agentic-dev/instrumentation-http.md at 7dd46b68b2e5a16891fe1b2bee2e26f5efb2af49

Template

Files

Danijel Martinek 9ff861667a chore(deps): backfill library traces for ADR-017 cluster

Adds approved trace files dated 2026-05-14 for all 13 OpenTelemetry
packages in packages/core-shared and packages/core-audit:

  @opentelemetry/api, api-logs, context-async-hooks,
  instrumentation, instrumentation-http, instrumentation-pg,
  instrumentation-undici, resources, sdk-logs, sdk-metrics,
  sdk-node, sdk-trace-base, semantic-conventions

All files pass validateTrace() from schema.mjs. The @sentry/opentelemetry
bridge was already covered in the ADR-014 cluster commit.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-14 10:01:30 +00:00

3.4 KiB

Raw Blame History

package, version, tier, decision, date, deciders, adr, filter-results, verification-commands, accepted-cves

package

version

tier

decision

date

deciders

adr

filter-results

verification-commands

accepted-cves

@opentelemetry/instrumentation-http

^0.55.0

core

approved

2026-05-14

Danijel Martinek

adr-017

license	types	maintenance	boundary-fit	shadow-check	eu-residency	cve-scan	named-consumer
Apache-2.0	native	active	pass	pass	n/a	clean	pass

npm view @opentelemetry/instrumentation-http license

npm view @opentelemetry/instrumentation-http version

pnpm audit --audit-level=moderate

Filter: license

npm view @opentelemetry/instrumentation-http license returns Apache-2.0. Apache-2.0 is on the allowlist.

Filter: types

@opentelemetry/instrumentation-http is authored in TypeScript and ships its own .d.ts declaration files. No separate @types/ package is needed.

Filter: maintenance

Actively maintained by the OpenTelemetry community as the first-party HTTP instrumentation plugin. The 0.55.x line is current and tracks the OTel SDK release cycle.

Filter: boundary-fit

ADR-017 §11 explicitly enables HTTP auto-instrumentation in initOtelServerNode. The plugin is configured with query-string stripping on http.url.path and a path ignore list (/_health, /_otel-export) to prevent noise and PII leakage. Restricted to core-shared/instrumentation/otel/ init paths.

Filter: shadow-check

@opentelemetry/instrumentation-http is the standard OTel HTTP auto-instrumentation. No competing HTTP span emitter is present in the workspace.

Filter: eu-residency

@opentelemetry/instrumentation-http is a pure instrumentation plugin with no independent data transmission. Spans it emits are routed through the configured OTel exporter (Sentry via @sentry/opentelemetry). EU residency is governed by the exporter configuration.

Filter: cve-scan

pnpm audit --audit-level=moderate reports no advisories against @opentelemetry/instrumentation-http at the time of this trace.

Filter: named-consumer

packages/core-shared/src/instrumentation/otel/init-otel-server-node.ts registers HttpInstrumentation with query-string redaction and path ignore rules (ADR-017 §11). This eliminates manual span creation for every incoming HTTP request and outgoing HTTP call.

Prompt: replaces

Manual tracer.startSpan() / tracer.endSpan() wrapping around every http.IncomingMessage handler and http.request() call site. The auto-instrumentation patches Node.js core http and https modules to emit spans automatically.

Prompt: migration-cost-out

Low. HttpInstrumentation is registered in one init file. Removing it means disabling the plugin registration and optionally adding manual spans at HTTP boundaries — localized to the SDK init and any call sites that relied on automatic context propagation.

Prompt: alternatives-considered

Manual HTTP spans — No plugin needed, but requires wrapping every http.request and route handler explicitly. Rejected: high boilerplate, easy to miss call sites, loses automatic context propagation headers.
dd-trace HTTP plugin — Datadog-specific. Rejected in ADR-017: vendor lock-in; OTel plugin achieves the same coverage with vendor-neutral output.

See ADR-017 for the full decision rationale.

3.4 KiB Raw Blame History