dd-trace 5.83.0 → 5.85.0

package/LICENSE-3rdparty.csv

@@ -11,7 +11,6 @@
 "@isaacs/ttlcache","https://github.com/isaacs/ttlcache","['BlueOak-1.0.0']","['Isaac Z. Schlueter']"
 "@jsep-plugin/assignment","https://github.com/EricSmekens/jsep","['MIT']","['Shelly']"
 "@jsep-plugin/regex","https://github.com/EricSmekens/jsep","['MIT']","['Shelly']"
-"@openfeature/server-sdk","https://github.com/open-feature/js-sdk","['Apache-2.0']","['open-feature']"
 "@opentelemetry/api","https://github.com/open-telemetry/opentelemetry-js","['Apache-2.0']","['OpenTelemetry Authors']"
 "@opentelemetry/api-logs","https://github.com/open-telemetry/opentelemetry-js","['Apache-2.0']","['OpenTelemetry Authors']"
 "@opentelemetry/core","https://github.com/open-telemetry/opentelemetry-js","['Apache-2.0']","['OpenTelemetry Authors']"

package/ci/cypress/polyfills.js

@@ -20,6 +20,6 @@ if (!Array.prototype.at) {
       return (index < 0 || index >= len) ? undefined : this[index]
     },
     writable: true,
-    configurable: true
+    configurable: true,
   })
 }

package/ci/init.js

@@ -14,7 +14,7 @@ const EXPORTER_MAP = {
   cucumber: 'cucumber_worker',
   mocha: 'mocha_worker',
   playwright: 'playwright_worker',
-  vitest: 'vitest_worker'
+  vitest: 'vitest_worker',
 }
 
 function isPackageManager () {
@@ -40,7 +40,7 @@ const isJestWorker = testWorkerType === 'jest'
 const baseOptions = {
   startupLogs: false,
   isCiVisibility: true,
-  flushInterval: isJestWorker ? JEST_FLUSH_INTERVAL : DEFAULT_FLUSH_INTERVAL
+  flushInterval: isJestWorker ? JEST_FLUSH_INTERVAL : DEFAULT_FLUSH_INTERVAL,
 }
 
 let shouldInit = !isFalse(getValueFromEnvSources('DD_CIVISIBILITY_ENABLED'))
@@ -54,13 +54,13 @@ if (!isTestWorker && isPackageManager()) {
 if (isTestWorker) {
   baseOptions.telemetry = { enabled: false }
   baseOptions.experimental = {
-    exporter: EXPORTER_MAP[testWorkerType]
+    exporter: EXPORTER_MAP[testWorkerType],
   }
 } else {
   if (isAgentlessEnabled) {
     if (getValueFromEnvSources('DD_API_KEY')) {
       baseOptions.experimental = {
-        exporter: 'datadog'
+        exporter: 'datadog',
       }
     } else {
       console.error(
@@ -72,7 +72,7 @@ if (isTestWorker) {
     }
   } else {
     baseOptions.experimental = {
-      exporter: 'agent_proxy'
+      exporter: 'agent_proxy',
     }
   }
 }

package/ext/exporters.js

@@ -8,5 +8,5 @@ module.exports = {
   CUCUMBER_WORKER: 'cucumber_worker',
   MOCHA_WORKER: 'mocha_worker',
   PLAYWRIGHT_WORKER: 'playwright_worker',
-  VITEST_WORKER: 'vitest_worker'
+  VITEST_WORKER: 'vitest_worker',
 }

package/ext/formats.js

@@ -5,5 +5,5 @@ module.exports = {
   HTTP_HEADERS: 'http_headers',
   BINARY: 'binary',
   LOG: 'log',
-  TEXT_MAP_DSM: 'text_map_dsm'
+  TEXT_MAP_DSM: 'text_map_dsm',
 }

package/ext/index.js

@@ -13,5 +13,5 @@ module.exports = {
   priority,
   tags,
   types,
-  exporters
+  exporters,
 }

package/ext/kinds.js

@@ -5,5 +5,5 @@ module.exports = {
   CLIENT: 'client',
   PRODUCER: 'producer',
   CONSUMER: 'consumer',
-  INTERNAL: 'internal'
+  INTERNAL: 'internal',
 }

package/ext/priority.js

@@ -4,5 +4,5 @@ module.exports = {
   USER_REJECT: -1,
   AUTO_REJECT: 0,
   AUTO_KEEP: 1,
-  USER_KEEP: 2
+  USER_KEEP: 2,
 }

package/ext/scopes.js

@@ -5,5 +5,5 @@ module.exports = {
   ASYNC_LOCAL_STORAGE: 'async_local_storage',
   ASYNC_HOOKS: 'async_hooks',
   SYNC: 'sync',
-  NOOP: 'noop'
+  NOOP: 'noop',
 }

package/ext/tags.js

@@ -29,7 +29,7 @@ const tags = {
   // Messaging
 
   // DSM Specific
-  PATHWAY_HASH: 'pathway.hash'
+  PATHWAY_HASH: 'pathway.hash',
 }
 
 // Deprecated

package/ext/types.js

@@ -3,5 +3,5 @@
 module.exports = {
   HTTP: 'http',
   SERVERLESS: 'serverless',
-  WEB: 'web'
+  WEB: 'web',
 }

package/index.d.ts

@@ -148,7 +148,7 @@ interface Tracer extends opentracing.Tracer {
    * OpenFeature Provider with Remote Config integration.
    *
    * Extends DatadogNodeServerProvider with Remote Config integration for dynamic flag configuration.
-   * Enable with DD_FLAGGING_PROVIDER_ENABLED=true.
+   * Enable with DD_EXPERIMENTAL_FLAGGING_PROVIDER_ENABLED=true.
    *
    * @beta This feature is in preview and not ready for production use
    */
@@ -241,6 +241,8 @@ interface Plugins {
   "express": tracer.plugins.express;
   "fastify": tracer.plugins.fastify;
   "fetch": tracer.plugins.fetch;
+  "find-my-way": tracer.plugins.find_my_way;
+  "fs": tracer.plugins.fs;
   "generic-pool": tracer.plugins.generic_pool;
   "google-cloud-pubsub": tracer.plugins.google_cloud_pubsub;
   "google-cloud-vertexai": tracer.plugins.google_cloud_vertexai;
@@ -269,6 +271,7 @@ interface Plugins {
   "mysql2": tracer.plugins.mysql2;
   "net": tracer.plugins.net;
   "next": tracer.plugins.next;
+  "nyc": tracer.plugins.nyc;
   "openai": tracer.plugins.openai;
   "opensearch": tracer.plugins.opensearch;
   "oracledb": tracer.plugins.oracledb;
@@ -286,7 +289,9 @@ interface Plugins {
   "tedious": tracer.plugins.tedious;
   "undici": tracer.plugins.undici;
   "vitest": tracer.plugins.vitest;
+  "web": tracer.plugins.web;
   "winston": tracer.plugins.winston;
+  "ws": tracer.plugins.ws;
 }
 
 declare namespace tracer {
@@ -687,6 +692,7 @@ declare namespace tracer {
         /**
          * Whether to enable the feature flagging provider.
          * Requires Remote Config to be properly configured.
+         * Can be configured via DD_EXPERIMENTAL_FLAGGING_PROVIDER_ENABLED environment variable.
          *
          * @default false
          */
@@ -694,6 +700,7 @@ declare namespace tracer {
         /**
          * Timeout in milliseconds for OpenFeature provider initialization.
          * If configuration is not received within this time, initialization fails.
+         * Can be configured via DD_EXPERIMENTAL_FLAGGING_PROVIDER_INITIALIZATION_TIMEOUT_MS environment variable.
          *
          * @default 30000
          */
@@ -1567,6 +1574,16 @@ declare namespace tracer {
        */
       blacklist?: string | RegExp | ((urlOrPath: string) => boolean) | (string | RegExp | ((urlOrPath: string) => boolean))[];
 
+      /**
+       * Custom filter function used to decide whether a URL/path is allowed.
+       * When provided, this takes precedence over allowlist/blocklist configuration.
+       * If not provided, allowlist/blocklist logic will be used instead.
+       *
+       * @param urlOrPath - The URL or path to filter
+       * @returns true to instrument the request, false to skip it
+       */
+      filter?: (urlOrPath: string) => boolean;
+
       /**
        * An array of headers to include in the span metadata.
        *
@@ -1619,6 +1636,21 @@ declare namespace tracer {
        * @default true
        */
       middleware?: boolean;
+
+      /**
+       * Whether (or how) to obfuscate querystring values in `http.url`.
+       *
+       * - `true`: obfuscate all values
+       * - `false`: disable obfuscation
+       * - `string`: regex string used to obfuscate matching values (empty string disables)
+       * - `RegExp`: regex used to obfuscate matching values
+       */
+      queryStringObfuscation?: boolean | string | RegExp;
+
+      /**
+       * Whether to enable resource renaming when the framework route is unavailable.
+       */
+      resourceRenamingEnabled?: boolean;
     }
 
     /** @hidden */
@@ -1684,6 +1716,20 @@ declare namespace tracer {
        * @default code => code < 500
        */
       validateStatus?: (code: number) => boolean;
+      /**
+       * Whether (or how) to obfuscate querystring values in `http.url`.
+       *
+       * - `true`: obfuscate all values
+       * - `false`: disable obfuscation
+       * - `string`: regex string used to obfuscate matching values (empty string disables)
+       * - `RegExp`: regex used to obfuscate matching values
+       */
+      queryStringObfuscation?: boolean | string | RegExp;
+
+      /**
+       * Whether to enable resource renaming when the framework route is unavailable.
+       */
+      resourceRenamingEnabled?: boolean;
     }
 
     /** @hidden */
@@ -1820,7 +1866,12 @@ declare namespace tracer {
      * This plugin automatically instruments the
      * @azure/functions module.
     */
-    interface azure_functions extends Instrumentation {}
+    interface azure_functions extends Instrumentation {
+      /**
+       * Whether to enable resource renaming when the framework route is unavailable.
+       */
+      resourceRenamingEnabled?: boolean;
+    }
 
     /**
      * This plugin automatically instruments the
@@ -1924,6 +1975,16 @@ declare namespace tracer {
      */
     interface fetch extends HttpClient {}
 
+    /**
+     * This plugin patches the [find-my-way](https://github.com/delvedor/find-my-way) router.
+     */
+    interface find_my_way extends Integration {}
+
+    /**
+     * This plugin automatically instruments Node.js core fs operations.
+     */
+    interface fs extends Instrumentation {}
+
     /**
      * This plugin patches the [generic-pool](https://github.com/coopernurse/node-pool)
      * module to bind the callbacks the the caller context.
@@ -2161,6 +2222,16 @@ declare namespace tracer {
        */
       blacklist?: string | RegExp | ((command: string) => boolean) | (string | RegExp | ((command: string) => boolean))[];
 
+      /**
+       * Custom filter function used to decide whether a Redis command should be instrumented.
+       * When provided, this takes precedence over allowlist/blocklist configuration.
+       * If not provided, allowlist/blocklist logic will be used instead.
+       *
+       * @param command - The Redis command name to filter
+       * @returns true to instrument the command, false to skip it
+       */
+      filter?: (command: string) => boolean;
+
       /**
        * Whether to use a different service name for each Redis instance based
        * on the configured connection name of the client.
@@ -2208,6 +2279,16 @@ declare namespace tracer {
        */
       blacklist?: string | RegExp | ((command: string) => boolean) | (string | RegExp | ((command: string) => boolean))[];
 
+      /**
+       * Custom filter function used to decide whether a Valkey command should be instrumented.
+       * When provided, this takes precedence over allowlist/blocklist configuration.
+       * If not provided, allowlist/blocklist logic will be used instead.
+       *
+       * @param command - The Valkey command name to filter
+       * @returns true to instrument the command, false to skip it
+       */
+      filter?: (command: string) => boolean;
+
       /**
        * Whether to use a different service name for each Redis instance based
        * on the configured connection name of the client.
@@ -2355,6 +2436,11 @@ declare namespace tracer {
       };
     }
 
+    /**
+     * This plugin integrates with [nyc](https://github.com/istanbuljs/nyc) for CI visibility.
+     */
+    interface nyc extends Integration {}
+
     /**
      * This plugin automatically instruments the
      * [openai](https://platform.openai.com/docs/api-reference?lang=node.js) module.
@@ -2476,6 +2562,16 @@ declare namespace tracer {
        * @hidden
        */
       blacklist?: string | RegExp | ((command: string) => boolean) | (string | RegExp | ((command: string) => boolean))[];
+
+      /**
+       * Custom filter function used to decide whether a Redis command should be instrumented.
+       * When provided, this takes precedence over allowlist/blocklist configuration.
+       * If not provided, allowlist/blocklist logic will be used instead.
+       *
+       * @param command - The Redis command name to filter
+       * @returns true to instrument the command, false to skip it
+       */
+      filter?: (command: string) => boolean;
     }
 
     /**
@@ -2541,6 +2637,11 @@ declare namespace tracer {
      */
     interface vitest extends Integration {}
 
+    /**
+     * This plugin implements shared web request instrumentation helpers.
+     */
+    interface web extends HttpServer {}
+
     /**
      * This plugin patches the [winston](https://github.com/winstonjs/winston)
      * to automatically inject trace identifiers in log records when the
@@ -2548,6 +2649,18 @@ declare namespace tracer {
      * on the tracer.
      */
     interface winston extends Integration {}
+
+    /**
+     * This plugin automatically instruments the
+     * [ws](https://github.com/websockets/ws) module.
+     */
+    interface ws extends Instrumentation {
+      /**
+       * Controls whether websocket messages should be traced.
+       * This is also configurable via `DD_TRACE_WEBSOCKET_MESSAGES_ENABLED`.
+       */
+      traceWebsocketMessagesEnabled?: boolean;
+    }
   }
 
   export namespace opentelemetry {

package/initialize.mjs

@@ -2,8 +2,7 @@
  * This file serves one of two purposes, depending on how it's used.
  *
  * If used with --import, it will import init.js and register the loader hook.
- * If used with --loader, it will act as the loader hook, except that it will
- * also import init.js inside the source code of the entrypoint file.
+ * If used with --loader, it will act as the loader hook.
  *
  * The result is that no matter how this file is used, so long as it's with
  * one of the two flags, the tracer will always be initialized, and the loader
@@ -12,58 +11,75 @@
 
 /* eslint n/no-unsupported-features/node-builtins: ['error', { ignores: ['module.register'] }] */
 
+import { Buffer } from 'buffer'
+import * as Module from 'module'
+import { types } from 'util'
 import { isMainThread } from 'worker_threads'
 
-import * as Module from 'node:module'
-import { fileURLToPath } from 'node:url'
+// This file must support Node.js 12.0.0 syntax
+
 import {
-  load as origLoad,
-  resolve as origResolve,
-  getSource as origGetSource,
-} from 'import-in-the-middle/hook.mjs'
+  iitmExclusions,
+  load as hookLoad,
+  resolve as hookResolve,
+} from './loader-hook.mjs'
 
 let hasInsertedInit = false
-function insertInit (result) {
-  if (!hasInsertedInit) {
-    hasInsertedInit = true
-    result.source = `
-import '${fileURLToPath(new URL('init.js', import.meta.url))}';
-${result.source}`
+const initJsUrl = new URL('init.js', import.meta.url).href
+// `--loader` only reliably influences ESM entrypoints; for CJS apps use `--import`/`--require`.
+
+/**
+ * @param {{ source?: string|Buffer|Uint8Array, format?: string }} result
+ * @param {unknown} _url_
+ * @param {{ format?: string, isMain?: boolean }} context
+ * @returns {{ source?: string|Buffer|Uint8Array, format?: string }}
+ */
+function insertInit (result, _url_, context) {
+  if (hasInsertedInit) return result
+  // If Node provides `isMain`, only inject into the entrypoint module.
+  if (context && context.isMain === false) return result
+
+  let { source } = result
+  if (typeof source !== 'string') {
+    // Fast decode: handle bytes sources without extra copies when possible.
+    if (Buffer.isBuffer(source)) {
+      source = source.toString('utf8')
+    } else if (types.isUint8Array(source)) {
+      // Create a Buffer view over the same ArrayBuffer segment (no copy).
+      source = Buffer.from(source.buffer, source.byteOffset, source.byteLength).toString('utf8')
+    } else {
+      return result
+    }
   }
+
+  const format = result.format || (context && context.format)
+  if (format !== 'module') return result
+
+  hasInsertedInit = true
+
+  result.source = `import ${JSON.stringify(initJsUrl)};\n${source}`
+
   return result
 }
 
 const [NODE_MAJOR, NODE_MINOR] = process.versions.node.split('.').map(Number)
 
 const brokenLoaders = NODE_MAJOR === 18 && NODE_MINOR === 0
-const iitmExclusions = [
-  /langsmith/,
-  /openai\/_shims/,
-  /openai\/resources\/chat\/completions\/messages/,
-  /openai\/agents-core\/dist\/shims/,
-  /@anthropic-ai\/sdk\/_shims/
-]
 
 export async function load (url, context, nextLoad) {
   const iitmExclusionsMatch = iitmExclusions.some((exclusion) => exclusion.test(url))
-  const loadHook = (brokenLoaders || iitmExclusionsMatch) ? nextLoad : origLoad
-  return insertInit(await loadHook(url, context, nextLoad))
+  const loadHook = (brokenLoaders || iitmExclusionsMatch) ? nextLoad : hookLoad
+  return insertInit(await loadHook(url, context, nextLoad), url, context)
 }
 
-export const resolve = brokenLoaders ? undefined : origResolve
-
-export async function getSource (...args) {
-  return insertInit(await origGetSource(...args))
-}
+export const resolve = brokenLoaders ? undefined : hookResolve
 
 if (isMainThread) {
   const require = Module.createRequire(import.meta.url)
   require('./init.js')
   if (Module.register) {
     Module.register('./loader-hook.mjs', import.meta.url, {
-      data: { exclude: iitmExclusions }
+      data: { exclude: iitmExclusions },
     })
   }
 }
-
-export { getFormat } from 'import-in-the-middle/hook.mjs'

package/loader-hook.mjs

@@ -1,28 +1,30 @@
-import * as iitm from 'import-in-the-middle/hook.mjs'
+import { initialize as origInitialize, load as origLoad, resolve } from 'import-in-the-middle/hook.mjs'
 import regexpEscapeModule from './vendor/dist/escape-string-regexp/index.js'
 import hooks from './packages/datadog-instrumentations/src/helpers/hooks.js'
 import configHelper from './packages/dd-trace/src/config/helper.js'
 import * as rewriterLoader from './packages/datadog-instrumentations/src/helpers/rewriter/loader.mjs'
 import { isRelativeRequire } from './packages/datadog-instrumentations/src/helpers/shared-utils.js'
 
+// This file must support Node.js 12.0.0 syntax
+
 const regexpEscape = regexpEscapeModule.default
 
 // For some reason `getEnvironmentVariable` is not otherwise available to ESM.
 const env = configHelper.getEnvironmentVariable
 
 function initialize (data = {}) {
-  data.include ??= []
-  data.exclude ??= []
+  if (data.include == null) data.include = []
+  if (data.exclude == null) data.exclude = []
 
   addInstrumentations(data)
   addSecurityControls(data)
   addExclusions(data)
 
-  return iitm.initialize(data)
+  return origInitialize(data)
 }
 
 function load (url, context, nextLoad) {
-  return rewriterLoader.load(url, context, (url, context) => iitm.load(url, context, nextLoad))
+  return rewriterLoader.load(url, context, (url, context) => origLoad(url, context, nextLoad))
 }
 
 function addInstrumentations (data) {
@@ -38,27 +40,38 @@ function addInstrumentations (data) {
 }
 
 function addSecurityControls (data) {
-  const securityControls = (env('DD_IAST_SECURITY_CONTROLS_CONFIGURATION') || '')
-    .split(';')
-    .map(sc => sc.trim().split(':')[2])
-    .filter(Boolean)
-    .map(sc => sc.trim())
+  const raw = env('DD_IAST_SECURITY_CONTROLS_CONFIGURATION')
+  if (!raw) return
+  // Parse `;`-separated entries and take the 3rd `:`-separated segment.
+  // Expected form (per entry): `<...>:<...>:<subpath>:<...>`
+  const entries = raw.split(';')
+  for (const entry of entries) {
+    if (entry) {
+      const first = entry.indexOf(':')
+      if (first === -1) continue
+      const second = entry.indexOf(':', first + 1)
+      if (second === -1) continue
+      const third = entry.indexOf(':', second + 1)
 
-  for (const subpath of securityControls) {
-    data.include.push(new RegExp(regexpEscape(subpath)))
+      const subpath = entry.slice(second + 1, third === -1 ? undefined : third).trim()
+      if (subpath) {
+        data.include.push(new RegExp(regexpEscape(subpath)))
+      }
+    }
   }
 }
 
 function addExclusions (data) {
-  data.exclude.push(
-    /middle/,
-    /langsmith/,
-    /openai\/_shims/,
-    /openai\/resources\/chat\/completions\/messages/,
-    /openai\/agents-core\/dist\/shims/,
-    /@anthropic-ai\/sdk\/_shims/
-  )
+  data.exclude.push(...iitmExclusions)
 }
 
-export { initialize, load }
-export { getFormat, resolve, getSource } from 'import-in-the-middle/hook.mjs'
+export const iitmExclusions = [
+  /middle/,
+  /langsmith/,
+  /openai\/_shims/,
+  /openai\/resources\/chat\/completions\/messages/,
+  /openai\/agents-core\/dist\/shims/,
+  /@anthropic-ai\/sdk\/_shims/,
+]
+
+export { initialize, load, resolve }