@opentelemetry/browser-instrumentation 0.3.0 → 0.4.0

package/README.md

@@ -13,6 +13,7 @@ npm install @opentelemetry/browser-instrumentation
 
 ## Instrumentations
 
+- [Navigation](#navigation) — automatic instrumentation for browser navigations (initial load and SPA route changes)
 - [Navigation Timing](#navigation-timing) — automatic instrumentation for navigation timing
 - [Resource Timing](#resource-timing) — automatic instrumentation for resource timing
 - [User Action](#user-action) — automatic instrumentation for user actions (clicks)
@@ -28,6 +29,7 @@ import {
   SimpleLogRecordProcessor,
 } from '@opentelemetry/sdk-logs';
 import { registerInstrumentations } from '@opentelemetry/instrumentation';
+import { NavigationInstrumentation } from '@opentelemetry/browser-instrumentation/experimental/navigation';
 import { NavigationTimingInstrumentation } from '@opentelemetry/browser-instrumentation/experimental/navigation-timing';
 import { ResourceTimingInstrumentation } from '@opentelemetry/browser-instrumentation/experimental/resource-timing';
 import { UserActionInstrumentation } from '@opentelemetry/browser-instrumentation/experimental/user-action';
@@ -42,6 +44,7 @@ logs.setGlobalLoggerProvider(logProvider);
 
 registerInstrumentations({
   instrumentations: [
+    new NavigationInstrumentation(),
     new NavigationTimingInstrumentation(),
     new ResourceTimingInstrumentation(),
     new UserActionInstrumentation(),
@@ -52,6 +55,62 @@ registerInstrumentations({
 
 ---
 
+### Navigation
+
+```typescript
+import { NavigationInstrumentation } from '@opentelemetry/browser-instrumentation/experimental/navigation';
+```
+
+Emits a `browser.navigation` event for the initial page load (hard navigation) and for subsequent in-page navigations (soft navigations), including `history.pushState`, `history.replaceState`, `popstate`, and hash changes. When enabled via config, the [Navigation API](https://developer.mozilla.org/en-US/docs/Web/API/Navigation_API) is used in preference to patching `history`.
+
+#### Configuration
+
+```typescript
+import {
+  NavigationInstrumentation,
+  defaultSanitizeUrl,
+} from '@opentelemetry/browser-instrumentation/experimental/navigation';
+
+new NavigationInstrumentation({
+  // Use window.navigation (Navigation API) when available instead of
+  // patching history.pushState / history.replaceState. Default: false.
+  useNavigationApiIfAvailable: true,
+
+  // Rewrite the captured URL before it is emitted. Useful for stripping
+  // path segments, query parameters, or tokens that should not be exported.
+  sanitizeUrl: (url) => defaultSanitizeUrl(url),
+
+  // Mutate the log record before it is emitted (e.g. attach custom attributes).
+  applyCustomLogRecordData: (logRecord) => {
+    logRecord.attributes = {
+      ...logRecord.attributes,
+      'app.route.id': '...',
+    };
+  },
+});
+```
+
+| Option | Type | Default | Description |
+|--------|------|---------|-------------|
+| `useNavigationApiIfAvailable` | `boolean` | `false` | When `true`, subscribes to the Navigation API (`currententrychange`) instead of patching `history.pushState` / `history.replaceState`. Falls back to history patching when the Navigation API is unavailable. |
+| `sanitizeUrl` | `(url: string) => string` | — | Called before the URL is written to `url.full`. |
+| `applyCustomLogRecordData` | `(logRecord: LogRecord) => void` | — | Hook to modify log records before they are emitted. Errors thrown from this hook are caught and logged via the instrumentation diag logger. |
+
+`defaultSanitizeUrl` is exported for composition — it redacts `user:password@` credentials and a set of common sensitive query parameters (`api_key`, `token`, `password`, etc.).
+
+#### Captured Attributes
+
+Each `browser.navigation` event includes:
+
+| Attribute | Description |
+|-----------|-------------|
+| `url.full` | The destination URL (after `sanitizeUrl` if configured). |
+| `browser.navigation.same_document` | `true` for SPA route changes; `false` for full-page loads. |
+| `browser.navigation.hash_change` | `true` when the navigation only adds or changes the URL fragment. |
+| `browser.navigation.type` | One of `push`, `replace`, `reload`, `traverse` (omitted for the initial hard navigation). |
+
+---
+
 ### Navigation Timing
 
 ```typescript

package/dist/console/index.d.ts

@@ -0,0 +1,3 @@
+import { ConsoleInstrumentationConfig, ConsoleMethod } from "./types.js";
+import { ConsoleInstrumentation } from "./instrumentation.js";
+export { ConsoleInstrumentation, type ConsoleInstrumentationConfig, type ConsoleMethod };

package/dist/console/index.js

@@ -0,0 +1,2 @@
+import { ConsoleInstrumentation } from "./instrumentation.js";
+export { ConsoleInstrumentation };

package/dist/console/instrumentation.d.ts

@@ -0,0 +1,21 @@
+import { ConsoleInstrumentationConfig } from "./types.js";
+import { InstrumentationBase } from "@opentelemetry/instrumentation";
+
+//#region src/console/instrumentation.d.ts
+/**
+ * OpenTelemetry instrumentation that captures console calls and emits them as OpenTelemetry logs.
+ */
+declare class ConsoleInstrumentation extends InstrumentationBase<ConsoleInstrumentationConfig> {
+  private _isPatched;
+  private _active;
+  constructor(config?: ConsoleInstrumentationConfig);
+  protected init(): never[];
+  private _getMessageSerializer;
+  private _getLogMethods;
+  private _patchConsoleMethod;
+  enable(): void;
+  disable(): void;
+}
+//#endregion
+export { ConsoleInstrumentation };
+//# sourceMappingURL=instrumentation.d.ts.map

package/dist/console/instrumentation.js

@@ -0,0 +1,84 @@
+import { version } from "../package.js";
+import { ATTR_CONSOLE_METHOD, CONSOLE_LOG_EVENT_NAME } from "./semconv.js";
+import { context } from "@opentelemetry/api";
+import { SeverityNumber } from "@opentelemetry/api-logs";
+import { InstrumentationBase } from "@opentelemetry/instrumentation";
+//#region src/console/instrumentation.ts
+const DEFAULT_LOG_METHODS = [
+	"log",
+	"warn",
+	"error",
+	"info",
+	"debug"
+];
+const SEVERITY_MAP = {
+	debug: SeverityNumber.DEBUG,
+	log: SeverityNumber.INFO,
+	info: SeverityNumber.INFO,
+	warn: SeverityNumber.WARN,
+	error: SeverityNumber.ERROR
+};
+/**
+* Default serializer for console arguments.
+* Joins arguments as strings.
+*/
+function defaultMessageSerializer(args) {
+	return args.map((arg) => {
+		if (typeof arg === "object" && arg !== null) try {
+			return JSON.stringify(arg);
+		} catch {
+			return String(arg);
+		}
+		return String(arg);
+	}).join(" ");
+}
+/**
+* OpenTelemetry instrumentation that captures console calls and emits them as OpenTelemetry logs.
+*/
+var ConsoleInstrumentation = class extends InstrumentationBase {
+	constructor(config = {}) {
+		super("@opentelemetry/browser-instrumentation/console", version, config);
+	}
+	init() {
+		return [];
+	}
+	_getMessageSerializer() {
+		return this._config.messageSerializer ?? defaultMessageSerializer;
+	}
+	_getLogMethods() {
+		return this._config.logMethods ?? DEFAULT_LOG_METHODS;
+	}
+	_patchConsoleMethod(method) {
+		const instrumentation = this;
+		return function patchConsoleMethod(original) {
+			return function(...args) {
+				if (instrumentation._active && instrumentation._getLogMethods().includes(method)) {
+					const logContext = context.active();
+					const body = instrumentation._getMessageSerializer()(args);
+					instrumentation.logger.emit({
+						body,
+						eventName: CONSOLE_LOG_EVENT_NAME,
+						severityNumber: SEVERITY_MAP[method],
+						severityText: method,
+						context: logContext,
+						attributes: { [ATTR_CONSOLE_METHOD]: method }
+					});
+				}
+				return original.apply(this, args);
+			};
+		};
+	}
+	enable() {
+		this._active = true;
+		if (this._isPatched) return;
+		this._isPatched = true;
+		for (const method of DEFAULT_LOG_METHODS) if (typeof console[method] === "function") this._wrap(console, method, this._patchConsoleMethod(method));
+	}
+	disable() {
+		this._active = false;
+	}
+};
+//#endregion
+export { ConsoleInstrumentation };
+
+//# sourceMappingURL=instrumentation.js.map

package/dist/console/instrumentation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instrumentation.js","names":[],"sources":["../../src/console/instrumentation.ts"],"sourcesContent":["/*\n * Copyright The OpenTelemetry Authors\n * SPDX-License-Identifier: Apache-2.0\n */\n\nimport { context } from '@opentelemetry/api';\nimport { SeverityNumber } from '@opentelemetry/api-logs';\nimport { InstrumentationBase } from '@opentelemetry/instrumentation';\nimport { version } from '../../package.json' with { type: 'json' };\nimport { ATTR_CONSOLE_METHOD, CONSOLE_LOG_EVENT_NAME } from './semconv.ts';\nimport type { ConsoleInstrumentationConfig, ConsoleMethod } from './types.ts';\n\nconst DEFAULT_LOG_METHODS: ConsoleMethod[] = [\n  'log',\n  'warn',\n  'error',\n  'info',\n  'debug',\n];\n\nconst SEVERITY_MAP: Record<ConsoleMethod, SeverityNumber> = {\n  debug: SeverityNumber.DEBUG,\n  log: SeverityNumber.INFO,\n  info: SeverityNumber.INFO,\n  warn: SeverityNumber.WARN,\n  error: SeverityNumber.ERROR,\n};\n\n/**\n * Default serializer for console arguments.\n * Joins arguments as strings.\n */\nfunction defaultMessageSerializer(args: unknown[]): string {\n  return args\n    .map((arg) => {\n      if (typeof arg === 'object' && arg !== null) {\n        try {\n          return JSON.stringify(arg);\n        } catch {\n          // Circular reference or other error, fallback to String\n          return String(arg);\n        }\n      }\n      return String(arg);\n    })\n    .join(' ');\n}\n\n/**\n * OpenTelemetry instrumentation that captures console calls and emits them as OpenTelemetry logs.\n */\nexport class ConsoleInstrumentation extends InstrumentationBase<ConsoleInstrumentationConfig> {\n  private declare _isPatched: boolean;\n  private declare _active: boolean;\n\n  constructor(config: ConsoleInstrumentationConfig = {}) {\n    super('@opentelemetry/browser-instrumentation/console', version, config);\n  }\n\n  protected override init() {\n    return [];\n  }\n\n  private _getMessageSerializer(): (args: unknown[]) => string {\n    return this._config.messageSerializer ?? defaultMessageSerializer;\n  }\n\n  private _getLogMethods(): ConsoleMethod[] {\n    return this._config.logMethods ?? DEFAULT_LOG_METHODS;\n  }\n\n  private _patchConsoleMethod(\n    method: ConsoleMethod,\n  ): (original: Console[ConsoleMethod]) => Console[ConsoleMethod] {\n    const instrumentation = this;\n\n    return function patchConsoleMethod(original: Console[ConsoleMethod]) {\n      return function (this: Console, ...args: unknown[]) {\n        if (\n          instrumentation._active &&\n          instrumentation._getLogMethods().includes(method)\n        ) {\n          const logContext = context.active();\n          const body = instrumentation._getMessageSerializer()(args);\n\n          instrumentation.logger.emit({\n            body,\n            eventName: CONSOLE_LOG_EVENT_NAME,\n            severityNumber: SEVERITY_MAP[method],\n            severityText: method,\n            context: logContext,\n            attributes: {\n              [ATTR_CONSOLE_METHOD]: method,\n            },\n          });\n        }\n\n        return original.apply(this, args);\n      } as Console[ConsoleMethod];\n    };\n  }\n\n  override enable(): void {\n    this._active = true;\n    if (this._isPatched) {\n      return;\n    }\n    this._isPatched = true;\n    for (const method of DEFAULT_LOG_METHODS) {\n      if (typeof console[method] === 'function') {\n        this._wrap(console, method, this._patchConsoleMethod(method));\n      }\n    }\n  }\n\n  override disable(): void {\n    this._active = false;\n  }\n}\n"],"mappings":";;;;;;AAYA,MAAM,sBAAuC;CAC3C;CACA;CACA;CACA;CACA;CACD;AAED,MAAM,eAAsD;CAC1D,OAAO,eAAe;CACtB,KAAK,eAAe;CACpB,MAAM,eAAe;CACrB,MAAM,eAAe;CACrB,OAAO,eAAe;CACvB;;;;;AAMD,SAAS,yBAAyB,MAAyB;AACzD,QAAO,KACJ,KAAK,QAAQ;AACZ,MAAI,OAAO,QAAQ,YAAY,QAAQ,KACrC,KAAI;AACF,UAAO,KAAK,UAAU,IAAI;UACpB;AAEN,UAAO,OAAO,IAAI;;AAGtB,SAAO,OAAO,IAAI;GAClB,CACD,KAAK,IAAI;;;;;AAMd,IAAa,yBAAb,cAA4C,oBAAkD;CAI5F,YAAY,SAAuC,EAAE,EAAE;AACrD,QAAM,kDAAkD,SAAS,OAAO;;CAG1E,OAA0B;AACxB,SAAO,EAAE;;CAGX,wBAA6D;AAC3D,SAAO,KAAK,QAAQ,qBAAqB;;CAG3C,iBAA0C;AACxC,SAAO,KAAK,QAAQ,cAAc;;CAGpC,oBACE,QAC8D;EAC9D,MAAM,kBAAkB;AAExB,SAAO,SAAS,mBAAmB,UAAkC;AACnE,UAAO,SAAyB,GAAG,MAAiB;AAClD,QACE,gBAAgB,WAChB,gBAAgB,gBAAgB,CAAC,SAAS,OAAO,EACjD;KACA,MAAM,aAAa,QAAQ,QAAQ;KACnC,MAAM,OAAO,gBAAgB,uBAAuB,CAAC,KAAK;AAE1D,qBAAgB,OAAO,KAAK;MAC1B;MACA,WAAW;MACX,gBAAgB,aAAa;MAC7B,cAAc;MACd,SAAS;MACT,YAAY,GACT,sBAAsB,QACxB;MACF,CAAC;;AAGJ,WAAO,SAAS,MAAM,MAAM,KAAK;;;;CAKvC,SAAwB;AACtB,OAAK,UAAU;AACf,MAAI,KAAK,WACP;AAEF,OAAK,aAAa;AAClB,OAAK,MAAM,UAAU,oBACnB,KAAI,OAAO,QAAQ,YAAY,WAC7B,MAAK,MAAM,SAAS,QAAQ,KAAK,oBAAoB,OAAO,CAAC;;CAKnE,UAAyB;AACvB,OAAK,UAAU"}

package/dist/console/semconv.js

@@ -0,0 +1,14 @@
+//#region src/console/semconv.ts
+/**
+* Event name for console log events.
+*/
+const CONSOLE_LOG_EVENT_NAME = "browser.console";
+/**
+* The console method that was called (e.g., 'log', 'warn', 'error', 'info', 'debug').
+* @example 'error'
+*/
+const ATTR_CONSOLE_METHOD = "browser.console.method";
+//#endregion
+export { ATTR_CONSOLE_METHOD, CONSOLE_LOG_EVENT_NAME };
+
+//# sourceMappingURL=semconv.js.map

package/dist/console/semconv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"semconv.js","names":[],"sources":["../../src/console/semconv.ts"],"sourcesContent":["/*\n * Copyright The OpenTelemetry Authors\n * SPDX-License-Identifier: Apache-2.0\n */\n\n/*\n * This file contains a copy of unstable semantic convention definitions\n * used by this package.\n * @see https://github.com/open-telemetry/opentelemetry-js/tree/main/semantic-conventions#unstable-semconv\n */\n\n/**\n * Event name for console log events.\n */\nexport const CONSOLE_LOG_EVENT_NAME = 'browser.console';\n\n/**\n * The console method that was called (e.g., 'log', 'warn', 'error', 'info', 'debug').\n * @example 'error'\n */\nexport const ATTR_CONSOLE_METHOD = 'browser.console.method';\n"],"mappings":";;;;AAcA,MAAa,yBAAyB;;;;;AAMtC,MAAa,sBAAsB"}

package/dist/console/types.d.ts

@@ -0,0 +1,25 @@
+import { InstrumentationConfig } from "@opentelemetry/instrumentation";
+
+//#region src/console/types.d.ts
+/**
+ * Console methods that can be instrumented.
+ */
+type ConsoleMethod = 'log' | 'warn' | 'error' | 'info' | 'debug';
+/**
+ * ConsoleInstrumentation Configuration
+ */
+interface ConsoleInstrumentationConfig extends InstrumentationConfig {
+  /**
+   * Console methods to instrument.
+   * @default ['log', 'warn', 'error', 'info', 'debug']
+   */
+  logMethods?: ConsoleMethod[];
+  /**
+   * Custom serializer for console arguments.
+   * @default Joins args as strings
+   */
+  messageSerializer?: (args: unknown[]) => string;
+}
+//#endregion
+export { ConsoleInstrumentationConfig, ConsoleMethod };
+//# sourceMappingURL=types.d.ts.map

package/dist/navigation/index.d.ts

@@ -0,0 +1,4 @@
+import { NavigationInstrumentationConfig, NavigationType } from "./types.js";
+import { NavigationInstrumentation } from "./instrumentation.js";
+import { defaultSanitizeUrl } from "./utils.js";
+export { NavigationInstrumentation, type NavigationInstrumentationConfig, type NavigationType, defaultSanitizeUrl };

package/dist/navigation/index.js

@@ -0,0 +1,3 @@
+import { defaultSanitizeUrl } from "./utils.js";
+import { NavigationInstrumentation } from "./instrumentation.js";
+export { NavigationInstrumentation, defaultSanitizeUrl };

package/dist/navigation/instrumentation.d.ts

@@ -0,0 +1,29 @@
+import { NavigationInstrumentationConfig } from "./types.js";
+import { InstrumentationBase } from "@opentelemetry/instrumentation";
+
+//#region src/navigation/instrumentation.d.ts
+declare class NavigationInstrumentation extends InstrumentationBase<NavigationInstrumentationConfig> {
+  private _isEnabled;
+  private _isHistoryPatched;
+  private _hasProcessedInitialLoad;
+  private _lastUrl;
+  private _onDOMContentLoaded?;
+  private _onPopState?;
+  private _onCurrentEntryChange?;
+  constructor(config?: NavigationInstrumentationConfig);
+  protected init(): never[];
+  enable(): void;
+  disable(): void;
+  private _getNavigationApi;
+  private _onHardNavigation;
+  private _onSoftNavigation;
+  private _waitForPageLoad;
+  private _patchHistoryApi;
+  private _patchHistoryMethod;
+  private _applyCustomLogRecordData;
+  private _determineSameDocument;
+  private _mapChangeStateToType;
+}
+//#endregion
+export { NavigationInstrumentation };
+//# sourceMappingURL=instrumentation.d.ts.map

package/dist/navigation/instrumentation.js

@@ -0,0 +1,156 @@
+import { version } from "../package.js";
+import { ATTR_BROWSER_NAVIGATION_HASH_CHANGE, ATTR_BROWSER_NAVIGATION_SAME_DOCUMENT, ATTR_BROWSER_NAVIGATION_TYPE, ATTR_URL_FULL, BROWSER_NAVIGATION_EVENT_NAME } from "./semconv.js";
+import { isHashChange } from "./utils.js";
+import { SeverityNumber } from "@opentelemetry/api-logs";
+import { InstrumentationBase, safeExecuteInTheMiddle } from "@opentelemetry/instrumentation";
+//#region src/navigation/instrumentation.ts
+var NavigationInstrumentation = class extends InstrumentationBase {
+	constructor(config = {}) {
+		super("@opentelemetry/browser-instrumentation/navigation", version, config);
+		this._lastUrl = location.href;
+	}
+	init() {
+		return [];
+	}
+	enable() {
+		if (this._isEnabled) return;
+		this._isEnabled = true;
+		const navigationApi = this._getNavigationApi();
+		if (!navigationApi && !this._isHistoryPatched) {
+			this._patchHistoryApi();
+			this._isHistoryPatched = true;
+		}
+		this._waitForPageLoad();
+		if (navigationApi) {
+			this._onCurrentEntryChange = (event) => {
+				this._onSoftNavigation("currententrychange", event);
+			};
+			navigationApi.addEventListener("currententrychange", this._onCurrentEntryChange);
+		} else {
+			this._onPopState = () => {
+				this._onSoftNavigation("popstate");
+			};
+			window.addEventListener("popstate", this._onPopState);
+		}
+	}
+	disable() {
+		if (!this._isEnabled) return;
+		this._isEnabled = false;
+		if (this._onDOMContentLoaded) {
+			document.removeEventListener("DOMContentLoaded", this._onDOMContentLoaded);
+			this._onDOMContentLoaded = void 0;
+		}
+		if (this._onPopState) {
+			window.removeEventListener("popstate", this._onPopState);
+			this._onPopState = void 0;
+		}
+		if (this._onCurrentEntryChange) {
+			this._getNavigationApi()?.removeEventListener("currententrychange", this._onCurrentEntryChange);
+			this._onCurrentEntryChange = void 0;
+		}
+		this._hasProcessedInitialLoad = false;
+	}
+	_getNavigationApi() {
+		if (!this.getConfig().useNavigationApiIfAvailable) return;
+		return window.navigation;
+	}
+	_onHardNavigation() {
+		const cfg = this.getConfig();
+		const logRecord = {
+			eventName: BROWSER_NAVIGATION_EVENT_NAME,
+			severityNumber: SeverityNumber.INFO,
+			attributes: {
+				[ATTR_URL_FULL]: cfg.sanitizeUrl ? cfg.sanitizeUrl(document.documentURI) : document.documentURI,
+				[ATTR_BROWSER_NAVIGATION_SAME_DOCUMENT]: false,
+				[ATTR_BROWSER_NAVIGATION_HASH_CHANGE]: false
+			}
+		};
+		this._applyCustomLogRecordData(logRecord);
+		this.logger.emit(logRecord);
+	}
+	_onSoftNavigation(changeState, navigationEvent) {
+		const referrerUrl = this._lastUrl;
+		const currentUrl = changeState === "currententrychange" && navigationEvent?.target?.currentEntry?.url ? navigationEvent.target.currentEntry.url : location.href;
+		if (referrerUrl === currentUrl) return;
+		const navType = this._mapChangeStateToType(changeState, navigationEvent);
+		const sameDocument = this._determineSameDocument(referrerUrl, currentUrl);
+		const hashChange = isHashChange(referrerUrl, currentUrl);
+		const cfg = this.getConfig();
+		const logRecord = {
+			eventName: BROWSER_NAVIGATION_EVENT_NAME,
+			severityNumber: SeverityNumber.INFO,
+			attributes: {
+				[ATTR_URL_FULL]: cfg.sanitizeUrl ? cfg.sanitizeUrl(currentUrl) : currentUrl,
+				[ATTR_BROWSER_NAVIGATION_SAME_DOCUMENT]: sameDocument,
+				[ATTR_BROWSER_NAVIGATION_HASH_CHANGE]: hashChange,
+				...navType ? { [ATTR_BROWSER_NAVIGATION_TYPE]: navType } : {}
+			}
+		};
+		this._applyCustomLogRecordData(logRecord);
+		this.logger.emit(logRecord);
+		this._lastUrl = currentUrl;
+	}
+	_waitForPageLoad() {
+		if (document.readyState === "complete" && !this._hasProcessedInitialLoad) {
+			this._hasProcessedInitialLoad = true;
+			this._onHardNavigation();
+			return;
+		}
+		this._onDOMContentLoaded = () => {
+			if (!this._hasProcessedInitialLoad) {
+				this._hasProcessedInitialLoad = true;
+				this._onHardNavigation();
+			}
+		};
+		document.addEventListener("DOMContentLoaded", this._onDOMContentLoaded);
+	}
+	_patchHistoryApi() {
+		this._wrap(history, "replaceState", this._patchHistoryMethod("replaceState"));
+		this._wrap(history, "pushState", this._patchHistoryMethod("pushState"));
+	}
+	_patchHistoryMethod(changeState) {
+		const plugin = this;
+		return (original) => {
+			return function patchedHistoryMethod(...args) {
+				if (!plugin._isEnabled) return original.apply(this, args);
+				const result = original.apply(this, args);
+				if (location.href !== plugin._lastUrl) plugin._onSoftNavigation(changeState);
+				return result;
+			};
+		};
+	}
+	_applyCustomLogRecordData(logRecord) {
+		const hook = this.getConfig().applyCustomLogRecordData;
+		if (!hook) return;
+		safeExecuteInTheMiddle(() => hook(logRecord), (error) => {
+			if (error) this._diag.error("applyCustomLogRecordData hook failed", error);
+		}, true);
+	}
+	_determineSameDocument(fromUrl, toUrl) {
+		try {
+			const fromURL = new URL(fromUrl);
+			const toURL = new URL(toUrl);
+			return fromURL.origin === toURL.origin;
+		} catch {
+			return true;
+		}
+	}
+	_mapChangeStateToType(changeState, navigationEvent) {
+		if (changeState === "currententrychange") switch (navigationEvent?.navigationType) {
+			case "traverse": return "traverse";
+			case "replace": return "replace";
+			case "reload": return "reload";
+			default: return "push";
+		}
+		switch (changeState) {
+			case "pushState": return "push";
+			case "replaceState": return "replace";
+			case "popstate": return "traverse";
+			default: return;
+		}
+	}
+};
+//#endregion
+export { NavigationInstrumentation };
+
+//# sourceMappingURL=instrumentation.js.map

package/dist/navigation/instrumentation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instrumentation.js","names":[],"sources":["../../src/navigation/instrumentation.ts"],"sourcesContent":["/*\n * Copyright The OpenTelemetry Authors\n * SPDX-License-Identifier: Apache-2.0\n */\n\nimport type { LogRecord } from '@opentelemetry/api-logs';\nimport { SeverityNumber } from '@opentelemetry/api-logs';\nimport {\n  InstrumentationBase,\n  safeExecuteInTheMiddle,\n} from '@opentelemetry/instrumentation';\nimport { version } from '../../package.json' with { type: 'json' };\nimport {\n  ATTR_BROWSER_NAVIGATION_HASH_CHANGE,\n  ATTR_BROWSER_NAVIGATION_SAME_DOCUMENT,\n  ATTR_BROWSER_NAVIGATION_TYPE,\n  ATTR_URL_FULL,\n  BROWSER_NAVIGATION_EVENT_NAME,\n} from './semconv.ts';\nimport type {\n  NavigationInstrumentationConfig,\n  NavigationType,\n} from './types.ts';\nimport { isHashChange } from './utils.ts';\n\ntype ChangeState =\n  | 'pushState'\n  | 'replaceState'\n  | 'popstate'\n  | 'currententrychange';\n\ninterface NavigationApiEntry {\n  url?: string;\n}\n\ninterface NavigationApiTarget {\n  currentEntry?: NavigationApiEntry;\n}\n\ninterface NavigationApiEvent extends Event {\n  navigationType?: NavigationType;\n  target: NavigationApiTarget & EventTarget;\n}\n\ninterface NavigationApi {\n  addEventListener(\n    type: 'currententrychange',\n    listener: (event: NavigationApiEvent) => void,\n  ): void;\n  removeEventListener(\n    type: 'currententrychange',\n    listener: (event: NavigationApiEvent) => void,\n  ): void;\n}\n\nexport class NavigationInstrumentation extends InstrumentationBase<NavigationInstrumentationConfig> {\n  // Use `declare` to prevent JS class field initializers from running after\n  // super(), which would reset values set by the enable() call that\n  // InstrumentationBase makes during its constructor.\n  private declare _isEnabled: boolean;\n  private declare _isHistoryPatched: boolean;\n  private declare _hasProcessedInitialLoad: boolean;\n  private declare _lastUrl: string;\n  private declare _onDOMContentLoaded?: () => void;\n  private declare _onPopState?: (event: PopStateEvent) => void;\n  private declare _onCurrentEntryChange?: (event: NavigationApiEvent) => void;\n\n  constructor(config: NavigationInstrumentationConfig = {}) {\n    super('@opentelemetry/browser-instrumentation/navigation', version, config);\n    this._lastUrl = location.href;\n  }\n\n  protected override init() {\n    return [];\n  }\n\n  override enable(): void {\n    if (this._isEnabled) {\n      return;\n    }\n    this._isEnabled = true;\n\n    const navigationApi = this._getNavigationApi();\n\n    // Only patch history API if Navigation API is not being used.\n    if (!navigationApi && !this._isHistoryPatched) {\n      this._patchHistoryApi();\n      this._isHistoryPatched = true;\n    }\n\n    this._waitForPageLoad();\n\n    if (navigationApi) {\n      this._onCurrentEntryChange = (event) => {\n        this._onSoftNavigation('currententrychange', event);\n      };\n      navigationApi.addEventListener(\n        'currententrychange',\n        this._onCurrentEntryChange,\n      );\n    } else {\n      this._onPopState = () => {\n        this._onSoftNavigation('popstate');\n      };\n      window.addEventListener('popstate', this._onPopState);\n    }\n  }\n\n  override disable(): void {\n    if (!this._isEnabled) {\n      return;\n    }\n    this._isEnabled = false;\n\n    if (this._onDOMContentLoaded) {\n      document.removeEventListener(\n        'DOMContentLoaded',\n        this._onDOMContentLoaded,\n      );\n      this._onDOMContentLoaded = undefined;\n    }\n    if (this._onPopState) {\n      window.removeEventListener('popstate', this._onPopState);\n      this._onPopState = undefined;\n    }\n    if (this._onCurrentEntryChange) {\n      const navigationApi = this._getNavigationApi();\n      navigationApi?.removeEventListener(\n        'currententrychange',\n        this._onCurrentEntryChange,\n      );\n      this._onCurrentEntryChange = undefined;\n    }\n    // Reset the initial-load flag so it can be processed again if re-enabled.\n    this._hasProcessedInitialLoad = false;\n  }\n\n  private _getNavigationApi(): NavigationApi | undefined {\n    const cfg = this.getConfig();\n    if (!cfg.useNavigationApiIfAvailable) {\n      return undefined;\n    }\n    return (window as unknown as { navigation?: NavigationApi }).navigation;\n  }\n\n  private _onHardNavigation(): void {\n    const cfg = this.getConfig();\n    const logRecord: LogRecord = {\n      eventName: BROWSER_NAVIGATION_EVENT_NAME,\n      severityNumber: SeverityNumber.INFO,\n      attributes: {\n        [ATTR_URL_FULL]: cfg.sanitizeUrl\n          ? cfg.sanitizeUrl(document.documentURI)\n          : document.documentURI,\n        [ATTR_BROWSER_NAVIGATION_SAME_DOCUMENT]: false,\n        [ATTR_BROWSER_NAVIGATION_HASH_CHANGE]: false,\n      },\n    };\n    this._applyCustomLogRecordData(logRecord);\n    this.logger.emit(logRecord);\n  }\n\n  private _onSoftNavigation(\n    changeState: ChangeState,\n    navigationEvent?: NavigationApiEvent,\n  ): void {\n    const referrerUrl = this._lastUrl;\n    const currentUrl =\n      changeState === 'currententrychange' &&\n      navigationEvent?.target?.currentEntry?.url\n        ? navigationEvent.target.currentEntry.url\n        : location.href;\n\n    if (referrerUrl === currentUrl) {\n      return;\n    }\n\n    const navType = this._mapChangeStateToType(changeState, navigationEvent);\n    const sameDocument = this._determineSameDocument(referrerUrl, currentUrl);\n    const hashChange = isHashChange(referrerUrl, currentUrl);\n    const cfg = this.getConfig();\n\n    const logRecord: LogRecord = {\n      eventName: BROWSER_NAVIGATION_EVENT_NAME,\n      severityNumber: SeverityNumber.INFO,\n      attributes: {\n        [ATTR_URL_FULL]: cfg.sanitizeUrl\n          ? cfg.sanitizeUrl(currentUrl)\n          : currentUrl,\n        [ATTR_BROWSER_NAVIGATION_SAME_DOCUMENT]: sameDocument,\n        [ATTR_BROWSER_NAVIGATION_HASH_CHANGE]: hashChange,\n        ...(navType ? { [ATTR_BROWSER_NAVIGATION_TYPE]: navType } : {}),\n      },\n    };\n    this._applyCustomLogRecordData(logRecord);\n    this.logger.emit(logRecord);\n\n    this._lastUrl = currentUrl;\n  }\n\n  private _waitForPageLoad(): void {\n    if (document.readyState === 'complete' && !this._hasProcessedInitialLoad) {\n      this._hasProcessedInitialLoad = true;\n      this._onHardNavigation();\n      return;\n    }\n\n    this._onDOMContentLoaded = () => {\n      if (!this._hasProcessedInitialLoad) {\n        this._hasProcessedInitialLoad = true;\n        this._onHardNavigation();\n      }\n    };\n    document.addEventListener('DOMContentLoaded', this._onDOMContentLoaded);\n  }\n\n  private _patchHistoryApi(): void {\n    this._wrap(\n      history,\n      'replaceState',\n      this._patchHistoryMethod('replaceState'),\n    );\n    this._wrap(history, 'pushState', this._patchHistoryMethod('pushState'));\n  }\n\n  private _patchHistoryMethod(changeState: 'pushState' | 'replaceState') {\n    const plugin = this;\n    return (original: History['pushState' | 'replaceState']) => {\n      return function patchedHistoryMethod(\n        this: History,\n        ...args: Parameters<History['pushState' | 'replaceState']>\n      ) {\n        if (!plugin._isEnabled) {\n          return original.apply(this, args);\n        }\n        const result = original.apply(this, args);\n        if (location.href !== plugin._lastUrl) {\n          plugin._onSoftNavigation(changeState);\n        }\n        return result;\n      };\n    };\n  }\n\n  private _applyCustomLogRecordData(logRecord: LogRecord): void {\n    const cfg = this.getConfig();\n    const hook = cfg.applyCustomLogRecordData;\n    if (!hook) {\n      return;\n    }\n    safeExecuteInTheMiddle(\n      () => hook(logRecord),\n      (error) => {\n        if (error) {\n          this._diag.error('applyCustomLogRecordData hook failed', error);\n        }\n      },\n      true,\n    );\n  }\n\n  private _determineSameDocument(fromUrl: string, toUrl: string): boolean {\n    try {\n      const fromURL = new URL(fromUrl);\n      const toURL = new URL(toUrl);\n      return fromURL.origin === toURL.origin;\n    } catch {\n      // Fallback: assume same document for relative URLs or parsing errors.\n      // In SPAs, route changes via pushState/replaceState are same-document.\n      return true;\n    }\n  }\n\n  private _mapChangeStateToType(\n    changeState: ChangeState,\n    navigationEvent?: NavigationApiEvent,\n  ): NavigationType | undefined {\n    if (changeState === 'currententrychange') {\n      const navType = navigationEvent?.navigationType;\n      switch (navType) {\n        case 'traverse':\n          return 'traverse';\n        case 'replace':\n          return 'replace';\n        case 'reload':\n          return 'reload';\n        default:\n          // Default to 'push' for programmatic navigations (history.pushState,\n          // link clicks) when no explicit type info is available.\n          return 'push';\n      }\n    }\n\n    switch (changeState) {\n      case 'pushState':\n        return 'push';\n      case 'replaceState':\n        return 'replace';\n      case 'popstate':\n        return 'traverse';\n      default:\n        return undefined;\n    }\n  }\n}\n"],"mappings":";;;;;;AAuDA,IAAa,4BAAb,cAA+C,oBAAqD;CAYlG,YAAY,SAA0C,EAAE,EAAE;AACxD,QAAM,qDAAqD,SAAS,OAAO;AAC3E,OAAK,WAAW,SAAS;;CAG3B,OAA0B;AACxB,SAAO,EAAE;;CAGX,SAAwB;AACtB,MAAI,KAAK,WACP;AAEF,OAAK,aAAa;EAElB,MAAM,gBAAgB,KAAK,mBAAmB;AAG9C,MAAI,CAAC,iBAAiB,CAAC,KAAK,mBAAmB;AAC7C,QAAK,kBAAkB;AACvB,QAAK,oBAAoB;;AAG3B,OAAK,kBAAkB;AAEvB,MAAI,eAAe;AACjB,QAAK,yBAAyB,UAAU;AACtC,SAAK,kBAAkB,sBAAsB,MAAM;;AAErD,iBAAc,iBACZ,sBACA,KAAK,sBACN;SACI;AACL,QAAK,oBAAoB;AACvB,SAAK,kBAAkB,WAAW;;AAEpC,UAAO,iBAAiB,YAAY,KAAK,YAAY;;;CAIzD,UAAyB;AACvB,MAAI,CAAC,KAAK,WACR;AAEF,OAAK,aAAa;AAElB,MAAI,KAAK,qBAAqB;AAC5B,YAAS,oBACP,oBACA,KAAK,oBACN;AACD,QAAK,sBAAsB,KAAA;;AAE7B,MAAI,KAAK,aAAa;AACpB,UAAO,oBAAoB,YAAY,KAAK,YAAY;AACxD,QAAK,cAAc,KAAA;;AAErB,MAAI,KAAK,uBAAuB;AACR,QAAK,mBACd,EAAE,oBACb,sBACA,KAAK,sBACN;AACD,QAAK,wBAAwB,KAAA;;AAG/B,OAAK,2BAA2B;;CAGlC,oBAAuD;AAErD,MAAI,CADQ,KAAK,WACT,CAAC,4BACP;AAEF,SAAQ,OAAqD;;CAG/D,oBAAkC;EAChC,MAAM,MAAM,KAAK,WAAW;EAC5B,MAAM,YAAuB;GAC3B,WAAW;GACX,gBAAgB,eAAe;GAC/B,YAAY;KACT,gBAAgB,IAAI,cACjB,IAAI,YAAY,SAAS,YAAY,GACrC,SAAS;KACZ,wCAAwC;KACxC,sCAAsC;IACxC;GACF;AACD,OAAK,0BAA0B,UAAU;AACzC,OAAK,OAAO,KAAK,UAAU;;CAG7B,kBACE,aACA,iBACM;EACN,MAAM,cAAc,KAAK;EACzB,MAAM,aACJ,gBAAgB,wBAChB,iBAAiB,QAAQ,cAAc,MACnC,gBAAgB,OAAO,aAAa,MACpC,SAAS;AAEf,MAAI,gBAAgB,WAClB;EAGF,MAAM,UAAU,KAAK,sBAAsB,aAAa,gBAAgB;EACxE,MAAM,eAAe,KAAK,uBAAuB,aAAa,WAAW;EACzE,MAAM,aAAa,aAAa,aAAa,WAAW;EACxD,MAAM,MAAM,KAAK,WAAW;EAE5B,MAAM,YAAuB;GAC3B,WAAW;GACX,gBAAgB,eAAe;GAC/B,YAAY;KACT,gBAAgB,IAAI,cACjB,IAAI,YAAY,WAAW,GAC3B;KACH,wCAAwC;KACxC,sCAAsC;IACvC,GAAI,UAAU,GAAG,+BAA+B,SAAS,GAAG,EAAE;IAC/D;GACF;AACD,OAAK,0BAA0B,UAAU;AACzC,OAAK,OAAO,KAAK,UAAU;AAE3B,OAAK,WAAW;;CAGlB,mBAAiC;AAC/B,MAAI,SAAS,eAAe,cAAc,CAAC,KAAK,0BAA0B;AACxE,QAAK,2BAA2B;AAChC,QAAK,mBAAmB;AACxB;;AAGF,OAAK,4BAA4B;AAC/B,OAAI,CAAC,KAAK,0BAA0B;AAClC,SAAK,2BAA2B;AAChC,SAAK,mBAAmB;;;AAG5B,WAAS,iBAAiB,oBAAoB,KAAK,oBAAoB;;CAGzE,mBAAiC;AAC/B,OAAK,MACH,SACA,gBACA,KAAK,oBAAoB,eAAe,CACzC;AACD,OAAK,MAAM,SAAS,aAAa,KAAK,oBAAoB,YAAY,CAAC;;CAGzE,oBAA4B,aAA2C;EACrE,MAAM,SAAS;AACf,UAAQ,aAAoD;AAC1D,UAAO,SAAS,qBAEd,GAAG,MACH;AACA,QAAI,CAAC,OAAO,WACV,QAAO,SAAS,MAAM,MAAM,KAAK;IAEnC,MAAM,SAAS,SAAS,MAAM,MAAM,KAAK;AACzC,QAAI,SAAS,SAAS,OAAO,SAC3B,QAAO,kBAAkB,YAAY;AAEvC,WAAO;;;;CAKb,0BAAkC,WAA4B;EAE5D,MAAM,OADM,KAAK,WACD,CAAC;AACjB,MAAI,CAAC,KACH;AAEF,+BACQ,KAAK,UAAU,GACpB,UAAU;AACT,OAAI,MACF,MAAK,MAAM,MAAM,wCAAwC,MAAM;KAGnE,KACD;;CAGH,uBAA+B,SAAiB,OAAwB;AACtE,MAAI;GACF,MAAM,UAAU,IAAI,IAAI,QAAQ;GAChC,MAAM,QAAQ,IAAI,IAAI,MAAM;AAC5B,UAAO,QAAQ,WAAW,MAAM;UAC1B;AAGN,UAAO;;;CAIX,sBACE,aACA,iBAC4B;AAC5B,MAAI,gBAAgB,qBAElB,SADgB,iBAAiB,gBACjC;GACE,KAAK,WACH,QAAO;GACT,KAAK,UACH,QAAO;GACT,KAAK,SACH,QAAO;GACT,QAGE,QAAO;;AAIb,UAAQ,aAAR;GACE,KAAK,YACH,QAAO;GACT,KAAK,eACH,QAAO;GACT,KAAK,WACH,QAAO;GACT,QACE"}

package/dist/navigation/semconv.js

@@ -0,0 +1,22 @@
+//#region src/navigation/semconv.ts
+const BROWSER_NAVIGATION_EVENT_NAME = "browser.navigation";
+/**
+* @experimental This attribute is experimental and is subject to breaking changes in minor releases of `@opentelemetry/semantic-conventions`.
+*/
+const ATTR_URL_FULL = "url.full";
+/**
+* @experimental This attribute is experimental and is subject to breaking changes in minor releases of `@opentelemetry/semantic-conventions`.
+*/
+const ATTR_BROWSER_NAVIGATION_SAME_DOCUMENT = "browser.navigation.same_document";
+/**
+* @experimental This attribute is experimental and is subject to breaking changes in minor releases of `@opentelemetry/semantic-conventions`.
+*/
+const ATTR_BROWSER_NAVIGATION_HASH_CHANGE = "browser.navigation.hash_change";
+/**
+* @experimental This attribute is experimental and is subject to breaking changes in minor releases of `@opentelemetry/semantic-conventions`.
+*/
+const ATTR_BROWSER_NAVIGATION_TYPE = "browser.navigation.type";
+//#endregion
+export { ATTR_BROWSER_NAVIGATION_HASH_CHANGE, ATTR_BROWSER_NAVIGATION_SAME_DOCUMENT, ATTR_BROWSER_NAVIGATION_TYPE, ATTR_URL_FULL, BROWSER_NAVIGATION_EVENT_NAME };
+
+//# sourceMappingURL=semconv.js.map

package/dist/navigation/semconv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"semconv.js","names":[],"sources":["../../src/navigation/semconv.ts"],"sourcesContent":["/*\n * Copyright The OpenTelemetry Authors\n * SPDX-License-Identifier: Apache-2.0\n */\n\n/*\n * This file contains a copy of unstable semantic convention definitions\n * used by this package.\n * @see https://github.com/open-telemetry/opentelemetry-js/tree/main/semantic-conventions#unstable-semconv\n */\n\nexport const BROWSER_NAVIGATION_EVENT_NAME = 'browser.navigation';\n\n/**\n * @experimental This attribute is experimental and is subject to breaking changes in minor releases of `@opentelemetry/semantic-conventions`.\n */\nexport const ATTR_URL_FULL = 'url.full';\n\n/**\n * @experimental This attribute is experimental and is subject to breaking changes in minor releases of `@opentelemetry/semantic-conventions`.\n */\nexport const ATTR_BROWSER_NAVIGATION_SAME_DOCUMENT =\n  'browser.navigation.same_document';\n\n/**\n * @experimental This attribute is experimental and is subject to breaking changes in minor releases of `@opentelemetry/semantic-conventions`.\n */\nexport const ATTR_BROWSER_NAVIGATION_HASH_CHANGE =\n  'browser.navigation.hash_change';\n\n/**\n * @experimental This attribute is experimental and is subject to breaking changes in minor releases of `@opentelemetry/semantic-conventions`.\n */\nexport const ATTR_BROWSER_NAVIGATION_TYPE = 'browser.navigation.type';\n"],"mappings":";AAWA,MAAa,gCAAgC;;;;AAK7C,MAAa,gBAAgB;;;;AAK7B,MAAa,wCACX;;;;AAKF,MAAa,sCACX;;;;AAKF,MAAa,+BAA+B"}

package/dist/navigation/types.d.ts

@@ -0,0 +1,21 @@
+import { LogRecord } from "@opentelemetry/api-logs";
+import { InstrumentationConfig } from "@opentelemetry/instrumentation";
+
+//#region src/navigation/types.d.ts
+type ApplyCustomLogRecordDataFunction = (logRecord: LogRecord) => void;
+type SanitizeUrlFunction = (url: string) => string;
+type NavigationType = 'push' | 'replace' | 'reload' | 'traverse';
+/**
+ * NavigationInstrumentation Configuration
+ */
+interface NavigationInstrumentationConfig extends InstrumentationConfig {
+  /** Hook to modify log records before they are emitted. */
+  applyCustomLogRecordData?: ApplyCustomLogRecordDataFunction;
+  /** Use the Navigation API `currententrychange` event if available (experimental). Defaults to false. */
+  useNavigationApiIfAvailable?: boolean;
+  /** Custom function to sanitize URLs before adding to log records. */
+  sanitizeUrl?: SanitizeUrlFunction;
+}
+//#endregion
+export { NavigationInstrumentationConfig, NavigationType };
+//# sourceMappingURL=types.d.ts.map

package/dist/navigation/utils.d.ts

@@ -0,0 +1,12 @@
+//#region src/navigation/utils.d.ts
+/**
+ * Default URL sanitization function that redacts credentials and sensitive query parameters.
+ * This is the default implementation used when no custom sanitizeUrl callback is provided.
+ *
+ * @param url - The URL to sanitize
+ * @returns The sanitized URL with credentials and sensitive parameters redacted
+ */
+declare function defaultSanitizeUrl(url: string): string;
+//#endregion
+export { defaultSanitizeUrl };
+//# sourceMappingURL=utils.d.ts.map

package/dist/navigation/utils.js

@@ -0,0 +1,77 @@
+//#region src/navigation/utils.ts
+const SENSITIVE_PARAMS = [
+	"password",
+	"passwd",
+	"secret",
+	"api_key",
+	"apikey",
+	"auth",
+	"authorization",
+	"token",
+	"access_token",
+	"refresh_token",
+	"jwt",
+	"session",
+	"sessionid",
+	"key",
+	"private_key",
+	"client_secret",
+	"client_id",
+	"signature",
+	"hash"
+];
+/**
+* Default URL sanitization function that redacts credentials and sensitive query parameters.
+* This is the default implementation used when no custom sanitizeUrl callback is provided.
+*
+* @param url - The URL to sanitize
+* @returns The sanitized URL with credentials and sensitive parameters redacted
+*/
+function defaultSanitizeUrl(url) {
+	try {
+		const urlObj = new URL(url);
+		if (urlObj.username || urlObj.password) {
+			urlObj.username = "REDACTED";
+			urlObj.password = "REDACTED";
+		}
+		for (const param of SENSITIVE_PARAMS) if (urlObj.searchParams.has(param)) urlObj.searchParams.set(param, "REDACTED");
+		return urlObj.toString();
+	} catch {
+		let sanitized = url.replace(/\/\/[^:/@]+:[^/@]+@/, "//REDACTED:REDACTED@");
+		for (const param of SENSITIVE_PARAMS) {
+			const regex = new RegExp(`([?&]${param}(?:%3D|=))[^&]*`, "gi");
+			sanitized = sanitized.replace(regex, "$1REDACTED");
+		}
+		return sanitized;
+	}
+}
+/**
+* Determines if navigation between two URLs represents a hash change.
+* A hash change is true if the URLs are the same except for the hash part,
+* AND the hash is being added or changed (not removed).
+*
+* @param fromUrl - The source URL
+* @param toUrl - The destination URL
+* @returns true if this represents a hash change navigation
+*/
+function isHashChange(fromUrl, toUrl) {
+	try {
+		const a = new URL(fromUrl, window.location.origin);
+		const b = new URL(toUrl, window.location.origin);
+		const sameBase = a.origin === b.origin && a.pathname === b.pathname && a.search === b.search;
+		const fromHasHash = a.hash !== "";
+		const toHasHash = b.hash !== "";
+		const hashesAreDifferent = a.hash !== b.hash;
+		return sameBase && hashesAreDifferent && (fromHasHash && toHasHash || !fromHasHash && toHasHash);
+	} catch {
+		const fromBase = fromUrl.split("#")[0];
+		const toBase = toUrl.split("#")[0];
+		const fromHash = fromUrl.split("#")[1] ?? "";
+		const toHash = toUrl.split("#")[1] ?? "";
+		return fromBase === toBase && fromHash !== toHash && toHash !== "";
+	}
+}
+//#endregion
+export { defaultSanitizeUrl, isHashChange };
+
+//# sourceMappingURL=utils.js.map

package/dist/navigation/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","names":[],"sources":["../../src/navigation/utils.ts"],"sourcesContent":["/*\n * Copyright The OpenTelemetry Authors\n * SPDX-License-Identifier: Apache-2.0\n */\n\nconst SENSITIVE_PARAMS = [\n  'password',\n  'passwd',\n  'secret',\n  'api_key',\n  'apikey',\n  'auth',\n  'authorization',\n  'token',\n  'access_token',\n  'refresh_token',\n  'jwt',\n  'session',\n  'sessionid',\n  'key',\n  'private_key',\n  'client_secret',\n  'client_id',\n  'signature',\n  'hash',\n];\n\n/**\n * Default URL sanitization function that redacts credentials and sensitive query parameters.\n * This is the default implementation used when no custom sanitizeUrl callback is provided.\n *\n * @param url - The URL to sanitize\n * @returns The sanitized URL with credentials and sensitive parameters redacted\n */\nexport function defaultSanitizeUrl(url: string): string {\n  try {\n    const urlObj = new URL(url);\n\n    if (urlObj.username || urlObj.password) {\n      urlObj.username = 'REDACTED';\n      urlObj.password = 'REDACTED';\n    }\n\n    for (const param of SENSITIVE_PARAMS) {\n      if (urlObj.searchParams.has(param)) {\n        urlObj.searchParams.set(param, 'REDACTED');\n      }\n    }\n\n    return urlObj.toString();\n  } catch {\n    // If URL parsing fails, redact credentials and sensitive query parameters\n    // using regexes. The credential regex uses a restricted character class to\n    // avoid polynomial time complexity.\n    let sanitized = url.replace(/\\/\\/[^:/@]+:[^/@]+@/, '//REDACTED:REDACTED@');\n\n    for (const param of SENSITIVE_PARAMS) {\n      // Match param=value or param%3Dvalue (URL encoded)\n      const regex = new RegExp(`([?&]${param}(?:%3D|=))[^&]*`, 'gi');\n      sanitized = sanitized.replace(regex, '$1REDACTED');\n    }\n\n    return sanitized;\n  }\n}\n\n/**\n * Determines if navigation between two URLs represents a hash change.\n * A hash change is true if the URLs are the same except for the hash part,\n * AND the hash is being added or changed (not removed).\n *\n * @param fromUrl - The source URL\n * @param toUrl - The destination URL\n * @returns true if this represents a hash change navigation\n */\nexport function isHashChange(fromUrl: string, toUrl: string): boolean {\n  try {\n    const a = new URL(fromUrl, window.location.origin);\n    const b = new URL(toUrl, window.location.origin);\n    const sameBase =\n      a.origin === b.origin &&\n      a.pathname === b.pathname &&\n      a.search === b.search;\n    const fromHasHash = a.hash !== '';\n    const toHasHash = b.hash !== '';\n    const hashesAreDifferent = a.hash !== b.hash;\n\n    return (\n      sameBase &&\n      hashesAreDifferent &&\n      ((fromHasHash && toHasHash) || (!fromHasHash && toHasHash))\n    );\n  } catch {\n    const fromBase = fromUrl.split('#')[0];\n    const toBase = toUrl.split('#')[0];\n    const fromHash = fromUrl.split('#')[1] ?? '';\n    const toHash = toUrl.split('#')[1] ?? '';\n\n    const sameBase = fromBase === toBase;\n    const hashesAreDifferent = fromHash !== toHash;\n    const notRemovingHash = toHash !== '';\n\n    return sameBase && hashesAreDifferent && notRemovingHash;\n  }\n}\n"],"mappings":";AAKA,MAAM,mBAAmB;CACvB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;;;;;;;;AASD,SAAgB,mBAAmB,KAAqB;AACtD,KAAI;EACF,MAAM,SAAS,IAAI,IAAI,IAAI;AAE3B,MAAI,OAAO,YAAY,OAAO,UAAU;AACtC,UAAO,WAAW;AAClB,UAAO,WAAW;;AAGpB,OAAK,MAAM,SAAS,iBAClB,KAAI,OAAO,aAAa,IAAI,MAAM,CAChC,QAAO,aAAa,IAAI,OAAO,WAAW;AAI9C,SAAO,OAAO,UAAU;SAClB;EAIN,IAAI,YAAY,IAAI,QAAQ,uBAAuB,uBAAuB;AAE1E,OAAK,MAAM,SAAS,kBAAkB;GAEpC,MAAM,QAAQ,IAAI,OAAO,QAAQ,MAAM,kBAAkB,KAAK;AAC9D,eAAY,UAAU,QAAQ,OAAO,aAAa;;AAGpD,SAAO;;;;;;;;;;;;AAaX,SAAgB,aAAa,SAAiB,OAAwB;AACpE,KAAI;EACF,MAAM,IAAI,IAAI,IAAI,SAAS,OAAO,SAAS,OAAO;EAClD,MAAM,IAAI,IAAI,IAAI,OAAO,OAAO,SAAS,OAAO;EAChD,MAAM,WACJ,EAAE,WAAW,EAAE,UACf,EAAE,aAAa,EAAE,YACjB,EAAE,WAAW,EAAE;EACjB,MAAM,cAAc,EAAE,SAAS;EAC/B,MAAM,YAAY,EAAE,SAAS;EAC7B,MAAM,qBAAqB,EAAE,SAAS,EAAE;AAExC,SACE,YACA,uBACE,eAAe,aAAe,CAAC,eAAe;SAE5C;EACN,MAAM,WAAW,QAAQ,MAAM,IAAI,CAAC;EACpC,MAAM,SAAS,MAAM,MAAM,IAAI,CAAC;EAChC,MAAM,WAAW,QAAQ,MAAM,IAAI,CAAC,MAAM;EAC1C,MAAM,SAAS,MAAM,MAAM,IAAI,CAAC,MAAM;AAMtC,SAJiB,aAAa,UACH,aAAa,UAChB,WAAW"}

package/dist/package.js

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.3.0";
+var version = "0.4.0";
 //#endregion
 export { version };
 

package/package.json

@@ -1,16 +1,18 @@
 {
   "name": "@opentelemetry/browser-instrumentation",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "OpenTelemetry browser instrumentations.",
   "keywords": [
     "opentelemetry",
     "browser",
     "web",
     "instrumentation",
+    "console",
     "navigation-timing",
     "user-action",
     "web-vitals",
-    "resource-timing"
+    "resource-timing",
+    "navigation"
   ],
   "homepage": "https://github.com/open-telemetry/opentelemetry-browser",
   "bugs": "https://github.com/open-telemetry/opentelemetry-browser/issues",
@@ -27,6 +29,8 @@
     "#instrumentation-test-utils": "./src/test-utils/index.ts"
   },
   "exports": {
+    "./experimental/navigation": "./dist/navigation/index.js",
+    "./experimental/console": "./dist/console/index.js",
     "./experimental/navigation-timing": "./dist/navigation-timing/index.js",
     "./experimental/user-action": "./dist/user-action/index.js",
     "./experimental/web-vitals": "./dist/web-vitals/index.js",
@@ -44,15 +48,15 @@
     "test:coverage": "vitest --coverage"
   },
   "dependencies": {
-    "@opentelemetry/api-logs": "^0.215.0",
-    "@opentelemetry/instrumentation": "^0.215.0",
+    "@opentelemetry/api-logs": "^0.216.0",
+    "@opentelemetry/instrumentation": "^0.216.0",
     "web-vitals": "^5.2.0"
   },
   "peerDependencies": {
-    "@opentelemetry/api": "^1.9.0"
+    "@opentelemetry/api": "^1.9.1"
   },
   "devDependencies": {
-    "@opentelemetry/sdk-logs": "^0.215.0"
+    "@opentelemetry/sdk-logs": "0.216.0"
   },
   "publishConfig": {
     "access": "public"