autotel 6.1.0 → 6.2.1

package/dist/yaml-config.d.cts

@@ -1,5 +1,5 @@
 import { h as SamplingPreset } from "./sampling-BR9fkSwx.cjs";
-import { n as OtlpSignal, t as AutotelConfig } from "./init-XzXzrarP.cjs";
+import { n as OtlpSignal, t as AutotelConfig } from "./init-BoIYyB6Q.cjs";
 //#region src/yaml-config.d.ts
 /**
  * YAML config structure
@@ -13,11 +13,11 @@ interface YamlConfig {
   };
   exporter?: {
     endpoint?: string;
-    protocol?: 'http' | 'grpc';
+    protocol?: 'http' | 'http/protobuf' | 'grpc';
     headers?: Record<string, string>;
     destinations?: Array<{
       endpoint: string;
-      protocol?: 'http' | 'grpc';
+      protocol?: 'http' | 'http/protobuf' | 'grpc';
       headers?: Record<string, string>;
       signals?: OtlpSignal[];
     }>;
@@ -76,5 +76,4 @@ declare function loadYamlConfigFromFile(filePath: string): Partial<AutotelConfig
  */
 declare function hasYamlConfig(): boolean;
 //#endregion
-export { YamlConfig, hasYamlConfig, loadYamlConfig, loadYamlConfigFromFile };
-//# sourceMappingURL=yaml-config.d.cts.map
+export { YamlConfig, hasYamlConfig, loadYamlConfig, loadYamlConfigFromFile };

package/dist/yaml-config.d.ts

@@ -1,5 +1,5 @@
 import { h as SamplingPreset } from "./sampling-CP3e7-Yr.js";
-import { n as OtlpSignal, t as AutotelConfig } from "./init-D6n2diBy.js";
+import { n as OtlpSignal, t as AutotelConfig } from "./init-BHp-kqLJ.js";
 //#region src/yaml-config.d.ts
 /**
  * YAML config structure
@@ -13,11 +13,11 @@ interface YamlConfig {
   };
   exporter?: {
     endpoint?: string;
-    protocol?: 'http' | 'grpc';
+    protocol?: 'http' | 'http/protobuf' | 'grpc';
     headers?: Record<string, string>;
     destinations?: Array<{
       endpoint: string;
-      protocol?: 'http' | 'grpc';
+      protocol?: 'http' | 'http/protobuf' | 'grpc';
       headers?: Record<string, string>;
       signals?: OtlpSignal[];
     }>;
@@ -76,5 +76,4 @@ declare function loadYamlConfigFromFile(filePath: string): Partial<AutotelConfig
  */
 declare function hasYamlConfig(): boolean;
 //#endregion
-export { YamlConfig, hasYamlConfig, loadYamlConfig, loadYamlConfigFromFile };
-//# sourceMappingURL=yaml-config.d.ts.map
+export { YamlConfig, hasYamlConfig, loadYamlConfig, loadYamlConfigFromFile };

package/dist/yaml-config.js

@@ -225,5 +225,4 @@ function hasYamlConfig() {
 }
 
 //#endregion
-export { hasYamlConfig, loadYamlConfig, loadYamlConfigFromFile };
-//# sourceMappingURL=yaml-config.js.map
+export { hasYamlConfig, loadYamlConfig, loadYamlConfigFromFile };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "autotel",
-  "version": "6.1.0",
+  "version": "6.2.1",
   "description": "Write Once, Observe Anywhere",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -279,28 +279,31 @@
   "license": "Apache-2.0",
   "dependencies": {
     "@opentelemetry/api": "^1.9.1",
-    "@opentelemetry/api-logs": "^0.220.0",
-    "@opentelemetry/exporter-logs-otlp-http": "^0.220.0",
-    "@opentelemetry/exporter-metrics-otlp-http": "^0.220.0",
-    "@opentelemetry/exporter-trace-otlp-http": "^0.220.0",
-    "@opentelemetry/instrumentation": "^0.220.0",
-    "@opentelemetry/resources": "^2.9.0",
-    "@opentelemetry/sdk-logs": "^0.220.0",
-    "@opentelemetry/sdk-metrics": "^2.9.0",
-    "@opentelemetry/sdk-node": "^0.220.0",
-    "@opentelemetry/sdk-trace-base": "^2.9.0",
+    "@opentelemetry/api-logs": "^0.221.0",
+    "@opentelemetry/exporter-logs-otlp-http": "^0.221.0",
+    "@opentelemetry/exporter-metrics-otlp-http": "^0.221.0",
+    "@opentelemetry/exporter-trace-otlp-http": "^0.221.0",
+    "@opentelemetry/instrumentation": "^0.221.0",
+    "@opentelemetry/resources": "^2.10.0",
+    "@opentelemetry/sdk-logs": "^0.221.0",
+    "@opentelemetry/sdk-metrics": "^2.10.0",
+    "@opentelemetry/sdk-node": "^0.221.0",
+    "@opentelemetry/sdk-trace-base": "^2.10.0",
     "@opentelemetry/semantic-conventions": "^1.43.0",
     "import-in-the-middle": "^3.3.2"
   },
   "peerDependencies": {
-    "@opentelemetry/auto-instrumentations-node": "^0.78.0",
-    "@opentelemetry/exporter-logs-otlp-grpc": "^0.220.0",
-    "@opentelemetry/exporter-metrics-otlp-grpc": "^0.220.0",
-    "@opentelemetry/exporter-trace-otlp-grpc": "^0.220.0",
-    "@opentelemetry/resource-detector-aws": "^2.20.0",
-    "@opentelemetry/resource-detector-container": "^0.8.11",
-    "@opentelemetry/resource-detector-gcp": "^0.55.0",
-    "@opentelemetry/sdk-trace-node": "^2.9.0",
+    "@opentelemetry/auto-instrumentations-node": "^0.79.0",
+    "@opentelemetry/exporter-logs-otlp-grpc": "^0.221.0",
+    "@opentelemetry/exporter-logs-otlp-proto": "^0.221.0",
+    "@opentelemetry/exporter-metrics-otlp-grpc": "^0.221.0",
+    "@opentelemetry/exporter-metrics-otlp-proto": "^0.221.0",
+    "@opentelemetry/exporter-trace-otlp-grpc": "^0.221.0",
+    "@opentelemetry/exporter-trace-otlp-proto": "^0.221.0",
+    "@opentelemetry/resource-detector-aws": "^2.21.0",
+    "@opentelemetry/resource-detector-container": "^0.8.12",
+    "@opentelemetry/resource-detector-gcp": "^0.56.0",
+    "@opentelemetry/sdk-trace-node": "^2.10.0",
     "@traceloop/node-server-sdk": "^0.27.0",
     "pino": "^10.3.1",
     "pino-pretty": "^13.1.3",
@@ -313,22 +316,31 @@
     "@opentelemetry/exporter-logs-otlp-grpc": {
       "optional": true
     },
+    "@opentelemetry/exporter-logs-otlp-proto": {
+      "optional": true
+    },
     "@opentelemetry/exporter-metrics-otlp-grpc": {
       "optional": true
     },
+    "@opentelemetry/exporter-metrics-otlp-proto": {
+      "optional": true
+    },
     "@opentelemetry/exporter-trace-otlp-grpc": {
       "optional": true
     },
-    "@opentelemetry/sdk-trace-node": {
+    "@opentelemetry/exporter-trace-otlp-proto": {
       "optional": true
     },
     "@opentelemetry/resource-detector-aws": {
       "optional": true
     },
+    "@opentelemetry/resource-detector-container": {
+      "optional": true
+    },
     "@opentelemetry/resource-detector-gcp": {
       "optional": true
     },
-    "@opentelemetry/resource-detector-container": {
+    "@opentelemetry/sdk-trace-node": {
       "optional": true
     },
     "@traceloop/node-server-sdk": {
@@ -347,20 +359,23 @@
   "devDependencies": {
     "@arethetypeswrong/cli": "^0.18.5",
     "@edge-runtime/vm": "^5.0.0",
-    "@opentelemetry/auto-instrumentations-node": "^0.78.0",
-    "@opentelemetry/context-async-hooks": "^2.9.0",
-    "@opentelemetry/exporter-logs-otlp-grpc": "^0.220.0",
-    "@opentelemetry/exporter-metrics-otlp-grpc": "^0.220.0",
-    "@opentelemetry/exporter-trace-otlp-grpc": "^0.220.0",
-    "@opentelemetry/resource-detector-aws": "^2.20.0",
-    "@opentelemetry/resource-detector-container": "^0.8.11",
-    "@opentelemetry/resource-detector-gcp": "^0.55.0",
-    "@opentelemetry/sdk-trace-node": "^2.9.0",
+    "@opentelemetry/auto-instrumentations-node": "^0.79.0",
+    "@opentelemetry/context-async-hooks": "^2.10.0",
+    "@opentelemetry/exporter-logs-otlp-grpc": "^0.221.0",
+    "@opentelemetry/exporter-logs-otlp-proto": "^0.221.0",
+    "@opentelemetry/exporter-metrics-otlp-grpc": "^0.221.0",
+    "@opentelemetry/exporter-metrics-otlp-proto": "^0.221.0",
+    "@opentelemetry/exporter-trace-otlp-grpc": "^0.221.0",
+    "@opentelemetry/exporter-trace-otlp-proto": "^0.221.0",
+    "@opentelemetry/resource-detector-aws": "^2.21.0",
+    "@opentelemetry/resource-detector-container": "^0.8.12",
+    "@opentelemetry/resource-detector-gcp": "^0.56.0",
+    "@opentelemetry/sdk-trace-node": "^2.10.0",
     "@swc/core": "^1.15.46",
     "@total-typescript/ts-reset": "^0.6.1",
     "@total-typescript/tsconfig": "^1.0.4",
     "@types/eslint-config-prettier": "^6.11.3",
-    "@types/node": "^26.1.1",
+    "@types/node": "^26.1.2",
     "@typescript-eslint/eslint-plugin": "^8.65.0",
     "@typescript-eslint/parser": "^8.65.0",
     "eslint-config-prettier": "^10.1.8",
@@ -368,7 +383,7 @@
     "pino": "^10.3.1",
     "prettier": "^3.9.6",
     "rimraf": "^6.1.3",
-    "tsdown": "^0.22.12",
+    "tsdown": "^0.22.14",
     "tsx": "^4.23.1",
     "typescript": "^6.0.3",
     "typescript-eslint": "^8.65.0",

package/dist/analysis.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"analysis.cjs","names":[],"sources":["../src/analysis.ts"],"sourcesContent":["/**\n * Core Analysis Loop\n *\n * Debugging from first principles: take the events you care about, take a\n * comparable normal population, and ask which recorded field separates them.\n * The loop is mechanical, so run it in code instead of clicking through a\n * dashboard.\n *\n * `compareCohorts()` scores every field/value pair by how much more often it\n * appears in the outlier group than in the baseline. The top result names the\n * cohort behind a regression, which is the hypothesis you then verify against\n * individual traces.\n *\n * The input is any array of flat records: wide events from\n * `getRequestLogger()`, `TestSpan.attributes` from `autotel/testing`, or rows\n * returned by a backend query.\n *\n * @example Find the cohort behind a latency regression\n * ```typescript\n * import { compareCohorts } from 'autotel/analysis'\n *\n * const slow = events.filter((event) => event['duration_ms'] >= 800)\n * const normal = events.filter((event) => event['duration_ms'] < 800)\n *\n * const [top] = compareCohorts({ outlier: slow, baseline: normal })\n * // { field: 'payment.provider', value: 'bank-beta', difference: 0.94, ... }\n * ```\n */\n\n/** A flat telemetry record. Span attributes and wide events both satisfy it. */\nexport type AnalysisEvent = Record<string, unknown>;\n\n/** How strongly one field/value pair separates the outlier group from the baseline. */\nexport interface CohortDifference {\n  /** Attribute name, such as `payment.provider`. */\n  field: string;\n  /** The value, rendered as a string for display and grouping. */\n  value: string;\n  /** Share of outlier events carrying this value, 0-1. */\n  outlierFraction: number;\n  /** Share of baseline events carrying this value, 0-1. */\n  baselineFraction: number;\n  /** `outlierFraction - baselineFraction`. Positive means over-represented in the outliers. */\n  difference: number;\n  outlierCount: number;\n  baselineCount: number;\n}\n\nexport interface CompareCohortsOptions {\n  /** The events you are investigating: the errors, the slow requests, the failed checkouts. */\n  outlier: readonly AnalysisEvent[];\n  /** A comparable normal population from the same time range. */\n  baseline: readonly AnalysisEvent[];\n  /** Restrict the scan to these fields. Defaults to every field seen in either group. */\n  fields?: readonly string[];\n  /** Fields to skip, such as identifiers you already know are unique. */\n  ignoreFields?: readonly string[];\n  /**\n   * Skip a field once it holds more distinct values than this across both\n   * groups. Default 50.\n   */\n  maxValuesPerField?: number;\n  /**\n   * Skip a field whose distinct values outnumber this share of the combined\n   * events. A request id or a raw duration takes a near-unique value per\n   * event, so its values never repeat and it cannot describe a cohort. The\n   * ratio catches those fields in small populations, where an absolute cap\n   * does not. Bucket numeric fields at instrumentation time if you want them\n   * ranked. Default 0.5.\n   */\n  maxUniqueRatio?: number;\n  /** Drop pairs whose absolute difference falls below this. Default 0.1. */\n  minDifference?: number;\n  /** Maximum results to return, strongest first. Default 20. */\n  limit?: number;\n}\n\nconst DEFAULT_MAX_VALUES_PER_FIELD = 50;\nconst DEFAULT_MAX_UNIQUE_RATIO = 0.5;\nconst DEFAULT_MIN_DIFFERENCE = 0.1;\nconst DEFAULT_LIMIT = 20;\n\n/**\n * Render a value as a grouping key.\n *\n * Objects and arrays return undefined: a nested structure does not name a\n * cohort, and stringifying it produces noise rather than a testable split.\n */\nfunction valueKey(value: unknown): string | undefined {\n  if (value === null || value === undefined) {\n    return undefined;\n  }\n  const kind = typeof value;\n  if (\n    kind === 'string' ||\n    kind === 'number' ||\n    kind === 'boolean' ||\n    kind === 'bigint'\n  ) {\n    return String(value);\n  }\n  return undefined;\n}\n\n/** Occurrences of one value, split by the group it appeared in. */\ninterface ValueCounts {\n  outlier: number;\n  baseline: number;\n}\n\n/** field -> value -> counts */\ntype FieldTally = Map<string, Map<string, ValueCounts>>;\n\n/**\n * Fold one group's events into the shared tally.\n *\n * Both groups accumulate into the same structure, so the caller never builds a\n * combined array or revisits an event once per candidate field.\n */\nfunction accumulate(\n  tally: FieldTally,\n  events: readonly AnalysisEvent[],\n  group: keyof ValueCounts,\n  includes: (field: string) => boolean,\n): void {\n  for (const event of events) {\n    for (const [field, raw] of Object.entries(event)) {\n      if (!includes(field)) {\n        continue;\n      }\n      const value = valueKey(raw);\n      if (value === undefined) {\n        continue;\n      }\n      let values = tally.get(field);\n      if (values === undefined) {\n        values = new Map<string, ValueCounts>();\n        tally.set(field, values);\n      }\n      const counts = values.get(value) ?? { outlier: 0, baseline: 0 };\n      counts[group]++;\n      values.set(value, counts);\n    }\n  }\n}\n\n/**\n * Rank the field/value pairs that separate an outlier group from a baseline.\n *\n * Returns an empty array when either group is empty, because a fraction over\n * zero events carries no information.\n *\n * @param options - The two populations and the scan limits\n * @returns Differences sorted by absolute strength, strongest first\n */\nexport function compareCohorts(\n  options: CompareCohortsOptions,\n): CohortDifference[] {\n  const {\n    outlier,\n    baseline,\n    fields,\n    ignoreFields,\n    maxValuesPerField = DEFAULT_MAX_VALUES_PER_FIELD,\n    maxUniqueRatio = DEFAULT_MAX_UNIQUE_RATIO,\n    minDifference = DEFAULT_MIN_DIFFERENCE,\n    limit = DEFAULT_LIMIT,\n  } = options;\n\n  if (outlier.length === 0 || baseline.length === 0) {\n    return [];\n  }\n\n  const ignored = new Set(ignoreFields);\n  const selected = fields === undefined ? undefined : new Set(fields);\n  const includes = (field: string) =>\n    !ignored.has(field) && (selected === undefined || selected.has(field));\n\n  const tally: FieldTally = new Map();\n  accumulate(tally, outlier, 'outlier', includes);\n  accumulate(tally, baseline, 'baseline', includes);\n\n  const results: CohortDifference[] = [];\n  const total = outlier.length + baseline.length;\n\n  for (const [field, values] of tally) {\n    if (\n      values.size > maxValuesPerField ||\n      values.size > total * maxUniqueRatio\n    ) {\n      continue;\n    }\n\n    for (const [value, counts] of values) {\n      const outlierFraction = counts.outlier / outlier.length;\n      const baselineFraction = counts.baseline / baseline.length;\n      const difference = outlierFraction - baselineFraction;\n\n      if (Math.abs(difference) < minDifference) {\n        continue;\n      }\n\n      results.push({\n        field,\n        value,\n        outlierFraction,\n        baselineFraction,\n        difference,\n        outlierCount: counts.outlier,\n        baselineCount: counts.baseline,\n      });\n    }\n  }\n\n  // Strongest first. On a tie prefer the over-represented value, because a\n  // cohort you can open traces from beats one defined by its absence. Fall\n  // back to field and value so repeated runs return the same order.\n  results.sort(\n    (a, b) =>\n      Math.abs(b.difference) - Math.abs(a.difference) ||\n      b.difference - a.difference ||\n      a.field.localeCompare(b.field) ||\n      a.value.localeCompare(b.value),\n  );\n\n  return results.slice(0, limit);\n}\n"],"mappings":";;;AA6EA,MAAM,+BAA+B;AACrC,MAAM,2BAA2B;AACjC,MAAM,yBAAyB;AAC/B,MAAM,gBAAgB;;;;;;;AAQtB,SAAS,SAAS,OAAoC;CACpD,IAAI,UAAU,QAAQ,UAAU,QAC9B;CAEF,MAAM,OAAO,OAAO;CACpB,IACE,SAAS,YACT,SAAS,YACT,SAAS,aACT,SAAS,UAET,OAAO,OAAO,KAAK;AAGvB;;;;;;;AAiBA,SAAS,WACP,OACA,QACA,OACA,UACM;CACN,KAAK,MAAM,SAAS,QAClB,KAAK,MAAM,CAAC,OAAO,QAAQ,OAAO,QAAQ,KAAK,GAAG;EAChD,IAAI,CAAC,SAAS,KAAK,GACjB;EAEF,MAAM,QAAQ,SAAS,GAAG;EAC1B,IAAI,UAAU,QACZ;EAEF,IAAI,SAAS,MAAM,IAAI,KAAK;EAC5B,IAAI,WAAW,QAAW;GACxB,yBAAS,IAAI,IAAyB;GACtC,MAAM,IAAI,OAAO,MAAM;EACzB;EACA,MAAM,SAAS,OAAO,IAAI,KAAK,KAAK;GAAE,SAAS;GAAG,UAAU;EAAE;EAC9D,OAAO,MAAM;EACb,OAAO,IAAI,OAAO,MAAM;CAC1B;AAEJ;;;;;;;;;;AAWA,SAAgB,eACd,SACoB;CACpB,MAAM,EACJ,SACA,UACA,QACA,cACA,oBAAoB,8BACpB,iBAAiB,0BACjB,gBAAgB,wBAChB,QAAQ,kBACN;CAEJ,IAAI,QAAQ,WAAW,KAAK,SAAS,WAAW,GAC9C,OAAO,CAAC;CAGV,MAAM,UAAU,IAAI,IAAI,YAAY;CACpC,MAAM,WAAW,WAAW,SAAY,SAAY,IAAI,IAAI,MAAM;CAClE,MAAM,YAAY,UAChB,CAAC,QAAQ,IAAI,KAAK,MAAM,aAAa,UAAa,SAAS,IAAI,KAAK;CAEtE,MAAM,wBAAoB,IAAI,IAAI;CAClC,WAAW,OAAO,SAAS,WAAW,QAAQ;CAC9C,WAAW,OAAO,UAAU,YAAY,QAAQ;CAEhD,MAAM,UAA8B,CAAC;CACrC,MAAM,QAAQ,QAAQ,SAAS,SAAS;CAExC,KAAK,MAAM,CAAC,OAAO,WAAW,OAAO;EACnC,IACE,OAAO,OAAO,qBACd,OAAO,OAAO,QAAQ,gBAEtB;EAGF,KAAK,MAAM,CAAC,OAAO,WAAW,QAAQ;GACpC,MAAM,kBAAkB,OAAO,UAAU,QAAQ;GACjD,MAAM,mBAAmB,OAAO,WAAW,SAAS;GACpD,MAAM,aAAa,kBAAkB;GAErC,IAAI,KAAK,IAAI,UAAU,IAAI,eACzB;GAGF,QAAQ,KAAK;IACX;IACA;IACA;IACA;IACA;IACA,cAAc,OAAO;IACrB,eAAe,OAAO;GACxB,CAAC;EACH;CACF;CAKA,QAAQ,MACL,GAAG,MACF,KAAK,IAAI,EAAE,UAAU,IAAI,KAAK,IAAI,EAAE,UAAU,KAC9C,EAAE,aAAa,EAAE,cACjB,EAAE,MAAM,cAAc,EAAE,KAAK,KAC7B,EAAE,MAAM,cAAc,EAAE,KAAK,CACjC;CAEA,OAAO,QAAQ,MAAM,GAAG,KAAK;AAC/B"}

package/dist/analysis.d.cts.map

@@ -1 +0,0 @@
-{"version":3,"file":"analysis.d.cts","names":[],"sources":["../src/analysis.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA8BY,gBAAgB;;UAGX;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;EACA;EACA;;UAGe;;EAEf,kBAAkB;;EAElB,mBAAmB;;EAEnB;;EAEA;;;;;EAKA;;;;;;;;;EASA;;EAEA;;EAEA;;;;;;;;;;;iBAiFc,eACd,SAAS,wBACR"}

package/dist/analysis.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"analysis.d.ts","names":[],"sources":["../src/analysis.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA8BY,gBAAgB;;UAGX;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;EACA;EACA;;UAGe;;EAEf,kBAAkB;;EAElB,mBAAmB;;EAEnB;;EAEA;;;;;EAKA;;;;;;;;;EASA;;EAEA;;EAEA;;;;;;;;;;;iBAiFc,eACd,SAAS,wBACR"}

package/dist/analysis.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"analysis.js","names":[],"sources":["../src/analysis.ts"],"sourcesContent":["/**\n * Core Analysis Loop\n *\n * Debugging from first principles: take the events you care about, take a\n * comparable normal population, and ask which recorded field separates them.\n * The loop is mechanical, so run it in code instead of clicking through a\n * dashboard.\n *\n * `compareCohorts()` scores every field/value pair by how much more often it\n * appears in the outlier group than in the baseline. The top result names the\n * cohort behind a regression, which is the hypothesis you then verify against\n * individual traces.\n *\n * The input is any array of flat records: wide events from\n * `getRequestLogger()`, `TestSpan.attributes` from `autotel/testing`, or rows\n * returned by a backend query.\n *\n * @example Find the cohort behind a latency regression\n * ```typescript\n * import { compareCohorts } from 'autotel/analysis'\n *\n * const slow = events.filter((event) => event['duration_ms'] >= 800)\n * const normal = events.filter((event) => event['duration_ms'] < 800)\n *\n * const [top] = compareCohorts({ outlier: slow, baseline: normal })\n * // { field: 'payment.provider', value: 'bank-beta', difference: 0.94, ... }\n * ```\n */\n\n/** A flat telemetry record. Span attributes and wide events both satisfy it. */\nexport type AnalysisEvent = Record<string, unknown>;\n\n/** How strongly one field/value pair separates the outlier group from the baseline. */\nexport interface CohortDifference {\n  /** Attribute name, such as `payment.provider`. */\n  field: string;\n  /** The value, rendered as a string for display and grouping. */\n  value: string;\n  /** Share of outlier events carrying this value, 0-1. */\n  outlierFraction: number;\n  /** Share of baseline events carrying this value, 0-1. */\n  baselineFraction: number;\n  /** `outlierFraction - baselineFraction`. Positive means over-represented in the outliers. */\n  difference: number;\n  outlierCount: number;\n  baselineCount: number;\n}\n\nexport interface CompareCohortsOptions {\n  /** The events you are investigating: the errors, the slow requests, the failed checkouts. */\n  outlier: readonly AnalysisEvent[];\n  /** A comparable normal population from the same time range. */\n  baseline: readonly AnalysisEvent[];\n  /** Restrict the scan to these fields. Defaults to every field seen in either group. */\n  fields?: readonly string[];\n  /** Fields to skip, such as identifiers you already know are unique. */\n  ignoreFields?: readonly string[];\n  /**\n   * Skip a field once it holds more distinct values than this across both\n   * groups. Default 50.\n   */\n  maxValuesPerField?: number;\n  /**\n   * Skip a field whose distinct values outnumber this share of the combined\n   * events. A request id or a raw duration takes a near-unique value per\n   * event, so its values never repeat and it cannot describe a cohort. The\n   * ratio catches those fields in small populations, where an absolute cap\n   * does not. Bucket numeric fields at instrumentation time if you want them\n   * ranked. Default 0.5.\n   */\n  maxUniqueRatio?: number;\n  /** Drop pairs whose absolute difference falls below this. Default 0.1. */\n  minDifference?: number;\n  /** Maximum results to return, strongest first. Default 20. */\n  limit?: number;\n}\n\nconst DEFAULT_MAX_VALUES_PER_FIELD = 50;\nconst DEFAULT_MAX_UNIQUE_RATIO = 0.5;\nconst DEFAULT_MIN_DIFFERENCE = 0.1;\nconst DEFAULT_LIMIT = 20;\n\n/**\n * Render a value as a grouping key.\n *\n * Objects and arrays return undefined: a nested structure does not name a\n * cohort, and stringifying it produces noise rather than a testable split.\n */\nfunction valueKey(value: unknown): string | undefined {\n  if (value === null || value === undefined) {\n    return undefined;\n  }\n  const kind = typeof value;\n  if (\n    kind === 'string' ||\n    kind === 'number' ||\n    kind === 'boolean' ||\n    kind === 'bigint'\n  ) {\n    return String(value);\n  }\n  return undefined;\n}\n\n/** Occurrences of one value, split by the group it appeared in. */\ninterface ValueCounts {\n  outlier: number;\n  baseline: number;\n}\n\n/** field -> value -> counts */\ntype FieldTally = Map<string, Map<string, ValueCounts>>;\n\n/**\n * Fold one group's events into the shared tally.\n *\n * Both groups accumulate into the same structure, so the caller never builds a\n * combined array or revisits an event once per candidate field.\n */\nfunction accumulate(\n  tally: FieldTally,\n  events: readonly AnalysisEvent[],\n  group: keyof ValueCounts,\n  includes: (field: string) => boolean,\n): void {\n  for (const event of events) {\n    for (const [field, raw] of Object.entries(event)) {\n      if (!includes(field)) {\n        continue;\n      }\n      const value = valueKey(raw);\n      if (value === undefined) {\n        continue;\n      }\n      let values = tally.get(field);\n      if (values === undefined) {\n        values = new Map<string, ValueCounts>();\n        tally.set(field, values);\n      }\n      const counts = values.get(value) ?? { outlier: 0, baseline: 0 };\n      counts[group]++;\n      values.set(value, counts);\n    }\n  }\n}\n\n/**\n * Rank the field/value pairs that separate an outlier group from a baseline.\n *\n * Returns an empty array when either group is empty, because a fraction over\n * zero events carries no information.\n *\n * @param options - The two populations and the scan limits\n * @returns Differences sorted by absolute strength, strongest first\n */\nexport function compareCohorts(\n  options: CompareCohortsOptions,\n): CohortDifference[] {\n  const {\n    outlier,\n    baseline,\n    fields,\n    ignoreFields,\n    maxValuesPerField = DEFAULT_MAX_VALUES_PER_FIELD,\n    maxUniqueRatio = DEFAULT_MAX_UNIQUE_RATIO,\n    minDifference = DEFAULT_MIN_DIFFERENCE,\n    limit = DEFAULT_LIMIT,\n  } = options;\n\n  if (outlier.length === 0 || baseline.length === 0) {\n    return [];\n  }\n\n  const ignored = new Set(ignoreFields);\n  const selected = fields === undefined ? undefined : new Set(fields);\n  const includes = (field: string) =>\n    !ignored.has(field) && (selected === undefined || selected.has(field));\n\n  const tally: FieldTally = new Map();\n  accumulate(tally, outlier, 'outlier', includes);\n  accumulate(tally, baseline, 'baseline', includes);\n\n  const results: CohortDifference[] = [];\n  const total = outlier.length + baseline.length;\n\n  for (const [field, values] of tally) {\n    if (\n      values.size > maxValuesPerField ||\n      values.size > total * maxUniqueRatio\n    ) {\n      continue;\n    }\n\n    for (const [value, counts] of values) {\n      const outlierFraction = counts.outlier / outlier.length;\n      const baselineFraction = counts.baseline / baseline.length;\n      const difference = outlierFraction - baselineFraction;\n\n      if (Math.abs(difference) < minDifference) {\n        continue;\n      }\n\n      results.push({\n        field,\n        value,\n        outlierFraction,\n        baselineFraction,\n        difference,\n        outlierCount: counts.outlier,\n        baselineCount: counts.baseline,\n      });\n    }\n  }\n\n  // Strongest first. On a tie prefer the over-represented value, because a\n  // cohort you can open traces from beats one defined by its absence. Fall\n  // back to field and value so repeated runs return the same order.\n  results.sort(\n    (a, b) =>\n      Math.abs(b.difference) - Math.abs(a.difference) ||\n      b.difference - a.difference ||\n      a.field.localeCompare(b.field) ||\n      a.value.localeCompare(b.value),\n  );\n\n  return results.slice(0, limit);\n}\n"],"mappings":";AA6EA,MAAM,+BAA+B;AACrC,MAAM,2BAA2B;AACjC,MAAM,yBAAyB;AAC/B,MAAM,gBAAgB;;;;;;;AAQtB,SAAS,SAAS,OAAoC;CACpD,IAAI,UAAU,QAAQ,UAAU,QAC9B;CAEF,MAAM,OAAO,OAAO;CACpB,IACE,SAAS,YACT,SAAS,YACT,SAAS,aACT,SAAS,UAET,OAAO,OAAO,KAAK;AAGvB;;;;;;;AAiBA,SAAS,WACP,OACA,QACA,OACA,UACM;CACN,KAAK,MAAM,SAAS,QAClB,KAAK,MAAM,CAAC,OAAO,QAAQ,OAAO,QAAQ,KAAK,GAAG;EAChD,IAAI,CAAC,SAAS,KAAK,GACjB;EAEF,MAAM,QAAQ,SAAS,GAAG;EAC1B,IAAI,UAAU,QACZ;EAEF,IAAI,SAAS,MAAM,IAAI,KAAK;EAC5B,IAAI,WAAW,QAAW;GACxB,yBAAS,IAAI,IAAyB;GACtC,MAAM,IAAI,OAAO,MAAM;EACzB;EACA,MAAM,SAAS,OAAO,IAAI,KAAK,KAAK;GAAE,SAAS;GAAG,UAAU;EAAE;EAC9D,OAAO,MAAM;EACb,OAAO,IAAI,OAAO,MAAM;CAC1B;AAEJ;;;;;;;;;;AAWA,SAAgB,eACd,SACoB;CACpB,MAAM,EACJ,SACA,UACA,QACA,cACA,oBAAoB,8BACpB,iBAAiB,0BACjB,gBAAgB,wBAChB,QAAQ,kBACN;CAEJ,IAAI,QAAQ,WAAW,KAAK,SAAS,WAAW,GAC9C,OAAO,CAAC;CAGV,MAAM,UAAU,IAAI,IAAI,YAAY;CACpC,MAAM,WAAW,WAAW,SAAY,SAAY,IAAI,IAAI,MAAM;CAClE,MAAM,YAAY,UAChB,CAAC,QAAQ,IAAI,KAAK,MAAM,aAAa,UAAa,SAAS,IAAI,KAAK;CAEtE,MAAM,wBAAoB,IAAI,IAAI;CAClC,WAAW,OAAO,SAAS,WAAW,QAAQ;CAC9C,WAAW,OAAO,UAAU,YAAY,QAAQ;CAEhD,MAAM,UAA8B,CAAC;CACrC,MAAM,QAAQ,QAAQ,SAAS,SAAS;CAExC,KAAK,MAAM,CAAC,OAAO,WAAW,OAAO;EACnC,IACE,OAAO,OAAO,qBACd,OAAO,OAAO,QAAQ,gBAEtB;EAGF,KAAK,MAAM,CAAC,OAAO,WAAW,QAAQ;GACpC,MAAM,kBAAkB,OAAO,UAAU,QAAQ;GACjD,MAAM,mBAAmB,OAAO,WAAW,SAAS;GACpD,MAAM,aAAa,kBAAkB;GAErC,IAAI,KAAK,IAAI,UAAU,IAAI,eACzB;GAGF,QAAQ,KAAK;IACX;IACA;IACA;IACA;IACA;IACA,cAAc,OAAO;IACrB,eAAe,OAAO;GACxB,CAAC;EACH;CACF;CAKA,QAAQ,MACL,GAAG,MACF,KAAK,IAAI,EAAE,UAAU,IAAI,KAAK,IAAI,EAAE,UAAU,KAC9C,EAAE,aAAa,EAAE,cACjB,EAAE,MAAM,cAAc,EAAE,KAAK,KAC7B,EAAE,MAAM,cAAc,EAAE,KAAK,CACjC;CAEA,OAAO,QAAQ,MAAM,GAAG,KAAK;AAC/B"}

package/dist/attribute-redacting-processor-Pk7lAzWd.d.cts.map

@@ -1 +0,0 @@
-{"version":3,"file":"attribute-redacting-processor-Pk7lAzWd.d.cts","names":[],"sources":["../src/attribute-redacting-processor.ts"],"mappings":";;;;;;KAsCY,uBACV,aACA,OAAO,mBACJ;;;;KAKO;;;;KAKA,UAAU;;;;UAKL;;EAEf;;EAEA,SAAS;;EAET;;EAEA,OAAO;;;;;KAMG,kCAAkC;;;;UAK7B;;EAEf,cAAc;;EAGd,gBAAgB;;EAGhB;;EAGA,qBAAqB;;EAGrB,WAAW;;EAGX;;EAGA,WAAW;;;;;UAMI;EACf,UAAU,0BAA0B;;;;;cAMzB;;;;;;;;;;;;;;cAmBA;;;;aAIC,OAAA;;;;;aAKA,OAAA;;;;;aAWA,OAAA;;;;;;;;;;;;;;aAeA,OAAA;;;;;;;;;;;;;;;aA4BA,OAAA;;;;;;cAqDD,kBAAkB,OAC7B,yBACA;;;;;iBA+Cc,iCACd,KAAK,0BAA0B,oCAC9B,0BAA0B;;;;;;;iBA4NpB,mBACP,MAAM,cACN,UAAU,sBACT;;;;;;;;;;;;;;iBAuCa,wBACd,QAAQ,0BAA0B,0BACjC;;;;;;;;;;;;;cAgBU,uCAAuC;mBACjC;mBACA;EAGf,YAAA,kBAAkB,eAClB,SAAS;;;;EAUX,QAAQ,MAAM,MAAM,eAAe;;;;EAOnC,MAAM,MAAM;EAWZ,cAAc;EAId,YAAY"}

package/dist/attribute-redacting-processor-Pk7lAzWd.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"attribute-redacting-processor-Pk7lAzWd.d.ts","names":[],"sources":["../src/attribute-redacting-processor.ts"],"mappings":";;;;;;KAsCY,uBACV,aACA,OAAO,mBACJ;;;;KAKO;;;;KAKA,UAAU;;;;UAKL;;EAEf;;EAEA,SAAS;;EAET;;EAEA,OAAO;;;;;KAMG,kCAAkC;;;;UAK7B;;EAEf,cAAc;;EAGd,gBAAgB;;EAGhB;;EAGA,qBAAqB;;EAGrB,WAAW;;EAGX;;EAGA,WAAW;;;;;UAMI;EACf,UAAU,0BAA0B;;;;;cAMzB;;;;;;;;;;;;;;cAmBA;;;;aAIC,OAAA;;;;;aAKA,OAAA;;;;;aAWA,OAAA;;;;;;;;;;;;;;aAeA,OAAA;;;;;;;;;;;;;;;aA4BA,OAAA;;;;;;cAqDD,kBAAkB,OAC7B,yBACA;;;;;iBA+Cc,iCACd,KAAK,0BAA0B,oCAC9B,0BAA0B;;;;;;;iBA4NpB,mBACP,MAAM,cACN,UAAU,sBACT;;;;;;;;;;;;;;iBAuCa,wBACd,QAAQ,0BAA0B,0BACjC;;;;;;;;;;;;;cAgBU,uCAAuC;mBACjC;mBACA;EAGf,YAAA,kBAAkB,eAClB,SAAS;;;;EAUX,QAAQ,MAAM,MAAM,eAAe;;;;EAOnC,MAAM,MAAM;EAWZ,cAAc;EAId,YAAY"}

package/dist/attribute-redacting-processor.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"attribute-redacting-processor.cjs","names":[],"sources":["../src/attribute-redacting-processor.ts"],"sourcesContent":["/**\n * Attribute Redacting Processor\n *\n * Automatically redacts PII and sensitive data from span attributes before export.\n * This is critical for compliance (GDPR, PCI-DSS, HIPAA) and data security.\n *\n * @example Basic usage with preset\n * ```typescript\n * init({\n *   service: 'my-app',\n *   attributeRedactor: 'default'\n * })\n * ```\n *\n * @example Custom patterns\n * ```typescript\n * init({\n *   service: 'my-app',\n *   attributeRedactor: {\n *     keyPatterns: [/password/i, /secret/i],\n *     valuePatterns: [\n *       { name: 'customerId', pattern: /CUST-\\d{8}/g, replacement: 'CUST-***' }\n *     ]\n *   }\n * })\n * ```\n */\n\nimport type {\n  SpanProcessor,\n  ReadableSpan,\n} from '@opentelemetry/sdk-trace-base';\nimport type { Context, AttributeValue, Attributes } from '@opentelemetry/api';\nimport type { Span } from '@opentelemetry/sdk-trace-base';\n\n/**\n * Custom redactor function type\n */\nexport type AttributeRedactorFn = (\n  key: string,\n  value: AttributeValue,\n) => AttributeValue;\n\n/**\n * Built-in redactor preset names\n */\nexport type AttributeRedactorPreset = 'default' | 'strict' | 'pci-dss';\n\n/**\n * Masker function type - receives the matched string and returns a masked version\n */\nexport type MaskFn = (match: string) => string;\n\n/**\n * Value pattern configuration\n */\nexport interface ValuePatternConfig {\n  /** Name for debugging/logging */\n  name: string;\n  /** Regex pattern to match in values */\n  pattern: RegExp;\n  /** Custom replacement (default: uses global replacement) */\n  replacement?: string;\n  /** Mask function for smart partial masking (overrides replacement) */\n  mask?: MaskFn;\n}\n\n/**\n * Built-in PII pattern names\n */\nexport type BuiltinPatternName = keyof typeof builtinPatterns;\n\n/**\n * Attribute redactor configuration\n */\nexport interface AttributeRedactorConfig {\n  /** Patterns to match against attribute keys (redacts entire value if key matches) */\n  keyPatterns?: RegExp[];\n\n  /** Patterns to match against attribute values (redacts matched portion) */\n  valuePatterns?: ValuePatternConfig[];\n\n  /** Dot-notation paths to redact (e.g. 'user.password', 'payment.card') */\n  paths?: string[];\n\n  /** Built-in PII patterns to enable. `true` enables all, `false` disables all, array selects specific ones. */\n  builtins?: boolean | BuiltinPatternName[];\n\n  /** Custom RegExp patterns for string-level redaction */\n  patterns?: RegExp[];\n\n  /** Default replacement string (default: '[REDACTED]') */\n  replacement?: string;\n\n  /** Custom redactor function for full control */\n  redactor?: AttributeRedactorFn;\n}\n\n/**\n * Processor options\n */\nexport interface AttributeRedactingProcessorOptions {\n  redactor: AttributeRedactorConfig | AttributeRedactorPreset;\n}\n\n/**\n * Built-in patterns for detecting sensitive data\n */\nexport const REDACTOR_PATTERNS = {\n  // Value patterns (match content in attribute values)\n  email: /\\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}\\b/gi,\n  phone: /\\b\\d{3}[-.]?\\d{3}[-.]?\\d{4}\\b/g,\n  ssn: /\\b\\d{3}[-]?\\d{2}[-]?\\d{4}\\b/g,\n  creditCard: /\\b\\d{4}[- ]?\\d{4}[- ]?\\d{4}[- ]?\\d{4}\\b/g,\n  bearerToken: /Bearer\\s+[A-Za-z0-9._~+/=-]+/gi,\n  apiKeyInValue: /(?:api[_-]?key|apikey|api_secret)[=:][\\s\"']*[A-Za-z0-9_-]+/gi,\n  jwt: /eyJ[A-Za-z0-9_-]*\\.eyJ[A-Za-z0-9_-]*\\.[A-Za-z0-9_-]*/g,\n\n  // Key patterns (match attribute names - redacts entire value)\n  sensitiveKey:\n    /^(password|passwd|pwd|secret|token|api[_-]?key|auth|credential|private[_-]?key|authorization)$/i,\n} as const;\n\n/**\n * Built-in PII detection patterns with smart masking.\n * Each builtin preserves just enough signal for debugging while scrubbing PII.\n */\nexport const builtinPatterns = {\n  /** Credit card numbers → ****1111 (PCI DSS: last 4 allowed) */\n  creditCard: {\n    pattern: /\\b\\d{4}[\\s-]?\\d{4}[\\s-]?\\d{4}[\\s-]?\\d{4}\\b/g,\n    mask: (m: string) => `****${m.replaceAll(/[\\s-]/g, '').slice(-4)}`,\n  },\n  /** Email addresses → a***@***.com */\n  email: {\n    pattern: /[\\w.+-]+@[\\w-]+\\.[\\w.]+/g,\n    mask: (m: string) => {\n      const at = m.indexOf('@');\n      if (at < 1) return '***@***';\n      const tld = m.slice(m.lastIndexOf('.'));\n      return `${m[0]}***@***${tld}`;\n    },\n  },\n  /** IPv4 addresses → ***.***.***.100 (last octet only) */\n  ipv4: {\n    pattern:\n      /\\b(?!0\\.0\\.0\\.0\\b)(?!127\\.0\\.0\\.1\\b)\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\b/g,\n    mask: (m: string) => `***.***.***.${m.split('.').pop()}`,\n  },\n  /**\n   * International / formatted phone numbers.\n   *\n   * Matches:\n   * - `+33 1 23 45 67 89` -> `+33******89`\n   * - `(415) 555-1234` -> `********34`\n   * - `555-123-4567` / `555.123.4567` / `5551234567` -> `********67`\n   *\n   * Bare short digit runs like `12345678` are intentionally not matched.\n   */\n  phone: {\n    pattern:\n      /(?:\\+\\d{1,3}[\\s.-]?\\(?\\d{1,4}\\)?(?:[\\s.-]?\\d{2,4}){2,4}|\\(\\d{1,4}\\)(?:[\\s.-]?\\d{2,4}){2,4}|\\b\\d{3}[-.]?\\d{3}[-.]?\\d{4}\\b)/g,\n    mask: (m: string) => {\n      const digits = m.replaceAll(/[^\\d]/g, '');\n      const hasPlus = m.startsWith('+');\n      if (hasPlus && digits.length > 4) {\n        const ccMatch = m.match(/^\\+\\d{1,3}/);\n        const cc = ccMatch ? ccMatch[0] : '+';\n        return `${cc}******${digits.slice(-2)}`;\n      }\n      if (digits.length > 2) {\n        return `${'*'.repeat(digits.length - 2)}${digits.slice(-2)}`;\n      }\n      return '***';\n    },\n  },\n  /** JWT tokens → eyJ***.*** */\n  jwt: {\n    pattern: /\\beyJ[\\w-]*\\.[\\w-]*\\.[\\w-]*\\b/g,\n    mask: () => 'eyJ***.***',\n  },\n  /** Bearer tokens → Bearer *** */\n  bearer: {\n    pattern: /\\bBearer\\s+[\\w\\-.~+/]{8,}=*/gi,\n    mask: () => 'Bearer ***',\n  },\n  /** IBAN → FR76****189 (country + check digits + last 3) */\n  iban: {\n    pattern:\n      /\\b[A-Z]{2}\\d{2}[\\s-]?[\\dA-Z]{4}[\\s-]?[\\dA-Z]{4}[\\s-]?[\\dA-Z]{4}[\\s-]?[\\dA-Z]{0,4}[\\s-]?[\\dA-Z]{0,4}[\\s-]?[\\dA-Z]{0,4}\\b/g,\n    mask: (m: string) => {\n      const clean = m.replaceAll(/[\\s-]/g, '');\n      return `${clean.slice(0, 4)}****${clean.slice(-3)}`;\n    },\n  },\n} as const;\n\nfunction cloneRegex(re: RegExp): RegExp {\n  return new RegExp(re.source, re.flags);\n}\n\nfunction isPlainObject(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value);\n}\n\nfunction toRegExp(value: unknown): RegExp | undefined {\n  if (value instanceof RegExp) return value;\n  if (typeof value === 'string') return new RegExp(value, 'g');\n  if (isPlainObject(value) && typeof value.source === 'string') {\n    const flags = typeof value.flags === 'string' ? value.flags : 'g';\n    return new RegExp(value.source, flags);\n  }\n  return undefined;\n}\n\nfunction toRegExpArray(value: unknown): RegExp[] | undefined {\n  if (!Array.isArray(value)) return undefined;\n  const out: RegExp[] = [];\n  for (const item of value) {\n    const re = toRegExp(item);\n    if (re) out.push(re);\n  }\n  return out.length > 0 ? out : [];\n}\n\nfunction builtinToValuePattern(name: BuiltinPatternName): ValuePatternConfig {\n  const b = builtinPatterns[name];\n  return { name, pattern: cloneRegex(b.pattern), mask: b.mask };\n}\n\n/**\n * Default value patterns for the 'default' preset\n */\nconst DEFAULT_VALUE_PATTERNS: ValuePatternConfig[] = [\n  builtinToValuePattern('email'),\n  builtinToValuePattern('phone'),\n  { name: 'ssn', pattern: REDACTOR_PATTERNS.ssn },\n  builtinToValuePattern('creditCard'),\n];\n\n/**\n * Built-in redactor presets\n */\nexport const REDACTOR_PRESETS: Record<\n  AttributeRedactorPreset,\n  AttributeRedactorConfig\n> = {\n  /**\n   * Default preset - covers common PII patterns with smart masking\n   * Detects: emails (a***@***.com), phone numbers, SSNs, credit cards (****1111)\n   * Redacts keys: password, secret, token, apiKey, auth, credential\n   */\n  default: {\n    keyPatterns: [REDACTOR_PATTERNS.sensitiveKey],\n    valuePatterns: DEFAULT_VALUE_PATTERNS,\n    builtins: true,\n    replacement: '[REDACTED]',\n  },\n\n  /**\n   * Strict preset - more aggressive redaction for high-security environments\n   * Includes everything in default plus: Bearer tokens, JWTs, IBAN, API keys in values\n   */\n  strict: {\n    keyPatterns: [REDACTOR_PATTERNS.sensitiveKey, /bearer/i, /jwt/i],\n    valuePatterns: [\n      ...DEFAULT_VALUE_PATTERNS,\n      builtinToValuePattern('jwt'),\n      builtinToValuePattern('bearer'),\n      builtinToValuePattern('iban'),\n      { name: 'apiKeyInValue', pattern: REDACTOR_PATTERNS.apiKeyInValue },\n    ],\n    builtins: true,\n    replacement: '[REDACTED]',\n  },\n\n  /**\n   * PCI-DSS preset - focused on payment card industry compliance\n   * Redacts: credit card numbers (****1111), CVV-like patterns, card-related keys\n   */\n  'pci-dss': {\n    keyPatterns: [/card/i, /cvv/i, /cvc/i, /pan/i, /expir/i, /ccn/i],\n    valuePatterns: [builtinToValuePattern('creditCard')],\n    builtins: ['creditCard'],\n    replacement: '[REDACTED]',\n  },\n};\n\n/**\n * Normalize redactor config that may have been deserialized from JSON/YAML.\n * Converts regex-like values back to RegExp instances.\n */\nexport function normalizeAttributeRedactorConfig(\n  raw: AttributeRedactorConfig | AttributeRedactorPreset | unknown,\n): AttributeRedactorConfig | AttributeRedactorPreset | undefined {\n  if (raw === undefined || raw === null) return undefined;\n  if (typeof raw === 'string') return raw as AttributeRedactorPreset;\n  if (!isPlainObject(raw)) return undefined;\n\n  const config: AttributeRedactorConfig = {};\n\n  if (Array.isArray(raw.paths)) {\n    config.paths = raw.paths.filter(\n      (value): value is string => typeof value === 'string',\n    );\n  }\n\n  if (typeof raw.replacement === 'string') {\n    config.replacement = raw.replacement;\n  }\n\n  if (typeof raw.builtins === 'boolean') {\n    config.builtins = raw.builtins;\n  } else if (Array.isArray(raw.builtins)) {\n    config.builtins = raw.builtins.filter(\n      (name): name is BuiltinPatternName => typeof name === 'string',\n    );\n  }\n\n  if (typeof raw.redactor === 'function') {\n    config.redactor = raw.redactor as AttributeRedactorFn;\n  }\n\n  const keyPatterns = toRegExpArray(raw.keyPatterns);\n  if (keyPatterns) config.keyPatterns = keyPatterns;\n\n  const patterns = toRegExpArray(raw.patterns);\n  if (patterns) config.patterns = patterns;\n\n  if (Array.isArray(raw.valuePatterns)) {\n    const valuePatterns: ValuePatternConfig[] = [];\n    for (const item of raw.valuePatterns) {\n      if (!isPlainObject(item) || typeof item.name !== 'string') continue;\n      const pattern = toRegExp(item.pattern);\n      if (!pattern) continue;\n      valuePatterns.push({\n        name: item.name,\n        pattern,\n        replacement:\n          typeof item.replacement === 'string' ? item.replacement : undefined,\n        mask:\n          typeof item.mask === 'function' ? (item.mask as MaskFn) : undefined,\n      });\n    }\n    config.valuePatterns = valuePatterns;\n  }\n\n  return config;\n}\n\n/**\n * Resolve config to a normalized form\n */\nfunction resolveConfig(\n  config: AttributeRedactorConfig | AttributeRedactorPreset,\n): AttributeRedactorConfig {\n  const normalized = normalizeAttributeRedactorConfig(config);\n  if (!normalized) {\n    throw new Error('Invalid attribute redactor config');\n  }\n\n  if (typeof normalized === 'string') {\n    const preset = REDACTOR_PRESETS[normalized];\n    if (!preset) {\n      throw new Error(\n        `Unknown attribute redactor preset: \"${normalized}\". ` +\n          `Available presets: ${Object.keys(REDACTOR_PRESETS).join(', ')}`,\n      );\n    }\n    return preset;\n  }\n\n  const resolvedConfig: AttributeRedactorConfig = {\n    ...normalized,\n    keyPatterns: normalized.keyPatterns\n      ? [...normalized.keyPatterns]\n      : undefined,\n    valuePatterns: normalized.valuePatterns\n      ? [...normalized.valuePatterns]\n      : undefined,\n    paths: normalized.paths ? [...normalized.paths] : undefined,\n    patterns: normalized.patterns ? [...normalized.patterns] : undefined,\n  };\n\n  // Merge built-in patterns if enabled\n  if (resolvedConfig.builtins !== false) {\n    const builtinNames = Array.isArray(resolvedConfig.builtins)\n      ? resolvedConfig.builtins\n      : (Object.keys(builtinPatterns) as BuiltinPatternName[]);\n    const builtinValuePatterns = builtinNames\n      .filter((name) => name in builtinPatterns)\n      .map((name) => builtinToValuePattern(name));\n\n    resolvedConfig.valuePatterns = [\n      ...(resolvedConfig.valuePatterns ?? []),\n      ...builtinValuePatterns,\n    ];\n  }\n\n  return resolvedConfig;\n}\n\n/**\n * Create a redactor function from config\n */\nfunction createRedactorFromConfig(\n  config: AttributeRedactorConfig,\n): AttributeRedactorFn {\n  // If custom redactor provided, use it directly\n  if (config.redactor) {\n    return config.redactor;\n  }\n\n  const keyPatterns = config.keyPatterns ?? [];\n  const valuePatterns = config.valuePatterns ?? [];\n  const paths = config.paths ?? [];\n  const pathSet = new Set(paths);\n  const customPatterns = config.patterns ?? [];\n  const defaultReplacement = config.replacement ?? '[REDACTED]';\n\n  // Build masker list from valuePatterns that have mask functions\n  const maskers: [RegExp, MaskFn][] = valuePatterns\n    .filter((vp) => vp.mask)\n    .map((vp) => [cloneRegex(vp.pattern), vp.mask!]);\n\n  return (key: string, value: AttributeValue): AttributeValue => {\n    // Key-pattern and path-based redaction only applies to string values.\n    // Numbers, booleans and other non-string attributes are not credentials;\n    // replacing them with the string '[REDACTED]' silently changes their\n    // type and corrupts downstream consumers (LLM token counters etc.).\n    if (typeof value === 'string') {\n      for (const pattern of keyPatterns) {\n        pattern.lastIndex = 0;\n        if (pattern.test(key)) {\n          return defaultReplacement;\n        }\n      }\n      if (pathSet.has(key)) {\n        return defaultReplacement;\n      }\n    }\n\n    // For non-string values, return as-is\n    if (typeof value !== 'string') {\n      if (Array.isArray(value)) {\n        return value.map((item) => {\n          if (typeof item === 'string') {\n            return redactStringValue(\n              item,\n              valuePatterns,\n              maskers,\n              customPatterns,\n              defaultReplacement,\n            ) as string;\n          }\n          return item;\n        }) as AttributeValue;\n      }\n      return value;\n    }\n\n    // Three-tier strategy: path-based → masker-based → pattern-based\n    return redactStringValue(\n      value,\n      valuePatterns,\n      maskers,\n      customPatterns,\n      defaultReplacement,\n    );\n  };\n}\n\n/**\n * Apply three-tier redaction strategy to a string\n * 1. Masker-based: built-in patterns with smart partial masking\n * 2. Pattern-based: custom RegExp patterns replaced with replacement\n */\nfunction redactStringValue(\n  value: string,\n  patterns: ValuePatternConfig[],\n  maskers: [RegExp, MaskFn][],\n  customPatterns: RegExp[],\n  defaultReplacement: string,\n): string {\n  let result = value;\n\n  // Tier 1: Apply maskers (smart partial masking)\n  for (const [pattern, mask] of maskers) {\n    pattern.lastIndex = 0;\n    result = result.replace(pattern, mask);\n  }\n\n  // Tier 2: Apply value patterns without mask (full replacement)\n  for (const { pattern, replacement, mask } of patterns) {\n    if (mask) continue; // Already handled by maskers\n    pattern.lastIndex = 0;\n    result = result.replaceAll(pattern, replacement ?? defaultReplacement);\n  }\n\n  // Tier 3: Apply custom patterns\n  for (const pattern of customPatterns) {\n    pattern.lastIndex = 0;\n    result = result.replaceAll(pattern, defaultReplacement);\n  }\n\n  return result;\n}\n\n/**\n * Create a proxy wrapper around ReadableSpan with redacted attributes\n *\n * Since ReadableSpan.attributes is readonly, we use a Proxy to intercept\n * attribute access and return the redacted version.\n */\nfunction createRedactedSpan(\n  span: ReadableSpan,\n  redactor: AttributeRedactorFn,\n): ReadableSpan {\n  // Pre-compute redacted attributes (cached for efficiency)\n  const redactedAttributes: Attributes = {};\n  for (const [key, value] of Object.entries(span.attributes)) {\n    if (value !== undefined) {\n      redactedAttributes[key] = redactor(key, value);\n    }\n  }\n\n  // Return a proxy that intercepts attribute access\n  return new Proxy(span, {\n    get(target, prop) {\n      if (prop === 'attributes') {\n        return redactedAttributes;\n      }\n      // For all other properties, delegate to the original span\n      const value = Reflect.get(target, prop);\n      // Bind methods to the original target\n      if (typeof value === 'function') {\n        return value.bind(target);\n      }\n      return value;\n    },\n  });\n}\n\n/**\n * Create an attribute redactor function from a config or preset.\n *\n * This is useful when you need to apply the same redaction logic\n * outside of the span processor pipeline (e.g., for canonical log lines).\n *\n * @example\n * ```typescript\n * const redactor = createAttributeRedactor('default');\n * const redactedValue = redactor('user.password', 'secret123');\n * // redactedValue === '[REDACTED]'\n * ```\n */\nexport function createAttributeRedactor(\n  config: AttributeRedactorConfig | AttributeRedactorPreset,\n): AttributeRedactorFn {\n  return createRedactorFromConfig(resolveConfig(config));\n}\n\n/**\n * Span processor that redacts sensitive data from span attributes.\n *\n * Redaction happens in onEnd() when all attributes are finalized.\n * Uses a Proxy wrapper to intercept attribute access since ReadableSpan\n * attributes are readonly.\n *\n * Common use cases:\n * - PII compliance (GDPR, CCPA)\n * - PCI-DSS compliance for payment data\n * - Preventing secrets from leaking to observability backends\n */\nexport class AttributeRedactingProcessor implements SpanProcessor {\n  private readonly wrappedProcessor: SpanProcessor;\n  private readonly redactor: AttributeRedactorFn;\n\n  constructor(\n    wrappedProcessor: SpanProcessor,\n    options: AttributeRedactingProcessorOptions,\n  ) {\n    this.wrappedProcessor = wrappedProcessor;\n    const config = resolveConfig(options.redactor);\n    this.redactor = createRedactorFromConfig(config);\n  }\n\n  /**\n   * Pass through onStart unchanged - attributes aren't finalized yet\n   */\n  onStart(span: Span, parentContext: Context): void {\n    this.wrappedProcessor.onStart(span, parentContext);\n  }\n\n  /**\n   * Redact attributes and forward to wrapped processor\n   */\n  onEnd(span: ReadableSpan): void {\n    try {\n      const redactedSpan = createRedactedSpan(span, this.redactor);\n      this.wrappedProcessor.onEnd(redactedSpan);\n    } catch {\n      // Fail-open: if redaction fails, forward original span\n      // This ensures we don't lose telemetry due to redaction errors\n      this.wrappedProcessor.onEnd(span);\n    }\n  }\n\n  forceFlush(): Promise<void> {\n    return this.wrappedProcessor.forceFlush();\n  }\n\n  shutdown(): Promise<void> {\n    return this.wrappedProcessor.shutdown();\n  }\n}\n\n/**\n * Export createRedactedSpan for advanced users who want to use it directly\n */\nexport { createRedactedSpan };\n"],"mappings":";;;;;;AA4GA,MAAa,oBAAoB;CAE/B,OAAO;CACP,OAAO;CACP,KAAK;CACL,YAAY;CACZ,aAAa;CACb,eAAe;CACf,KAAK;CAGL,cACE;AACJ;;;;;AAMA,MAAa,kBAAkB;;CAE7B,YAAY;EACV,SAAS;EACT,OAAO,MAAc,OAAO,EAAE,WAAW,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACjE;;CAEA,OAAO;EACL,SAAS;EACT,OAAO,MAAc;GAEnB,IADW,EAAE,QAAQ,GAChB,IAAI,GAAG,OAAO;GACnB,MAAM,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,CAAC;GACtC,OAAO,GAAG,EAAE,GAAG,SAAS;EAC1B;CACF;;CAEA,MAAM;EACJ,SACE;EACF,OAAO,MAAc,eAAe,EAAE,MAAM,GAAG,CAAC,CAAC,IAAI;CACvD;;;;;;;;;;;CAWA,OAAO;EACL,SACE;EACF,OAAO,MAAc;GACnB,MAAM,SAAS,EAAE,WAAW,UAAU,EAAE;GAExC,IADgB,EAAE,WAAW,GACnB,KAAK,OAAO,SAAS,GAAG;IAChC,MAAM,UAAU,EAAE,MAAM,YAAY;IAEpC,OAAO,GADI,UAAU,QAAQ,KAAK,IACrB,QAAQ,OAAO,MAAM,EAAE;GACtC;GACA,IAAI,OAAO,SAAS,GAClB,OAAO,GAAG,IAAI,OAAO,OAAO,SAAS,CAAC,IAAI,OAAO,MAAM,EAAE;GAE3D,OAAO;EACT;CACF;;CAEA,KAAK;EACH,SAAS;EACT,YAAY;CACd;;CAEA,QAAQ;EACN,SAAS;EACT,YAAY;CACd;;CAEA,MAAM;EACJ,SACE;EACF,OAAO,MAAc;GACnB,MAAM,QAAQ,EAAE,WAAW,UAAU,EAAE;GACvC,OAAO,GAAG,MAAM,MAAM,GAAG,CAAC,EAAE,MAAM,MAAM,MAAM,EAAE;EAClD;CACF;AACF;AAEA,SAAS,WAAW,IAAoB;CACtC,OAAO,IAAI,OAAO,GAAG,QAAQ,GAAG,KAAK;AACvC;AAEA,SAAS,cAAc,OAAkD;CACvE,OAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,SAAS,OAAoC;CACpD,IAAI,iBAAiB,QAAQ,OAAO;CACpC,IAAI,OAAO,UAAU,UAAU,OAAO,IAAI,OAAO,OAAO,GAAG;CAC3D,IAAI,cAAc,KAAK,KAAK,OAAO,MAAM,WAAW,UAAU;EAC5D,MAAM,QAAQ,OAAO,MAAM,UAAU,WAAW,MAAM,QAAQ;EAC9D,OAAO,IAAI,OAAO,MAAM,QAAQ,KAAK;CACvC;AAEF;AAEA,SAAS,cAAc,OAAsC;CAC3D,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO;CAClC,MAAM,MAAgB,CAAC;CACvB,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,KAAK,SAAS,IAAI;EACxB,IAAI,IAAI,IAAI,KAAK,EAAE;CACrB;CACA,OAAO,IAAI,SAAS,IAAI,MAAM,CAAC;AACjC;AAEA,SAAS,sBAAsB,MAA8C;CAC3E,MAAM,IAAI,gBAAgB;CAC1B,OAAO;EAAE;EAAM,SAAS,WAAW,EAAE,OAAO;EAAG,MAAM,EAAE;CAAK;AAC9D;;;;AAKA,MAAM,yBAA+C;CACnD,sBAAsB,OAAO;CAC7B,sBAAsB,OAAO;CAC7B;EAAE,MAAM;EAAO,SAAS,kBAAkB;CAAI;CAC9C,sBAAsB,YAAY;AACpC;;;;AAKA,MAAa,mBAGT;;;;;;CAMF,SAAS;EACP,aAAa,CAAC,kBAAkB,YAAY;EAC5C,eAAe;EACf,UAAU;EACV,aAAa;CACf;;;;;CAMA,QAAQ;EACN,aAAa;GAAC,kBAAkB;GAAc;GAAW;EAAM;EAC/D,eAAe;GACb,GAAG;GACH,sBAAsB,KAAK;GAC3B,sBAAsB,QAAQ;GAC9B,sBAAsB,MAAM;GAC5B;IAAE,MAAM;IAAiB,SAAS,kBAAkB;GAAc;EACpE;EACA,UAAU;EACV,aAAa;CACf;;;;;CAMA,WAAW;EACT,aAAa;GAAC;GAAS;GAAQ;GAAQ;GAAQ;GAAU;EAAM;EAC/D,eAAe,CAAC,sBAAsB,YAAY,CAAC;EACnD,UAAU,CAAC,YAAY;EACvB,aAAa;CACf;AACF;;;;;AAMA,SAAgB,iCACd,KAC+D;CAC/D,IAAI,QAAQ,UAAa,QAAQ,MAAM,OAAO;CAC9C,IAAI,OAAO,QAAQ,UAAU,OAAO;CACpC,IAAI,CAAC,cAAc,GAAG,GAAG,OAAO;CAEhC,MAAM,SAAkC,CAAC;CAEzC,IAAI,MAAM,QAAQ,IAAI,KAAK,GACzB,OAAO,QAAQ,IAAI,MAAM,QACtB,UAA2B,OAAO,UAAU,QAC/C;CAGF,IAAI,OAAO,IAAI,gBAAgB,UAC7B,OAAO,cAAc,IAAI;CAG3B,IAAI,OAAO,IAAI,aAAa,WAC1B,OAAO,WAAW,IAAI;MACjB,IAAI,MAAM,QAAQ,IAAI,QAAQ,GACnC,OAAO,WAAW,IAAI,SAAS,QAC5B,SAAqC,OAAO,SAAS,QACxD;CAGF,IAAI,OAAO,IAAI,aAAa,YAC1B,OAAO,WAAW,IAAI;CAGxB,MAAM,cAAc,cAAc,IAAI,WAAW;CACjD,IAAI,aAAa,OAAO,cAAc;CAEtC,MAAM,WAAW,cAAc,IAAI,QAAQ;CAC3C,IAAI,UAAU,OAAO,WAAW;CAEhC,IAAI,MAAM,QAAQ,IAAI,aAAa,GAAG;EACpC,MAAM,gBAAsC,CAAC;EAC7C,KAAK,MAAM,QAAQ,IAAI,eAAe;GACpC,IAAI,CAAC,cAAc,IAAI,KAAK,OAAO,KAAK,SAAS,UAAU;GAC3D,MAAM,UAAU,SAAS,KAAK,OAAO;GACrC,IAAI,CAAC,SAAS;GACd,cAAc,KAAK;IACjB,MAAM,KAAK;IACX;IACA,aACE,OAAO,KAAK,gBAAgB,WAAW,KAAK,cAAc;IAC5D,MACE,OAAO,KAAK,SAAS,aAAc,KAAK,OAAkB;GAC9D,CAAC;EACH;EACA,OAAO,gBAAgB;CACzB;CAEA,OAAO;AACT;;;;AAKA,SAAS,cACP,QACyB;CACzB,MAAM,aAAa,iCAAiC,MAAM;CAC1D,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,mCAAmC;CAGrD,IAAI,OAAO,eAAe,UAAU;EAClC,MAAM,SAAS,iBAAiB;EAChC,IAAI,CAAC,QACH,MAAM,IAAI,MACR,uCAAuC,WAAW,wBAC1B,OAAO,KAAK,gBAAgB,CAAC,CAAC,KAAK,IAAI,GACjE;EAEF,OAAO;CACT;CAEA,MAAM,iBAA0C;EAC9C,GAAG;EACH,aAAa,WAAW,cACpB,CAAC,GAAG,WAAW,WAAW,IAC1B;EACJ,eAAe,WAAW,gBACtB,CAAC,GAAG,WAAW,aAAa,IAC5B;EACJ,OAAO,WAAW,QAAQ,CAAC,GAAG,WAAW,KAAK,IAAI;EAClD,UAAU,WAAW,WAAW,CAAC,GAAG,WAAW,QAAQ,IAAI;CAC7D;CAGA,IAAI,eAAe,aAAa,OAAO;EAIrC,MAAM,wBAHe,MAAM,QAAQ,eAAe,QAAQ,IACtD,eAAe,WACd,OAAO,KAAK,eAAe,EACS,CACtC,QAAQ,SAAS,QAAQ,eAAe,CAAC,CACzC,KAAK,SAAS,sBAAsB,IAAI,CAAC;EAE5C,eAAe,gBAAgB,CAC7B,GAAI,eAAe,iBAAiB,CAAC,GACrC,GAAG,oBACL;CACF;CAEA,OAAO;AACT;;;;AAKA,SAAS,yBACP,QACqB;CAErB,IAAI,OAAO,UACT,OAAO,OAAO;CAGhB,MAAM,cAAc,OAAO,eAAe,CAAC;CAC3C,MAAM,gBAAgB,OAAO,iBAAiB,CAAC;CAC/C,MAAM,QAAQ,OAAO,SAAS,CAAC;CAC/B,MAAM,UAAU,IAAI,IAAI,KAAK;CAC7B,MAAM,iBAAiB,OAAO,YAAY,CAAC;CAC3C,MAAM,qBAAqB,OAAO,eAAe;CAGjD,MAAM,UAA8B,cACjC,QAAQ,OAAO,GAAG,IAAI,CAAC,CACvB,KAAK,OAAO,CAAC,WAAW,GAAG,OAAO,GAAG,GAAG,IAAK,CAAC;CAEjD,QAAQ,KAAa,UAA0C;EAK7D,IAAI,OAAO,UAAU,UAAU;GAC7B,KAAK,MAAM,WAAW,aAAa;IACjC,QAAQ,YAAY;IACpB,IAAI,QAAQ,KAAK,GAAG,GAClB,OAAO;GAEX;GACA,IAAI,QAAQ,IAAI,GAAG,GACjB,OAAO;EAEX;EAGA,IAAI,OAAO,UAAU,UAAU;GAC7B,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MAAM,KAAK,SAAS;IACzB,IAAI,OAAO,SAAS,UAClB,OAAO,kBACL,MACA,eACA,SACA,gBACA,kBACF;IAEF,OAAO;GACT,CAAC;GAEH,OAAO;EACT;EAGA,OAAO,kBACL,OACA,eACA,SACA,gBACA,kBACF;CACF;AACF;;;;;;AAOA,SAAS,kBACP,OACA,UACA,SACA,gBACA,oBACQ;CACR,IAAI,SAAS;CAGb,KAAK,MAAM,CAAC,SAAS,SAAS,SAAS;EACrC,QAAQ,YAAY;EACpB,SAAS,OAAO,QAAQ,SAAS,IAAI;CACvC;CAGA,KAAK,MAAM,EAAE,SAAS,aAAa,UAAU,UAAU;EACrD,IAAI,MAAM;EACV,QAAQ,YAAY;EACpB,SAAS,OAAO,WAAW,SAAS,eAAe,kBAAkB;CACvE;CAGA,KAAK,MAAM,WAAW,gBAAgB;EACpC,QAAQ,YAAY;EACpB,SAAS,OAAO,WAAW,SAAS,kBAAkB;CACxD;CAEA,OAAO;AACT;;;;;;;AAQA,SAAS,mBACP,MACA,UACc;CAEd,MAAM,qBAAiC,CAAC;CACxC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,UAAU,GACvD,IAAI,UAAU,QACZ,mBAAmB,OAAO,SAAS,KAAK,KAAK;CAKjD,OAAO,IAAI,MAAM,MAAM,EACrB,IAAI,QAAQ,MAAM;EAChB,IAAI,SAAS,cACX,OAAO;EAGT,MAAM,QAAQ,QAAQ,IAAI,QAAQ,IAAI;EAEtC,IAAI,OAAO,UAAU,YACnB,OAAO,MAAM,KAAK,MAAM;EAE1B,OAAO;CACT,EACF,CAAC;AACH;;;;;;;;;;;;;;AAeA,SAAgB,wBACd,QACqB;CACrB,OAAO,yBAAyB,cAAc,MAAM,CAAC;AACvD;;;;;;;;;;;;;AAcA,IAAa,8BAAb,MAAkE;CAChE,AAAiB;CACjB,AAAiB;CAEjB,YACE,kBACA,SACA;EACA,KAAK,mBAAmB;EACxB,MAAM,SAAS,cAAc,QAAQ,QAAQ;EAC7C,KAAK,WAAW,yBAAyB,MAAM;CACjD;;;;CAKA,QAAQ,MAAY,eAA8B;EAChD,KAAK,iBAAiB,QAAQ,MAAM,aAAa;CACnD;;;;CAKA,MAAM,MAA0B;EAC9B,IAAI;GACF,MAAM,eAAe,mBAAmB,MAAM,KAAK,QAAQ;GAC3D,KAAK,iBAAiB,MAAM,YAAY;EAC1C,QAAQ;GAGN,KAAK,iBAAiB,MAAM,IAAI;EAClC;CACF;CAEA,aAA4B;EAC1B,OAAO,KAAK,iBAAiB,WAAW;CAC1C;CAEA,WAA0B;EACxB,OAAO,KAAK,iBAAiB,SAAS;CACxC;AACF"}

package/dist/attribute-redacting-processor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"attribute-redacting-processor.js","names":[],"sources":["../src/attribute-redacting-processor.ts"],"sourcesContent":["/**\n * Attribute Redacting Processor\n *\n * Automatically redacts PII and sensitive data from span attributes before export.\n * This is critical for compliance (GDPR, PCI-DSS, HIPAA) and data security.\n *\n * @example Basic usage with preset\n * ```typescript\n * init({\n *   service: 'my-app',\n *   attributeRedactor: 'default'\n * })\n * ```\n *\n * @example Custom patterns\n * ```typescript\n * init({\n *   service: 'my-app',\n *   attributeRedactor: {\n *     keyPatterns: [/password/i, /secret/i],\n *     valuePatterns: [\n *       { name: 'customerId', pattern: /CUST-\\d{8}/g, replacement: 'CUST-***' }\n *     ]\n *   }\n * })\n * ```\n */\n\nimport type {\n  SpanProcessor,\n  ReadableSpan,\n} from '@opentelemetry/sdk-trace-base';\nimport type { Context, AttributeValue, Attributes } from '@opentelemetry/api';\nimport type { Span } from '@opentelemetry/sdk-trace-base';\n\n/**\n * Custom redactor function type\n */\nexport type AttributeRedactorFn = (\n  key: string,\n  value: AttributeValue,\n) => AttributeValue;\n\n/**\n * Built-in redactor preset names\n */\nexport type AttributeRedactorPreset = 'default' | 'strict' | 'pci-dss';\n\n/**\n * Masker function type - receives the matched string and returns a masked version\n */\nexport type MaskFn = (match: string) => string;\n\n/**\n * Value pattern configuration\n */\nexport interface ValuePatternConfig {\n  /** Name for debugging/logging */\n  name: string;\n  /** Regex pattern to match in values */\n  pattern: RegExp;\n  /** Custom replacement (default: uses global replacement) */\n  replacement?: string;\n  /** Mask function for smart partial masking (overrides replacement) */\n  mask?: MaskFn;\n}\n\n/**\n * Built-in PII pattern names\n */\nexport type BuiltinPatternName = keyof typeof builtinPatterns;\n\n/**\n * Attribute redactor configuration\n */\nexport interface AttributeRedactorConfig {\n  /** Patterns to match against attribute keys (redacts entire value if key matches) */\n  keyPatterns?: RegExp[];\n\n  /** Patterns to match against attribute values (redacts matched portion) */\n  valuePatterns?: ValuePatternConfig[];\n\n  /** Dot-notation paths to redact (e.g. 'user.password', 'payment.card') */\n  paths?: string[];\n\n  /** Built-in PII patterns to enable. `true` enables all, `false` disables all, array selects specific ones. */\n  builtins?: boolean | BuiltinPatternName[];\n\n  /** Custom RegExp patterns for string-level redaction */\n  patterns?: RegExp[];\n\n  /** Default replacement string (default: '[REDACTED]') */\n  replacement?: string;\n\n  /** Custom redactor function for full control */\n  redactor?: AttributeRedactorFn;\n}\n\n/**\n * Processor options\n */\nexport interface AttributeRedactingProcessorOptions {\n  redactor: AttributeRedactorConfig | AttributeRedactorPreset;\n}\n\n/**\n * Built-in patterns for detecting sensitive data\n */\nexport const REDACTOR_PATTERNS = {\n  // Value patterns (match content in attribute values)\n  email: /\\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,}\\b/gi,\n  phone: /\\b\\d{3}[-.]?\\d{3}[-.]?\\d{4}\\b/g,\n  ssn: /\\b\\d{3}[-]?\\d{2}[-]?\\d{4}\\b/g,\n  creditCard: /\\b\\d{4}[- ]?\\d{4}[- ]?\\d{4}[- ]?\\d{4}\\b/g,\n  bearerToken: /Bearer\\s+[A-Za-z0-9._~+/=-]+/gi,\n  apiKeyInValue: /(?:api[_-]?key|apikey|api_secret)[=:][\\s\"']*[A-Za-z0-9_-]+/gi,\n  jwt: /eyJ[A-Za-z0-9_-]*\\.eyJ[A-Za-z0-9_-]*\\.[A-Za-z0-9_-]*/g,\n\n  // Key patterns (match attribute names - redacts entire value)\n  sensitiveKey:\n    /^(password|passwd|pwd|secret|token|api[_-]?key|auth|credential|private[_-]?key|authorization)$/i,\n} as const;\n\n/**\n * Built-in PII detection patterns with smart masking.\n * Each builtin preserves just enough signal for debugging while scrubbing PII.\n */\nexport const builtinPatterns = {\n  /** Credit card numbers → ****1111 (PCI DSS: last 4 allowed) */\n  creditCard: {\n    pattern: /\\b\\d{4}[\\s-]?\\d{4}[\\s-]?\\d{4}[\\s-]?\\d{4}\\b/g,\n    mask: (m: string) => `****${m.replaceAll(/[\\s-]/g, '').slice(-4)}`,\n  },\n  /** Email addresses → a***@***.com */\n  email: {\n    pattern: /[\\w.+-]+@[\\w-]+\\.[\\w.]+/g,\n    mask: (m: string) => {\n      const at = m.indexOf('@');\n      if (at < 1) return '***@***';\n      const tld = m.slice(m.lastIndexOf('.'));\n      return `${m[0]}***@***${tld}`;\n    },\n  },\n  /** IPv4 addresses → ***.***.***.100 (last octet only) */\n  ipv4: {\n    pattern:\n      /\\b(?!0\\.0\\.0\\.0\\b)(?!127\\.0\\.0\\.1\\b)\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\b/g,\n    mask: (m: string) => `***.***.***.${m.split('.').pop()}`,\n  },\n  /**\n   * International / formatted phone numbers.\n   *\n   * Matches:\n   * - `+33 1 23 45 67 89` -> `+33******89`\n   * - `(415) 555-1234` -> `********34`\n   * - `555-123-4567` / `555.123.4567` / `5551234567` -> `********67`\n   *\n   * Bare short digit runs like `12345678` are intentionally not matched.\n   */\n  phone: {\n    pattern:\n      /(?:\\+\\d{1,3}[\\s.-]?\\(?\\d{1,4}\\)?(?:[\\s.-]?\\d{2,4}){2,4}|\\(\\d{1,4}\\)(?:[\\s.-]?\\d{2,4}){2,4}|\\b\\d{3}[-.]?\\d{3}[-.]?\\d{4}\\b)/g,\n    mask: (m: string) => {\n      const digits = m.replaceAll(/[^\\d]/g, '');\n      const hasPlus = m.startsWith('+');\n      if (hasPlus && digits.length > 4) {\n        const ccMatch = m.match(/^\\+\\d{1,3}/);\n        const cc = ccMatch ? ccMatch[0] : '+';\n        return `${cc}******${digits.slice(-2)}`;\n      }\n      if (digits.length > 2) {\n        return `${'*'.repeat(digits.length - 2)}${digits.slice(-2)}`;\n      }\n      return '***';\n    },\n  },\n  /** JWT tokens → eyJ***.*** */\n  jwt: {\n    pattern: /\\beyJ[\\w-]*\\.[\\w-]*\\.[\\w-]*\\b/g,\n    mask: () => 'eyJ***.***',\n  },\n  /** Bearer tokens → Bearer *** */\n  bearer: {\n    pattern: /\\bBearer\\s+[\\w\\-.~+/]{8,}=*/gi,\n    mask: () => 'Bearer ***',\n  },\n  /** IBAN → FR76****189 (country + check digits + last 3) */\n  iban: {\n    pattern:\n      /\\b[A-Z]{2}\\d{2}[\\s-]?[\\dA-Z]{4}[\\s-]?[\\dA-Z]{4}[\\s-]?[\\dA-Z]{4}[\\s-]?[\\dA-Z]{0,4}[\\s-]?[\\dA-Z]{0,4}[\\s-]?[\\dA-Z]{0,4}\\b/g,\n    mask: (m: string) => {\n      const clean = m.replaceAll(/[\\s-]/g, '');\n      return `${clean.slice(0, 4)}****${clean.slice(-3)}`;\n    },\n  },\n} as const;\n\nfunction cloneRegex(re: RegExp): RegExp {\n  return new RegExp(re.source, re.flags);\n}\n\nfunction isPlainObject(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value);\n}\n\nfunction toRegExp(value: unknown): RegExp | undefined {\n  if (value instanceof RegExp) return value;\n  if (typeof value === 'string') return new RegExp(value, 'g');\n  if (isPlainObject(value) && typeof value.source === 'string') {\n    const flags = typeof value.flags === 'string' ? value.flags : 'g';\n    return new RegExp(value.source, flags);\n  }\n  return undefined;\n}\n\nfunction toRegExpArray(value: unknown): RegExp[] | undefined {\n  if (!Array.isArray(value)) return undefined;\n  const out: RegExp[] = [];\n  for (const item of value) {\n    const re = toRegExp(item);\n    if (re) out.push(re);\n  }\n  return out.length > 0 ? out : [];\n}\n\nfunction builtinToValuePattern(name: BuiltinPatternName): ValuePatternConfig {\n  const b = builtinPatterns[name];\n  return { name, pattern: cloneRegex(b.pattern), mask: b.mask };\n}\n\n/**\n * Default value patterns for the 'default' preset\n */\nconst DEFAULT_VALUE_PATTERNS: ValuePatternConfig[] = [\n  builtinToValuePattern('email'),\n  builtinToValuePattern('phone'),\n  { name: 'ssn', pattern: REDACTOR_PATTERNS.ssn },\n  builtinToValuePattern('creditCard'),\n];\n\n/**\n * Built-in redactor presets\n */\nexport const REDACTOR_PRESETS: Record<\n  AttributeRedactorPreset,\n  AttributeRedactorConfig\n> = {\n  /**\n   * Default preset - covers common PII patterns with smart masking\n   * Detects: emails (a***@***.com), phone numbers, SSNs, credit cards (****1111)\n   * Redacts keys: password, secret, token, apiKey, auth, credential\n   */\n  default: {\n    keyPatterns: [REDACTOR_PATTERNS.sensitiveKey],\n    valuePatterns: DEFAULT_VALUE_PATTERNS,\n    builtins: true,\n    replacement: '[REDACTED]',\n  },\n\n  /**\n   * Strict preset - more aggressive redaction for high-security environments\n   * Includes everything in default plus: Bearer tokens, JWTs, IBAN, API keys in values\n   */\n  strict: {\n    keyPatterns: [REDACTOR_PATTERNS.sensitiveKey, /bearer/i, /jwt/i],\n    valuePatterns: [\n      ...DEFAULT_VALUE_PATTERNS,\n      builtinToValuePattern('jwt'),\n      builtinToValuePattern('bearer'),\n      builtinToValuePattern('iban'),\n      { name: 'apiKeyInValue', pattern: REDACTOR_PATTERNS.apiKeyInValue },\n    ],\n    builtins: true,\n    replacement: '[REDACTED]',\n  },\n\n  /**\n   * PCI-DSS preset - focused on payment card industry compliance\n   * Redacts: credit card numbers (****1111), CVV-like patterns, card-related keys\n   */\n  'pci-dss': {\n    keyPatterns: [/card/i, /cvv/i, /cvc/i, /pan/i, /expir/i, /ccn/i],\n    valuePatterns: [builtinToValuePattern('creditCard')],\n    builtins: ['creditCard'],\n    replacement: '[REDACTED]',\n  },\n};\n\n/**\n * Normalize redactor config that may have been deserialized from JSON/YAML.\n * Converts regex-like values back to RegExp instances.\n */\nexport function normalizeAttributeRedactorConfig(\n  raw: AttributeRedactorConfig | AttributeRedactorPreset | unknown,\n): AttributeRedactorConfig | AttributeRedactorPreset | undefined {\n  if (raw === undefined || raw === null) return undefined;\n  if (typeof raw === 'string') return raw as AttributeRedactorPreset;\n  if (!isPlainObject(raw)) return undefined;\n\n  const config: AttributeRedactorConfig = {};\n\n  if (Array.isArray(raw.paths)) {\n    config.paths = raw.paths.filter(\n      (value): value is string => typeof value === 'string',\n    );\n  }\n\n  if (typeof raw.replacement === 'string') {\n    config.replacement = raw.replacement;\n  }\n\n  if (typeof raw.builtins === 'boolean') {\n    config.builtins = raw.builtins;\n  } else if (Array.isArray(raw.builtins)) {\n    config.builtins = raw.builtins.filter(\n      (name): name is BuiltinPatternName => typeof name === 'string',\n    );\n  }\n\n  if (typeof raw.redactor === 'function') {\n    config.redactor = raw.redactor as AttributeRedactorFn;\n  }\n\n  const keyPatterns = toRegExpArray(raw.keyPatterns);\n  if (keyPatterns) config.keyPatterns = keyPatterns;\n\n  const patterns = toRegExpArray(raw.patterns);\n  if (patterns) config.patterns = patterns;\n\n  if (Array.isArray(raw.valuePatterns)) {\n    const valuePatterns: ValuePatternConfig[] = [];\n    for (const item of raw.valuePatterns) {\n      if (!isPlainObject(item) || typeof item.name !== 'string') continue;\n      const pattern = toRegExp(item.pattern);\n      if (!pattern) continue;\n      valuePatterns.push({\n        name: item.name,\n        pattern,\n        replacement:\n          typeof item.replacement === 'string' ? item.replacement : undefined,\n        mask:\n          typeof item.mask === 'function' ? (item.mask as MaskFn) : undefined,\n      });\n    }\n    config.valuePatterns = valuePatterns;\n  }\n\n  return config;\n}\n\n/**\n * Resolve config to a normalized form\n */\nfunction resolveConfig(\n  config: AttributeRedactorConfig | AttributeRedactorPreset,\n): AttributeRedactorConfig {\n  const normalized = normalizeAttributeRedactorConfig(config);\n  if (!normalized) {\n    throw new Error('Invalid attribute redactor config');\n  }\n\n  if (typeof normalized === 'string') {\n    const preset = REDACTOR_PRESETS[normalized];\n    if (!preset) {\n      throw new Error(\n        `Unknown attribute redactor preset: \"${normalized}\". ` +\n          `Available presets: ${Object.keys(REDACTOR_PRESETS).join(', ')}`,\n      );\n    }\n    return preset;\n  }\n\n  const resolvedConfig: AttributeRedactorConfig = {\n    ...normalized,\n    keyPatterns: normalized.keyPatterns\n      ? [...normalized.keyPatterns]\n      : undefined,\n    valuePatterns: normalized.valuePatterns\n      ? [...normalized.valuePatterns]\n      : undefined,\n    paths: normalized.paths ? [...normalized.paths] : undefined,\n    patterns: normalized.patterns ? [...normalized.patterns] : undefined,\n  };\n\n  // Merge built-in patterns if enabled\n  if (resolvedConfig.builtins !== false) {\n    const builtinNames = Array.isArray(resolvedConfig.builtins)\n      ? resolvedConfig.builtins\n      : (Object.keys(builtinPatterns) as BuiltinPatternName[]);\n    const builtinValuePatterns = builtinNames\n      .filter((name) => name in builtinPatterns)\n      .map((name) => builtinToValuePattern(name));\n\n    resolvedConfig.valuePatterns = [\n      ...(resolvedConfig.valuePatterns ?? []),\n      ...builtinValuePatterns,\n    ];\n  }\n\n  return resolvedConfig;\n}\n\n/**\n * Create a redactor function from config\n */\nfunction createRedactorFromConfig(\n  config: AttributeRedactorConfig,\n): AttributeRedactorFn {\n  // If custom redactor provided, use it directly\n  if (config.redactor) {\n    return config.redactor;\n  }\n\n  const keyPatterns = config.keyPatterns ?? [];\n  const valuePatterns = config.valuePatterns ?? [];\n  const paths = config.paths ?? [];\n  const pathSet = new Set(paths);\n  const customPatterns = config.patterns ?? [];\n  const defaultReplacement = config.replacement ?? '[REDACTED]';\n\n  // Build masker list from valuePatterns that have mask functions\n  const maskers: [RegExp, MaskFn][] = valuePatterns\n    .filter((vp) => vp.mask)\n    .map((vp) => [cloneRegex(vp.pattern), vp.mask!]);\n\n  return (key: string, value: AttributeValue): AttributeValue => {\n    // Key-pattern and path-based redaction only applies to string values.\n    // Numbers, booleans and other non-string attributes are not credentials;\n    // replacing them with the string '[REDACTED]' silently changes their\n    // type and corrupts downstream consumers (LLM token counters etc.).\n    if (typeof value === 'string') {\n      for (const pattern of keyPatterns) {\n        pattern.lastIndex = 0;\n        if (pattern.test(key)) {\n          return defaultReplacement;\n        }\n      }\n      if (pathSet.has(key)) {\n        return defaultReplacement;\n      }\n    }\n\n    // For non-string values, return as-is\n    if (typeof value !== 'string') {\n      if (Array.isArray(value)) {\n        return value.map((item) => {\n          if (typeof item === 'string') {\n            return redactStringValue(\n              item,\n              valuePatterns,\n              maskers,\n              customPatterns,\n              defaultReplacement,\n            ) as string;\n          }\n          return item;\n        }) as AttributeValue;\n      }\n      return value;\n    }\n\n    // Three-tier strategy: path-based → masker-based → pattern-based\n    return redactStringValue(\n      value,\n      valuePatterns,\n      maskers,\n      customPatterns,\n      defaultReplacement,\n    );\n  };\n}\n\n/**\n * Apply three-tier redaction strategy to a string\n * 1. Masker-based: built-in patterns with smart partial masking\n * 2. Pattern-based: custom RegExp patterns replaced with replacement\n */\nfunction redactStringValue(\n  value: string,\n  patterns: ValuePatternConfig[],\n  maskers: [RegExp, MaskFn][],\n  customPatterns: RegExp[],\n  defaultReplacement: string,\n): string {\n  let result = value;\n\n  // Tier 1: Apply maskers (smart partial masking)\n  for (const [pattern, mask] of maskers) {\n    pattern.lastIndex = 0;\n    result = result.replace(pattern, mask);\n  }\n\n  // Tier 2: Apply value patterns without mask (full replacement)\n  for (const { pattern, replacement, mask } of patterns) {\n    if (mask) continue; // Already handled by maskers\n    pattern.lastIndex = 0;\n    result = result.replaceAll(pattern, replacement ?? defaultReplacement);\n  }\n\n  // Tier 3: Apply custom patterns\n  for (const pattern of customPatterns) {\n    pattern.lastIndex = 0;\n    result = result.replaceAll(pattern, defaultReplacement);\n  }\n\n  return result;\n}\n\n/**\n * Create a proxy wrapper around ReadableSpan with redacted attributes\n *\n * Since ReadableSpan.attributes is readonly, we use a Proxy to intercept\n * attribute access and return the redacted version.\n */\nfunction createRedactedSpan(\n  span: ReadableSpan,\n  redactor: AttributeRedactorFn,\n): ReadableSpan {\n  // Pre-compute redacted attributes (cached for efficiency)\n  const redactedAttributes: Attributes = {};\n  for (const [key, value] of Object.entries(span.attributes)) {\n    if (value !== undefined) {\n      redactedAttributes[key] = redactor(key, value);\n    }\n  }\n\n  // Return a proxy that intercepts attribute access\n  return new Proxy(span, {\n    get(target, prop) {\n      if (prop === 'attributes') {\n        return redactedAttributes;\n      }\n      // For all other properties, delegate to the original span\n      const value = Reflect.get(target, prop);\n      // Bind methods to the original target\n      if (typeof value === 'function') {\n        return value.bind(target);\n      }\n      return value;\n    },\n  });\n}\n\n/**\n * Create an attribute redactor function from a config or preset.\n *\n * This is useful when you need to apply the same redaction logic\n * outside of the span processor pipeline (e.g., for canonical log lines).\n *\n * @example\n * ```typescript\n * const redactor = createAttributeRedactor('default');\n * const redactedValue = redactor('user.password', 'secret123');\n * // redactedValue === '[REDACTED]'\n * ```\n */\nexport function createAttributeRedactor(\n  config: AttributeRedactorConfig | AttributeRedactorPreset,\n): AttributeRedactorFn {\n  return createRedactorFromConfig(resolveConfig(config));\n}\n\n/**\n * Span processor that redacts sensitive data from span attributes.\n *\n * Redaction happens in onEnd() when all attributes are finalized.\n * Uses a Proxy wrapper to intercept attribute access since ReadableSpan\n * attributes are readonly.\n *\n * Common use cases:\n * - PII compliance (GDPR, CCPA)\n * - PCI-DSS compliance for payment data\n * - Preventing secrets from leaking to observability backends\n */\nexport class AttributeRedactingProcessor implements SpanProcessor {\n  private readonly wrappedProcessor: SpanProcessor;\n  private readonly redactor: AttributeRedactorFn;\n\n  constructor(\n    wrappedProcessor: SpanProcessor,\n    options: AttributeRedactingProcessorOptions,\n  ) {\n    this.wrappedProcessor = wrappedProcessor;\n    const config = resolveConfig(options.redactor);\n    this.redactor = createRedactorFromConfig(config);\n  }\n\n  /**\n   * Pass through onStart unchanged - attributes aren't finalized yet\n   */\n  onStart(span: Span, parentContext: Context): void {\n    this.wrappedProcessor.onStart(span, parentContext);\n  }\n\n  /**\n   * Redact attributes and forward to wrapped processor\n   */\n  onEnd(span: ReadableSpan): void {\n    try {\n      const redactedSpan = createRedactedSpan(span, this.redactor);\n      this.wrappedProcessor.onEnd(redactedSpan);\n    } catch {\n      // Fail-open: if redaction fails, forward original span\n      // This ensures we don't lose telemetry due to redaction errors\n      this.wrappedProcessor.onEnd(span);\n    }\n  }\n\n  forceFlush(): Promise<void> {\n    return this.wrappedProcessor.forceFlush();\n  }\n\n  shutdown(): Promise<void> {\n    return this.wrappedProcessor.shutdown();\n  }\n}\n\n/**\n * Export createRedactedSpan for advanced users who want to use it directly\n */\nexport { createRedactedSpan };\n"],"mappings":";;;;AA4GA,MAAa,oBAAoB;CAE/B,OAAO;CACP,OAAO;CACP,KAAK;CACL,YAAY;CACZ,aAAa;CACb,eAAe;CACf,KAAK;CAGL,cACE;AACJ;;;;;AAMA,MAAa,kBAAkB;;CAE7B,YAAY;EACV,SAAS;EACT,OAAO,MAAc,OAAO,EAAE,WAAW,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACjE;;CAEA,OAAO;EACL,SAAS;EACT,OAAO,MAAc;GAEnB,IADW,EAAE,QAAQ,GAChB,IAAI,GAAG,OAAO;GACnB,MAAM,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,CAAC;GACtC,OAAO,GAAG,EAAE,GAAG,SAAS;EAC1B;CACF;;CAEA,MAAM;EACJ,SACE;EACF,OAAO,MAAc,eAAe,EAAE,MAAM,GAAG,CAAC,CAAC,IAAI;CACvD;;;;;;;;;;;CAWA,OAAO;EACL,SACE;EACF,OAAO,MAAc;GACnB,MAAM,SAAS,EAAE,WAAW,UAAU,EAAE;GAExC,IADgB,EAAE,WAAW,GACnB,KAAK,OAAO,SAAS,GAAG;IAChC,MAAM,UAAU,EAAE,MAAM,YAAY;IAEpC,OAAO,GADI,UAAU,QAAQ,KAAK,IACrB,QAAQ,OAAO,MAAM,EAAE;GACtC;GACA,IAAI,OAAO,SAAS,GAClB,OAAO,GAAG,IAAI,OAAO,OAAO,SAAS,CAAC,IAAI,OAAO,MAAM,EAAE;GAE3D,OAAO;EACT;CACF;;CAEA,KAAK;EACH,SAAS;EACT,YAAY;CACd;;CAEA,QAAQ;EACN,SAAS;EACT,YAAY;CACd;;CAEA,MAAM;EACJ,SACE;EACF,OAAO,MAAc;GACnB,MAAM,QAAQ,EAAE,WAAW,UAAU,EAAE;GACvC,OAAO,GAAG,MAAM,MAAM,GAAG,CAAC,EAAE,MAAM,MAAM,MAAM,EAAE;EAClD;CACF;AACF;AAEA,SAAS,WAAW,IAAoB;CACtC,OAAO,IAAI,OAAO,GAAG,QAAQ,GAAG,KAAK;AACvC;AAEA,SAAS,cAAc,OAAkD;CACvE,OAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,SAAS,OAAoC;CACpD,IAAI,iBAAiB,QAAQ,OAAO;CACpC,IAAI,OAAO,UAAU,UAAU,OAAO,IAAI,OAAO,OAAO,GAAG;CAC3D,IAAI,cAAc,KAAK,KAAK,OAAO,MAAM,WAAW,UAAU;EAC5D,MAAM,QAAQ,OAAO,MAAM,UAAU,WAAW,MAAM,QAAQ;EAC9D,OAAO,IAAI,OAAO,MAAM,QAAQ,KAAK;CACvC;AAEF;AAEA,SAAS,cAAc,OAAsC;CAC3D,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO;CAClC,MAAM,MAAgB,CAAC;CACvB,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,KAAK,SAAS,IAAI;EACxB,IAAI,IAAI,IAAI,KAAK,EAAE;CACrB;CACA,OAAO,IAAI,SAAS,IAAI,MAAM,CAAC;AACjC;AAEA,SAAS,sBAAsB,MAA8C;CAC3E,MAAM,IAAI,gBAAgB;CAC1B,OAAO;EAAE;EAAM,SAAS,WAAW,EAAE,OAAO;EAAG,MAAM,EAAE;CAAK;AAC9D;;;;AAKA,MAAM,yBAA+C;CACnD,sBAAsB,OAAO;CAC7B,sBAAsB,OAAO;CAC7B;EAAE,MAAM;EAAO,SAAS,kBAAkB;CAAI;CAC9C,sBAAsB,YAAY;AACpC;;;;AAKA,MAAa,mBAGT;;;;;;CAMF,SAAS;EACP,aAAa,CAAC,kBAAkB,YAAY;EAC5C,eAAe;EACf,UAAU;EACV,aAAa;CACf;;;;;CAMA,QAAQ;EACN,aAAa;GAAC,kBAAkB;GAAc;GAAW;EAAM;EAC/D,eAAe;GACb,GAAG;GACH,sBAAsB,KAAK;GAC3B,sBAAsB,QAAQ;GAC9B,sBAAsB,MAAM;GAC5B;IAAE,MAAM;IAAiB,SAAS,kBAAkB;GAAc;EACpE;EACA,UAAU;EACV,aAAa;CACf;;;;;CAMA,WAAW;EACT,aAAa;GAAC;GAAS;GAAQ;GAAQ;GAAQ;GAAU;EAAM;EAC/D,eAAe,CAAC,sBAAsB,YAAY,CAAC;EACnD,UAAU,CAAC,YAAY;EACvB,aAAa;CACf;AACF;;;;;AAMA,SAAgB,iCACd,KAC+D;CAC/D,IAAI,QAAQ,UAAa,QAAQ,MAAM,OAAO;CAC9C,IAAI,OAAO,QAAQ,UAAU,OAAO;CACpC,IAAI,CAAC,cAAc,GAAG,GAAG,OAAO;CAEhC,MAAM,SAAkC,CAAC;CAEzC,IAAI,MAAM,QAAQ,IAAI,KAAK,GACzB,OAAO,QAAQ,IAAI,MAAM,QACtB,UAA2B,OAAO,UAAU,QAC/C;CAGF,IAAI,OAAO,IAAI,gBAAgB,UAC7B,OAAO,cAAc,IAAI;CAG3B,IAAI,OAAO,IAAI,aAAa,WAC1B,OAAO,WAAW,IAAI;MACjB,IAAI,MAAM,QAAQ,IAAI,QAAQ,GACnC,OAAO,WAAW,IAAI,SAAS,QAC5B,SAAqC,OAAO,SAAS,QACxD;CAGF,IAAI,OAAO,IAAI,aAAa,YAC1B,OAAO,WAAW,IAAI;CAGxB,MAAM,cAAc,cAAc,IAAI,WAAW;CACjD,IAAI,aAAa,OAAO,cAAc;CAEtC,MAAM,WAAW,cAAc,IAAI,QAAQ;CAC3C,IAAI,UAAU,OAAO,WAAW;CAEhC,IAAI,MAAM,QAAQ,IAAI,aAAa,GAAG;EACpC,MAAM,gBAAsC,CAAC;EAC7C,KAAK,MAAM,QAAQ,IAAI,eAAe;GACpC,IAAI,CAAC,cAAc,IAAI,KAAK,OAAO,KAAK,SAAS,UAAU;GAC3D,MAAM,UAAU,SAAS,KAAK,OAAO;GACrC,IAAI,CAAC,SAAS;GACd,cAAc,KAAK;IACjB,MAAM,KAAK;IACX;IACA,aACE,OAAO,KAAK,gBAAgB,WAAW,KAAK,cAAc;IAC5D,MACE,OAAO,KAAK,SAAS,aAAc,KAAK,OAAkB;GAC9D,CAAC;EACH;EACA,OAAO,gBAAgB;CACzB;CAEA,OAAO;AACT;;;;AAKA,SAAS,cACP,QACyB;CACzB,MAAM,aAAa,iCAAiC,MAAM;CAC1D,IAAI,CAAC,YACH,MAAM,IAAI,MAAM,mCAAmC;CAGrD,IAAI,OAAO,eAAe,UAAU;EAClC,MAAM,SAAS,iBAAiB;EAChC,IAAI,CAAC,QACH,MAAM,IAAI,MACR,uCAAuC,WAAW,wBAC1B,OAAO,KAAK,gBAAgB,CAAC,CAAC,KAAK,IAAI,GACjE;EAEF,OAAO;CACT;CAEA,MAAM,iBAA0C;EAC9C,GAAG;EACH,aAAa,WAAW,cACpB,CAAC,GAAG,WAAW,WAAW,IAC1B;EACJ,eAAe,WAAW,gBACtB,CAAC,GAAG,WAAW,aAAa,IAC5B;EACJ,OAAO,WAAW,QAAQ,CAAC,GAAG,WAAW,KAAK,IAAI;EAClD,UAAU,WAAW,WAAW,CAAC,GAAG,WAAW,QAAQ,IAAI;CAC7D;CAGA,IAAI,eAAe,aAAa,OAAO;EAIrC,MAAM,wBAHe,MAAM,QAAQ,eAAe,QAAQ,IACtD,eAAe,WACd,OAAO,KAAK,eAAe,EACS,CACtC,QAAQ,SAAS,QAAQ,eAAe,CAAC,CACzC,KAAK,SAAS,sBAAsB,IAAI,CAAC;EAE5C,eAAe,gBAAgB,CAC7B,GAAI,eAAe,iBAAiB,CAAC,GACrC,GAAG,oBACL;CACF;CAEA,OAAO;AACT;;;;AAKA,SAAS,yBACP,QACqB;CAErB,IAAI,OAAO,UACT,OAAO,OAAO;CAGhB,MAAM,cAAc,OAAO,eAAe,CAAC;CAC3C,MAAM,gBAAgB,OAAO,iBAAiB,CAAC;CAC/C,MAAM,QAAQ,OAAO,SAAS,CAAC;CAC/B,MAAM,UAAU,IAAI,IAAI,KAAK;CAC7B,MAAM,iBAAiB,OAAO,YAAY,CAAC;CAC3C,MAAM,qBAAqB,OAAO,eAAe;CAGjD,MAAM,UAA8B,cACjC,QAAQ,OAAO,GAAG,IAAI,CAAC,CACvB,KAAK,OAAO,CAAC,WAAW,GAAG,OAAO,GAAG,GAAG,IAAK,CAAC;CAEjD,QAAQ,KAAa,UAA0C;EAK7D,IAAI,OAAO,UAAU,UAAU;GAC7B,KAAK,MAAM,WAAW,aAAa;IACjC,QAAQ,YAAY;IACpB,IAAI,QAAQ,KAAK,GAAG,GAClB,OAAO;GAEX;GACA,IAAI,QAAQ,IAAI,GAAG,GACjB,OAAO;EAEX;EAGA,IAAI,OAAO,UAAU,UAAU;GAC7B,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MAAM,KAAK,SAAS;IACzB,IAAI,OAAO,SAAS,UAClB,OAAO,kBACL,MACA,eACA,SACA,gBACA,kBACF;IAEF,OAAO;GACT,CAAC;GAEH,OAAO;EACT;EAGA,OAAO,kBACL,OACA,eACA,SACA,gBACA,kBACF;CACF;AACF;;;;;;AAOA,SAAS,kBACP,OACA,UACA,SACA,gBACA,oBACQ;CACR,IAAI,SAAS;CAGb,KAAK,MAAM,CAAC,SAAS,SAAS,SAAS;EACrC,QAAQ,YAAY;EACpB,SAAS,OAAO,QAAQ,SAAS,IAAI;CACvC;CAGA,KAAK,MAAM,EAAE,SAAS,aAAa,UAAU,UAAU;EACrD,IAAI,MAAM;EACV,QAAQ,YAAY;EACpB,SAAS,OAAO,WAAW,SAAS,eAAe,kBAAkB;CACvE;CAGA,KAAK,MAAM,WAAW,gBAAgB;EACpC,QAAQ,YAAY;EACpB,SAAS,OAAO,WAAW,SAAS,kBAAkB;CACxD;CAEA,OAAO;AACT;;;;;;;AAQA,SAAS,mBACP,MACA,UACc;CAEd,MAAM,qBAAiC,CAAC;CACxC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,UAAU,GACvD,IAAI,UAAU,QACZ,mBAAmB,OAAO,SAAS,KAAK,KAAK;CAKjD,OAAO,IAAI,MAAM,MAAM,EACrB,IAAI,QAAQ,MAAM;EAChB,IAAI,SAAS,cACX,OAAO;EAGT,MAAM,QAAQ,QAAQ,IAAI,QAAQ,IAAI;EAEtC,IAAI,OAAO,UAAU,YACnB,OAAO,MAAM,KAAK,MAAM;EAE1B,OAAO;CACT,EACF,CAAC;AACH;;;;;;;;;;;;;;AAeA,SAAgB,wBACd,QACqB;CACrB,OAAO,yBAAyB,cAAc,MAAM,CAAC;AACvD;;;;;;;;;;;;;AAcA,IAAa,8BAAb,MAAkE;CAChE,AAAiB;CACjB,AAAiB;CAEjB,YACE,kBACA,SACA;EACA,KAAK,mBAAmB;EACxB,MAAM,SAAS,cAAc,QAAQ,QAAQ;EAC7C,KAAK,WAAW,yBAAyB,MAAM;CACjD;;;;CAKA,QAAQ,MAAY,eAA8B;EAChD,KAAK,iBAAiB,QAAQ,MAAM,aAAa;CACnD;;;;CAKA,MAAM,MAA0B;EAC9B,IAAI;GACF,MAAM,eAAe,mBAAmB,MAAM,KAAK,QAAQ;GAC3D,KAAK,iBAAiB,MAAM,YAAY;EAC1C,QAAQ;GAGN,KAAK,iBAAiB,MAAM,IAAI;EAClC;CACF;CAEA,aAA4B;EAC1B,OAAO,KAAK,iBAAiB,WAAW;CAC1C;CAEA,WAA0B;EACxB,OAAO,KAAK,iBAAiB,SAAS;CACxC;AACF"}

package/dist/attributes-B7wix2VG.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"attributes-B7wix2VG.js","names":[],"sources":["../src/attributes/builders.ts","../src/attributes/validators.ts","../src/attributes/utils.ts","../src/attributes/attachers.ts","../src/attributes/domains.ts"],"sourcesContent":["/**\n * Attribute builders for constructing OpenTelemetry attributes\n * Provides both key builders (Pattern A) and object builders (Pattern B)\n *\n * @example Pattern A: Key builders\n * ```typescript\n * attrs.user.id('123')                              // { 'user.id': '123' }\n * attrs.user.email('user@example.com')                 // { 'user.email': 'user@example.com' }\n * attrs.http.request.method('GET')                   // { 'http.request.method': 'GET' }\n * attrs.http.response.statusCode(200)                 // { 'http.response.status_code': 200 }\n * ```\n *\n * @example Pattern B: Object builders\n * ```typescript\n * attrs.user({ id: '123', email: 'user@example.com' })\n * attrs.http.server({ method: 'GET', route: '/users/:id', statusCode: 200 })\n * attrs.db.client({ system: 'postgresql', operation: 'SELECT', collectionName: 'users' })\n * ```\n */\n\nimport {\n  UserAttributes,\n  SessionAttributes,\n  DeviceAttributes,\n  HTTPAttributes,\n  DBAttributes,\n  ServiceAttributes,\n  NetworkAttributes,\n  ServerAddressAttributes,\n  URLAttributes,\n  ErrorAttributes,\n  ExceptionAttributes,\n  ProcessAttributes,\n  ThreadAttributes,\n  ContainerAttributes,\n  K8sAttributes,\n  CloudAttributes,\n  FaaSAttributes,\n  FeatureFlagAttributes,\n  MessagingAttributes,\n  RPCAttributes,\n  GraphQLAttributes,\n  OTelAttributes,\n  CodeAttributes,\n  TLSAttributes,\n} from './registry';\n\nimport type {\n  UserAttrs,\n  SessionAttrs,\n  DeviceAttrs,\n  HTTPServerAttrs,\n  HTTPClientAttrs,\n  DBAttrs,\n  ServiceAttrs,\n  NetworkAttrs,\n  ErrorAttrs,\n  MessagingAttrs,\n  CloudAttrs,\n  ServerAddressAttrs,\n  URLAttrs,\n  ProcessAttrs,\n  ContainerAttrs,\n  ExceptionAttrs,\n} from './types';\n\nexport const attrs = {\n  user: {\n    id: (value: string) => ({ [UserAttributes.id]: value }),\n    email: (value: string) => ({ [UserAttributes.email]: value }),\n    name: (value: string) => ({ [UserAttributes.name]: value }),\n    fullName: (value: string) => ({ [UserAttributes.fullName]: value }),\n    hash: (value: string) => ({ [UserAttributes.hash]: value }),\n    roles: (value: string[]) => ({ [UserAttributes.roles]: value }),\n\n    data: (data: UserAttrs) => {\n      const result: Record<string, unknown> = {};\n      if (data.id !== undefined) result[UserAttributes.id] = data.id;\n      if (data.email !== undefined) result[UserAttributes.email] = data.email;\n      if (data.name !== undefined) result[UserAttributes.name] = data.name;\n      if (data.fullName !== undefined)\n        result[UserAttributes.fullName] = data.fullName;\n      if (data.hash !== undefined) result[UserAttributes.hash] = data.hash;\n      if (data.roles !== undefined) result[UserAttributes.roles] = data.roles;\n      return result;\n    },\n  },\n\n  session: {\n    id: (value: string) => ({ [SessionAttributes.id]: value }),\n    previousId: (value: string) => ({ [SessionAttributes.previousId]: value }),\n\n    data: (data: SessionAttrs) => {\n      const result: Record<string, unknown> = {};\n      if (data.id !== undefined) result[SessionAttributes.id] = data.id;\n      if (data.previousId !== undefined)\n        result[SessionAttributes.previousId] = data.previousId;\n      return result;\n    },\n  },\n\n  device: {\n    id: (value: string) => ({ [DeviceAttributes.id]: value }),\n    manufacturer: (value: string) => ({\n      [DeviceAttributes.manufacturer]: value,\n    }),\n    modelIdentifier: (value: string) => ({\n      [DeviceAttributes.modelIdentifier]: value,\n    }),\n    modelName: (value: string) => ({ [DeviceAttributes.modelName]: value }),\n\n    data: (data: DeviceAttrs) => {\n      const result: Record<string, unknown> = {};\n      if (data.id !== undefined) result[DeviceAttributes.id] = data.id;\n      if (data.manufacturer !== undefined)\n        result[DeviceAttributes.manufacturer] = data.manufacturer;\n      if (data.modelIdentifier !== undefined)\n        result[DeviceAttributes.modelIdentifier] = data.modelIdentifier;\n      if (data.modelName !== undefined)\n        result[DeviceAttributes.modelName] = data.modelName;\n      return result;\n    },\n  },\n\n  http: {\n    request: {\n      method: (value: string) => ({ [HTTPAttributes.requestMethod]: value }),\n      methodOriginal: (value: string) => ({\n        [HTTPAttributes.requestMethodOriginal]: value,\n      }),\n      resendCount: (value: number) => ({\n        [HTTPAttributes.requestResendCount]: value,\n      }),\n      size: (value: number) => ({ [HTTPAttributes.requestSize]: value }),\n      bodySize: (value: number) => ({\n        [HTTPAttributes.requestBodySize]: value,\n      }),\n    },\n\n    response: {\n      statusCode: (value: number) => ({\n        [HTTPAttributes.responseStatusCode]: value,\n      }),\n      size: (value: number) => ({ [HTTPAttributes.responseSize]: value }),\n      bodySize: (value: number) => ({\n        [HTTPAttributes.responseBodySize]: value,\n      }),\n    },\n\n    route: (value: string) => ({ [HTTPAttributes.route]: value }),\n    connectionState: (value: string) => ({\n      [HTTPAttributes.connectionState]: value,\n    }),\n\n    server: (data: HTTPServerAttrs) => {\n      const result: Record<string, unknown> = {};\n      if (data.method !== undefined)\n        result[HTTPAttributes.requestMethod] = data.method;\n      if (data.route !== undefined) result[HTTPAttributes.route] = data.route;\n      if (data.statusCode !== undefined)\n        result[HTTPAttributes.responseStatusCode] = data.statusCode;\n      if (data.bodySize !== undefined)\n        result[HTTPAttributes.requestBodySize] = data.bodySize;\n      if (data.requestSize !== undefined)\n        result[HTTPAttributes.requestSize] = data.requestSize;\n      if (data.responseSize !== undefined)\n        result[HTTPAttributes.responseSize] = data.responseSize;\n      if (data.resendCount !== undefined)\n        result[HTTPAttributes.requestResendCount] = data.resendCount;\n      return result;\n    },\n\n    client: (data: HTTPClientAttrs) => {\n      const result: Record<string, unknown> = {};\n      if (data.method !== undefined)\n        result[HTTPAttributes.requestMethod] = data.method;\n      if (data.url !== undefined) result[HTTPAttributes.route] = data.url;\n      if (data.statusCode !== undefined)\n        result[HTTPAttributes.responseStatusCode] = data.statusCode;\n      return result;\n    },\n  },\n\n  db: {\n    client: {\n      system: (value: string) => ({ [DBAttributes.systemName]: value }),\n      operation: (value: string) => ({ [DBAttributes.operationName]: value }),\n      collectionName: (value: string) => ({\n        [DBAttributes.collectionName]: value,\n      }),\n      namespace: (value: string) => ({ [DBAttributes.namespace]: value }),\n      statement: (value: string) => ({ [DBAttributes.statement]: value }),\n      querySummary: (value: string) => ({ [DBAttributes.querySummary]: value }),\n      queryText: (value: string) => ({ [DBAttributes.queryText]: value }),\n      responseStatus: (value: string | number) => ({\n        [DBAttributes.responseStatusCode]: value,\n      }),\n      rowsReturned: (value: number) => ({\n        [DBAttributes.responseReturnedRows]: value,\n      }),\n\n      data: (data: DBAttrs) => {\n        const result: Record<string, unknown> = {};\n        if (data.system !== undefined)\n          result[DBAttributes.systemName] = data.system;\n        if (data.operation !== undefined)\n          result[DBAttributes.operationName] = data.operation;\n        if (data.collectionName !== undefined)\n          result[DBAttributes.collectionName] = data.collectionName;\n        // 'name' maps to db.namespace (db.name is deprecated per OTel semantic conventions)\n        if (data.name !== undefined) result[DBAttributes.namespace] = data.name;\n        // 'namespace' takes precedence over 'name' if both are provided\n        if (data.namespace !== undefined)\n          result[DBAttributes.namespace] = data.namespace;\n        if (data.statement !== undefined)\n          result[DBAttributes.statement] = data.statement;\n        if (data.querySummary !== undefined)\n          result[DBAttributes.querySummary] = data.querySummary;\n        if (data.queryText !== undefined)\n          result[DBAttributes.queryText] = data.queryText;\n        if (data.responseStatus !== undefined)\n          result[DBAttributes.responseStatusCode] = data.responseStatus;\n        if (data.rowsReturned !== undefined)\n          result[DBAttributes.responseReturnedRows] = data.rowsReturned;\n        return result;\n      },\n    },\n  },\n\n  service: {\n    name: (value: string) => ({ [ServiceAttributes.name]: value }),\n    instance: (value: string) => ({ [ServiceAttributes.instance]: value }),\n    version: (value: string) => ({ [ServiceAttributes.version]: value }),\n\n    data: (data: ServiceAttrs) => {\n      const result: Record<string, unknown> = {};\n      if (data.name !== undefined) result[ServiceAttributes.name] = data.name;\n      if (data.instance !== undefined)\n        result[ServiceAttributes.instance] = data.instance;\n      if (data.version !== undefined)\n        result[ServiceAttributes.version] = data.version;\n      return result;\n    },\n  },\n\n  network: {\n    peerAddress: (value: string) => ({\n      [NetworkAttributes.peerAddress]: value,\n    }),\n    peerPort: (value: number) => ({ [NetworkAttributes.peerPort]: value }),\n    transport: (value: string) => ({ [NetworkAttributes.transport]: value }),\n    protocolName: (value: string) => ({\n      [NetworkAttributes.protocolName]: value,\n    }),\n    protocolVersion: (value: string) => ({\n      [NetworkAttributes.protocolVersion]: value,\n    }),\n\n    data: (data: NetworkAttrs) => {\n      const result: Record<string, unknown> = {};\n      if (data.peerAddress !== undefined)\n        result[NetworkAttributes.peerAddress] = data.peerAddress;\n      if (data.peerPort !== undefined)\n        result[NetworkAttributes.peerPort] = data.peerPort;\n      if (data.transport !== undefined)\n        result[NetworkAttributes.transport] = data.transport;\n      if (data.protocolName !== undefined)\n        result[NetworkAttributes.protocolName] = data.protocolName;\n      if (data.protocolVersion !== undefined)\n        result[NetworkAttributes.protocolVersion] = data.protocolVersion;\n      return result;\n    },\n  },\n\n  server: {\n    address: (value: string) => ({ [ServerAddressAttributes.address]: value }),\n    port: (value: number) => ({ [ServerAddressAttributes.port]: value }),\n    socketAddress: (value: string) => ({\n      [ServerAddressAttributes.socketAddress]: value,\n    }),\n\n    data: (data: ServerAddressAttrs) => {\n      const result: Record<string, unknown> = {};\n      if (data.address !== undefined)\n        result[ServerAddressAttributes.address] = data.address;\n      if (data.port !== undefined)\n        result[ServerAddressAttributes.port] = data.port;\n      if (data.socketAddress !== undefined)\n        result[ServerAddressAttributes.socketAddress] = data.socketAddress;\n      return result;\n    },\n  },\n\n  url: {\n    scheme: (value: string) => ({ [URLAttributes.scheme]: value }),\n    full: (value: string) => ({ [URLAttributes.full]: value }),\n    path: (value: string) => ({ [URLAttributes.path]: value }),\n    query: (value: string) => ({ [URLAttributes.query]: value }),\n    fragment: (value: string) => ({ [URLAttributes.fragment]: value }),\n\n    data: (data: URLAttrs) => {\n      const result: Record<string, unknown> = {};\n      if (data.scheme !== undefined) result[URLAttributes.scheme] = data.scheme;\n      if (data.full !== undefined) result[URLAttributes.full] = data.full;\n      if (data.path !== undefined) result[URLAttributes.path] = data.path;\n      if (data.query !== undefined) result[URLAttributes.query] = data.query;\n      if (data.fragment !== undefined)\n        result[URLAttributes.fragment] = data.fragment;\n      return result;\n    },\n  },\n\n  error: {\n    type: (value: string) => ({ [ErrorAttributes.type]: value }),\n    message: (value: string) => ({ [ErrorAttributes.message]: value }),\n    stackTrace: (value: string) => ({ [ErrorAttributes.stackTrace]: value }),\n    code: (value: string | number) => ({ [ErrorAttributes.code]: value }),\n\n    data: (data: ErrorAttrs) => {\n      const result: Record<string, unknown> = {};\n      if (data.type !== undefined) result[ErrorAttributes.type] = data.type;\n      if (data.message !== undefined)\n        result[ErrorAttributes.message] = data.message;\n      if (data.stackTrace !== undefined)\n        result[ErrorAttributes.stackTrace] = data.stackTrace;\n      if (data.code !== undefined) result[ErrorAttributes.code] = data.code;\n      return result;\n    },\n  },\n\n  exception: {\n    escaped: (value: boolean) => ({ [ExceptionAttributes.escaped]: value }),\n    message: (value: string) => ({ [ExceptionAttributes.message]: value }),\n    stackTrace: (value: string) => ({\n      [ExceptionAttributes.stackTrace]: value,\n    }),\n    type: (value: string) => ({ [ExceptionAttributes.type]: value }),\n    moduleName: (value: string) => ({\n      [ExceptionAttributes.moduleName]: value,\n    }),\n\n    data: (data: ExceptionAttrs) => {\n      const result: Record<string, unknown> = {};\n      if (data.escaped !== undefined)\n        result[ExceptionAttributes.escaped] = data.escaped;\n      if (data.message !== undefined)\n        result[ExceptionAttributes.message] = data.message;\n      if (data.stackTrace !== undefined)\n        result[ExceptionAttributes.stackTrace] = data.stackTrace;\n      if (data.type !== undefined) result[ExceptionAttributes.type] = data.type;\n      if (data.moduleName !== undefined)\n        result[ExceptionAttributes.moduleName] = data.moduleName;\n      return result;\n    },\n  },\n\n  process: {\n    pid: (value: number) => ({ [ProcessAttributes.pid]: value }),\n    executablePath: (value: string) => ({\n      [ProcessAttributes.executablePath]: value,\n    }),\n    command: (value: string) => ({ [ProcessAttributes.command]: value }),\n    owner: (value: string) => ({ [ProcessAttributes.owner]: value }),\n\n    data: (data: ProcessAttrs) => {\n      const result: Record<string, unknown> = {};\n      if (data.pid !== undefined) result[ProcessAttributes.pid] = data.pid;\n      if (data.executablePath !== undefined)\n        result[ProcessAttributes.executablePath] = data.executablePath;\n      if (data.command !== undefined)\n        result[ProcessAttributes.command] = data.command;\n      if (data.owner !== undefined)\n        result[ProcessAttributes.owner] = data.owner;\n      return result;\n    },\n  },\n\n  thread: {\n    id: (value: number) => ({ [ThreadAttributes.id]: value }),\n    name: (value: string) => ({ [ThreadAttributes.name]: value }),\n  },\n\n  container: {\n    id: (value: string) => ({ [ContainerAttributes.id]: value }),\n    name: (value: string) => ({ [ContainerAttributes.name]: value }),\n    image: (value: string) => ({ [ContainerAttributes.image]: value }),\n    tag: (value: string) => ({ [ContainerAttributes.tag]: value }),\n\n    data: (data: ContainerAttrs) => {\n      const result: Record<string, unknown> = {};\n      if (data.id !== undefined) result[ContainerAttributes.id] = data.id;\n      if (data.name !== undefined) result[ContainerAttributes.name] = data.name;\n      if (data.image !== undefined)\n        result[ContainerAttributes.image] = data.image;\n      if (data.tag !== undefined) result[ContainerAttributes.tag] = data.tag;\n      return result;\n    },\n  },\n\n  k8s: {\n    podName: (value: string) => ({ [K8sAttributes.podName]: value }),\n    namespaceName: (value: string) => ({\n      [K8sAttributes.namespaceName]: value,\n    }),\n    deploymentName: (value: string) => ({\n      [K8sAttributes.deploymentName]: value,\n    }),\n    state: (value: string) => ({ [K8sAttributes.state]: value }),\n  },\n\n  cloud: {\n    provider: (value: string) => ({ [CloudAttributes.provider]: value }),\n    accountId: (value: string) => ({ [CloudAttributes.accountId]: value }),\n    region: (value: string) => ({ [CloudAttributes.region]: value }),\n    availabilityZone: (value: string) => ({\n      [CloudAttributes.availabilityZone]: value,\n    }),\n    platform: (value: string) => ({ [CloudAttributes.platform]: value }),\n\n    data: (data: CloudAttrs) => {\n      const result: Record<string, unknown> = {};\n      if (data.provider !== undefined)\n        result[CloudAttributes.provider] = data.provider;\n      if (data.accountId !== undefined)\n        result[CloudAttributes.accountId] = data.accountId;\n      if (data.region !== undefined)\n        result[CloudAttributes.region] = data.region;\n      if (data.availabilityZone !== undefined)\n        result[CloudAttributes.availabilityZone] = data.availabilityZone;\n      if (data.platform !== undefined)\n        result[CloudAttributes.platform] = data.platform;\n      return result;\n    },\n  },\n\n  faas: {\n    name: (value: string) => ({ [FaaSAttributes.name]: value }),\n    version: (value: string) => ({ [FaaSAttributes.version]: value }),\n    instance: (value: string) => ({ [FaaSAttributes.instance]: value }),\n    execution: (value: string) => ({ [FaaSAttributes.execution]: value }),\n    coldstart: (value: boolean) => ({ [FaaSAttributes.coldstart]: value }),\n  },\n\n  featureFlag: {\n    key: (value: string) => ({ [FeatureFlagAttributes.key]: value }),\n    provider: (value: string) => ({ [FeatureFlagAttributes.provider]: value }),\n    variant: (value: string) => ({ [FeatureFlagAttributes.variant]: value }),\n  },\n\n  messaging: {\n    system: (value: string) => ({ [MessagingAttributes.system]: value }),\n    destination: (value: string) => ({\n      [MessagingAttributes.destination]: value,\n    }),\n    operation: (value: 'publish' | 'receive' | 'process') => ({\n      [MessagingAttributes.operation]: value,\n    }),\n    messageId: (value: string) => ({ [MessagingAttributes.messageId]: value }),\n    conversationId: (value: string) => ({\n      [MessagingAttributes.conversationId]: value,\n    }),\n\n    data: (data: MessagingAttrs) => {\n      const result: Record<string, unknown> = {};\n      if (data.system !== undefined)\n        result[MessagingAttributes.system] = data.system;\n      if (data.destination !== undefined)\n        result[MessagingAttributes.destination] = data.destination;\n      if (data.operation !== undefined)\n        result[MessagingAttributes.operation] = data.operation;\n      if (data.messageId !== undefined)\n        result[MessagingAttributes.messageId] = data.messageId;\n      if (data.conversationId !== undefined)\n        result[MessagingAttributes.conversationId] = data.conversationId;\n      return result;\n    },\n  },\n\n  // GenAI/LLM attribute builders moved to the `autotel-genai` package\n  // (canonical `gen_ai.*` semantic conventions).\n\n  rpc: {\n    system: (value: string) => ({ [RPCAttributes.system]: value }),\n    service: (value: string) => ({ [RPCAttributes.service]: value }),\n    method: (value: string) => ({ [RPCAttributes.method]: value }),\n    grpcStatusCode: (value: number) => ({\n      [RPCAttributes.grpcStatusCode]: value,\n    }),\n  },\n\n  graphql: {\n    document: (value: string) => ({ [GraphQLAttributes.document]: value }),\n    operationName: (value: string) => ({\n      [GraphQLAttributes.operationName]: value,\n    }),\n    operationType: (value: 'query' | 'mutation' | 'subscription') => ({\n      [GraphQLAttributes.operationType]: value,\n    }),\n  },\n\n  otel: {\n    libraryName: (value: string) => ({ [OTelAttributes.libraryName]: value }),\n    libraryVersion: (value: string) => ({\n      [OTelAttributes.libraryVersion]: value,\n    }),\n    statusCode: (value: string) => ({ [OTelAttributes.statusCode]: value }),\n  },\n\n  code: {\n    namespace: (value: string) => ({ [CodeAttributes.namespace]: value }),\n    filepath: (value: string) => ({ [CodeAttributes.filepath]: value }),\n    function: (value: string) => ({ [CodeAttributes.function]: value }),\n    class: (value: string) => ({ [CodeAttributes.class]: value }),\n    method: (value: string) => ({ [CodeAttributes.method]: value }),\n    column: (value: string) => ({ [CodeAttributes.column]: value }),\n    lineNumber: (value: number) => ({ [CodeAttributes.lineNumber]: value }),\n    repository: (value: string) => ({ [CodeAttributes.repository]: value }),\n    revision: (value: string) => ({ [CodeAttributes.revision]: value }),\n  },\n\n  tls: {\n    protocolVersion: (value: string) => ({\n      [TLSAttributes.protocolVersion]: value,\n    }),\n    cipher: (value: string) => ({ [TLSAttributes.cipher]: value }),\n    curveName: (value: string) => ({ [TLSAttributes.curveName]: value }),\n    resumed: (value: boolean) => ({ [TLSAttributes.resumed]: value }),\n  },\n} as const;\n","/**\n * Attribute validation, PII detection, and guardrails\n * Provides safe-by-default attribute handling with configurable policies\n */\n\nimport { REDACTOR_PATTERNS } from '../attribute-redacting-processor';\n\nexport interface AttributeGuardrails {\n  /** How to handle PII in attributes */\n  pii?: 'allow' | 'redact' | 'hash' | 'block';\n\n  /** Maximum length for attribute values */\n  maxLength?: number;\n\n  /** Validate enum values against known values */\n  validateEnum?: boolean;\n\n  /** Log warnings for deprecated attributes instead of throwing */\n  warnDeprecated?: boolean;\n\n  /** Custom deprecation warnings */\n  deprecatedWarnings?: Record<string, string>;\n}\n\nexport interface AttributePolicy {\n  guardrails?: AttributeGuardrails;\n  /** Custom deprecation warnings for specific attributes */\n  deprecatedWarnings?: Record<string, string>;\n}\n\nconst DEPRECATED_ATTRIBUTES = {\n  'enduser.id': 'user.id',\n  'enduser.role': 'user.roles',\n  'enduser.scope': undefined,\n  'http.method': 'http.request.method',\n  'http.host': 'server.address',\n  'http.status_code': 'http.response.status_code',\n  'http.target': 'url.path',\n  'http.url': 'url.full',\n  'http.user_agent': 'user_agent.original',\n  'http.flavor': 'network.protocol.name',\n  'http.scheme': 'url.scheme',\n  'http.server_name': 'server.address',\n  'db.name': 'db.namespace',\n  'db.operation': 'db.operation.name',\n  'db.statement': 'db.query.text',\n  'db.system': 'db.system.name',\n  'db.collection': 'db.collection.name',\n  'db.instance.id': undefined,\n  'db.jdbc.driver_classname': undefined,\n  'db.mssql.instance_name': 'mssql.instance.name',\n  'db.sql.table': 'db.collection.name',\n  'http.client_ip': 'client.address',\n  'user_agent.original': 'user_agent.original',\n} as const;\n\nconst HTTP_METHODS = new Set([\n  'GET',\n  'POST',\n  'PUT',\n  'DELETE',\n  'PATCH',\n  'HEAD',\n  'OPTIONS',\n  'TRACE',\n  'QUERY',\n  '_OTHER',\n]);\n\nexport function validateAttribute(\n  key: string,\n  value: unknown,\n  policy: AttributePolicy = {},\n): unknown {\n  const { guardrails = {} } = policy;\n\n  if (value === undefined || value === null) {\n    return undefined;\n  }\n\n  // For non-string values that don't need transformation, preserve the original type\n  if (typeof value !== 'string') {\n    // PII checks only apply to strings\n    // maxLength only applies to strings\n    // validateEnum only applies to strings\n    return value;\n  }\n\n  const stringValue = value;\n\n  if (guardrails.pii) {\n    const piiResult = applyPIIPolicy(key, stringValue, guardrails.pii);\n    if (piiResult !== stringValue) {\n      return piiResult;\n    }\n  }\n\n  if (guardrails.maxLength && stringValue.length > guardrails.maxLength) {\n    return truncateValue(key, stringValue, guardrails.maxLength);\n  }\n\n  if (guardrails.validateEnum && HTTP_METHODS.has(stringValue)) {\n    const normalizedMethod = normalizeHTTPMethod(stringValue);\n    if (normalizedMethod !== stringValue) {\n      return normalizedMethod;\n    }\n  }\n\n  return stringValue;\n}\n\nfunction applyPIIPolicy(\n  key: string,\n  value: string,\n  pii: AttributeGuardrails['pii'],\n): string {\n  if (pii === 'allow') {\n    return value;\n  }\n\n  if (pii === 'redact') {\n    return redactIfPII(key, value);\n  }\n\n  if (pii === 'hash') {\n    return hashIfPII(key, value);\n  }\n\n  if (pii === 'block' && isPIIKey(key)) {\n    throw new Error(\n      `PII attribute \"${key}\" is blocked by guardrails. Use pii: \"allow\" to enable it.`,\n    );\n  }\n\n  return value;\n}\n\nfunction isPIIKey(key: string): boolean {\n  const piiKeyPatterns = [\n    'email',\n    'phone',\n    'ssn',\n    'credit_card',\n    'password',\n    'secret',\n    'token',\n    'api_key',\n    'authorization',\n  ];\n  const lowerKey = key.toLowerCase();\n  return piiKeyPatterns.some((pattern) => lowerKey.includes(pattern));\n}\n\nfunction redactIfPII(key: string, value: string): string {\n  if (isPIIKey(key)) {\n    // REDACTOR_PATTERNS values are RegExp patterns\n    for (const [, pattern] of Object.entries(REDACTOR_PATTERNS)) {\n      if (pattern instanceof RegExp && pattern.test(value)) {\n        return '[REDACTED]';\n      }\n    }\n    // If no pattern matched but key is PII, still redact\n    return '[REDACTED]';\n  }\n  return value;\n}\n\nfunction hashIfPII(key: string, value: string): string {\n  if (!isPIIKey(key)) {\n    return value;\n  }\n\n  // Use a simple but consistent hash that produces 32-char hex\n  // FNV-1a hash variant producing 128-bit output (32 hex chars)\n  const FNV_PRIME = 0x01_00_01_93;\n  const FNV_OFFSET = 0x81_1c_9d_c5;\n\n  // Generate 4 32-bit hashes to produce 32 hex chars\n  const hashes: number[] = [];\n  for (let round = 0; round < 4; round++) {\n    let hash = FNV_OFFSET;\n    for (let i = 0; i < value.length; i++) {\n      hash ^= (value.codePointAt(i) ?? 0) + round;\n      hash = Math.imul(hash, FNV_PRIME);\n    }\n    hashes.push(hash >>> 0); // Convert to unsigned\n  }\n\n  return `hash_${hashes.map((h) => h.toString(16).padStart(8, '0')).join('')}`;\n}\n\nfunction truncateValue(key: string, value: string, maxLength: number): string {\n  if (value.length <= maxLength) {\n    return value;\n  }\n  return value.slice(0, maxLength - 3) + '...';\n}\n\nfunction normalizeHTTPMethod(method: string): string {\n  const upper = method.toUpperCase();\n  if (HTTP_METHODS.has(upper)) {\n    return upper;\n  }\n  return upper;\n}\n\nexport function checkDeprecatedAttribute(\n  key: string,\n  policy: AttributePolicy = {},\n): string | null {\n  const { guardrails = {}, deprecatedWarnings = {} } = policy;\n  const { warnDeprecated = true } = guardrails;\n\n  if (!warnDeprecated) {\n    return null;\n  }\n\n  // Check if the key exists in the deprecated attributes map\n  const isDeprecated = key in DEPRECATED_ATTRIBUTES;\n  if (isDeprecated) {\n    const replacement =\n      DEPRECATED_ATTRIBUTES[key as keyof typeof DEPRECATED_ATTRIBUTES];\n    if (replacement === undefined) {\n      // Deprecated with no replacement (e.g., enduser.scope)\n      console.warn(\n        `[autotel/attributes] Attribute \"${key}\" is deprecated and has no replacement. ` +\n          `Remove or find a replacement in OpenTelemetry semantic conventions.`,\n      );\n    } else {\n      // Deprecated with a known replacement\n      console.warn(\n        `[autotel/attributes] Attribute \"${key}\" is deprecated. Use \"${replacement}\" instead.`,\n      );\n    }\n  }\n\n  if (deprecatedWarnings[key]) {\n    console.warn(`[autotel/attributes] ${deprecatedWarnings[key]}`);\n  }\n\n  const replacement =\n    DEPRECATED_ATTRIBUTES[key as keyof typeof DEPRECATED_ATTRIBUTES];\n  return replacement ?? null;\n}\n\nexport function autoRedactPII(\n  attributes: Record<string, unknown>,\n  policy: AttributePolicy = {},\n): Record<string, unknown> {\n  const { guardrails = { pii: 'redact' } } = policy;\n\n  const redacted: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(attributes)) {\n    redacted[key] = validateAttribute(key, value, { guardrails });\n  }\n  return redacted;\n}\n\nexport function defaultGuardrails(): AttributeGuardrails {\n  return {\n    pii: 'redact',\n    maxLength: 255,\n    validateEnum: true,\n    warnDeprecated: true,\n  };\n}\n","/**\n * Attribute utility functions\n */\n\nimport type { AttributeValue } from '../trace-context';\nimport {\n  validateAttribute,\n  autoRedactPII,\n  defaultGuardrails,\n  checkDeprecatedAttribute,\n  type AttributePolicy,\n} from './validators';\n\n// Type for objects that have setAttributes method (spans or contexts)\n// Using a generic parameter to accommodate different AttributeValue types\ntype AttributeSetter = {\n  setAttributes: (attrs: Record<string, AttributeValue>) => void;\n};\n\nexport function mergeAttrs(\n  ...attrSets: Array<Record<string, unknown> | undefined>\n): Record<string, unknown> {\n  const result: Record<string, unknown> = {};\n  for (const attrSet of attrSets) {\n    if (attrSet) {\n      Object.assign(result, attrSet);\n    }\n  }\n  return result;\n}\n\nexport function safeSetAttributes(\n  span: AttributeSetter,\n  attrs: Record<string, unknown>,\n  policy?: AttributePolicy,\n): void {\n  // Merge user-supplied guardrails with defaults so callers can tweak\n  // a single option without opting out of the rest\n  const mergedGuardrails = {\n    ...defaultGuardrails(),\n    ...policy?.guardrails,\n  };\n  const effectivePolicy: AttributePolicy = {\n    ...policy,\n    guardrails: mergedGuardrails,\n  };\n\n  const validated = autoRedactPII(attrs, effectivePolicy);\n\n  const sanitizedAttrs: Record<string, AttributeValue> = {};\n  for (const [key, value] of Object.entries(validated)) {\n    if (value !== undefined) {\n      // Check for deprecated attributes and log warnings\n      checkDeprecatedAttribute(key, effectivePolicy);\n      const validatedValue = validateAttribute(key, value, effectivePolicy);\n      if (validatedValue !== undefined) {\n        // Cast to AttributeValue since validateAttribute ensures valid types\n        sanitizedAttrs[key] = validatedValue as AttributeValue;\n      }\n    }\n  }\n\n  span.setAttributes(sanitizedAttrs);\n}\n","/**\n * Signal attachment helpers\n * These functions know WHERE to attach attributes automatically\n * They handle span, resource, and log signals correctly\n */\n\nimport type { Span, Attributes } from '@opentelemetry/api';\nimport {\n  resourceFromAttributes,\n  type Resource,\n} from '@opentelemetry/resources';\nimport type { TraceContext } from '../trace-context';\nimport { attrs } from './builders';\nimport { safeSetAttributes } from './utils';\n\nexport function setUser(\n  spanOrContext: Span | TraceContext,\n  data: import('./types').UserAttrs,\n  guardrails?: import('./validators').AttributePolicy,\n): void {\n  const attributes = attrs.user.data(data);\n  safeSetAttributes(spanOrContext, attributes, guardrails);\n}\n\nexport function setSession(\n  spanOrContext: Span | TraceContext,\n  data: import('./types').SessionAttrs,\n  guardrails?: import('./validators').AttributePolicy,\n): void {\n  const attributes = attrs.session.data(data);\n  safeSetAttributes(spanOrContext, attributes, guardrails);\n}\n\nexport function setDevice(\n  spanOrContext: Span | TraceContext,\n  data: import('./types').DeviceAttrs,\n  guardrails?: import('./validators').AttributePolicy,\n): void {\n  const attributes = attrs.device.data(data);\n  safeSetAttributes(spanOrContext, attributes, guardrails);\n}\n\nexport function httpServer(\n  spanOrContext: Span | TraceContext,\n  data: import('./types').HTTPServerAttrs,\n  guardrails?: import('./validators').AttributePolicy,\n): void {\n  const attributes = attrs.http.server(data);\n\n  if ('updateName' in spanOrContext && data.method && data.route) {\n    const span = spanOrContext as Span;\n    span.updateName(`HTTP ${data.method} ${data.route}`);\n  }\n\n  safeSetAttributes(spanOrContext, attributes, guardrails);\n}\n\nexport function httpClient(\n  spanOrContext: Span | TraceContext,\n  data: import('./types').HTTPClientAttrs,\n  guardrails?: import('./validators').AttributePolicy,\n): void {\n  const attributes = attrs.http.client(data);\n  safeSetAttributes(spanOrContext, attributes, guardrails);\n}\n\nexport function dbClient(\n  spanOrContext: Span | TraceContext,\n  data: import('./types').DBAttrs,\n  guardrails?: import('./validators').AttributePolicy,\n): void {\n  const attributes = attrs.db.client.data(data);\n  safeSetAttributes(spanOrContext, attributes, guardrails);\n}\n\n/**\n * Merge service attributes into a Resource and return a new Resource.\n *\n * Resource.attributes is readonly, so this function returns a new merged\n * Resource rather than mutating the input.\n *\n * @param resource - The existing resource to merge with\n * @param data - Service attributes to add\n * @returns A new Resource with the merged attributes\n *\n * @example\n * ```typescript\n * const baseResource = Resource.default();\n * const enrichedResource = mergeServiceResource(baseResource, {\n *   name: 'my-service',\n *   version: '1.0.0',\n * });\n * ```\n */\nexport function mergeServiceResource(\n  resource: Resource,\n  data: import('./types').ServiceAttrs,\n): Resource {\n  const attributes = attrs.service.data(data);\n  return resource.merge(resourceFromAttributes(attributes as Attributes));\n}\n\nexport function identify(\n  spanOrContext: Span | TraceContext,\n  data: {\n    user?: import('./types').UserAttrs;\n    session?: import('./types').SessionAttrs;\n    device?: import('./types').DeviceAttrs;\n  },\n  guardrails?: import('./validators').AttributePolicy,\n): void {\n  const allAttrs = [];\n\n  if (data.user) {\n    allAttrs.push(attrs.user.data(data.user));\n  }\n  if (data.session) {\n    allAttrs.push(attrs.session.data(data.session));\n  }\n  if (data.device) {\n    allAttrs.push(attrs.device.data(data.device));\n  }\n\n  const merged: Record<string, unknown> = {};\n  for (const attrSet of allAttrs) {\n    Object.assign(merged, attrSet);\n  }\n\n  safeSetAttributes(spanOrContext, merged, guardrails);\n}\n\nexport function request(\n  spanOrContext: Span | TraceContext,\n  data: import('./types').HTTPServerAttrs & {\n    clientIp?: string;\n  },\n  guardrails?: import('./validators').AttributePolicy,\n): void {\n  const httpAttrs = attrs.http.server(data);\n  const networkAttrs = attrs.network.peerAddress(data.clientIp || '');\n  const merged = { ...httpAttrs, ...networkAttrs };\n  safeSetAttributes(spanOrContext, merged, guardrails);\n}\n\nexport function setError(\n  spanOrContext: Span | TraceContext,\n  data: import('./types').ErrorAttrs,\n  guardrails?: import('./validators').AttributePolicy,\n): void {\n  const attributes = attrs.error.data(data);\n  safeSetAttributes(spanOrContext, attributes, guardrails);\n}\n\nexport function setException(\n  spanOrContext: Span | TraceContext,\n  data: import('./types').ExceptionAttrs,\n  guardrails?: import('./validators').AttributePolicy,\n): void {\n  const attributes = attrs.exception.data(data);\n  safeSetAttributes(spanOrContext, attributes, guardrails);\n}\n","/**\n * Domain helpers for common attribute patterns\n * These bundle multiple attribute groups into semantic helpers\n */\n\nimport { attrs } from './builders';\nimport { safeSetAttributes } from './utils';\n\nexport function transaction(\n  spanOrContext: import('../trace-context').TraceContext,\n  config: {\n    user?: import('./types').UserAttrs;\n    session?: import('./types').SessionAttrs;\n    method?: string;\n    route?: string;\n    statusCode?: number;\n    clientIp?: string;\n  },\n  guardrails?: import('./validators').AttributePolicy,\n): void {\n  const userAttrs = attrs.user.data(config.user || {});\n  const sessionAttrs = attrs.session.data(config.session || {});\n  const httpAttrs = attrs.http.server({\n    method: config.method,\n    route: config.route,\n    statusCode: config.statusCode,\n  });\n  const networkAttrs = attrs.network.peerAddress(config.clientIp || '');\n\n  const merged = {\n    ...userAttrs,\n    ...sessionAttrs,\n    ...httpAttrs,\n    ...networkAttrs,\n  };\n\n  if (config.method && config.route && 'updateName' in spanOrContext) {\n    spanOrContext.updateName(`HTTP ${config.method} ${config.route}`);\n  }\n\n  safeSetAttributes(spanOrContext, merged, guardrails);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAkEA,MAAa,QAAQ;CACnB,MAAM;EACJ,KAAK,WAAmB,GAAG,eAAe,KAAK,MAAM;EACrD,QAAQ,WAAmB,GAAG,eAAe,QAAQ,MAAM;EAC3D,OAAO,WAAmB,GAAG,eAAe,OAAO,MAAM;EACzD,WAAW,WAAmB,GAAG,eAAe,WAAW,MAAM;EACjE,OAAO,WAAmB,GAAG,eAAe,OAAO,MAAM;EACzD,QAAQ,WAAqB,GAAG,eAAe,QAAQ,MAAM;EAE7D,OAAO,SAAoB;GACzB,MAAM,SAAkC,CAAC;GACzC,IAAI,KAAK,OAAO,QAAW,OAAO,eAAe,MAAM,KAAK;GAC5D,IAAI,KAAK,UAAU,QAAW,OAAO,eAAe,SAAS,KAAK;GAClE,IAAI,KAAK,SAAS,QAAW,OAAO,eAAe,QAAQ,KAAK;GAChE,IAAI,KAAK,aAAa,QACpB,OAAO,eAAe,YAAY,KAAK;GACzC,IAAI,KAAK,SAAS,QAAW,OAAO,eAAe,QAAQ,KAAK;GAChE,IAAI,KAAK,UAAU,QAAW,OAAO,eAAe,SAAS,KAAK;GAClE,OAAO;EACT;CACF;CAEA,SAAS;EACP,KAAK,WAAmB,GAAG,kBAAkB,KAAK,MAAM;EACxD,aAAa,WAAmB,GAAG,kBAAkB,aAAa,MAAM;EAExE,OAAO,SAAuB;GAC5B,MAAM,SAAkC,CAAC;GACzC,IAAI,KAAK,OAAO,QAAW,OAAO,kBAAkB,MAAM,KAAK;GAC/D,IAAI,KAAK,eAAe,QACtB,OAAO,kBAAkB,cAAc,KAAK;GAC9C,OAAO;EACT;CACF;CAEA,QAAQ;EACN,KAAK,WAAmB,GAAG,iBAAiB,KAAK,MAAM;EACvD,eAAe,WAAmB,GAC/B,iBAAiB,eAAe,MACnC;EACA,kBAAkB,WAAmB,GAClC,iBAAiB,kBAAkB,MACtC;EACA,YAAY,WAAmB,GAAG,iBAAiB,YAAY,MAAM;EAErE,OAAO,SAAsB;GAC3B,MAAM,SAAkC,CAAC;GACzC,IAAI,KAAK,OAAO,QAAW,OAAO,iBAAiB,MAAM,KAAK;GAC9D,IAAI,KAAK,iBAAiB,QACxB,OAAO,iBAAiB,gBAAgB,KAAK;GAC/C,IAAI,KAAK,oBAAoB,QAC3B,OAAO,iBAAiB,mBAAmB,KAAK;GAClD,IAAI,KAAK,cAAc,QACrB,OAAO,iBAAiB,aAAa,KAAK;GAC5C,OAAO;EACT;CACF;CAEA,MAAM;EACJ,SAAS;GACP,SAAS,WAAmB,GAAG,eAAe,gBAAgB,MAAM;GACpE,iBAAiB,WAAmB,GACjC,eAAe,wBAAwB,MAC1C;GACA,cAAc,WAAmB,GAC9B,eAAe,qBAAqB,MACvC;GACA,OAAO,WAAmB,GAAG,eAAe,cAAc,MAAM;GAChE,WAAW,WAAmB,GAC3B,eAAe,kBAAkB,MACpC;EACF;EAEA,UAAU;GACR,aAAa,WAAmB,GAC7B,eAAe,qBAAqB,MACvC;GACA,OAAO,WAAmB,GAAG,eAAe,eAAe,MAAM;GACjE,WAAW,WAAmB,GAC3B,eAAe,mBAAmB,MACrC;EACF;EAEA,QAAQ,WAAmB,GAAG,eAAe,QAAQ,MAAM;EAC3D,kBAAkB,WAAmB,GAClC,eAAe,kBAAkB,MACpC;EAEA,SAAS,SAA0B;GACjC,MAAM,SAAkC,CAAC;GACzC,IAAI,KAAK,WAAW,QAClB,OAAO,eAAe,iBAAiB,KAAK;GAC9C,IAAI,KAAK,UAAU,QAAW,OAAO,eAAe,SAAS,KAAK;GAClE,IAAI,KAAK,eAAe,QACtB,OAAO,eAAe,sBAAsB,KAAK;GACnD,IAAI,KAAK,aAAa,QACpB,OAAO,eAAe,mBAAmB,KAAK;GAChD,IAAI,KAAK,gBAAgB,QACvB,OAAO,eAAe,eAAe,KAAK;GAC5C,IAAI,KAAK,iBAAiB,QACxB,OAAO,eAAe,gBAAgB,KAAK;GAC7C,IAAI,KAAK,gBAAgB,QACvB,OAAO,eAAe,sBAAsB,KAAK;GACnD,OAAO;EACT;EAEA,SAAS,SAA0B;GACjC,MAAM,SAAkC,CAAC;GACzC,IAAI,KAAK,WAAW,QAClB,OAAO,eAAe,iBAAiB,KAAK;GAC9C,IAAI,KAAK,QAAQ,QAAW,OAAO,eAAe,SAAS,KAAK;GAChE,IAAI,KAAK,eAAe,QACtB,OAAO,eAAe,sBAAsB,KAAK;GACnD,OAAO;EACT;CACF;CAEA,IAAI,EACF,QAAQ;EACN,SAAS,WAAmB,GAAG,aAAa,aAAa,MAAM;EAC/D,YAAY,WAAmB,GAAG,aAAa,gBAAgB,MAAM;EACrE,iBAAiB,WAAmB,GACjC,aAAa,iBAAiB,MACjC;EACA,YAAY,WAAmB,GAAG,aAAa,YAAY,MAAM;EACjE,YAAY,WAAmB,GAAG,aAAa,YAAY,MAAM;EACjE,eAAe,WAAmB,GAAG,aAAa,eAAe,MAAM;EACvE,YAAY,WAAmB,GAAG,aAAa,YAAY,MAAM;EACjE,iBAAiB,WAA4B,GAC1C,aAAa,qBAAqB,MACrC;EACA,eAAe,WAAmB,GAC/B,aAAa,uBAAuB,MACvC;EAEA,OAAO,SAAkB;GACvB,MAAM,SAAkC,CAAC;GACzC,IAAI,KAAK,WAAW,QAClB,OAAO,aAAa,cAAc,KAAK;GACzC,IAAI,KAAK,cAAc,QACrB,OAAO,aAAa,iBAAiB,KAAK;GAC5C,IAAI,KAAK,mBAAmB,QAC1B,OAAO,aAAa,kBAAkB,KAAK;GAE7C,IAAI,KAAK,SAAS,QAAW,OAAO,aAAa,aAAa,KAAK;GAEnE,IAAI,KAAK,cAAc,QACrB,OAAO,aAAa,aAAa,KAAK;GACxC,IAAI,KAAK,cAAc,QACrB,OAAO,aAAa,aAAa,KAAK;GACxC,IAAI,KAAK,iBAAiB,QACxB,OAAO,aAAa,gBAAgB,KAAK;GAC3C,IAAI,KAAK,cAAc,QACrB,OAAO,aAAa,aAAa,KAAK;GACxC,IAAI,KAAK,mBAAmB,QAC1B,OAAO,aAAa,sBAAsB,KAAK;GACjD,IAAI,KAAK,iBAAiB,QACxB,OAAO,aAAa,wBAAwB,KAAK;GACnD,OAAO;EACT;CACF,EACF;CAEA,SAAS;EACP,OAAO,WAAmB,GAAG,kBAAkB,OAAO,MAAM;EAC5D,WAAW,WAAmB,GAAG,kBAAkB,WAAW,MAAM;EACpE,UAAU,WAAmB,GAAG,kBAAkB,UAAU,MAAM;EAElE,OAAO,SAAuB;GAC5B,MAAM,SAAkC,CAAC;GACzC,IAAI,KAAK,SAAS,QAAW,OAAO,kBAAkB,QAAQ,KAAK;GACnE,IAAI,KAAK,aAAa,QACpB,OAAO,kBAAkB,YAAY,KAAK;GAC5C,IAAI,KAAK,YAAY,QACnB,OAAO,kBAAkB,WAAW,KAAK;GAC3C,OAAO;EACT;CACF;CAEA,SAAS;EACP,cAAc,WAAmB,GAC9B,kBAAkB,cAAc,MACnC;EACA,WAAW,WAAmB,GAAG,kBAAkB,WAAW,MAAM;EACpE,YAAY,WAAmB,GAAG,kBAAkB,YAAY,MAAM;EACtE,eAAe,WAAmB,GAC/B,kBAAkB,eAAe,MACpC;EACA,kBAAkB,WAAmB,GAClC,kBAAkB,kBAAkB,MACvC;EAEA,OAAO,SAAuB;GAC5B,MAAM,SAAkC,CAAC;GACzC,IAAI,KAAK,gBAAgB,QACvB,OAAO,kBAAkB,eAAe,KAAK;GAC/C,IAAI,KAAK,aAAa,QACpB,OAAO,kBAAkB,YAAY,KAAK;GAC5C,IAAI,KAAK,cAAc,QACrB,OAAO,kBAAkB,aAAa,KAAK;GAC7C,IAAI,KAAK,iBAAiB,QACxB,OAAO,kBAAkB,gBAAgB,KAAK;GAChD,IAAI,KAAK,oBAAoB,QAC3B,OAAO,kBAAkB,mBAAmB,KAAK;GACnD,OAAO;EACT;CACF;CAEA,QAAQ;EACN,UAAU,WAAmB,GAAG,wBAAwB,UAAU,MAAM;EACxE,OAAO,WAAmB,GAAG,wBAAwB,OAAO,MAAM;EAClE,gBAAgB,WAAmB,GAChC,wBAAwB,gBAAgB,MAC3C;EAEA,OAAO,SAA6B;GAClC,MAAM,SAAkC,CAAC;GACzC,IAAI,KAAK,YAAY,QACnB,OAAO,wBAAwB,WAAW,KAAK;GACjD,IAAI,KAAK,SAAS,QAChB,OAAO,wBAAwB,QAAQ,KAAK;GAC9C,IAAI,KAAK,kBAAkB,QACzB,OAAO,wBAAwB,iBAAiB,KAAK;GACvD,OAAO;EACT;CACF;CAEA,KAAK;EACH,SAAS,WAAmB,GAAG,cAAc,SAAS,MAAM;EAC5D,OAAO,WAAmB,GAAG,cAAc,OAAO,MAAM;EACxD,OAAO,WAAmB,GAAG,cAAc,OAAO,MAAM;EACxD,QAAQ,WAAmB,GAAG,cAAc,QAAQ,MAAM;EAC1D,WAAW,WAAmB,GAAG,cAAc,WAAW,MAAM;EAEhE,OAAO,SAAmB;GACxB,MAAM,SAAkC,CAAC;GACzC,IAAI,KAAK,WAAW,QAAW,OAAO,cAAc,UAAU,KAAK;GACnE,IAAI,KAAK,SAAS,QAAW,OAAO,cAAc,QAAQ,KAAK;GAC/D,IAAI,KAAK,SAAS,QAAW,OAAO,cAAc,QAAQ,KAAK;GAC/D,IAAI,KAAK,UAAU,QAAW,OAAO,cAAc,SAAS,KAAK;GACjE,IAAI,KAAK,aAAa,QACpB,OAAO,cAAc,YAAY,KAAK;GACxC,OAAO;EACT;CACF;CAEA,OAAO;EACL,OAAO,WAAmB,GAAG,gBAAgB,OAAO,MAAM;EAC1D,UAAU,WAAmB,GAAG,gBAAgB,UAAU,MAAM;EAChE,aAAa,WAAmB,GAAG,gBAAgB,aAAa,MAAM;EACtE,OAAO,WAA4B,GAAG,gBAAgB,OAAO,MAAM;EAEnE,OAAO,SAAqB;GAC1B,MAAM,SAAkC,CAAC;GACzC,IAAI,KAAK,SAAS,QAAW,OAAO,gBAAgB,QAAQ,KAAK;GACjE,IAAI,KAAK,YAAY,QACnB,OAAO,gBAAgB,WAAW,KAAK;GACzC,IAAI,KAAK,eAAe,QACtB,OAAO,gBAAgB,cAAc,KAAK;GAC5C,IAAI,KAAK,SAAS,QAAW,OAAO,gBAAgB,QAAQ,KAAK;GACjE,OAAO;EACT;CACF;CAEA,WAAW;EACT,UAAU,WAAoB,GAAG,oBAAoB,UAAU,MAAM;EACrE,UAAU,WAAmB,GAAG,oBAAoB,UAAU,MAAM;EACpE,aAAa,WAAmB,GAC7B,oBAAoB,aAAa,MACpC;EACA,OAAO,WAAmB,GAAG,oBAAoB,OAAO,MAAM;EAC9D,aAAa,WAAmB,GAC7B,oBAAoB,aAAa,MACpC;EAEA,OAAO,SAAyB;GAC9B,MAAM,SAAkC,CAAC;GACzC,IAAI,KAAK,YAAY,QACnB,OAAO,oBAAoB,WAAW,KAAK;GAC7C,IAAI,KAAK,YAAY,QACnB,OAAO,oBAAoB,WAAW,KAAK;GAC7C,IAAI,KAAK,eAAe,QACtB,OAAO,oBAAoB,cAAc,KAAK;GAChD,IAAI,KAAK,SAAS,QAAW,OAAO,oBAAoB,QAAQ,KAAK;GACrE,IAAI,KAAK,eAAe,QACtB,OAAO,oBAAoB,cAAc,KAAK;GAChD,OAAO;EACT;CACF;CAEA,SAAS;EACP,MAAM,WAAmB,GAAG,kBAAkB,MAAM,MAAM;EAC1D,iBAAiB,WAAmB,GACjC,kBAAkB,iBAAiB,MACtC;EACA,UAAU,WAAmB,GAAG,kBAAkB,UAAU,MAAM;EAClE,QAAQ,WAAmB,GAAG,kBAAkB,QAAQ,MAAM;EAE9D,OAAO,SAAuB;GAC5B,MAAM,SAAkC,CAAC;GACzC,IAAI,KAAK,QAAQ,QAAW,OAAO,kBAAkB,OAAO,KAAK;GACjE,IAAI,KAAK,mBAAmB,QAC1B,OAAO,kBAAkB,kBAAkB,KAAK;GAClD,IAAI,KAAK,YAAY,QACnB,OAAO,kBAAkB,WAAW,KAAK;GAC3C,IAAI,KAAK,UAAU,QACjB,OAAO,kBAAkB,SAAS,KAAK;GACzC,OAAO;EACT;CACF;CAEA,QAAQ;EACN,KAAK,WAAmB,GAAG,iBAAiB,KAAK,MAAM;EACvD,OAAO,WAAmB,GAAG,iBAAiB,OAAO,MAAM;CAC7D;CAEA,WAAW;EACT,KAAK,WAAmB,GAAG,oBAAoB,KAAK,MAAM;EAC1D,OAAO,WAAmB,GAAG,oBAAoB,OAAO,MAAM;EAC9D,QAAQ,WAAmB,GAAG,oBAAoB,QAAQ,MAAM;EAChE,MAAM,WAAmB,GAAG,oBAAoB,MAAM,MAAM;EAE5D,OAAO,SAAyB;GAC9B,MAAM,SAAkC,CAAC;GACzC,IAAI,KAAK,OAAO,QAAW,OAAO,oBAAoB,MAAM,KAAK;GACjE,IAAI,KAAK,SAAS,QAAW,OAAO,oBAAoB,QAAQ,KAAK;GACrE,IAAI,KAAK,UAAU,QACjB,OAAO,oBAAoB,SAAS,KAAK;GAC3C,IAAI,KAAK,QAAQ,QAAW,OAAO,oBAAoB,OAAO,KAAK;GACnE,OAAO;EACT;CACF;CAEA,KAAK;EACH,UAAU,WAAmB,GAAG,cAAc,UAAU,MAAM;EAC9D,gBAAgB,WAAmB,GAChC,cAAc,gBAAgB,MACjC;EACA,iBAAiB,WAAmB,GACjC,cAAc,iBAAiB,MAClC;EACA,QAAQ,WAAmB,GAAG,cAAc,QAAQ,MAAM;CAC5D;CAEA,OAAO;EACL,WAAW,WAAmB,GAAG,gBAAgB,WAAW,MAAM;EAClE,YAAY,WAAmB,GAAG,gBAAgB,YAAY,MAAM;EACpE,SAAS,WAAmB,GAAG,gBAAgB,SAAS,MAAM;EAC9D,mBAAmB,WAAmB,GACnC,gBAAgB,mBAAmB,MACtC;EACA,WAAW,WAAmB,GAAG,gBAAgB,WAAW,MAAM;EAElE,OAAO,SAAqB;GAC1B,MAAM,SAAkC,CAAC;GACzC,IAAI,KAAK,aAAa,QACpB,OAAO,gBAAgB,YAAY,KAAK;GAC1C,IAAI,KAAK,cAAc,QACrB,OAAO,gBAAgB,aAAa,KAAK;GAC3C,IAAI,KAAK,WAAW,QAClB,OAAO,gBAAgB,UAAU,KAAK;GACxC,IAAI,KAAK,qBAAqB,QAC5B,OAAO,gBAAgB,oBAAoB,KAAK;GAClD,IAAI,KAAK,aAAa,QACpB,OAAO,gBAAgB,YAAY,KAAK;GAC1C,OAAO;EACT;CACF;CAEA,MAAM;EACJ,OAAO,WAAmB,GAAG,eAAe,OAAO,MAAM;EACzD,UAAU,WAAmB,GAAG,eAAe,UAAU,MAAM;EAC/D,WAAW,WAAmB,GAAG,eAAe,WAAW,MAAM;EACjE,YAAY,WAAmB,GAAG,eAAe,YAAY,MAAM;EACnE,YAAY,WAAoB,GAAG,eAAe,YAAY,MAAM;CACtE;CAEA,aAAa;EACX,MAAM,WAAmB,GAAG,sBAAsB,MAAM,MAAM;EAC9D,WAAW,WAAmB,GAAG,sBAAsB,WAAW,MAAM;EACxE,UAAU,WAAmB,GAAG,sBAAsB,UAAU,MAAM;CACxE;CAEA,WAAW;EACT,SAAS,WAAmB,GAAG,oBAAoB,SAAS,MAAM;EAClE,cAAc,WAAmB,GAC9B,oBAAoB,cAAc,MACrC;EACA,YAAY,WAA8C,GACvD,oBAAoB,YAAY,MACnC;EACA,YAAY,WAAmB,GAAG,oBAAoB,YAAY,MAAM;EACxE,iBAAiB,WAAmB,GACjC,oBAAoB,iBAAiB,MACxC;EAEA,OAAO,SAAyB;GAC9B,MAAM,SAAkC,CAAC;GACzC,IAAI,KAAK,WAAW,QAClB,OAAO,oBAAoB,UAAU,KAAK;GAC5C,IAAI,KAAK,gBAAgB,QACvB,OAAO,oBAAoB,eAAe,KAAK;GACjD,IAAI,KAAK,cAAc,QACrB,OAAO,oBAAoB,aAAa,KAAK;GAC/C,IAAI,KAAK,cAAc,QACrB,OAAO,oBAAoB,aAAa,KAAK;GAC/C,IAAI,KAAK,mBAAmB,QAC1B,OAAO,oBAAoB,kBAAkB,KAAK;GACpD,OAAO;EACT;CACF;CAKA,KAAK;EACH,SAAS,WAAmB,GAAG,cAAc,SAAS,MAAM;EAC5D,UAAU,WAAmB,GAAG,cAAc,UAAU,MAAM;EAC9D,SAAS,WAAmB,GAAG,cAAc,SAAS,MAAM;EAC5D,iBAAiB,WAAmB,GACjC,cAAc,iBAAiB,MAClC;CACF;CAEA,SAAS;EACP,WAAW,WAAmB,GAAG,kBAAkB,WAAW,MAAM;EACpE,gBAAgB,WAAmB,GAChC,kBAAkB,gBAAgB,MACrC;EACA,gBAAgB,WAAkD,GAC/D,kBAAkB,gBAAgB,MACrC;CACF;CAEA,MAAM;EACJ,cAAc,WAAmB,GAAG,eAAe,cAAc,MAAM;EACvE,iBAAiB,WAAmB,GACjC,eAAe,iBAAiB,MACnC;EACA,aAAa,WAAmB,GAAG,eAAe,aAAa,MAAM;CACvE;CAEA,MAAM;EACJ,YAAY,WAAmB,GAAG,eAAe,YAAY,MAAM;EACnE,WAAW,WAAmB,GAAG,eAAe,WAAW,MAAM;EACjE,WAAW,WAAmB,GAAG,eAAe,WAAW,MAAM;EACjE,QAAQ,WAAmB,GAAG,eAAe,QAAQ,MAAM;EAC3D,SAAS,WAAmB,GAAG,eAAe,SAAS,MAAM;EAC7D,SAAS,WAAmB,GAAG,eAAe,SAAS,MAAM;EAC7D,aAAa,WAAmB,GAAG,eAAe,aAAa,MAAM;EACrE,aAAa,WAAmB,GAAG,eAAe,aAAa,MAAM;EACrE,WAAW,WAAmB,GAAG,eAAe,WAAW,MAAM;CACnE;CAEA,KAAK;EACH,kBAAkB,WAAmB,GAClC,cAAc,kBAAkB,MACnC;EACA,SAAS,WAAmB,GAAG,cAAc,SAAS,MAAM;EAC5D,YAAY,WAAmB,GAAG,cAAc,YAAY,MAAM;EAClE,UAAU,WAAoB,GAAG,cAAc,UAAU,MAAM;CACjE;AACF;;;;;;;;AClfA,MAAM,wBAAwB;CAC5B,cAAc;CACd,gBAAgB;CAChB,iBAAiB;CACjB,eAAe;CACf,aAAa;CACb,oBAAoB;CACpB,eAAe;CACf,YAAY;CACZ,mBAAmB;CACnB,eAAe;CACf,eAAe;CACf,oBAAoB;CACpB,WAAW;CACX,gBAAgB;CAChB,gBAAgB;CAChB,aAAa;CACb,iBAAiB;CACjB,kBAAkB;CAClB,4BAA4B;CAC5B,0BAA0B;CAC1B,gBAAgB;CAChB,kBAAkB;CAClB,uBAAuB;AACzB;AAEA,MAAM,+BAAe,IAAI,IAAI;CAC3B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,SAAgB,kBACd,KACA,OACA,SAA0B,CAAC,GAClB;CACT,MAAM,EAAE,aAAa,CAAC,MAAM;CAE5B,IAAI,UAAU,UAAa,UAAU,MACnC;CAIF,IAAI,OAAO,UAAU,UAInB,OAAO;CAGT,MAAM,cAAc;CAEpB,IAAI,WAAW,KAAK;EAClB,MAAM,YAAY,eAAe,KAAK,aAAa,WAAW,GAAG;EACjE,IAAI,cAAc,aAChB,OAAO;CAEX;CAEA,IAAI,WAAW,aAAa,YAAY,SAAS,WAAW,WAC1D,OAAO,cAAc,KAAK,aAAa,WAAW,SAAS;CAG7D,IAAI,WAAW,gBAAgB,aAAa,IAAI,WAAW,GAAG;EAC5D,MAAM,mBAAmB,oBAAoB,WAAW;EACxD,IAAI,qBAAqB,aACvB,OAAO;CAEX;CAEA,OAAO;AACT;AAEA,SAAS,eACP,KACA,OACA,KACQ;CACR,IAAI,QAAQ,SACV,OAAO;CAGT,IAAI,QAAQ,UACV,OAAO,YAAY,KAAK,KAAK;CAG/B,IAAI,QAAQ,QACV,OAAO,UAAU,KAAK,KAAK;CAG7B,IAAI,QAAQ,WAAW,SAAS,GAAG,GACjC,MAAM,IAAI,MACR,kBAAkB,IAAI,2DACxB;CAGF,OAAO;AACT;AAEA,SAAS,SAAS,KAAsB;CACtC,MAAM,iBAAiB;EACrB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;CACA,MAAM,WAAW,IAAI,YAAY;CACjC,OAAO,eAAe,MAAM,YAAY,SAAS,SAAS,OAAO,CAAC;AACpE;AAEA,SAAS,YAAY,KAAa,OAAuB;CACvD,IAAI,SAAS,GAAG,GAAG;EAEjB,KAAK,MAAM,GAAG,YAAY,OAAO,QAAQ,iBAAiB,GACxD,IAAI,mBAAmB,UAAU,QAAQ,KAAK,KAAK,GACjD,OAAO;EAIX,OAAO;CACT;CACA,OAAO;AACT;AAEA,SAAS,UAAU,KAAa,OAAuB;CACrD,IAAI,CAAC,SAAS,GAAG,GACf,OAAO;CAKT,MAAM,YAAY;CAClB,MAAM,aAAa;CAGnB,MAAM,SAAmB,CAAC;CAC1B,KAAK,IAAI,QAAQ,GAAG,QAAQ,GAAG,SAAS;EACtC,IAAI,OAAO;EACX,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;GACrC,SAAS,MAAM,YAAY,CAAC,KAAK,KAAK;GACtC,OAAO,KAAK,KAAK,MAAM,SAAS;EAClC;EACA,OAAO,KAAK,SAAS,CAAC;CACxB;CAEA,OAAO,QAAQ,OAAO,KAAK,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE;AAC3E;AAEA,SAAS,cAAc,KAAa,OAAe,WAA2B;CAC5E,IAAI,MAAM,UAAU,WAClB,OAAO;CAET,OAAO,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI;AACzC;AAEA,SAAS,oBAAoB,QAAwB;CACnD,MAAM,QAAQ,OAAO,YAAY;CACjC,IAAI,aAAa,IAAI,KAAK,GACxB,OAAO;CAET,OAAO;AACT;AAEA,SAAgB,yBACd,KACA,SAA0B,CAAC,GACZ;CACf,MAAM,EAAE,aAAa,CAAC,GAAG,qBAAqB,CAAC,MAAM;CACrD,MAAM,EAAE,iBAAiB,SAAS;CAElC,IAAI,CAAC,gBACH,OAAO;CAKT,IADqB,OAAO,uBACV;EAChB,MAAM,cACJ,sBAAsB;EACxB,IAAI,gBAAgB,QAElB,QAAQ,KACN,mCAAmC,IAAI,4GAEzC;OAGA,QAAQ,KACN,mCAAmC,IAAI,wBAAwB,YAAY,WAC7E;CAEJ;CAEA,IAAI,mBAAmB,MACrB,QAAQ,KAAK,wBAAwB,mBAAmB,MAAM;CAKhE,OADE,sBAAsB,QACF;AACxB;AAEA,SAAgB,cACd,YACA,SAA0B,CAAC,GACF;CACzB,MAAM,EAAE,aAAa,EAAE,KAAK,SAAS,MAAM;CAE3C,MAAM,WAAoC,CAAC;CAC3C,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,UAAU,GAClD,SAAS,OAAO,kBAAkB,KAAK,OAAO,EAAE,WAAW,CAAC;CAE9D,OAAO;AACT;AAEA,SAAgB,oBAAyC;CACvD,OAAO;EACL,KAAK;EACL,WAAW;EACX,cAAc;EACd,gBAAgB;CAClB;AACF;;;;ACtPA,SAAgB,WACd,GAAG,UACsB;CACzB,MAAM,SAAkC,CAAC;CACzC,KAAK,MAAM,WAAW,UACpB,IAAI,SACF,OAAO,OAAO,QAAQ,OAAO;CAGjC,OAAO;AACT;AAEA,SAAgB,kBACd,MACA,OACA,QACM;CAGN,MAAM,mBAAmB;EACvB,GAAG,kBAAkB;EACrB,GAAG,QAAQ;CACb;CACA,MAAM,kBAAmC;EACvC,GAAG;EACH,YAAY;CACd;CAEA,MAAM,YAAY,cAAc,OAAO,eAAe;CAEtD,MAAM,iBAAiD,CAAC;CACxD,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,SAAS,GACjD,IAAI,UAAU,QAAW;EAEvB,yBAAyB,KAAK,eAAe;EAC7C,MAAM,iBAAiB,kBAAkB,KAAK,OAAO,eAAe;EACpE,IAAI,mBAAmB,QAErB,eAAe,OAAO;CAE1B;CAGF,KAAK,cAAc,cAAc;AACnC;;;;AChDA,SAAgB,QACd,eACA,MACA,YACM;CAEN,kBAAkB,eADC,MAAM,KAAK,KAAK,IACO,GAAG,UAAU;AACzD;AAEA,SAAgB,WACd,eACA,MACA,YACM;CAEN,kBAAkB,eADC,MAAM,QAAQ,KAAK,IACI,GAAG,UAAU;AACzD;AAEA,SAAgB,UACd,eACA,MACA,YACM;CAEN,kBAAkB,eADC,MAAM,OAAO,KAAK,IACK,GAAG,UAAU;AACzD;AAEA,SAAgB,WACd,eACA,MACA,YACM;CACN,MAAM,aAAa,MAAM,KAAK,OAAO,IAAI;CAEzC,IAAI,gBAAgB,iBAAiB,KAAK,UAAU,KAAK,OAEvD,cAAK,WAAW,QAAQ,KAAK,OAAO,GAAG,KAAK,OAAO;CAGrD,kBAAkB,eAAe,YAAY,UAAU;AACzD;AAEA,SAAgB,WACd,eACA,MACA,YACM;CAEN,kBAAkB,eADC,MAAM,KAAK,OAAO,IACK,GAAG,UAAU;AACzD;AAEA,SAAgB,SACd,eACA,MACA,YACM;CAEN,kBAAkB,eADC,MAAM,GAAG,OAAO,KAAK,IACE,GAAG,UAAU;AACzD;;;;;;;;;;;;;;;;;;;;AAqBA,SAAgB,qBACd,UACA,MACU;CACV,MAAM,aAAa,MAAM,QAAQ,KAAK,IAAI;CAC1C,OAAO,SAAS,MAAM,uBAAuB,UAAwB,CAAC;AACxE;AAEA,SAAgB,SACd,eACA,MAKA,YACM;CACN,MAAM,WAAW,CAAC;CAElB,IAAI,KAAK,MACP,SAAS,KAAK,MAAM,KAAK,KAAK,KAAK,IAAI,CAAC;CAE1C,IAAI,KAAK,SACP,SAAS,KAAK,MAAM,QAAQ,KAAK,KAAK,OAAO,CAAC;CAEhD,IAAI,KAAK,QACP,SAAS,KAAK,MAAM,OAAO,KAAK,KAAK,MAAM,CAAC;CAG9C,MAAM,SAAkC,CAAC;CACzC,KAAK,MAAM,WAAW,UACpB,OAAO,OAAO,QAAQ,OAAO;CAG/B,kBAAkB,eAAe,QAAQ,UAAU;AACrD;AAEA,SAAgB,QACd,eACA,MAGA,YACM;CACN,MAAM,YAAY,MAAM,KAAK,OAAO,IAAI;CACxC,MAAM,eAAe,MAAM,QAAQ,YAAY,KAAK,YAAY,EAAE;CAElE,kBAAkB,eAAe;EADhB,GAAG;EAAW,GAAG;CACI,GAAG,UAAU;AACrD;AAEA,SAAgB,SACd,eACA,MACA,YACM;CAEN,kBAAkB,eADC,MAAM,MAAM,KAAK,IACM,GAAG,UAAU;AACzD;AAEA,SAAgB,aACd,eACA,MACA,YACM;CAEN,kBAAkB,eADC,MAAM,UAAU,KAAK,IACE,GAAG,UAAU;AACzD;;;;;;;;ACxJA,SAAgB,YACd,eACA,QAQA,YACM;CACN,MAAM,YAAY,MAAM,KAAK,KAAK,OAAO,QAAQ,CAAC,CAAC;CACnD,MAAM,eAAe,MAAM,QAAQ,KAAK,OAAO,WAAW,CAAC,CAAC;CAC5D,MAAM,YAAY,MAAM,KAAK,OAAO;EAClC,QAAQ,OAAO;EACf,OAAO,OAAO;EACd,YAAY,OAAO;CACrB,CAAC;CACD,MAAM,eAAe,MAAM,QAAQ,YAAY,OAAO,YAAY,EAAE;CAEpE,MAAM,SAAS;EACb,GAAG;EACH,GAAG;EACH,GAAG;EACH,GAAG;CACL;CAEA,IAAI,OAAO,UAAU,OAAO,SAAS,gBAAgB,eACnD,cAAc,WAAW,QAAQ,OAAO,OAAO,GAAG,OAAO,OAAO;CAGlE,kBAAkB,eAAe,QAAQ,UAAU;AACrD"}