@diegotsi/flint-core 1.10.1 → 1.11.0

package/dist/index.d.cts

@@ -6,6 +6,8 @@ interface NetworkCollector {
 interface NetworkCollectorOptions {
     maxEntries?: number;
     maxResponseBody?: number;
+    /** Extra key names (substring, case-insensitive) to redact from URLs, bodies and headers. */
+    redactKeys?: string[];
 }
 declare function createNetworkCollector(extraBlockedHosts?: string[], options?: NetworkCollectorOptions): NetworkCollector;
 
@@ -13,6 +15,7 @@ interface ConsoleCollector {
     start(): void;
     stop(): void;
     getEntries(): ConsoleEntry[];
+    getErrors(): CapturedError[];
 }
 declare function createConsoleCollector(): ConsoleCollector;
 
@@ -52,6 +55,15 @@ interface ConsoleEntry {
     args: string;
     timestamp: number;
 }
+/** A structured uncaught error / unhandled rejection, captured with its stack. */
+interface CapturedError {
+    message: string;
+    /** Raw (possibly minified) stack; symbolicated server-side against uploaded source maps. */
+    stack?: string;
+    /** Error constructor name, e.g. "TypeError". */
+    errorClass?: string;
+    timestamp: number;
+}
 interface NetworkEntry {
     method: string;
     url: string;
@@ -157,6 +169,8 @@ interface FlintConfig {
     enableReplay?: boolean;
     replayBufferMs?: number;
     blockedHosts?: string[];
+    /** Extra key names (substring, case-insensitive) to redact from captured network URLs, bodies and headers, on top of the built-in defaults (password, token, secret, …). */
+    redactKeys?: string[];
     frustration?: {
         rageClickThreshold?: number;
         rageClickWindow?: number;
@@ -184,7 +198,7 @@ interface FlintConfig {
     /** @internal Inject platform-specific collectors (e.g. React Native) */
     _collectors?: {
         console?: () => ConsoleCollector;
-        network?: (blockedHosts: string[]) => NetworkCollector;
+        network?: (blockedHosts: string[], options?: NetworkCollectorOptions) => NetworkCollector;
         environment?: () => EnvironmentInfo;
     };
     /** @internal Injected by framework packages to start replay without rrweb in core */
@@ -195,6 +209,14 @@ interface CollectedMeta {
     consoleLogs: ConsoleEntry[];
     networkErrors: NetworkEntry[];
     formErrors: FormErrorEntry[];
+    /** Structured uncaught errors captured during the session (newest last). */
+    errors?: CapturedError[];
+    /** Epoch ms when the user opened the report — anchors the bug moment. */
+    reportedAt?: number;
+    /** Epoch ms of the most recent captured error before the report, if any. */
+    errorAt?: number;
+    /** Raw stack of the most recent captured error, if any (symbolicated server-side). */
+    errorStack?: string;
 }
 interface ReportPayload {
     reporterId: string;
@@ -392,4 +414,4 @@ interface ResolvedTheme {
 }
 declare function resolveTheme(theme: Theme): ResolvedTheme;
 
-export { type CollectedMeta, type ConsoleCollector, type ConsoleEntry, DATADOG_BLOCKED_HOSTS, type EnvironmentInfo, type ErrorBreadcrumbs, type ErrorCaptureCollector, type ErrorCaptureOptions, type ErrorEventPayload, Flint, type FlintConfig, type FlintState, type FlintUser, type FlintWidgetProps, type FormErrorCollector, type FormErrorEntry, type FrustrationCollector, type FrustrationEvent, type Locale, type NetworkCollector, type NetworkEntry, type ReportPayload, type ReportResult, type ResolvedTheme, type Severity, type Theme, type ThemeOverride, _setFormErrorCollector, collectEnvironment, createConsoleCollector, createDatadogReplayProvider, createErrorCaptureCollector, createFormErrorCollector, createFrustrationCollector, createNetworkCollector, getSnapshot, resolveTheme, submitReplay, submitReport, subscribe, trackDatadogBugReported };
+export { type CapturedError, type CollectedMeta, type ConsoleCollector, type ConsoleEntry, DATADOG_BLOCKED_HOSTS, type EnvironmentInfo, type ErrorBreadcrumbs, type ErrorCaptureCollector, type ErrorCaptureOptions, type ErrorEventPayload, Flint, type FlintConfig, type FlintState, type FlintUser, type FlintWidgetProps, type FormErrorCollector, type FormErrorEntry, type FrustrationCollector, type FrustrationEvent, type Locale, type NetworkCollector, type NetworkEntry, type ReportPayload, type ReportResult, type ResolvedTheme, type Severity, type Theme, type ThemeOverride, _setFormErrorCollector, collectEnvironment, createConsoleCollector, createDatadogReplayProvider, createErrorCaptureCollector, createFormErrorCollector, createFrustrationCollector, createNetworkCollector, getSnapshot, resolveTheme, submitReplay, submitReport, subscribe, trackDatadogBugReported };

package/dist/index.d.ts

@@ -6,6 +6,8 @@ interface NetworkCollector {
 interface NetworkCollectorOptions {
     maxEntries?: number;
     maxResponseBody?: number;
+    /** Extra key names (substring, case-insensitive) to redact from URLs, bodies and headers. */
+    redactKeys?: string[];
 }
 declare function createNetworkCollector(extraBlockedHosts?: string[], options?: NetworkCollectorOptions): NetworkCollector;
 
@@ -13,6 +15,7 @@ interface ConsoleCollector {
     start(): void;
     stop(): void;
     getEntries(): ConsoleEntry[];
+    getErrors(): CapturedError[];
 }
 declare function createConsoleCollector(): ConsoleCollector;
 
@@ -52,6 +55,15 @@ interface ConsoleEntry {
     args: string;
     timestamp: number;
 }
+/** A structured uncaught error / unhandled rejection, captured with its stack. */
+interface CapturedError {
+    message: string;
+    /** Raw (possibly minified) stack; symbolicated server-side against uploaded source maps. */
+    stack?: string;
+    /** Error constructor name, e.g. "TypeError". */
+    errorClass?: string;
+    timestamp: number;
+}
 interface NetworkEntry {
     method: string;
     url: string;
@@ -157,6 +169,8 @@ interface FlintConfig {
     enableReplay?: boolean;
     replayBufferMs?: number;
     blockedHosts?: string[];
+    /** Extra key names (substring, case-insensitive) to redact from captured network URLs, bodies and headers, on top of the built-in defaults (password, token, secret, …). */
+    redactKeys?: string[];
     frustration?: {
         rageClickThreshold?: number;
         rageClickWindow?: number;
@@ -184,7 +198,7 @@ interface FlintConfig {
     /** @internal Inject platform-specific collectors (e.g. React Native) */
     _collectors?: {
         console?: () => ConsoleCollector;
-        network?: (blockedHosts: string[]) => NetworkCollector;
+        network?: (blockedHosts: string[], options?: NetworkCollectorOptions) => NetworkCollector;
         environment?: () => EnvironmentInfo;
     };
     /** @internal Injected by framework packages to start replay without rrweb in core */
@@ -195,6 +209,14 @@ interface CollectedMeta {
     consoleLogs: ConsoleEntry[];
     networkErrors: NetworkEntry[];
     formErrors: FormErrorEntry[];
+    /** Structured uncaught errors captured during the session (newest last). */
+    errors?: CapturedError[];
+    /** Epoch ms when the user opened the report — anchors the bug moment. */
+    reportedAt?: number;
+    /** Epoch ms of the most recent captured error before the report, if any. */
+    errorAt?: number;
+    /** Raw stack of the most recent captured error, if any (symbolicated server-side). */
+    errorStack?: string;
 }
 interface ReportPayload {
     reporterId: string;
@@ -392,4 +414,4 @@ interface ResolvedTheme {
 }
 declare function resolveTheme(theme: Theme): ResolvedTheme;
 
-export { type CollectedMeta, type ConsoleCollector, type ConsoleEntry, DATADOG_BLOCKED_HOSTS, type EnvironmentInfo, type ErrorBreadcrumbs, type ErrorCaptureCollector, type ErrorCaptureOptions, type ErrorEventPayload, Flint, type FlintConfig, type FlintState, type FlintUser, type FlintWidgetProps, type FormErrorCollector, type FormErrorEntry, type FrustrationCollector, type FrustrationEvent, type Locale, type NetworkCollector, type NetworkEntry, type ReportPayload, type ReportResult, type ResolvedTheme, type Severity, type Theme, type ThemeOverride, _setFormErrorCollector, collectEnvironment, createConsoleCollector, createDatadogReplayProvider, createErrorCaptureCollector, createFormErrorCollector, createFrustrationCollector, createNetworkCollector, getSnapshot, resolveTheme, submitReplay, submitReport, subscribe, trackDatadogBugReported };
+export { type CapturedError, type CollectedMeta, type ConsoleCollector, type ConsoleEntry, DATADOG_BLOCKED_HOSTS, type EnvironmentInfo, type ErrorBreadcrumbs, type ErrorCaptureCollector, type ErrorCaptureOptions, type ErrorEventPayload, Flint, type FlintConfig, type FlintState, type FlintUser, type FlintWidgetProps, type FormErrorCollector, type FormErrorEntry, type FrustrationCollector, type FrustrationEvent, type Locale, type NetworkCollector, type NetworkEntry, type ReportPayload, type ReportResult, type ResolvedTheme, type Severity, type Theme, type ThemeOverride, _setFormErrorCollector, collectEnvironment, createConsoleCollector, createDatadogReplayProvider, createErrorCaptureCollector, createFormErrorCollector, createFrustrationCollector, createNetworkCollector, getSnapshot, resolveTheme, submitReplay, submitReport, subscribe, trackDatadogBugReported };

package/dist/index.js

@@ -92,8 +92,10 @@ function sanitize(str) {
 
 // src/collectors/console.ts
 var MAX_ENTRIES = 50;
+var MAX_ERRORS = 10;
 function createConsoleCollector() {
   const entries = [];
+  const errors = [];
   let active = false;
   const originals = {
     log: console.log.bind(console),
@@ -114,6 +116,15 @@ function createConsoleCollector() {
     entries.push({ level, args: str, timestamp: Date.now() });
     if (entries.length > MAX_ENTRIES) entries.shift();
   }
+  function pushError(message, stack, errorClass) {
+    errors.push({
+      message: sanitize(message),
+      stack: stack ? sanitize(stack) : void 0,
+      errorClass,
+      timestamp: Date.now()
+    });
+    if (errors.length > MAX_ERRORS) errors.shift();
+  }
   return {
     start() {
       if (active) return;
@@ -132,14 +143,22 @@ function createConsoleCollector() {
       };
       origOnerror = window.onerror;
       window.onerror = (msg, src, line, col, err) => {
-        push("error", [err?.message ?? String(msg), `${src}:${line}:${col}`]);
+        const message = err?.message ?? String(msg);
+        push("error", [message, `${src}:${line}:${col}`]);
+        pushError(message, err?.stack, err?.name);
         if (typeof origOnerror === "function") return origOnerror(msg, src, line, col, err);
         return false;
       };
       origUnhandled = window.onunhandledrejection;
       window.onunhandledrejection = (event) => {
-        const reason = event.reason instanceof Error ? event.reason.message : JSON.stringify(event.reason);
+        const isError = event.reason instanceof Error;
+        const reason = isError ? event.reason.message : JSON.stringify(event.reason);
         push("error", ["UnhandledRejection:", reason]);
+        pushError(
+          reason,
+          isError ? event.reason.stack : void 0,
+          isError ? event.reason.name : void 0
+        );
         if (typeof origUnhandled === "function") origUnhandled.call(window, event);
       };
     },
@@ -154,6 +173,9 @@ function createConsoleCollector() {
     },
     getEntries() {
       return [...entries];
+    },
+    getErrors() {
+      return [...errors];
     }
   };
 }
@@ -763,6 +785,100 @@ function createFrustrationCollector(opts) {
   };
 }
 
+// src/collectors/sanitize.ts
+var REDACTED = "[REDACTED]";
+var DEFAULT_REDACT_KEYS = [
+  "password",
+  "passwd",
+  "pwd",
+  "secret",
+  "token",
+  "auth",
+  "credential",
+  "apikey",
+  "api_key",
+  "session",
+  "cookie",
+  "ssn",
+  "creditcard",
+  "credit_card",
+  "card_number",
+  "cardnumber",
+  "cvv",
+  "cvc",
+  "pin"
+];
+function createKeyMatcher(extra = []) {
+  const needles = [...DEFAULT_REDACT_KEYS, ...extra.map((k) => k.toLowerCase())];
+  return (key) => {
+    const lower = key.toLowerCase();
+    return needles.some((n) => lower.includes(n));
+  };
+}
+function redactValue(value, match) {
+  if (Array.isArray(value)) return value.map((v) => redactValue(v, match));
+  if (value && typeof value === "object") {
+    const out = {};
+    for (const [k, v] of Object.entries(value)) {
+      out[k] = match(k) ? REDACTED : redactValue(v, match);
+    }
+    return out;
+  }
+  return value;
+}
+function redactQueryString(qs, match) {
+  if (!qs) return qs;
+  return qs.split("&").map((pair) => {
+    const eq = pair.indexOf("=");
+    if (eq === -1) return pair;
+    const rawKey = pair.slice(0, eq);
+    let key = rawKey;
+    try {
+      key = decodeURIComponent(rawKey.replace(/\+/g, " "));
+    } catch {
+    }
+    return match(key) ? `${rawKey}=${REDACTED}` : pair;
+  }).join("&");
+}
+function sanitizeBody(body, match) {
+  if (!body) return body;
+  const trimmed = body.trimStart();
+  if (trimmed.startsWith("{") || trimmed.startsWith("[")) {
+    try {
+      const parsed = JSON.parse(body);
+      return JSON.stringify(redactValue(parsed, match));
+    } catch {
+    }
+  }
+  if (body.includes("=") && !/\s/.test(body)) {
+    const redacted = redactQueryString(body, match);
+    if (redacted !== body) return redacted;
+  }
+  return body.replace(
+    /("?)([\w.-]+)\1\s*:\s*"(?:[^"\\]|\\.)*"/gi,
+    (full, q, key) => match(key) ? `${q}${key}${q}:"${REDACTED}"` : full
+  ).replace(/([\w.-]+)=([^&\s]+)/gi, (full, key) => match(key) ? `${key}=${REDACTED}` : full);
+}
+function sanitizeUrl(url, match) {
+  const qIdx = url.indexOf("?");
+  if (qIdx === -1) return url;
+  const base = url.slice(0, qIdx);
+  const query = url.slice(qIdx + 1);
+  const hashIdx = query.indexOf("#");
+  const qs = hashIdx === -1 ? query : query.slice(0, hashIdx);
+  const hash = hashIdx === -1 ? "" : query.slice(hashIdx);
+  const redacted = redactQueryString(qs, match);
+  return `${base}?${redacted}${hash}`;
+}
+function sanitizeHeaders(headers, match) {
+  if (!headers) return headers;
+  const out = {};
+  for (const [k, v] of Object.entries(headers)) {
+    out[k] = match(k) ? REDACTED : v;
+  }
+  return out;
+}
+
 // src/collectors/network.ts
 var MAX_ENTRIES3 = 50;
 var MAX_FULL_URL = 2e3;
@@ -938,6 +1054,7 @@ function extractContentType(headers) {
 function createNetworkCollector(extraBlockedHosts = [], options) {
   const maxEntries = options?.maxEntries ?? MAX_ENTRIES3;
   const maxResponseBody = options?.maxResponseBody ?? MAX_RESPONSE_BODY;
+  const matchSecret = createKeyMatcher(options?.redactKeys);
   const entries = [];
   const blocked = /* @__PURE__ */ new Set([...DEFAULT_BLOCKED_HOSTS, ...extraBlockedHosts]);
   let origFetch = null;
@@ -949,6 +1066,12 @@ function createNetworkCollector(extraBlockedHosts = [], options) {
   const seenUrls = /* @__PURE__ */ new Set();
   function push(entry) {
     seenUrls.add(entry.fullUrl ?? entry.url);
+    if (entry.fullUrl) entry.fullUrl = sanitizeUrl(entry.fullUrl, matchSecret);
+    entry.url = sanitizeUrl(entry.url, matchSecret);
+    entry.requestBody = sanitizeBody(entry.requestBody, matchSecret);
+    entry.responseBody = sanitizeBody(entry.responseBody, matchSecret);
+    entry.requestHeaders = sanitizeHeaders(entry.requestHeaders, matchSecret);
+    entry.responseHeaders = sanitizeHeaders(entry.responseHeaders, matchSecret);
     entries.push(entry);
     if (entries.length > maxEntries) entries.shift();
   }
@@ -1014,7 +1137,8 @@ function createNetworkCollector(extraBlockedHosts = [], options) {
           try {
             const clone = res.clone();
             clone.text().then((text) => {
-              entry.responseBody = text.length > maxResponseBody ? text.slice(0, maxResponseBody) + "\u2026" : text;
+              const truncated = text.length > maxResponseBody ? text.slice(0, maxResponseBody) + "\u2026" : text;
+              entry.responseBody = sanitizeBody(truncated, matchSecret);
               if (!entry.responseSize && text.length) entry.responseSize = text.length;
             }).catch(() => {
             });
@@ -1244,6 +1368,7 @@ function init(config) {
     enableReplay = false,
     replayBufferMs = DEFAULT_REPLAY_BUFFER_MS,
     blockedHosts = [],
+    redactKeys,
     frustration: frustrationOpts,
     onFrustration,
     _replayRecorder,
@@ -1267,7 +1392,7 @@ function init(config) {
   const allBlockedHosts = [...blockedHosts, ...flintHost ? [flintHost] : []];
   const consoleCol = enableConsole ? _collectors?.console?.() ?? createConsoleCollector() : null;
   consoleCol?.start();
-  const networkCol = enableNetwork ? _collectors?.network?.(allBlockedHosts) ?? createNetworkCollector(allBlockedHosts) : null;
+  const networkCol = enableNetwork ? _collectors?.network?.(allBlockedHosts, { redactKeys }) ?? createNetworkCollector(allBlockedHosts, { redactKeys }) : null;
   networkCol?.start();
   const formErrorsCol = enableFormErrors ? createFormErrorCollector() : null;
   if (formErrorsCol) {