@anyreplay/browser 0.2.0 → 0.2.2

package/dist/index.d.cts

@@ -504,6 +504,14 @@ interface ShellInfo {
     appVersion?: string;
     /** The hardware model (`iPhone15,2`, `Pixel 8`), ≤ 64. */
     deviceModel?: string;
+    /**
+     * Called the moment a chunk number is reserved, before the request that
+     * uses it leaves. A shell that copies the recorder's keys into native
+     * storage copies them then: an app killed between a send and the shell's
+     * next periodic copy came back with the old number, and sent its first
+     * chunk under a number the server already held (seen on an iOS simulator).
+     */
+    onStateChanged?: () => void;
 }
 type RecorderStatus = 'idle' | 'awaiting-consent' | 'recording' | 'sampled-out' | 'stopped';
 interface IdentifyTraits {

package/dist/index.d.ts

@@ -504,6 +504,14 @@ interface ShellInfo {
     appVersion?: string;
     /** The hardware model (`iPhone15,2`, `Pixel 8`), ≤ 64. */
     deviceModel?: string;
+    /**
+     * Called the moment a chunk number is reserved, before the request that
+     * uses it leaves. A shell that copies the recorder's keys into native
+     * storage copies them then: an app killed between a send and the shell's
+     * next periodic copy came back with the old number, and sent its first
+     * chunk under a number the server already held (seen on an iOS simulator).
+     */
+    onStateChanged?: () => void;
 }
 type RecorderStatus = 'idle' | 'awaiting-consent' | 'recording' | 'sampled-out' | 'stopped';
 interface IdentifyTraits {

package/dist/index.js

@@ -3815,10 +3815,12 @@ var AssetCollector = class {
       body: JSON.stringify(body)
     });
     const known = await post("/v1/ingest/assets/known", { projectKey, hashes: [sha256], ...app });
-    if (known.ok) {
-      const body = await known.json();
-      if (Array.isArray(body.known) && body.known.includes(sha256)) return true;
+    if (!known.ok) {
+      if (known.status === 401 || known.status === 403) this.stop();
+      return false;
     }
+    const answer = await known.json();
+    if (Array.isArray(answer.known) && answer.known.includes(sha256)) return true;
     const upload = await post("/v1/ingest/assets", { projectKey, sha256, data: toBase64(bytes), ...app });
     return upload.ok;
   }
@@ -4123,6 +4125,13 @@ function looksLikeCardNumber(text) {
   }
   return sum % 10 === 0;
 }
+function mayBecomeCardNumber(text) {
+  if (!/^[2-6][0-9 -]*$/.test(text)) return false;
+  const groups = text.split(/[ -]+/);
+  if (groups.slice(0, -1).some((group) => group.length < 4)) return false;
+  const digits = groups.join("").length;
+  return digits > 6 && digits <= 19;
+}
 function isMarkedByCustomer(node, maskClass) {
   var _a;
   let element = asElement(node);
@@ -4137,8 +4146,53 @@ function shouldMaskValue(text, node, policy) {
   if (policy.maskEveryField) return true;
   if (isSensitiveField(node)) return true;
   if (isMarkedByCustomer(node, policy.maskClass)) return true;
-  return looksLikeCardNumber(text);
+  return cardShaped(text);
+}
+var cardShaped = (text) => looksLikeCardNumber(text) || mayBecomeCardNumber(text);
+var DIGIT_RUN = /[0-9]+(?:[  -][0-9]+)*/g;
+function maskCardRuns(text) {
+  if (!/[0-9]/.test(text)) return text;
+  return text.replace(DIGIT_RUN, (run) => {
+    const groups = run.split(/[  -]/);
+    const starts = [];
+    let at = 0;
+    for (const group of groups) {
+      starts.push(at);
+      at += group.length + 1;
+    }
+    const chars2 = run.split("");
+    let i = 0;
+    while (i < groups.length) {
+      let matched = -1;
+      for (let j = groups.length - 1; j >= i; j -= 1) {
+        const end2 = starts[j] + groups[j].length;
+        if (cardShaped(run.slice(starts[i], end2).replace(/ /g, " "))) {
+          matched = j;
+          break;
+        }
+      }
+      if (matched < 0) {
+        i += 1;
+        continue;
+      }
+      const end = starts[matched] + groups[matched].length;
+      for (let k = starts[i]; k < end; k += 1) if (chars2[k] !== " " && chars2[k] !== "\xA0" && chars2[k] !== "-") chars2[k] = "*";
+      i = matched + 1;
+    }
+    return chars2.join("");
+  });
 }
+var EDITABLE = '[contenteditable]:not([contenteditable="false"])';
+function insideEditable(node) {
+  var _a;
+  const live = node;
+  const element = (live == null ? void 0 : live.nodeType) === 3 ? (_a = live.parentElement) != null ? _a : null : asElement(live);
+  return typeof (element == null ? void 0 : element.closest) === "function" && element.closest(EDITABLE) !== null;
+}
+var isEditableSerialised = (attributes) => attributes.contenteditable !== void 0 && attributes.contenteditable !== "false";
+var typedCardShaped = (text) => cardShaped(text.replace(/\u00a0/g, " ").trim());
+var maskText = (text) => text.replace(/\S/g, "*");
+var maskTyped = (text) => typedCardShaped(text) ? maskText(text) : maskCardRuns(text);
 var MUTATION = 0;
 var INPUT = 5;
 var ELEMENT_NODE = 2;
@@ -4153,23 +4207,36 @@ function maskTextChildren(node) {
     maskTextChildren(child);
   }
 }
-function scrubTree(node, policy, masked) {
+function maskCardRunsInChildren(node) {
+  var _a;
+  for (const child of (_a = node.childNodes) != null ? _a : []) {
+    if (child.type === TEXT_NODE && typeof child.textContent === "string") child.textContent = maskCardRuns(child.textContent);
+  }
+}
+function scrubTree(node, policy, masked, editable = false) {
   var _a, _b;
   if (!node) return;
   const attributes = (_a = node.attributes) != null ? _a : {};
   const inheritedMask = masked || hasClass(attributes, policy.maskClass);
+  const inheritedEditable = editable || node.type === ELEMENT_NODE && isEditableSerialised(attributes);
+  if (editable && node.type === TEXT_NODE && typeof node.textContent === "string") {
+    node.textContent = maskTyped(node.textContent);
+  }
   if (node.type === ELEMENT_NODE && node.tagName && FIELD_TAGS.has(node.tagName.toLowerCase())) {
     const value = attributes.value;
-    const shouldMask = policy.maskEveryField || inheritedMask || isSensitiveSerialised(attributes) || typeof value === "string" && looksLikeCardNumber(value);
+    const shouldMask = policy.maskEveryField || inheritedMask || isSensitiveSerialised(attributes) || typeof value === "string" && cardShaped(value);
     if (shouldMask) {
       if (typeof value === "string" && value !== "") attributes.value = maskValue(value);
       if (node.tagName.toLowerCase() === "textarea") maskTextChildren(node);
+    } else {
+      if (typeof value === "string") attributes.value = maskCardRuns(value);
+      if (node.tagName.toLowerCase() === "textarea") maskCardRunsInChildren(node);
     }
   }
-  for (const child of (_b = node.childNodes) != null ? _b : []) scrubTree(child, policy, inheritedMask);
+  for (const child of (_b = node.childNodes) != null ? _b : []) scrubTree(child, policy, inheritedMask, inheritedEditable);
 }
 function scrubEvent(event, getNode, policy) {
-  var _a, _b, _c, _d, _e;
+  var _a, _b, _c, _d, _e, _f;
   if (!event.data) return;
   if (event.type === 2) {
     scrubTree(event.data.node, policy, false);
@@ -4182,7 +4249,7 @@ function scrubEvent(event, getNode, policy) {
     const node = typeof data.id === "number" ? getNode(data.id) : null;
     const type = ((_b = (_a = asElement(node)) == null ? void 0 : _a.type) != null ? _b : "").toLowerCase();
     if (type === "checkbox" || type === "radio") return;
-    if (shouldMaskValue(data.text, node, policy)) data.text = maskValue(data.text);
+    data.text = shouldMaskValue(data.text, node, policy) ? maskValue(data.text) : maskCardRuns(data.text);
     return;
   }
   if (data.source !== MUTATION) return;
@@ -4190,11 +4257,15 @@ function scrubEvent(event, getNode, policy) {
     const value = (_d = entry == null ? void 0 : entry.attributes) == null ? void 0 : _d.value;
     if (typeof value !== "string" || value === "") continue;
     const node = typeof entry.id === "number" ? getNode(entry.id) : null;
-    if (shouldMaskValue(value, node, policy)) entry.attributes.value = maskValue(value);
+    entry.attributes.value = shouldMaskValue(value, node, policy) ? maskValue(value) : maskCardRuns(value);
   }
   for (const add of (_e = data.adds) != null ? _e : []) {
     const parent = typeof (add == null ? void 0 : add.parentId) === "number" ? getNode(add.parentId) : null;
-    scrubTree(add == null ? void 0 : add.node, policy, isMarkedByCustomer(parent, policy.maskClass));
+    scrubTree(add == null ? void 0 : add.node, policy, isMarkedByCustomer(parent, policy.maskClass), insideEditable(parent));
+  }
+  for (const change of (_f = data.texts) != null ? _f : []) {
+    if (typeof (change == null ? void 0 : change.value) !== "string" || !/[0-9]/.test(change.value)) continue;
+    if (typeof change.id === "number" && insideEditable(getNode(change.id))) change.value = maskTyped(change.value);
   }
 }
 
@@ -5000,7 +5071,7 @@ var Transport = class {
 
 // src/version.ts
 var SDK_NAME = "@anyreplay/browser";
-var SDK_VERSION = true ? "0.2.0" : "0.0.0-dev";
+var SDK_VERSION = true ? "0.2.2" : "0.0.0-dev";
 var PLATFORM = "web";
 
 // src/visitor.ts
@@ -5107,6 +5178,8 @@ function forgetVisitor(local, session) {
 }
 
 // src/recorder.ts
+var RRWEB_DOM_CONTENT_LOADED = 0;
+var RRWEB_LOAD = 1;
 var RAGE_CLICK_COUNT = 3;
 var RAGE_CLICK_WINDOW_MS = 1e3;
 var RAGE_CLICK_RADIUS_PX = 30;
@@ -5246,7 +5319,14 @@ function createRecorder(rawOptions, shell) {
         initialSeq: who.nextSeq
       },
       {
-        onSeqReserved: (next) => reserveSeq(session, next),
+        onSeqReserved: (next) => {
+          var _a;
+          reserveSeq(session, next);
+          try {
+            (_a = shell == null ? void 0 : shell.onStateChanged) == null ? void 0 : _a.call(shell);
+          } catch (e) {
+          }
+        },
         onStopped: (reason) => {
           status = "stopped";
           stopRecording == null ? void 0 : stopRecording();
@@ -5304,6 +5384,7 @@ function createRecorder(rawOptions, shell) {
     stopRecording = record({
       emit: (event) => {
         const typed = event;
+        if (typed.type === RRWEB_DOM_CONTENT_LOADED || typed.type === RRWEB_LOAD) return;
         scrubEvent(typed, (id) => record.mirror.getNode(id), policy);
         assets == null ? void 0 : assets.scan(typed);
         noteInteraction(typed, channel);