README.md

dd-trace-js 5.x → 6.x

JSSG codemods aligned with the upstream dd-trace-js migration guide. Each directory under this folder is one Codemod package (metadata, workflow, scripts, tests). Published names follow @codemod/dd-trace-js-v6-<slug> (the v6 segment is the destination dd-trace-js major—the same 6.x line as this repository folder).

Use the Codemod CLI as in the repository Usage section (npx codemod <codemod-name> --target <path>).

Packages are published to the Codemod Registry.

Codemods

@codemod/dd-trace-js-v6-migration-recipe

Runs the implemented dd-trace 5.0 to 6.0 codemods in sequence, then can run a final report-only AI review for unresolved migration blockers.

npx codemod @codemod/dd-trace-js-v6-migration-recipe --target <path>

Optional recipe parameters:

• --param run_ai_review=true enables report-only AI review steps in nested IAST and AppSec codemods.
• --param run_ai_config_step=true enables AI config-file steps in nested env var and propagation-style codemods.
• --param run_final_ai_review=true enables the final report-only recipe review.

See @codemod/dd-trace-js-v6-migration-recipe. · source

@codemod/dd-trace-js-v6-add-link-object-argument

Rewrites Span.addLink(context, attributes) to Span.addLink({ context, attributes }).

npx codemod @codemod/dd-trace-js-v6-add-link-object-argument --target <path>

See @codemod/dd-trace-js-v6-add-link-object-argument. · source

@codemod/dd-trace-js-v6-rename-plugin-list-options

Renames whitelist / blacklist to allowlist / blocklist for Datadog http, ioredis, iovalkey, and redis plugin configs.

npx codemod @codemod/dd-trace-js-v6-rename-plugin-list-options --target <path>

See @codemod/dd-trace-js-v6-rename-plugin-list-options. · source

@codemod/dd-trace-js-v6-move-exp-iast-options

Moves safe experimental.iast.* programmatic options to top-level iast.*. Skips securityControlsConfiguration, which is env-only in v6.

npx codemod @codemod/dd-trace-js-v6-move-exp-iast-options --target <path>

See @codemod/dd-trace-js-v6-move-exp-iast-options. · source

Optional report-only AI review for skipped security controls:

npx codemod @codemod/dd-trace-js-v6-move-exp-iast-options \
  --target <path> \
  --param run_ai_review=true

@codemod/dd-trace-js-v6-move-exp-appsec-options

Moves safe experimental.appsec.* programmatic options to top-level appsec.* and rewrites experimental.appsec.standalone.enabled to apmTracingEnabled. Skips options that must move to Datadog UI / Remote Configuration.

npx codemod @codemod/dd-trace-js-v6-move-exp-appsec-options --target <path>

See @codemod/dd-trace-js-v6-move-exp-appsec-options. · source

Optional report-only AI review for skipped AppSec Remote Configuration options:

npx codemod @codemod/dd-trace-js-v6-move-exp-appsec-options \
  --target <path> \
  --param run_ai_review=true

@codemod/dd-trace-js-v6-flatten-ingestion-options

Flattens ingestion.sampleRate and ingestion.rateLimit to top-level sampleRate and rateLimit.

npx codemod @codemod/dd-trace-js-v6-flatten-ingestion-options --target <path>

See @codemod/dd-trace-js-v6-flatten-ingestion-options. · source

@codemod/dd-trace-js-v6-rename-profiling-env-vars

Renames profiling env var aliases removed in v6 inside JS/TS source:

• DD_PROFILING_EXPERIMENTAL_CODEHOTSPOTS_ENABLED
• DD_PROFILING_EXPERIMENTAL_CPU_ENABLED
• DD_PROFILING_EXPERIMENTAL_ENDPOINT_COLLECTION_ENABLED
• DD_PROFILING_EXPERIMENTAL_TIMELINE_ENABLED

npx codemod @codemod/dd-trace-js-v6-rename-profiling-env-vars --target <path>

See @codemod/dd-trace-js-v6-rename-profiling-env-vars. · source

Optional AI config-file step for exact active occurrences in .env, Dockerfile, YAML, shell, CI, and deployment files:

npx codemod @codemod/dd-trace-js-v6-rename-profiling-env-vars \
  --target <path> \
  --param run_ai_config_step=true

@codemod/dd-trace-js-v6-rename-runtime-id-env-var

Renames DD_TRACE_EXPERIMENTAL_RUNTIME_ID_ENABLED to DD_RUNTIME_METRICS_RUNTIME_ID_ENABLED inside JS/TS source.

npx codemod @codemod/dd-trace-js-v6-rename-runtime-id-env-var --target <path>

See @codemod/dd-trace-js-v6-rename-runtime-id-env-var. · source

Optional AI config-file step for exact active occurrences in .env, Dockerfile, YAML, shell, CI, and deployment files:

npx codemod @codemod/dd-trace-js-v6-rename-runtime-id-env-var \
  --target <path> \
  --param run_ai_config_step=true

@codemod/dd-trace-js-v6-rename-b3-style

Renames exact propagation style values from "b3 single header" to "b3" in JS/TS Datadog configuration source.

npx codemod @codemod/dd-trace-js-v6-rename-b3-style --target <path>

See @codemod/dd-trace-js-v6-rename-b3-style. · source

Optional AI config-file step for exact active DD_TRACE_PROPAGATION_STYLE occurrences in .env, Dockerfile, YAML, shell, CI, and deployment files:

npx codemod @codemod/dd-trace-js-v6-rename-b3-style \
  --target <path> \
  --param run_ai_config_step=true

Coverage

Migration guide item	Automation
Span.addLink(spanContext, attributes) removed	@codemod/dd-trace-js-v6-add-link-object-argument
Plugin whitelist / blacklist options removed from types	@codemod/dd-trace-js-v6-rename-plugin-list-options
experimental.iast configuration removed	@codemod/dd-trace-js-v6-move-exp-iast-options
iast.securityControlsConfiguration is env-only	Report-only AI review; manual move to DD_IAST_SECURITY_CONTROLS_CONFIGURATION
AppSec extended-data-collection programmatic config removed	Report-only AI review; manual Datadog UI / Remote Configuration move
experimental.appsec configuration removed	@codemod/dd-trace-js-v6-move-exp-appsec-options
ingestion option removed	@codemod/dd-trace-js-v6-flatten-ingestion-options
Profiling experimental env aliases removed	@codemod/dd-trace-js-v6-rename-profiling-env-vars
DD_TRACE_EXPERIMENTAL_RUNTIME_ID_ENABLED removed	@codemod/dd-trace-js-v6-rename-runtime-id-env-var
"b3 single header" renamed to "b3"	@codemod/dd-trace-js-v6-rename-b3-style
experimental.b3 removed	Issue drafted; deterministic rewrite deferred
DD_TRACE_STARTUP_LOGS defaults to true	Manual operational decision

Safety model

• JS/TS transforms are AST-based JSSG codemods.
• Programmatic dd-trace config rewrites require a local dd-trace binding or a direct require("dd-trace") call.
• Env var codemods only rewrite exact process.env references and JS/TS object keys by default.
• Comments, arbitrary prose, and unrelated string literals are left unchanged.
• AI steps are disabled by default and are limited to either report-only review or exact active config-file occurrences described in the workflow prompt.
• AI workflow steps do not require a direct LLM_API_KEY for local testing. In raw CLI runs without a provider key, Codemod emits [AI INSTRUCTIONS] for the parent agent or harness to handle.