@diegotsi/flint-core 1.10.1 → 1.11.0

package/dist/index.cjs

@@ -180,8 +180,10 @@ function sanitize(str) {
 
 // src/collectors/console.ts
 var MAX_ENTRIES = 50;
+var MAX_ERRORS = 10;
 function createConsoleCollector() {
   const entries = [];
+  const errors = [];
   let active = false;
   const originals = {
     log: console.log.bind(console),
@@ -202,6 +204,15 @@ function createConsoleCollector() {
     entries.push({ level, args: str, timestamp: Date.now() });
     if (entries.length > MAX_ENTRIES) entries.shift();
   }
+  function pushError(message, stack, errorClass) {
+    errors.push({
+      message: sanitize(message),
+      stack: stack ? sanitize(stack) : void 0,
+      errorClass,
+      timestamp: Date.now()
+    });
+    if (errors.length > MAX_ERRORS) errors.shift();
+  }
   return {
     start() {
       if (active) return;
@@ -220,14 +231,22 @@ function createConsoleCollector() {
       };
       origOnerror = window.onerror;
       window.onerror = (msg, src, line, col, err) => {
-        push("error", [err?.message ?? String(msg), `${src}:${line}:${col}`]);
+        const message = err?.message ?? String(msg);
+        push("error", [message, `${src}:${line}:${col}`]);
+        pushError(message, err?.stack, err?.name);
         if (typeof origOnerror === "function") return origOnerror(msg, src, line, col, err);
         return false;
       };
       origUnhandled = window.onunhandledrejection;
       window.onunhandledrejection = (event) => {
-        const reason = event.reason instanceof Error ? event.reason.message : JSON.stringify(event.reason);
+        const isError = event.reason instanceof Error;
+        const reason = isError ? event.reason.message : JSON.stringify(event.reason);
         push("error", ["UnhandledRejection:", reason]);
+        pushError(
+          reason,
+          isError ? event.reason.stack : void 0,
+          isError ? event.reason.name : void 0
+        );
         if (typeof origUnhandled === "function") origUnhandled.call(window, event);
       };
     },
@@ -242,6 +261,9 @@ function createConsoleCollector() {
     },
     getEntries() {
       return [...entries];
+    },
+    getErrors() {
+      return [...errors];
     }
   };
 }
@@ -851,6 +873,100 @@ function createFrustrationCollector(opts) {
   };
 }
 
+// src/collectors/sanitize.ts
+var REDACTED = "[REDACTED]";
+var DEFAULT_REDACT_KEYS = [
+  "password",
+  "passwd",
+  "pwd",
+  "secret",
+  "token",
+  "auth",
+  "credential",
+  "apikey",
+  "api_key",
+  "session",
+  "cookie",
+  "ssn",
+  "creditcard",
+  "credit_card",
+  "card_number",
+  "cardnumber",
+  "cvv",
+  "cvc",
+  "pin"
+];
+function createKeyMatcher(extra = []) {
+  const needles = [...DEFAULT_REDACT_KEYS, ...extra.map((k) => k.toLowerCase())];
+  return (key) => {
+    const lower = key.toLowerCase();
+    return needles.some((n) => lower.includes(n));
+  };
+}
+function redactValue(value, match) {
+  if (Array.isArray(value)) return value.map((v) => redactValue(v, match));
+  if (value && typeof value === "object") {
+    const out = {};
+    for (const [k, v] of Object.entries(value)) {
+      out[k] = match(k) ? REDACTED : redactValue(v, match);
+    }
+    return out;
+  }
+  return value;
+}
+function redactQueryString(qs, match) {
+  if (!qs) return qs;
+  return qs.split("&").map((pair) => {
+    const eq = pair.indexOf("=");
+    if (eq === -1) return pair;
+    const rawKey = pair.slice(0, eq);
+    let key = rawKey;
+    try {
+      key = decodeURIComponent(rawKey.replace(/\+/g, " "));
+    } catch {
+    }
+    return match(key) ? `${rawKey}=${REDACTED}` : pair;
+  }).join("&");
+}
+function sanitizeBody(body, match) {
+  if (!body) return body;
+  const trimmed = body.trimStart();
+  if (trimmed.startsWith("{") || trimmed.startsWith("[")) {
+    try {
+      const parsed = JSON.parse(body);
+      return JSON.stringify(redactValue(parsed, match));
+    } catch {
+    }
+  }
+  if (body.includes("=") && !/\s/.test(body)) {
+    const redacted = redactQueryString(body, match);
+    if (redacted !== body) return redacted;
+  }
+  return body.replace(
+    /("?)([\w.-]+)\1\s*:\s*"(?:[^"\\]|\\.)*"/gi,
+    (full, q, key) => match(key) ? `${q}${key}${q}:"${REDACTED}"` : full
+  ).replace(/([\w.-]+)=([^&\s]+)/gi, (full, key) => match(key) ? `${key}=${REDACTED}` : full);
+}
+function sanitizeUrl(url, match) {
+  const qIdx = url.indexOf("?");
+  if (qIdx === -1) return url;
+  const base = url.slice(0, qIdx);
+  const query = url.slice(qIdx + 1);
+  const hashIdx = query.indexOf("#");
+  const qs = hashIdx === -1 ? query : query.slice(0, hashIdx);
+  const hash = hashIdx === -1 ? "" : query.slice(hashIdx);
+  const redacted = redactQueryString(qs, match);
+  return `${base}?${redacted}${hash}`;
+}
+function sanitizeHeaders(headers, match) {
+  if (!headers) return headers;
+  const out = {};
+  for (const [k, v] of Object.entries(headers)) {
+    out[k] = match(k) ? REDACTED : v;
+  }
+  return out;
+}
+
 // src/collectors/network.ts
 var MAX_ENTRIES3 = 50;
 var MAX_FULL_URL = 2e3;
@@ -1026,6 +1142,7 @@ function extractContentType(headers) {
 function createNetworkCollector(extraBlockedHosts = [], options) {
   const maxEntries = options?.maxEntries ?? MAX_ENTRIES3;
   const maxResponseBody = options?.maxResponseBody ?? MAX_RESPONSE_BODY;
+  const matchSecret = createKeyMatcher(options?.redactKeys);
   const entries = [];
   const blocked = /* @__PURE__ */ new Set([...DEFAULT_BLOCKED_HOSTS, ...extraBlockedHosts]);
   let origFetch = null;
@@ -1037,6 +1154,12 @@ function createNetworkCollector(extraBlockedHosts = [], options) {
   const seenUrls = /* @__PURE__ */ new Set();
   function push(entry) {
     seenUrls.add(entry.fullUrl ?? entry.url);
+    if (entry.fullUrl) entry.fullUrl = sanitizeUrl(entry.fullUrl, matchSecret);
+    entry.url = sanitizeUrl(entry.url, matchSecret);
+    entry.requestBody = sanitizeBody(entry.requestBody, matchSecret);
+    entry.responseBody = sanitizeBody(entry.responseBody, matchSecret);
+    entry.requestHeaders = sanitizeHeaders(entry.requestHeaders, matchSecret);
+    entry.responseHeaders = sanitizeHeaders(entry.responseHeaders, matchSecret);
     entries.push(entry);
     if (entries.length > maxEntries) entries.shift();
   }
@@ -1102,7 +1225,8 @@ function createNetworkCollector(extraBlockedHosts = [], options) {
           try {
             const clone = res.clone();
             clone.text().then((text) => {
-              entry.responseBody = text.length > maxResponseBody ? text.slice(0, maxResponseBody) + "\u2026" : text;
+              const truncated = text.length > maxResponseBody ? text.slice(0, maxResponseBody) + "\u2026" : text;
+              entry.responseBody = sanitizeBody(truncated, matchSecret);
               if (!entry.responseSize && text.length) entry.responseSize = text.length;
             }).catch(() => {
             });
@@ -1335,6 +1459,7 @@ function init(config) {
     enableReplay = false,
     replayBufferMs = DEFAULT_REPLAY_BUFFER_MS,
     blockedHosts = [],
+    redactKeys,
     frustration: frustrationOpts,
     onFrustration,
     _replayRecorder,
@@ -1358,7 +1483,7 @@ function init(config) {
   const allBlockedHosts = [...blockedHosts, ...flintHost ? [flintHost] : []];
   const consoleCol = enableConsole ? _collectors?.console?.() ?? createConsoleCollector() : null;
   consoleCol?.start();
-  const networkCol = enableNetwork ? _collectors?.network?.(allBlockedHosts) ?? createNetworkCollector(allBlockedHosts) : null;
+  const networkCol = enableNetwork ? _collectors?.network?.(allBlockedHosts, { redactKeys }) ?? createNetworkCollector(allBlockedHosts, { redactKeys }) : null;
   networkCol?.start();
   const formErrorsCol = enableFormErrors ? createFormErrorCollector() : null;
   if (formErrorsCol) {