dd-trace 5.103.0 → 5.105.0

package/packages/dd-trace/src/appsec/index.js

@@ -289,7 +289,7 @@ function onExpressSession ({ req, res, sessionId, abortController }) {
     return
   }
 
-  const isSdkCalled = rootSpan.context()._tags['usr.session_id']
+  const isSdkCalled = rootSpan.context().getTag('usr.session_id')
   if (isSdkCalled) return
 
   const results = waf.run({
@@ -350,8 +350,15 @@ function onResponseBody ({ req, res, body }) {
 }
 
 function onResponseWriteHead ({ req, res, abortController, statusCode, responseHeaders }) {
-  if (!isEmpty(responseHeaders)) {
-    storedResponseHeaders.set(req, responseHeaders)
+  // Normalize header names to lowercase so downstream consumers see the same shape
+  // regardless of how the caller wrote them.
+  const normalizedResponseHeaders = {}
+  for (const [key, value] of Object.entries(responseHeaders)) {
+    normalizedResponseHeaders[key.toLowerCase()] = value
+  }
+
+  if (!isEmpty(normalizedResponseHeaders)) {
+    storedResponseHeaders.set(req, normalizedResponseHeaders)
   }
 
   // TODO: do not call waf if inside block()
@@ -376,7 +383,7 @@ function onResponseWriteHead ({ req, res, abortController, statusCode, responseH
   const results = waf.run({
     persistent: {
       [addresses.HTTP_INCOMING_RESPONSE_CODE]: String(statusCode),
-      [addresses.HTTP_INCOMING_RESPONSE_HEADERS]: copyHeadersOmitting(responseHeaders, 'set-cookie'),
+      [addresses.HTTP_INCOMING_RESPONSE_HEADERS]: copyHeadersOmitting(normalizedResponseHeaders, 'set-cookie'),
     },
   }, req)
 

package/packages/dd-trace/src/appsec/reporter.js

@@ -50,6 +50,11 @@ const contentHeaderList = [
   'content-language',
 ]
 
+const mandatoryResponseHeaderList = [
+  'content-type',
+  'content-length',
+]
+
 const responseHeaderList = [
   ...contentHeaderList,
   'content-type',
@@ -102,6 +107,8 @@ const EVENT_HEADERS_MAP = mapHeaderAndTags(eventHeadersList, REQUEST_HEADER_TAG_
 
 const RESPONSE_HEADERS_MAP = mapHeaderAndTags(responseHeaderList, RESPONSE_HEADER_TAG_PREFIX)
 
+const MANDATORY_RESPONSE_HEADERS_MAP = mapHeaderAndTags(mandatoryResponseHeaderList, RESPONSE_HEADER_TAG_PREFIX)
+
 const NON_EXTENDED_REQUEST_HEADERS = new Set([...requestHeadersList, ...eventHeadersList])
 const NON_EXTENDED_RESPONSE_HEADERS = new Set(responseHeaderList)
 const REDACTED_HEADERS = new Set(redactedHeadersList)
@@ -168,14 +175,21 @@ function getCollectedHeaders (req, res, shouldCollectEventHeaders, storedRespons
   // Mandatory
   const mandatoryCollectedHeaders = filterHeaders(req.headers, REQUEST_HEADERS_MAP)
 
-  // Basic collection
-  if (!shouldCollectEventHeaders) return mandatoryCollectedHeaders
-
   // Skip the spread when the stored side is empty -- common during the early
   // request lifecycle when no upstream response headers have been captured.
+  const liveResponseHeaders = res?.getHeaders?.()
   const responseHeaders = isEmpty(storedResponseHeaders)
-    ? res.getHeaders()
-    : { ...storedResponseHeaders, ...res.getHeaders() }
+    ? (liveResponseHeaders ?? {})
+    : (liveResponseHeaders ? { ...storedResponseHeaders, ...liveResponseHeaders } : storedResponseHeaders)
+
+  // content-type and content-length are always reported when appsec is enabled,
+  // even without a security event.
+  if (!shouldCollectEventHeaders) {
+    return Object.assign(
+      mandatoryCollectedHeaders,
+      filterHeaders(responseHeaders, MANDATORY_RESPONSE_HEADERS_MAP)
+    )
+  }
 
   const requestEventCollectedHeaders = filterHeaders(req.headers, EVENT_HEADERS_MAP)
   const responseEventCollectedHeaders = filterHeaders(responseHeaders, RESPONSE_HEADERS_MAP)
@@ -347,18 +361,18 @@ function reportAttack ({ events: attackData, actions }, req) {
   const rootSpan = web.root(req)
   if (!rootSpan) return
 
-  const currentTags = rootSpan.context()._tags
+  const spanContext = rootSpan.context()
 
   const newTags = {
     'appsec.event': 'true',
   }
 
   // TODO: maybe add this to format.js later (to take decision as late as possible)
-  if (!currentTags['_dd.origin']) {
+  if (!spanContext.getTag('_dd.origin')) {
     newTags['_dd.origin'] = 'appsec'
   }
 
-  const currentJson = currentTags['_dd.appsec.json']
+  const currentJson = spanContext.getTag('_dd.appsec.json')
 
   // merge JSON arrays without parsing them
   const attackDataStr = JSON.stringify(attackData)
@@ -455,8 +469,7 @@ function reportRequestBody (rootSpan, requestBody, comesFromRaspAction = false)
 
   if (rootSpan.meta_struct['http.request.body']) {
     // If the rasp.exceed metric exists, set also the same for the new tag
-    const currentTags = rootSpan.context()._tags
-    const sizeExceedTagValue = currentTags['_dd.appsec.rasp.request_body_size.exceeded']
+    const sizeExceedTagValue = rootSpan.context().getTag('_dd.appsec.rasp.request_body_size.exceeded')
 
     if (sizeExceedTagValue) {
       rootSpan.setTag('_dd.appsec.request_body_size.exceeded', sizeExceedTagValue)
@@ -558,7 +571,7 @@ function finishRequest (req, res, storedResponseHeaders, requestBody) {
 
   incrementWafRequestsMetric(req)
 
-  const tags = rootSpan.context()._tags
+  const tags = rootSpan.context().getTags()
 
   const extendedDataCollection = extendedDataCollectionRequest.get(req)
   const newTags = getCollectedHeaders(

package/packages/dd-trace/src/appsec/sdk/user_blocking.js

@@ -22,7 +22,7 @@ function checkUserAndSetUser (tracer, user) {
 
   const rootSpan = getRootSpan()
   if (rootSpan) {
-    if (!rootSpan.context()._tags['usr.id']) {
+    if (!rootSpan.context().getTag('usr.id')) {
       setUserTags(user, rootSpan)
     }
   } else {

package/packages/dd-trace/src/appsec/sdk/utils.js

@@ -18,7 +18,7 @@ function getRootSpan () {
 
     parentId = pContext._parentId
 
-    if (!pContext._tags?._inferred_span) {
+    if (!pContext.getTag('_inferred_span')) {
       span = parent
     }
   }

package/packages/dd-trace/src/appsec/user_tracking.js

@@ -91,12 +91,13 @@ function trackLogin (framework, login, user, success, rootSpan) {
     [addresses.USER_LOGIN]: login,
   }
 
-  const currentTags = rootSpan.context()._tags
-  const isSdkCalled = currentTags[`_dd.appsec.events.users.login.${success ? 'success' : 'failure'}.sdk`] === 'true'
+  const spanContext = rootSpan.context()
+  const sdkTag = `_dd.appsec.events.users.login.${success ? 'success' : 'failure'}.sdk`
+  const isSdkCalled = spanContext.getTag(sdkTag) === 'true'
 
   // used to not overwrite tags set by SDK
   function shouldSetTag (tag) {
-    return !(isSdkCalled && currentTags[tag])
+    return !(isSdkCalled && spanContext.getTag(tag))
   }
 
   if (success) {
@@ -167,7 +168,7 @@ function trackUser (user, rootSpan) {
 
   rootSpan.setTag('_dd.appsec.usr.id', userId)
 
-  const isSdkCalled = rootSpan.context()._tags['_dd.appsec.user.collection_mode'] === 'sdk'
+  const isSdkCalled = rootSpan.context().getTag('_dd.appsec.user.collection_mode') === 'sdk'
   // do not override SDK
   if (!isSdkCalled) {
     rootSpan.addTags({

package/packages/dd-trace/src/baggage.js

@@ -62,7 +62,13 @@ function removeBaggageItem (keyToRemove) {
 }
 
 function removeAllBaggageItems () {
-  baggageStorage.enterWith(EMPTY_STORE)
+  // Skip `enterWith` (a real ALS frame switch) when the store is already
+  // the empty sentinel. Entry-point services without active baggage hit this
+  // on every extract.
+  const store = baggageStorage.getStore()
+  if (store !== undefined && store !== EMPTY_STORE) {
+    baggageStorage.enterWith(EMPTY_STORE)
+  }
   return EMPTY_STORE
 }
 

package/packages/dd-trace/src/ci-visibility/exporters/ci-visibility-exporter.js

@@ -236,7 +236,6 @@ class CiVisibilityExporter extends BufferingExporter {
         testManagementAttemptToFixRetries ?? this._config.testManagementAttemptToFixRetries,
       isImpactedTestsEnabled: isImpactedTestsEnabled && this._config.isImpactedTestsEnabled,
       isCoverageReportUploadEnabled,
-      DD_TEST_TIA_KEEP_COV_CONFIG: this._config.DD_TEST_TIA_KEEP_COV_CONFIG,
     }
   }
 

package/packages/dd-trace/src/ci-visibility/intelligent-test-runner/get-skippable-suites.js

@@ -31,10 +31,11 @@ function getSkippableSuites ({
   runtimeVersion,
   custom,
   testLevel = 'suite',
+  isCoverageReportUploadEnabled = false,
 }, done) {
   const cacheKey = buildCacheKey('skippable', [
     sha, service, env, repositoryUrl, osPlatform, osVersion, osArchitecture,
-    runtimeName, runtimeVersion, testLevel, custom,
+    runtimeName, runtimeVersion, testLevel, custom, isCoverageReportUploadEnabled,
   ])
 
   withCache(cacheKey, (activeCacheKey, cb) => {
@@ -54,11 +55,12 @@ function getSkippableSuites ({
       runtimeVersion,
       custom,
       testLevel,
+      isCoverageReportUploadEnabled,
       cacheKey: activeCacheKey,
     }, cb)
   }, (err, data) => {
     if (err) return done(err)
-    done(null, data.skippableSuites, data.correlationId)
+    done(null, data.skippableSuites, data.correlationId, data.coverage)
   })
 }
 
@@ -81,6 +83,7 @@ function getSkippableSuites ({
  * @param {string} params.runtimeVersion
  * @param {object} [params.custom]
  * @param {string} [params.testLevel]
+ * @param {boolean} [params.isCoverageReportUploadEnabled]
  * @param {string | null} params.cacheKey
  * @param {Function} done
  */
@@ -100,6 +103,7 @@ function fetchFromApi ({
   runtimeVersion,
   custom,
   testLevel,
+  isCoverageReportUploadEnabled,
   cacheKey,
 }, done) {
   const options = {
@@ -148,7 +152,6 @@ function fetchFromApi ({
       },
     },
   })
-
   incrementCountMetric(TELEMETRY_ITR_SKIPPABLE_TESTS)
 
   const startTime = Date.now()
@@ -161,27 +164,36 @@ function fetchFromApi ({
     } else {
       try {
         const parsedResponse = JSON.parse(res)
-        const skippableSuites = parsedResponse
+        const coverage = parsedResponse.meta?.coverage || {}
+
+        const skippableItems = parsedResponse
           .data
           .filter(({ type }) => type === testLevel)
-          .map(({ attributes: { suite, name } }) => {
-            if (testLevel === 'suite') {
-              return suite
-            }
-            return { suite, name }
-          })
-        const { meta: { correlation_id: correlationId } } = parsedResponse
+        const skippableSuites = []
+        for (const {
+          attributes: {
+            suite,
+            name,
+            _is_missing_line_code_coverage: isMissingLineCodeCoverage,
+          },
+        } of skippableItems) {
+          // Only reject candidates without backend line coverage when we need that coverage to backfill reports.
+          if (isCoverageReportUploadEnabled && isMissingLineCodeCoverage) continue
+
+          skippableSuites.push(testLevel === 'suite' ? suite : { suite, name })
+        }
+        const correlationId = parsedResponse.meta?.correlation_id
         incrementCountMetric(
           testLevel === 'test'
             ? TELEMETRY_ITR_SKIPPABLE_TESTS_RESPONSE_TESTS
             : TELEMETRY_ITR_SKIPPABLE_TESTS_RESPONSE_SUITES,
           {},
-          skippableSuites.length
+          skippableItems.length
         )
         distributionMetric(TELEMETRY_ITR_SKIPPABLE_TESTS_RESPONSE_BYTES, {}, res.length)
         log.debug('Number of received skippable %ss:', testLevel, skippableSuites.length)
 
-        const result = { skippableSuites, correlationId }
+        const result = { skippableSuites, correlationId, coverage }
         writeToCache(cacheKey, result)
 
         done(null, result)

package/packages/dd-trace/src/ci-visibility/requests/request.js

@@ -14,6 +14,8 @@ const {
 } = require('../../exporters/common/retry')
 const { urlToHttpOptions } = require('../../exporters/common/url-to-http-options-polyfill')
 
+const legacyStorage = storage('legacy')
+
 function parseUrl (urlObjOrString) {
   if (urlObjOrString !== null && typeof urlObjOrString === 'object') {
     return urlToHttpOptions(urlObjOrString)
@@ -75,7 +77,7 @@ function request (data, options, callback) {
   let firstStatusCode = null
 
   const makeRequest = () => {
-    storage('legacy').run({ noop: true }, () => {
+    legacyStorage.run({ noop: true }, () => {
       const req = client.request(opts, (res) => {
         // Capture non-2xx status code as soon as we see it so telemetry preserves it if the retry
         // fails with a network error (no HTTP response) before 'end' fires

package/packages/dd-trace/src/ci-visibility/test-api-manual/test-api-manual-plugin.js

@@ -8,6 +8,8 @@ const {
 } = require('../../plugins/util/test')
 const { storage } = require('../../../../datadog-core')
 
+const legacyStorage = storage('legacy')
+
 class TestApiManualPlugin extends CiPlugin {
   static id = 'test-api-manual'
 
@@ -17,13 +19,13 @@ class TestApiManualPlugin extends CiPlugin {
     this.sourceRoot = process.cwd()
 
     this.unconfiguredAddSub('dd-trace:ci:manual:test:start', ({ testName, testSuite }) => {
-      const store = storage('legacy').getStore()
+      const store = legacyStorage.getStore()
       const testSuiteRelative = getTestSuitePath(testSuite, this.sourceRoot)
       const testSpan = this.startTestSpan(testName, testSuiteRelative)
       this.enter(testSpan, store)
     })
     this.unconfiguredAddSub('dd-trace:ci:manual:test:finish', ({ status, error }) => {
-      const store = storage('legacy').getStore()
+      const store = legacyStorage.getStore()
       const testSpan = store && store.span
       if (testSpan) {
         testSpan.setTag(TEST_STATUS, status)
@@ -35,7 +37,7 @@ class TestApiManualPlugin extends CiPlugin {
       }
     })
     this.unconfiguredAddSub('dd-trace:ci:manual:test:addTags', (tags) => {
-      const store = storage('legacy').getStore()
+      const store = legacyStorage.getStore()
       const testSpan = store && store.span
       if (testSpan) {
         testSpan.addTags(tags)

package/packages/dd-trace/src/ci-visibility/test-optimization-cache.js

@@ -1,6 +1,6 @@
 'use strict'
 
-const { writeFileSync } = require('node:fs')
+const { existsSync, readFileSync, writeFileSync } = require('node:fs')
 const { tmpdir } = require('node:os')
 const { randomUUID } = require('node:crypto')
 const path = require('node:path')
@@ -8,6 +8,9 @@ const path = require('node:path')
 const { getValueFromEnvSources } = require('../config/helper')
 const log = require('../log')
 
+const COVERAGE_BACKFILL_KEY = '_ddCoverageBackfill'
+const COVERAGE_BACKFILL_ROOT_DIR_KEY = '_ddCoverageBackfillRootDir'
+
 /**
  * Gets the test optimization settings cache file path from the env var.
  * @returns {string|undefined} The cache file path, or undefined if not set.
@@ -36,26 +39,87 @@ function setupSettingsCachePath () {
 }
 
 /**
- * Writes the settings to the cache file specified by DD_EXPERIMENTAL_TEST_OPT_SETTINGS_CACHE.
- * Does nothing if the env var is not set.
- * @param {object} settings - The settings object to cache.
+ * Reads the shared test optimization cache file.
+ * @returns {object} Cached settings and metadata.
  */
-function writeSettingsToCache (settings) {
+function readCacheFile () {
+  const settingsCachePath = getSettingsCachePath()
+  if (!settingsCachePath || !existsSync(settingsCachePath)) {
+    return {}
+  }
+
+  try {
+    return JSON.parse(readFileSync(settingsCachePath, 'utf8'))
+  } catch (err) {
+    log.debug('Failed to read settings cache: %s', err.message)
+    return {}
+  }
+}
+
+/**
+ * Writes the shared test optimization cache file.
+ * @param {object} cache - Cached settings and metadata.
+ */
+function writeCacheFile (cache) {
   const settingsCachePath = getSettingsCachePath()
   if (!settingsCachePath) {
     return
   }
 
   try {
-    writeFileSync(settingsCachePath, JSON.stringify(settings), 'utf8')
+    writeFileSync(settingsCachePath, JSON.stringify(cache), 'utf8')
     log.debug('Settings written to %s', settingsCachePath)
   } catch (err) {
     log.error('Failed to write settings to cache file', err)
   }
 }
 
+/**
+ * Writes the settings to the cache file specified by DD_EXPERIMENTAL_TEST_OPT_SETTINGS_CACHE.
+ * Does nothing if the env var is not set.
+ * @param {object} settings - The settings object to cache.
+ */
+function writeSettingsToCache (settings) {
+  writeCacheFile({
+    ...readCacheFile(),
+    ...settings,
+  })
+}
+
+/**
+ * Writes TIA coverage backfill to the shared nyc settings cache.
+ * @param {object} coverage - Repository-relative coverage bitmaps by filename.
+ * @param {string} [rootDir] - Root directory that coverage filenames are relative to.
+ */
+function writeCoverageBackfillToCache (coverage, rootDir) {
+  writeCacheFile({
+    ...readCacheFile(),
+    [COVERAGE_BACKFILL_KEY]: coverage,
+    [COVERAGE_BACKFILL_ROOT_DIR_KEY]: rootDir,
+  })
+}
+
+/**
+ * Reads TIA coverage backfill from the shared nyc settings cache.
+ * @returns {object|undefined} Repository-relative coverage bitmaps by filename.
+ */
+function readCoverageBackfillFromCache () {
+  return readCacheFile()[COVERAGE_BACKFILL_KEY]
+}
+
+/**
+ * Reads TIA coverage backfill root directory from the shared nyc settings cache.
+ * @returns {string|undefined} Root directory that cached coverage filenames are relative to.
+ */
+function readCoverageBackfillRootDirFromCache () {
+  return readCacheFile()[COVERAGE_BACKFILL_ROOT_DIR_KEY]
+}
+
 module.exports = {
   getSettingsCachePath,
+  readCoverageBackfillFromCache,
+  readCoverageBackfillRootDirFromCache,
   setupSettingsCachePath,
+  writeCoverageBackfillToCache,
   writeSettingsToCache,
 }

package/packages/dd-trace/src/config/generated-config-types.d.ts

@@ -65,7 +65,7 @@ export interface GeneratedConfig {
   dbm: {
     injectSqlBaseHash: boolean;
   };
-  dbmPropagationMode: string;
+  dbmPropagationMode: "disabled" | "service" | "full" | "dynamic_service";
   DD_ACTION_EXECUTION_ID: string | undefined;
   DD_AGENTLESS_LOG_SUBMISSION_ENABLED: boolean;
   DD_AGENTLESS_LOG_SUBMISSION_URL: string | undefined;
@@ -162,7 +162,6 @@ export interface GeneratedConfig {
   DD_TEST_FLEET_CONFIG_PATH: string | undefined;
   DD_TEST_LOCAL_CONFIG_PATH: string | undefined;
   DD_TEST_SESSION_NAME: string | undefined;
-  DD_TEST_TIA_KEEP_COV_CONFIG: boolean;
   DD_TRACE_AEROSPIKE_ENABLED: boolean;
   DD_TRACE_AI_ENABLED: boolean;
   DD_TRACE_AMQP10_ENABLED: boolean;
@@ -211,6 +210,7 @@ export interface GeneratedConfig {
   DD_TRACE_AWS_SDK_STEPFUNCTIONS_BATCH_PROPAGATION_ENABLED: boolean;
   DD_TRACE_AWS_SDK_STEPFUNCTIONS_ENABLED: boolean;
   DD_TRACE_AXIOS_ENABLED: boolean;
+  DD_TRACE_AZURE_COSMOS_ENABLED: boolean;
   DD_TRACE_AZURE_DURABLE_FUNCTIONS_ENABLED: boolean;
   DD_TRACE_AZURE_EVENT_HUBS_ENABLED: boolean;
   DD_TRACE_AZURE_EVENTHUBS_BATCH_LINKS_ENABLED: boolean;
@@ -324,12 +324,14 @@ export interface GeneratedConfig {
   DD_TRACE_MONGODB_CORE_ENABLED: boolean;
   DD_TRACE_MONGODB_ENABLED: boolean;
   DD_TRACE_MONGODB_HEARTBEAT_ENABLED: boolean;
+  DD_TRACE_MONGODB_OBFUSCATE_QUERY: "none" | "types" | "redact";
   DD_TRACE_MONGOOSE_ENABLED: boolean;
   DD_TRACE_MQUERY_ENABLED: boolean;
   DD_TRACE_MULTER_ENABLED: boolean;
   DD_TRACE_MYSQL_ENABLED: boolean;
   DD_TRACE_MYSQL2_ENABLED: boolean;
   DD_TRACE_NATIVE_SPAN_EVENTS: boolean;
+  DD_TRACE_NATS_ENABLED: boolean;
   DD_TRACE_NET_ENABLED: boolean;
   DD_TRACE_NEXT_ENABLED: boolean;
   DD_TRACE_NODE_CHILD_PROCESS_ENABLED: boolean;
@@ -427,6 +429,9 @@ export interface GeneratedConfig {
     flaggingProvider: {
       enabled: boolean;
       initializationTimeoutMs: number;
+      spanEnrichment: {
+        enabled: boolean;
+      };
     };
   };
   flakyTestRetriesCount: number;

package/packages/dd-trace/src/config/supported-configurations.json

@@ -640,7 +640,9 @@
         "configurationNames": [
           "dbmPropagationMode"
         ],
-        "default": "disabled"
+        "default": "disabled",
+        "allowed": "disabled|service|full|dynamic_service",
+        "transform": "toLowerCase"
       }
     ],
     "DD_DOGSTATSD_HOST": [
@@ -773,6 +775,16 @@
         "default": "false"
       }
     ],
+    "DD_EXPERIMENTAL_FLAGGING_PROVIDER_SPAN_ENRICHMENT_ENABLED": [
+      {
+        "implementation": "A",
+        "type": "boolean",
+        "configurationNames": [
+          "experimental.flaggingProvider.spanEnrichment.enabled"
+        ],
+        "default": "false"
+      }
+    ],
     "DD_EXPERIMENTAL_PROPAGATE_PROCESS_TAGS_ENABLED": [
       {
         "implementation": "B",
@@ -1773,13 +1785,6 @@
         "internalPropertyName": "isTestManagementEnabled"
       }
     ],
-    "DD_TEST_TIA_KEEP_COV_CONFIG": [
-      {
-        "implementation": "A",
-        "type": "boolean",
-        "default": "false"
-      }
-    ],
     "DD_TEST_SESSION_NAME": [
       {
         "implementation": "A",
@@ -2176,6 +2181,13 @@
         "default": "true"
       }
     ],
+    "DD_TRACE_AZURE_COSMOS_ENABLED": [
+      {
+        "implementation": "A",
+        "type": "boolean",
+        "default": "true"
+      }
+    ],
     "DD_TRACE_AZURE_DURABLE_FUNCTIONS_ENABLED": [
       {
         "implementation": "B",
@@ -3133,6 +3145,15 @@
         "default": "true"
       }
     ],
+    "DD_TRACE_MONGODB_OBFUSCATE_QUERY": [
+      {
+        "implementation": "A",
+        "type": "string",
+        "default": "none",
+        "allowed": "none|types|redact",
+        "transform": "toLowerCase"
+      }
+    ],
     "DD_TRACE_MONGOOSE_ENABLED": [
       {
         "implementation": "A",
@@ -3175,6 +3196,13 @@
         "default": "false"
       }
     ],
+    "DD_TRACE_NATS_ENABLED": [
+      {
+        "implementation": "A",
+        "type": "boolean",
+        "default": "false"
+      }
+    ],
     "DD_TRACE_NET_ENABLED": [
       {
         "implementation": "A",

package/packages/dd-trace/src/crashtracking/crashtracker.js

@@ -1,5 +1,7 @@
 'use strict'
 
+const { EOL } = require('node:os')
+
 // Load binding first to not import other modules if it throws
 const libdatadog = require('@datadog/libdatadog')
 const binding = libdatadog.load('crashtracker')
@@ -29,19 +31,29 @@ class Crashtracker {
   start (config) {
     if (this.#started) return this.configure(config)
 
-    this.#started = true
-
     try {
       binding.init(
         this.#getConfig(config),
         this.#getReceiverConfig(),
         this.#getMetadata(config)
       )
+      this.#started = true
+      this.#trackUnhandledExceptions()
     } catch (e) {
       log.error('Error initializing crashtracker', e)
     }
   }
 
+  #trackUnhandledExceptions () {
+    process.once('uncaughtExceptionMonitor', (error, origin) => {
+      try {
+        binding.reportUncaughtExceptionMonitor(error, origin)
+      } catch (e) {
+        process.stderr.write(`Error reporting uncaught exception to crashtracker: ${e.toString()}${EOL}`)
+      }
+    })
+  }
+
   withProfilerSerializing (f) {
     binding.beginProfilerSerializing()
     try {
@@ -58,7 +70,7 @@ class Crashtracker {
   #getConfig (config) {
     const url = getAgentUrl(config)
 
-    // Out-of-process symbolication currently (crashtracker 27.0.0) works on
+    // Out-of-process symbolication currently works on
     // Linux only, does not work on Mac.
     const resolveMode = require('os').platform === 'linux'
       ? 'EnabledWithSymbolsInReceiver'

package/packages/dd-trace/src/datastreams/context.js

@@ -3,15 +3,17 @@
 const { storage } = require('../../../datadog-core')
 const log = require('../log')
 
+const legacyStorage = storage('legacy')
+
 function getDataStreamsContext () {
-  const store = storage('legacy').getStore()
+  const store = legacyStorage.getStore()
   return (store && store.dataStreamsContext) || null
 }
 
 function setDataStreamsContext (dataStreamsContext) {
   log.debug('Setting new DSM Context: %j.', dataStreamsContext)
 
-  if (dataStreamsContext) storage('legacy').enterWith({ ...(storage('legacy').getStore()), dataStreamsContext })
+  if (dataStreamsContext) legacyStorage.enterWith({ ...legacyStorage.getStore(), dataStreamsContext })
 }
 
 module.exports = {