@superblocksteam/telemetry 2.0.173-next.4 → 2.0.174

package/dist-esm/common/contracts/tier2-traces.js

@@ -0,0 +1,725 @@
+/**
+ * Tier 2 Traces Contract (v0.6.0) — TypeScript mirror.
+ *
+ * THIS FILE IS A MIRROR, NOT THE SOURCE OF TRUTH. The canonical Tier 2 traces
+ * contract lives in the `engineering` repo:
+ *   - engineering/projects/o11y-refactor/contracts/tier2-traces.v0.6.0.json  (canonical contract)
+ *   - engineering/projects/o11y-refactor/contracts/README.md                 (rationale, Versioning Policy, Review Checklist)
+ * Org-wide telemetry naming and the Tier 2 privacy boundary are documented in the
+ * `workspace` repo: workspace/docs/naming-conventions.md and the `observability`
+ * skill (.agents/skills/observability/SKILL.md).
+ *
+ * CHANGING TIER 2 BEHAVIOR (forbidden / hashed / dropped / allowed attributes):
+ *   1. Update the canonical JSON in `engineering` FIRST, as a NEW version, per the
+ *      README Versioning Policy (breaking = MAJOR, additive = MINOR, docs = PATCH).
+ *   2. Propagate the SAME change to every mirror so they stay byte-for-byte aligned:
+ *        - this file                                                   (TS SDK sanitizer / ESLint / guardrails)
+ *        - orchestrator/pkg/telemetry/forbidden_attributes.go          (Go SDK maps)
+ *        - orchestrator/pkg/telemetry/contracts/tier2-traces.json      (Go embedded; regenerate via
+ *          orchestrator/scripts/sync-ts-telemetry-contracts.sh — do not hand-edit)
+ * Editing this file alone silently drifts from the contract and the other SDKs, which
+ * lets a re-cased or newly added attribute bypass the Tier 2 privacy boundary. Cross-surface
+ * parity is enforced by the orchestrator Go tests (TestForbiddenAttributesMatchTSContract,
+ * TestDroppedAttributesMatchTS).
+ *
+ * Used by: trace-sanitizer (which spans/attributes to export), lint/forbidden-attributes
+ * (ESLint), guardrails (dev-time warnings), and Collector config generation.
+ * "request handler *" is a local extension for Express instrumentation (not in the JSON).
+ */
+import { DeploymentTypeEnum } from "@superblocksteam/shared";
+export function getAttributeName(attr) {
+    return typeof attr === "string" ? attr : attr.name;
+}
+/**
+ * OTEL GenAI semantic conventions (gen_ai.*) are preferred; llm.* attribute names are legacy.
+ * Span names: gen_ai.request / gen_ai.tool_call / gen_ai.stream* (vite-plugin-file-sync LLMObsOtelExporter);
+ * llm.request / llm.tool_call / ai.streamText* are legacy aliases for the same shapes.
+ */
+const GEN_AI_REQUEST_LIKE_ATTRIBUTES = [
+    { name: "error", type: "boolean" },
+    { name: "gen_ai.client.duration_ms", type: "number" },
+    { name: "gen_ai.client.time_to_first_token", type: "number" },
+    {
+        name: "gen_ai.error.category",
+        allowedValues: [
+            "aborted",
+            "api_error",
+            "auth_error",
+            "content_filter",
+            "context_length",
+            "none",
+            "network",
+            "quota",
+            "rate_limit",
+            "timeout",
+            "unknown",
+            "validation_error",
+        ],
+    },
+    {
+        name: "gen_ai.operation.name",
+        allowedValues: [
+            "chat",
+            "embeddings",
+            "execute_tool",
+            "generate_content",
+            "invoke_agent",
+            "text_completion",
+        ],
+    },
+    {
+        name: "gen_ai.provider.name",
+        allowedValues: [
+            "anthropic",
+            "aws.bedrock",
+            "azure.ai.inference",
+            "azure.ai.openai",
+            "cohere",
+            "deepseek",
+            "gcp.gemini",
+            "gcp.vertex_ai",
+            "groq",
+            "mistral_ai",
+            "openai",
+        ],
+    },
+    { name: "gen_ai.request.model", maxCardinality: 50 },
+    {
+        name: "gen_ai.request.status",
+        allowedValues: ["error", "success"],
+    },
+    {
+        name: "gen_ai.response.finish_reasons",
+        allowedValues: ["content_filter", "error", "length", "stop", "tool_calls"],
+    },
+    { name: "gen_ai.response.model", maxCardinality: 50 },
+    {
+        name: "gen_ai.system",
+        allowedValues: [
+            "anthropic",
+            "aws.bedrock",
+            "azure.ai.inference",
+            "azure.ai.openai",
+            "cohere",
+            "deepseek",
+            "gcp.gemini",
+            "gcp.vertex_ai",
+            "groq",
+            "mistral_ai",
+            "openai",
+        ],
+    },
+    { name: "gen_ai.usage.cached_tokens", type: "number" },
+    { name: "gen_ai.usage.input_tokens", type: "number" },
+    { name: "gen_ai.usage.output_tokens", type: "number" },
+    { name: "gen_ai.usage.reasoning_tokens", type: "number" },
+    { name: "gen_ai.usage.total_tokens", type: "number" },
+    { name: "llm.cached_tokens", type: "number" },
+    { name: "llm.cost_usd", type: "number" },
+    { name: "llm.duration_ms", type: "number" },
+    {
+        name: "llm.error_category",
+        allowedValues: [
+            "aborted",
+            "api_error",
+            "auth_error",
+            "content_filter",
+            "context_length",
+            "none",
+            "network",
+            "quota",
+            "rate_limit",
+            "timeout",
+            "unknown",
+            "validation_error",
+        ],
+    },
+    {
+        name: "llm.finish_reason",
+        allowedValues: ["content_filter", "error", "length", "stop", "tool_calls"],
+    },
+    { name: "llm.input_tokens", type: "number" },
+    { name: "llm.model", maxCardinality: 50 },
+    { name: "llm.output_tokens", type: "number" },
+    {
+        name: "llm.provider",
+        allowedValues: [
+            "anthropic",
+            "azure",
+            "bedrock",
+            "cohere",
+            "google",
+            "mistral",
+            "openai",
+        ],
+    },
+    { name: "llm.reasoning_tokens", type: "number" },
+    {
+        name: "llm.status",
+        allowedValues: ["error", "success"],
+    },
+    { name: "llm.time_to_first_token_ms", type: "number" },
+    { name: "llm.total_tokens", type: "number" },
+    "otel.status_code",
+    {
+        name: "superblocks.tier_hint",
+        allowedValues: ["include_tier3", "skip_export", "tier1_only"],
+    },
+];
+const GEN_AI_TOOL_CALL_ATTRIBUTES = [
+    ...GEN_AI_REQUEST_LIKE_ATTRIBUTES,
+    { name: "tool.duration_ms", type: "number" },
+    {
+        name: "tool.error_category",
+        allowedValues: [
+            "execution_error",
+            "none",
+            "not_found",
+            "permission_denied",
+            "timeout",
+            "unknown",
+            "validation_error",
+        ],
+    },
+    { name: "tool.name", maxCardinality: 50 },
+    {
+        name: "tool.status",
+        allowedValues: ["error", "success"],
+    },
+];
+const GEN_AI_STREAM_STEP_ATTRIBUTES = [
+    ...GEN_AI_REQUEST_LIKE_ATTRIBUTES,
+    { name: "step.number", type: "number" },
+    {
+        name: "step.type",
+        allowedValues: ["reasoning", "text", "thinking", "tool_call"],
+    },
+];
+/**
+ * Span patterns from tier2-traces.v0.4.0.json.
+ * Suffix wildcard only: "HTTP POST *" matches "HTTP POST /api/..." or "POST /api/...".
+ */
+export const TIER_2_TRACE_CONTRACT = [
+    {
+        name: "HTTP GET *",
+        allowedAttributes: [
+            "http.method",
+            { name: "http.route", maxCardinality: 150 },
+            "http.status_code",
+            "http.response_content_length",
+            { name: "http.flavor", allowedValues: ["1.0", "1.1", "2.0", "3.0"] },
+        ],
+    },
+    {
+        name: "HTTP POST *",
+        allowedAttributes: [
+            "http.method",
+            { name: "http.route", maxCardinality: 150 },
+            "http.status_code",
+            "http.response_content_length",
+            "http.request_content_length",
+            { name: "http.flavor", allowedValues: ["1.0", "1.1", "2.0", "3.0"] },
+        ],
+    },
+    {
+        name: "HTTP PUT *",
+        allowedAttributes: [
+            "http.method",
+            { name: "http.route", maxCardinality: 150 },
+            "http.status_code",
+            "http.response_content_length",
+            "http.request_content_length",
+        ],
+    },
+    {
+        name: "HTTP DELETE *",
+        allowedAttributes: [
+            "http.method",
+            { name: "http.route", maxCardinality: 150 },
+            "http.status_code",
+            "http.response_content_length",
+        ],
+    },
+    {
+        name: "HTTP PATCH *",
+        allowedAttributes: [
+            "http.method",
+            { name: "http.route", maxCardinality: 150 },
+            "http.status_code",
+            "http.response_content_length",
+            "http.request_content_length",
+        ],
+    },
+    {
+        name: "request handler *",
+        allowedAttributes: [
+            "http.method",
+            { name: "http.route", maxCardinality: 150 },
+            "http.status_code",
+            "http.response_content_length",
+            "http.request_content_length",
+            { name: "http.flavor", allowedValues: ["1.0", "1.1", "2.0", "3.0"] },
+            "express.route",
+        ],
+    },
+    {
+        name: "WS SERVER *",
+        allowedAttributes: [
+            { name: "messaging.system", allowedValues: ["ws", "websocket"] },
+            { name: "messaging.destination_kind", allowedValues: ["websocket"] },
+            { name: "ws.handler", maxCardinality: 80 },
+        ],
+    },
+    {
+        name: "WS CLIENT *",
+        allowedAttributes: [
+            { name: "messaging.system", allowedValues: ["ws", "websocket"] },
+        ],
+    },
+    {
+        name: "WS HANDLER *",
+        allowedAttributes: [
+            { name: "messaging.system", allowedValues: ["ws", "websocket"] },
+            { name: "messaging.destination_kind", allowedValues: ["websocket"] },
+        ],
+    },
+    {
+        name: "api.execute",
+        alwaysSample: true,
+        allowedAttributes: [
+            { name: "view-mode", allowedValues: ["edit", "deployed", "preview"] },
+            {
+                name: "api.status",
+                allowedValues: ["success", "error", "timeout", "cancelled"],
+            },
+            { name: "api.type", allowedValues: ["api", "workflow", "scheduled_job"] },
+            { name: "api.step_count", type: "number" },
+            { name: "api.duration_ms", type: "number" },
+            { name: "remote", allowedValues: ["true", "false"] },
+            "otel.status_code",
+            "otel.status_description",
+        ],
+    },
+    {
+        name: "api.step",
+        allowedAttributes: [
+            { name: "step.type", maxCardinality: 50 },
+            { name: "step.status", allowedValues: ["success", "error"] },
+            { name: "step.duration_ms", type: "number" },
+            { name: "step.retry_count", type: "number" },
+            "otel.status_code",
+        ],
+    },
+    {
+        name: "api.block.*",
+        allowedAttributes: [
+            { name: "block.type", maxCardinality: 30 },
+            { name: "block.status", allowedValues: ["success", "error"] },
+        ],
+    },
+    {
+        name: "plugin.*",
+        allowedAttributes: [
+            { name: "plugin.name", maxCardinality: 80 },
+            {
+                name: "plugin.event",
+                allowedValues: ["execute", "test", "metadata", "pre_delete"],
+            },
+            { name: "plugin.result", allowedValues: ["succeeded", "failed"] },
+            { name: "plugin.duration_ms", type: "number" },
+            "otel.status_code",
+        ],
+    },
+    {
+        name: "db.*",
+        allowedAttributes: [
+            {
+                name: "db.system",
+                allowedValues: [
+                    "postgresql",
+                    "mysql",
+                    "mssql",
+                    "mongodb",
+                    "redis",
+                    "snowflake",
+                    "bigquery",
+                    "databricks",
+                    "dynamodb",
+                    "sqlite",
+                ],
+            },
+            {
+                name: "db.operation",
+                allowedValues: ["select", "insert", "update", "delete", "other"],
+            },
+            { name: "db.name", maxCardinality: 50 },
+            "otel.status_code",
+        ],
+    },
+    {
+        name: "gen_ai.request",
+        description: "LLM API request (OTEL GenAI span name). Emitted by vite-plugin-file-sync LLMObsOtelExporter.",
+        allowedAttributes: GEN_AI_REQUEST_LIKE_ATTRIBUTES,
+    },
+    {
+        name: "gen_ai.stream",
+        description: "Streaming LLM session (OTEL GenAI span name). Emitted by LLMObsOtelExporter for ai.streamText.",
+        allowedAttributes: GEN_AI_REQUEST_LIKE_ATTRIBUTES,
+    },
+    {
+        name: "gen_ai.stream.step",
+        description: "Streaming LLM step (OTEL GenAI span name). Emitted by LLMObsOtelExporter for ai.streamText.step.",
+        allowedAttributes: GEN_AI_STREAM_STEP_ATTRIBUTES,
+    },
+    {
+        name: "gen_ai.tool_call",
+        description: "Tool/function call within GenAI workflow (OTEL GenAI span name). Emitted by LLMObsOtelExporter.",
+        allowedAttributes: GEN_AI_TOOL_CALL_ATTRIBUTES,
+    },
+    {
+        name: "llm.request",
+        description: "Legacy span name; prefer gen_ai.request.",
+        allowedAttributes: GEN_AI_REQUEST_LIKE_ATTRIBUTES,
+    },
+    {
+        name: "llm.tool_call",
+        description: "Legacy span name; prefer gen_ai.tool_call.",
+        allowedAttributes: GEN_AI_TOOL_CALL_ATTRIBUTES,
+    },
+    {
+        name: "ai.streamText",
+        description: "Legacy span name; prefer gen_ai.stream.",
+        allowedAttributes: [
+            "llm.model",
+            "llm.provider",
+            { name: "llm.step_count", type: "number" },
+            { name: "llm.total_tokens", type: "number" },
+        ],
+    },
+    {
+        name: "ai.streamText.step",
+        description: "Legacy span name; prefer gen_ai.stream.step.",
+        allowedAttributes: [
+            { name: "step.number", type: "number" },
+            {
+                name: "step.type",
+                allowedValues: ["reasoning", "text", "thinking", "tool_call"],
+            },
+        ],
+    },
+    {
+        name: "clark.session",
+        allowedAttributes: [
+            "session.duration_ms",
+            "session.step_count",
+            "session.llm_call_count",
+            "session.tool_call_count",
+            "session.total_tokens",
+            {
+                name: "session.outcome",
+                allowedValues: ["success", "error", "aborted"],
+            },
+        ],
+    },
+    {
+        name: "clark.debug_loop",
+        allowedAttributes: [
+            { name: "loop.iteration", type: "number" },
+            {
+                name: "loop.reason",
+                allowedValues: ["error_recovery", "validation_failure", "retry"],
+            },
+            { name: "loop.duration_ms", type: "number" },
+        ],
+    },
+    {
+        name: "grpc.*",
+        allowedAttributes: [
+            { name: "rpc.system", allowedValues: ["grpc"] },
+            { name: "rpc.service", maxCardinality: 50 },
+            { name: "rpc.method", maxCardinality: 100 },
+            { name: "rpc.grpc.status_code", type: "number" },
+        ],
+    },
+    {
+        name: "kafka.*",
+        allowedAttributes: [
+            { name: "messaging.system", allowedValues: ["kafka"] },
+            { name: "messaging.destination", maxCardinality: 50 },
+            {
+                name: "messaging.operation",
+                allowedValues: ["publish", "receive", "process"],
+            },
+        ],
+    },
+    {
+        name: "redis.*",
+        allowedAttributes: [
+            { name: "db.system", allowedValues: ["redis"] },
+            { name: "db.operation", maxCardinality: 30 },
+        ],
+    },
+    {
+        name: "fetch",
+        allowedAttributes: [
+            "http.method",
+            "http.status_code",
+            { name: "http.host", maxCardinality: 200 },
+        ],
+    },
+    {
+        name: "schedule.*",
+        allowedAttributes: [
+            {
+                name: "schedule.type",
+                allowedValues: ["cron", "interval", "one_time"],
+            },
+            {
+                name: "schedule.status",
+                allowedValues: ["success", "error", "skipped"],
+            },
+        ],
+    },
+    // SABS app-builder spans (v0.3.0) + bundle download span (v0.4.0)
+    {
+        name: "sabs.build",
+        allowedAttributes: [
+            { name: "build.id", maxCardinality: 10000 },
+            {
+                name: "build.outcome",
+                allowedValues: ["success", "failed"],
+            },
+            "otel.status_code",
+            "otel.status_description",
+        ],
+    },
+    {
+        name: "sabs.build.*",
+        allowedAttributes: [
+            { name: "build.id", maxCardinality: 10000 },
+            "otel.status_code",
+            "otel.status_description",
+        ],
+    },
+    // AGENT-2723: aggregate download span replacing ~511 per-file RPC spans
+    {
+        name: "sabs.bundle.download",
+        description: "Aggregate span for the full SABS bundle download. Replaces per-file spans; per-file metrics emitted as sabs.bundle.files_downloaded, sabs.bundle.bytes_downloaded, sabs.bundle.file_fetch_ms.",
+        allowedAttributes: [
+            { name: "files.count", type: "number" },
+            { name: "bytes.sum", type: "number" },
+            { name: "slowest.ms", type: "number" },
+            "otel.status_code",
+            "otel.status_description",
+        ],
+    },
+];
+/**
+ * Cloud trace contract: match-all span name ("*") so no spans are dropped by name.
+ * Attribute allowlist is not used when attributeAllowlistPassthrough is true.
+ */
+export const CLOUD_TRACE_CONTRACT = [
+    { name: "*", allowedAttributes: [] },
+];
+/**
+ * Returns the trace contract (span definitions) for the given deployment type.
+ * Cloud: match-all so no traces are dropped by span name.
+ * Cloud-prem: Tier 2 contract (named spans only).
+ */
+export function getTraceContract(deploymentType) {
+    switch (deploymentType) {
+        case DeploymentTypeEnum.CLOUD:
+            return CLOUD_TRACE_CONTRACT;
+        case DeploymentTypeEnum.CLOUD_PREM:
+        default:
+            return TIER_2_TRACE_CONTRACT;
+    }
+}
+// ---------------------------------------------------------------------------
+// Forbidden / hashed / dropped attribute names (v0.6.0 JSON)
+// ---------------------------------------------------------------------------
+/** Forbidden in Tier 2 (forbiddenAttributes in contract). Collector strips these entirely. */
+export const FORBIDDEN_TIER_2_SPAN_ATTRIBUTES = [
+    "llmobs.input",
+    "llmobs.output",
+    "prompt",
+    "code",
+    "code.path",
+    "code.function.name",
+    "tool_input",
+    "tool_output",
+    "tool.input",
+    "tool.output",
+    "file_path",
+    "file_content",
+    "file.path",
+    "file.content",
+    "db.statement",
+    "db.query.text",
+    "db.query_text",
+    "http.request.body",
+    "http.response.body",
+    "url.full",
+    "url.query",
+    "http.url",
+    "http.target",
+    "user-email",
+    "user.email",
+    "user_email",
+    "enduser.email",
+    // v0.5.0 (AGENT-3255): opaque product-resource identifiers are NOT forbidden.
+    // application-id/_id, api-id/_id, resource-id/_id, integration-id/_id,
+    // commit-id/_id, profile-id/_id are randomly generated UUIDv4 handles for
+    // non-person resources (no embedded PII or customer content), so they pass
+    // through. The per-user identifier (user-id/user.id/user_id) is hashed instead
+    // of forbidden — see HASHED_TIER_2_SPAN_ATTRIBUTES below. Resource NAMES
+    // (api-name, resource-name) and widget-type stay forbidden as customer content.
+    "api-name",
+    "api_name",
+    "api.name",
+    "resource-name",
+    "resource_name",
+    "resource.name",
+    "widget-type",
+    "widget_type",
+    "widget.type",
+    "branch",
+    "error.stack",
+    "exception.stacktrace",
+    "auth_token",
+    "api_key",
+    "api-key",
+    "api.key",
+    "authorization",
+    "cookie",
+    "x-api-key",
+    // APPS-4190: npm registry tokens. Bucketing in sanitize-npm-attributes.ts
+    // is the primary defense; this list is the lint/runtime backstop so a
+    // future emitter that names an attribute after the token is stripped.
+    "npm.token",
+    "npm_token",
+    "npm-token",
+    "npm.registry.token",
+    "npm.registry_token",
+    "registry_token",
+    "registry-token",
+    "registry.token",
+];
+/**
+ * Hashed (keyed HMAC) for Tier 2 (hashedAttributes in contract).
+ * v0.5.0 (AGENT-3255): per-user / per-session identifiers single out a natural
+ * person (pseudonymous personal data even as a UUID), so pseudonymize rather than
+ * forbid. This is the full contract hashedAttributes set: enduser.id, session.id,
+ * and the user-id variants. organization-id is intentionally NOT hashed (single
+ * customer org per cloud-prem deployment → pass-through).
+ * NOTE: with no hashConfig, TraceSanitizer.hashValue() emits "[redacted]", so
+ * these fail closed and never flow raw until an HMAC key is provisioned.
+ */
+export const HASHED_TIER_2_SPAN_ATTRIBUTES = [
+    "enduser-id",
+    "enduser.id",
+    "enduser_id",
+    "session-id",
+    "session.id",
+    "session_id",
+    "user-id",
+    "user.id",
+    "user_id",
+];
+/**
+ * Dropped — high cardinality, no hash value (droppedAttributes in contract).
+ * The contract's dropped set also lists correlation/request/trace/execution ids,
+ * but those are dropped at the collector (and pass through at the SDK in
+ * pass-through mode); the SDK only hard-drops binding keys. v0.6.0 adds the
+ * dotted/kebab spellings of binding_keys for casing parity.
+ */
+export const DROPPED_HIGH_CARDINALITY_ATTRIBUTES = [
+    "binding-keys",
+    "binding.keys",
+    "binding_keys",
+];
+// ---------------------------------------------------------------------------
+// Set views (for lint, guardrails: fast .has() lookup)
+// ---------------------------------------------------------------------------
+export const TIER2_FORBIDDEN_ATTRIBUTES = new Set(FORBIDDEN_TIER_2_SPAN_ATTRIBUTES);
+export const TIER2_HASHED_ATTRIBUTES = new Set(HASHED_TIER_2_SPAN_ATTRIBUTES);
+export const TIER2_DROPPED_ATTRIBUTES = new Set(DROPPED_HIGH_CARDINALITY_ATTRIBUTES);
+// ---------------------------------------------------------------------------
+// Per-deployment attribute sets (for trace-sanitizer)
+// ---------------------------------------------------------------------------
+/** Empty set used for cloud (relaxed policy: no drop, no hash, no forbidden). */
+const EMPTY_ATTRIBUTE_SET = new Set();
+/**
+ * Returns the Tier 2 trace attribute sets and contract options for the given deployment type.
+ * Cloud: relaxed policy (no attributes dropped/hashed), match-all span names, pass-through attributes.
+ * Cloud-prem: full Tier 2 contract (forbidden/dropped/hashed), named spans only, allowlist enforced.
+ */
+export function getTraceSanitizerAttributeSets(deploymentType) {
+    const spanDefinitions = getTraceContract(deploymentType);
+    switch (deploymentType) {
+        case DeploymentTypeEnum.CLOUD:
+            return {
+                forbiddenAttributes: EMPTY_ATTRIBUTE_SET,
+                droppedAttributes: EMPTY_ATTRIBUTE_SET,
+                hashedAttributes: EMPTY_ATTRIBUTE_SET,
+                spanDefinitions,
+                attributeAllowlistPassthrough: true,
+            };
+        case DeploymentTypeEnum.CLOUD_PREM:
+        default:
+            return {
+                forbiddenAttributes: TIER2_FORBIDDEN_ATTRIBUTES,
+                droppedAttributes: TIER2_DROPPED_ATTRIBUTES,
+                hashedAttributes: TIER2_HASHED_ATTRIBUTES,
+                spanDefinitions,
+                // Enforce per-span allowlists for cloud-prem: attributes not explicitly
+                // listed in the span definition's allowedAttributes are dropped before
+                // forwarding to Superblocks' internal Datadog.
+                attributeAllowlistPassthrough: false,
+            };
+    }
+}
+// ---------------------------------------------------------------------------
+// Always-sample and value patterns (v0.3.0 samplingPolicy + lint-time)
+// ---------------------------------------------------------------------------
+/** Spans that should ALWAYS be sampled (samplingPolicy.alwaysSampleSpans in contract). */
+export const ALWAYS_SAMPLE_SPANS = new Set(["api.execute"]);
+/**
+ * Patterns that indicate forbidden content in attribute values (e.g. secrets in strings).
+ * No ^/$ anchors so they match secrets embedded anywhere.
+ * It's not used by TraceSanitizer, only in guardrails.
+ */
+export const FORBIDDEN_VALUE_PATTERNS = [
+    /eyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]+/,
+    /\b(sk|pk)-[a-zA-Z0-9]{32,}\b/,
+    /Bearer\s+[A-Za-z0-9._-]{20,}/,
+    /-----BEGIN\s+(RSA\s+)?(PRIVATE|PUBLIC)\s+KEY-----/,
+    /\bAKIA[A-Z0-9]{16}\b/,
+    /\b(ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{36,}\b/,
+    // npm registry tokens (`npm_<36+ alphanumerics>`). The npm-name spec allows
+    // underscores, so without this pattern a token shaped like `npm_AAAA...`
+    // would slip through `sanitizeNpmPackageName` as a "valid" package name.
+    /\bnpm_[A-Za-z0-9]{36,}\b/,
+    /\b(api[_-]?key|apikey|secret[_-]?key|access[_-]?token)[=:]\s*[A-Za-z0-9_-]{20,}\b/i,
+];
+// ---------------------------------------------------------------------------
+// Helpers (for lint, guardrails)
+// ---------------------------------------------------------------------------
+export function isForbiddenAttribute(name) {
+    return TIER2_FORBIDDEN_ATTRIBUTES.has(name);
+}
+export function isHashedAttribute(name) {
+    return TIER2_HASHED_ATTRIBUTES.has(name);
+}
+export function isDroppedAttribute(name) {
+    return TIER2_DROPPED_ATTRIBUTES.has(name);
+}
+export function containsForbiddenPattern(value) {
+    if (typeof value !== "string")
+        return false;
+    return FORBIDDEN_VALUE_PATTERNS.some((pattern) => pattern.test(value));
+}
+export function shouldAlwaysSample(spanName) {
+    return ALWAYS_SAMPLE_SPANS.has(spanName);
+}
+//# sourceMappingURL=tier2-traces.js.map