autotel 2.9.0 → 2.10.0

package/README.md

@@ -589,6 +589,229 @@ instrumentDatabase(db, {
 await db.select().from(users); // queries emit spans automatically
 ```
 
+## Type-Safe Attributes
+
+Autotel provides type-safe attribute builders following OpenTelemetry semantic conventions. These helpers give you autocomplete, compile-time validation, and automatic PII redaction.
+
+### Pattern A: Key Builders
+
+Build individual attributes with full autocomplete:
+
+```typescript
+import { attrs, mergeAttrs } from 'autotel/attributes';
+
+// Single attribute
+ctx.setAttributes(attrs.user.id('user-123'));
+// → { 'user.id': 'user-123' }
+
+ctx.setAttributes(attrs.http.request.method('GET'));
+// → { 'http.request.method': 'GET' }
+
+ctx.setAttributes(attrs.db.client.system('postgresql'));
+// → { 'db.system.name': 'postgresql' }
+
+// Combine multiple attributes
+ctx.setAttributes(
+  mergeAttrs(
+    attrs.user.id('user-123'),
+    attrs.session.id('sess-456'),
+    attrs.http.response.statusCode(200),
+  ),
+);
+```
+
+### Pattern B: Object Builders
+
+Pass an object to set multiple related attributes at once:
+
+```typescript
+import { attrs } from 'autotel/attributes';
+
+// User attributes
+ctx.setAttributes(
+  attrs.user.data({
+    id: 'user-123',
+    email: 'user@example.com',
+    roles: ['admin', 'editor'],
+  }),
+);
+// → { 'user.id': 'user-123', 'user.email': 'user@example.com', 'user.roles': ['admin', 'editor'] }
+
+// HTTP server attributes
+ctx.setAttributes(
+  attrs.http.server({
+    method: 'POST',
+    route: '/api/users/:id',
+    statusCode: 201,
+  }),
+);
+// → { 'http.request.method': 'POST', 'http.route': '/api/users/:id', 'http.response.status_code': 201 }
+
+// Database attributes
+ctx.setAttributes(
+  attrs.db.client.data({
+    system: 'postgresql',
+    name: 'myapp_db', // Maps to db.namespace
+    operation: 'SELECT',
+    collectionName: 'users',
+  }),
+);
+```
+
+### Attachers (Signal Helpers)
+
+Attachers know WHERE to attach attributes - they handle spans, resources, and apply guardrails automatically:
+
+```typescript
+import { setUser, httpServer, identify, dbClient } from 'autotel/attributes';
+
+// Set user attributes with automatic PII redaction
+export const handleRequest = trace((ctx) => async (req) => {
+  setUser(ctx, {
+    id: req.userId,
+    email: req.userEmail, // Automatically redacted by default
+  });
+
+  // HTTP attributes + automatic span name update
+  httpServer(ctx, {
+    method: req.method,
+    route: req.route,
+    statusCode: 200,
+  });
+  // Span name becomes: "HTTP GET /api/users"
+});
+
+// Bundle user, session, and device attributes together
+export const identifyUser = trace((ctx) => async (data) => {
+  identify(ctx, {
+    user: { id: data.userId, name: data.userName },
+    session: { id: data.sessionId },
+    device: { id: data.deviceId, manufacturer: 'Apple' },
+  });
+});
+
+// Database client attributes
+export const queryUsers = trace((ctx) => async () => {
+  dbClient(ctx, {
+    system: 'postgresql',
+    operation: 'SELECT',
+    collectionName: 'users',
+  });
+  return await db.query('SELECT * FROM users');
+});
+```
+
+### PII Guardrails
+
+`safeSetAttributes()` applies automatic PII detection and configurable guardrails:
+
+```typescript
+import { safeSetAttributes, attrs } from 'autotel/attributes';
+
+export const processUser = trace((ctx) => async (user) => {
+  // Default: PII is redacted automatically
+  safeSetAttributes(ctx, attrs.user.data({ email: 'user@example.com' }));
+  // → { 'user.email': '[REDACTED]' }
+
+  // Allow PII (use with caution)
+  safeSetAttributes(ctx, attrs.user.data({ email: 'user@example.com' }), {
+    guardrails: { pii: 'allow' },
+  });
+  // → { 'user.email': 'user@example.com' }
+
+  // Hash PII for correlation without exposing raw values
+  safeSetAttributes(ctx, attrs.user.data({ email: 'user@example.com' }), {
+    guardrails: { pii: 'hash' },
+  });
+  // → { 'user.email': 'hash_a1b2c3d4...' }
+
+  // Truncate long values
+  safeSetAttributes(ctx, attrs.user.data({ id: 'a'.repeat(500) }), {
+    guardrails: { maxLength: 255 },
+  });
+  // → { 'user.id': 'aaaa...aaa...' } (truncated with ellipsis)
+
+  // Warn on deprecated attributes
+  safeSetAttributes(
+    ctx,
+    { 'http.method': 'GET' }, // Deprecated!
+    { guardrails: { warnDeprecated: true } },
+  );
+  // Console: [autotel/attributes] Attribute "http.method" is deprecated. Use "http.request.method" instead.
+});
+```
+
+**Guardrail Options:**
+
+| Option           | Values                                     | Default    | Description                                |
+| ---------------- | ------------------------------------------ | ---------- | ------------------------------------------ |
+| `pii`            | `'allow'`, `'redact'`, `'hash'`, `'block'` | `'redact'` | How to handle PII in attribute values      |
+| `maxLength`      | number                                     | `255`      | Maximum string length before truncation    |
+| `validateEnum`   | boolean                                    | `true`     | Normalize enum values (e.g., HTTP methods) |
+| `warnDeprecated` | boolean                                    | `true`     | Log warnings for deprecated attributes     |
+
+### Domain Helpers
+
+Domain helpers bundle multiple attribute groups for common scenarios:
+
+```typescript
+import { transaction } from 'autotel/attributes';
+
+// Bundle HTTP request with user context
+export const handleRequest = trace((ctx) => async (req) => {
+  transaction(ctx, {
+    user: { id: req.userId },
+    session: { id: req.sessionId },
+    method: req.method,
+    route: req.route,
+    statusCode: 200,
+    clientIp: req.ip,
+  });
+  // Sets: user.id, session.id, http.request.method, http.route,
+  //       http.response.status_code, network.peer.address
+  // Also updates span name to "HTTP GET /api/users"
+});
+```
+
+### Available Attribute Domains
+
+| Domain      | Key Builders                                         | Object Builder                               |
+| ----------- | ---------------------------------------------------- | -------------------------------------------- |
+| `user`      | `id`, `email`, `name`, `fullName`, `hash`, `roles`   | `attrs.user.data()`                          |
+| `session`   | `id`, `previousId`                                   | `attrs.session.data()`                       |
+| `device`    | `id`, `manufacturer`, `modelIdentifier`, `modelName` | `attrs.device.data()`                        |
+| `http`      | `request.*`, `response.*`, `route`                   | `attrs.http.server()`, `attrs.http.client()` |
+| `db`        | `client.system`, `client.operation`, etc.            | `attrs.db.client.data()`                     |
+| `service`   | `name`, `instance`, `version`                        | `attrs.service.data()`                       |
+| `network`   | `peerAddress`, `peerPort`, `transport`, etc.         | `attrs.network.data()`                       |
+| `error`     | `type`, `message`, `stackTrace`, `code`              | `attrs.error.data()`                         |
+| `exception` | `escaped`, `message`, `stackTrace`, `type`           | `attrs.exception.data()`                     |
+| `cloud`     | `provider`, `accountId`, `region`, etc.              | `attrs.cloud.data()`                         |
+| `messaging` | `system`, `destination`, `operation`, etc.           | `attrs.messaging.data()`                     |
+| `genAI`     | `system`, `requestModel`, `responseModel`, etc.      | -                                            |
+| `rpc`       | `system`, `service`, `method`                        | -                                            |
+| `graphql`   | `document`, `operationName`, `operationType`         | -                                            |
+
+### Resource Merging
+
+For enriching OpenTelemetry Resources with service attributes (Resource.attributes is readonly), use `mergeServiceResource`:
+
+```typescript
+import { mergeServiceResource } from 'autotel/attributes';
+import { Resource } from '@opentelemetry/resources';
+
+// Create enriched resource for custom SDK configurations
+const baseResource = Resource.default();
+const enrichedResource = mergeServiceResource(baseResource, {
+  name: 'my-service',
+  version: '1.0.0',
+  instance: 'instance-1',
+});
+
+// Use with custom TracerProvider
+const provider = new NodeTracerProvider({ resource: enrichedResource });
+```
+
 ## Event-Driven Architectures
 
 Autotel provides first-class support for tracing message-based systems like Kafka, SQS, and RabbitMQ. The `traceProducer` and `traceConsumer` helpers automatically set semantic attributes, handle context propagation, and create proper span links.

package/dist/attribute-redacting-processor.cjs

@@ -0,0 +1,25 @@
+'use strict';
+
+var chunk4XNNRSJU_cjs = require('./chunk-4XNNRSJU.cjs');
+require('./chunk-JEQ2X3Z6.cjs');
+
+
+
+Object.defineProperty(exports, "AttributeRedactingProcessor", {
+  enumerable: true,
+  get: function () { return chunk4XNNRSJU_cjs.AttributeRedactingProcessor; }
+});
+Object.defineProperty(exports, "REDACTOR_PATTERNS", {
+  enumerable: true,
+  get: function () { return chunk4XNNRSJU_cjs.REDACTOR_PATTERNS; }
+});
+Object.defineProperty(exports, "REDACTOR_PRESETS", {
+  enumerable: true,
+  get: function () { return chunk4XNNRSJU_cjs.REDACTOR_PRESETS; }
+});
+Object.defineProperty(exports, "createRedactedSpan", {
+  enumerable: true,
+  get: function () { return chunk4XNNRSJU_cjs.createRedactedSpan; }
+});
+//# sourceMappingURL=attribute-redacting-processor.cjs.map
+//# sourceMappingURL=attribute-redacting-processor.cjs.map

package/dist/attribute-redacting-processor.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"attribute-redacting-processor.cjs"}

package/dist/attribute-redacting-processor.d.cts

@@ -0,0 +1,122 @@
+import { SpanProcessor, Span, ReadableSpan } from '@opentelemetry/sdk-trace-base';
+import { AttributeValue, Context } from '@opentelemetry/api';
+
+/**
+ * Attribute Redacting Processor
+ *
+ * Automatically redacts PII and sensitive data from span attributes before export.
+ * This is critical for compliance (GDPR, PCI-DSS, HIPAA) and data security.
+ *
+ * @example Basic usage with preset
+ * ```typescript
+ * init({
+ *   service: 'my-app',
+ *   attributeRedactor: 'default'
+ * })
+ * ```
+ *
+ * @example Custom patterns
+ * ```typescript
+ * init({
+ *   service: 'my-app',
+ *   attributeRedactor: {
+ *     keyPatterns: [/password/i, /secret/i],
+ *     valuePatterns: [
+ *       { name: 'customerId', pattern: /CUST-\d{8}/g, replacement: 'CUST-***' }
+ *     ]
+ *   }
+ * })
+ * ```
+ */
+
+/**
+ * Custom redactor function type
+ */
+type AttributeRedactorFn = (key: string, value: AttributeValue) => AttributeValue;
+/**
+ * Built-in redactor preset names
+ */
+type AttributeRedactorPreset = 'default' | 'strict' | 'pci-dss';
+/**
+ * Value pattern configuration
+ */
+interface ValuePatternConfig {
+    /** Name for debugging/logging */
+    name: string;
+    /** Regex pattern to match in values */
+    pattern: RegExp;
+    /** Custom replacement (default: uses global replacement) */
+    replacement?: string;
+}
+/**
+ * Attribute redactor configuration
+ */
+interface AttributeRedactorConfig {
+    /** Patterns to match against attribute keys (redacts entire value if key matches) */
+    keyPatterns?: RegExp[];
+    /** Patterns to match against attribute values (redacts matched portion) */
+    valuePatterns?: ValuePatternConfig[];
+    /** Default replacement string (default: '[REDACTED]') */
+    replacement?: string;
+    /** Custom redactor function for full control */
+    redactor?: AttributeRedactorFn;
+}
+/**
+ * Processor options
+ */
+interface AttributeRedactingProcessorOptions {
+    redactor: AttributeRedactorConfig | AttributeRedactorPreset;
+}
+/**
+ * Built-in patterns for detecting sensitive data
+ */
+declare const REDACTOR_PATTERNS: {
+    readonly email: RegExp;
+    readonly phone: RegExp;
+    readonly ssn: RegExp;
+    readonly creditCard: RegExp;
+    readonly bearerToken: RegExp;
+    readonly apiKeyInValue: RegExp;
+    readonly jwt: RegExp;
+    readonly sensitiveKey: RegExp;
+};
+/**
+ * Built-in redactor presets
+ */
+declare const REDACTOR_PRESETS: Record<AttributeRedactorPreset, AttributeRedactorConfig>;
+/**
+ * Create a proxy wrapper around ReadableSpan with redacted attributes
+ *
+ * Since ReadableSpan.attributes is readonly, we use a Proxy to intercept
+ * attribute access and return the redacted version.
+ */
+declare function createRedactedSpan(span: ReadableSpan, redactor: AttributeRedactorFn): ReadableSpan;
+/**
+ * Span processor that redacts sensitive data from span attributes.
+ *
+ * Redaction happens in onEnd() when all attributes are finalized.
+ * Uses a Proxy wrapper to intercept attribute access since ReadableSpan
+ * attributes are readonly.
+ *
+ * Common use cases:
+ * - PII compliance (GDPR, CCPA)
+ * - PCI-DSS compliance for payment data
+ * - Preventing secrets from leaking to observability backends
+ */
+declare class AttributeRedactingProcessor implements SpanProcessor {
+    private readonly wrappedProcessor;
+    private readonly redactor;
+    constructor(wrappedProcessor: SpanProcessor, options: AttributeRedactingProcessorOptions);
+    /**
+     * Pass through onStart unchanged - attributes aren't finalized yet
+     */
+    onStart(span: Span, parentContext: Context): void;
+    /**
+     * Redact attributes and forward to wrapped processor
+     */
+    onEnd(span: ReadableSpan): void;
+    forceFlush(): Promise<void>;
+    shutdown(): Promise<void>;
+}
+
+export { AttributeRedactingProcessor, type AttributeRedactingProcessorOptions, type AttributeRedactorConfig, type AttributeRedactorFn, type AttributeRedactorPreset, REDACTOR_PATTERNS, REDACTOR_PRESETS, type ValuePatternConfig, createRedactedSpan };

package/dist/attribute-redacting-processor.d.ts

@@ -0,0 +1,122 @@
+import { SpanProcessor, Span, ReadableSpan } from '@opentelemetry/sdk-trace-base';
+import { AttributeValue, Context } from '@opentelemetry/api';
+
+/**
+ * Attribute Redacting Processor
+ *
+ * Automatically redacts PII and sensitive data from span attributes before export.
+ * This is critical for compliance (GDPR, PCI-DSS, HIPAA) and data security.
+ *
+ * @example Basic usage with preset
+ * ```typescript
+ * init({
+ *   service: 'my-app',
+ *   attributeRedactor: 'default'
+ * })
+ * ```
+ *
+ * @example Custom patterns
+ * ```typescript
+ * init({
+ *   service: 'my-app',
+ *   attributeRedactor: {
+ *     keyPatterns: [/password/i, /secret/i],
+ *     valuePatterns: [
+ *       { name: 'customerId', pattern: /CUST-\d{8}/g, replacement: 'CUST-***' }
+ *     ]
+ *   }
+ * })
+ * ```
+ */
+
+/**
+ * Custom redactor function type
+ */
+type AttributeRedactorFn = (key: string, value: AttributeValue) => AttributeValue;
+/**
+ * Built-in redactor preset names
+ */
+type AttributeRedactorPreset = 'default' | 'strict' | 'pci-dss';
+/**
+ * Value pattern configuration
+ */
+interface ValuePatternConfig {
+    /** Name for debugging/logging */
+    name: string;
+    /** Regex pattern to match in values */
+    pattern: RegExp;
+    /** Custom replacement (default: uses global replacement) */
+    replacement?: string;
+}
+/**
+ * Attribute redactor configuration
+ */
+interface AttributeRedactorConfig {
+    /** Patterns to match against attribute keys (redacts entire value if key matches) */
+    keyPatterns?: RegExp[];
+    /** Patterns to match against attribute values (redacts matched portion) */
+    valuePatterns?: ValuePatternConfig[];
+    /** Default replacement string (default: '[REDACTED]') */
+    replacement?: string;
+    /** Custom redactor function for full control */
+    redactor?: AttributeRedactorFn;
+}
+/**
+ * Processor options
+ */
+interface AttributeRedactingProcessorOptions {
+    redactor: AttributeRedactorConfig | AttributeRedactorPreset;
+}
+/**
+ * Built-in patterns for detecting sensitive data
+ */
+declare const REDACTOR_PATTERNS: {
+    readonly email: RegExp;
+    readonly phone: RegExp;
+    readonly ssn: RegExp;
+    readonly creditCard: RegExp;
+    readonly bearerToken: RegExp;
+    readonly apiKeyInValue: RegExp;
+    readonly jwt: RegExp;
+    readonly sensitiveKey: RegExp;
+};
+/**
+ * Built-in redactor presets
+ */
+declare const REDACTOR_PRESETS: Record<AttributeRedactorPreset, AttributeRedactorConfig>;
+/**
+ * Create a proxy wrapper around ReadableSpan with redacted attributes
+ *
+ * Since ReadableSpan.attributes is readonly, we use a Proxy to intercept
+ * attribute access and return the redacted version.
+ */
+declare function createRedactedSpan(span: ReadableSpan, redactor: AttributeRedactorFn): ReadableSpan;
+/**
+ * Span processor that redacts sensitive data from span attributes.
+ *
+ * Redaction happens in onEnd() when all attributes are finalized.
+ * Uses a Proxy wrapper to intercept attribute access since ReadableSpan
+ * attributes are readonly.
+ *
+ * Common use cases:
+ * - PII compliance (GDPR, CCPA)
+ * - PCI-DSS compliance for payment data
+ * - Preventing secrets from leaking to observability backends
+ */
+declare class AttributeRedactingProcessor implements SpanProcessor {
+    private readonly wrappedProcessor;
+    private readonly redactor;
+    constructor(wrappedProcessor: SpanProcessor, options: AttributeRedactingProcessorOptions);
+    /**
+     * Pass through onStart unchanged - attributes aren't finalized yet
+     */
+    onStart(span: Span, parentContext: Context): void;
+    /**
+     * Redact attributes and forward to wrapped processor
+     */
+    onEnd(span: ReadableSpan): void;
+    forceFlush(): Promise<void>;
+    shutdown(): Promise<void>;
+}
+
+export { AttributeRedactingProcessor, type AttributeRedactingProcessorOptions, type AttributeRedactorConfig, type AttributeRedactorFn, type AttributeRedactorPreset, REDACTOR_PATTERNS, REDACTOR_PRESETS, type ValuePatternConfig, createRedactedSpan };

package/dist/attribute-redacting-processor.js

@@ -0,0 +1,4 @@
+export { AttributeRedactingProcessor, REDACTOR_PATTERNS, REDACTOR_PRESETS, createRedactedSpan } from './chunk-5JDGZS4U.js';
+import './chunk-DGUM43GV.js';
+//# sourceMappingURL=attribute-redacting-processor.js.map
+//# sourceMappingURL=attribute-redacting-processor.js.map

package/dist/attribute-redacting-processor.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"attribute-redacting-processor.js"}

package/dist/attributes.cjs

@@ -0,0 +1,86 @@
+'use strict';
+
+var chunkLLKKDI2O_cjs = require('./chunk-LLKKDI2O.cjs');
+require('./chunk-4XNNRSJU.cjs');
+require('./chunk-JEQ2X3Z6.cjs');
+
+
+
+Object.defineProperty(exports, "attrs", {
+  enumerable: true,
+  get: function () { return chunkLLKKDI2O_cjs.attrs; }
+});
+Object.defineProperty(exports, "autoRedactPII", {
+  enumerable: true,
+  get: function () { return chunkLLKKDI2O_cjs.autoRedactPII; }
+});
+Object.defineProperty(exports, "checkDeprecatedAttribute", {
+  enumerable: true,
+  get: function () { return chunkLLKKDI2O_cjs.checkDeprecatedAttribute; }
+});
+Object.defineProperty(exports, "dbClient", {
+  enumerable: true,
+  get: function () { return chunkLLKKDI2O_cjs.dbClient; }
+});
+Object.defineProperty(exports, "defaultGuardrails", {
+  enumerable: true,
+  get: function () { return chunkLLKKDI2O_cjs.defaultGuardrails; }
+});
+Object.defineProperty(exports, "httpClient", {
+  enumerable: true,
+  get: function () { return chunkLLKKDI2O_cjs.httpClient; }
+});
+Object.defineProperty(exports, "httpServer", {
+  enumerable: true,
+  get: function () { return chunkLLKKDI2O_cjs.httpServer; }
+});
+Object.defineProperty(exports, "identify", {
+  enumerable: true,
+  get: function () { return chunkLLKKDI2O_cjs.identify; }
+});
+Object.defineProperty(exports, "mergeAttrs", {
+  enumerable: true,
+  get: function () { return chunkLLKKDI2O_cjs.mergeAttrs; }
+});
+Object.defineProperty(exports, "mergeServiceResource", {
+  enumerable: true,
+  get: function () { return chunkLLKKDI2O_cjs.mergeServiceResource; }
+});
+Object.defineProperty(exports, "request", {
+  enumerable: true,
+  get: function () { return chunkLLKKDI2O_cjs.request; }
+});
+Object.defineProperty(exports, "safeSetAttributes", {
+  enumerable: true,
+  get: function () { return chunkLLKKDI2O_cjs.safeSetAttributes; }
+});
+Object.defineProperty(exports, "setDevice", {
+  enumerable: true,
+  get: function () { return chunkLLKKDI2O_cjs.setDevice; }
+});
+Object.defineProperty(exports, "setError", {
+  enumerable: true,
+  get: function () { return chunkLLKKDI2O_cjs.setError; }
+});
+Object.defineProperty(exports, "setException", {
+  enumerable: true,
+  get: function () { return chunkLLKKDI2O_cjs.setException; }
+});
+Object.defineProperty(exports, "setSession", {
+  enumerable: true,
+  get: function () { return chunkLLKKDI2O_cjs.setSession; }
+});
+Object.defineProperty(exports, "setUser", {
+  enumerable: true,
+  get: function () { return chunkLLKKDI2O_cjs.setUser; }
+});
+Object.defineProperty(exports, "transaction", {
+  enumerable: true,
+  get: function () { return chunkLLKKDI2O_cjs.transaction; }
+});
+Object.defineProperty(exports, "validateAttribute", {
+  enumerable: true,
+  get: function () { return chunkLLKKDI2O_cjs.validateAttribute; }
+});
+//# sourceMappingURL=attributes.cjs.map
+//# sourceMappingURL=attributes.cjs.map

package/dist/attributes.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"attributes.cjs"}

package/dist/attributes.d.cts

@@ -0,0 +1,20 @@
+import { U as UserAttrs, S as SessionAttrs, A as AttributePolicy } from './utils-DuNJfXSH.cjs';
+export { p as AttributeGuardrails, J as ClientAttrs, C as CloudAttrs, Q as CodeAttrs, z as ContainerAttrs, t as DBAttrs, L as DeploymentAttrs, D as DeviceAttrs, E as ErrorAttrs, V as ExceptionAttrs, B as FaaSAttrs, F as FeatureFlagAttrs, G as GenAIAttrs, I as GraphQLAttrs, q as HTTPClientAttrs, H as HTTPServerAttrs, K as K8sAttrs, M as MessagingAttrs, N as NetworkAttrs, O as OTelAttrs, P as PeerAttrs, y as ProcessAttrs, R as RPCAttrs, w as ServerAddressAttrs, u as ServiceAttrs, W as TLSAttrs, T as ThreadAttrs, x as URLAttrs, a as attrs, n as autoRedactPII, l as checkDeprecatedAttribute, e as dbClient, o as defaultGuardrails, d as httpClient, h as httpServer, i as identify, j as mergeAttrs, m as mergeServiceResource, r as request, k as safeSetAttributes, c as setDevice, f as setError, g as setException, b as setSession, s as setUser, v as validateAttribute } from './utils-DuNJfXSH.cjs';
+import { T as TraceContext } from './trace-context-t5X1AP-e.cjs';
+import '@opentelemetry/api';
+import '@opentelemetry/resources';
+
+/**
+ * Domain helpers for common attribute patterns
+ * These bundle multiple attribute groups into semantic helpers
+ */
+declare function transaction(spanOrContext: TraceContext, config: {
+    user?: UserAttrs;
+    session?: SessionAttrs;
+    method?: string;
+    route?: string;
+    statusCode?: number;
+    clientIp?: string;
+}, guardrails?: AttributePolicy): void;
+
+export { AttributePolicy, SessionAttrs, UserAttrs, transaction };

package/dist/attributes.d.ts

@@ -0,0 +1,20 @@
+import { U as UserAttrs, S as SessionAttrs, A as AttributePolicy } from './utils-D1trOLNm.js';
+export { p as AttributeGuardrails, J as ClientAttrs, C as CloudAttrs, Q as CodeAttrs, z as ContainerAttrs, t as DBAttrs, L as DeploymentAttrs, D as DeviceAttrs, E as ErrorAttrs, V as ExceptionAttrs, B as FaaSAttrs, F as FeatureFlagAttrs, G as GenAIAttrs, I as GraphQLAttrs, q as HTTPClientAttrs, H as HTTPServerAttrs, K as K8sAttrs, M as MessagingAttrs, N as NetworkAttrs, O as OTelAttrs, P as PeerAttrs, y as ProcessAttrs, R as RPCAttrs, w as ServerAddressAttrs, u as ServiceAttrs, W as TLSAttrs, T as ThreadAttrs, x as URLAttrs, a as attrs, n as autoRedactPII, l as checkDeprecatedAttribute, e as dbClient, o as defaultGuardrails, d as httpClient, h as httpServer, i as identify, j as mergeAttrs, m as mergeServiceResource, r as request, k as safeSetAttributes, c as setDevice, f as setError, g as setException, b as setSession, s as setUser, v as validateAttribute } from './utils-D1trOLNm.js';
+import { T as TraceContext } from './trace-context-t5X1AP-e.js';
+import '@opentelemetry/api';
+import '@opentelemetry/resources';
+
+/**
+ * Domain helpers for common attribute patterns
+ * These bundle multiple attribute groups into semantic helpers
+ */
+declare function transaction(spanOrContext: TraceContext, config: {
+    user?: UserAttrs;
+    session?: SessionAttrs;
+    method?: string;
+    route?: string;
+    statusCode?: number;
+    clientIp?: string;
+}, guardrails?: AttributePolicy): void;
+
+export { AttributePolicy, SessionAttrs, UserAttrs, transaction };

package/dist/attributes.js

@@ -0,0 +1,5 @@
+export { attrs, autoRedactPII, checkDeprecatedAttribute, dbClient, defaultGuardrails, httpClient, httpServer, identify, mergeAttrs, mergeServiceResource, request, safeSetAttributes, setDevice, setError, setException, setSession, setUser, transaction, validateAttribute } from './chunk-7V4VPLG6.js';
+import './chunk-5JDGZS4U.js';
+import './chunk-DGUM43GV.js';
+//# sourceMappingURL=attributes.js.map
+//# sourceMappingURL=attributes.js.map

package/dist/attributes.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"attributes.js"}

package/dist/auto.cjs

@@ -1,8 +1,12 @@
 'use strict';
 
-var chunkDWHIOTHR_cjs = require('./chunk-DWHIOTHR.cjs');
+var chunkHPPYIHMT_cjs = require('./chunk-HPPYIHMT.cjs');
 var chunkJQTQ5IAY_cjs = require('./chunk-JQTQ5IAY.cjs');
 require('./chunk-GVLK7YUU.cjs');
+require('./chunk-ZNMBW67B.cjs');
+require('./chunk-IOYFAFHJ.cjs');
+require('./chunk-4XNNRSJU.cjs');
+require('./chunk-CU6IDACR.cjs');
 require('./chunk-YS6C2YJE.cjs');
 require('./chunk-INB6PRMW.cjs');
 require('./chunk-DJNOZI7B.cjs');
@@ -18,7 +22,7 @@ module$1.register("import-in-the-middle/hook.mjs", (typeof document === 'undefin
 var yamlConfig = chunkJQTQ5IAY_cjs.loadYamlConfig();
 var autoInstrumentationsEnv = process.env.AUTOTEL_INTEGRATIONS;
 var autoInstrumentations = autoInstrumentationsEnv === "true" ? true : autoInstrumentationsEnv ? autoInstrumentationsEnv.split(",").map((s) => s.trim()) : yamlConfig?.autoInstrumentations ?? ["http", "express"];
-chunkDWHIOTHR_cjs.init({
+chunkHPPYIHMT_cjs.init({
   service: yamlConfig?.service ?? process.env.OTEL_SERVICE_NAME ?? "unknown-service",
   debug: yamlConfig?.debug ?? process.env.AUTOTEL_DEBUG === "true",
   autoInstrumentations