@superblocksteam/telemetry 2.0.105 → 2.0.106-next.0

package/dist-esm/browser/instrumentations.js

@@ -0,0 +1,80 @@
+/**
+ * Browser Auto-Instrumentations Factory
+ *
+ * Creates and configures auto-instrumentations for browser telemetry.
+ * Handles XHR and Fetch requests with configurable URL filtering and
+ * trace context propagation.
+ */
+import { context } from "@opentelemetry/api";
+import { XMLHttpRequestInstrumentation } from "@opentelemetry/instrumentation-xml-http-request";
+import { StackContextManager } from "@opentelemetry/sdk-trace-web";
+/**
+ * Default regex for ignoring static asset URLs.
+ * These requests are not worth tracing and would create noise.
+ */
+const DEFAULT_IGNORE_URLS = /\.(js|css|png|jpg|jpeg|svg|gif|woff|woff2|ttf|eot|ico)$/;
+/**
+ * Create auto-instrumentations for browser telemetry.
+ *
+ * Returns an array containing XMLHttpRequestInstrumentation and optionally
+ * FetchInstrumentation (when the package is available).
+ *
+ * Both instrumentations use the provided ignoreUrls to filter out asset
+ * downloads, and propagate trace context only to URLs matching propagateTraceUrls.
+ *
+ * @param config - Optional instrumentation configuration
+ * @returns Array of configured Instrumentation instances
+ *
+ * @example
+ * ```typescript
+ * const instrumentations = createBrowserInstrumentations({
+ *   propagateTraceUrls: [/https:\/\/api\.superblocks\.com/],
+ *   ignoreUrls: [/\/static\//],
+ * });
+ * registerInstrumentations({ instrumentations });
+ * ```
+ */
+export function createBrowserInstrumentations(config) {
+    const ignoreUrls = config?.ignoreUrls ?? [DEFAULT_IGNORE_URLS];
+    const propagateTraceHeaderCorsUrls = config?.propagateTraceUrls ?? [];
+    const instrumentations = [
+        new XMLHttpRequestInstrumentation({
+            ignoreUrls,
+            propagateTraceHeaderCorsUrls,
+        }),
+    ];
+    // Attempt to include FetchInstrumentation if available.
+    // This package may not be installed in all environments.
+    try {
+        const { FetchInstrumentation } = 
+        // eslint-disable-next-line @typescript-eslint/no-require-imports
+        require("@opentelemetry/instrumentation-fetch");
+        instrumentations.push(new FetchInstrumentation({
+            ignoreUrls,
+            propagateTraceHeaderCorsUrls,
+        }));
+    }
+    catch {
+        // FetchInstrumentation is not available; XHR instrumentation will be used alone.
+    }
+    return instrumentations;
+}
+/**
+ * Register the StackContextManager for async context propagation in the browser.
+ *
+ * This must be called before using `context.with()` in browser environments.
+ * Without this, Redux middleware and other async code cannot thread trace
+ * context through async operations.
+ *
+ * @example
+ * ```typescript
+ * registerBrowserContextManager();
+ * // context.with() now works correctly in browser async flows
+ * ```
+ */
+export function registerBrowserContextManager() {
+    const contextManager = new StackContextManager();
+    contextManager.enable();
+    context.setGlobalContextManager(contextManager);
+}
+//# sourceMappingURL=instrumentations.js.map

package/dist-esm/browser/instrumentations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instrumentations.js","sourceRoot":"","sources":["../../src/browser/instrumentations.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAE7C,OAAO,EAAE,6BAA6B,EAAE,MAAM,iDAAiD,CAAC;AAChG,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAEnE;;;GAGG;AACH,MAAM,mBAAmB,GACvB,yDAAyD,CAAC;AAmB5D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,6BAA6B,CAC3C,MAAqC;IAErC,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC/D,MAAM,4BAA4B,GAAG,MAAM,EAAE,kBAAkB,IAAI,EAAE,CAAC;IAEtE,MAAM,gBAAgB,GAAsB;QAC1C,IAAI,6BAA6B,CAAC;YAChC,UAAU;YACV,4BAA4B;SAC7B,CAAC;KACH,CAAC;IAEF,wDAAwD;IACxD,yDAAyD;IACzD,IAAI,CAAC;QACH,MAAM,EAAE,oBAAoB,EAAE;QAC5B,iEAAiE;QACjE,OAAO,CAAC,sCAAsC,CAK7C,CAAC;QACJ,gBAAgB,CAAC,IAAI,CACnB,IAAI,oBAAoB,CAAC;YACvB,UAAU;YACV,4BAA4B;SAC7B,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,iFAAiF;IACnF,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,6BAA6B;IAC3C,MAAM,cAAc,GAAG,IAAI,mBAAmB,EAAE,CAAC;IACjD,cAAc,CAAC,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,uBAAuB,CAAC,cAAc,CAAC,CAAC;AAClD,CAAC"}

package/dist-esm/browser/logs.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Browser Log Provider
+ *
+ * Initializes the OTel LoggerProvider for browser contexts. Pairs with the
+ * EarlyConsoleBuffer to ensure pre-init console messages are captured and
+ * forwarded to the OTLP endpoint.
+ *
+ * This is the ONLY approved way to init log telemetry in browser contexts.
+ */
+import { type Logger } from "@opentelemetry/api-logs";
+export interface BrowserLogsConfig {
+    /** Full URL for the OTLP logs endpoint, e.g. "https://app.example.com/api/v1/logs" */
+    otlpUrl: string;
+    /** Logical service name recorded in every log record */
+    serviceName: string;
+}
+export interface BrowserLogsInstance {
+    /** Get a named Logger (uses serviceName when name is omitted) */
+    getLogger: (name?: string) => Logger;
+    /** Gracefully shut down the underlying LoggerProvider */
+    shutdown: () => Promise<void>;
+}
+/**
+ * Initialize the browser log provider.
+ *
+ * - Creates an OTLPLogExporter pointed at `config.otlpUrl`
+ * - Wraps it in a BatchLogRecordProcessor
+ * - Enables the EarlyConsoleBuffer so buffered pre-init console messages are
+ *   flushed to OpenTelemetry immediately
+ *
+ * Calling this more than once returns the existing instance with a warning.
+ *
+ * @example
+ * ```typescript
+ * import { initBrowserLogs } from '@superblocksteam/telemetry/browser';
+ *
+ * const logs = initBrowserLogs({
+ *   otlpUrl: 'https://app.superblocks.com/api/v1/logs',
+ *   serviceName: 'superblocks-ui',
+ * });
+ *
+ * const logger = logs.getLogger();
+ * logger.emit({ severityNumber: SeverityNumber.INFO, body: 'hello' });
+ * ```
+ */
+export declare function initBrowserLogs(config: BrowserLogsConfig): BrowserLogsInstance;
+/**
+ * Reset the browser log provider singleton (for testing only).
+ * @internal
+ */
+export declare function resetBrowserLogs(): void;
+//# sourceMappingURL=logs.d.ts.map

package/dist-esm/browser/logs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.d.ts","sourceRoot":"","sources":["../../src/browser/logs.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAUtD,MAAM,WAAW,iBAAiB;IAChC,sFAAsF;IACtF,OAAO,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,iEAAiE;IACjE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IACrC,yDAAyD;IACzD,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/B;AAcD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,iBAAiB,GACxB,mBAAmB,CA8BrB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC"}

package/dist-esm/browser/logs.js

@@ -0,0 +1,78 @@
+/**
+ * Browser Log Provider
+ *
+ * Initializes the OTel LoggerProvider for browser contexts. Pairs with the
+ * EarlyConsoleBuffer to ensure pre-init console messages are captured and
+ * forwarded to the OTLP endpoint.
+ *
+ * This is the ONLY approved way to init log telemetry in browser contexts.
+ */
+import { OTLPLogExporter } from "@opentelemetry/exporter-logs-otlp-http";
+import { BatchLogRecordProcessor, LoggerProvider, } from "@opentelemetry/sdk-logs";
+import EarlyConsoleBuffer from "./early-console-buffer.js";
+import { createSanitizingLogProcessor } from "./sanitizer.js";
+// Singleton
+let instance;
+function validateConfig(config) {
+    if (!config.serviceName?.trim()) {
+        throw new Error("[Telemetry] serviceName is required and cannot be empty");
+    }
+    if (!config.otlpUrl?.trim()) {
+        throw new Error("[Telemetry] otlpUrl is required for browser logs");
+    }
+}
+/**
+ * Initialize the browser log provider.
+ *
+ * - Creates an OTLPLogExporter pointed at `config.otlpUrl`
+ * - Wraps it in a BatchLogRecordProcessor
+ * - Enables the EarlyConsoleBuffer so buffered pre-init console messages are
+ *   flushed to OpenTelemetry immediately
+ *
+ * Calling this more than once returns the existing instance with a warning.
+ *
+ * @example
+ * ```typescript
+ * import { initBrowserLogs } from '@superblocksteam/telemetry/browser';
+ *
+ * const logs = initBrowserLogs({
+ *   otlpUrl: 'https://app.superblocks.com/api/v1/logs',
+ *   serviceName: 'superblocks-ui',
+ * });
+ *
+ * const logger = logs.getLogger();
+ * logger.emit({ severityNumber: SeverityNumber.INFO, body: 'hello' });
+ * ```
+ */
+export function initBrowserLogs(config) {
+    validateConfig(config);
+    if (instance) {
+        console.warn("[Telemetry] Browser log provider already initialized");
+        return instance;
+    }
+    const exporter = new OTLPLogExporter({ url: config.otlpUrl });
+    const sanitizer = createSanitizingLogProcessor();
+    const batchProcessor = new BatchLogRecordProcessor(exporter);
+    const provider = new LoggerProvider({
+        processors: [sanitizer, batchProcessor],
+    });
+    // Wire the EarlyConsoleBuffer so buffered pre-init logs are flushed now.
+    const otelLogger = provider.getLogger(config.serviceName, "1.0.0");
+    EarlyConsoleBuffer.getInstance().enableOpenTelemetry(otelLogger);
+    instance = {
+        getLogger: (name) => provider.getLogger(name ?? config.serviceName, "1.0.0"),
+        shutdown: async () => {
+            await provider.shutdown();
+            instance = undefined;
+        },
+    };
+    return instance;
+}
+/**
+ * Reset the browser log provider singleton (for testing only).
+ * @internal
+ */
+export function resetBrowserLogs() {
+    instance = undefined;
+}
+//# sourceMappingURL=logs.js.map

package/dist-esm/browser/logs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.js","sourceRoot":"","sources":["../../src/browser/logs.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AACzE,OAAO,EACL,uBAAuB,EACvB,cAAc,GACf,MAAM,yBAAyB,CAAC;AAEjC,OAAO,kBAAkB,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAgB9D,YAAY;AACZ,IAAI,QAAyC,CAAC;AAE9C,SAAS,cAAc,CAAC,MAAyB;IAC/C,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAyB;IAEzB,cAAc,CAAC,MAAM,CAAC,CAAC;IAEvB,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QACrE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,4BAA4B,EAAE,CAAC;IACjD,MAAM,cAAc,GAAG,IAAI,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAE7D,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC;QAClC,UAAU,EAAE,CAAC,SAAS,EAAE,cAAc,CAAC;KACxC,CAAC,CAAC;IAEH,yEAAyE;IACzE,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACnE,kBAAkB,CAAC,WAAW,EAAE,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAEjE,QAAQ,GAAG;QACT,SAAS,EAAE,CAAC,IAAa,EAAE,EAAE,CAC3B,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC;QACzD,QAAQ,EAAE,KAAK,IAAI,EAAE;YACnB,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC1B,QAAQ,GAAG,SAAS,CAAC;QACvB,CAAC;KACF,CAAC;IAEF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,QAAQ,GAAG,SAAS,CAAC;AACvB,CAAC"}

package/dist-esm/browser/metrics.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Browser Metrics Bootstrap
+ *
+ * Initializes a MeterProvider for browser contexts using OTLP HTTP export.
+ */
+import { type Meter } from "@opentelemetry/api";
+export interface BrowserMetricsInstance {
+    getMeter: (name?: string) => Meter;
+    shutdown: () => Promise<void>;
+}
+export interface BrowserMetricsConfig {
+    /** Full URL for metrics endpoint (e.g. "http://localhost:4318/v1/metrics") */
+    otlpUrl: string;
+    serviceName: string;
+}
+/**
+ * Initialize browser metrics with a MeterProvider that exports via OTLP HTTP.
+ *
+ * Uses CUMULATIVE aggregation temporality, matching the existing UI pattern.
+ *
+ * @param config - Browser metrics configuration
+ * @returns Browser metrics instance with getMeter and shutdown
+ */
+export declare function initBrowserMetrics(config: BrowserMetricsConfig): BrowserMetricsInstance;
+//# sourceMappingURL=metrics.d.ts.map

package/dist-esm/browser/metrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../../src/browser/metrics.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAW,KAAK,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAQzD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,KAAK,CAAC;IACnC,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,oBAAoB,GAC3B,sBAAsB,CAoBxB"}

package/dist-esm/browser/metrics.js

@@ -0,0 +1,34 @@
+/**
+ * Browser Metrics Bootstrap
+ *
+ * Initializes a MeterProvider for browser contexts using OTLP HTTP export.
+ */
+import { metrics } from "@opentelemetry/api";
+import { OTLPMetricExporter } from "@opentelemetry/exporter-metrics-otlp-http";
+import { AggregationTemporality, MeterProvider, PeriodicExportingMetricReader, } from "@opentelemetry/sdk-metrics";
+/**
+ * Initialize browser metrics with a MeterProvider that exports via OTLP HTTP.
+ *
+ * Uses CUMULATIVE aggregation temporality, matching the existing UI pattern.
+ *
+ * @param config - Browser metrics configuration
+ * @returns Browser metrics instance with getMeter and shutdown
+ */
+export function initBrowserMetrics(config) {
+    const exporter = new OTLPMetricExporter({
+        url: config.otlpUrl,
+        temporalityPreference: AggregationTemporality.CUMULATIVE,
+    });
+    const reader = new PeriodicExportingMetricReader({
+        exporter,
+    });
+    const provider = new MeterProvider({
+        readers: [reader],
+    });
+    metrics.setGlobalMeterProvider(provider);
+    return {
+        getMeter: (name) => provider.getMeter(name ?? config.serviceName),
+        shutdown: () => provider.shutdown(),
+    };
+}
+//# sourceMappingURL=metrics.js.map

package/dist-esm/browser/metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../src/browser/metrics.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAc,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EACL,sBAAsB,EACtB,aAAa,EACb,6BAA6B,GAC9B,MAAM,4BAA4B,CAAC;AAapC;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA4B;IAE5B,MAAM,QAAQ,GAAG,IAAI,kBAAkB,CAAC;QACtC,GAAG,EAAE,MAAM,CAAC,OAAO;QACnB,qBAAqB,EAAE,sBAAsB,CAAC,UAAU;KACzD,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,6BAA6B,CAAC;QAC/C,QAAQ;KACT,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC;QACjC,OAAO,EAAE,CAAC,MAAM,CAAC;KAClB,CAAC,CAAC;IAEH,OAAO,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAEzC,OAAO;QACL,QAAQ,EAAE,CAAC,IAAa,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,MAAM,CAAC,WAAW,CAAC;QAC1E,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE;KACpC,CAAC;AACJ,CAAC"}

package/dist-esm/browser/sanitizer.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Browser PII Sanitizing Processors
+ *
+ * Span and log processors that redact PII before export from the browser.
+ * Browser telemetry always runs in untrusted context, so aggressive sanitization
+ * is applied unconditionally.
+ *
+ * - SanitizingSpanProcessor: redacts sensitive span attributes and strips
+ *   sensitive query params from URL attributes.
+ * - SanitizingLogProcessor: redacts sensitive log record attributes and
+ *   replaces email-like patterns in log body text.
+ */
+import type { LogRecordProcessor } from "@opentelemetry/sdk-logs";
+import type { SpanProcessor } from "@opentelemetry/sdk-trace-base";
+export interface SanitizingConfig {
+    /** Additional attribute key patterns to redact */
+    additionalKeyPatterns?: RegExp[];
+    /** Additional URL param names to strip */
+    additionalSensitiveParams?: string[];
+}
+/**
+ * Create a SpanProcessor that redacts PII from span attributes before export.
+ *
+ * @param config - Optional configuration for additional key patterns / URL params
+ * @returns A SpanProcessor suitable for use in a browser WebTracerProvider
+ */
+export declare function createSanitizingSpanProcessor(config?: SanitizingConfig): SpanProcessor;
+/**
+ * Create a LogRecordProcessor that redacts PII from log records before export.
+ *
+ * @param config - Optional configuration for additional key patterns
+ * @returns A LogRecordProcessor suitable for use in a browser log provider
+ */
+export declare function createSanitizingLogProcessor(config?: SanitizingConfig): LogRecordProcessor;
+//# sourceMappingURL=sanitizer.d.ts.map

package/dist-esm/browser/sanitizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizer.d.ts","sourceRoot":"","sources":["../../src/browser/sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAEV,kBAAkB,EACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAGV,aAAa,EACd,MAAM,+BAA+B,CAAC;AAwDvC,MAAM,WAAW,gBAAgB;IAC/B,kDAAkD;IAClD,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,0CAA0C;IAC1C,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC;CACtC;AAsKD;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,MAAM,CAAC,EAAE,gBAAgB,GACxB,aAAa,CAEf;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,CAAC,EAAE,gBAAgB,GACxB,kBAAkB,CAEpB"}

package/dist-esm/browser/sanitizer.js

@@ -0,0 +1,207 @@
+/**
+ * Browser PII Sanitizing Processors
+ *
+ * Span and log processors that redact PII before export from the browser.
+ * Browser telemetry always runs in untrusted context, so aggressive sanitization
+ * is applied unconditionally.
+ *
+ * - SanitizingSpanProcessor: redacts sensitive span attributes and strips
+ *   sensitive query params from URL attributes.
+ * - SanitizingLogProcessor: redacts sensitive log record attributes and
+ *   replaces email-like patterns in log body text.
+ */
+// ============================================================================
+// Constants
+// ============================================================================
+const REDACTED = "[REDACTED]";
+const REDACTED_EMAIL = "[REDACTED_EMAIL]";
+/**
+ * Attribute key substrings that indicate sensitive values.
+ * Case-insensitive matching is applied.
+ */
+const SENSITIVE_KEY_SUBSTRINGS = [
+    "email",
+    "token",
+    "secret",
+    "password",
+    "authorization",
+    "cookie",
+    "credential",
+];
+/**
+ * Attribute key patterns (regex) for additional well-known sensitive keys
+ * not covered by simple substring matching (e.g. api_key, x-api-key).
+ */
+const SENSITIVE_KEY_PATTERNS = [
+    /api[_\-.]?key/i,
+    /x[_\-.]?api[_\-.]?key/i,
+];
+/**
+ * URL query parameter names that should be stripped.
+ * Exact (case-insensitive) match against param name.
+ */
+const SENSITIVE_URL_PARAMS = [
+    "token",
+    "key",
+    "secret",
+    "password",
+    "code",
+    "state",
+    "auth",
+];
+/** URL attribute keys that receive query-param sanitization. */
+const URL_ATTRIBUTE_KEYS = new Set(["http.url", "url.full"]);
+/** Regex matching email-like patterns in log body text. */
+const EMAIL_PATTERN = /[\w.+-]+@[\w.-]+(\.\w+)?/g;
+// ============================================================================
+// Helpers
+// ============================================================================
+/**
+ * Returns true if the attribute key is sensitive and its value should be
+ * replaced with [REDACTED].
+ */
+function isSensitiveKey(key, additionalPatterns) {
+    const lower = key.toLowerCase();
+    for (const substr of SENSITIVE_KEY_SUBSTRINGS) {
+        if (lower.includes(substr)) {
+            return true;
+        }
+    }
+    for (const pattern of SENSITIVE_KEY_PATTERNS) {
+        pattern.lastIndex = 0;
+        if (pattern.test(key)) {
+            return true;
+        }
+    }
+    for (const pattern of additionalPatterns) {
+        pattern.lastIndex = 0;
+        if (pattern.test(key)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Strips sensitive query parameters from a URL string.
+ * Sensitive param values are replaced with [REDACTED] (key is preserved).
+ */
+function sanitizeUrl(url, additionalParams) {
+    const qIdx = url.indexOf("?");
+    if (qIdx === -1) {
+        return url;
+    }
+    const base = url.slice(0, qIdx);
+    const query = url.slice(qIdx + 1);
+    const sensitiveSet = new Set([
+        ...SENSITIVE_URL_PARAMS.map((p) => p.toLowerCase()),
+        ...additionalParams.map((p) => p.toLowerCase()),
+    ]);
+    const sanitizedParts = query.split("&").map((part) => {
+        const eqIdx = part.indexOf("=");
+        if (eqIdx === -1) {
+            return part;
+        }
+        const rawParamName = part.slice(0, eqIdx);
+        let paramName;
+        try {
+            paramName = decodeURIComponent(rawParamName).toLowerCase();
+        }
+        catch {
+            paramName = rawParamName.toLowerCase();
+        }
+        if (sensitiveSet.has(paramName)) {
+            return `${part.slice(0, eqIdx)}=${REDACTED}`;
+        }
+        return part;
+    });
+    return `${base}?${sanitizedParts.join("&")}`;
+}
+/**
+ * Sanitizes span/log attributes in-place. Sensitive keys get value [REDACTED];
+ * URL attributes get query-param sanitization.
+ */
+function sanitizeAttributes(attributes, additionalKeyPatterns, additionalSensitiveParams) {
+    for (const key of Object.keys(attributes)) {
+        if (URL_ATTRIBUTE_KEYS.has(key)) {
+            const val = attributes[key];
+            if (typeof val === "string") {
+                attributes[key] = sanitizeUrl(val, additionalSensitiveParams);
+            }
+            // URL attributes are handled; skip further key-based check
+            continue;
+        }
+        if (isSensitiveKey(key, additionalKeyPatterns)) {
+            attributes[key] = REDACTED;
+        }
+    }
+}
+// ============================================================================
+// SanitizingSpanProcessor
+// ============================================================================
+class SanitizingSpanProcessor {
+    additionalKeyPatterns;
+    additionalSensitiveParams;
+    constructor(config = {}) {
+        this.additionalKeyPatterns = config.additionalKeyPatterns ?? [];
+        this.additionalSensitiveParams = config.additionalSensitiveParams ?? [];
+    }
+    onStart(_span, _parentContext) {
+        // Nothing to do at start; sanitization occurs at end when attributes are final.
+    }
+    onEnd(span) {
+        // ReadableSpan.attributes is typed as Attributes (readonly in API), but
+        // in practice the SDK implementation uses a mutable object. We cast to
+        // allow in-place mutation, which avoids allocating a new span wrapper.
+        const attrs = span.attributes;
+        sanitizeAttributes(attrs, this.additionalKeyPatterns, this.additionalSensitiveParams);
+    }
+    async shutdown() { }
+    async forceFlush() { }
+}
+// ============================================================================
+// SanitizingLogProcessor
+// ============================================================================
+class BrowserSanitizingLogProcessor {
+    additionalKeyPatterns;
+    constructor(config = {}) {
+        this.additionalKeyPatterns = config.additionalKeyPatterns ?? [];
+    }
+    onEmit(record, _context) {
+        // Sanitize attributes in-place
+        const attrs = record.attributes;
+        for (const key of Object.keys(attrs)) {
+            if (isSensitiveKey(key, this.additionalKeyPatterns)) {
+                attrs[key] = REDACTED;
+            }
+        }
+        // Redact email-like patterns in string body
+        if (typeof record.body === "string") {
+            EMAIL_PATTERN.lastIndex = 0;
+            record.body = record.body.replace(EMAIL_PATTERN, REDACTED_EMAIL);
+        }
+    }
+    async shutdown() { }
+    async forceFlush() { }
+}
+// ============================================================================
+// Factory functions
+// ============================================================================
+/**
+ * Create a SpanProcessor that redacts PII from span attributes before export.
+ *
+ * @param config - Optional configuration for additional key patterns / URL params
+ * @returns A SpanProcessor suitable for use in a browser WebTracerProvider
+ */
+export function createSanitizingSpanProcessor(config) {
+    return new SanitizingSpanProcessor(config);
+}
+/**
+ * Create a LogRecordProcessor that redacts PII from log records before export.
+ *
+ * @param config - Optional configuration for additional key patterns
+ * @returns A LogRecordProcessor suitable for use in a browser log provider
+ */
+export function createSanitizingLogProcessor(config) {
+    return new BrowserSanitizingLogProcessor(config);
+}
+//# sourceMappingURL=sanitizer.js.map

package/dist-esm/browser/sanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizer.js","sourceRoot":"","sources":["../../src/browser/sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAaH,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,cAAc,GAAG,kBAAkB,CAAC;AAE1C;;;GAGG;AACH,MAAM,wBAAwB,GAAG;IAC/B,OAAO;IACP,OAAO;IACP,QAAQ;IACR,UAAU;IACV,eAAe;IACf,QAAQ;IACR,YAAY;CACb,CAAC;AAEF;;;GAGG;AACH,MAAM,sBAAsB,GAAa;IACvC,gBAAgB;IAChB,wBAAwB;CACzB,CAAC;AAEF;;;GAGG;AACH,MAAM,oBAAoB,GAAG;IAC3B,OAAO;IACP,KAAK;IACL,QAAQ;IACR,UAAU;IACV,MAAM;IACN,OAAO;IACP,MAAM;CACP,CAAC;AAEF,gEAAgE;AAChE,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;AAE7D,2DAA2D;AAC3D,MAAM,aAAa,GAAG,2BAA2B,CAAC;AAalD,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E;;;GAGG;AACH,SAAS,cAAc,CAAC,GAAW,EAAE,kBAA4B;IAC/D,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,KAAK,MAAM,MAAM,IAAI,wBAAwB,EAAE,CAAC;QAC9C,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;QAC7C,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,GAAW,EAAE,gBAA0B;IAC1D,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;QAChB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IAElC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;QAC3B,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;KAChD,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;QACzC,CAAC;QACD,IAAI,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CACzB,UAAmC,EACnC,qBAA+B,EAC/B,yBAAmC;IAEnC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,UAAU,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC;YAChE,CAAC;YACD,2DAA2D;YAC3D,SAAS;QACX,CAAC;QACD,IAAI,cAAc,CAAC,GAAG,EAAE,qBAAqB,CAAC,EAAE,CAAC;YAC/C,UAAU,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;QAC7B,CAAC;IACH,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E,MAAM,uBAAuB;IACV,qBAAqB,CAAW;IAChC,yBAAyB,CAAW;IAErD,YAAY,SAA2B,EAAE;QACvC,IAAI,CAAC,qBAAqB,GAAG,MAAM,CAAC,qBAAqB,IAAI,EAAE,CAAC;QAChE,IAAI,CAAC,yBAAyB,GAAG,MAAM,CAAC,yBAAyB,IAAI,EAAE,CAAC;IAC1E,CAAC;IAED,OAAO,CAAC,KAAW,EAAE,cAAuB;QAC1C,gFAAgF;IAClF,CAAC;IAED,KAAK,CAAC,IAAkB;QACtB,wEAAwE;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,MAAM,KAAK,GAAG,IAAI,CAAC,UAAqC,CAAC;QACzD,kBAAkB,CAChB,KAAK,EACL,IAAI,CAAC,qBAAqB,EAC1B,IAAI,CAAC,yBAAyB,CAC/B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,KAAmB,CAAC;IAClC,KAAK,CAAC,UAAU,KAAmB,CAAC;CACrC;AAED,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAE/E,MAAM,6BAA6B;IAChB,qBAAqB,CAAW;IAEjD,YAAY,SAA2B,EAAE;QACvC,IAAI,CAAC,qBAAqB,GAAG,MAAM,CAAC,qBAAqB,IAAI,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,CAAC,MAAyB,EAAE,QAAiB;QACjD,+BAA+B;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,UAAqC,CAAC;QAC3D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,IAAI,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBACpD,KAAK,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;YACxB,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,aAAa,CAAC,SAAS,GAAG,CAAC,CAAC;YAC3B,MAA4B,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CACtD,aAAa,EACb,cAAc,CACf,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,KAAmB,CAAC;IAClC,KAAK,CAAC,UAAU,KAAmB,CAAC;CACrC;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,MAAyB;IAEzB,OAAO,IAAI,uBAAuB,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,MAAyB;IAEzB,OAAO,IAAI,6BAA6B,CAAC,MAAM,CAAC,CAAC;AACnD,CAAC"}

package/dist-esm/browser/traced-socket.d.ts

@@ -0,0 +1,102 @@
+/**
+ * Browser-side TracedSocket for WebSocket tracing.
+ *
+ * Wraps a WebSocket client (or any WebSocket-like object) and adds
+ * OpenTelemetry tracing. Designed to speak the same envelope protocol as the
+ * server-side TracedSocket so that distributed traces link correctly across
+ * the browser–server boundary.
+ *
+ * Envelope format (matches @superblocksteam/shared SocketRequest):
+ *   outbound: { request: { method, id, traceparent?, tracestate?, ... } }
+ *   inbound:  { request: { method, id, traceparent?, tracestate?, ... } }
+ *             { response: { id, ... } }
+ *
+ * Propagation uses the W3C Trace Context propagator registered globally by
+ * initBrowserTelemetry() (see browser/init.ts). The carrier is the
+ * `request` object itself — the same convention as the server side.
+ */
+import { type Tracer } from "@opentelemetry/api";
+import type { SocketMessageEnvelope } from "../common/traced-socket-types.js";
+/** Minimal browser WebSocket surface needed by BrowserTracedSocket. */
+export interface WebSocketLike {
+    readonly readyState: number;
+    close(code?: number, reason?: string): void;
+    send(data: string | ArrayBuffer): void;
+    addEventListener(type: string, listener: (event: unknown) => void): void;
+    removeEventListener(type: string, listener: (event: unknown) => void): void;
+}
+/** Configuration for BrowserTracedSocket. */
+export interface BrowserTracedSocketConfig {
+    /**
+     * Tracer instance. When omitted the global tracer named
+     * "superblocks-ws" is used (requires initBrowserTelemetry() first).
+     */
+    tracer?: Tracer;
+}
+/**
+ * BrowserTracedSocket wraps a WebSocket and provides:
+ *
+ * 1. `decorateOutbound(msg)` — call this before sending any message.
+ *    Injects traceparent/tracestate into msg.request so the server can
+ *    extract the browser's active context.
+ *
+ * 2. `traceOutboundCall(method)` — wraps a client-initiated RPC call in a
+ *    CLIENT span.  Returns the span's end function.
+ *
+ * 3. `handleInbound(msg)` — call this when a message arrives from the server.
+ *    Extracts the server's trace context and creates a SERVER span so that
+ *    server-initiated pushes appear in the browser's trace.
+ *
+ * 4. `recordReconnect({ attempt })` — call this from the reconnect loop to
+ *    create a ws.reconnect span.
+ *
+ * Lifecycle spans (ws.connect, ws.disconnect) are attached automatically via
+ * WebSocket open/close event listeners.
+ */
+export declare class BrowserTracedSocket {
+    private readonly ws;
+    private readonly tracer;
+    private connectStartTime;
+    constructor(ws: WebSocketLike, config: BrowserTracedSocketConfig);
+    private readonly onOpen;
+    private readonly onClose;
+    /**
+     * Records a ws.reconnect span.  Call this from the reconnect loop just
+     * before opening a new WebSocket, passing the attempt counter so it shows
+     * up as a span attribute.
+     */
+    recordReconnect({ attempt }: {
+        attempt: number;
+    }): void;
+    /**
+     * Injects W3C trace context into the message's request envelope.
+     * Call this on every outbound message before handing it to the transport.
+     *
+     * Mirrors the server-side TracedSocket.decorateToSend() behaviour so that
+     * the server can extract the browser's active context via propagation.extract.
+     */
+    decorateOutbound(message: SocketMessageEnvelope): SocketMessageEnvelope;
+    /**
+     * Creates a CLIENT span for a browser-initiated RPC call.
+     * Returns the span so the caller can end it after the response resolves.
+     *
+     * Usage:
+     * ```typescript
+     * const span = socket.traceOutboundCall("editor.runApi");
+     * const result = await socket.request("editor.runApi", params);
+     * span.end();
+     * ```
+     */
+    traceOutboundCall(method: string): import("@opentelemetry/api").Span;
+    /**
+     * Handles an inbound message from the server.
+     * - Extracts the server's trace context from the request envelope.
+     * - Creates a SERVER span as a child of the server's trace so that
+     *   server-initiated pushes appear in the browser's distributed trace.
+     * - Response-only messages (no request field) are ignored.
+     */
+    handleInbound(message: SocketMessageEnvelope): void;
+    /** Remove lifecycle listeners. Call when tearing down the socket. */
+    dispose(): void;
+}
+//# sourceMappingURL=traced-socket.d.ts.map

package/dist-esm/browser/traced-socket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"traced-socket.d.ts","sourceRoot":"","sources":["../../src/browser/traced-socket.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAML,KAAK,MAAM,EACZ,MAAM,oBAAoB,CAAC;AAM5B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAE9E,uEAAuE;AACvE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;IACvC,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI,CAAC;IACzE,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI,CAAC;CAC7E;AAED,6CAA6C;AAC7C,MAAM,WAAW,yBAAyB;IACxC;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAOD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,mBAAmB;IAK5B,OAAO,CAAC,QAAQ,CAAC,EAAE;IAJrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,gBAAgB,CAAqB;gBAG1B,EAAE,EAAE,aAAa,EAClC,MAAM,EAAE,yBAAyB;IAYnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAoBrB;IAEF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAmBtB;IAEF;;;;OAIG;IACI,eAAe,CAAC,EAAE,OAAO,EAAE,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAoB9D;;;;;;OAMG;IACI,gBAAgB,CACrB,OAAO,EAAE,qBAAqB,GAC7B,qBAAqB;IAexB;;;;;;;;;;OAUG;IACI,iBAAiB,CAAC,MAAM,EAAE,MAAM;IAkBvC;;;;;;OAMG;IACI,aAAa,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI;IAgC1D,qEAAqE;IAC9D,OAAO,IAAI,IAAI;CAIvB"}