@senpi/runtime 1.1.0-dev.runtime-phase-2.20260527113015 → 1.1.1-dev.runtime-phase-2.20260604073249

package/dist/tracking/spans/redact-pii.js

@@ -0,0 +1,464 @@
+/**
+ * PII + secret redaction for span payloads.
+ *
+ * Walks the `data` field of each span and replaces matches in string values
+ * before the batch hits the wire. Runs at flush time (async) — the underlying
+ * redactor is async, and the producer is fire-and-forget, so we pay the
+ * latency on the network-bound path rather than on the caller's enqueue call.
+ *
+ * Scope (see createOpenRedactionAdapter): emails, phones (US, international,
+ * India, China, South Korea, Japan, UK mobile, Brazil), ~28 vendor API keys
+ * / tokens (AWS, GitHub, Stripe, OpenAI, etc.), EVM private keys, Anthropic
+ * `sk-ant-*` keys, generic `sk-*` keys, and BIP39 mnemonic phrases.
+ *
+ * Integration point: BatchingSpanTransport.flush() applies this to every
+ * span in the batch before JSON.stringify. Only `span.data` is walked;
+ * top-level columns (`address`, `correlationId`, etc.) are non-PII identifiers
+ * and stay as-is.
+ *
+ * Always on — the plugin initializes a default redactor at startup.
+ */
+import { createLogger } from "../../utils/logger.js";
+const logger = createLogger("[senpi-core][redact-pii]");
+function isPlainObject(value) {
+    if (value === null || typeof value !== "object")
+        return false;
+    const proto = Object.getPrototypeOf(value);
+    return proto === Object.prototype || proto === null;
+}
+/**
+ * Walks a JSON-shaped value. Strings are run through the redactor; arrays
+ * and plain objects are recursed; everything else (number, boolean, null,
+ * non-plain objects) is returned unchanged. Preserves reference identity
+ * when nothing changes — useful for short-circuit downstream comparisons.
+ */
+export async function redactStringsDeep(value, redactor) {
+    if (typeof value === "string") {
+        if (value.length === 0)
+            return value;
+        try {
+            return await redactor.redact(value);
+        }
+        catch (err) {
+            logger.warn("redactor.redact threw; passing through original", {
+                err: err instanceof Error ? err.message : String(err),
+                preview: value.slice(0, 64),
+            });
+            return value;
+        }
+    }
+    if (Array.isArray(value)) {
+        const next = await Promise.all(value.map((item) => redactStringsDeep(item, redactor)));
+        return next.some((v, i) => v !== value[i]) ? next : value;
+    }
+    if (isPlainObject(value)) {
+        const entries = await Promise.all(Object.entries(value).map(async ([k, v]) => [k, await redactStringsDeep(v, redactor)]));
+        let changed = false;
+        const out = {};
+        for (const [k, v] of entries) {
+            out[k] = v;
+            if (v !== value[k])
+                changed = true;
+        }
+        return changed ? out : value;
+    }
+    return value;
+}
+/**
+ * Redact PII inside `span.data` only. Top-level structural fields (address,
+ * correlationId, runId, etc.) are non-PII identifiers and skipped.
+ *
+ * Returns the same span if nothing changed (avoids object allocation when no
+ * PII was found).
+ */
+export async function redactSpanData(span, redactor) {
+    if (!span.data || typeof span.data !== "object")
+        return span;
+    const next = await redactStringsDeep(span.data, redactor);
+    if (next === span.data)
+        return span;
+    return { ...span, data: next };
+}
+// ─── Default redactor lifecycle ────────────────────────────────────────────
+//
+// The runtime registers a default redactor at startup when the feature flag is
+// on; transports look it up via getDefaultPiiRedactor(). Tests can override.
+let defaultRedactor = null;
+export function setDefaultPiiRedactor(r) {
+    defaultRedactor = r;
+}
+export function getDefaultPiiRedactor() {
+    return defaultRedactor;
+}
+/**
+ * Built-in OpenRedaction pattern types we allowlist for span redaction.
+ *
+ * Scoped via the `patterns` whitelist (not categories) because category
+ * activation sweeps in patterns that false-positive on our domain content:
+ *
+ *   - `categories: ['personal']` activates NAME patterns that redact
+ *     strategy/asset names ("Setup Bison strategy" → "[NAME_xxx] strategy",
+ *     "long position on ETH" → "long position on [NAME_xxx]").
+ *   - `categories: ['financial']` activates ETH_ADDR which redacts wallet
+ *     addresses inside `data.input.strategyWalletAddress`, breaking joins.
+ *
+ * Phone patterns from upstream are NOT used — we ship our own custom
+ * patterns instead. Specifically:
+ *   - `PHONE_UK` — over-permissive: regex matches any 11-12 digit run with
+ *     no separators, so the trailing 12-digit segment of a UUID (e.g.,
+ *     `...446655440000`) is misclassified as a UK phone.
+ *   - `PHONE_US` (upstream) — matches bare 10-digit numbers, which collides
+ *     with 10-digit Unix timestamps (`1716855600`).
+ *   - `PHONE_INTERNATIONAL` (upstream) — fine in isolation, but with
+ *     `enableContextAnalysis: false` the library still suppresses matches
+ *     in some contexts via undocumented filters; replacing it with our own
+ *     custom version gives us deterministic behavior.
+ *   - `TURKEY_ID` — personal national ID, not a credential.
+ */
+const ALLOWLISTED_PATTERN_TYPES = [
+    // Contact PII (phones come from custom patterns below)
+    "EMAIL",
+    // Cloud / vendor API keys + tokens
+    "AWS_ACCESS_KEY",
+    "AWS_SECRET_KEY",
+    "AZURE_STORAGE_KEY",
+    "BEARER_TOKEN",
+    "CARD_AUTH_CODE",
+    "DOCKER_AUTH",
+    "FIREBASE_API_KEY",
+    "GENERIC_API_KEY",
+    "GENERIC_SECRET",
+    "GITHUB_TOKEN",
+    "GOOGLE_API_KEY",
+    "HEROKU_API_KEY",
+    "JWT_TOKEN",
+    "KUBERNETES_SECRET",
+    "MAILGUN_API_KEY",
+    "NPM_TOKEN",
+    "OAUTH_CLIENT_SECRET",
+    "OAUTH_TOKEN",
+    "OPENAI_API_KEY",
+    "PRIVATE_KEY",
+    "PYPI_TOKEN",
+    "SENDGRID_API_KEY",
+    "SLACK_TOKEN",
+    "SSH_PRIVATE_KEY",
+    "STRIPE_API_KEY",
+    "TWILIO_API_KEY",
+    "URL_WITH_AUTH",
+];
+/**
+ * Phone patterns are entirely custom because upstream is unreliable: PHONE_UK
+ * matches bare 11–12 digit runs (UUID trailing segments), upstream PHONE_US
+ * matches bare 10-digit runs (Unix-seconds timestamps), and the library
+ * doesn't ship India / China / Korea / Japan / Brazil patterns at all.
+ *
+ * Design rule: every pattern requires either an explicit country code OR a
+ * country-specific mobile prefix AND/OR separators between groups. Pure
+ * numeric IDs (timestamps, span IDs, counters, UUID segments) don't satisfy
+ * any of those constraints, so they survive untouched.
+ */
+const PHONE_PATTERNS = [
+    {
+        type: "PHONE_INTL",
+        regex: /\+\d[\d\s.\-()]{8,20}\d/g,
+        priority: 90,
+        placeholder: "[PHONE_INTL_{n}]",
+        severity: "high",
+        description: "International phone with explicit + country-code prefix.",
+    },
+    {
+        type: "PHONE_US",
+        // `(?<!\d)` / `(?!\d)` instead of `\b` so `(415) 555-1234` matches at
+        // "space-paren" (where \b fails) and bare 10-digit timestamps don't.
+        regex: /(?<!\d)(?:\+1[\s.-])?(?:\(\d{3}\)[\s.-]?|\d{3}[\s.-])\d{3}[\s.-]\d{4}(?!\d)/g,
+        priority: 88,
+        placeholder: "[PHONE_US_{n}]",
+        severity: "high",
+        description: "US phone with at least one separator (rejects bare 10-digit timestamps).",
+    },
+    {
+        type: "PHONE_IN",
+        regex: /\b(?:\+?91[\s.-]?)?[6-9]\d{4}[\s.-]?\d{5}\b/g,
+        priority: 85,
+        placeholder: "[PHONE_IN_{n}]",
+        severity: "high",
+        description: "Indian mobile (10 digits starting 6-9; optional +91/91 prefix).",
+    },
+    {
+        type: "PHONE_CN",
+        regex: /\b(?:\+?86[\s.-]?)?1[3-9]\d[\s.-]?\d{4}[\s.-]?\d{4}\b/g,
+        priority: 85,
+        placeholder: "[PHONE_CN_{n}]",
+        severity: "high",
+        description: "Chinese mobile (11 digits starting 1[3-9]; optional +86/86 prefix).",
+    },
+    {
+        type: "PHONE_KR",
+        regex: /\b(?:\+?82[\s.-]?)?0?1[01679][\s.-]\d{3,4}[\s.-]\d{4}\b/g,
+        priority: 85,
+        placeholder: "[PHONE_KR_{n}]",
+        severity: "high",
+        description: "Korean mobile (010/011/016-019 + separators; optional +82 prefix).",
+    },
+    {
+        type: "PHONE_JP",
+        regex: /\b(?:\+?81[\s.-]?)?0?[789]0[\s.-]\d{4}[\s.-]\d{4}\b/g,
+        priority: 85,
+        placeholder: "[PHONE_JP_{n}]",
+        severity: "high",
+        description: "Japanese mobile (070/080/090 + separators; optional +81 prefix).",
+    },
+    {
+        type: "PHONE_UK_MOBILE",
+        regex: /\b(?:\+?44[\s.-]?|0)7\d{3}[\s.-]?\d{3}[\s.-]?\d{3}\b/g,
+        priority: 85,
+        placeholder: "[PHONE_UK_{n}]",
+        severity: "high",
+        description: "UK mobile (07xxx; optional +44 prefix).",
+    },
+    {
+        type: "PHONE_BR",
+        regex: /\b\+?55[\s.-]?\(?\d{2}\)?[\s.-]?9\d{4}[\s.-]?\d{4}\b/g,
+        priority: 85,
+        placeholder: "[PHONE_BR_{n}]",
+        severity: "high",
+        description: "Brazilian mobile (+55 required + DDD + 9-digit number).",
+    },
+];
+/**
+ * Lazy-load the BIP39 English wordlist into a Set for O(1) lookup during
+ * mnemonic validation. Cached after first call; the `bip39` package is only
+ * pulled in when PII redaction is enabled, keeping cold-start cost off the
+ * non-redacting build.
+ */
+let bip39WordSet = null;
+async function getBip39WordSet() {
+    if (bip39WordSet)
+        return bip39WordSet;
+    const mod = (await import("bip39"));
+    const wordlists = mod.wordlists ?? mod.default?.wordlists;
+    if (!wordlists?.english) {
+        throw new Error("bip39: english wordlist not available");
+    }
+    bip39WordSet = new Set(wordlists.english);
+    return bip39WordSet;
+}
+/**
+ * Build the custom-pattern set we layer on top of OpenRedaction's built-ins.
+ * These cover credentials common in our agent traffic that the upstream
+ * library either misses entirely or whose built-in pattern doesn't fire
+ * without context:
+ *
+ *   - CRYPTO_PRIVKEY_HEX: `0x` + 64 hex = EVM private key. Also matches
+ *     SHA-256 hashes; over-redaction is acceptable since hashes inside
+ *     `data` are rare and not load-bearing.
+ *   - ANTHROPIC_API_KEY: `sk-ant-(api|admin)NN-...`; upstream has no
+ *     specific Anthropic pattern.
+ *   - SK_API_KEY: catch-all for OpenAI / OpenRouter / similar `sk-` prefixed
+ *     keys; upstream OPENAI_API_KEY didn't fire on real `sk-proj-*` and
+ *     `sk-svcacct-*` formats in smoke tests.
+ *
+ * NOTE: Mnemonic detection is NOT in this list. The earlier regex-with-
+ * validator approach was greedy and silently missed mnemonics surrounded by
+ * other lowercase words (e.g. "my secret is <12 BIP39 words> so keep safe"
+ * → regex captures the full 17-word run, validator rejects on count/words,
+ * library moves on without retrying a shorter window). Mnemonics are now
+ * handled by `redactMnemonicsPreRedaction` ahead of the OpenRedaction pass.
+ */
+async function buildCustomPatterns() {
+    return [
+        ...PHONE_PATTERNS,
+        {
+            type: "CRYPTO_PRIVKEY_HEX",
+            regex: /\b0x[0-9a-fA-F]{64}\b/g,
+            priority: 110,
+            placeholder: "[CRYPTO_PRIVKEY_{n}]",
+            severity: "critical",
+            description: "EVM private key (0x + 32-byte hex). Matches SHA-256 hashes too — accepted as collateral.",
+        },
+        {
+            type: "ANTHROPIC_API_KEY",
+            regex: /\bsk-ant-(?:api|admin)\d+-[A-Za-z0-9_\-]{40,}\b/g,
+            priority: 110,
+            placeholder: "[ANTHROPIC_KEY_{n}]",
+            severity: "critical",
+        },
+        {
+            type: "SK_API_KEY",
+            regex: /\bsk-(?:proj|live|test|or|svcacct)?[-_]?[A-Za-z0-9_\-]{32,}\b/g,
+            priority: 100,
+            placeholder: "[SK_KEY_{n}]",
+            severity: "critical",
+            description: "Catch-all for sk-* API keys (OpenAI, OpenRouter, etc.).",
+        },
+    ];
+}
+/**
+ * Find BIP39-mnemonic spans in `text` using a true sliding window — not
+ * a greedy regex with a post-hoc validator.
+ *
+ * Why this and not a regex+validator:
+ *   - OpenRedaction calls the validator on whatever the regex captured. JS
+ *     regex matching is left-to-right with no backtracking across `lastIndex`
+ *     advances; once a (greedy) match is rejected, the engine moves past it
+ *     entirely. So a 17-word lowercase run like "my secret is <12 BIP39>
+ *     so keep safe" gets captured whole, fails validation on word count,
+ *     and the engine doesn't retry the 12-word window starting 3 tokens in.
+ *
+ * Algorithm:
+ *   1. Tokenize lowercase-only words and their offsets (skips capitalized
+ *      words and punctuation — real mnemonics from wallet exports are
+ *      always all-lowercase space-separated).
+ *   2. Walk left to right. At each token position, try valid mnemonic
+ *      counts largest-first (24, 21, 18, 15, 12) so a 24-word phrase
+ *      inside a longer prose run isn't missed by a premature 12-match.
+ *   3. A window is valid only when every word is BIP39 AND the gap between
+ *      consecutive tokens in the source is whitespace-only (rejects forms
+ *      with commas or other punctuation between words, which real wallet
+ *      exports don't use).
+ *   4. On match, record the source span and advance past it; otherwise step
+ *      forward one token.
+ */
+export function findMnemonicSpans(text, bip39) {
+    const tokens = [];
+    const wordRe = /[a-z]+/g;
+    let m;
+    while ((m = wordRe.exec(text)) !== null) {
+        tokens.push({ word: m[0], start: m.index, end: m.index + m[0].length });
+    }
+    const validCounts = [24, 21, 18, 15, 12];
+    const spans = [];
+    let i = 0;
+    while (i < tokens.length) {
+        let matched = false;
+        for (const count of validCounts) {
+            if (i + count > tokens.length)
+                continue;
+            let valid = true;
+            for (let j = 0; j < count; j++) {
+                if (!bip39.has(tokens[i + j].word)) {
+                    valid = false;
+                    break;
+                }
+                if (j > 0) {
+                    const gap = text.slice(tokens[i + j - 1].end, tokens[i + j].start);
+                    if (!/^\s+$/.test(gap)) {
+                        valid = false;
+                        break;
+                    }
+                }
+            }
+            if (valid) {
+                spans.push({
+                    start: tokens[i].start,
+                    end: tokens[i + count - 1].end,
+                });
+                i += count;
+                matched = true;
+                break;
+            }
+        }
+        if (!matched)
+            i++;
+    }
+    return spans;
+}
+let mnemonicCounter = 0;
+function redactMnemonicSpans(text, spans) {
+    if (spans.length === 0)
+        return text;
+    let out = "";
+    let cursor = 0;
+    for (const span of spans) {
+        out += text.slice(cursor, span.start);
+        // Bracketed uppercase placeholder ensures the result won't re-tokenize
+        // back into lowercase BIP39-shaped words on a second pass.
+        const suffix = String(mnemonicCounter++ % 10000).padStart(4, "0");
+        out += `[MNEMONIC_${suffix}]`;
+        cursor = span.end;
+    }
+    out += text.slice(cursor);
+    return out;
+}
+/**
+ * Pre-redact BIP39 mnemonics in `text` before handing the result to
+ * OpenRedaction. Returns the original string when no mnemonics are present
+ * (cheap path — only the tokenizer runs and finds nothing).
+ */
+export async function redactMnemonicsPreRedaction(text) {
+    const bip39 = await getBip39WordSet();
+    const spans = findMnemonicSpans(text, bip39);
+    return redactMnemonicSpans(text, spans);
+}
+/**
+ * Build an OpenRedaction-backed PiiRedactor.
+ *
+ * Detects:
+ *   - Contact PII: emails.
+ *   - Phones (all custom — upstream phone patterns are unreliable, see
+ *     ALLOWLISTED_PATTERN_TYPES docstring): US, international (`+` prefix),
+ *     India, China, South Korea, Japan, UK mobile, Brazil. Each requires
+ *     either an explicit country code OR a country-specific mobile prefix
+ *     plus separators, so bare numeric IDs (timestamps, span IDs, UUIDs)
+ *     survive untouched.
+ *   - Credentials (upstream): cloud / vendor API keys + tokens (AWS, Azure,
+ *     GCP, GitHub, Slack, Stripe, OpenAI, Twilio, …), bearer + JWT tokens,
+ *     OAuth secrets, generic API keys, SSH/PEM private keys, URLs with
+ *     embedded auth.
+ *   - Crypto secrets (custom patterns): EVM private keys (0x + 64 hex),
+ *     Anthropic `sk-ant-*` keys, generic `sk-*` keys (OpenAI/OpenRouter).
+ *   - BIP39 mnemonic phrases (out-of-band sliding-window pre-pass — see
+ *     `redactMnemonicsPreRedaction`): 12/15/18/21/24 BIP39 words, found and
+ *     redacted before the OpenRedaction pass so embedded phrases like
+ *     "my key is <12 words> keep safe" are caught.
+ *
+ * Tuning:
+ *   - `enableFalsePositiveFilter: false` — explicit; the library defaults
+ *     this to truthy in practice and suppresses valid international-phone
+ *     matches in some contexts.
+ *   - `enableContextAnalysis: false` — saves CPU; context rules add
+ *     latency and aren't load-bearing for the patterns we keep.
+ *   - `enableCache: true` — chat history repeats; cache skips re-scan.
+ *   - `confidenceThreshold: 0.5` — kept conservative; custom patterns score
+ *     1.0 so this only affects built-ins.
+ *
+ * Lazy-imports `openredaction` and `bip39` — both deps stay cold for builds
+ * / tests that don't enable redaction.
+ */
+export async function createOpenRedactionAdapter() {
+    const { OpenRedaction } = await import("openredaction");
+    const customPatterns = await buildCustomPatterns();
+    // Our local custom-pattern descriptor type is structurally compatible with
+    // the upstream PIIPattern. Cast at the options-object boundary so callers
+    // don't need a build-time dependency on the openredaction type.
+    const options = {
+        patterns: [...ALLOWLISTED_PATTERN_TYPES],
+        customPatterns,
+        enableContextAnalysis: false,
+        enableMultiPass: false,
+        enableCache: true,
+        cacheSize: 200,
+        // Despite the docs saying default is `false`, leaving this unset
+        // causes the library to suppress otherwise-valid phone matches in some
+        // contexts (e.g., `+44 20 7946 0958` after "ring me on"). Force off so
+        // our strict custom regex is the only thing deciding what gets redacted.
+        enableFalsePositiveFilter: false,
+        confidenceThreshold: 0.5,
+    };
+    const instance = new OpenRedaction(options);
+    // Warm the BIP39 word set so the first user-facing call doesn't pay the
+    // dynamic-import latency.
+    await getBip39WordSet();
+    return {
+        async redact(text) {
+            // Mnemonic pre-pass runs FIRST — its sliding-window detector can find
+            // mnemonics that OpenRedaction's regex-with-validator misses when the
+            // phrase is embedded in surrounding lowercase prose.
+            const preRedacted = await redactMnemonicsPreRedaction(text);
+            const result = await instance.detect(preRedacted);
+            return result.redacted;
+        },
+    };
+}
+//# sourceMappingURL=redact-pii.js.map

package/dist/tracking/spans/redact-pii.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-pii.js","sourceRoot":"","sources":["../../../src/tracking/spans/redact-pii.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,MAAM,MAAM,GAAG,YAAY,CAAC,0BAA0B,CAAC,CAAC;AAOxD,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAc,EACd,QAAqB;IAErB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE;gBAC7D,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBACrD,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;aAC5B,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CACvD,CAAC;QACF,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5D,CAAC;IACD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,iBAAiB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAU,CAAC,CAChG,CAAC;QACF,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;YAC7B,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACX,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;gBAAE,OAAO,GAAG,IAAI,CAAC;QACrC,CAAC;QACD,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAkB,EAClB,QAAqB;IAErB,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC1D,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAA+B,EAAE,CAAC;AAC5D,CAAC;AAED,8EAA8E;AAC9E,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAE7E,IAAI,eAAe,GAAuB,IAAI,CAAC;AAE/C,MAAM,UAAU,qBAAqB,CAAC,CAAqB;IACzD,eAAe,GAAG,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,yBAAyB,GAAG;IAChC,uDAAuD;IACvD,OAAO;IACP,mCAAmC;IACnC,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;IACnB,cAAc;IACd,gBAAgB;IAChB,aAAa;IACb,kBAAkB;IAClB,iBAAiB;IACjB,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,gBAAgB;IAChB,WAAW;IACX,mBAAmB;IACnB,iBAAiB;IACjB,WAAW;IACX,qBAAqB;IACrB,aAAa;IACb,gBAAgB;IAChB,aAAa;IACb,YAAY;IACZ,kBAAkB;IAClB,aAAa;IACb,iBAAiB;IACjB,gBAAgB;IAChB,gBAAgB;IAChB,eAAe;CACP,CAAC;AAEX;;;;;;;;;;GAUG;AACH,MAAM,cAAc,GAOf;IACH;QACE,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,0BAA0B;QACjC,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,kBAAkB;QAC/B,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,0DAA0D;KACxE;IACD;QACE,IAAI,EAAE,UAAU;QAChB,sEAAsE;QACtE,qEAAqE;QACrE,KAAK,EAAE,8EAA8E;QACrF,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,gBAAgB;QAC7B,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,0EAA0E;KACxF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,8CAA8C;QACrD,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,gBAAgB;QAC7B,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,iEAAiE;KAC/E;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,wDAAwD;QAC/D,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,gBAAgB;QAC7B,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,qEAAqE;KACnF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,0DAA0D;QACjE,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,gBAAgB;QAC7B,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,oEAAoE;KAClF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,sDAAsD;QAC7D,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,gBAAgB;QAC7B,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,kEAAkE;KAChF;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,uDAAuD;QAC9D,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,gBAAgB;QAC7B,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,yCAAyC;KACvD;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,uDAAuD;QAC9D,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,gBAAgB;QAC7B,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,yDAAyD;KACvE;CACF,CAAC;AAEF;;;;;GAKG;AACH,IAAI,YAAY,GAAuB,IAAI,CAAC;AAC5C,KAAK,UAAU,eAAe;IAC5B,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAGjC,CAAC;IACF,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC;IAC1D,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,KAAK,UAAU,mBAAmB;IAWhC,OAAO;QACL,GAAG,cAAc;QACjB;YACE,IAAI,EAAE,oBAAoB;YAC1B,KAAK,EAAE,wBAAwB;YAC/B,QAAQ,EAAE,GAAG;YACb,WAAW,EAAE,sBAAsB;YACnC,QAAQ,EAAE,UAAU;YACpB,WAAW,EAAE,0FAA0F;SACxG;QACD;YACE,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,kDAAkD;YACzD,QAAQ,EAAE,GAAG;YACb,WAAW,EAAE,qBAAqB;YAClC,QAAQ,EAAE,UAAU;SACrB;QACD;YACE,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,gEAAgE;YACvE,QAAQ,EAAE,GAAG;YACb,WAAW,EAAE,cAAc;YAC3B,QAAQ,EAAE,UAAU;YACpB,WAAW,EAAE,yDAAyD;SACvE;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,KAAkB;IAElB,MAAM,MAAM,GAAwD,EAAE,CAAC;IACvE,MAAM,MAAM,GAAG,SAAS,CAAC;IACzB,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACzC,MAAM,KAAK,GAA0C,EAAE,CAAC;IACxD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACzB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;YAChC,IAAI,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC,MAAM;gBAAE,SAAS;YACxC,IAAI,KAAK,GAAG,IAAI,CAAC;YACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnC,KAAK,GAAG,KAAK,CAAC;oBACd,MAAM;gBACR,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACV,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;oBACnE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;wBACvB,KAAK,GAAG,KAAK,CAAC;wBACd,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,IAAI,CAAC;oBACT,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK;oBACtB,GAAG,EAAE,MAAM,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG;iBAC/B,CAAC,CAAC;gBACH,CAAC,IAAI,KAAK,CAAC;gBACX,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,CAAC,EAAE,CAAC;IACpB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,IAAI,eAAe,GAAG,CAAC,CAAC;AACxB,SAAS,mBAAmB,CAC1B,IAAY,EACZ,KAA4C;IAE5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,uEAAuE;QACvE,2DAA2D;QAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,EAAE,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAClE,GAAG,IAAI,aAAa,MAAM,GAAG,CAAC;QAC9B,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC;IACpB,CAAC;IACD,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IAAY;IAC5D,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7C,OAAO,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B;IAC9C,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,MAAM,mBAAmB,EAAE,CAAC;IACnD,2EAA2E;IAC3E,0EAA0E;IAC1E,gEAAgE;IAChE,MAAM,OAAO,GAAG;QACd,QAAQ,EAAE,CAAC,GAAG,yBAAyB,CAAC;QACxC,cAAc;QACd,qBAAqB,EAAE,KAAK;QAC5B,eAAe,EAAE,KAAK;QACtB,WAAW,EAAE,IAAI;QACjB,SAAS,EAAE,GAAG;QACd,iEAAiE;QACjE,uEAAuE;QACvE,uEAAuE;QACvE,yEAAyE;QACzE,yBAAyB,EAAE,KAAK;QAChC,mBAAmB,EAAE,GAAG;KACoC,CAAC;IAC/D,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IAC5C,wEAAwE;IACxE,0BAA0B;IAC1B,MAAM,eAAe,EAAE,CAAC;IACxB,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,IAAY;YACvB,sEAAsE;YACtE,sEAAsE;YACtE,qDAAqD;YACrD,MAAM,WAAW,GAAG,MAAM,2BAA2B,CAAC,IAAI,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAClD,OAAO,MAAM,CAAC,QAAQ,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tracking/spans/span-transport.d.ts

@@ -4,6 +4,7 @@
  * Mirrors src/tracking/transport.ts. Never throws — all errors caught and logged.
  */
 import type { TrackingSpan, SpanTransport } from "./types.js";
+import { type PiiRedactor } from "./redact-pii.js";
 export interface BatchingSpanTransportOptions {
     baseUrl: string;
     apiKey: string;
@@ -12,6 +13,13 @@ export interface BatchingSpanTransportOptions {
     maxBufferSize?: number;
     /** Max serialized JSON bytes per batch (excluding HTTP envelope). */
     maxBatchBytes?: number;
+    /**
+     * Optional PII redactor. When set, every span's `data` is walked at flush
+     * time and string values are replaced with their redacted form before the
+     * batch is serialized. Pass `null`/omit to disable redaction at this
+     * transport (default lookup via `getDefaultPiiRedactor()`).
+     */
+    piiRedactor?: PiiRedactor | null;
 }
 export declare class BatchingSpanTransport implements SpanTransport {
     private buffer;
@@ -23,6 +31,17 @@ export declare class BatchingSpanTransport implements SpanTransport {
     private readonly flushThreshold;
     private readonly maxBufferSize;
     private readonly maxBatchBytes;
+    /**
+     * Optional PII redactor override. When provided at construction, takes
+     * precedence over the process-wide default. When `undefined`, flush() falls
+     * back to `getDefaultPiiRedactor()` at flush time — handles the case where
+     * the default redactor is initialized asynchronously (dynamic import) and
+     * may not be ready when the transport is built.
+     *
+     * Pass `null` explicitly to disable redaction at this transport even if a
+     * default is registered (e.g., for tests or local dev).
+     */
+    private readonly piiRedactorOverride;
     constructor(options: BatchingSpanTransportOptions);
     enqueue(span: TrackingSpan): void;
     flush(): Promise<void>;

package/dist/tracking/spans/span-transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"span-transport.d.ts","sourceRoot":"","sources":["../../../src/tracking/spans/span-transport.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AA4D9D,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,qBAAsB,YAAW,aAAa;IACzD,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;gBAE3B,OAAO,EAAE,4BAA4B;IAgBjD,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAW3B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAoDtB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB/B,OAAO,CAAC,QAAQ;IAQhB;;;;;;;OAOG;IACH,OAAO,CAAC,SAAS;CAkBlB;AAcD,qBAAa,iBAAkB,YAAW,aAAa;IACrD,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI;IAC5B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IACtB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAChC"}
+{"version":3,"file":"span-transport.d.ts","sourceRoot":"","sources":["../../../src/tracking/spans/span-transport.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAW9D,OAAO,EACL,KAAK,WAAW,EAGjB,MAAM,iBAAiB,CAAC;AAkDzB,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;CAClC;AAED,qBAAa,qBAAsB,YAAW,aAAa;IACzD,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC;;;;;;;;;OASG;IACH,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAiC;gBAEzD,OAAO,EAAE,4BAA4B;IAiBjD,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAW3B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAmEtB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB/B,OAAO,CAAC,QAAQ;IAQhB;;;;;;;OAOG;IACH,OAAO,CAAC,SAAS;CAkBlB;AAcD,qBAAa,iBAAkB,YAAW,aAAa;IACrD,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI;IAC5B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IACtB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAChC"}

package/dist/tracking/spans/span-transport.js

@@ -5,6 +5,7 @@
  */
 import { SPANS_API_PATH, FLUSH_INTERVAL_MS, FLUSH_THRESHOLD, MAX_BUFFER_SIZE, MAX_BATCH_BYTES, MAX_SPAN_FIELD_BYTES, TRUNCATED_PREVIEW_BYTES, } from "./constants.js";
 import { createLogger } from "../../utils/logger.js";
+import { getDefaultPiiRedactor, redactSpanData, } from "./redact-pii.js";
 const logger = createLogger("[senpi-core][span-transport]");
 /**
  * Replace any top-level `data` field whose serialized size exceeds
@@ -65,6 +66,17 @@ export class BatchingSpanTransport {
     flushThreshold;
     maxBufferSize;
     maxBatchBytes;
+    /**
+     * Optional PII redactor override. When provided at construction, takes
+     * precedence over the process-wide default. When `undefined`, flush() falls
+     * back to `getDefaultPiiRedactor()` at flush time — handles the case where
+     * the default redactor is initialized asynchronously (dynamic import) and
+     * may not be ready when the transport is built.
+     *
+     * Pass `null` explicitly to disable redaction at this transport even if a
+     * default is registered (e.g., for tests or local dev).
+     */
+    piiRedactorOverride;
     constructor(options) {
         this.url = `${options.baseUrl.replace(/\/+$/, "")}${SPANS_API_PATH}`;
         this.apiKey = options.apiKey;
@@ -72,6 +84,7 @@ export class BatchingSpanTransport {
         this.flushThreshold = options.flushThreshold ?? FLUSH_THRESHOLD;
         this.maxBufferSize = options.maxBufferSize ?? MAX_BUFFER_SIZE;
         this.maxBatchBytes = options.maxBatchBytes ?? MAX_BATCH_BYTES;
+        this.piiRedactorOverride = options.piiRedactor;
         this.timer = setInterval(() => {
             void this.flush();
         }, this.flushIntervalMs);
@@ -94,13 +107,23 @@ export class BatchingSpanTransport {
         this.flushing = true;
         const batch = this.takeBatch();
         try {
+            // PII redaction is applied right before serialization so it covers
+            // every emission path (hook + direct) at one chokepoint. Walks each
+            // span's `data` only; structural fields stay as-is. Override beats
+            // default; if both null/undefined, this is a no-op pass-through.
+            const redactor = this.piiRedactorOverride === undefined
+                ? getDefaultPiiRedactor()
+                : this.piiRedactorOverride;
+            const wireBatch = redactor
+                ? await Promise.all(batch.map((s) => redactSpanData(s, redactor)))
+                : batch;
             const response = await fetch(this.url, {
                 method: "POST",
                 headers: {
                     "Content-Type": "application/json",
                     Authorization: `Bearer ${this.apiKey}`,
                 },
-                body: JSON.stringify({ spans: batch }),
+                body: JSON.stringify({ spans: wireBatch }),
                 signal: AbortSignal.timeout(15_000),
             });
             if (!response.ok) {
@@ -121,7 +144,10 @@ export class BatchingSpanTransport {
                     spanCount: batch.length,
                     body: body.slice(0, 500),
                     validationErrors,
-                    sample: batch[0],
+                    // Log the redacted form — what we'd put on the wire — not the raw
+                    // pre-redacted span, so warn logs don't leak PII that the
+                    // redaction pass just removed from the payload.
+                    sample: wireBatch[0],
                 });
                 // 413 (payload too large) and 400 (validation) are non-retryable —
                 // re-sending the same batch will fail the same way. Drop it.

package/dist/tracking/spans/span-transport.js.map

@@ -1 +1 @@
-{"version":3,"file":"span-transport.js","sourceRoot":"","sources":["../../../src/tracking/spans/span-transport.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,MAAM,MAAM,GAAG,YAAY,CAAC,8BAA8B,CAAC,CAAC;AAE5D;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,IAAkB;IAC1C,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC1B,UAAU,GAAG,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC/B,oEAAoE;gBACpE,kEAAkE;gBAClE,oEAAoE;gBACpE,iEAAiE;gBACjE,8DAA8D;gBAC9D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvB,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;oBACX,SAAS;gBACX,CAAC;gBACD,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC;YAC5B,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;YAC7C,GAAG,CAAC,CAAC,CAAC,GAAG;gBACP,UAAU,EAAE,IAAI;gBAChB,oBAAoB,EAAE,UAAU,CAAC,MAAM;gBACvC,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC;aACvD,CAAC;YACF,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAYD,MAAM,OAAO,qBAAqB;IACxB,MAAM,GAAmB,EAAE,CAAC;IAC5B,KAAK,GAA0C,IAAI,CAAC;IACpD,QAAQ,GAAG,KAAK,CAAC;IACR,GAAG,CAAS;IACZ,MAAM,CAAS;IACf,eAAe,CAAS;IACxB,cAAc,CAAS;IACvB,aAAa,CAAS;IACtB,aAAa,CAAS;IAEvC,YAAY,OAAqC;QAC/C,IAAI,CAAC,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,cAAc,EAAE,CAAC;QACrE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,iBAAiB,CAAC;QACpE,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,eAAe,CAAC;QAChE,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,eAAe,CAAC;QAC9D,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,eAAe,CAAC;QAE9D,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1E,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,IAAkB;QACxB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QAEzC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC9C,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACtD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAE/B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;iBACvC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;gBACtC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC;gBAC/D,IAAI,gBAAsC,CAAC;gBAC3C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0B,CAAC;wBACzD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;4BAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;oBACrE,CAAC;oBAAC,MAAM,CAAC;wBACP,cAAc;oBAChB,CAAC;gBACH,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE;oBAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,SAAS,EAAE,KAAK,CAAC,MAAM;oBACvB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBACxB,gBAAgB;oBAChB,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;iBACjB,CAAC,CAAC;gBACH,mEAAmE;gBACnE,6DAA6D;gBAC7D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACvD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;gBAC9B,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBACrD,SAAS,EAAE,KAAK,CAAC,MAAM;aACxB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAClC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM;gBAAE,MAAM;QAC1C,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE;gBAChE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,KAAqB;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QACtD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,SAAS;QACf,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,iEAAiE;QACjE,MAAM,QAAQ,GAAG,EAAE,CAAC;QACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACrC,oEAAoE;YACpE,sEAAsE;YACtE,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnE,MAAM;YACR,CAAC;YACD,KAAK,EAAE,CAAC;YACR,KAAK,IAAI,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,yEAAyE;IACzE,4EAA4E;IAC5E,sEAAsE;IACtE,gFAAgF;IAChF,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,MAAM,OAAO,iBAAiB;IAC5B,OAAO,CAAC,KAAmB,IAAS,CAAC;IACrC,KAAK,CAAC,KAAK,KAAmB,CAAC;IAC/B,KAAK,CAAC,QAAQ,KAAmB,CAAC;CACnC"}
+{"version":3,"file":"span-transport.js","sourceRoot":"","sources":["../../../src/tracking/spans/span-transport.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAEL,qBAAqB,EACrB,cAAc,GACf,MAAM,iBAAiB,CAAC;AAEzB,MAAM,MAAM,GAAG,YAAY,CAAC,8BAA8B,CAAC,CAAC;AAE5D;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,IAAkB;IAC1C,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC1B,UAAU,GAAG,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC/B,oEAAoE;gBACpE,kEAAkE;gBAClE,oEAAoE;gBACpE,iEAAiE;gBACjE,8DAA8D;gBAC9D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvB,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;oBACX,SAAS;gBACX,CAAC;gBACD,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC;YAC5B,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;YAC7C,GAAG,CAAC,CAAC,CAAC,GAAG;gBACP,UAAU,EAAE,IAAI;gBAChB,oBAAoB,EAAE,UAAU,CAAC,MAAM;gBACvC,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC;aACvD,CAAC;YACF,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAmBD,MAAM,OAAO,qBAAqB;IACxB,MAAM,GAAmB,EAAE,CAAC;IAC5B,KAAK,GAA0C,IAAI,CAAC;IACpD,QAAQ,GAAG,KAAK,CAAC;IACR,GAAG,CAAS;IACZ,MAAM,CAAS;IACf,eAAe,CAAS;IACxB,cAAc,CAAS;IACvB,aAAa,CAAS;IACtB,aAAa,CAAS;IACvC;;;;;;;;;OASG;IACc,mBAAmB,CAAiC;IAErE,YAAY,OAAqC;QAC/C,IAAI,CAAC,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,cAAc,EAAE,CAAC;QACrE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,iBAAiB,CAAC;QACpE,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,eAAe,CAAC;QAChE,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,eAAe,CAAC;QAC9D,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,eAAe,CAAC;QAC9D,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,WAAW,CAAC;QAE/C,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1E,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,IAAkB;QACxB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QAEzC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC9C,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACtD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAE/B,IAAI,CAAC;YACH,mEAAmE;YACnE,oEAAoE;YACpE,mEAAmE;YACnE,iEAAiE;YACjE,MAAM,QAAQ,GACZ,IAAI,CAAC,mBAAmB,KAAK,SAAS;gBACpC,CAAC,CAAC,qBAAqB,EAAE;gBACzB,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC;YAC/B,MAAM,SAAS,GAAG,QAAQ;gBACxB,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAClE,CAAC,CAAC,KAAK,CAAC;YAEV,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;iBACvC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;gBAC1C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC;gBAC/D,IAAI,gBAAsC,CAAC;gBAC3C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0B,CAAC;wBACzD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;4BAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;oBACrE,CAAC;oBAAC,MAAM,CAAC;wBACP,cAAc;oBAChB,CAAC;gBACH,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE;oBAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,SAAS,EAAE,KAAK,CAAC,MAAM;oBACvB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBACxB,gBAAgB;oBAChB,kEAAkE;oBAClE,0DAA0D;oBAC1D,gDAAgD;oBAChD,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;iBACrB,CAAC,CAAC;gBACH,mEAAmE;gBACnE,6DAA6D;gBAC7D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACvD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;gBAC9B,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBACrD,SAAS,EAAE,KAAK,CAAC,MAAM;aACxB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAClC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM;gBAAE,MAAM;QAC1C,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE;gBAChE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,KAAqB;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QACtD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,SAAS;QACf,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,iEAAiE;QACjE,MAAM,QAAQ,GAAG,EAAE,CAAC;QACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACrC,oEAAoE;YACpE,sEAAsE;YACtE,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnE,MAAM;YACR,CAAC;YACD,KAAK,EAAE,CAAC;YACR,KAAK,IAAI,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,yEAAyE;IACzE,4EAA4E;IAC5E,sEAAsE;IACtE,gFAAgF;IAChF,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,MAAM,OAAO,iBAAiB;IAC5B,OAAO,CAAC,KAAmB,IAAS,CAAC;IACrC,KAAK,CAAC,KAAK,KAAmB,CAAC;IAC/B,KAAK,CAAC,QAAQ,KAAmB,CAAC;CACnC"}

package/dist/tracking/tracker.d.ts

@@ -8,6 +8,7 @@
  * those are replaced here so batches are not rejected with HTTP 400.
  */
 import type { TrackingTransport } from "./types.js";
+import type { Cloids } from "./position-id-registry.js";
 export interface CaptureOptions {
     eventType: string;
     category: string;
@@ -16,6 +17,10 @@ export interface CaptureOptions {
      * From the bus (`__correlationId`); v4 values are sent as-is, otherwise a new v4 is used.
      */
     correlationId?: string | null;
+    /** Cross-flow position.id from the bus (`__positionId`/`positionId`); empty when absent. */
+    positionId?: string | null;
+    /** Exchange-side client order ids from the bus (`__cloids`); empty object when absent. */
+    cloids?: Cloids | null;
     data: Record<string, unknown>;
 }
 export declare class EventTracker {

package/dist/tracking/tracker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tracker.d.ts","sourceRoot":"","sources":["../../src/tracking/tracker.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAiB,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAsBnE,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,qBAAa,YAAY;IAErB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,cAAc;gBAHd,SAAS,EAAE,iBAAiB,EAC5B,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM;IAGzC,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI;IAyBhC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAGhC"}
+{"version":3,"file":"tracker.d.ts","sourceRoot":"","sources":["../../src/tracking/tracker.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAiB,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AAsBxD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,4FAA4F;IAC5F,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,0FAA0F;IAC1F,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,qBAAa,YAAY;IAErB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,cAAc;gBAHd,SAAS,EAAE,iBAAiB,EAC5B,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM;IAGzC,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI;IA8BhC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAGhC"}