nextCtx;
+	};
+	return {
+		name: PLUGIN_NAME,
+		version: PLUGIN_VERSION,
+		init,
+		hooks: {
+			onRequest,
+			onSuccess(ctx, response) {
+				const state = getState(ctx);
+				if (!state?.span) return;
+				recordResponse(state.span, ctx, response, resolved);
+				endSpan(state);
+			},
+			onFail(ctx, response, error) {
+				const state = getState(ctx);
+				if (!state) return;
+				state.span ??= startSpan(ctx, state, resolved);
+				recordFailure(state.span, ctx, response, error, resolved);
+				endSpan(state);
+			},
+			onRetry(ctx, response, error, attempt) {
+				const state = getState(ctx);
+				if (!state?.span) return;
+				const attributes = {
+					"error.type": error._tag === "ApiError" ? String(error.statusCode) : error._tag,
+					"okfetch.error.tag": error._tag,
+					"okfetch.retry.attempt": attempt + 1
+				};
+				if (response) attributes["http.response.status_code"] = response.status;
+				state.span.addEvent("okfetch.retry", attributes);
+			}
+		}
+	};
+};
+//#endregion
+exports.DEFAULT_KNOWN_HTTP_METHODS = DEFAULT_KNOWN_HTTP_METHODS;
+exports.DEFAULT_REDACTED_HEADERS = DEFAULT_REDACTED_HEADERS;
+exports.DEFAULT_REDACTED_NAME_PATTERN = DEFAULT_REDACTED_NAME_PATTERN;
+exports.DEFAULT_REDACTED_QUERY_PARAMS = DEFAULT_REDACTED_QUERY_PARAMS;
+exports.DEFAULT_REDACTED_VALUE_PATTERNS = DEFAULT_REDACTED_VALUE_PATTERNS;
+exports.REDACTED_VALUE = REDACTED_VALUE;
+exports.otel = otel;
+
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["trace","SpanKind","context","SpanStatusCode"],"sources":["../index.ts"],"sourcesContent":["import type {\n  OkfetchError,\n  OkfetchOptions,\n  OkfetchPlugin,\n  OkfetchPluginInitInput,\n  OkfetchRequestContext,\n} from \"@okfetch/fetch\";\nimport {\n  context,\n  propagation,\n  SpanKind,\n  SpanStatusCode,\n  trace,\n} from \"@opentelemetry/api\";\nimport type {\n  Attributes,\n  Span,\n  TextMapSetter,\n  Tracer,\n} from \"@opentelemetry/api\";\n\nconst PLUGIN_NAME = \"otel\";\nconst PLUGIN_VERSION = \"0.1.0\";\nconst TRACER_NAME = \"@okfetch/otel\";\n\n/** HTTP methods known by default, as defined by the HTTP semantic conventions. */\nexport const DEFAULT_KNOWN_HTTP_METHODS = [\n  \"CONNECT\",\n  \"DELETE\",\n  \"GET\",\n  \"HEAD\",\n  \"OPTIONS\",\n  \"PATCH\",\n  \"POST\",\n  \"PUT\",\n  \"QUERY\",\n  \"TRACE\",\n] as const;\n\n/** Value written in place of redacted headers and query parameters. */\nexport const REDACTED_VALUE = \"REDACTED\";\n\n/** A header or query parameter name, or a pattern tested against names. */\nexport type RedactionMatcher = string | RegExp;\n\n/** A list of names and patterns whose values are redacted. */\nexport type RedactionList = readonly RedactionMatcher[];\n\n/**\n * Configures what gets redacted. An array replaces the defaults entirely; a\n * function receives the defaults and returns the list to use, which makes\n * extending them a one-liner: `(defaults) => [...defaults, \"x-tenant\"]`.\n */\nexport type RedactionOption =\n  | RedactionList\n  | ((defaults: RedactionList) => RedactionList);\n\n/**\n * Header and query parameter names matching this pattern are redacted even\n * when they are not listed explicitly, so vendor-specific credential fields\n * such as `X-Amz-Security-Token` or `X-Goog-Signature` never leak. It is part\n * of both default lists.\n */\nexport const DEFAULT_REDACTED_NAME_PATTERN =\n  /auth|bearer|cred|jwt|otp|passw|private|secret|session|sig|token|api[-_]?key/i;\n\n/** A list of patterns tested against header and query parameter values. */\nexport type ValuePatternList = readonly RegExp[];\n\n/**\n * Configures value-based redaction. An array replaces the defaults; a\n * function receives the defaults and returns the list to use.\n */\nexport type ValuePatternOption =\n  | ValuePatternList\n  | ((defaults: ValuePatternList) => ValuePatternList);\n\n/** Header names to capture, or `true` to explicitly capture every header. */\nexport type HeaderCaptureOption = boolean | readonly string[];\n\n/**\n * Header and query parameter values matching one of these patterns are\n * redacted whatever their name, so a credential carried under an arbitrary\n * name (`X-JWT`, `blob`, ...) still never reaches telemetry. Covers JWTs and\n * HTTP authentication credentials (`Bearer`, `Basic`, `Digest`, ...).\n */\nexport const DEFAULT_REDACTED_VALUE_PATTERNS: ValuePatternList = [\n  /^eyJ[\\w-]+\\.[\\w-]+\\.[\\w-]*$/,\n  /^(?:Bearer|Basic|Digest|Negotiate|Token|OAuth|AWS4-HMAC-SHA256)\\s/i,\n];\n\n/** Request headers whose values are never recorded on spans. */\nexport const DEFAULT_REDACTED_HEADERS: RedactionList = [\n  \"authorization\",\n  \"proxy-authorization\",\n  \"cookie\",\n  \"set-cookie\",\n  \"x-api-key\",\n  \"x-auth-token\",\n  \"api-key\",\n  \"x-amz-security-token\",\n  \"x-amz-credential\",\n  \"x-amz-signature\",\n  DEFAULT_REDACTED_NAME_PATTERN,\n];\n\n/** Query parameters whose values are never recorded on spans. */\nexport const DEFAULT_REDACTED_QUERY_PARAMS: RedactionList = [\n  \"access_token\",\n  \"api_key\",\n  \"apikey\",\n  \"assertion\",\n  \"auth\",\n  \"authorization\",\n  \"awsaccesskeyid\",\n  \"client_assertion\",\n  \"client_secret\",\n  \"code\",\n  \"code_verifier\",\n  \"id_token\",\n  \"key\",\n  \"password\",\n  \"refresh_token\",\n  \"secret\",\n  \"sig\",\n  \"signature\",\n  \"token\",\n  \"x-amz-credential\",\n  \"x-amz-security-token\",\n  \"x-amz-signature\",\n  \"x-goog-signature\",\n  DEFAULT_REDACTED_NAME_PATTERN,\n];\n\nexport type OtelOptions = {\n  /**\n   * Tracer used to start spans. Defaults to a tracer named `@okfetch/otel`\n   * obtained from the global tracer provider.\n   */\n  tracer?: Tracer;\n  /**\n   * Request headers to record as `http.request.header.<name>` attributes.\n   * Sensitive values are always redacted. Defaults to no headers. Pass `true`\n   * to explicitly capture every request header.\n   */\n  captureRequestHeaders?: HeaderCaptureOption;\n  /**\n   * Response headers to record as `http.response.header.<name>` attributes.\n   * Sensitive values are always redacted. Defaults to no headers. Pass `true`\n   * to explicitly capture every response header.\n   */\n  captureResponseHeaders?: HeaderCaptureOption;\n  /**\n   * Whether to record request and response payload sizes when Fetch exposes\n   * enough information to calculate them accurately. Defaults to `false`.\n   */\n  captureBodySizes?: boolean;\n  /**\n   * Case-sensitive HTTP methods known to this instrumentation. This is a full\n   * replacement for `DEFAULT_KNOWN_HTTP_METHODS`.\n   */\n  knownMethods?: readonly string[];\n  /**\n   * Whether W3C trace context headers (`traceparent`, `tracestate`) are\n   * injected into the outgoing request. Defaults to `true`.\n   */\n  propagateTraceContext?: boolean;\n  /**\n   * What to redact from recorded headers and query parameters. Each entry\n   * accepts an array (replaces the defaults) or a function (receives the\n   * defaults and returns the list to use). Name matching is case-insensitive.\n   */\n  redact?: {\n    /** Defaults to `DEFAULT_REDACTED_HEADERS`. */\n    headers?: RedactionOption;\n    /** Defaults to `DEFAULT_REDACTED_QUERY_PARAMS`. */\n    queryParams?: RedactionOption;\n    /**\n     * Patterns matched against header and query parameter values, applied\n     * regardless of name. Defaults to `DEFAULT_REDACTED_VALUE_PATTERNS`.\n     */\n    values?: ValuePatternOption;\n  };\n};\n\ntype OtelState = {\n  ended: boolean;\n  resendCount: number;\n  span?: Span;\n  template?: string;\n};\n\ntype NameMatcher = (name: string) => boolean;\ntype ValueMatcher = (value: string) => boolean;\n\ntype ResolvedOptions = {\n  captureBodySizes: boolean;\n  capturedRequestHeaders: true | ReadonlySet<string>;\n  capturedResponseHeaders: true | ReadonlySet<string>;\n  propagateTraceContext: boolean;\n  isRedactedHeader: NameMatcher;\n  isRedactedQueryParam: NameMatcher;\n  isRedactedValue: ValueMatcher;\n  knownMethods: ReadonlySet<string>;\n  tracer: Tracer;\n};\n\nconst stateKey = Symbol.for(\"@okfetch/otel:state\");\n\ntype WithState<T> = T & { [stateKey]?: OtelState };\n\nconst getState = (\n  carrier: OkfetchRequestContext | OkfetchOptions\n): OtelState | undefined => (carrier as WithState<typeof carrier>)[stateKey];\n\nconst pathParamPattern = /:[A-Za-z_]\\w*(?=[/?#]|$)/;\nconst userInfoPattern = /^([a-z][a-z\\d+.-]*:\\/\\/)[^/]*@/i;\nconst contentLengthPattern = /^\\d+$/;\n\n/**\n * Reduces a raw request URL to its low-cardinality absolute-path template.\n * Query values, fragments, origins, and embedded credentials are excluded.\n */\nconst toTemplate = (rawUrl: string): string | undefined => {\n  const [withoutQuery = \"\"] = rawUrl.split(/[?#]/, 1);\n  const withoutUserInfo = withoutQuery.replace(userInfoPattern, \"$1\");\n  if (!pathParamPattern.test(withoutUserInfo)) {\n    return undefined;\n  }\n\n  try {\n    return new URL(withoutUserInfo).pathname;\n  } catch {\n    return withoutUserInfo;\n  }\n};\n\nconst headersSetter: TextMapSetter<Headers> = {\n  set: (carrier, key, value) => {\n    carrier.set(key, value);\n  },\n};\n\nconst resolveList = <T extends readonly unknown[]>(\n  defaults: T,\n  option: T | ((defaults: T) => T) | undefined\n): T => {\n  if (option === undefined) {\n    return defaults;\n  }\n  if (Array.isArray(option)) {\n    return option as T;\n  }\n\n  return (option as (defaults: T) => T)(defaults);\n};\n\nconst testPattern = (pattern: RegExp, input: string): boolean => {\n  pattern.lastIndex = 0;\n  return pattern.test(input);\n};\n\nconst createValueMatcher =\n  (patterns: ValuePatternList): ValueMatcher =>\n  (value) =>\n    patterns.some((pattern) => testPattern(pattern, value));\n\nconst createNameMatcher = (list: RedactionList): NameMatcher => {\n  const names = new Set<string>();\n  const patterns: RegExp[] = [];\n\n  for (const matcher of list) {\n    if (typeof matcher === \"string\") {\n      names.add(matcher.toLowerCase());\n    } else {\n      patterns.push(matcher);\n    }\n  }\n\n  return (name) =>\n    names.has(name.toLowerCase()) ||\n    patterns.some((pattern) => testPattern(pattern, name));\n};\n\nconst resolveCapturedHeaders = (\n  option: HeaderCaptureOption | undefined\n): true | ReadonlySet<string> =>\n  option === true\n    ? true\n    : new Set(\n        option === false || option === undefined\n          ? []\n          : option.map((name) => name.toLowerCase())\n      );\n\nconst resolveOptions = (options: OtelOptions | undefined): ResolvedOptions => ({\n  captureBodySizes: options?.captureBodySizes ?? false,\n  capturedRequestHeaders: resolveCapturedHeaders(\n    options?.captureRequestHeaders\n  ),\n  capturedResponseHeaders: resolveCapturedHeaders(\n    options?.captureResponseHeaders\n  ),\n  propagateTraceContext: options?.propagateTraceContext ?? true,\n  isRedactedHeader: createNameMatcher(\n    resolveList(DEFAULT_REDACTED_HEADERS, options?.redact?.headers)\n  ),\n  isRedactedQueryParam: createNameMatcher(\n    resolveList(DEFAULT_REDACTED_QUERY_PARAMS, options?.redact?.queryParams)\n  ),\n  isRedactedValue: createValueMatcher(\n    resolveList(DEFAULT_REDACTED_VALUE_PATTERNS, options?.redact?.values)\n  ),\n  knownMethods: new Set(options?.knownMethods ?? DEFAULT_KNOWN_HTTP_METHODS),\n  tracer: options?.tracer ?? trace.getTracer(TRACER_NAME, PLUGIN_VERSION),\n});\n\nconst getMethodAttributes = (\n  method: string,\n  knownMethods: ReadonlySet<string>\n): Attributes => {\n  const semanticMethod = knownMethods.has(method) ? method : \"_OTHER\";\n  const attributes: Attributes = {\n    \"http.request.method\": semanticMethod,\n  };\n\n  if (method !== semanticMethod) {\n    attributes[\"http.request.method_original\"] = method;\n  }\n\n  return attributes;\n};\n\nconst getContentLength = (headers: Headers): number | undefined => {\n  const value = headers.get(\"content-length\")?.trim();\n  if (!value || !contentLengthPattern.test(value)) {\n    return undefined;\n  }\n\n  const size = Number(value);\n  return Number.isSafeInteger(size) ? size : undefined;\n};\n\nconst getRequestBodySize = (\n  body: OkfetchRequestContext[\"body\"],\n  headers: Headers\n): number | undefined => {\n  if (body === undefined) {\n    return undefined;\n  }\n\n  const contentLength = getContentLength(headers);\n  if (contentLength !== undefined) {\n    return contentLength;\n  }\n  if (headers.has(\"content-encoding\")) {\n    return undefined;\n  }\n  if (typeof body === \"string\") {\n    return new TextEncoder().encode(body).byteLength;\n  }\n  if (body instanceof URLSearchParams) {\n    return new TextEncoder().encode(body.toString()).byteLength;\n  }\n  if (body instanceof Blob) {\n    return body.size;\n  }\n  if (body instanceof ArrayBuffer || ArrayBuffer.isView(body)) {\n    return body.byteLength;\n  }\n\n  return undefined;\n};\n\nconst shouldCaptureHeader = (\n  capturedHeaders: true | ReadonlySet<string>,\n  name: string\n): boolean => capturedHeaders === true || capturedHeaders.has(name);\n\nconst captureHeaders = (\n  attributes: Attributes,\n  prefix: \"http.request.header\" | \"http.response.header\",\n  headers: Headers,\n  capturedHeaders: true | ReadonlySet<string>,\n  options: ResolvedOptions\n): void => {\n  for (const [name, value] of headers) {\n    if (!shouldCaptureHeader(capturedHeaders, name)) {\n      continue;\n    }\n\n    const shouldRedact =\n      options.isRedactedHeader(name) || options.isRedactedValue(value);\n    attributes[`${prefix}.${name}`] = [shouldRedact ? REDACTED_VALUE : value];\n  }\n};\n\nconst getServerPort = (url: URL): number | undefined => {\n  if (url.port) {\n    return Number(url.port);\n  }\n  if (url.protocol === \"http:\") {\n    return 80;\n  }\n  if (url.protocol === \"https:\") {\n    return 443;\n  }\n\n  return undefined;\n};\n\nconst redactUrl = (url: URL, options: ResolvedOptions): URL => {\n  const redacted = new URL(url.toString());\n  redacted.hash = \"\";\n\n  if (redacted.username) {\n    redacted.username = REDACTED_VALUE;\n  }\n  if (redacted.password) {\n    redacted.password = REDACTED_VALUE;\n  }\n\n  for (const name of new Set(redacted.searchParams.keys())) {\n    const shouldRedact =\n      options.isRedactedQueryParam(name) ||\n      redacted.searchParams.getAll(name).some(options.isRedactedValue);\n    if (shouldRedact) {\n      redacted.searchParams.set(name, REDACTED_VALUE);\n    }\n  }\n\n  return redacted;\n};\n\nconst buildRequestAttributes = (\n  ctx: OkfetchRequestContext,\n  template: string | undefined,\n  options: ResolvedOptions\n): Attributes => {\n  const url = redactUrl(ctx.url, options);\n  const attributes: Attributes = {\n    ...getMethodAttributes(ctx.method, options.knownMethods),\n    \"server.address\": url.hostname,\n    \"url.full\": url.toString(),\n    \"url.path\": url.pathname,\n    \"url.scheme\": url.protocol.replace(/:$/, \"\"),\n  };\n  const serverPort = getServerPort(url);\n  if (serverPort !== undefined) {\n    attributes[\"server.port\"] = serverPort;\n  }\n\n  if (url.search) {\n    attributes[\"url.query\"] = url.search.slice(1);\n  }\n  if (template) {\n    attributes[\"url.template\"] = template;\n  }\n\n  if (options.captureBodySizes) {\n    const bodySize = getRequestBodySize(ctx.body, ctx.headers);\n    if (bodySize !== undefined) {\n      attributes[\"http.request.body.size\"] = bodySize;\n    }\n  }\n  captureHeaders(\n    attributes,\n    \"http.request.header\",\n    ctx.headers,\n    options.capturedRequestHeaders,\n    options\n  );\n\n  return attributes;\n};\n\nconst startSpan = (\n  ctx: OkfetchRequestContext,\n  state: OtelState,\n  options: ResolvedOptions\n): Span => {\n  const method = options.knownMethods.has(ctx.method) ? ctx.method : \"HTTP\";\n  const name = state.template ? `${method} ${state.template}` : method;\n\n  return options.tracer.startSpan(\n    name,\n    {\n      attributes: buildRequestAttributes(ctx, state.template, options),\n      kind: SpanKind.CLIENT,\n    },\n    context.active()\n  );\n};\n\n/**\n * Injects trace context headers into a copy of the request headers. A\n * propagator failure is recorded on the span and the request proceeds without\n * propagation headers: telemetry must never fail the request or leave the\n * span open.\n */\nconst injectTraceContext = (\n  ctx: OkfetchRequestContext,\n  span: Span\n): OkfetchRequestContext => {\n  const headers = new Headers(ctx.headers);\n\n  try {\n    propagation.inject(\n      trace.setSpan(context.active(), span),\n      headers,\n      headersSetter\n    );\n  } catch (error) {\n    span.addEvent(\"okfetch.propagation_failed\", {\n      \"exception.message\":\n        error instanceof Error ? error.message : String(error),\n    });\n    return ctx;\n  }\n\n  return { ...ctx, headers };\n};\n\nconst endSpan = (state: OtelState): void => {\n  if (state.ended) {\n    return;\n  }\n\n  state.ended = true;\n  state.span?.end();\n};\n\nconst recordResponse = (\n  span: Span,\n  ctx: OkfetchRequestContext,\n  response: Response,\n  options: ResolvedOptions\n): void => {\n  const attributes: Attributes = {\n    \"http.response.status_code\": response.status,\n  };\n\n  if (\n    options.captureBodySizes &&\n    ctx.method !== \"HEAD\" &&\n    response.status !== 204 &&\n    response.status !== 304\n  ) {\n    const bodySize = getContentLength(response.headers);\n    if (bodySize !== undefined) {\n      attributes[\"http.response.body.size\"] = bodySize;\n    }\n  }\n  captureHeaders(\n    attributes,\n    \"http.response.header\",\n    response.headers,\n    options.capturedResponseHeaders,\n    options\n  );\n  span.setAttributes(attributes);\n};\n\nconst recordFailure = (\n  span: Span,\n  ctx: OkfetchRequestContext,\n  response: Response | undefined,\n  error: OkfetchError<unknown>,\n  options: ResolvedOptions\n): void => {\n  span.setAttribute(\"okfetch.error.tag\", error._tag);\n\n  if (response) {\n    recordResponse(span, ctx, response, options);\n  }\n\n  if (error._tag === \"ApiError\") {\n    span.setAttributes({\n      \"error.type\": String(error.statusCode),\n      \"http.response.status_code\": error.statusCode,\n    });\n    span.setStatus({ code: SpanStatusCode.ERROR });\n    return;\n  }\n\n  if (error._tag === \"ValidationError\") {\n    const issues = error.issues.map((issue) => {\n      const path = issue.path\n        ?.map((segment) =>\n          String(typeof segment === \"object\" ? segment.key : segment)\n        )\n        .join(\".\");\n      return path ? `${path}: ${issue.message}` : issue.message;\n    });\n    const message =\n      issues.length > 0\n        ? `${error.message}: ${issues.join(\"; \")}`\n        : error.message;\n\n    span.setAttribute(\"okfetch.validation.issues\", issues);\n    span.setAttribute(\"error.type\", error._tag);\n    span.recordException({ message, name: error._tag, stack: error.stack });\n    span.setStatus({ code: SpanStatusCode.ERROR, message });\n    return;\n  }\n\n  span.setAttribute(\"error.type\", error._tag);\n  span.recordException(error);\n  span.setStatus({ code: SpanStatusCode.ERROR, message: error.message });\n};\n\n/**\n * Creates an OpenTelemetry plugin that records a single `CLIENT` span per\n * okfetch request, spanning every retry attempt.\n *\n * The span records HTTP client attributes available through Fetch and marks\n * failures using the OpenTelemetry HTTP span conventions. Request and response\n * bodies are never recorded.\n */\nexport const otel = (options?: OtelOptions): OkfetchPlugin => {\n  const resolved = resolveOptions(options);\n\n  const init = ({\n    options: requestOptions,\n    url,\n  }: OkfetchPluginInitInput): OkfetchPluginInitInput => {\n    const state: OtelState = {\n      ended: false,\n      resendCount: 0,\n      template:\n        requestOptions.params === undefined ? undefined : toTemplate(url),\n    };\n    const nextOptions: WithState<OkfetchOptions> = {\n      ...requestOptions,\n      [stateKey]: state,\n    };\n\n    return { options: nextOptions, url };\n  };\n\n  const onRequest = (ctx: OkfetchRequestContext): OkfetchRequestContext => {\n    const state = getState(ctx) ?? { ended: false, resendCount: 0 };\n    let nextCtx: WithState<OkfetchRequestContext> = {\n      ...ctx,\n      [stateKey]: state,\n    };\n    if (state.span) {\n      state.resendCount += 1;\n      state.span.setAttribute(\"http.request.resend_count\", state.resendCount);\n    } else {\n      state.span = startSpan(nextCtx, state, resolved);\n    }\n\n    if (resolved.propagateTraceContext) {\n      nextCtx = {\n        ...injectTraceContext(nextCtx, state.span),\n        [stateKey]: state,\n      };\n    }\n\n    return nextCtx;\n  };\n\n  return {\n    name: PLUGIN_NAME,\n    version: PLUGIN_VERSION,\n    init,\n    hooks: {\n      onRequest,\n      onSuccess(ctx, response) {\n        const state = getState(ctx);\n        if (!state?.span) {\n          return;\n        }\n\n        recordResponse(state.span, ctx, response, resolved);\n        endSpan(state);\n      },\n      onFail(ctx, response, error) {\n        const state = getState(ctx);\n        if (!state) {\n          return;\n        }\n\n        state.span ??= startSpan(ctx, state, resolved);\n        recordFailure(state.span, ctx, response, error, resolved);\n        endSpan(state);\n      },\n      onRetry(ctx, response, error, attempt) {\n        const state = getState(ctx);\n        if (!state?.span) {\n          return;\n        }\n\n        const attributes: Attributes = {\n          \"error.type\":\n            error._tag === \"ApiError\" ? String(error.statusCode) : error._tag,\n          \"okfetch.error.tag\": error._tag,\n          \"okfetch.retry.attempt\": attempt + 1,\n        };\n        if (response) {\n          attributes[\"http.response.status_code\"] = response.status;\n        }\n\n        state.span.addEvent(\"okfetch.retry\", attributes);\n      },\n    },\n  } satisfies OkfetchPlugin;\n};\n"],"mappings":";;;AAqBA,MAAM,cAAc;AACpB,MAAM,iBAAiB;AACvB,MAAM,cAAc;;AAGpB,MAAa,6BAA6B;CACxC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,iBAAiB;;;;;;;AAuB9B,MAAa,gCACX;;;;;;;AAsBF,MAAa,kCAAoD,CAC/D,+BACA,oEACF;;AAGA,MAAa,2BAA0C;CACrD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,gCAA+C;CAC1D;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AA2EA,MAAM,WAAW,OAAO,IAAI,qBAAqB;AAIjD,MAAM,YACJ,YAC2B,QAAsC;AAEnE,MAAM,mBAAmB;AACzB,MAAM,kBAAkB;AACxB,MAAM,uBAAuB;;;;;AAM7B,MAAM,cAAc,WAAuC;CACzD,MAAM,CAAC,eAAe,MAAM,OAAO,MAAM,QAAQ,CAAC;CAClD,MAAM,kBAAkB,aAAa,QAAQ,iBAAiB,IAAI;CAClE,IAAI,CAAC,iBAAiB,KAAK,eAAe,GACxC;CAGF,IAAI;EACF,OAAO,IAAI,IAAI,eAAe,CAAC,CAAC;CAClC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,MAAM,gBAAwC,EAC5C,MAAM,SAAS,KAAK,UAAU;CAC5B,QAAQ,IAAI,KAAK,KAAK;AACxB,EACF;AAEA,MAAM,eACJ,UACA,WACM;CACN,IAAI,WAAW,KAAA,GACb,OAAO;CAET,IAAI,MAAM,QAAQ,MAAM,GACtB,OAAO;CAGT,OAAQ,OAA8B,QAAQ;AAChD;AAEA,MAAM,eAAe,SAAiB,UAA2B;CAC/D,QAAQ,YAAY;CACpB,OAAO,QAAQ,KAAK,KAAK;AAC3B;AAEA,MAAM,sBACH,cACA,UACC,SAAS,MAAM,YAAY,YAAY,SAAS,KAAK,CAAC;AAE1D,MAAM,qBAAqB,SAAqC;CAC9D,MAAM,wBAAQ,IAAI,IAAY;CAC9B,MAAM,WAAqB,CAAC;CAE5B,KAAK,MAAM,WAAW,MACpB,IAAI,OAAO,YAAY,UACrB,MAAM,IAAI,QAAQ,YAAY,CAAC;MAE/B,SAAS,KAAK,OAAO;CAIzB,QAAQ,SACN,MAAM,IAAI,KAAK,YAAY,CAAC,KAC5B,SAAS,MAAM,YAAY,YAAY,SAAS,IAAI,CAAC;AACzD;AAEA,MAAM,0BACJ,WAEA,WAAW,OACP,OACA,IAAI,IACF,WAAW,SAAS,WAAW,KAAA,IAC3B,CAAC,IACD,OAAO,KAAK,SAAS,KAAK,YAAY,CAAC,CAC7C;AAEN,MAAM,kBAAkB,aAAuD;CAC7E,kBAAkB,SAAS,oBAAoB;CAC/C,wBAAwB,uBACtB,SAAS,qBACX;CACA,yBAAyB,uBACvB,SAAS,sBACX;CACA,uBAAuB,SAAS,yBAAyB;CACzD,kBAAkB,kBAChB,YAAY,0BAA0B,SAAS,QAAQ,OAAO,CAChE;CACA,sBAAsB,kBACpB,YAAY,+BAA+B,SAAS,QAAQ,WAAW,CACzE;CACA,iBAAiB,mBACf,YAAY,iCAAiC,SAAS,QAAQ,MAAM,CACtE;CACA,cAAc,IAAI,IAAI,SAAS,gBAAgB,0BAA0B;CACzE,QAAQ,SAAS,UAAUA,mBAAAA,MAAM,UAAU,aAAa,cAAc;AACxE;AAEA,MAAM,uBACJ,QACA,iBACe;CACf,MAAM,iBAAiB,aAAa,IAAI,MAAM,IAAI,SAAS;CAC3D,MAAM,aAAyB,EAC7B,uBAAuB,eACzB;CAEA,IAAI,WAAW,gBACb,WAAW,kCAAkC;CAG/C,OAAO;AACT;AAEA,MAAM,oBAAoB,YAAyC;CACjE,MAAM,QAAQ,QAAQ,IAAI,gBAAgB,CAAC,EAAE,KAAK;CAClD,IAAI,CAAC,SAAS,CAAC,qBAAqB,KAAK,KAAK,GAC5C;CAGF,MAAM,OAAO,OAAO,KAAK;CACzB,OAAO,OAAO,cAAc,IAAI,IAAI,OAAO,KAAA;AAC7C;AAEA,MAAM,sBACJ,MACA,YACuB;CACvB,IAAI,SAAS,KAAA,GACX;CAGF,MAAM,gBAAgB,iBAAiB,OAAO;CAC9C,IAAI,kBAAkB,KAAA,GACpB,OAAO;CAET,IAAI,QAAQ,IAAI,kBAAkB,GAChC;CAEF,IAAI,OAAO,SAAS,UAClB,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;CAExC,IAAI,gBAAgB,iBAClB,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC;CAEnD,IAAI,gBAAgB,MAClB,OAAO,KAAK;CAEd,IAAI,gBAAgB,eAAe,YAAY,OAAO,IAAI,GACxD,OAAO,KAAK;AAIhB;AAEA,MAAM,uBACJ,iBACA,SACY,oBAAoB,QAAQ,gBAAgB,IAAI,IAAI;AAElE,MAAM,kBACJ,YACA,QACA,SACA,iBACA,YACS;CACT,KAAK,MAAM,CAAC,MAAM,UAAU,SAAS;EACnC,IAAI,CAAC,oBAAoB,iBAAiB,IAAI,GAC5C;EAGF,MAAM,eACJ,QAAQ,iBAAiB,IAAI,KAAK,QAAQ,gBAAgB,KAAK;EACjE,WAAW,GAAG,OAAO,GAAG,UAAU,CAAC,eAAe,iBAAiB,KAAK;CAC1E;AACF;AAEA,MAAM,iBAAiB,QAAiC;CACtD,IAAI,IAAI,MACN,OAAO,OAAO,IAAI,IAAI;CAExB,IAAI,IAAI,aAAa,SACnB,OAAO;CAET,IAAI,IAAI,aAAa,UACnB,OAAO;AAIX;AAEA,MAAM,aAAa,KAAU,YAAkC;CAC7D,MAAM,WAAW,IAAI,IAAI,IAAI,SAAS,CAAC;CACvC,SAAS,OAAO;CAEhB,IAAI,SAAS,UACX,SAAS,WAAW;CAEtB,IAAI,SAAS,UACX,SAAS,WAAW;CAGtB,KAAK,MAAM,QAAQ,IAAI,IAAI,SAAS,aAAa,KAAK,CAAC,GAIrD,IAFE,QAAQ,qBAAqB,IAAI,KACjC,SAAS,aAAa,OAAO,IAAI,CAAC,CAAC,KAAK,QAAQ,eAAe,GAE/D,SAAS,aAAa,IAAI,MAAM,cAAc;CAIlD,OAAO;AACT;AAEA,MAAM,0BACJ,KACA,UACA,YACe;CACf,MAAM,MAAM,UAAU,IAAI,KAAK,OAAO;CACtC,MAAM,aAAyB;EAC7B,GAAG,oBAAoB,IAAI,QAAQ,QAAQ,YAAY;EACvD,kBAAkB,IAAI;EACtB,YAAY,IAAI,SAAS;EACzB,YAAY,IAAI;EAChB,cAAc,IAAI,SAAS,QAAQ,MAAM,EAAE;CAC7C;CACA,MAAM,aAAa,cAAc,GAAG;CACpC,IAAI,eAAe,KAAA,GACjB,WAAW,iBAAiB;CAG9B,IAAI,IAAI,QACN,WAAW,eAAe,IAAI,OAAO,MAAM,CAAC;CAE9C,IAAI,UACF,WAAW,kBAAkB;CAG/B,IAAI,QAAQ,kBAAkB;EAC5B,MAAM,WAAW,mBAAmB,IAAI,MAAM,IAAI,OAAO;EACzD,IAAI,aAAa,KAAA,GACf,WAAW,4BAA4B;CAE3C;CACA,eACE,YACA,uBACA,IAAI,SACJ,QAAQ,wBACR,OACF;CAEA,OAAO;AACT;AAEA,MAAM,aACJ,KACA,OACA,YACS;CACT,MAAM,SAAS,QAAQ,aAAa,IAAI,IAAI,MAAM,IAAI,IAAI,SAAS;CACnE,MAAM,OAAO,MAAM,WAAW,GAAG,OAAO,GAAG,MAAM,aAAa;CAE9D,OAAO,QAAQ,OAAO,UACpB,MACA;EACE,YAAY,uBAAuB,KAAK,MAAM,UAAU,OAAO;EAC/D,MAAMC,mBAAAA,SAAS;CACjB,GACAC,mBAAAA,QAAQ,OAAO,CACjB;AACF;;;;;;;AAQA,MAAM,sBACJ,KACA,SAC0B;CAC1B,MAAM,UAAU,IAAI,QAAQ,IAAI,OAAO;CAEvC,IAAI;EACF,mBAAA,YAAY,OACVF,mBAAAA,MAAM,QAAQE,mBAAAA,QAAQ,OAAO,GAAG,IAAI,GACpC,SACA,aACF;CACF,SAAS,OAAO;EACd,KAAK,SAAS,8BAA8B,EAC1C,qBACE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EACzD,CAAC;EACD,OAAO;CACT;CAEA,OAAO;EAAE,GAAG;EAAK;CAAQ;AAC3B;AAEA,MAAM,WAAW,UAA2B;CAC1C,IAAI,MAAM,OACR;CAGF,MAAM,QAAQ;CACd,MAAM,MAAM,IAAI;AAClB;AAEA,MAAM,kBACJ,MACA,KACA,UACA,YACS;CACT,MAAM,aAAyB,EAC7B,6BAA6B,SAAS,OACxC;CAEA,IACE,QAAQ,oBACR,IAAI,WAAW,UACf,SAAS,WAAW,OACpB,SAAS,WAAW,KACpB;EACA,MAAM,WAAW,iBAAiB,SAAS,OAAO;EAClD,IAAI,aAAa,KAAA,GACf,WAAW,6BAA6B;CAE5C;CACA,eACE,YACA,wBACA,SAAS,SACT,QAAQ,yBACR,OACF;CACA,KAAK,cAAc,UAAU;AAC/B;AAEA,MAAM,iBACJ,MACA,KACA,UACA,OACA,YACS;CACT,KAAK,aAAa,qBAAqB,MAAM,IAAI;CAEjD,IAAI,UACF,eAAe,MAAM,KAAK,UAAU,OAAO;CAG7C,IAAI,MAAM,SAAS,YAAY;EAC7B,KAAK,cAAc;GACjB,cAAc,OAAO,MAAM,UAAU;GACrC,6BAA6B,MAAM;EACrC,CAAC;EACD,KAAK,UAAU,EAAE,MAAMC,mBAAAA,eAAe,MAAM,CAAC;EAC7C;CACF;CAEA,IAAI,MAAM,SAAS,mBAAmB;EACpC,MAAM,SAAS,MAAM,OAAO,KAAK,UAAU;GACzC,MAAM,OAAO,MAAM,MACf,KAAK,YACL,OAAO,OAAO,YAAY,WAAW,QAAQ,MAAM,OAAO,CAC5D,CAAC,CACA,KAAK,GAAG;GACX,OAAO,OAAO,GAAG,KAAK,IAAI,MAAM,YAAY,MAAM;EACpD,CAAC;EACD,MAAM,UACJ,OAAO,SAAS,IACZ,GAAG,MAAM,QAAQ,IAAI,OAAO,KAAK,IAAI,MACrC,MAAM;EAEZ,KAAK,aAAa,6BAA6B,MAAM;EACrD,KAAK,aAAa,cAAc,MAAM,IAAI;EAC1C,KAAK,gBAAgB;GAAE;GAAS,MAAM,MAAM;GAAM,OAAO,MAAM;EAAM,CAAC;EACtE,KAAK,UAAU;GAAE,MAAMA,mBAAAA,eAAe;GAAO;EAAQ,CAAC;EACtD;CACF;CAEA,KAAK,aAAa,cAAc,MAAM,IAAI;CAC1C,KAAK,gBAAgB,KAAK;CAC1B,KAAK,UAAU;EAAE,MAAMA,mBAAAA,eAAe;EAAO,SAAS,MAAM;CAAQ,CAAC;AACvE;;;;;;;;;AAUA,MAAa,QAAQ,YAAyC;CAC5D,MAAM,WAAW,eAAe,OAAO;CAEvC,MAAM,QAAQ,EACZ,SAAS,gBACT,UACoD;EACpD,MAAM,QAAmB;GACvB,OAAO;GACP,aAAa;GACb,UACE,eAAe,WAAW,KAAA,IAAY,KAAA,IAAY,WAAW,GAAG;EACpE;EAMA,OAAO;GAAE,SAAS;IAJhB,GAAG;KACF,WAAW;GAGc;GAAG;EAAI;CACrC;CAEA,MAAM,aAAa,QAAsD;EACvE,MAAM,QAAQ,SAAS,GAAG,KAAK;GAAE,OAAO;GAAO,aAAa;EAAE;EAC9D,IAAI,UAA4C;GAC9C,GAAG;IACF,WAAW;EACd;EACA,IAAI,MAAM,MAAM;GACd,MAAM,eAAe;GACrB,MAAM,KAAK,aAAa,6BAA6B,MAAM,WAAW;EACxE,OACE,MAAM,OAAO,UAAU,SAAS,OAAO,QAAQ;EAGjD,IAAI,SAAS,uBACX,UAAU;GACR,GAAG,mBAAmB,SAAS,MAAM,IAAI;IACxC,WAAW;EACd;EAGF,OAAO;CACT;CAEA,OAAO;EACL,MAAM;EACN,SAAS;EACT;EACA,OAAO;GACL;GACA,UAAU,KAAK,UAAU;IACvB,MAAM,QAAQ,SAAS,GAAG;IAC1B,IAAI,CAAC,OAAO,MACV;IAGF,eAAe,MAAM,MAAM,KAAK,UAAU,QAAQ;IAClD,QAAQ,KAAK;GACf;GACA,OAAO,KAAK,UAAU,OAAO;IAC3B,MAAM,QAAQ,SAAS,GAAG;IAC1B,IAAI,CAAC,OACH;IAGF,MAAM,SAAS,UAAU,KAAK,OAAO,QAAQ;IAC7C,cAAc,MAAM,MAAM,KAAK,UAAU,OAAO,QAAQ;IACxD,QAAQ,KAAK;GACf;GACA,QAAQ,KAAK,UAAU,OAAO,SAAS;IACrC,MAAM,QAAQ,SAAS,GAAG;IAC1B,IAAI,CAAC,OAAO,MACV;IAGF,MAAM,aAAyB;KAC7B,cACE,MAAM,SAAS,aAAa,OAAO,MAAM,UAAU,IAAI,MAAM;KAC/D,qBAAqB,MAAM;KAC3B,yBAAyB,UAAU;IACrC;IACA,IAAI,UACF,WAAW,+BAA+B,SAAS;IAGrD,MAAM,KAAK,SAAS,iBAAiB,UAAU;GACjD;EACF;CACF;AACF"}

package/dist/index.d.cts

@@ -0,0 +1,106 @@
+import { OkfetchPlugin } from "@okfetch/fetch";
+import { Tracer } from "@opentelemetry/api";
+//#region packages/otel/index.d.ts
+/** HTTP methods known by default, as defined by the HTTP semantic conventions. */
+declare const DEFAULT_KNOWN_HTTP_METHODS: readonly ["CONNECT", "DELETE", "GET", "HEAD", "OPTIONS", "PATCH", "POST", "PUT", "QUERY", "TRACE"];
+/** Value written in place of redacted headers and query parameters. */
+declare const REDACTED_VALUE = "REDACTED";
+/** A header or query parameter name, or a pattern tested against names. */
+type RedactionMatcher = string | RegExp;
+/** A list of names and patterns whose values are redacted. */
+type RedactionList = readonly RedactionMatcher[];
+/**
+ * Configures what gets redacted. An array replaces the defaults entirely; a
+ * function receives the defaults and returns the list to use, which makes
+ * extending them a one-liner: `(defaults) => [...defaults, "x-tenant"]`.
+ */
+type RedactionOption = RedactionList | ((defaults: RedactionList) => RedactionList);
+/**
+ * Header and query parameter names matching this pattern are redacted even
+ * when they are not listed explicitly, so vendor-specific credential fields
+ * such as `X-Amz-Security-Token` or `X-Goog-Signature` never leak. It is part
+ * of both default lists.
+ */
+declare const DEFAULT_REDACTED_NAME_PATTERN: RegExp;
+/** A list of patterns tested against header and query parameter values. */
+type ValuePatternList = readonly RegExp[];
+/**
+ * Configures value-based redaction. An array replaces the defaults; a
+ * function receives the defaults and returns the list to use.
+ */
+type ValuePatternOption = ValuePatternList | ((defaults: ValuePatternList) => ValuePatternList);
+/** Header names to capture, or `true` to explicitly capture every header. */
+type HeaderCaptureOption = boolean | readonly string[];
+/**
+ * Header and query parameter values matching one of these patterns are
+ * redacted whatever their name, so a credential carried under an arbitrary
+ * name (`X-JWT`, `blob`, ...) still never reaches telemetry. Covers JWTs and
+ * HTTP authentication credentials (`Bearer`, `Basic`, `Digest`, ...).
+ */
+declare const DEFAULT_REDACTED_VALUE_PATTERNS: ValuePatternList;
+/** Request headers whose values are never recorded on spans. */
+declare const DEFAULT_REDACTED_HEADERS: RedactionList;
+/** Query parameters whose values are never recorded on spans. */
+declare const DEFAULT_REDACTED_QUERY_PARAMS: RedactionList;
+type OtelOptions = {
+  /**
+   * Tracer used to start spans. Defaults to a tracer named `@okfetch/otel`
+   * obtained from the global tracer provider.
+   */
+  tracer?: Tracer;
+  /**
+   * Request headers to record as `http.request.header.<name>` attributes.
+   * Sensitive values are always redacted. Defaults to no headers. Pass `true`
+   * to explicitly capture every request header.
+   */
+  captureRequestHeaders?: HeaderCaptureOption;
+  /**
+   * Response headers to record as `http.response.header.<name>` attributes.
+   * Sensitive values are always redacted. Defaults to no headers. Pass `true`
+   * to explicitly capture every response header.
+   */
+  captureResponseHeaders?: HeaderCaptureOption;
+  /**
+   * Whether to record request and response payload sizes when Fetch exposes
+   * enough information to calculate them accurately. Defaults to `false`.
+   */
+  captureBodySizes?: boolean;
+  /**
+   * Case-sensitive HTTP methods known to this instrumentation. This is a full
+   * replacement for `DEFAULT_KNOWN_HTTP_METHODS`.
+   */
+  knownMethods?: readonly string[];
+  /**
+   * Whether W3C trace context headers (`traceparent`, `tracestate`) are
+   * injected into the outgoing request. Defaults to `true`.
+   */
+  propagateTraceContext?: boolean;
+  /**
+   * What to redact from recorded headers and query parameters. Each entry
+   * accepts an array (replaces the defaults) or a function (receives the
+   * defaults and returns the list to use). Name matching is case-insensitive.
+   */
+  redact?: {
+    /** Defaults to `DEFAULT_REDACTED_HEADERS`. */
+    headers?: RedactionOption;
+    /** Defaults to `DEFAULT_REDACTED_QUERY_PARAMS`. */
+    queryParams?: RedactionOption;
+    /**
+     * Patterns matched against header and query parameter values, applied
+     * regardless of name. Defaults to `DEFAULT_REDACTED_VALUE_PATTERNS`.
+     */
+    values?: ValuePatternOption;
+  };
+};
+/**
+ * Creates an OpenTelemetry plugin that records a single `CLIENT` span per
+ * okfetch request, spanning every retry attempt.
+ *
+ * The span records HTTP client attributes available through Fetch and marks
+ * failures using the OpenTelemetry HTTP span conventions. Request and response
+ * bodies are never recorded.
+ */
+declare const otel: (options?: OtelOptions) => OkfetchPlugin;
+//#endregion
+export { DEFAULT_KNOWN_HTTP_METHODS, DEFAULT_REDACTED_HEADERS, DEFAULT_REDACTED_NAME_PATTERN, DEFAULT_REDACTED_QUERY_PARAMS, DEFAULT_REDACTED_VALUE_PATTERNS, HeaderCaptureOption, OtelOptions, REDACTED_VALUE, RedactionList, RedactionMatcher, RedactionOption, ValuePatternList, ValuePatternOption, otel };
+//# sourceMappingURL=index.d.cts.map

package/dist/index.d.mts

@@ -0,0 +1,106 @@
+import { Tracer } from "@opentelemetry/api";
+import { OkfetchPlugin } from "@okfetch/fetch";
+//#region packages/otel/index.d.ts
+/** HTTP methods known by default, as defined by the HTTP semantic conventions. */
+declare const DEFAULT_KNOWN_HTTP_METHODS: readonly ["CONNECT", "DELETE", "GET", "HEAD", "OPTIONS", "PATCH", "POST", "PUT", "QUERY", "TRACE"];
+/** Value written in place of redacted headers and query parameters. */
+declare const REDACTED_VALUE = "REDACTED";
+/** A header or query parameter name, or a pattern tested against names. */
+type RedactionMatcher = string | RegExp;
+/** A list of names and patterns whose values are redacted. */
+type RedactionList = readonly RedactionMatcher[];
+/**
+ * Configures what gets redacted. An array replaces the defaults entirely; a
+ * function receives the defaults and returns the list to use, which makes
+ * extending them a one-liner: `(defaults) => [...defaults, "x-tenant"]`.
+ */
+type RedactionOption = RedactionList | ((defaults: RedactionList) => RedactionList);
+/**
+ * Header and query parameter names matching this pattern are redacted even
+ * when they are not listed explicitly, so vendor-specific credential fields
+ * such as `X-Amz-Security-Token` or `X-Goog-Signature` never leak. It is part
+ * of both default lists.
+ */
+declare const DEFAULT_REDACTED_NAME_PATTERN: RegExp;
+/** A list of patterns tested against header and query parameter values. */
+type ValuePatternList = readonly RegExp[];
+/**
+ * Configures value-based redaction. An array replaces the defaults; a
+ * function receives the defaults and returns the list to use.
+ */
+type ValuePatternOption = ValuePatternList | ((defaults: ValuePatternList) => ValuePatternList);
+/** Header names to capture, or `true` to explicitly capture every header. */
+type HeaderCaptureOption = boolean | readonly string[];
+/**
+ * Header and query parameter values matching one of these patterns are
+ * redacted whatever their name, so a credential carried under an arbitrary
+ * name (`X-JWT`, `blob`, ...) still never reaches telemetry. Covers JWTs and
+ * HTTP authentication credentials (`Bearer`, `Basic`, `Digest`, ...).
+ */
+declare const DEFAULT_REDACTED_VALUE_PATTERNS: ValuePatternList;
+/** Request headers whose values are never recorded on spans. */
+declare const DEFAULT_REDACTED_HEADERS: RedactionList;
+/** Query parameters whose values are never recorded on spans. */
+declare const DEFAULT_REDACTED_QUERY_PARAMS: RedactionList;
+type OtelOptions = {
+  /**
+   * Tracer used to start spans. Defaults to a tracer named `@okfetch/otel`
+   * obtained from the global tracer provider.
+   */
+  tracer?: Tracer;
+  /**
+   * Request headers to record as `http.request.header.<name>` attributes.
+   * Sensitive values are always redacted. Defaults to no headers. Pass `true`
+   * to explicitly capture every request header.
+   */
+  captureRequestHeaders?: HeaderCaptureOption;
+  /**
+   * Response headers to record as `http.response.header.<name>` attributes.
+   * Sensitive values are always redacted. Defaults to no headers. Pass `true`
+   * to explicitly capture every response header.
+   */
+  captureResponseHeaders?: HeaderCaptureOption;
+  /**
+   * Whether to record request and response payload sizes when Fetch exposes
+   * enough information to calculate them accurately. Defaults to `false`.
+   */
+  captureBodySizes?: boolean;
+  /**
+   * Case-sensitive HTTP methods known to this instrumentation. This is a full
+   * replacement for `DEFAULT_KNOWN_HTTP_METHODS`.
+   */
+  knownMethods?: readonly string[];
+  /**
+   * Whether W3C trace context headers (`traceparent`, `tracestate`) are
+   * injected into the outgoing request. Defaults to `true`.
+   */
+  propagateTraceContext?: boolean;
+  /**
+   * What to redact from recorded headers and query parameters. Each entry
+   * accepts an array (replaces the defaults) or a function (receives the
+   * defaults and returns the list to use). Name matching is case-insensitive.
+   */
+  redact?: {
+    /** Defaults to `DEFAULT_REDACTED_HEADERS`. */
+    headers?: RedactionOption;
+    /** Defaults to `DEFAULT_REDACTED_QUERY_PARAMS`. */
+    queryParams?: RedactionOption;
+    /**
+     * Patterns matched against header and query parameter values, applied
+     * regardless of name. Defaults to `DEFAULT_REDACTED_VALUE_PATTERNS`.
+     */
+    values?: ValuePatternOption;
+  };
+};
+/**
+ * Creates an OpenTelemetry plugin that records a single `CLIENT` span per
+ * okfetch request, spanning every retry attempt.
+ *
+ * The span records HTTP client attributes available through Fetch and marks
+ * failures using the OpenTelemetry HTTP span conventions. Request and response
+ * bodies are never recorded.
+ */
+declare const otel: (options?: OtelOptions) => OkfetchPlugin;
+//#endregion
+export { DEFAULT_KNOWN_HTTP_METHODS, DEFAULT_REDACTED_HEADERS, DEFAULT_REDACTED_NAME_PATTERN, DEFAULT_REDACTED_QUERY_PARAMS, DEFAULT_REDACTED_VALUE_PATTERNS, HeaderCaptureOption, OtelOptions, REDACTED_VALUE, RedactionList, RedactionMatcher, RedactionOption, ValuePatternList, ValuePatternOption, otel };
+//# sourceMappingURL=index.d.mts.map

package/dist/index.mjs

@@ -0,0 +1,347 @@
+import { SpanKind, SpanStatusCode, context, propagation, trace } from "@opentelemetry/api";
+//#region packages/otel/index.ts
+const PLUGIN_NAME = "otel";
+const PLUGIN_VERSION = "0.1.0";
+const TRACER_NAME = "@okfetch/otel";
+/** HTTP methods known by default, as defined by the HTTP semantic conventions. */
+const DEFAULT_KNOWN_HTTP_METHODS = [
+	"CONNECT",
+	"DELETE",
+	"GET",
+	"HEAD",
+	"OPTIONS",
+	"PATCH",
+	"POST",
+	"PUT",
+	"QUERY",
+	"TRACE"
+];
+/** Value written in place of redacted headers and query parameters. */
+const REDACTED_VALUE = "REDACTED";
+/**
+* Header and query parameter names matching this pattern are redacted even
+* when they are not listed explicitly, so vendor-specific credential fields
+* such as `X-Amz-Security-Token` or `X-Goog-Signature` never leak. It is part
+* of both default lists.
+*/
+const DEFAULT_REDACTED_NAME_PATTERN = /auth|bearer|cred|jwt|otp|passw|private|secret|session|sig|token|api[-_]?key/i;
+/**
+* Header and query parameter values matching one of these patterns are
+* redacted whatever their name, so a credential carried under an arbitrary
+* name (`X-JWT`, `blob`, ...) still never reaches telemetry. Covers JWTs and
+* HTTP authentication credentials (`Bearer`, `Basic`, `Digest`, ...).
+*/
+const DEFAULT_REDACTED_VALUE_PATTERNS = [/^eyJ[\w-]+\.[\w-]+\.[\w-]*$/, /^(?:Bearer|Basic|Digest|Negotiate|Token|OAuth|AWS4-HMAC-SHA256)\s/i];
+/** Request headers whose values are never recorded on spans. */
+const DEFAULT_REDACTED_HEADERS = [
+	"authorization",
+	"proxy-authorization",
+	"cookie",
+	"set-cookie",
+	"x-api-key",
+	"x-auth-token",
+	"api-key",
+	"x-amz-security-token",
+	"x-amz-credential",
+	"x-amz-signature",
+	DEFAULT_REDACTED_NAME_PATTERN
+];
+/** Query parameters whose values are never recorded on spans. */
+const DEFAULT_REDACTED_QUERY_PARAMS = [
+	"access_token",
+	"api_key",
+	"apikey",
+	"assertion",
+	"auth",
+	"authorization",
+	"awsaccesskeyid",
+	"client_assertion",
+	"client_secret",
+	"code",
+	"code_verifier",
+	"id_token",
+	"key",
+	"password",
+	"refresh_token",
+	"secret",
+	"sig",
+	"signature",
+	"token",
+	"x-amz-credential",
+	"x-amz-security-token",
+	"x-amz-signature",
+	"x-goog-signature",
+	DEFAULT_REDACTED_NAME_PATTERN
+];
+const stateKey = Symbol.for("@okfetch/otel:state");
+const getState = (carrier) => carrier[stateKey];
+const pathParamPattern = /:[A-Za-z_]\w*(?=[/?#]|$)/;
+const userInfoPattern = /^([a-z][a-z\d+.-]*:\/\/)[^/]*@/i;
+const contentLengthPattern = /^\d+$/;
+/**
+* Reduces a raw request URL to its low-cardinality absolute-path template.
+* Query values, fragments, origins, and embedded credentials are excluded.
+*/
+const toTemplate = (rawUrl) => {
+	const [withoutQuery = ""] = rawUrl.split(/[?#]/, 1);
+	const withoutUserInfo = withoutQuery.replace(userInfoPattern, "$1");
+	if (!pathParamPattern.test(withoutUserInfo)) return;
+	try {
+		return new URL(withoutUserInfo).pathname;
+	} catch {
+		return withoutUserInfo;
+	}
+};
+const headersSetter = { set: (carrier, key, value) => {
+	carrier.set(key, value);
+} };
+const resolveList = (defaults, option) => {
+	if (option === void 0) return defaults;
+	if (Array.isArray(option)) return option;
+	return option(defaults);
+};
+const testPattern = (pattern, input) => {
+	pattern.lastIndex = 0;
+	return pattern.test(input);
+};
+const createValueMatcher = (patterns) => (value) => patterns.some((pattern) => testPattern(pattern, value));
+const createNameMatcher = (list) => {
+	const names = /* @__PURE__ */ new Set();
+	const patterns = [];
+	for (const matcher of list) if (typeof matcher === "string") names.add(matcher.toLowerCase());
+	else patterns.push(matcher);
+	return (name) => names.has(name.toLowerCase()) || patterns.some((pattern) => testPattern(pattern, name));
+};
+const resolveCapturedHeaders = (option) => option === true ? true : new Set(option === false || option === void 0 ? [] : option.map((name) => name.toLowerCase()));
+const resolveOptions = (options) => ({
+	captureBodySizes: options?.captureBodySizes ?? false,
+	capturedRequestHeaders: resolveCapturedHeaders(options?.captureRequestHeaders),
+	capturedResponseHeaders: resolveCapturedHeaders(options?.captureResponseHeaders),
+	propagateTraceContext: options?.propagateTraceContext ?? true,
+	isRedactedHeader: createNameMatcher(resolveList(DEFAULT_REDACTED_HEADERS, options?.redact?.headers)),
+	isRedactedQueryParam: createNameMatcher(resolveList(DEFAULT_REDACTED_QUERY_PARAMS, options?.redact?.queryParams)),
+	isRedactedValue: createValueMatcher(resolveList(DEFAULT_REDACTED_VALUE_PATTERNS, options?.redact?.values)),
+	knownMethods: new Set(options?.knownMethods ?? DEFAULT_KNOWN_HTTP_METHODS),
+	tracer: options?.tracer ?? trace.getTracer(TRACER_NAME, PLUGIN_VERSION)
+});
+const getMethodAttributes = (method, knownMethods) => {
+	const semanticMethod = knownMethods.has(method) ? method : "_OTHER";
+	const attributes = { "http.request.method": semanticMethod };
+	if (method !== semanticMethod) attributes["http.request.method_original"] = method;
+	return attributes;
+};
+const getContentLength = (headers) => {
+	const value = headers.get("content-length")?.trim();
+	if (!value || !contentLengthPattern.test(value)) return;
+	const size = Number(value);
+	return Number.isSafeInteger(size) ? size : void 0;
+};
+const getRequestBodySize = (body, headers) => {
+	if (body === void 0) return;
+	const contentLength = getContentLength(headers);
+	if (contentLength !== void 0) return contentLength;
+	if (headers.has("content-encoding")) return;
+	if (typeof body === "string") return new TextEncoder().encode(body).byteLength;
+	if (body instanceof URLSearchParams) return new TextEncoder().encode(body.toString()).byteLength;
+	if (body instanceof Blob) return body.size;
+	if (body instanceof ArrayBuffer || ArrayBuffer.isView(body)) return body.byteLength;
+};
+const shouldCaptureHeader = (capturedHeaders, name) => capturedHeaders === true || capturedHeaders.has(name);
+const captureHeaders = (attributes, prefix, headers, capturedHeaders, options) => {
+	for (const [name, value] of headers) {
+		if (!shouldCaptureHeader(capturedHeaders, name)) continue;
+		const shouldRedact = options.isRedactedHeader(name) || options.isRedactedValue(value);
+		attributes[`${prefix}.${name}`] = [shouldRedact ? REDACTED_VALUE : value];
+	}
+};
+const getServerPort = (url) => {
+	if (url.port) return Number(url.port);
+	if (url.protocol === "http:") return 80;
+	if (url.protocol === "https:") return 443;
+};
+const redactUrl = (url, options) => {
+	const redacted = new URL(url.toString());
+	redacted.hash = "";
+	if (redacted.username) redacted.username = REDACTED_VALUE;
+	if (redacted.password) redacted.password = REDACTED_VALUE;
+	for (const name of new Set(redacted.searchParams.keys())) if (options.isRedactedQueryParam(name) || redacted.searchParams.getAll(name).some(options.isRedactedValue)) redacted.searchParams.set(name, REDACTED_VALUE);
+	return redacted;
+};
+const buildRequestAttributes = (ctx, template, options) => {
+	const url = redactUrl(ctx.url, options);
+	const attributes = {
+		...getMethodAttributes(ctx.method, options.knownMethods),
+		"server.address": url.hostname,
+		"url.full": url.toString(),
+		"url.path": url.pathname,
+		"url.scheme": url.protocol.replace(/:$/, "")
+	};
+	const serverPort = getServerPort(url);
+	if (serverPort !== void 0) attributes["server.port"] = serverPort;
+	if (url.search) attributes["url.query"] = url.search.slice(1);
+	if (template) attributes["url.template"] = template;
+	if (options.captureBodySizes) {
+		const bodySize = getRequestBodySize(ctx.body, ctx.headers);
+		if (bodySize !== void 0) attributes["http.request.body.size"] = bodySize;
+	}
+	captureHeaders(attributes, "http.request.header", ctx.headers, options.capturedRequestHeaders, options);
+	return attributes;
+};
+const startSpan = (ctx, state, options) => {
+	const method = options.knownMethods.has(ctx.method) ? ctx.method : "HTTP";
+	const name = state.template ? `${method} ${state.template}` : method;
+	return options.tracer.startSpan(name, {
+		attributes: buildRequestAttributes(ctx, state.template, options),
+		kind: SpanKind.CLIENT
+	}, context.active());
+};
+/**
+* Injects trace context headers into a copy of the request headers. A
+* propagator failure is recorded on the span and the request proceeds without
+* propagation headers: telemetry must never fail the request or leave the
+* span open.
+*/
+const injectTraceContext = (ctx, span) => {
+	const headers = new Headers(ctx.headers);
+	try {
+		propagation.inject(trace.setSpan(context.active(), span), headers, headersSetter);
+	} catch (error) {
+		span.addEvent("okfetch.propagation_failed", { "exception.message": error instanceof Error ? error.message : String(error) });
+		return ctx;
+	}
+	return {
+		...ctx,
+		headers
+	};
+};
+const endSpan = (state) => {
+	if (state.ended) return;
+	state.ended = true;
+	state.span?.end();
+};
+const recordResponse = (span, ctx, response, options) => {
+	const attributes = { "http.response.status_code": response.status };
+	if (options.captureBodySizes && ctx.method !== "HEAD" && response.status !== 204 && response.status !== 304) {
+		const bodySize = getContentLength(response.headers);
+		if (bodySize !== void 0) attributes["http.response.body.size"] = bodySize;
+	}
+	captureHeaders(attributes, "http.response.header", response.headers, options.capturedResponseHeaders, options);
+	span.setAttributes(attributes);
+};
+const recordFailure = (span, ctx, response, error, options) => {
+	span.setAttribute("okfetch.error.tag", error._tag);
+	if (response) recordResponse(span, ctx, response, options);
+	if (error._tag === "ApiError") {
+		span.setAttributes({
+			"error.type": String(error.statusCode),
+			"http.response.status_code": error.statusCode
+		});
+		span.setStatus({ code: SpanStatusCode.ERROR });
+		return;
+	}
+	if (error._tag === "ValidationError") {
+		const issues = error.issues.map((issue) => {
+			const path = issue.path?.map((segment) => String(typeof segment === "object" ? segment.key : segment)).join(".");
+			return path ? `${path}: ${issue.message}` : issue.message;
+		});
+		const message = issues.length > 0 ? `${error.message}: ${issues.join("; ")}` : error.message;
+		span.setAttribute("okfetch.validation.issues", issues);
+		span.setAttribute("error.type", error._tag);
+		span.recordException({
+			message,
+			name: error._tag,
+			stack: error.stack
+		});
+		span.setStatus({
+			code: SpanStatusCode.ERROR,
+			message
+		});
+		return;
+	}
+	span.setAttribute("error.type", error._tag);
+	span.recordException(error);
+	span.setStatus({
+		code: SpanStatusCode.ERROR,
+		message: error.message
+	});
+};
+/**
+* Creates an OpenTelemetry plugin that records a single `CLIENT` span per
+* okfetch request, spanning every retry attempt.
+*
+* The span records HTTP client attributes available through Fetch and marks
+* failures using the OpenTelemetry HTTP span conventions. Request and response
+* bodies are never recorded.
+*/
+const otel = (options) => {
+	const resolved = resolveOptions(options);
+	const init = ({ options: requestOptions, url }) => {
+		const state = {
+			ended: false,
+			resendCount: 0,
+			template: requestOptions.params === void 0 ? void 0 : toTemplate(url)
+		};
+		return {
+			options: {
+				...requestOptions,
+				[stateKey]: state
+			},
+			url
+		};
+	};
+	const onRequest = (ctx) => {
+		const state = getState(ctx) ?? {
+			ended: false,
+			resendCount: 0
+		};
+		let nextCtx = {
+			...ctx,
+			[stateKey]: state
+		};
+		if (state.span) {
+			state.resendCount += 1;
+			state.span.setAttribute("http.request.resend_count", state.resendCount);
+		} else state.span = startSpan(nextCtx, state, resolved);
+		if (resolved.propagateTraceContext) nextCtx = {
+			...injectTraceContext(nextCtx, state.span),
+			[stateKey]: state
+		};
+		return nextCtx;
+	};
+	return {
+		name: PLUGIN_NAME,
+		version: PLUGIN_VERSION,
+		init,
+		hooks: {
+			onRequest,
+			onSuccess(ctx, response) {
+				const state = getState(ctx);
+				if (!state?.span) return;
+				recordResponse(state.span, ctx, response, resolved);
+				endSpan(state);
+			},
+			onFail(ctx, response, error) {
+				const state = getState(ctx);
+				if (!state) return;
+				state.span ??= startSpan(ctx, state, resolved);
+				recordFailure(state.span, ctx, response, error, resolved);
+				endSpan(state);
+			},
+			onRetry(ctx, response, error, attempt) {
+				const state = getState(ctx);
+				if (!state?.span) return;
+				const attributes = {
+					"error.type": error._tag === "ApiError" ? String(error.statusCode) : error._tag,
+					"okfetch.error.tag": error._tag,
+					"okfetch.retry.attempt": attempt + 1
+				};
+				if (response) attributes["http.response.status_code"] = response.status;
+				state.span.addEvent("okfetch.retry", attributes);
+			}
+		}
+	};
+};
+//#endregion
+export { DEFAULT_KNOWN_HTTP_METHODS, DEFAULT_REDACTED_HEADERS, DEFAULT_REDACTED_NAME_PATTERN, DEFAULT_REDACTED_QUERY_PARAMS, DEFAULT_REDACTED_VALUE_PATTERNS, REDACTED_VALUE, otel };
+
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../index.ts"],"sourcesContent":["import type {\n  OkfetchError,\n  OkfetchOptions,\n  OkfetchPlugin,\n  OkfetchPluginInitInput,\n  OkfetchRequestContext,\n} from \"@okfetch/fetch\";\nimport {\n  context,\n  propagation,\n  SpanKind,\n  SpanStatusCode,\n  trace,\n} from \"@opentelemetry/api\";\nimport type {\n  Attributes,\n  Span,\n  TextMapSetter,\n  Tracer,\n} from \"@opentelemetry/api\";\n\nconst PLUGIN_NAME = \"otel\";\nconst PLUGIN_VERSION = \"0.1.0\";\nconst TRACER_NAME = \"@okfetch/otel\";\n\n/** HTTP methods known by default, as defined by the HTTP semantic conventions. */\nexport const DEFAULT_KNOWN_HTTP_METHODS = [\n  \"CONNECT\",\n  \"DELETE\",\n  \"GET\",\n  \"HEAD\",\n  \"OPTIONS\",\n  \"PATCH\",\n  \"POST\",\n  \"PUT\",\n  \"QUERY\",\n  \"TRACE\",\n] as const;\n\n/** Value written in place of redacted headers and query parameters. */\nexport const REDACTED_VALUE = \"REDACTED\";\n\n/** A header or query parameter name, or a pattern tested against names. */\nexport type RedactionMatcher = string | RegExp;\n\n/** A list of names and patterns whose values are redacted. */\nexport type RedactionList = readonly RedactionMatcher[];\n\n/**\n * Configures what gets redacted. An array replaces the defaults entirely; a\n * function receives the defaults and returns the list to use, which makes\n * extending them a one-liner: `(defaults) => [...defaults, \"x-tenant\"]`.\n */\nexport type RedactionOption =\n  | RedactionList\n  | ((defaults: RedactionList) => RedactionList);\n\n/**\n * Header and query parameter names matching this pattern are redacted even\n * when they are not listed explicitly, so vendor-specific credential fields\n * such as `X-Amz-Security-Token` or `X-Goog-Signature` never leak. It is part\n * of both default lists.\n */\nexport const DEFAULT_REDACTED_NAME_PATTERN =\n  /auth|bearer|cred|jwt|otp|passw|private|secret|session|sig|token|api[-_]?key/i;\n\n/** A list of patterns tested against header and query parameter values. */\nexport type ValuePatternList = readonly RegExp[];\n\n/**\n * Configures value-based redaction. An array replaces the defaults; a\n * function receives the defaults and returns the list to use.\n */\nexport type ValuePatternOption =\n  | ValuePatternList\n  | ((defaults: ValuePatternList) => ValuePatternList);\n\n/** Header names to capture, or `true` to explicitly capture every header. */\nexport type HeaderCaptureOption = boolean | readonly string[];\n\n/**\n * Header and query parameter values matching one of these patterns are\n * redacted whatever their name, so a credential carried under an arbitrary\n * name (`X-JWT`, `blob`, ...) still never reaches telemetry. Covers JWTs and\n * HTTP authentication credentials (`Bearer`, `Basic`, `Digest`, ...).\n */\nexport const DEFAULT_REDACTED_VALUE_PATTERNS: ValuePatternList = [\n  /^eyJ[\\w-]+\\.[\\w-]+\\.[\\w-]*$/,\n  /^(?:Bearer|Basic|Digest|Negotiate|Token|OAuth|AWS4-HMAC-SHA256)\\s/i,\n];\n\n/** Request headers whose values are never recorded on spans. */\nexport const DEFAULT_REDACTED_HEADERS: RedactionList = [\n  \"authorization\",\n  \"proxy-authorization\",\n  \"cookie\",\n  \"set-cookie\",\n  \"x-api-key\",\n  \"x-auth-token\",\n  \"api-key\",\n  \"x-amz-security-token\",\n  \"x-amz-credential\",\n  \"x-amz-signature\",\n  DEFAULT_REDACTED_NAME_PATTERN,\n];\n\n/** Query parameters whose values are never recorded on spans. */\nexport const DEFAULT_REDACTED_QUERY_PARAMS: RedactionList = [\n  \"access_token\",\n  \"api_key\",\n  \"apikey\",\n  \"assertion\",\n  \"auth\",\n  \"authorization\",\n  \"awsaccesskeyid\",\n  \"client_assertion\",\n  \"client_secret\",\n  \"code\",\n  \"code_verifier\",\n  \"id_token\",\n  \"key\",\n  \"password\",\n  \"refresh_token\",\n  \"secret\",\n  \"sig\",\n  \"signature\",\n  \"token\",\n  \"x-amz-credential\",\n  \"x-amz-security-token\",\n  \"x-amz-signature\",\n  \"x-goog-signature\",\n  DEFAULT_REDACTED_NAME_PATTERN,\n];\n\nexport type OtelOptions = {\n  /**\n   * Tracer used to start spans. Defaults to a tracer named `@okfetch/otel`\n   * obtained from the global tracer provider.\n   */\n  tracer?: Tracer;\n  /**\n   * Request headers to record as `http.request.header.<name>` attributes.\n   * Sensitive values are always redacted. Defaults to no headers. Pass `true`\n   * to explicitly capture every request header.\n   */\n  captureRequestHeaders?: HeaderCaptureOption;\n  /**\n   * Response headers to record as `http.response.header.<name>` attributes.\n   * Sensitive values are always redacted. Defaults to no headers. Pass `true`\n   * to explicitly capture every response header.\n   */\n  captureResponseHeaders?: HeaderCaptureOption;\n  /**\n   * Whether to record request and response payload sizes when Fetch exposes\n   * enough information to calculate them accurately. Defaults to `false`.\n   */\n  captureBodySizes?: boolean;\n  /**\n   * Case-sensitive HTTP methods known to this instrumentation. This is a full\n   * replacement for `DEFAULT_KNOWN_HTTP_METHODS`.\n   */\n  knownMethods?: readonly string[];\n  /**\n   * Whether W3C trace context headers (`traceparent`, `tracestate`) are\n   * injected into the outgoing request. Defaults to `true`.\n   */\n  propagateTraceContext?: boolean;\n  /**\n   * What to redact from recorded headers and query parameters. Each entry\n   * accepts an array (replaces the defaults) or a function (receives the\n   * defaults and returns the list to use). Name matching is case-insensitive.\n   */\n  redact?: {\n    /** Defaults to `DEFAULT_REDACTED_HEADERS`. */\n    headers?: RedactionOption;\n    /** Defaults to `DEFAULT_REDACTED_QUERY_PARAMS`. */\n    queryParams?: RedactionOption;\n    /**\n     * Patterns matched against header and query parameter values, applied\n     * regardless of name. Defaults to `DEFAULT_REDACTED_VALUE_PATTERNS`.\n     */\n    values?: ValuePatternOption;\n  };\n};\n\ntype OtelState = {\n  ended: boolean;\n  resendCount: number;\n  span?: Span;\n  template?: string;\n};\n\ntype NameMatcher = (name: string) => boolean;\ntype ValueMatcher = (value: string) => boolean;\n\ntype ResolvedOptions = {\n  captureBodySizes: boolean;\n  capturedRequestHeaders: true | ReadonlySet<string>;\n  capturedResponseHeaders: true | ReadonlySet<string>;\n  propagateTraceContext: boolean;\n  isRedactedHeader: NameMatcher;\n  isRedactedQueryParam: NameMatcher;\n  isRedactedValue: ValueMatcher;\n  knownMethods: ReadonlySet<string>;\n  tracer: Tracer;\n};\n\nconst stateKey = Symbol.for(\"@okfetch/otel:state\");\n\ntype WithState<T> = T & { [stateKey]?: OtelState };\n\nconst getState = (\n  carrier: OkfetchRequestContext | OkfetchOptions\n): OtelState | undefined => (carrier as WithState<typeof carrier>)[stateKey];\n\nconst pathParamPattern = /:[A-Za-z_]\\w*(?=[/?#]|$)/;\nconst userInfoPattern = /^([a-z][a-z\\d+.-]*:\\/\\/)[^/]*@/i;\nconst contentLengthPattern = /^\\d+$/;\n\n/**\n * Reduces a raw request URL to its low-cardinality absolute-path template.\n * Query values, fragments, origins, and embedded credentials are excluded.\n */\nconst toTemplate = (rawUrl: string): string | undefined => {\n  const [withoutQuery = \"\"] = rawUrl.split(/[?#]/, 1);\n  const withoutUserInfo = withoutQuery.replace(userInfoPattern, \"$1\");\n  if (!pathParamPattern.test(withoutUserInfo)) {\n    return undefined;\n  }\n\n  try {\n    return new URL(withoutUserInfo).pathname;\n  } catch {\n    return withoutUserInfo;\n  }\n};\n\nconst headersSetter: TextMapSetter<Headers> = {\n  set: (carrier, key, value) => {\n    carrier.set(key, value);\n  },\n};\n\nconst resolveList = <T extends readonly unknown[]>(\n  defaults: T,\n  option: T | ((defaults: T) => T) | undefined\n): T => {\n  if (option === undefined) {\n    return defaults;\n  }\n  if (Array.isArray(option)) {\n    return option as T;\n  }\n\n  return (option as (defaults: T) => T)(defaults);\n};\n\nconst testPattern = (pattern: RegExp, input: string): boolean => {\n  pattern.lastIndex = 0;\n  return pattern.test(input);\n};\n\nconst createValueMatcher =\n  (patterns: ValuePatternList): ValueMatcher =>\n  (value) =>\n    patterns.some((pattern) => testPattern(pattern, value));\n\nconst createNameMatcher = (list: RedactionList): NameMatcher => {\n  const names = new Set<string>();\n  const patterns: RegExp[] = [];\n\n  for (const matcher of list) {\n    if (typeof matcher === \"string\") {\n      names.add(matcher.toLowerCase());\n    } else {\n      patterns.push(matcher);\n    }\n  }\n\n  return (name) =>\n    names.has(name.toLowerCase()) ||\n    patterns.some((pattern) => testPattern(pattern, name));\n};\n\nconst resolveCapturedHeaders = (\n  option: HeaderCaptureOption | undefined\n): true | ReadonlySet<string> =>\n  option === true\n    ? true\n    : new Set(\n        option === false || option === undefined\n          ? []\n          : option.map((name) => name.toLowerCase())\n      );\n\nconst resolveOptions = (options: OtelOptions | undefined): ResolvedOptions => ({\n  captureBodySizes: options?.captureBodySizes ?? false,\n  capturedRequestHeaders: resolveCapturedHeaders(\n    options?.captureRequestHeaders\n  ),\n  capturedResponseHeaders: resolveCapturedHeaders(\n    options?.captureResponseHeaders\n  ),\n  propagateTraceContext: options?.propagateTraceContext ?? true,\n  isRedactedHeader: createNameMatcher(\n    resolveList(DEFAULT_REDACTED_HEADERS, options?.redact?.headers)\n  ),\n  isRedactedQueryParam: createNameMatcher(\n    resolveList(DEFAULT_REDACTED_QUERY_PARAMS, options?.redact?.queryParams)\n  ),\n  isRedactedValue: createValueMatcher(\n    resolveList(DEFAULT_REDACTED_VALUE_PATTERNS, options?.redact?.values)\n  ),\n  knownMethods: new Set(options?.knownMethods ?? DEFAULT_KNOWN_HTTP_METHODS),\n  tracer: options?.tracer ?? trace.getTracer(TRACER_NAME, PLUGIN_VERSION),\n});\n\nconst getMethodAttributes = (\n  method: string,\n  knownMethods: ReadonlySet<string>\n): Attributes => {\n  const semanticMethod = knownMethods.has(method) ? method : \"_OTHER\";\n  const attributes: Attributes = {\n    \"http.request.method\": semanticMethod,\n  };\n\n  if (method !== semanticMethod) {\n    attributes[\"http.request.method_original\"] = method;\n  }\n\n  return attributes;\n};\n\nconst getContentLength = (headers: Headers): number | undefined => {\n  const value = headers.get(\"content-length\")?.trim();\n  if (!value || !contentLengthPattern.test(value)) {\n    return undefined;\n  }\n\n  const size = Number(value);\n  return Number.isSafeInteger(size) ? size : undefined;\n};\n\nconst getRequestBodySize = (\n  body: OkfetchRequestContext[\"body\"],\n  headers: Headers\n): number | undefined => {\n  if (body === undefined) {\n    return undefined;\n  }\n\n  const contentLength = getContentLength(headers);\n  if (contentLength !== undefined) {\n    return contentLength;\n  }\n  if (headers.has(\"content-encoding\")) {\n    return undefined;\n  }\n  if (typeof body === \"string\") {\n    return new TextEncoder().encode(body).byteLength;\n  }\n  if (body instanceof URLSearchParams) {\n    return new TextEncoder().encode(body.toString()).byteLength;\n  }\n  if (body instanceof Blob) {\n    return body.size;\n  }\n  if (body instanceof ArrayBuffer || ArrayBuffer.isView(body)) {\n    return body.byteLength;\n  }\n\n  return undefined;\n};\n\nconst shouldCaptureHeader = (\n  capturedHeaders: true | ReadonlySet<string>,\n  name: string\n): boolean => capturedHeaders === true || capturedHeaders.has(name);\n\nconst captureHeaders = (\n  attributes: Attributes,\n  prefix: \"http.request.header\" | \"http.response.header\",\n  headers: Headers,\n  capturedHeaders: true | ReadonlySet<string>,\n  options: ResolvedOptions\n): void => {\n  for (const [name, value] of headers) {\n    if (!shouldCaptureHeader(capturedHeaders, name)) {\n      continue;\n    }\n\n    const shouldRedact =\n      options.isRedactedHeader(name) || options.isRedactedValue(value);\n    attributes[`${prefix}.${name}`] = [shouldRedact ? REDACTED_VALUE : value];\n  }\n};\n\nconst getServerPort = (url: URL): number | undefined => {\n  if (url.port) {\n    return Number(url.port);\n  }\n  if (url.protocol === \"http:\") {\n    return 80;\n  }\n  if (url.protocol === \"https:\") {\n    return 443;\n  }\n\n  return undefined;\n};\n\nconst redactUrl = (url: URL, options: ResolvedOptions): URL => {\n  const redacted = new URL(url.toString());\n  redacted.hash = \"\";\n\n  if (redacted.username) {\n    redacted.username = REDACTED_VALUE;\n  }\n  if (redacted.password) {\n    redacted.password = REDACTED_VALUE;\n  }\n\n  for (const name of new Set(redacted.searchParams.keys())) {\n    const shouldRedact =\n      options.isRedactedQueryParam(name) ||\n      redacted.searchParams.getAll(name).some(options.isRedactedValue);\n    if (shouldRedact) {\n      redacted.searchParams.set(name, REDACTED_VALUE);\n    }\n  }\n\n  return redacted;\n};\n\nconst buildRequestAttributes = (\n  ctx: OkfetchRequestContext,\n  template: string | undefined,\n  options: ResolvedOptions\n): Attributes => {\n  const url = redactUrl(ctx.url, options);\n  const attributes: Attributes = {\n    ...getMethodAttributes(ctx.method, options.knownMethods),\n    \"server.address\": url.hostname,\n    \"url.full\": url.toString(),\n    \"url.path\": url.pathname,\n    \"url.scheme\": url.protocol.replace(/:$/, \"\"),\n  };\n  const serverPort = getServerPort(url);\n  if (serverPort !== undefined) {\n    attributes[\"server.port\"] = serverPort;\n  }\n\n  if (url.search) {\n    attributes[\"url.query\"] = url.search.slice(1);\n  }\n  if (template) {\n    attributes[\"url.template\"] = template;\n  }\n\n  if (options.captureBodySizes) {\n    const bodySize = getRequestBodySize(ctx.body, ctx.headers);\n    if (bodySize !== undefined) {\n      attributes[\"http.request.body.size\"] = bodySize;\n    }\n  }\n  captureHeaders(\n    attributes,\n    \"http.request.header\",\n    ctx.headers,\n    options.capturedRequestHeaders,\n    options\n  );\n\n  return attributes;\n};\n\nconst startSpan = (\n  ctx: OkfetchRequestContext,\n  state: OtelState,\n  options: ResolvedOptions\n): Span => {\n  const method = options.knownMethods.has(ctx.method) ? ctx.method : \"HTTP\";\n  const name = state.template ? `${method} ${state.template}` : method;\n\n  return options.tracer.startSpan(\n    name,\n    {\n      attributes: buildRequestAttributes(ctx, state.template, options),\n      kind: SpanKind.CLIENT,\n    },\n    context.active()\n  );\n};\n\n/**\n * Injects trace context headers into a copy of the request headers. A\n * propagator failure is recorded on the span and the request proceeds without\n * propagation headers: telemetry must never fail the request or leave the\n * span open.\n */\nconst injectTraceContext = (\n  ctx: OkfetchRequestContext,\n  span: Span\n): OkfetchRequestContext => {\n  const headers = new Headers(ctx.headers);\n\n  try {\n    propagation.inject(\n      trace.setSpan(context.active(), span),\n      headers,\n      headersSetter\n    );\n  } catch (error) {\n    span.addEvent(\"okfetch.propagation_failed\", {\n      \"exception.message\":\n        error instanceof Error ? error.message : String(error),\n    });\n    return ctx;\n  }\n\n  return { ...ctx, headers };\n};\n\nconst endSpan = (state: OtelState): void => {\n  if (state.ended) {\n    return;\n  }\n\n  state.ended = true;\n  state.span?.end();\n};\n\nconst recordResponse = (\n  span: Span,\n  ctx: OkfetchRequestContext,\n  response: Response,\n  options: ResolvedOptions\n): void => {\n  const attributes: Attributes = {\n    \"http.response.status_code\": response.status,\n  };\n\n  if (\n    options.captureBodySizes &&\n    ctx.method !== \"HEAD\" &&\n    response.status !== 204 &&\n    response.status !== 304\n  ) {\n    const bodySize = getContentLength(response.headers);\n    if (bodySize !== undefined) {\n      attributes[\"http.response.body.size\"] = bodySize;\n    }\n  }\n  captureHeaders(\n    attributes,\n    \"http.response.header\",\n    response.headers,\n    options.capturedResponseHeaders,\n    options\n  );\n  span.setAttributes(attributes);\n};\n\nconst recordFailure = (\n  span: Span,\n  ctx: OkfetchRequestContext,\n  response: Response | undefined,\n  error: OkfetchError<unknown>,\n  options: ResolvedOptions\n): void => {\n  span.setAttribute(\"okfetch.error.tag\", error._tag);\n\n  if (response) {\n    recordResponse(span, ctx, response, options);\n  }\n\n  if (error._tag === \"ApiError\") {\n    span.setAttributes({\n      \"error.type\": String(error.statusCode),\n      \"http.response.status_code\": error.statusCode,\n    });\n    span.setStatus({ code: SpanStatusCode.ERROR });\n    return;\n  }\n\n  if (error._tag === \"ValidationError\") {\n    const issues = error.issues.map((issue) => {\n      const path = issue.path\n        ?.map((segment) =>\n          String(typeof segment === \"object\" ? segment.key : segment)\n        )\n        .join(\".\");\n      return path ? `${path}: ${issue.message}` : issue.message;\n    });\n    const message =\n      issues.length > 0\n        ? `${error.message}: ${issues.join(\"; \")}`\n        : error.message;\n\n    span.setAttribute(\"okfetch.validation.issues\", issues);\n    span.setAttribute(\"error.type\", error._tag);\n    span.recordException({ message, name: error._tag, stack: error.stack });\n    span.setStatus({ code: SpanStatusCode.ERROR, message });\n    return;\n  }\n\n  span.setAttribute(\"error.type\", error._tag);\n  span.recordException(error);\n  span.setStatus({ code: SpanStatusCode.ERROR, message: error.message });\n};\n\n/**\n * Creates an OpenTelemetry plugin that records a single `CLIENT` span per\n * okfetch request, spanning every retry attempt.\n *\n * The span records HTTP client attributes available through Fetch and marks\n * failures using the OpenTelemetry HTTP span conventions. Request and response\n * bodies are never recorded.\n */\nexport const otel = (options?: OtelOptions): OkfetchPlugin => {\n  const resolved = resolveOptions(options);\n\n  const init = ({\n    options: requestOptions,\n    url,\n  }: OkfetchPluginInitInput): OkfetchPluginInitInput => {\n    const state: OtelState = {\n      ended: false,\n      resendCount: 0,\n      template:\n        requestOptions.params === undefined ? undefined : toTemplate(url),\n    };\n    const nextOptions: WithState<OkfetchOptions> = {\n      ...requestOptions,\n      [stateKey]: state,\n    };\n\n    return { options: nextOptions, url };\n  };\n\n  const onRequest = (ctx: OkfetchRequestContext): OkfetchRequestContext => {\n    const state = getState(ctx) ?? { ended: false, resendCount: 0 };\n    let nextCtx: WithState<OkfetchRequestContext> = {\n      ...ctx,\n      [stateKey]: state,\n    };\n    if (state.span) {\n      state.resendCount += 1;\n      state.span.setAttribute(\"http.request.resend_count\", state.resendCount);\n    } else {\n      state.span = startSpan(nextCtx, state, resolved);\n    }\n\n    if (resolved.propagateTraceContext) {\n      nextCtx = {\n        ...injectTraceContext(nextCtx, state.span),\n        [stateKey]: state,\n      };\n    }\n\n    return nextCtx;\n  };\n\n  return {\n    name: PLUGIN_NAME,\n    version: PLUGIN_VERSION,\n    init,\n    hooks: {\n      onRequest,\n      onSuccess(ctx, response) {\n        const state = getState(ctx);\n        if (!state?.span) {\n          return;\n        }\n\n        recordResponse(state.span, ctx, response, resolved);\n        endSpan(state);\n      },\n      onFail(ctx, response, error) {\n        const state = getState(ctx);\n        if (!state) {\n          return;\n        }\n\n        state.span ??= startSpan(ctx, state, resolved);\n        recordFailure(state.span, ctx, response, error, resolved);\n        endSpan(state);\n      },\n      onRetry(ctx, response, error, attempt) {\n        const state = getState(ctx);\n        if (!state?.span) {\n          return;\n        }\n\n        const attributes: Attributes = {\n          \"error.type\":\n            error._tag === \"ApiError\" ? String(error.statusCode) : error._tag,\n          \"okfetch.error.tag\": error._tag,\n          \"okfetch.retry.attempt\": attempt + 1,\n        };\n        if (response) {\n          attributes[\"http.response.status_code\"] = response.status;\n        }\n\n        state.span.addEvent(\"okfetch.retry\", attributes);\n      },\n    },\n  } satisfies OkfetchPlugin;\n};\n"],"mappings":";;AAqBA,MAAM,cAAc;AACpB,MAAM,iBAAiB;AACvB,MAAM,cAAc;;AAGpB,MAAa,6BAA6B;CACxC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,iBAAiB;;;;;;;AAuB9B,MAAa,gCACX;;;;;;;AAsBF,MAAa,kCAAoD,CAC/D,+BACA,oEACF;;AAGA,MAAa,2BAA0C;CACrD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,gCAA+C;CAC1D;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AA2EA,MAAM,WAAW,OAAO,IAAI,qBAAqB;AAIjD,MAAM,YACJ,YAC2B,QAAsC;AAEnE,MAAM,mBAAmB;AACzB,MAAM,kBAAkB;AACxB,MAAM,uBAAuB;;;;;AAM7B,MAAM,cAAc,WAAuC;CACzD,MAAM,CAAC,eAAe,MAAM,OAAO,MAAM,QAAQ,CAAC;CAClD,MAAM,kBAAkB,aAAa,QAAQ,iBAAiB,IAAI;CAClE,IAAI,CAAC,iBAAiB,KAAK,eAAe,GACxC;CAGF,IAAI;EACF,OAAO,IAAI,IAAI,eAAe,CAAC,CAAC;CAClC,QAAQ;EACN,OAAO;CACT;AACF;AAEA,MAAM,gBAAwC,EAC5C,MAAM,SAAS,KAAK,UAAU;CAC5B,QAAQ,IAAI,KAAK,KAAK;AACxB,EACF;AAEA,MAAM,eACJ,UACA,WACM;CACN,IAAI,WAAW,KAAA,GACb,OAAO;CAET,IAAI,MAAM,QAAQ,MAAM,GACtB,OAAO;CAGT,OAAQ,OAA8B,QAAQ;AAChD;AAEA,MAAM,eAAe,SAAiB,UAA2B;CAC/D,QAAQ,YAAY;CACpB,OAAO,QAAQ,KAAK,KAAK;AAC3B;AAEA,MAAM,sBACH,cACA,UACC,SAAS,MAAM,YAAY,YAAY,SAAS,KAAK,CAAC;AAE1D,MAAM,qBAAqB,SAAqC;CAC9D,MAAM,wBAAQ,IAAI,IAAY;CAC9B,MAAM,WAAqB,CAAC;CAE5B,KAAK,MAAM,WAAW,MACpB,IAAI,OAAO,YAAY,UACrB,MAAM,IAAI,QAAQ,YAAY,CAAC;MAE/B,SAAS,KAAK,OAAO;CAIzB,QAAQ,SACN,MAAM,IAAI,KAAK,YAAY,CAAC,KAC5B,SAAS,MAAM,YAAY,YAAY,SAAS,IAAI,CAAC;AACzD;AAEA,MAAM,0BACJ,WAEA,WAAW,OACP,OACA,IAAI,IACF,WAAW,SAAS,WAAW,KAAA,IAC3B,CAAC,IACD,OAAO,KAAK,SAAS,KAAK,YAAY,CAAC,CAC7C;AAEN,MAAM,kBAAkB,aAAuD;CAC7E,kBAAkB,SAAS,oBAAoB;CAC/C,wBAAwB,uBACtB,SAAS,qBACX;CACA,yBAAyB,uBACvB,SAAS,sBACX;CACA,uBAAuB,SAAS,yBAAyB;CACzD,kBAAkB,kBAChB,YAAY,0BAA0B,SAAS,QAAQ,OAAO,CAChE;CACA,sBAAsB,kBACpB,YAAY,+BAA+B,SAAS,QAAQ,WAAW,CACzE;CACA,iBAAiB,mBACf,YAAY,iCAAiC,SAAS,QAAQ,MAAM,CACtE;CACA,cAAc,IAAI,IAAI,SAAS,gBAAgB,0BAA0B;CACzE,QAAQ,SAAS,UAAU,MAAM,UAAU,aAAa,cAAc;AACxE;AAEA,MAAM,uBACJ,QACA,iBACe;CACf,MAAM,iBAAiB,aAAa,IAAI,MAAM,IAAI,SAAS;CAC3D,MAAM,aAAyB,EAC7B,uBAAuB,eACzB;CAEA,IAAI,WAAW,gBACb,WAAW,kCAAkC;CAG/C,OAAO;AACT;AAEA,MAAM,oBAAoB,YAAyC;CACjE,MAAM,QAAQ,QAAQ,IAAI,gBAAgB,CAAC,EAAE,KAAK;CAClD,IAAI,CAAC,SAAS,CAAC,qBAAqB,KAAK,KAAK,GAC5C;CAGF,MAAM,OAAO,OAAO,KAAK;CACzB,OAAO,OAAO,cAAc,IAAI,IAAI,OAAO,KAAA;AAC7C;AAEA,MAAM,sBACJ,MACA,YACuB;CACvB,IAAI,SAAS,KAAA,GACX;CAGF,MAAM,gBAAgB,iBAAiB,OAAO;CAC9C,IAAI,kBAAkB,KAAA,GACpB,OAAO;CAET,IAAI,QAAQ,IAAI,kBAAkB,GAChC;CAEF,IAAI,OAAO,SAAS,UAClB,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;CAExC,IAAI,gBAAgB,iBAClB,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC;CAEnD,IAAI,gBAAgB,MAClB,OAAO,KAAK;CAEd,IAAI,gBAAgB,eAAe,YAAY,OAAO,IAAI,GACxD,OAAO,KAAK;AAIhB;AAEA,MAAM,uBACJ,iBACA,SACY,oBAAoB,QAAQ,gBAAgB,IAAI,IAAI;AAElE,MAAM,kBACJ,YACA,QACA,SACA,iBACA,YACS;CACT,KAAK,MAAM,CAAC,MAAM,UAAU,SAAS;EACnC,IAAI,CAAC,oBAAoB,iBAAiB,IAAI,GAC5C;EAGF,MAAM,eACJ,QAAQ,iBAAiB,IAAI,KAAK,QAAQ,gBAAgB,KAAK;EACjE,WAAW,GAAG,OAAO,GAAG,UAAU,CAAC,eAAe,iBAAiB,KAAK;CAC1E;AACF;AAEA,MAAM,iBAAiB,QAAiC;CACtD,IAAI,IAAI,MACN,OAAO,OAAO,IAAI,IAAI;CAExB,IAAI,IAAI,aAAa,SACnB,OAAO;CAET,IAAI,IAAI,aAAa,UACnB,OAAO;AAIX;AAEA,MAAM,aAAa,KAAU,YAAkC;CAC7D,MAAM,WAAW,IAAI,IAAI,IAAI,SAAS,CAAC;CACvC,SAAS,OAAO;CAEhB,IAAI,SAAS,UACX,SAAS,WAAW;CAEtB,IAAI,SAAS,UACX,SAAS,WAAW;CAGtB,KAAK,MAAM,QAAQ,IAAI,IAAI,SAAS,aAAa,KAAK,CAAC,GAIrD,IAFE,QAAQ,qBAAqB,IAAI,KACjC,SAAS,aAAa,OAAO,IAAI,CAAC,CAAC,KAAK,QAAQ,eAAe,GAE/D,SAAS,aAAa,IAAI,MAAM,cAAc;CAIlD,OAAO;AACT;AAEA,MAAM,0BACJ,KACA,UACA,YACe;CACf,MAAM,MAAM,UAAU,IAAI,KAAK,OAAO;CACtC,MAAM,aAAyB;EAC7B,GAAG,oBAAoB,IAAI,QAAQ,QAAQ,YAAY;EACvD,kBAAkB,IAAI;EACtB,YAAY,IAAI,SAAS;EACzB,YAAY,IAAI;EAChB,cAAc,IAAI,SAAS,QAAQ,MAAM,EAAE;CAC7C;CACA,MAAM,aAAa,cAAc,GAAG;CACpC,IAAI,eAAe,KAAA,GACjB,WAAW,iBAAiB;CAG9B,IAAI,IAAI,QACN,WAAW,eAAe,IAAI,OAAO,MAAM,CAAC;CAE9C,IAAI,UACF,WAAW,kBAAkB;CAG/B,IAAI,QAAQ,kBAAkB;EAC5B,MAAM,WAAW,mBAAmB,IAAI,MAAM,IAAI,OAAO;EACzD,IAAI,aAAa,KAAA,GACf,WAAW,4BAA4B;CAE3C;CACA,eACE,YACA,uBACA,IAAI,SACJ,QAAQ,wBACR,OACF;CAEA,OAAO;AACT;AAEA,MAAM,aACJ,KACA,OACA,YACS;CACT,MAAM,SAAS,QAAQ,aAAa,IAAI,IAAI,MAAM,IAAI,IAAI,SAAS;CACnE,MAAM,OAAO,MAAM,WAAW,GAAG,OAAO,GAAG,MAAM,aAAa;CAE9D,OAAO,QAAQ,OAAO,UACpB,MACA;EACE,YAAY,uBAAuB,KAAK,MAAM,UAAU,OAAO;EAC/D,MAAM,SAAS;CACjB,GACA,QAAQ,OAAO,CACjB;AACF;;;;;;;AAQA,MAAM,sBACJ,KACA,SAC0B;CAC1B,MAAM,UAAU,IAAI,QAAQ,IAAI,OAAO;CAEvC,IAAI;EACF,YAAY,OACV,MAAM,QAAQ,QAAQ,OAAO,GAAG,IAAI,GACpC,SACA,aACF;CACF,SAAS,OAAO;EACd,KAAK,SAAS,8BAA8B,EAC1C,qBACE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EACzD,CAAC;EACD,OAAO;CACT;CAEA,OAAO;EAAE,GAAG;EAAK;CAAQ;AAC3B;AAEA,MAAM,WAAW,UAA2B;CAC1C,IAAI,MAAM,OACR;CAGF,MAAM,QAAQ;CACd,MAAM,MAAM,IAAI;AAClB;AAEA,MAAM,kBACJ,MACA,KACA,UACA,YACS;CACT,MAAM,aAAyB,EAC7B,6BAA6B,SAAS,OACxC;CAEA,IACE,QAAQ,oBACR,IAAI,WAAW,UACf,SAAS,WAAW,OACpB,SAAS,WAAW,KACpB;EACA,MAAM,WAAW,iBAAiB,SAAS,OAAO;EAClD,IAAI,aAAa,KAAA,GACf,WAAW,6BAA6B;CAE5C;CACA,eACE,YACA,wBACA,SAAS,SACT,QAAQ,yBACR,OACF;CACA,KAAK,cAAc,UAAU;AAC/B;AAEA,MAAM,iBACJ,MACA,KACA,UACA,OACA,YACS;CACT,KAAK,aAAa,qBAAqB,MAAM,IAAI;CAEjD,IAAI,UACF,eAAe,MAAM,KAAK,UAAU,OAAO;CAG7C,IAAI,MAAM,SAAS,YAAY;EAC7B,KAAK,cAAc;GACjB,cAAc,OAAO,MAAM,UAAU;GACrC,6BAA6B,MAAM;EACrC,CAAC;EACD,KAAK,UAAU,EAAE,MAAM,eAAe,MAAM,CAAC;EAC7C;CACF;CAEA,IAAI,MAAM,SAAS,mBAAmB;EACpC,MAAM,SAAS,MAAM,OAAO,KAAK,UAAU;GACzC,MAAM,OAAO,MAAM,MACf,KAAK,YACL,OAAO,OAAO,YAAY,WAAW,QAAQ,MAAM,OAAO,CAC5D,CAAC,CACA,KAAK,GAAG;GACX,OAAO,OAAO,GAAG,KAAK,IAAI,MAAM,YAAY,MAAM;EACpD,CAAC;EACD,MAAM,UACJ,OAAO,SAAS,IACZ,GAAG,MAAM,QAAQ,IAAI,OAAO,KAAK,IAAI,MACrC,MAAM;EAEZ,KAAK,aAAa,6BAA6B,MAAM;EACrD,KAAK,aAAa,cAAc,MAAM,IAAI;EAC1C,KAAK,gBAAgB;GAAE;GAAS,MAAM,MAAM;GAAM,OAAO,MAAM;EAAM,CAAC;EACtE,KAAK,UAAU;GAAE,MAAM,eAAe;GAAO;EAAQ,CAAC;EACtD;CACF;CAEA,KAAK,aAAa,cAAc,MAAM,IAAI;CAC1C,KAAK,gBAAgB,KAAK;CAC1B,KAAK,UAAU;EAAE,MAAM,eAAe;EAAO,SAAS,MAAM;CAAQ,CAAC;AACvE;;;;;;;;;AAUA,MAAa,QAAQ,YAAyC;CAC5D,MAAM,WAAW,eAAe,OAAO;CAEvC,MAAM,QAAQ,EACZ,SAAS,gBACT,UACoD;EACpD,MAAM,QAAmB;GACvB,OAAO;GACP,aAAa;GACb,UACE,eAAe,WAAW,KAAA,IAAY,KAAA,IAAY,WAAW,GAAG;EACpE;EAMA,OAAO;GAAE,SAAS;IAJhB,GAAG;KACF,WAAW;GAGc;GAAG;EAAI;CACrC;CAEA,MAAM,aAAa,QAAsD;EACvE,MAAM,QAAQ,SAAS,GAAG,KAAK;GAAE,OAAO;GAAO,aAAa;EAAE;EAC9D,IAAI,UAA4C;GAC9C,GAAG;IACF,WAAW;EACd;EACA,IAAI,MAAM,MAAM;GACd,MAAM,eAAe;GACrB,MAAM,KAAK,aAAa,6BAA6B,MAAM,WAAW;EACxE,OACE,MAAM,OAAO,UAAU,SAAS,OAAO,QAAQ;EAGjD,IAAI,SAAS,uBACX,UAAU;GACR,GAAG,mBAAmB,SAAS,MAAM,IAAI;IACxC,WAAW;EACd;EAGF,OAAO;CACT;CAEA,OAAO;EACL,MAAM;EACN,SAAS;EACT;EACA,OAAO;GACL;GACA,UAAU,KAAK,UAAU;IACvB,MAAM,QAAQ,SAAS,GAAG;IAC1B,IAAI,CAAC,OAAO,MACV;IAGF,eAAe,MAAM,MAAM,KAAK,UAAU,QAAQ;IAClD,QAAQ,KAAK;GACf;GACA,OAAO,KAAK,UAAU,OAAO;IAC3B,MAAM,QAAQ,SAAS,GAAG;IAC1B,IAAI,CAAC,OACH;IAGF,MAAM,SAAS,UAAU,KAAK,OAAO,QAAQ;IAC7C,cAAc,MAAM,MAAM,KAAK,UAAU,OAAO,QAAQ;IACxD,QAAQ,KAAK;GACf;GACA,QAAQ,KAAK,UAAU,OAAO,SAAS;IACrC,MAAM,QAAQ,SAAS,GAAG;IAC1B,IAAI,CAAC,OAAO,MACV;IAGF,MAAM,aAAyB;KAC7B,cACE,MAAM,SAAS,aAAa,OAAO,MAAM,UAAU,IAAI,MAAM;KAC/D,qBAAqB,MAAM;KAC3B,yBAAyB,UAAU;IACrC;IACA,IAAI,UACF,WAAW,+BAA+B,SAAS;IAGrD,MAAM,KAAK,SAAS,iBAAiB,UAAU;GACjD;EACF;CACF;AACF"}

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@okfetch/otel",
+  "version": "0.5.0",
+  "description": "An OpenTelemetry tracing plugin for okfetch request lifecycles.",
+  "keywords": [
+    "fetch",
+    "opentelemetry",
+    "otel",
+    "plugin",
+    "tracing",
+    "typescript"
+  ],
+  "homepage": "https://github.com/aldotestino/okfetch#readme",
+  "bugs": {
+    "url": "https://github.com/aldotestino/okfetch/issues"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/aldotestino/okfetch.git"
+  },
+  "files": [
+    "dist"
+  ],
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.mts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.mts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.cjs",
+      "default": "./dist/index.mjs"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "@okfetch/fetch": "^0.5.0",
+    "@opentelemetry/api": "^1.9.0",
+    "@opentelemetry/context-async-hooks": "^2.0.0",
+    "@opentelemetry/core": "^2.0.0",
+    "@opentelemetry/sdk-trace-base": "^2.0.0",
+    "@types/bun": "latest",
+    "better-result": "^3.0.1"
+  },
+  "peerDependencies": {
+    "@okfetch/fetch": "^0.5.0",
+    "@opentelemetry/api": "^1.9.0"
+  }
+}