@diegotsi/flint-core 1.10.0 → 1.10.2

package/dist/{chunk-SO6WYKFF.js → chunk-FQ6TBPEG.js}

@@ -9,6 +9,8 @@ function createDatadogReplayProvider(site) {
   return () => {
     try {
       const ddRum = window.DD_RUM;
+      const link = ddRum?.getSessionReplayLink?.();
+      if (link) return link;
       const ctx = ddRum?.getInternalContext?.();
       if (ctx?.session_id) {
         const ts = Date.now();
@@ -39,4 +41,4 @@ export {
   createDatadogReplayProvider,
   trackDatadogBugReported
 };
-//# sourceMappingURL=chunk-SO6WYKFF.js.map
+//# sourceMappingURL=chunk-FQ6TBPEG.js.map

package/dist/chunk-FQ6TBPEG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/integrations/datadog.ts"],"sourcesContent":["/**\n * Datadog RUM integration — opt-in helper.\n *\n * Usage:\n *   import { Flint } from \"@diegotsi/flint-core\";\n *   import { createDatadogReplayProvider, DATADOG_BLOCKED_HOSTS } from \"@diegotsi/flint-core\";\n *\n *   Flint.init({\n *     projectKey: \"...\",\n *     serverUrl: \"...\",\n *     externalReplayProvider: createDatadogReplayProvider(\"app.datadoghq.com\"),\n *     blockedHosts: DATADOG_BLOCKED_HOSTS,\n *   });\n */\n\n/** Datadog intake hosts to exclude from network capture. */\nexport const DATADOG_BLOCKED_HOSTS = [\n  \"browser-intake-datadoghq.com\",\n  \"rum.browser-intake-datadoghq.com\",\n  \"logs.browser-intake-datadoghq.com\",\n  \"session-replay.browser-intake-datadoghq.com\",\n];\n\n/**\n * Creates an `externalReplayProvider` that returns a deep link to the current\n * Datadog RUM Session Replay.\n *\n * Prefers the SDK's own `getSessionReplayLink()` — Datadog builds it with the\n * current view + timestamp, so the player opens at the reported moment rather\n * than the session start. Falls back to a hand-built session URL (opens the\n * session, without a precise seek) only when that method isn't available.\n */\nexport function createDatadogReplayProvider(site: string): () => string | undefined {\n  return () => {\n    try {\n      const ddRum = (window as unknown as Record<string, unknown>).DD_RUM as\n        | {\n            getSessionReplayLink?: () => string | undefined;\n            getInternalContext?: () => { session_id?: string } | undefined;\n          }\n        | undefined;\n\n      // Official link generator — lands on the current moment/view.\n      const link = ddRum?.getSessionReplayLink?.();\n      if (link) return link;\n\n      // Fallback: build from the session id (opens the session, no exact seek).\n      const ctx = ddRum?.getInternalContext?.();\n      if (ctx?.session_id) {\n        const ts = Date.now();\n        const fromTs = ts - 30_000;\n        const toTs = ts + 5_000;\n        return `https://${site}/rum/replay/sessions/${ctx.session_id}?from_ts=${fromTs}&to_ts=${toTs}&tab=replay&live=false`;\n      }\n    } catch {\n      // DD_RUM not available — silently skip\n    }\n    return undefined;\n  };\n}\n\n/**\n * Emits a custom Datadog RUM action at the moment a bug is reported, so it\n * shows up as a clickable marker on the Session Replay timeline — making the\n * report moment easy to find in long sessions.\n *\n * No-op when Datadog RUM (`window.DD_RUM`) is not present on the page.\n */\nexport function trackDatadogBugReported(meta: {\n  bugId: string;\n  severity?: string;\n  url?: string;\n  title?: string;\n}): void {\n  try {\n    const ddRum = (window as unknown as Record<string, unknown>).DD_RUM as\n      | { addAction?: (name: string, context?: Record<string, unknown>) => void }\n      | undefined;\n    ddRum?.addAction?.(\"flint.bug_reported\", {\n      bug_id: meta.bugId,\n      severity: meta.severity,\n      url: meta.url,\n      title: meta.title,\n    });\n  } catch {\n    // DD_RUM not available — silently skip\n  }\n}\n"],"mappings":";AAgBO,IAAM,wBAAwB;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAWO,SAAS,4BAA4B,MAAwC;AAClF,SAAO,MAAM;AACX,QAAI;AACF,YAAM,QAAS,OAA8C;AAQ7D,YAAM,OAAO,OAAO,uBAAuB;AAC3C,UAAI,KAAM,QAAO;AAGjB,YAAM,MAAM,OAAO,qBAAqB;AACxC,UAAI,KAAK,YAAY;AACnB,cAAM,KAAK,KAAK,IAAI;AACpB,cAAM,SAAS,KAAK;AACpB,cAAM,OAAO,KAAK;AAClB,eAAO,WAAW,IAAI,wBAAwB,IAAI,UAAU,YAAY,MAAM,UAAU,IAAI;AAAA,MAC9F;AAAA,IACF,QAAQ;AAAA,IAER;AACA,WAAO;AAAA,EACT;AACF;AASO,SAAS,wBAAwB,MAK/B;AACP,MAAI;AACF,UAAM,QAAS,OAA8C;AAG7D,WAAO,YAAY,sBAAsB;AAAA,MACvC,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK;AAAA,MACf,KAAK,KAAK;AAAA,MACV,OAAO,KAAK;AAAA,IACd,CAAC;AAAA,EACH,QAAQ;AAAA,EAER;AACF;","names":[]}

package/dist/{datadog-FLEAFTUB.js → datadog-F3R66MH7.js}

@@ -2,10 +2,10 @@ import {
   DATADOG_BLOCKED_HOSTS,
   createDatadogReplayProvider,
   trackDatadogBugReported
-} from "./chunk-SO6WYKFF.js";
+} from "./chunk-FQ6TBPEG.js";
 export {
   DATADOG_BLOCKED_HOSTS,
   createDatadogReplayProvider,
   trackDatadogBugReported
 };
-//# sourceMappingURL=datadog-FLEAFTUB.js.map
+//# sourceMappingURL=datadog-F3R66MH7.js.map

package/dist/index.cjs

@@ -31,6 +31,8 @@ function createDatadogReplayProvider(site) {
   return () => {
     try {
       const ddRum = window.DD_RUM;
+      const link = ddRum?.getSessionReplayLink?.();
+      if (link) return link;
       const ctx = ddRum?.getInternalContext?.();
       if (ctx?.session_id) {
         const ts = Date.now();
@@ -849,6 +851,100 @@ function createFrustrationCollector(opts) {
   };
 }
 
+// src/collectors/sanitize.ts
+var REDACTED = "[REDACTED]";
+var DEFAULT_REDACT_KEYS = [
+  "password",
+  "passwd",
+  "pwd",
+  "secret",
+  "token",
+  "auth",
+  "credential",
+  "apikey",
+  "api_key",
+  "session",
+  "cookie",
+  "ssn",
+  "creditcard",
+  "credit_card",
+  "card_number",
+  "cardnumber",
+  "cvv",
+  "cvc",
+  "pin"
+];
+function createKeyMatcher(extra = []) {
+  const needles = [...DEFAULT_REDACT_KEYS, ...extra.map((k) => k.toLowerCase())];
+  return (key) => {
+    const lower = key.toLowerCase();
+    return needles.some((n) => lower.includes(n));
+  };
+}
+function redactValue(value, match) {
+  if (Array.isArray(value)) return value.map((v) => redactValue(v, match));
+  if (value && typeof value === "object") {
+    const out = {};
+    for (const [k, v] of Object.entries(value)) {
+      out[k] = match(k) ? REDACTED : redactValue(v, match);
+    }
+    return out;
+  }
+  return value;
+}
+function redactQueryString(qs, match) {
+  if (!qs) return qs;
+  return qs.split("&").map((pair) => {
+    const eq = pair.indexOf("=");
+    if (eq === -1) return pair;
+    const rawKey = pair.slice(0, eq);
+    let key = rawKey;
+    try {
+      key = decodeURIComponent(rawKey.replace(/\+/g, " "));
+    } catch {
+    }
+    return match(key) ? `${rawKey}=${REDACTED}` : pair;
+  }).join("&");
+}
+function sanitizeBody(body, match) {
+  if (!body) return body;
+  const trimmed = body.trimStart();
+  if (trimmed.startsWith("{") || trimmed.startsWith("[")) {
+    try {
+      const parsed = JSON.parse(body);
+      return JSON.stringify(redactValue(parsed, match));
+    } catch {
+    }
+  }
+  if (body.includes("=") && !/\s/.test(body)) {
+    const redacted = redactQueryString(body, match);
+    if (redacted !== body) return redacted;
+  }
+  return body.replace(
+    /("?)([\w.-]+)\1\s*:\s*"(?:[^"\\]|\\.)*"/gi,
+    (full, q, key) => match(key) ? `${q}${key}${q}:"${REDACTED}"` : full
+  ).replace(/([\w.-]+)=([^&\s]+)/gi, (full, key) => match(key) ? `${key}=${REDACTED}` : full);
+}
+function sanitizeUrl(url, match) {
+  const qIdx = url.indexOf("?");
+  if (qIdx === -1) return url;
+  const base = url.slice(0, qIdx);
+  const query = url.slice(qIdx + 1);
+  const hashIdx = query.indexOf("#");
+  const qs = hashIdx === -1 ? query : query.slice(0, hashIdx);
+  const hash = hashIdx === -1 ? "" : query.slice(hashIdx);
+  const redacted = redactQueryString(qs, match);
+  return `${base}?${redacted}${hash}`;
+}
+function sanitizeHeaders(headers, match) {
+  if (!headers) return headers;
+  const out = {};
+  for (const [k, v] of Object.entries(headers)) {
+    out[k] = match(k) ? REDACTED : v;
+  }
+  return out;
+}
+
 // src/collectors/network.ts
 var MAX_ENTRIES3 = 50;
 var MAX_FULL_URL = 2e3;
@@ -1024,6 +1120,7 @@ function extractContentType(headers) {
 function createNetworkCollector(extraBlockedHosts = [], options) {
   const maxEntries = options?.maxEntries ?? MAX_ENTRIES3;
   const maxResponseBody = options?.maxResponseBody ?? MAX_RESPONSE_BODY;
+  const matchSecret = createKeyMatcher(options?.redactKeys);
   const entries = [];
   const blocked = /* @__PURE__ */ new Set([...DEFAULT_BLOCKED_HOSTS, ...extraBlockedHosts]);
   let origFetch = null;
@@ -1035,6 +1132,12 @@ function createNetworkCollector(extraBlockedHosts = [], options) {
   const seenUrls = /* @__PURE__ */ new Set();
   function push(entry) {
     seenUrls.add(entry.fullUrl ?? entry.url);
+    if (entry.fullUrl) entry.fullUrl = sanitizeUrl(entry.fullUrl, matchSecret);
+    entry.url = sanitizeUrl(entry.url, matchSecret);
+    entry.requestBody = sanitizeBody(entry.requestBody, matchSecret);
+    entry.responseBody = sanitizeBody(entry.responseBody, matchSecret);
+    entry.requestHeaders = sanitizeHeaders(entry.requestHeaders, matchSecret);
+    entry.responseHeaders = sanitizeHeaders(entry.responseHeaders, matchSecret);
     entries.push(entry);
     if (entries.length > maxEntries) entries.shift();
   }
@@ -1100,7 +1203,8 @@ function createNetworkCollector(extraBlockedHosts = [], options) {
           try {
             const clone = res.clone();
             clone.text().then((text) => {
-              entry.responseBody = text.length > maxResponseBody ? text.slice(0, maxResponseBody) + "\u2026" : text;
+              const truncated = text.length > maxResponseBody ? text.slice(0, maxResponseBody) + "\u2026" : text;
+              entry.responseBody = sanitizeBody(truncated, matchSecret);
               if (!entry.responseSize && text.length) entry.responseSize = text.length;
             }).catch(() => {
             });
@@ -1333,6 +1437,7 @@ function init(config) {
     enableReplay = false,
     replayBufferMs = DEFAULT_REPLAY_BUFFER_MS,
     blockedHosts = [],
+    redactKeys,
     frustration: frustrationOpts,
     onFrustration,
     _replayRecorder,
@@ -1356,7 +1461,7 @@ function init(config) {
   const allBlockedHosts = [...blockedHosts, ...flintHost ? [flintHost] : []];
   const consoleCol = enableConsole ? _collectors?.console?.() ?? createConsoleCollector() : null;
   consoleCol?.start();
-  const networkCol = enableNetwork ? _collectors?.network?.(allBlockedHosts) ?? createNetworkCollector(allBlockedHosts) : null;
+  const networkCol = enableNetwork ? _collectors?.network?.(allBlockedHosts, { redactKeys }) ?? createNetworkCollector(allBlockedHosts, { redactKeys }) : null;
   networkCol?.start();
   const formErrorsCol = enableFormErrors ? createFormErrorCollector() : null;
   if (formErrorsCol) {