@fixback/sdk 0.4.0 → 0.6.0

package/dist/trace/instrument/xhr.d.ts

@@ -0,0 +1,15 @@
+/**
+ * The `XMLHttpRequest` network hook (spec #122 §D, ticket #139).
+ *
+ * Patches the prototype's `open`/`send` to record a rich network crumb when a
+ * request settles: method, scrubbed URL, status + statusText, a
+ * `performance.now()` duration, request size (only when the body is trivially
+ * sized), response size (from the `content-length` header only), content type, and
+ * a failure outcome distinguished by which terminal event fired (`error` /
+ * `timeout` / `abort` / `load`). The `send` body argument is **never read for
+ * content** — only its trivially-known size — so a body can never reach the buffer.
+ */
+import { type BreadcrumbBuffer, type Teardown } from "@fixback/sdk-core";
+import { type InstrumentWindow } from "./window";
+/** Patch `XMLHttpRequest` to record a rich network crumb on settlement. See the module doc. */
+export declare function instrumentXhr(buffer: BreadcrumbBuffer, win: InstrumentWindow, ignoreUrl: (url: string) => boolean, now: () => number, mono?: () => number): Teardown;

package/dist/version.d.ts

@@ -10,4 +10,4 @@
  * can't slip through. Do not hand-edit this line to a value other than
  * `package.json`'s version.
  */
-export declare const SDK_VERSION = "0.4.0";
+export declare const SDK_VERSION = "0.6.0";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fixback/sdk",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "description": "The Fixback capture SDK — a boot-gated, self-isolating on-page feedback launcher.",
   "license": "MIT",
   "type": "module",
@@ -35,15 +35,15 @@
     "url": "git+https://github.com/wemuda/fixback.git",
     "directory": "packages/sdk"
   },
-  "homepage": "https://github.com/wemuda/fixback/tree/master/packages/sdk#readme",
-  "bugs": "https://github.com/wemuda/fixback/issues",
+  "homepage": "https://docs.fixback.dev/sdk/web",
+  "bugs": "https://docs.fixback.dev",
   "publishConfig": {
     "access": "public"
   },
   "dependencies": {
     "@rrweb/record": "^2.1.1",
     "@rrweb/types": "^2.1.1",
-    "modern-screenshot": "^4.7.0"
+    "@fixback/sdk-core": "0.3.0"
   },
   "devDependencies": {
     "jsdom": "^30.0.1",
@@ -51,8 +51,11 @@
     "vite": "^8.2.1",
     "vitest": "^4.1.10"
   },
+  "engines": {
+    "node": ">=20.12"
+  },
   "scripts": {
-    "build": "vite build && tsc -p tsconfig.build.json",
+    "build": "vite build && tsc -p tsconfig.build.json && node ../../scripts/finalize-cjs.mjs dist",
     "lint": "eslint .",
     "typecheck": "tsc --noEmit",
     "test": "vitest run"

package/dist/auto-report-backoff.d.ts

@@ -1,47 +0,0 @@
-/**
- * Client-side backpressure for **automatic** error reports (spec 0003 §E/§H,
- * ticket #89). When ingest sheds `source: auto` load it answers `429` with a
- * `Retry-After`; the SDK honours it by holding a pause window during which further
- * `source: auto` reports are dropped without touching the network. **Manual**
- * reports — a human clicking Send — never consult this gate.
- *
- * This is the transport's counterpart to the server's per-Project token bucket
- * (`apps/api/src/ingest/auto-report-rate-limiter.ts`): one shared window per page,
- * so a 429 from one auto-report shed applies to the auto-reports that follow it.
- * The clock is injectable so the window is unit-tested deterministically, never on
- * wall time — mirroring the server limiter's `Clock`.
- */
-/** A source of the current time in epoch milliseconds — injectable for tests. */
-export type Clock = () => number;
-/** The hold window applied when a `429` carries no usable `Retry-After` (spec §E). */
-export declare const DEFAULT_RETRY_AFTER_SECONDS = 60;
-/**
- * Parse a `Retry-After` header into whole seconds to hold for. Handles both HTTP
- * forms — a delta-seconds integer and an HTTP-date (measured from `now`, rounded up
- * and clamped at zero) — and falls back to {@link DEFAULT_RETRY_AFTER_SECONDS} when
- * the header is absent, blank, or unparseable. Ingest sends the delta-seconds form;
- * the date form is handled for spec-completeness.
- */
-export declare function parseRetryAfter(header: string | null | undefined, now: number): number;
-/**
- * A single pause window for `source: auto` reports. `hold` opens (or extends) it
- * from a `429`'s `Retry-After`; `isPaused` reports whether it is still open. The
- * default instance in `submit.ts` is shared across a page's reports so the hold
- * persists across successive auto submissions.
- */
-export declare class AutoReportBackoff {
-    private readonly now;
-    /** Epoch ms until which `source: auto` reports are held; `0` when clear. */
-    private pausedUntil;
-    constructor(now?: Clock);
-    /** Is the `source: auto` pause window currently open? */
-    isPaused(): boolean;
-    /** Whole seconds remaining in the pause window (`0` when clear). */
-    retryAfterSeconds(): number;
-    /**
-     * Open (or extend) the window from a `429`'s `Retry-After` value, returning the
-     * seconds it will hold for. The window only ever grows — a shorter later hold
-     * never clips a longer one already in effect.
-     */
-    hold(retryAfterHeader: string | null | undefined): number;
-}

package/dist/boot.d.ts

@@ -1,74 +0,0 @@
-/**
- * The ingest **boot** wire-contract, vendored.
- *
- * The SDK deliberately does not import `@fixback/shared` — that package is
- * private and server-shaped (ticket #47). The boot request/response is small and
- * stable, so the exact slice the SDK needs is copied here. Keep it in lock-step
- * with the server: the request body accepted by `POST /api/ingest/boot`
- * (`apps/api/src/ingest/ingest.controller.ts`) and the `BootAnswer` returned by
- * `evaluateBoot` (`apps/api/src/ingest/reporter-identity.ts`).
- */
-/** A Project's Gate — who may submit. Mirrors the server's `ProjectGate`. */
-export type ProjectGate = "open" | "invited" | "internal";
-/** The trust tier a Reporter holds. Mirrors the server's `ReporterTier`. */
-export type ReporterTier = "public" | "invited" | "internal";
-/**
- * Optional identity evidence the SDK forwards to boot. None of it is a tier: the
- * server re-derives trust from this evidence and never honours a self-declared
- * tier, so the SDK does not send one.
- */
-export interface IdentityInputs {
-    readonly signedIdentity?: string;
-    readonly reporterId?: string;
-    readonly anonymousId?: string;
-}
-/** The JSON body `POST /api/ingest/boot` accepts. */
-export interface BootRequest extends IdentityInputs {
-    readonly key: string;
-}
-/**
- * The Project's effective console/network capture config, served on the boot answer
- * (spec #122 §L; ticket #138). Each flag is the per-project master toggle ANDed with
- * that stream's own toggle, so the SDK gates instrumentation on one boolean per
- * stream. Optional on the wire: an older server that does not send it (or a
- * malformed value) is treated as **capture on** — default-on, matching the server
- * default — and `init` options override whatever is served.
- */
-export interface CaptureConfig {
-    readonly console: boolean;
-    readonly network: boolean;
-    /**
-     * The Project's session-replay toggle (issue #189, ADR-0024). Optional on the
-     * wire: a server predating replay omits it, which — like the other streams —
-     * means **capture on**.
-     */
-    readonly replay?: boolean;
-}
-/**
- * The boot answer: whether this origin is allowlisted, the Project's Gate, the
- * caller's derived tier (`null` when a presented identity was refused), whether a
- * submission would be accepted right now, and the Project's capture config. The
- * launcher shows only when `canSubmit` is true.
- */
-export interface BootAnswer {
-    readonly originAllowed: boolean;
-    readonly gate: ProjectGate;
-    readonly tier: ReporterTier | null;
-    readonly canSubmit: boolean;
-    /** The Project's console/network capture config; absent ⇒ default-on (#138). */
-    readonly capture?: CaptureConfig;
-}
-/** Join an API base URL with the boot path, tolerating a trailing slash. */
-export declare function bootEndpoint(apiUrl: string): string;
-/**
- * Ask ingest whether a submission would be accepted for this key / origin / Gate.
- * Resolves to the boot answer, or `null` when Fixback could not be reached, the
- * key was refused, or the response was not a boot answer. It never throws: any
- * non-answer is treated by the caller as "do not show the launcher", so a Fixback
- * outage stays invisible to the host page (ticket #47: "fails quietly").
- *
- * The browser attaches the `Origin` header itself on this cross-origin request —
- * the server reads it to decide `originAllowed` — so the SDK neither sets nor
- * needs to set it. `fetchImpl` is injectable purely so the boot call is testable.
- */
-export declare function requestBoot(apiUrl: string, request: BootRequest, fetchImpl?: typeof fetch): Promise<BootAnswer | null>;

package/dist/breadcrumbs.d.ts

@@ -1,448 +0,0 @@
-/**
- * The thin trace **breadcrumb ring buffer** and its capture instrumentation
- * (spec 0003 §C; research `sentry-error-capture-findings.md` §7.5).
- *
- * A fixed-size FIFO buffer of the most recent activity — console, navigation,
- * network metadata, masked user actions, and the failing error — that rides on a
- * report as Evidence. It is trimmed exactly like Sentry (`crumbs.slice(-N)`),
- * defaults to a deliberately thin `N ≈ 30` because it ships on **every** payload,
- * and takes an optional age cap. A `beforeBreadcrumb(crumb) => crumb | null`
- * filter lets a Project mute or edit crumbs before they enter the buffer.
- *
- * Everything private is kept out **at the source**: `ui.input` records that an
- * input changed, never its value; `fetch`/`xhr` crumbs carry method + URL +
- * status only, **never** bodies; URLs are scrubbed as the crumb is built. The
- * `beforeSend` choke point (`scrub.ts`) is the final gate over the whole report.
- *
- * The SDK stays dependency-free and must never throw into the host page, so every
- * instrumentation hook is wrapped: a capture failure is swallowed and the original
- * behaviour (the real `console`, `fetch`, navigation) always runs.
- */
-/** Console-style severity a `console` crumb records. */
-export type BreadcrumbLevel = "log" | "info" | "warn" | "error" | "assert" | "debug";
-/** The kind of activity a crumb records. */
-export type BreadcrumbCategory = "console" | "navigation" | "fetch" | "xhr" | "beacon" | "ui.click" | "ui.input" | "error";
-/**
- * Which browser API issued a captured network request (spec #122 §D, ticket #139).
- * Every network crumb's `category` is one of these too, so a stream router and the
- * read model agree on what is a network entry.
- */
-export type NetworkApi = "fetch" | "xhr" | "beacon";
-/**
- * A network request's failure classification (spec #122 §D, ticket #139). `ok` and
- * the HTTP status classes come from a settled response; `network-error` / `timeout`
- * / `aborted` from how a request failed; `opaque-cors` from a cross-origin response
- * whose status is unreadable. The Network tab flags every non-`ok` outcome.
- */
-export type NetworkOutcome = "ok" | "http-4xx" | "http-5xx" | "network-error" | "timeout" | "aborted" | "opaque-cors";
-/**
- * A crumb's structured detail. Deliberately narrow: there is **no** field for a
- * request/response body or an input value, so those can never be recorded.
- */
-export interface BreadcrumbData {
-    readonly url?: string;
-    readonly method?: string;
-    readonly status?: number;
-    /** A masked CSS selector for a `ui.*` target — never its text or value. */
-    readonly target?: string;
-    readonly from?: string;
-    readonly to?: string;
-    readonly errorType?: string;
-}
-/**
- * The type tag on a structured console argument (spec #122 §C, decision D7). A
- * console call's arguments are preserved **type-tagged** rather than flattened to a
- * string, so an object/array argument can be inspected in the Console tab rather
- * than read as `[object Object]`: `string`/`number`/`bool`/`null` carry the value
- * directly, `json` a depth-/byte-capped JSON-safe clone, and `error` an Error's
- * `{ name, message, stack }`.
- */
-export type ConsoleArgType = "string" | "number" | "bool" | "null" | "json" | "error";
-/**
- * One structured console argument (spec #122 §C): a type tag plus a JSON-safe value.
- * `v` is always serializable — a `json` arg is depth-, breadth-, and string-capped at
- * assembly, and exotic values (bigint, symbol, function, circular refs) are rendered
- * to safe text — so a console crumb can never carry an unserializable or unbounded
- * value onto the wire.
- */
-export interface ConsoleArg {
-    readonly t: ConsoleArgType;
-    readonly v: unknown;
-}
-/** A `file:line` source location (spec #122 §C) — where a console call was made. */
-export interface SourceLocation {
-    readonly file: string;
-    readonly line: number;
-}
-/**
- * One entry in a trace stream. Alongside its semantic fields every entry carries a
- * stable {@link id} and a high-res monotonic {@link mono} timestamp — both stamped
- * by the buffer on `add` — so entries from the three independent streams order and
- * cross-link exactly (spec #122 §B, decision D9). `timestamp` stays epoch ms.
- */
-export interface Breadcrumb {
-    readonly category: BreadcrumbCategory;
-    readonly message?: string;
-    readonly level?: BreadcrumbLevel;
-    /** Epoch milliseconds when the crumb was recorded. */
-    readonly timestamp: number;
-    /** A stable id, unique within the buffer — assigned on `add` when not already set. */
-    readonly id?: string;
-    /** A high-res monotonic timestamp (`performance.now()`) — assigned on `add`. */
-    readonly mono?: number;
-    readonly data?: BreadcrumbData;
-    /**
-     * For a `console` crumb (spec #122 §C): the call's arguments preserved as
-     * structured, type-tagged values (see {@link ConsoleArg}), so the Console tab can
-     * render each argument expandably instead of a flattened string. `message` stays
-     * the one-line preview. Absent on non-console crumbs.
-     */
-    readonly args?: readonly ConsoleArg[];
-    /**
-     * For a `console` crumb (spec #122 §C): the `file:line` the call was made from,
-     * parsed best-effort from the call stack. Captured only for the levels that keep a
-     * source — `warn`/`error`/`assert` (ticket #159; see {@link SOURCE_CAPTURE_LEVELS}) —
-     * and only when the stack yields a usable location; a chatty app's `log`/`info`/`debug`
-     * omit it so the hot-page capture cost stays low. Absent on non-console crumbs.
-     */
-    readonly source?: SourceLocation;
-    /**
-     * For an auto-captured `error` crumb only (spec #122 §F): the ids of the entries
-     * immediately preceding the throw — a causal pointer into the same trace, so a
-     * machine-filed crash names its lead-up. Absent on every other crumb.
-     */
-    readonly causedBy?: readonly string[];
-    /**
-     * For a network crumb (`fetch` / `xhr` / `beacon`) — spec #122 §D, ticket #139.
-     * The rich request metadata the Network tab renders, lifted to the top level (the
-     * console-enrichment precedent) so the read model shapes each into a
-     * `NetworkTraceEntry`. **No field carries a request/response body or an arbitrary
-     * header** — `respSize` derives from the `content-length` response header only and
-     * `contentType` from `content-type`; nothing else is read. Absent on every other crumb.
-     */
-    readonly api?: NetworkApi;
-    /** The request method (network crumb) — e.g. `GET`, `POST`. */
-    readonly method?: string;
-    /** The scrubbed request URL (network crumb) — query dropped, path PII redacted. */
-    readonly url?: string;
-    /** The final HTTP status (network crumb), when one was known; absent on a network error/beacon. */
-    readonly status?: number;
-    /** The HTTP status text (network crumb), when the response carried one. */
-    readonly statusText?: string;
-    /** Wall-clock duration of the request in ms (network crumb) — a `performance.now()` delta. */
-    readonly durationMs?: number;
-    /** Request body size in bytes (network crumb) — only when trivially known (string/Blob/ArrayBuffer), never by reading a stream. */
-    readonly reqSize?: number;
-    /** Response body size in bytes (network crumb) — from the `content-length` response header only. */
-    readonly respSize?: number;
-    /** Response content type (network crumb) — the `content-type` header's media type. */
-    readonly contentType?: string;
-    /** The request's failure classification (network crumb) — see {@link NetworkOutcome}. */
-    readonly outcome?: NetworkOutcome;
-}
-/**
- * The three independent trace streams (spec #122 §A, decision D6). Each is its own
- * FIFO ring with its own size budget, so a chatty stream can't evict another's
- * lead-up. Every {@link BreadcrumbCategory} maps to exactly one stream via
- * {@link streamOf}.
- */
-export type TraceStream = "network" | "console" | "breadcrumbs";
-/**
- * Per-stream ring budgets — starting points from the grill (D6): network is the
- * chattiest, breadcrumbs the sparsest. Per-project tunable, never frozen.
- */
-export declare const DEFAULT_STREAM_BUDGETS: Readonly<Record<TraceStream, number>>;
-/**
- * The shared age cap (spec #122 §A): entries older than this are pruned from every
- * stream, whichever trims first. ~3 minutes and — unlike the thin buffer's
- * off-by-default cap — **on** by default, so an idle tab never ships stale context.
- */
-export declare const DEFAULT_MAX_AGE_MS: number;
-/**
- * Console levels captured by default (spec #122 §C, decision D7): **all** of them, so
- * the Console tab is a real console and not just an error log. Eviction priority (not
- * capture) is what keeps a chatty app's `log`/`info`/`debug` from burying the signal —
- * see {@link PINNED_CONSOLE_LEVELS}.
- */
-export declare const DEFAULT_CONSOLE_LEVELS: readonly BreadcrumbLevel[];
-/**
- * The console levels **pinned** against eviction (spec #122 §C, decision D7). When the
- * console stream overflows its budget, `warn`/`error`/`assert` are retained ahead of
- * `log`/`info`/`debug`, so an error is never evicted by a burst of chatter — the
- * low-priority levels fill the remainder and are dropped first.
- */
-export declare const PINNED_CONSOLE_LEVELS: readonly BreadcrumbLevel[];
-/**
- * The console levels for which `source` (`file:line`) is captured (ticket #159).
- *
- * Capturing a call site constructs a `new Error()` to read its stack on **every** console
- * call — a measurable hot-page cost when a chatty app logs in a tight loop (spec #122's
- * "hot-page performance budget" open question, handed onward from the grill). The
- * spec-sanctioned mitigation (decision D7) narrows source capture to the **levels that
- * matter for debugging** — the same `warn`/`error`/`assert` that are pinned against
- * eviction — so `log`/`info`/`debug` pay no per-call stack cost and simply omit `source`.
- * Full-fidelity `source` is preserved exactly where it earns its keep: on warnings,
- * errors, and failed assertions. Per-project tunability of this set is future work; today
- * it deliberately mirrors {@link PINNED_CONSOLE_LEVELS} so "what survives eviction" and
- * "what carries a call site" stay one idea.
- */
-export declare const SOURCE_CAPTURE_LEVELS: readonly BreadcrumbLevel[];
-/**
- * Which stream a crumb's category belongs to (spec #122 §A). Network APIs
- * (`fetch` / `xhr` / `beacon`) form the network stream, `console` its own, and
- * everything else (navigation, masked UI events, the failing error) breadcrumbs.
- */
-export declare function streamOf(category: string): TraceStream;
-/** Filters or edits each crumb before it enters the buffer; `null` drops it. */
-export type BeforeBreadcrumb = (crumb: Breadcrumb) => Breadcrumb | null;
-/** Configuration for {@link createBreadcrumbBuffer}. All values are optional. */
-export interface BreadcrumbBufferConfig {
-    /**
-     * Per-stream size budgets (oldest drop, independently per stream). Any stream
-     * omitted falls back to {@link DEFAULT_STREAM_BUDGETS}.
-     */
-    readonly budgets?: Partial<Record<TraceStream, number>>;
-    /**
-     * Shared age cap in ms: entries older than this are dropped from every stream.
-     * Defaults to {@link DEFAULT_MAX_AGE_MS} (on); pass `0` (or a non-positive value)
-     * to disable age pruning.
-     */
-    readonly maxAgeMs?: number;
-    /** A per-crumb filter (mute a category, edit, or drop by returning `null`). */
-    readonly beforeBreadcrumb?: BeforeBreadcrumb | null;
-    /** Epoch clock source, injectable for tests. Defaults to `Date.now`. */
-    readonly now?: () => number;
-    /** High-res monotonic clock, injectable for tests. Defaults to `performance.now`. */
-    readonly mono?: () => number;
-    /** Stable id generator, injectable for tests. Defaults to a per-buffer sequence. */
-    readonly nextId?: () => string;
-}
-/** A live trace buffer. */
-export interface BreadcrumbBuffer {
-    /** Record a crumb (subject to `beforeBreadcrumb`, id/mono stamping, size, and age trimming). */
-    add(crumb: Breadcrumb): void;
-    /** The current crumbs, merged across streams and ordered in time — a fresh array. */
-    snapshot(): Breadcrumb[];
-    /** Drop every crumb. */
-    clear(): void;
-}
-/**
- * Create the per-stream trace buffer (spec #122 §A/§B). It holds **three
- * independent FIFO rings** — `network`, `console`, `breadcrumbs` — each trimmed to
- * its own budget so a chatty stream never evicts another's lead-up, plus a shared
- * age cap. On `add`, a crumb passes through `beforeBreadcrumb`, is stamped with a
- * stable `id` and a high-res `mono` timestamp (and an epoch `timestamp` if it has
- * none), routed to its stream, then that stream is pruned by age and trimmed to its
- * budget. `snapshot` prunes by age again, then merges the three streams into one
- * `mono`-ordered array for transport — so the wire keeps its single `trace` field.
- */
-export declare function createBreadcrumbBuffer(config?: BreadcrumbBufferConfig): BreadcrumbBuffer;
-/**
- * Longest scrubbed URL kept on a crumb (spec #122 §F): capped at assembly so an
- * over-long URL is truncated, never dropped and never allowed to bloat a report.
- */
-export declare const MAX_URL_LENGTH = 2048;
-/**
- * Structured console argument caps (spec #122 §C/§F), all applied **at assembly** so a
- * single console crumb can never bloat a report:
- * - {@link MAX_ARG_DEPTH} bounds how deep a `json` argument is cloned (deeper nodes
- *   collapse to an `[Object]`/`[Array]` marker);
- * - {@link MAX_ARG_ITEMS} bounds how many keys/elements are kept at each level;
- * - {@link MAX_ARG_STRING_LENGTH} truncates a single over-long string value;
- * - {@link MAX_CONSOLE_ARGS_BYTES} bounds the serialized size of the whole args array
- *   (trailing args are dropped to fit), kept well under ingest's per-entry byte cap.
- */
-export declare const MAX_ARG_DEPTH = 4;
-export declare const MAX_ARG_ITEMS = 100;
-export declare const MAX_ARG_STRING_LENGTH = 1024;
-export declare const MAX_CONSOLE_ARGS_BYTES = 4096;
-/** Classify one console argument into a type-tagged {@link ConsoleArg} (spec #122 §C). */
-export declare function toConsoleArg(value: unknown): ConsoleArg;
-/**
- * A `console` crumb from a captured call's level and arguments (spec #122 §C). The
- * `message` is the one-line preview (flattened, truncated); `args` preserves each
- * argument as a structured, type-tagged, size-capped value so the Console tab can
- * render objects/errors expandably; `source` is the best-effort `file:line`, attached
- * only when the stack yielded one. Args are omitted entirely for a no-argument call.
- */
-export declare function consoleCrumb(level: BreadcrumbLevel, args: readonly unknown[], timestamp: number, source?: SourceLocation): Breadcrumb;
-/** A `navigation` crumb; both URLs are scrubbed and length-capped as the crumb is built. */
-export declare function navigationCrumb(from: string, to: string, timestamp: number): Breadcrumb;
-/**
- * Classify an HTTP status into a {@link NetworkOutcome} (spec #122 §D). A missing or
- * `0` status is a `network-error` (a request that never got a response); otherwise
- * the 4xx/5xx classes flag failures and everything else is `ok`. Used both as the
- * fallback outcome and by the thin {@link fetchCrumb} / {@link xhrCrumb} builders.
- */
-export declare function outcomeFromStatus(status: number | undefined): NetworkOutcome;
-/**
- * The trivially-known byte size of a request body (spec #122 §D) — a string's UTF-8
- * length, a `Blob`'s `.size`, or an `ArrayBuffer`/typed-array `.byteLength`. Anything
- * that would require **reading** the body (a `ReadableStream`, `FormData`, a `Request`
- * with a stream body) returns `undefined` — the "never read the body" line holds.
- */
-export declare function trivialBodySize(body: unknown): number | undefined;
-/** Parse a `content-length` header into a non-negative byte count, or `undefined`. */
-export declare function parseContentLength(value: string | null | undefined): number | undefined;
-/** The media type from a `content-type` header (the part before any `;` parameters). */
-export declare function contentTypeOf(value: string | null | undefined): string | undefined;
-/** The rich metadata a network crumb records (spec #122 §D) — never a body or header. */
-export interface NetworkCrumbInput {
-    readonly api: NetworkApi;
-    readonly method: string;
-    /** The raw request URL — scrubbed (query dropped, path PII redacted) as the crumb is built. */
-    readonly url: string;
-    readonly status?: number;
-    readonly statusText?: string;
-    readonly durationMs?: number;
-    readonly reqSize?: number;
-    readonly respSize?: number;
-    readonly contentType?: string;
-    readonly outcome: NetworkOutcome;
-}
-/**
- * A network crumb (`fetch` / `xhr` / `beacon`) with the rich, metadata-only fields
- * the Network tab renders (spec #122 §D, ticket #139): api, method, scrubbed URL,
- * status + statusText, duration, request/response sizes, content type, and a failure
- * outcome. The URL is scrubbed and length-capped at assembly. The shape has **no field
- * for a request/response body or an arbitrary header**, so neither can ever be
- * recorded; only a positive status, and fields that were actually supplied, ride along.
- */
-export declare function networkCrumb(input: NetworkCrumbInput, timestamp: number): Breadcrumb;
-/**
- * A thin `fetch` crumb from method + URL + status (outcome derived from the status).
- * The instrumentation uses {@link networkCrumb} directly to carry the full metadata;
- * this convenience builder seeds a network crumb from a status alone.
- */
-export declare function fetchCrumb(method: string, url: string, status: number | undefined, timestamp: number): Breadcrumb;
-/** A thin `xhr` crumb from method + URL + status (outcome derived from the status). */
-export declare function xhrCrumb(method: string, url: string, status: number | undefined, timestamp: number): Breadcrumb;
-/** A `ui.click` crumb: a masked target selector only — no text or value. */
-export declare function clickCrumb(target: Element, timestamp: number): Breadcrumb;
-/**
- * A `ui.input` crumb: records **that** an input changed and which field, never
- * the value typed into it. The `target` element's `.value` is never read.
- */
-export declare function inputCrumb(target: Element, timestamp: number): Breadcrumb;
-/**
- * An `error` crumb for the failing exception or rejection that ends the trace. When
- * `causedBy` is given (an auto-captured error), it rides on the crumb as the causal
- * pointer to the ids of the entries immediately preceding the throw (spec #122 §F).
- */
-export declare function errorCrumb(error: unknown, timestamp: number, causedBy?: readonly string[]): Breadcrumb;
-/** Detaches an installed instrumentation, restoring the original behaviour. */
-export type Teardown = () => void;
-type AnyFn = (...args: unknown[]) => unknown;
-type ConsoleLike = Partial<Record<BreadcrumbLevel, AnyFn>>;
-type FetchFn = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
-interface HistoryLike {
-    pushState(data: unknown, unused: string, url?: string | URL | null): void;
-    replaceState(data: unknown, unused: string, url?: string | URL | null): void;
-}
-interface XhrInstance {
-    status: number;
-    statusText?: string;
-    open(method: string, url: string | URL, ...rest: unknown[]): void;
-    send(body?: unknown): void;
-    getResponseHeader?(name: string): string | null;
-    addEventListener(type: string, listener: () => void): void;
-    removeEventListener(type: string, listener: () => void): void;
-}
-interface XhrConstructor {
-    new (): XhrInstance;
-    prototype: XhrInstance;
-}
-/** The `navigator.sendBeacon` surface the beacon instrumentation wraps. */
-export interface BeaconNavigator {
-    sendBeacon?: (url: string | URL, data?: BodyInit | null) => boolean;
-}
-/** The structural window surface the instrumentation reaches into. */
-export interface InstrumentWindow {
-    fetch?: FetchFn;
-    history?: HistoryLike;
-    location?: {
-        href: string;
-    };
-    XMLHttpRequest?: XhrConstructor;
-    navigator?: BeaconNavigator;
-    addEventListener(type: string, listener: (event: Event) => void, options?: boolean | AddEventListenerOptions): void;
-    removeEventListener(type: string, listener: (event: Event) => void, options?: boolean | EventListenerOptions): void;
-}
-/** Options for {@link instrumentBreadcrumbs} and the individual installers. */
-export interface InstrumentOptions {
-    readonly win?: InstrumentWindow;
-    readonly doc?: Document;
-    readonly consoleObj?: ConsoleLike;
-    readonly consoleLevels?: readonly BreadcrumbLevel[];
-    /** Skip URLs (e.g. the SDK's own ingest calls) so they never become crumbs. */
-    readonly ignoreUrl?: (url: string) => boolean;
-    readonly now?: () => number;
-    /**
-     * High-res monotonic clock (spec #122 §D) — used to measure a request's duration as
-     * a delta around the wrapped call. Defaults to `performance.now`; injectable for tests.
-     */
-    readonly mono?: () => number;
-    /**
-     * Whether to instrument the **console** stream (spec #122 §L; ticket #138).
-     * Defaults to `true`; pass `false` and `console` is never wrapped, so no console
-     * entry is ever recorded — the per-project toggle stops the stream at its source.
-     */
-    readonly captureConsole?: boolean;
-    /**
-     * Whether to instrument the **network** stream — `fetch` and `XHR` (spec #122 §L;
-     * ticket #138). Defaults to `true`; pass `false` and neither is wrapped, so no
-     * network entry is ever recorded. Navigation and masked UI events are unaffected.
-     */
-    readonly captureNetwork?: boolean;
-}
-/**
- * The best-effort `file:line` a console call was made from (spec #122 §C). Parses the
- * frames of a stack, skipping `skipFrames` leading (SDK-internal) frames so the source
- * points at the host code that called `console.*`. Returns `undefined` when no frame
- * yields a usable location — the crumb then simply omits `source`.
- */
-export declare function sourceFromStack(stack: string | undefined, skipFrames?: number): SourceLocation | undefined;
-/** Wrap `console` methods so calls at the captured levels become crumbs. */
-export declare function instrumentConsole(buffer: BreadcrumbBuffer, consoleObj: ConsoleLike, levels: readonly BreadcrumbLevel[], now: () => number): Teardown;
-/**
- * Wrap `fetch` to record a rich network crumb on settlement (spec #122 §D, ticket
- * #139): method, scrubbed URL, status + statusText, a `performance.now()` duration,
- * request size (only when the body is trivially sized), response size (from the
- * `content-length` header only), content type, and a failure outcome. The **original**
- * outcome is returned untouched — the response is passed through **without its body
- * being read** (only two metadata headers are inspected), and a rejection is re-thrown
- * so the caller's `unhandledrejection` semantics are preserved.
- */
-export declare function instrumentFetch(buffer: BreadcrumbBuffer, win: InstrumentWindow, ignoreUrl: (url: string) => boolean, now: () => number, mono?: () => number): Teardown;
-/**
- * Patch `XMLHttpRequest` to record a rich network crumb when a request settles (spec
- * #122 §D, ticket #139): method, scrubbed URL, status + statusText, a `performance.now()`
- * duration, request size (only when the body is trivially sized), response size (from
- * the `content-length` header only), content type, and a failure outcome distinguished
- * by which terminal event fired (`error` / `timeout` / `abort` / `load`). The `send`
- * body argument is **never read for content** — only its trivially-known size — so a body
- * can never reach the buffer.
- */
-export declare function instrumentXhr(buffer: BreadcrumbBuffer, win: InstrumentWindow, ignoreUrl: (url: string) => boolean, now: () => number, mono?: () => number): Teardown;
-/**
- * Wrap `navigator.sendBeacon` to record a network crumb for each beacon (spec #122 §D,
- * ticket #139). `sendBeacon` is fire-and-forget with a **synchronous boolean** return —
- * `true` when the user agent queued the beacon, `false` when it declined — so wrapping
- * must return that boolean unchanged: the original is called first and its result both
- * classifies the crumb (`ok` / `network-error`) and is returned to the caller. Only the
- * URL and the trivially-known request size are recorded (no response exists to read);
- * capture failure is swallowed and the boolean still returned, and if the original itself
- * throws we record best-effort and re-throw so the contract is preserved exactly.
- */
-export declare function instrumentBeacon(buffer: BreadcrumbBuffer, win: InstrumentWindow, ignoreUrl: (url: string) => boolean, now: () => number): Teardown;
-/** Record a `navigation` crumb on `pushState`/`replaceState`/pop/hash changes. */
-export declare function instrumentNavigation(buffer: BreadcrumbBuffer, win: InstrumentWindow, now: () => number): Teardown;
-/** Listen (capture-phase) for clicks and input changes as masked crumbs. */
-export declare function instrumentUiEvents(buffer: BreadcrumbBuffer, doc: Document, now: () => number): Teardown;
-/**
- * Install every capture hook onto a window/document and return a single teardown
- * that removes them all. Each hook is independent and defensive: a failure in one
- * never blocks the others, and none can throw into the host page.
- */
-export declare function instrumentBreadcrumbs(buffer: BreadcrumbBuffer, options?: InstrumentOptions): Teardown;
-export {};