@capxul/observability 2.5.2 → 2.5.4

package/README.md

@@ -19,26 +19,37 @@ optional and snake_case; the camelCase spellings are retired.
 
 ## Two browser privacy profiles (ADR-0020 A6)
 
-One boundary, two named postures, both built on the same sanitizer, slim
-bundle, token guard and missing-key opt-out:
+One boundary, two named postures, both built on the same sanitizer, token
+guard and missing-key opt-out:
 
-|                 | `utilityAppAnalytics`                      | `productAppAnalytics`            |
-| --------------- | ------------------------------------------ | -------------------------------- |
-| For             | capability-URL apps (approval links, docs) | the Capxul product web app       |
-| Persistence     | off                                        | **on** — J1 spans an OTP reload  |
-| Person profiles | identified-only, nothing identifies        | identified-only, identify-driven |
-| Autocapture     | off                                        | off                              |
-| Session replay  | off                                        | **production only**, OTP masked  |
-| Exceptions      | off                                        | on                               |
+|                 | `utilityAppAnalytics`                      | `productAppAnalytics`                   |
+| --------------- | ------------------------------------------ | --------------------------------------- |
+| For             | capability-URL apps (approval links, docs) | the Capxul product web app              |
+| Persistence     | off                                        | **on** — J1 spans an OTP reload         |
+| Person profiles | identified-only, nothing identifies        | identified-only, identify-driven        |
+| Autocapture     | off                                        | off                                     |
+| Session replay  | off                                        | **on in every environment**, OTP masked |
+| Exceptions      | off                                        | on                                      |
 
 Both stamp `capxul_env` and `producer: "browser"` through `before_send`, which
 also recursively removes URL query strings/fragments (including exception-frame
-filenames) and promoted campaign/search values. Pair either with PostHog's
-toolbar-free slim module and `createPostHogBrowserPageviewTracker`, which
-reports pathname-only initial loads and SPA route changes. Vendor
-initialization and pageview capture failures degrade to disabled analytics.
-The product profile records ordinary text and input values. It masks inputs
-whose `autocomplete` attribute is `one-time-code`.
+filenames) and promoted campaign/search values. Pair either with
+`createPostHogBrowserPageviewTracker`, which reports pathname-only initial
+loads and SPA route changes. Vendor initialization and pageview capture
+failures degrade to disabled analytics. The product profile records ordinary
+text and input values. It masks inputs whose `autocomplete` attribute is
+`one-time-code`.
+
+### Import the standard `posthog-js` build
+
+Consumers of `productAppAnalytics` MUST import `posthog-js` (the standard
+`module.js` build). `posthog-js/dist/module.slim` never registers the session
+recording manager and ships no autocapture extensions, so with it the client
+applies the replay options and records nothing (verified 2026-09-02, #1709).
+The standard build loads the recorder lazily from the PostHog host, so the
+bundle cost is the same until a session records. `initializeCapxulBrowserAnalytics`
+warns once in the console when a profile enables replay and the initialized
+client has no session recording manager.
 
 ```ts
 import {

package/dist/index.d.mts

@@ -20,7 +20,7 @@ type CapxulErrorCode = (typeof CAPXUL_ERROR_CODES)[number];
  *   into `unknown`; the signer's secure-context probe now names it.
  * - `unknown`: catch-all when no cause could be determined.
  */
-type FailureMode = "auth-origin-mismatch" | "stale-openfort-cache" | "app-env-allowlist" | "no-secure-context" | "unknown";
+type FailureMode = "auth-origin-mismatch" | "stale-openfort-cache" | "app-env-allowlist" | "no-secure-context" /** #1684: an upstream RPC provider throttled the call (HTTP 429 or JSON-RPC -32005). Retryable. */ | "rate-limited" | "unknown";
 type CapxulErrorDetails = Record<string, unknown>;
 type CapxulErrorOptions = {
   readonly cause?: unknown;
@@ -109,7 +109,7 @@ interface TelemetryPort {
 }
 //#endregion
 //#region src/index.d.ts
-declare const TELEMETRY_EVENT_NAMES: readonly ["auth_otp_requested", "auth_otp_delivered", "auth_otp_expired", "auth_verified", "auth_failed", "auth_signed_out", "onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "provisioning_safe_created", "provisioning_safe_confirmed", "bootstrap_resolved", "bootstrap_failed", "member_activation_started", "member_activation_ready", "member_activation_failed", "organization_creation_started", "organization_creation_ready", "organization_creation_failed", "account_balance_read", "account_balance_failed", "faucet_requested", "faucet_confirmed", "faucet_failed", "org_create_started", "org_safe_created", "org_safe_confirmed", "org_roles_seeded", "org_created", "org_create_failed", "org_invite_sent", "org_invite_accepted", "org_invite_expired", "payment_initiated", "payment_settled", "payment_failed", "deposit_initiated", "deposit_settled", "permission_mirror_verification", "movement_scan_window", "movement_scan_checkpoint", "movement_scan_incident"];
+declare const TELEMETRY_EVENT_NAMES: readonly ["auth_otp_requested", "auth_otp_delivered", "auth_otp_expired", "auth_verified", "auth_failed", "auth_signed_out", "onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "provisioning_safe_created", "provisioning_safe_confirmed", "bootstrap_resolved", "bootstrap_failed", "member_activation_started", "member_activation_ready", "member_activation_failed", "organization_creation_started", "organization_creation_ready", "organization_creation_failed", "aa_gateway_upstream_fallback", "account_balance_read", "account_balance_failed", "faucet_requested", "faucet_confirmed", "faucet_failed", "org_create_started", "org_safe_created", "org_safe_confirmed", "org_roles_seeded", "org_created", "org_create_failed", "org_invite_sent", "org_invite_accepted", "org_invite_expired", "payment_initiated", "payment_settled", "payment_failed", "deposit_initiated", "deposit_settled", "permission_mirror_verification", "movement_scan_window", "movement_scan_checkpoint", "movement_scan_incident"];
 type TelemetryEventName = (typeof TELEMETRY_EVENT_NAMES)[number];
 type NonEmptyTelemetryEventNames = readonly [TelemetryEventName, ...TelemetryEventName[]];
 type FunnelStepPropertyFilter = {
@@ -559,7 +559,8 @@ declare const OrganizationCreationFailedTelemetryEventSchema: Schema.Struct<{
     readonly attempt_number: Schema.refine<number, Schema.Number>;
     readonly stage: Schema.Literals<readonly ["profile", "accountProvisioning", "accountClaim", "preparingFounderAccount", "awaitingFounderAuthorization", "submittingBootstrap", "confirmingBootstrap"]>;
     readonly error_code: Schema.String;
-    readonly retryable: Schema.Boolean;
+    readonly retryable: Schema.Boolean; /** #1655: the SDK's backoff before this attempt. Absent on the first attempt. */
+    readonly backoff_ms: Schema.optional<Schema.Codec<DurationMs, number, never, never>>;
     readonly failure_reason: Schema.optional<Schema.Literals<readonly ["deterministic_address_mismatch", "receipt_provider_unavailable", "receipt_mismatch", "block_provider_unavailable", "authority_event_mismatch", "allowance_timestamp_mismatch", "receipt_identity_unavailable", "receipt_identity_mismatch", "contract_code_unavailable", "contract_state_mismatch", "permission_projection_mismatch"]>>;
   }>;
 }>;
@@ -625,6 +626,21 @@ declare const FaucetFailedTelemetryEventSchema: Schema.Struct<{
     readonly reason: Schema.optional<Schema.String>;
   }>;
 }>;
+declare const AaGatewayUpstreamFallbackTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"aa_gateway_upstream_fallback">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly method: Schema.String;
+    readonly from_upstream: Schema.Literals<readonly ["alchemy", "infura", "public"]>;
+    readonly to_upstream: Schema.optional<Schema.Literals<readonly ["alchemy", "infura", "public"]>>;
+    readonly failure: Schema.Literals<readonly ["http-429", "http-5xx", "rpc-rate-limit", "timeout", "network"]>;
+    readonly status: Schema.optional<Schema.Number>;
+  }>;
+}>;
 declare const OrgCreateStartedTelemetryEventSchema: Schema.Struct<{
   readonly name: Schema.Literal<"org_create_started">;
   readonly props: Schema.Struct<{
@@ -1119,7 +1135,8 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly attempt_number: Schema.refine<number, Schema.Number>;
       readonly stage: Schema.Literals<readonly ["profile", "accountProvisioning", "accountClaim", "preparingFounderAccount", "awaitingFounderAuthorization", "submittingBootstrap", "confirmingBootstrap"]>;
       readonly error_code: Schema.String;
-      readonly retryable: Schema.Boolean;
+      readonly retryable: Schema.Boolean; /** #1655: the SDK's backoff before this attempt. Absent on the first attempt. */
+      readonly backoff_ms: Schema.optional<Schema.Codec<DurationMs, number, never, never>>;
       readonly failure_reason: Schema.optional<Schema.Literals<readonly ["deterministic_address_mismatch", "receipt_provider_unavailable", "receipt_mismatch", "block_provider_unavailable", "authority_event_mismatch", "allowance_timestamp_mismatch", "receipt_identity_unavailable", "receipt_identity_mismatch", "contract_code_unavailable", "contract_state_mismatch", "permission_projection_mismatch"]>>;
     }>;
   }>;
@@ -1185,6 +1202,21 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly reason: Schema.optional<Schema.String>;
     }>;
   }>;
+  readonly aa_gateway_upstream_fallback: Schema.Struct<{
+    readonly name: Schema.Literal<"aa_gateway_upstream_fallback">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly method: Schema.String;
+      readonly from_upstream: Schema.Literals<readonly ["alchemy", "infura", "public"]>;
+      readonly to_upstream: Schema.optional<Schema.Literals<readonly ["alchemy", "infura", "public"]>>;
+      readonly failure: Schema.Literals<readonly ["http-429", "http-5xx", "rpc-rate-limit", "timeout", "network"]>;
+      readonly status: Schema.optional<Schema.Number>;
+    }>;
+  }>;
   readonly org_create_started: Schema.Struct<{
     readonly name: Schema.Literal<"org_create_started">;
     readonly props: Schema.Struct<{
@@ -1522,9 +1554,9 @@ interface PostHogUtilityAppOptions {
 /** Back-compat alias for the pre-ADR-0020 name. */
 type PostHogBrowserOptions = PostHogUtilityAppOptions;
 /**
- * ADR-0020 A6 product posture: same sanitizer / slim-bundle / token-guard core
- * as the utility profile, but the three toggles a PRODUCT needs and a
- * capability-URL utility must not have —
+ * ADR-0020 A6 product posture: same sanitizer / token-guard core as the
+ * utility profile, but the three toggles a PRODUCT needs and a capability-URL
+ * utility must not have —
  *
  *  - `disable_persistence: false` — J1 spans an OTP reload; without persistence
  *    step 1 and step 3 are different anonymous "users" and every multi-page
@@ -1537,6 +1569,15 @@ type PostHogBrowserOptions = PostHogUtilityAppOptions;
  *    recorder script loads from PostHog, so external dependency loading is on.
  *    (Ruling 2026-09-01: pre-launch, every failure needs its evidence; replay
  *    gated to production left staging failures with no recording at all.)
+ *    Flags stay ENABLED for this client: posthog-js starts the recorder only
+ *    after it loads the project's remote config, and it skips that load when
+ *    `advanced_disable_flags` is true ("Remote config is disabled. Falling back
+ *    to local config."). With flags disabled the SDK captured events but never
+ *    recorded a session (0 replay rows in 7 days, verified 2026-09-02).
+ *    The consumer MUST import the standard `posthog-js` build (#1709):
+ *    `posthog-js/dist/module.slim` never registers the session recording
+ *    manager, so the client applies these options and records nothing.
+ *    `initializeCapxulBrowserAnalytics` warns once when that happens.
  *
  * Autocapture stays OFF: funnels run on catalog events, not on DOM guesses.
  */
@@ -1560,7 +1601,7 @@ interface PostHogProductAppOptions {
   readonly disable_conversations: true;
   readonly disable_external_dependency_loading: false;
   readonly person_profiles: "identified_only";
-  readonly advanced_disable_flags: true;
+  readonly advanced_disable_flags: false;
   readonly save_campaign_params: false;
   readonly save_referrer: false;
   readonly session_recording: {
@@ -1657,4 +1698,4 @@ declare class InMemoryTelemetryBusAdapter implements TelemetryPort {
   reportHandledError(_error: CapxulError, _context?: HandledErrorReportContext): Effect.Effect<void, never>;
 }
 //#endregion
-export { AccountBalanceFailedTelemetryEventSchema, AccountBalanceReadTelemetryEventSchema, AuthFailedTelemetryEventSchema, AuthOtpDeliveredTelemetryEventSchema, AuthOtpExpiredTelemetryEventSchema, AuthOtpRequestedTelemetryEventSchema, AuthSignedOutTelemetryEventSchema, AuthVerifiedTelemetryEventSchema, BROWSER_GATED_TELEMETRY_EVENTS, BootstrapFailedTelemetryEventSchema, BootstrapResolvedTelemetryEventSchema, CAPXUL_ENVS, CONTRACT_FIRST_TELEMETRY_EVENTS, CapturedNetworkRequestLike, CapxulBrowserAnalyticsInput, CapxulEnv, DepositInitiatedTelemetryEventSchema, DepositSettledTelemetryEventSchema, FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS, FaucetConfirmedTelemetryEventSchema, FaucetFailedTelemetryEventSchema, FaucetRequestedTelemetryEventSchema, FunnelJourney, FunnelStepPropertyFilter, type HandledErrorReportContext, InMemoryTelemetryBusAdapter, InitializePostHogBrowserAnalyticsInput, Journey, MemberActivationFailedTelemetryEventSchema, MemberActivationReadyTelemetryEventSchema, MemberActivationStartedTelemetryEventSchema, MovementScanCheckpointTelemetryEventSchema, MovementScanIncidentTelemetryEventSchema, MovementScanWindowTelemetryEventSchema, NonEmptyTelemetryEventNames, OnboardingDashboardReachedTelemetryEventSchema, OnboardingIntentSelectedTelemetryEventSchema, OnboardingOrganizationSubmittedTelemetryEventSchema, OnboardingProfileSubmittedTelemetryEventSchema, OrgCreateFailedTelemetryEventSchema, OrgCreateStartedTelemetryEventSchema, OrgCreatedTelemetryEventSchema, OrgInviteAcceptedTelemetryEventSchema, OrgInviteExpiredTelemetryEventSchema, OrgInviteSentTelemetryEventSchema, OrgRolesSeededTelemetryEventSchema, OrgSafeConfirmedTelemetryEventSchema, OrgSafeCreatedTelemetryEventSchema, OrganizationCreationFailedTelemetryEventSchema, OrganizationCreationReadyTelemetryEventSchema, OrganizationCreationStartedTelemetryEventSchema, PII, PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS, PaymentFailedTelemetryEventSchema, PaymentInitiatedTelemetryEventSchema, PaymentSettledTelemetryEventSchema, PermissionMirrorVerificationTelemetryEventSchema, PointEventJourney, PostHogBeforeSend, PostHogBrowserCapture, PostHogBrowserInitialize, PostHogBrowserOptions, PostHogBrowserPageviewClient, PostHogProductAppOptions, PostHogTelemetryAdapter, PostHogUtilityAppOptions, ProvisioningSafeConfirmedTelemetryEventSchema, ProvisioningSafeCreatedTelemetryEventSchema, RecordingTelemetryAdapter, SYNCABLE_CAPXUL_ENVS, TELEMETRY_EVENT_NAMES, TELEMETRY_EVENT_SCHEMAS, TELEMETRY_JOURNEYS, TELEMETRY_PRODUCERS, TelemetryEnvelopeDefaults, TelemetryEvent, TelemetryEventName, TelemetryGroupInput, TelemetryIdentifyInput, type TelemetryPort, TelemetryProducer, TelemetryProps, TelemetryRedactionOptions, TrackHandler, createCapxulBeforeSend, createPostHogBrowserPageviewTracker, getTrackHandler, initializeCapxulBrowserAnalytics, initializePostHogBrowserAnalytics, maskCapturedNetworkRequest, productAppAnalytics, redactTelemetryEvent, redactTelemetryProps, sanitizePostHogBrowserEvent, setTrackHandler, stampTelemetryEnvelope, track, utilityAppAnalytics };
+export { AaGatewayUpstreamFallbackTelemetryEventSchema, AccountBalanceFailedTelemetryEventSchema, AccountBalanceReadTelemetryEventSchema, AuthFailedTelemetryEventSchema, AuthOtpDeliveredTelemetryEventSchema, AuthOtpExpiredTelemetryEventSchema, AuthOtpRequestedTelemetryEventSchema, AuthSignedOutTelemetryEventSchema, AuthVerifiedTelemetryEventSchema, BROWSER_GATED_TELEMETRY_EVENTS, BootstrapFailedTelemetryEventSchema, BootstrapResolvedTelemetryEventSchema, CAPXUL_ENVS, CONTRACT_FIRST_TELEMETRY_EVENTS, CapturedNetworkRequestLike, CapxulBrowserAnalyticsInput, CapxulEnv, DepositInitiatedTelemetryEventSchema, DepositSettledTelemetryEventSchema, FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS, FaucetConfirmedTelemetryEventSchema, FaucetFailedTelemetryEventSchema, FaucetRequestedTelemetryEventSchema, FunnelJourney, FunnelStepPropertyFilter, type HandledErrorReportContext, InMemoryTelemetryBusAdapter, InitializePostHogBrowserAnalyticsInput, Journey, MemberActivationFailedTelemetryEventSchema, MemberActivationReadyTelemetryEventSchema, MemberActivationStartedTelemetryEventSchema, MovementScanCheckpointTelemetryEventSchema, MovementScanIncidentTelemetryEventSchema, MovementScanWindowTelemetryEventSchema, NonEmptyTelemetryEventNames, OnboardingDashboardReachedTelemetryEventSchema, OnboardingIntentSelectedTelemetryEventSchema, OnboardingOrganizationSubmittedTelemetryEventSchema, OnboardingProfileSubmittedTelemetryEventSchema, OrgCreateFailedTelemetryEventSchema, OrgCreateStartedTelemetryEventSchema, OrgCreatedTelemetryEventSchema, OrgInviteAcceptedTelemetryEventSchema, OrgInviteExpiredTelemetryEventSchema, OrgInviteSentTelemetryEventSchema, OrgRolesSeededTelemetryEventSchema, OrgSafeConfirmedTelemetryEventSchema, OrgSafeCreatedTelemetryEventSchema, OrganizationCreationFailedTelemetryEventSchema, OrganizationCreationReadyTelemetryEventSchema, OrganizationCreationStartedTelemetryEventSchema, PII, PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS, PaymentFailedTelemetryEventSchema, PaymentInitiatedTelemetryEventSchema, PaymentSettledTelemetryEventSchema, PermissionMirrorVerificationTelemetryEventSchema, PointEventJourney, PostHogBeforeSend, PostHogBrowserCapture, PostHogBrowserInitialize, PostHogBrowserOptions, PostHogBrowserPageviewClient, PostHogProductAppOptions, PostHogTelemetryAdapter, PostHogUtilityAppOptions, ProvisioningSafeConfirmedTelemetryEventSchema, ProvisioningSafeCreatedTelemetryEventSchema, RecordingTelemetryAdapter, SYNCABLE_CAPXUL_ENVS, TELEMETRY_EVENT_NAMES, TELEMETRY_EVENT_SCHEMAS, TELEMETRY_JOURNEYS, TELEMETRY_PRODUCERS, TelemetryEnvelopeDefaults, TelemetryEvent, TelemetryEventName, TelemetryGroupInput, TelemetryIdentifyInput, type TelemetryPort, TelemetryProducer, TelemetryProps, TelemetryRedactionOptions, TrackHandler, createCapxulBeforeSend, createPostHogBrowserPageviewTracker, getTrackHandler, initializeCapxulBrowserAnalytics, initializePostHogBrowserAnalytics, maskCapturedNetworkRequest, productAppAnalytics, redactTelemetryEvent, redactTelemetryProps, sanitizePostHogBrowserEvent, setTrackHandler, stampTelemetryEnvelope, track, utilityAppAnalytics };

package/dist/index.mjs

@@ -87,6 +87,7 @@ const TELEMETRY_EVENT_NAMES = [
 	"organization_creation_started",
 	"organization_creation_ready",
 	"organization_creation_failed",
+	"aa_gateway_upstream_fallback",
 	"account_balance_read",
 	"account_balance_failed",
 	"faucet_requested",
@@ -468,6 +469,28 @@ const FaucetFailedProps = Schema.Struct({
 	...TelemetryEnvelopeProps,
 	reason: OptionalString
 });
+const AaGatewayUpstreamFallbackProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	method: Schema.String,
+	from_upstream: Schema.Literals([
+		"alchemy",
+		"infura",
+		"public"
+	]),
+	to_upstream: Schema.optional(Schema.Literals([
+		"alchemy",
+		"infura",
+		"public"
+	])),
+	failure: Schema.Literals([
+		"http-429",
+		"http-5xx",
+		"rpc-rate-limit",
+		"timeout",
+		"network"
+	]),
+	status: Schema.optional(Schema.Number)
+});
 const ORG_ID_TELEMETRY_RE = /^org_[0-9A-Za-z]+$/;
 const OrgIdTelemetrySchema = Schema.String.pipe(Schema.refine((value) => ORG_ID_TELEMETRY_RE.test(value), { message: "must be org_ plus an alphanumeric id" }));
 const OptionalOrgId = Schema.optional(OrgIdTelemetrySchema);
@@ -518,6 +541,8 @@ const OrganizationCreationFailedProps = Schema.Struct({
 	stage: OnboardingStageSchema,
 	error_code: Schema.String,
 	retryable: Schema.Boolean,
+	/** #1655: the SDK's backoff before this attempt. Absent on the first attempt. */
+	backoff_ms: Schema.optional(DurationMsSchema),
 	failure_reason: Schema.optional(Schema.Literals([
 		"deterministic_address_mismatch",
 		"receipt_provider_unavailable",
@@ -768,6 +793,10 @@ const FaucetFailedTelemetryEventSchema = Schema.Struct({
 	name: Schema.Literal("faucet_failed"),
 	props: FaucetFailedProps
 });
+const AaGatewayUpstreamFallbackTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("aa_gateway_upstream_fallback"),
+	props: AaGatewayUpstreamFallbackProps
+});
 const OrgCreateStartedTelemetryEventSchema = Schema.Struct({
 	name: Schema.Literal("org_create_started"),
 	props: OrgCreateStartedProps
@@ -866,6 +895,7 @@ const TELEMETRY_EVENT_SCHEMAS = {
 	faucet_requested: FaucetRequestedTelemetryEventSchema,
 	faucet_confirmed: FaucetConfirmedTelemetryEventSchema,
 	faucet_failed: FaucetFailedTelemetryEventSchema,
+	aa_gateway_upstream_fallback: AaGatewayUpstreamFallbackTelemetryEventSchema,
 	org_create_started: OrgCreateStartedTelemetryEventSchema,
 	org_safe_created: OrgSafeCreatedTelemetryEventSchema,
 	org_safe_confirmed: OrgSafeConfirmedTelemetryEventSchema,
@@ -1073,7 +1103,7 @@ function productAppAnalytics(input) {
 		disable_conversations: true,
 		disable_external_dependency_loading: false,
 		person_profiles: "identified_only",
-		advanced_disable_flags: true,
+		advanced_disable_flags: false,
 		save_campaign_params: false,
 		save_referrer: false,
 		session_recording: {
@@ -1097,11 +1127,29 @@ function initializeCapxulBrowserAnalytics(profile, input, initialize) {
 	const key = input.key?.trim();
 	if (key === void 0 || key.length === 0) return void 0;
 	try {
-		return initialize(key, profile(input));
+		const options = profile(input);
+		const client = initialize(key, options);
+		warnWhenReplayHasNoRecorder(options, client);
+		return client;
 	} catch {
 		return;
 	}
 }
+let replayRecorderWarned = false;
+/**
+* #1709: `posthog-js/dist/module.slim` never registers the session recording
+* manager, so a profile that enables replay records nothing with it. The
+* client exposes the manager as `sessionRecording` once `init` ran on the
+* standard build. Warn once per page so the missing build is visible.
+*/
+function warnWhenReplayHasNoRecorder(options, client) {
+	if (replayRecorderWarned) return;
+	const replayEnabled = typeof options === "object" && options !== null && options.disable_session_recording === false;
+	const recorderMissing = typeof client === "object" && client !== null && client.sessionRecording === void 0;
+	if (!replayEnabled || !recorderMissing) return;
+	replayRecorderWarned = true;
+	console.warn("@capxul/observability: session replay is enabled but the PostHog client has no session recording manager. Import the standard `posthog-js` build; `posthog-js/dist/module.slim` records nothing.");
+}
 /** The utility profile, pre-bound — the shape ADR-0016's consumers already use. */
 function initializePostHogBrowserAnalytics(input, initialize) {
 	return initializeCapxulBrowserAnalytics(utilityAppAnalytics, input, initialize);
@@ -1456,4 +1504,4 @@ function rotr(value, bits) {
 	return value >>> bits | value << 32 - bits;
 }
 //#endregion
-export { AccountBalanceFailedTelemetryEventSchema, AccountBalanceReadTelemetryEventSchema, AuthFailedTelemetryEventSchema, AuthOtpDeliveredTelemetryEventSchema, AuthOtpExpiredTelemetryEventSchema, AuthOtpRequestedTelemetryEventSchema, AuthSignedOutTelemetryEventSchema, AuthVerifiedTelemetryEventSchema, BROWSER_GATED_TELEMETRY_EVENTS, BootstrapFailedTelemetryEventSchema, BootstrapResolvedTelemetryEventSchema, CAPXUL_ENVS, CONTRACT_FIRST_TELEMETRY_EVENTS, DepositInitiatedTelemetryEventSchema, DepositSettledTelemetryEventSchema, FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS, FaucetConfirmedTelemetryEventSchema, FaucetFailedTelemetryEventSchema, FaucetRequestedTelemetryEventSchema, InMemoryTelemetryBusAdapter, MemberActivationFailedTelemetryEventSchema, MemberActivationReadyTelemetryEventSchema, MemberActivationStartedTelemetryEventSchema, MovementScanCheckpointTelemetryEventSchema, MovementScanIncidentTelemetryEventSchema, MovementScanWindowTelemetryEventSchema, OnboardingDashboardReachedTelemetryEventSchema, OnboardingIntentSelectedTelemetryEventSchema, OnboardingOrganizationSubmittedTelemetryEventSchema, OnboardingProfileSubmittedTelemetryEventSchema, OrgCreateFailedTelemetryEventSchema, OrgCreateStartedTelemetryEventSchema, OrgCreatedTelemetryEventSchema, OrgInviteAcceptedTelemetryEventSchema, OrgInviteExpiredTelemetryEventSchema, OrgInviteSentTelemetryEventSchema, OrgRolesSeededTelemetryEventSchema, OrgSafeConfirmedTelemetryEventSchema, OrgSafeCreatedTelemetryEventSchema, OrganizationCreationFailedTelemetryEventSchema, OrganizationCreationReadyTelemetryEventSchema, OrganizationCreationStartedTelemetryEventSchema, PII, PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS, PaymentFailedTelemetryEventSchema, PaymentInitiatedTelemetryEventSchema, PaymentSettledTelemetryEventSchema, PermissionMirrorVerificationTelemetryEventSchema, PostHogTelemetryAdapter, ProvisioningSafeConfirmedTelemetryEventSchema, ProvisioningSafeCreatedTelemetryEventSchema, RecordingTelemetryAdapter, SYNCABLE_CAPXUL_ENVS, TELEMETRY_EVENT_NAMES, TELEMETRY_EVENT_SCHEMAS, TELEMETRY_JOURNEYS, TELEMETRY_PRODUCERS, createCapxulBeforeSend, createPostHogBrowserPageviewTracker, getTrackHandler, initializeCapxulBrowserAnalytics, initializePostHogBrowserAnalytics, maskCapturedNetworkRequest, productAppAnalytics, redactTelemetryEvent, redactTelemetryProps, sanitizePostHogBrowserEvent, setTrackHandler, stampTelemetryEnvelope, track, utilityAppAnalytics };
+export { AaGatewayUpstreamFallbackTelemetryEventSchema, AccountBalanceFailedTelemetryEventSchema, AccountBalanceReadTelemetryEventSchema, AuthFailedTelemetryEventSchema, AuthOtpDeliveredTelemetryEventSchema, AuthOtpExpiredTelemetryEventSchema, AuthOtpRequestedTelemetryEventSchema, AuthSignedOutTelemetryEventSchema, AuthVerifiedTelemetryEventSchema, BROWSER_GATED_TELEMETRY_EVENTS, BootstrapFailedTelemetryEventSchema, BootstrapResolvedTelemetryEventSchema, CAPXUL_ENVS, CONTRACT_FIRST_TELEMETRY_EVENTS, DepositInitiatedTelemetryEventSchema, DepositSettledTelemetryEventSchema, FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS, FaucetConfirmedTelemetryEventSchema, FaucetFailedTelemetryEventSchema, FaucetRequestedTelemetryEventSchema, InMemoryTelemetryBusAdapter, MemberActivationFailedTelemetryEventSchema, MemberActivationReadyTelemetryEventSchema, MemberActivationStartedTelemetryEventSchema, MovementScanCheckpointTelemetryEventSchema, MovementScanIncidentTelemetryEventSchema, MovementScanWindowTelemetryEventSchema, OnboardingDashboardReachedTelemetryEventSchema, OnboardingIntentSelectedTelemetryEventSchema, OnboardingOrganizationSubmittedTelemetryEventSchema, OnboardingProfileSubmittedTelemetryEventSchema, OrgCreateFailedTelemetryEventSchema, OrgCreateStartedTelemetryEventSchema, OrgCreatedTelemetryEventSchema, OrgInviteAcceptedTelemetryEventSchema, OrgInviteExpiredTelemetryEventSchema, OrgInviteSentTelemetryEventSchema, OrgRolesSeededTelemetryEventSchema, OrgSafeConfirmedTelemetryEventSchema, OrgSafeCreatedTelemetryEventSchema, OrganizationCreationFailedTelemetryEventSchema, OrganizationCreationReadyTelemetryEventSchema, OrganizationCreationStartedTelemetryEventSchema, PII, PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS, PaymentFailedTelemetryEventSchema, PaymentInitiatedTelemetryEventSchema, PaymentSettledTelemetryEventSchema, PermissionMirrorVerificationTelemetryEventSchema, PostHogTelemetryAdapter, ProvisioningSafeConfirmedTelemetryEventSchema, ProvisioningSafeCreatedTelemetryEventSchema, RecordingTelemetryAdapter, SYNCABLE_CAPXUL_ENVS, TELEMETRY_EVENT_NAMES, TELEMETRY_EVENT_SCHEMAS, TELEMETRY_JOURNEYS, TELEMETRY_PRODUCERS, createCapxulBeforeSend, createPostHogBrowserPageviewTracker, getTrackHandler, initializeCapxulBrowserAnalytics, initializePostHogBrowserAnalytics, maskCapturedNetworkRequest, productAppAnalytics, redactTelemetryEvent, redactTelemetryProps, sanitizePostHogBrowserEvent, setTrackHandler, stampTelemetryEnvelope, track, utilityAppAnalytics };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/observability",
-  "version": "2.5.2",
+  "version": "2.5.4",
   "private": false,
   "repository": {
     "type": "git",