@hexclave/next 1.0.10 → 1.0.12

package/dist/lib/hexclave-app/apps/implementations/common.js

@@ -17,7 +17,7 @@ let ____________generated_env_js = require("../../../../generated/env.js");
 let ______url_targets_js = require("../../url-targets.js");
 
 //#region src/lib/hexclave-app/apps/implementations/common.ts
-const clientVersion = "js @hexclave/next@1.0.10";
+const clientVersion = "js @hexclave/next@1.0.12";
 if (clientVersion.startsWith("STACK_COMPILE_TIME")) throw new _hexclave_shared_dist_utils_errors.HexclaveAssertionError("Client version was not replaced. Something went wrong during build!");
 const replaceHexclavePortPrefix = (input) => {
 	if (!input) return input;

package/dist/lib/hexclave-app/apps/implementations/event-tracker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event-tracker.d.ts","names":[],"sources":["../../../../../src/lib/hexclave-app/apps/implementations/event-tracker.ts"],"mappings":";;;KAiCY,gBAAA;EACV,SAAA;EACA,SAAA,GAAY,IAAA,UAAc,OAAA;IAAW,SAAA;EAAA,MAAyB,OAAA,CAAQ,MAAA,CAAO,QAAA,EAAU,KAAA;AAAA;AAAA,cAS5E,YAAA;EAAA,QACH,QAAA;EAAA,QACA,UAAA;EAAA,QACA,gBAAA;EAAA,QACA,WAAA;EAAA,QACA,OAAA;EAAA,QACA,YAAA;EAAA,QACA,QAAA;EAAA,iBACS,uBAAA;EAAA,iBACA,KAAA;EAAA,QAET,kBAAA;EAAA,QACA,qBAAA;cAEI,IAAA,EAAM,gBAAA;EAKlB,KAAA,CAAA;EAqBA,IAAA,CAAA;EAUA,WAAA,CAAA;EAAA,QAKQ,UAAA;EAAA,QAQA,gBAAA;EAAA,QA2BA,qBAAA;EAAA,iBA4BS,WAAA;EAAA,QAIT,cAAA;EAAA,QA0BA,sBAAA;EAAA,iBAWS,eAAA;EAAA,QAsBT,kBAAA;EAAA,iBAIS,WAAA;EAAA,QAIT,uBAAA;EAAA,QASA,SAAA;EAAA,QA0BM,MAAA;EAAA,QA+BN,KAAA;AAAA"}
+{"version":3,"file":"event-tracker.d.ts","names":[],"sources":["../../../../../src/lib/hexclave-app/apps/implementations/event-tracker.ts"],"mappings":";;;KAiCY,gBAAA;EACV,SAAA;EACA,SAAA,GAAY,IAAA,UAAc,OAAA;IAAW,SAAA;EAAA,MAAyB,OAAA,CAAQ,MAAA,CAAO,QAAA,EAAU,KAAA;AAAA;AAAA,cAS5E,YAAA;EAAA,QACH,QAAA;EAAA,QACA,UAAA;EAAA,QACA,gBAAA;EAAA,QACA,WAAA;EAAA,QACA,OAAA;EAAA,QACA,YAAA;EAAA,QACA,QAAA;EAAA,iBACS,uBAAA;EAAA,iBACA,KAAA;EAAA,QAET,kBAAA;EAAA,QACA,qBAAA;cAEI,IAAA,EAAM,gBAAA;EAKlB,KAAA,CAAA;EAqBA,IAAA,CAAA;EAUA,WAAA,CAAA;EAAA,QAKQ,UAAA;EAAA,QAQA,gBAAA;EAAA,QA4BA,qBAAA;EAAA,iBA4BS,WAAA;EAAA,QAIT,cAAA;EAAA,QA0BA,sBAAA;EAAA,iBAWS,eAAA;EAAA,QAsBT,kBAAA;EAAA,iBAIS,WAAA;EAAA,QAIT,uBAAA;EAAA,QASA,SAAA;EAAA,QA0BM,MAAA;EAAA,QA+BN,KAAA;AAAA"}

package/dist/lib/hexclave-app/apps/implementations/event-tracker.js

@@ -104,7 +104,8 @@ var EventTracker = class {
 				viewport_width: window.innerWidth,
 				viewport_height: window.innerHeight,
 				screen_width: screenObject.width,
-				screen_height: screenObject.height
+				screen_height: screenObject.height,
+				user_agent: typeof navigator !== "undefined" ? navigator.userAgent : null
 			}
 		});
 	}

package/dist/lib/hexclave-app/apps/implementations/event-tracker.js.map

@@ -1 +1 @@
-{"version":3,"file":"event-tracker.js","names":[],"sources":["../../../../../src/lib/hexclave-app/apps/implementations/event-tracker.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { isBrowserLike } from \"@hexclave/shared/dist/utils/env\";\nimport { runAsynchronously } from \"@hexclave/shared/dist/utils/promises\";\nimport { Result } from \"@hexclave/shared/dist/utils/results\";\nimport { generateUuid } from \"./session-replay\";\n\nconst FLUSH_INTERVAL_MS = 10_000;\nconst MAX_EVENTS_PER_BATCH = 50;\nconst MAX_APPROX_BYTES_PER_BATCH = 64_000;\n\nfunction hasScreenDimensions(value: unknown): value is { width: number, height: number } {\n  if (value == null || typeof value !== \"object\") {\n    return false;\n  }\n  if (!(\"width\" in value) || !(\"height\" in value)) {\n    return false;\n  }\n  return typeof value.width === \"number\" && typeof value.height === \"number\";\n}\n\nfunction hasHistoryMethods(value: unknown): value is { pushState: History[\"pushState\"], replaceState: History[\"replaceState\"] } {\n  if (value == null || typeof value !== \"object\") {\n    return false;\n  }\n  if (!(\"pushState\" in value) || !(\"replaceState\" in value)) {\n    return false;\n  }\n  return typeof value.pushState === \"function\" && typeof value.replaceState === \"function\";\n}\n\nexport type EventTrackerDeps = {\n  projectId: string,\n  sendBatch: (body: string, options: { keepalive: boolean }) => Promise<Result<Response, Error>>,\n};\n\ntype TrackedEvent = {\n  event_type: \"$page-view\" | \"$click\",\n  event_at_ms: number,\n  data: Record<string, unknown>,\n};\n\nexport class EventTracker {\n  private _started = false;\n  private _cancelled = false;\n  private _detachListeners: (() => void) | null = null;\n  private _flushTimer: ReturnType<typeof setInterval> | null = null;\n  private _events: TrackedEvent[] = [];\n  private _approxBytes = 0;\n  private _lastUrl: string | null = null;\n  private readonly _sessionReplaySegmentId: string;\n  private readonly _deps: EventTrackerDeps;\n\n  private _originalPushState: History[\"pushState\"] | null = null;\n  private _originalReplaceState: History[\"replaceState\"] | null = null;\n\n  constructor(deps: EventTrackerDeps) {\n    this._deps = deps;\n    this._sessionReplaySegmentId = generateUuid();\n  }\n\n  start() {\n    if (this._started) return;\n    if (!isBrowserLike()) return;\n    if (\n      typeof window.addEventListener !== \"function\"\n      || typeof window.removeEventListener !== \"function\"\n      || typeof document.addEventListener !== \"function\"\n      || typeof document.removeEventListener !== \"function\"\n      || !hasScreenDimensions(window.screen)\n    ) {\n      return;\n    }\n    this._started = true;\n\n    this._setupPageViewCapture();\n    this._setupClickCapture();\n    this._setupPageHideListeners();\n\n    this._flushTimer = setInterval(() => this._tick(), FLUSH_INTERVAL_MS);\n  }\n\n  stop() {\n    this._cancelled = true;\n    if (this._flushTimer !== null) {\n      clearInterval(this._flushTimer);\n      this._flushTimer = null;\n    }\n    runAsynchronously(() => this._flush({ keepalive: true }));\n    this._teardown();\n  }\n\n  clearBuffer() {\n    this._events = [];\n    this._approxBytes = 0;\n  }\n\n  private _pushEvent(event: TrackedEvent) {\n    this._events.push(event);\n    this._approxBytes += JSON.stringify(event).length;\n    if (this._events.length >= MAX_EVENTS_PER_BATCH || this._approxBytes >= MAX_APPROX_BYTES_PER_BATCH) {\n      runAsynchronously(() => this._flush({ keepalive: false }));\n    }\n  }\n\n  private _capturePageView(entryType: \"initial\" | \"push\" | \"replace\" | \"pop\") {\n    const screenObject = window.screen;\n    if (!hasScreenDimensions(screenObject)) {\n      return;\n    }\n\n    const url = window.location.href;\n    if (url === this._lastUrl && entryType !== \"initial\") return;\n    this._lastUrl = url;\n\n    this._pushEvent({\n      event_type: \"$page-view\",\n      event_at_ms: Date.now(),\n      data: {\n        url,\n        path: window.location.pathname,\n        referrer: document.referrer,\n        title: document.title,\n        entry_type: entryType,\n        viewport_width: window.innerWidth,\n        viewport_height: window.innerHeight,\n        screen_width: screenObject.width,\n        screen_height: screenObject.height,\n      },\n    });\n  }\n\n  private _setupPageViewCapture() {\n    // Fire initial page-view\n    this._capturePageView(\"initial\");\n    const historyObject = window.history;\n    if (!hasHistoryMethods(historyObject)) {\n      return;\n    }\n    const originalPushState = historyObject.pushState;\n    const originalReplaceState = historyObject.replaceState;\n\n    // Monkey-patch history.pushState\n    this._originalPushState = (...args: Parameters<History[\"pushState\"]>) => originalPushState.apply(historyObject, args);\n    historyObject.pushState = (...args: Parameters<History[\"pushState\"]>) => {\n      this._originalPushState!(...args);\n      this._capturePageView(\"push\");\n    };\n\n    // Monkey-patch history.replaceState\n    this._originalReplaceState = (...args: Parameters<History[\"replaceState\"]>) => originalReplaceState.apply(historyObject, args);\n    historyObject.replaceState = (...args: Parameters<History[\"replaceState\"]>) => {\n      this._originalReplaceState!(...args);\n      this._capturePageView(\"replace\");\n    };\n\n    // Listen for popstate (back/forward navigation)\n    window.addEventListener(\"popstate\", this._onPopState);\n  }\n\n  private readonly _onPopState = () => {\n    this._capturePageView(\"pop\");\n  };\n\n  private _buildSelector(element: Element): string {\n    const parts: string[] = [];\n    let current: Element | null = element;\n    let depth = 0;\n\n    while (current && depth < 5) {\n      let part = current.tagName.toLowerCase();\n      if (current.id) {\n        part += `#${current.id}`;\n        parts.unshift(part);\n        break;\n      }\n      if (current.className && typeof current.className === \"string\") {\n        const classes = current.className.trim().split(/\\s+/).filter(Boolean);\n        if (classes.length > 0) {\n          part += `.${classes.join(\".\")}`;\n        }\n      }\n      parts.unshift(part);\n      current = current.parentElement;\n      depth++;\n    }\n\n    return parts.join(\" > \");\n  }\n\n  private _findNearestAnchorHref(element: Element): string | null {\n    let current: Element | null = element;\n    while (current) {\n      if (current.tagName === \"A\" && current.hasAttribute(\"href\")) {\n        return current.getAttribute(\"href\");\n      }\n      current = current.parentElement;\n    }\n    return null;\n  }\n\n  private readonly _onClickCapture = (event: MouseEvent) => {\n    const target = event.target;\n    if (!(target instanceof Element)) return;\n\n    this._pushEvent({\n      event_type: \"$click\",\n      event_at_ms: Date.now(),\n      data: {\n        tag_name: target.tagName.toLowerCase(),\n        text: target.textContent.trim().substring(0, 200),\n        href: this._findNearestAnchorHref(target),\n        selector: this._buildSelector(target),\n        x: event.clientX,\n        y: event.clientY,\n        page_x: event.pageX,\n        page_y: event.pageY,\n        viewport_width: window.innerWidth,\n        viewport_height: window.innerHeight,\n      },\n    });\n  };\n\n  private _setupClickCapture() {\n    document.addEventListener(\"click\", this._onClickCapture, { capture: true });\n  }\n\n  private readonly _onPageHide = () => {\n    runAsynchronously(() => this._flush({ keepalive: true }));\n  };\n\n  private _setupPageHideListeners() {\n    window.addEventListener(\"pagehide\", this._onPageHide);\n    document.addEventListener(\"visibilitychange\", this._onPageHide);\n    this._detachListeners = () => {\n      window.removeEventListener(\"pagehide\", this._onPageHide);\n      document.removeEventListener(\"visibilitychange\", this._onPageHide);\n    };\n  }\n\n  private _teardown() {\n    if (this._detachListeners) {\n      this._detachListeners();\n      this._detachListeners = null;\n    }\n\n    // Restore history methods\n    const historyObject = window.history;\n    if (hasHistoryMethods(historyObject)) {\n      if (this._originalPushState) {\n        historyObject.pushState = this._originalPushState;\n      }\n      if (this._originalReplaceState) {\n        historyObject.replaceState = this._originalReplaceState;\n      }\n    }\n    this._originalPushState = null;\n    this._originalReplaceState = null;\n\n    window.removeEventListener(\"popstate\", this._onPopState);\n    document.removeEventListener(\"click\", this._onClickCapture, { capture: true });\n\n    this._events = [];\n    this._approxBytes = 0;\n  }\n\n  private async _flush(options: { keepalive: boolean }) {\n    if (this._events.length === 0) return;\n\n    const nowMs = Date.now();\n\n    const batchId = generateUuid();\n    const payload = {\n      session_replay_segment_id: this._sessionReplaySegmentId,\n      batch_id: batchId,\n      sent_at_ms: nowMs,\n      events: this._events,\n    };\n\n    this._events = [];\n    this._approxBytes = 0;\n\n    const res = await this._deps.sendBatch(\n      JSON.stringify(payload),\n      { keepalive: options.keepalive },\n    );\n\n    if (res.status === \"error\") {\n      console.warn(\"EventTracker flush failed:\", res.error);\n      return;\n    }\n\n    if (!res.data.ok) {\n      console.warn(\"EventTracker flush failed:\", res.data.status, await res.data.text());\n    }\n  }\n\n  private _tick() {\n    if (this._cancelled) return;\n    if (this._events.length > 0) {\n      runAsynchronously(() => this._flush({ keepalive: false }));\n    }\n  }\n}\n"],"mappings":";;;;;;;AASA,MAAM,oBAAoB;AAC1B,MAAM,uBAAuB;AAC7B,MAAM,6BAA6B;AAEnC,SAAS,oBAAoB,OAA4D;AACvF,KAAI,SAAS,QAAQ,OAAO,UAAU,SACpC,QAAO;AAET,KAAI,EAAE,WAAW,UAAU,EAAE,YAAY,OACvC,QAAO;AAET,QAAO,OAAO,MAAM,UAAU,YAAY,OAAO,MAAM,WAAW;;AAGpE,SAAS,kBAAkB,OAAqG;AAC9H,KAAI,SAAS,QAAQ,OAAO,UAAU,SACpC,QAAO;AAET,KAAI,EAAE,eAAe,UAAU,EAAE,kBAAkB,OACjD,QAAO;AAET,QAAO,OAAO,MAAM,cAAc,cAAc,OAAO,MAAM,iBAAiB;;AAchF,IAAa,eAAb,MAA0B;CAcxB,YAAY,MAAwB;kBAbjB;oBACE;0BAC2B;qBACa;iBAC3B,EAAE;sBACb;kBACW;4BAIwB;+BACM;2BA0G3B;AACnC,QAAK,iBAAiB,MAAM;;0BAwCM,UAAsB;GACxD,MAAM,SAAS,MAAM;AACrB,OAAI,EAAE,kBAAkB,SAAU;AAElC,QAAK,WAAW;IACd,YAAY;IACZ,aAAa,KAAK,KAAK;IACvB,MAAM;KACJ,UAAU,OAAO,QAAQ,aAAa;KACtC,MAAM,OAAO,YAAY,MAAM,CAAC,UAAU,GAAG,IAAI;KACjD,MAAM,KAAK,uBAAuB,OAAO;KACzC,UAAU,KAAK,eAAe,OAAO;KACrC,GAAG,MAAM;KACT,GAAG,MAAM;KACT,QAAQ,MAAM;KACd,QAAQ,MAAM;KACd,gBAAgB,OAAO;KACvB,iBAAiB,OAAO;KACzB;IACF,CAAC;;2BAOiC;AACnC,qEAAwB,KAAK,OAAO,EAAE,WAAW,MAAM,CAAC,CAAC;;AA3KzD,OAAK,QAAQ;AACb,OAAK,iEAAwC;;CAG/C,QAAQ;AACN,MAAI,KAAK,SAAU;AACnB,MAAI,qDAAgB,CAAE;AACtB,MACE,OAAO,OAAO,qBAAqB,cAChC,OAAO,OAAO,wBAAwB,cACtC,OAAO,SAAS,qBAAqB,cACrC,OAAO,SAAS,wBAAwB,cACxC,CAAC,oBAAoB,OAAO,OAAO,CAEtC;AAEF,OAAK,WAAW;AAEhB,OAAK,uBAAuB;AAC5B,OAAK,oBAAoB;AACzB,OAAK,yBAAyB;AAE9B,OAAK,cAAc,kBAAkB,KAAK,OAAO,EAAE,kBAAkB;;CAGvE,OAAO;AACL,OAAK,aAAa;AAClB,MAAI,KAAK,gBAAgB,MAAM;AAC7B,iBAAc,KAAK,YAAY;AAC/B,QAAK,cAAc;;AAErB,oEAAwB,KAAK,OAAO,EAAE,WAAW,MAAM,CAAC,CAAC;AACzD,OAAK,WAAW;;CAGlB,cAAc;AACZ,OAAK,UAAU,EAAE;AACjB,OAAK,eAAe;;CAGtB,AAAQ,WAAW,OAAqB;AACtC,OAAK,QAAQ,KAAK,MAAM;AACxB,OAAK,gBAAgB,KAAK,UAAU,MAAM,CAAC;AAC3C,MAAI,KAAK,QAAQ,UAAU,wBAAwB,KAAK,gBAAgB,2BACtE,mEAAwB,KAAK,OAAO,EAAE,WAAW,OAAO,CAAC,CAAC;;CAI9D,AAAQ,iBAAiB,WAAmD;EAC1E,MAAM,eAAe,OAAO;AAC5B,MAAI,CAAC,oBAAoB,aAAa,CACpC;EAGF,MAAM,MAAM,OAAO,SAAS;AAC5B,MAAI,QAAQ,KAAK,YAAY,cAAc,UAAW;AACtD,OAAK,WAAW;AAEhB,OAAK,WAAW;GACd,YAAY;GACZ,aAAa,KAAK,KAAK;GACvB,MAAM;IACJ;IACA,MAAM,OAAO,SAAS;IACtB,UAAU,SAAS;IACnB,OAAO,SAAS;IAChB,YAAY;IACZ,gBAAgB,OAAO;IACvB,iBAAiB,OAAO;IACxB,cAAc,aAAa;IAC3B,eAAe,aAAa;IAC7B;GACF,CAAC;;CAGJ,AAAQ,wBAAwB;AAE9B,OAAK,iBAAiB,UAAU;EAChC,MAAM,gBAAgB,OAAO;AAC7B,MAAI,CAAC,kBAAkB,cAAc,CACnC;EAEF,MAAM,oBAAoB,cAAc;EACxC,MAAM,uBAAuB,cAAc;AAG3C,OAAK,sBAAsB,GAAG,SAA2C,kBAAkB,MAAM,eAAe,KAAK;AACrH,gBAAc,aAAa,GAAG,SAA2C;AACvE,QAAK,mBAAoB,GAAG,KAAK;AACjC,QAAK,iBAAiB,OAAO;;AAI/B,OAAK,yBAAyB,GAAG,SAA8C,qBAAqB,MAAM,eAAe,KAAK;AAC9H,gBAAc,gBAAgB,GAAG,SAA8C;AAC7E,QAAK,sBAAuB,GAAG,KAAK;AACpC,QAAK,iBAAiB,UAAU;;AAIlC,SAAO,iBAAiB,YAAY,KAAK,YAAY;;CAOvD,AAAQ,eAAe,SAA0B;EAC/C,MAAM,QAAkB,EAAE;EAC1B,IAAI,UAA0B;EAC9B,IAAI,QAAQ;AAEZ,SAAO,WAAW,QAAQ,GAAG;GAC3B,IAAI,OAAO,QAAQ,QAAQ,aAAa;AACxC,OAAI,QAAQ,IAAI;AACd,YAAQ,IAAI,QAAQ;AACpB,UAAM,QAAQ,KAAK;AACnB;;AAEF,OAAI,QAAQ,aAAa,OAAO,QAAQ,cAAc,UAAU;IAC9D,MAAM,UAAU,QAAQ,UAAU,MAAM,CAAC,MAAM,MAAM,CAAC,OAAO,QAAQ;AACrE,QAAI,QAAQ,SAAS,EACnB,SAAQ,IAAI,QAAQ,KAAK,IAAI;;AAGjC,SAAM,QAAQ,KAAK;AACnB,aAAU,QAAQ;AAClB;;AAGF,SAAO,MAAM,KAAK,MAAM;;CAG1B,AAAQ,uBAAuB,SAAiC;EAC9D,IAAI,UAA0B;AAC9B,SAAO,SAAS;AACd,OAAI,QAAQ,YAAY,OAAO,QAAQ,aAAa,OAAO,CACzD,QAAO,QAAQ,aAAa,OAAO;AAErC,aAAU,QAAQ;;AAEpB,SAAO;;CAyBT,AAAQ,qBAAqB;AAC3B,WAAS,iBAAiB,SAAS,KAAK,iBAAiB,EAAE,SAAS,MAAM,CAAC;;CAO7E,AAAQ,0BAA0B;AAChC,SAAO,iBAAiB,YAAY,KAAK,YAAY;AACrD,WAAS,iBAAiB,oBAAoB,KAAK,YAAY;AAC/D,OAAK,yBAAyB;AAC5B,UAAO,oBAAoB,YAAY,KAAK,YAAY;AACxD,YAAS,oBAAoB,oBAAoB,KAAK,YAAY;;;CAItE,AAAQ,YAAY;AAClB,MAAI,KAAK,kBAAkB;AACzB,QAAK,kBAAkB;AACvB,QAAK,mBAAmB;;EAI1B,MAAM,gBAAgB,OAAO;AAC7B,MAAI,kBAAkB,cAAc,EAAE;AACpC,OAAI,KAAK,mBACP,eAAc,YAAY,KAAK;AAEjC,OAAI,KAAK,sBACP,eAAc,eAAe,KAAK;;AAGtC,OAAK,qBAAqB;AAC1B,OAAK,wBAAwB;AAE7B,SAAO,oBAAoB,YAAY,KAAK,YAAY;AACxD,WAAS,oBAAoB,SAAS,KAAK,iBAAiB,EAAE,SAAS,MAAM,CAAC;AAE9E,OAAK,UAAU,EAAE;AACjB,OAAK,eAAe;;CAGtB,MAAc,OAAO,SAAiC;AACpD,MAAI,KAAK,QAAQ,WAAW,EAAG;EAE/B,MAAM,QAAQ,KAAK,KAAK;EAExB,MAAM,iDAAwB;EAC9B,MAAM,UAAU;GACd,2BAA2B,KAAK;GAChC,UAAU;GACV,YAAY;GACZ,QAAQ,KAAK;GACd;AAED,OAAK,UAAU,EAAE;AACjB,OAAK,eAAe;EAEpB,MAAM,MAAM,MAAM,KAAK,MAAM,UAC3B,KAAK,UAAU,QAAQ,EACvB,EAAE,WAAW,QAAQ,WAAW,CACjC;AAED,MAAI,IAAI,WAAW,SAAS;AAC1B,WAAQ,KAAK,8BAA8B,IAAI,MAAM;AACrD;;AAGF,MAAI,CAAC,IAAI,KAAK,GACZ,SAAQ,KAAK,8BAA8B,IAAI,KAAK,QAAQ,MAAM,IAAI,KAAK,MAAM,CAAC;;CAItF,AAAQ,QAAQ;AACd,MAAI,KAAK,WAAY;AACrB,MAAI,KAAK,QAAQ,SAAS,EACxB,mEAAwB,KAAK,OAAO,EAAE,WAAW,OAAO,CAAC,CAAC"}
+{"version":3,"file":"event-tracker.js","names":[],"sources":["../../../../../src/lib/hexclave-app/apps/implementations/event-tracker.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { isBrowserLike } from \"@hexclave/shared/dist/utils/env\";\nimport { runAsynchronously } from \"@hexclave/shared/dist/utils/promises\";\nimport { Result } from \"@hexclave/shared/dist/utils/results\";\nimport { generateUuid } from \"./session-replay\";\n\nconst FLUSH_INTERVAL_MS = 10_000;\nconst MAX_EVENTS_PER_BATCH = 50;\nconst MAX_APPROX_BYTES_PER_BATCH = 64_000;\n\nfunction hasScreenDimensions(value: unknown): value is { width: number, height: number } {\n  if (value == null || typeof value !== \"object\") {\n    return false;\n  }\n  if (!(\"width\" in value) || !(\"height\" in value)) {\n    return false;\n  }\n  return typeof value.width === \"number\" && typeof value.height === \"number\";\n}\n\nfunction hasHistoryMethods(value: unknown): value is { pushState: History[\"pushState\"], replaceState: History[\"replaceState\"] } {\n  if (value == null || typeof value !== \"object\") {\n    return false;\n  }\n  if (!(\"pushState\" in value) || !(\"replaceState\" in value)) {\n    return false;\n  }\n  return typeof value.pushState === \"function\" && typeof value.replaceState === \"function\";\n}\n\nexport type EventTrackerDeps = {\n  projectId: string,\n  sendBatch: (body: string, options: { keepalive: boolean }) => Promise<Result<Response, Error>>,\n};\n\ntype TrackedEvent = {\n  event_type: \"$page-view\" | \"$click\",\n  event_at_ms: number,\n  data: Record<string, unknown>,\n};\n\nexport class EventTracker {\n  private _started = false;\n  private _cancelled = false;\n  private _detachListeners: (() => void) | null = null;\n  private _flushTimer: ReturnType<typeof setInterval> | null = null;\n  private _events: TrackedEvent[] = [];\n  private _approxBytes = 0;\n  private _lastUrl: string | null = null;\n  private readonly _sessionReplaySegmentId: string;\n  private readonly _deps: EventTrackerDeps;\n\n  private _originalPushState: History[\"pushState\"] | null = null;\n  private _originalReplaceState: History[\"replaceState\"] | null = null;\n\n  constructor(deps: EventTrackerDeps) {\n    this._deps = deps;\n    this._sessionReplaySegmentId = generateUuid();\n  }\n\n  start() {\n    if (this._started) return;\n    if (!isBrowserLike()) return;\n    if (\n      typeof window.addEventListener !== \"function\"\n      || typeof window.removeEventListener !== \"function\"\n      || typeof document.addEventListener !== \"function\"\n      || typeof document.removeEventListener !== \"function\"\n      || !hasScreenDimensions(window.screen)\n    ) {\n      return;\n    }\n    this._started = true;\n\n    this._setupPageViewCapture();\n    this._setupClickCapture();\n    this._setupPageHideListeners();\n\n    this._flushTimer = setInterval(() => this._tick(), FLUSH_INTERVAL_MS);\n  }\n\n  stop() {\n    this._cancelled = true;\n    if (this._flushTimer !== null) {\n      clearInterval(this._flushTimer);\n      this._flushTimer = null;\n    }\n    runAsynchronously(() => this._flush({ keepalive: true }));\n    this._teardown();\n  }\n\n  clearBuffer() {\n    this._events = [];\n    this._approxBytes = 0;\n  }\n\n  private _pushEvent(event: TrackedEvent) {\n    this._events.push(event);\n    this._approxBytes += JSON.stringify(event).length;\n    if (this._events.length >= MAX_EVENTS_PER_BATCH || this._approxBytes >= MAX_APPROX_BYTES_PER_BATCH) {\n      runAsynchronously(() => this._flush({ keepalive: false }));\n    }\n  }\n\n  private _capturePageView(entryType: \"initial\" | \"push\" | \"replace\" | \"pop\") {\n    const screenObject = window.screen;\n    if (!hasScreenDimensions(screenObject)) {\n      return;\n    }\n\n    const url = window.location.href;\n    if (url === this._lastUrl && entryType !== \"initial\") return;\n    this._lastUrl = url;\n\n    this._pushEvent({\n      event_type: \"$page-view\",\n      event_at_ms: Date.now(),\n      data: {\n        url,\n        path: window.location.pathname,\n        referrer: document.referrer,\n        title: document.title,\n        entry_type: entryType,\n        viewport_width: window.innerWidth,\n        viewport_height: window.innerHeight,\n        screen_width: screenObject.width,\n        screen_height: screenObject.height,\n        user_agent: typeof navigator !== \"undefined\" ? navigator.userAgent : null,\n      },\n    });\n  }\n\n  private _setupPageViewCapture() {\n    // Fire initial page-view\n    this._capturePageView(\"initial\");\n    const historyObject = window.history;\n    if (!hasHistoryMethods(historyObject)) {\n      return;\n    }\n    const originalPushState = historyObject.pushState;\n    const originalReplaceState = historyObject.replaceState;\n\n    // Monkey-patch history.pushState\n    this._originalPushState = (...args: Parameters<History[\"pushState\"]>) => originalPushState.apply(historyObject, args);\n    historyObject.pushState = (...args: Parameters<History[\"pushState\"]>) => {\n      this._originalPushState!(...args);\n      this._capturePageView(\"push\");\n    };\n\n    // Monkey-patch history.replaceState\n    this._originalReplaceState = (...args: Parameters<History[\"replaceState\"]>) => originalReplaceState.apply(historyObject, args);\n    historyObject.replaceState = (...args: Parameters<History[\"replaceState\"]>) => {\n      this._originalReplaceState!(...args);\n      this._capturePageView(\"replace\");\n    };\n\n    // Listen for popstate (back/forward navigation)\n    window.addEventListener(\"popstate\", this._onPopState);\n  }\n\n  private readonly _onPopState = () => {\n    this._capturePageView(\"pop\");\n  };\n\n  private _buildSelector(element: Element): string {\n    const parts: string[] = [];\n    let current: Element | null = element;\n    let depth = 0;\n\n    while (current && depth < 5) {\n      let part = current.tagName.toLowerCase();\n      if (current.id) {\n        part += `#${current.id}`;\n        parts.unshift(part);\n        break;\n      }\n      if (current.className && typeof current.className === \"string\") {\n        const classes = current.className.trim().split(/\\s+/).filter(Boolean);\n        if (classes.length > 0) {\n          part += `.${classes.join(\".\")}`;\n        }\n      }\n      parts.unshift(part);\n      current = current.parentElement;\n      depth++;\n    }\n\n    return parts.join(\" > \");\n  }\n\n  private _findNearestAnchorHref(element: Element): string | null {\n    let current: Element | null = element;\n    while (current) {\n      if (current.tagName === \"A\" && current.hasAttribute(\"href\")) {\n        return current.getAttribute(\"href\");\n      }\n      current = current.parentElement;\n    }\n    return null;\n  }\n\n  private readonly _onClickCapture = (event: MouseEvent) => {\n    const target = event.target;\n    if (!(target instanceof Element)) return;\n\n    this._pushEvent({\n      event_type: \"$click\",\n      event_at_ms: Date.now(),\n      data: {\n        tag_name: target.tagName.toLowerCase(),\n        text: target.textContent.trim().substring(0, 200),\n        href: this._findNearestAnchorHref(target),\n        selector: this._buildSelector(target),\n        x: event.clientX,\n        y: event.clientY,\n        page_x: event.pageX,\n        page_y: event.pageY,\n        viewport_width: window.innerWidth,\n        viewport_height: window.innerHeight,\n      },\n    });\n  };\n\n  private _setupClickCapture() {\n    document.addEventListener(\"click\", this._onClickCapture, { capture: true });\n  }\n\n  private readonly _onPageHide = () => {\n    runAsynchronously(() => this._flush({ keepalive: true }));\n  };\n\n  private _setupPageHideListeners() {\n    window.addEventListener(\"pagehide\", this._onPageHide);\n    document.addEventListener(\"visibilitychange\", this._onPageHide);\n    this._detachListeners = () => {\n      window.removeEventListener(\"pagehide\", this._onPageHide);\n      document.removeEventListener(\"visibilitychange\", this._onPageHide);\n    };\n  }\n\n  private _teardown() {\n    if (this._detachListeners) {\n      this._detachListeners();\n      this._detachListeners = null;\n    }\n\n    // Restore history methods\n    const historyObject = window.history;\n    if (hasHistoryMethods(historyObject)) {\n      if (this._originalPushState) {\n        historyObject.pushState = this._originalPushState;\n      }\n      if (this._originalReplaceState) {\n        historyObject.replaceState = this._originalReplaceState;\n      }\n    }\n    this._originalPushState = null;\n    this._originalReplaceState = null;\n\n    window.removeEventListener(\"popstate\", this._onPopState);\n    document.removeEventListener(\"click\", this._onClickCapture, { capture: true });\n\n    this._events = [];\n    this._approxBytes = 0;\n  }\n\n  private async _flush(options: { keepalive: boolean }) {\n    if (this._events.length === 0) return;\n\n    const nowMs = Date.now();\n\n    const batchId = generateUuid();\n    const payload = {\n      session_replay_segment_id: this._sessionReplaySegmentId,\n      batch_id: batchId,\n      sent_at_ms: nowMs,\n      events: this._events,\n    };\n\n    this._events = [];\n    this._approxBytes = 0;\n\n    const res = await this._deps.sendBatch(\n      JSON.stringify(payload),\n      { keepalive: options.keepalive },\n    );\n\n    if (res.status === \"error\") {\n      console.warn(\"EventTracker flush failed:\", res.error);\n      return;\n    }\n\n    if (!res.data.ok) {\n      console.warn(\"EventTracker flush failed:\", res.data.status, await res.data.text());\n    }\n  }\n\n  private _tick() {\n    if (this._cancelled) return;\n    if (this._events.length > 0) {\n      runAsynchronously(() => this._flush({ keepalive: false }));\n    }\n  }\n}\n"],"mappings":";;;;;;;AASA,MAAM,oBAAoB;AAC1B,MAAM,uBAAuB;AAC7B,MAAM,6BAA6B;AAEnC,SAAS,oBAAoB,OAA4D;AACvF,KAAI,SAAS,QAAQ,OAAO,UAAU,SACpC,QAAO;AAET,KAAI,EAAE,WAAW,UAAU,EAAE,YAAY,OACvC,QAAO;AAET,QAAO,OAAO,MAAM,UAAU,YAAY,OAAO,MAAM,WAAW;;AAGpE,SAAS,kBAAkB,OAAqG;AAC9H,KAAI,SAAS,QAAQ,OAAO,UAAU,SACpC,QAAO;AAET,KAAI,EAAE,eAAe,UAAU,EAAE,kBAAkB,OACjD,QAAO;AAET,QAAO,OAAO,MAAM,cAAc,cAAc,OAAO,MAAM,iBAAiB;;AAchF,IAAa,eAAb,MAA0B;CAcxB,YAAY,MAAwB;kBAbjB;oBACE;0BAC2B;qBACa;iBAC3B,EAAE;sBACb;kBACW;4BAIwB;+BACM;2BA2G3B;AACnC,QAAK,iBAAiB,MAAM;;0BAwCM,UAAsB;GACxD,MAAM,SAAS,MAAM;AACrB,OAAI,EAAE,kBAAkB,SAAU;AAElC,QAAK,WAAW;IACd,YAAY;IACZ,aAAa,KAAK,KAAK;IACvB,MAAM;KACJ,UAAU,OAAO,QAAQ,aAAa;KACtC,MAAM,OAAO,YAAY,MAAM,CAAC,UAAU,GAAG,IAAI;KACjD,MAAM,KAAK,uBAAuB,OAAO;KACzC,UAAU,KAAK,eAAe,OAAO;KACrC,GAAG,MAAM;KACT,GAAG,MAAM;KACT,QAAQ,MAAM;KACd,QAAQ,MAAM;KACd,gBAAgB,OAAO;KACvB,iBAAiB,OAAO;KACzB;IACF,CAAC;;2BAOiC;AACnC,qEAAwB,KAAK,OAAO,EAAE,WAAW,MAAM,CAAC,CAAC;;AA5KzD,OAAK,QAAQ;AACb,OAAK,iEAAwC;;CAG/C,QAAQ;AACN,MAAI,KAAK,SAAU;AACnB,MAAI,qDAAgB,CAAE;AACtB,MACE,OAAO,OAAO,qBAAqB,cAChC,OAAO,OAAO,wBAAwB,cACtC,OAAO,SAAS,qBAAqB,cACrC,OAAO,SAAS,wBAAwB,cACxC,CAAC,oBAAoB,OAAO,OAAO,CAEtC;AAEF,OAAK,WAAW;AAEhB,OAAK,uBAAuB;AAC5B,OAAK,oBAAoB;AACzB,OAAK,yBAAyB;AAE9B,OAAK,cAAc,kBAAkB,KAAK,OAAO,EAAE,kBAAkB;;CAGvE,OAAO;AACL,OAAK,aAAa;AAClB,MAAI,KAAK,gBAAgB,MAAM;AAC7B,iBAAc,KAAK,YAAY;AAC/B,QAAK,cAAc;;AAErB,oEAAwB,KAAK,OAAO,EAAE,WAAW,MAAM,CAAC,CAAC;AACzD,OAAK,WAAW;;CAGlB,cAAc;AACZ,OAAK,UAAU,EAAE;AACjB,OAAK,eAAe;;CAGtB,AAAQ,WAAW,OAAqB;AACtC,OAAK,QAAQ,KAAK,MAAM;AACxB,OAAK,gBAAgB,KAAK,UAAU,MAAM,CAAC;AAC3C,MAAI,KAAK,QAAQ,UAAU,wBAAwB,KAAK,gBAAgB,2BACtE,mEAAwB,KAAK,OAAO,EAAE,WAAW,OAAO,CAAC,CAAC;;CAI9D,AAAQ,iBAAiB,WAAmD;EAC1E,MAAM,eAAe,OAAO;AAC5B,MAAI,CAAC,oBAAoB,aAAa,CACpC;EAGF,MAAM,MAAM,OAAO,SAAS;AAC5B,MAAI,QAAQ,KAAK,YAAY,cAAc,UAAW;AACtD,OAAK,WAAW;AAEhB,OAAK,WAAW;GACd,YAAY;GACZ,aAAa,KAAK,KAAK;GACvB,MAAM;IACJ;IACA,MAAM,OAAO,SAAS;IACtB,UAAU,SAAS;IACnB,OAAO,SAAS;IAChB,YAAY;IACZ,gBAAgB,OAAO;IACvB,iBAAiB,OAAO;IACxB,cAAc,aAAa;IAC3B,eAAe,aAAa;IAC5B,YAAY,OAAO,cAAc,cAAc,UAAU,YAAY;IACtE;GACF,CAAC;;CAGJ,AAAQ,wBAAwB;AAE9B,OAAK,iBAAiB,UAAU;EAChC,MAAM,gBAAgB,OAAO;AAC7B,MAAI,CAAC,kBAAkB,cAAc,CACnC;EAEF,MAAM,oBAAoB,cAAc;EACxC,MAAM,uBAAuB,cAAc;AAG3C,OAAK,sBAAsB,GAAG,SAA2C,kBAAkB,MAAM,eAAe,KAAK;AACrH,gBAAc,aAAa,GAAG,SAA2C;AACvE,QAAK,mBAAoB,GAAG,KAAK;AACjC,QAAK,iBAAiB,OAAO;;AAI/B,OAAK,yBAAyB,GAAG,SAA8C,qBAAqB,MAAM,eAAe,KAAK;AAC9H,gBAAc,gBAAgB,GAAG,SAA8C;AAC7E,QAAK,sBAAuB,GAAG,KAAK;AACpC,QAAK,iBAAiB,UAAU;;AAIlC,SAAO,iBAAiB,YAAY,KAAK,YAAY;;CAOvD,AAAQ,eAAe,SAA0B;EAC/C,MAAM,QAAkB,EAAE;EAC1B,IAAI,UAA0B;EAC9B,IAAI,QAAQ;AAEZ,SAAO,WAAW,QAAQ,GAAG;GAC3B,IAAI,OAAO,QAAQ,QAAQ,aAAa;AACxC,OAAI,QAAQ,IAAI;AACd,YAAQ,IAAI,QAAQ;AACpB,UAAM,QAAQ,KAAK;AACnB;;AAEF,OAAI,QAAQ,aAAa,OAAO,QAAQ,cAAc,UAAU;IAC9D,MAAM,UAAU,QAAQ,UAAU,MAAM,CAAC,MAAM,MAAM,CAAC,OAAO,QAAQ;AACrE,QAAI,QAAQ,SAAS,EACnB,SAAQ,IAAI,QAAQ,KAAK,IAAI;;AAGjC,SAAM,QAAQ,KAAK;AACnB,aAAU,QAAQ;AAClB;;AAGF,SAAO,MAAM,KAAK,MAAM;;CAG1B,AAAQ,uBAAuB,SAAiC;EAC9D,IAAI,UAA0B;AAC9B,SAAO,SAAS;AACd,OAAI,QAAQ,YAAY,OAAO,QAAQ,aAAa,OAAO,CACzD,QAAO,QAAQ,aAAa,OAAO;AAErC,aAAU,QAAQ;;AAEpB,SAAO;;CAyBT,AAAQ,qBAAqB;AAC3B,WAAS,iBAAiB,SAAS,KAAK,iBAAiB,EAAE,SAAS,MAAM,CAAC;;CAO7E,AAAQ,0BAA0B;AAChC,SAAO,iBAAiB,YAAY,KAAK,YAAY;AACrD,WAAS,iBAAiB,oBAAoB,KAAK,YAAY;AAC/D,OAAK,yBAAyB;AAC5B,UAAO,oBAAoB,YAAY,KAAK,YAAY;AACxD,YAAS,oBAAoB,oBAAoB,KAAK,YAAY;;;CAItE,AAAQ,YAAY;AAClB,MAAI,KAAK,kBAAkB;AACzB,QAAK,kBAAkB;AACvB,QAAK,mBAAmB;;EAI1B,MAAM,gBAAgB,OAAO;AAC7B,MAAI,kBAAkB,cAAc,EAAE;AACpC,OAAI,KAAK,mBACP,eAAc,YAAY,KAAK;AAEjC,OAAI,KAAK,sBACP,eAAc,eAAe,KAAK;;AAGtC,OAAK,qBAAqB;AAC1B,OAAK,wBAAwB;AAE7B,SAAO,oBAAoB,YAAY,KAAK,YAAY;AACxD,WAAS,oBAAoB,SAAS,KAAK,iBAAiB,EAAE,SAAS,MAAM,CAAC;AAE9E,OAAK,UAAU,EAAE;AACjB,OAAK,eAAe;;CAGtB,MAAc,OAAO,SAAiC;AACpD,MAAI,KAAK,QAAQ,WAAW,EAAG;EAE/B,MAAM,QAAQ,KAAK,KAAK;EAExB,MAAM,iDAAwB;EAC9B,MAAM,UAAU;GACd,2BAA2B,KAAK;GAChC,UAAU;GACV,YAAY;GACZ,QAAQ,KAAK;GACd;AAED,OAAK,UAAU,EAAE;AACjB,OAAK,eAAe;EAEpB,MAAM,MAAM,MAAM,KAAK,MAAM,UAC3B,KAAK,UAAU,QAAQ,EACvB,EAAE,WAAW,QAAQ,WAAW,CACjC;AAED,MAAI,IAAI,WAAW,SAAS;AAC1B,WAAQ,KAAK,8BAA8B,IAAI,MAAM;AACrD;;AAGF,MAAI,CAAC,IAAI,KAAK,GACZ,SAAQ,KAAK,8BAA8B,IAAI,KAAK,QAAQ,MAAM,IAAI,KAAK,MAAM,CAAC;;CAItF,AAAQ,QAAQ;AACd,MAAI,KAAK,WAAY;AACrB,MAAI,KAAK,QAAQ,SAAS,EACxB,mEAAwB,KAAK,OAAO,EAAE,WAAW,OAAO,CAAC,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "//": "THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template (FOR package.json FILES, PLEASE EDIT package-template.json)",
   "name": "@hexclave/next",
-  "version": "1.0.10",
+  "version": "1.0.12",
   "repository": "https://github.com/hexclave/hexclave",
   "sideEffects": false,
   "main": "./dist/index.js",
@@ -16,6 +16,15 @@
         "default": "./dist/index.js"
       }
     },
+    "./config": {
+      "types": "./dist/config.d.ts",
+      "import": {
+        "default": "./dist/esm/config.js"
+      },
+      "require": {
+        "default": "./dist/config.js"
+      }
+    },
     "./convex.config": {
       "types": "./dist/integrations/convex/component/convex.config.d.ts",
       "import": {
@@ -66,9 +75,9 @@
     "rrweb": "^1.1.3",
     "tsx": "^4.21.0",
     "yup": "^1.7.1",
-    "@hexclave/shared": "1.0.10",
-    "@hexclave/ui": "1.0.10",
-    "@hexclave/sc": "1.0.10"
+    "@hexclave/shared": "1.0.12",
+    "@hexclave/sc": "1.0.12",
+    "@hexclave/ui": "1.0.12"
   },
   "peerDependencies": {
     "@types/react": ">=18.0.0",

package/src/config.ts

@@ -0,0 +1,17 @@
+
+//===========================================
+// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template
+//===========================================
+// Lightweight, side-effect-free entrypoint for authoring `hexclave.config.ts`
+// files. Importing from here (e.g. `@hexclave/next/config`) gives you the
+// `defineHexclaveConfig` helper and config types WITHOUT pulling in the
+// framework runtime (React, server-only, Next.js internals). That matters
+// because tooling such as the local dashboard evaluates your config file in a
+// plain Node context — importing `defineHexclaveConfig` from the package root
+// would drag in the whole SDK and fail to load.
+//
+// Hexclave aliases and legacy Stack* names — @deprecated JSDoc lives on the
+// original declarations in @hexclave/shared/config so it survives dts bundling
+// (per-specifier JSDoc on re-exports does not).
+export type { HexclaveConfig, StackConfig } from "@hexclave/shared/config";
+export { defineHexclaveConfig, defineStackConfig, showOnboardingHexclaveConfigValue } from "@hexclave/shared/config";

package/src/integrations/convex/component/README.md

@@ -23,7 +23,7 @@ import { getConvexProvidersConfig } from "@hexclave/js/convex-auth.config";  //
 
 export default {
   providers: getConvexProvidersConfig({
-    projectId: process.env.STACK_PROJECT_ID,  // or: process.env.NEXT_PUBLIC_STACK_PROJECT_ID
+    projectId: process.env.HEXCLAVE_PROJECT_ID,  // or: process.env.NEXT_PUBLIC_HEXCLAVE_PROJECT_ID
   }),
 }
 ```

package/src/lib/hexclave-app/apps/implementations/admin-app-impl.ts

@@ -104,8 +104,12 @@ export class _HexclaveAdminAppImplIncomplete<HasTokenStore extends boolean, Proj
   private readonly _svixTokenCache = createCache(async () => {
     return await this._interface.getSvixToken();
   });
-  private readonly _metricsCache = createCache(async ([includeAnonymous]: [boolean]) => {
-    return await this._interface.getMetrics(includeAnonymous);
+  // Cache key serializes filters via URLSearchParams (sorted keys) so
+  // DependenciesMap (identity-keyed per array slot) treats two equal
+  // filter objects as the same deterministic string entry.
+  private readonly _metricsCache = createCache(async ([includeAnonymous, filtersKey]: [boolean, string]) => {
+    const filters = filtersKey ? Object.fromEntries(new URLSearchParams(filtersKey)) : undefined;
+    return await this._interface.getMetrics(includeAnonymous, filters);
   });
   private readonly _userActivityCache = createCache(async ([userId]: [string]) => {
     return await this._interface.getUserActivity(userId);
@@ -556,8 +560,7 @@ export class _HexclaveAdminAppImplIncomplete<HasTokenStore extends boolean, Proj
   protected override async _refreshUsers() {
     await Promise.all([
       super._refreshUsers(),
-      this._metricsCache.refresh([false]),
-      this._metricsCache.refresh([true]),
+      this._metricsCache.refreshWhere(() => true),
       this._metricsUserCountsCache.refresh([]),
     ]);
   }
@@ -565,8 +568,20 @@ export class _HexclaveAdminAppImplIncomplete<HasTokenStore extends boolean, Proj
   get [hexclaveAppInternalsSymbol]() {
     return {
       ...super[hexclaveAppInternalsSymbol],
-      useMetrics: (includeAnonymous: boolean = false): MetricsResponse => {
-        return useAsyncCache(this._metricsCache, [includeAnonymous] as const, "adminApp.useMetrics()") as MetricsResponse;
+      useMetrics: (
+        includeAnonymous: boolean = false,
+        filters?: { country_code?: string, referrer?: string, browser?: string, os?: string, device?: string, since?: string, until?: string },
+      ): MetricsResponse => {
+        const filtersKey = (() => {
+          if (filters == null) return "";
+          const params = new URLSearchParams();
+          for (const key of ["browser", "country_code", "device", "os", "referrer", "since", "until"] as const) {
+            const v = filters[key];
+            if (v != null) params.set(key, v);
+          }
+          return params.toString();
+        })();
+        return useAsyncCache(this._metricsCache, [includeAnonymous, filtersKey] as const, "adminApp.useMetrics()") as MetricsResponse;
       },
       useUserActivity: (userId: string): UserActivityResponse => {
         return useAsyncCache(this._userActivityCache, [userId] as const, "adminApp.useUserActivity()") as UserActivityResponse;

package/src/lib/hexclave-app/apps/implementations/client-app-impl.cross-domain.test.ts

@@ -287,6 +287,12 @@ describe("StackClientApp cross-domain auth", () => {
     const originalFetchNewAccessToken = Reflect.get(clientInterface, "fetchNewAccessToken");
     const refreshedRawRefreshTokens: string[] = [];
 
+    // Cookie-store writes queue a background trusted-parent-domain lookup. Without this stub, that
+    // lookup fetches the (unreachable) baseUrl with retries while holding the global store lock,
+    // which starves any later test that needs the write lock (e.g. signOut). Not restored on
+    // purpose: queued tasks can still run after this test body finishes.
+    vi.spyOn(clientApp as any, "_getTrustedParentDomain").mockResolvedValue(null);
+
     try {
       const getBrowserCookieTokenStore = Reflect.get(clientApp, "_getBrowserCookieTokenStore");
       if (typeof getBrowserCookieTokenStore !== "function") {
@@ -329,6 +335,108 @@ describe("StackClientApp cross-domain auth", () => {
     expect(refreshedRawRefreshTokens).toEqual(["new-refresh-token"]);
   });
 
+  it("does not re-bounce nested cross-domain auth after the OAuth callback consumed code+state from the URL", async () => {
+    const projectId = "00000000-0000-4000-8000-000000000008";
+    const previousWindow = globalThis.window;
+    const previousDocument = globalThis.document;
+
+    const strippedUrl = new URL(`https://${projectId}.example-stack-hosted.test/handler/sign-in`);
+    strippedUrl.searchParams.set("stack_nested_cross_domain_auth_refresh_token_id", "source-refresh-token-id");
+    strippedUrl.searchParams.set("stack_nested_cross_domain_auth_callback_url", "https://demo.stack-auth.com/");
+    const urlAtConstructionTime = new URL(strippedUrl);
+    urlAtConstructionTime.searchParams.set("code", "one-time-code");
+    urlAtConstructionTime.searchParams.set("state", "nested-oauth-state");
+
+    // Construct before installing the window mock so the constructor does not schedule its own
+    // nested-auth resolution; the assertions below drive the handler explicitly.
+    const clientApp = new StackClientApp({
+      baseUrl: "http://localhost:12345",
+      projectId,
+      publishableClientKey: "stack-pk-test",
+      tokenStore: "memory",
+      redirectMethod: "window",
+      noAutomaticPrefetch: true,
+    });
+
+    globalThis.document = createMockDocument();
+    globalThis.window = {
+      location: {
+        href: strippedUrl.toString(),
+        replace: () => {
+          throw new Error("INTENTIONAL_TEST_ABORT");
+        },
+      },
+    } as any;
+
+    vi.spyOn(clientApp as any, "_fetchCurrentRefreshTokenIdIfSignedIn").mockResolvedValue(null);
+    vi.spyOn(clientApp as any, "_getCrossDomainHandoffParamsForRedirect").mockResolvedValue({
+      state: "fresh-nested-state",
+      codeChallenge: "fresh-nested-code-challenge",
+    });
+    vi.spyOn(clientApp as any, "_isTrusted").mockResolvedValue(true);
+
+    try {
+      // Without the construction-time URL, the handler re-bounces (location.replace aborts).
+      await expect((clientApp as any)._maybeHandleNestedCrossDomainAuth()).rejects.toThrowError("INTENTIONAL_TEST_ABORT");
+      // With it, the in-flight OAuth callback wins and the handler stands down.
+      await expect((clientApp as any)._maybeHandleNestedCrossDomainAuth(urlAtConstructionTime)).resolves.toBe(false);
+      // The live-URL guard must also stand down on its own when code+state are still present.
+      (globalThis.window as any).location.href = urlAtConstructionTime.toString();
+      await expect((clientApp as any)._maybeHandleNestedCrossDomainAuth()).resolves.toBe(false);
+    } finally {
+      globalThis.window = previousWindow;
+      globalThis.document = previousDocument;
+    }
+  });
+
+  it("passes the construction-time URL to the nested cross-domain auth handler", async () => {
+    const projectId = "00000000-0000-4000-8000-000000000009";
+    const previousWindow = globalThis.window;
+    const previousDocument = globalThis.document;
+
+    const callbackUrl = new URL(`https://${projectId}.example-stack-hosted.test/handler/sign-in`);
+    callbackUrl.searchParams.set("stack_nested_cross_domain_auth_refresh_token_id", "source-refresh-token-id");
+    callbackUrl.searchParams.set("code", "one-time-code");
+    callbackUrl.searchParams.set("state", "nested-oauth-state");
+    const strippedUrl = new URL(callbackUrl);
+    strippedUrl.searchParams.delete("code");
+    strippedUrl.searchParams.delete("state");
+
+    globalThis.document = createMockDocument();
+    globalThis.window = {
+      location: {
+        href: callbackUrl.toString(),
+      },
+    } as any;
+
+    const nestedAuthSpy = vi.spyOn(StackClientApp.prototype as any, "_maybeHandleNestedCrossDomainAuth").mockResolvedValue(false);
+
+    try {
+      new StackClientApp({
+        baseUrl: "http://localhost:12345",
+        projectId,
+        publishableClientKey: "stack-pk-test",
+        tokenStore: "memory",
+        redirectMethod: "window",
+        noAutomaticPrefetch: true,
+      });
+
+      // Simulate consumeOAuthCallbackQueryParams stripping code+state before microtasks run.
+      (globalThis.window as any).location.href = strippedUrl.toString();
+      await new Promise((resolve) => setTimeout(resolve, 0));
+
+      expect(nestedAuthSpy).toHaveBeenCalledTimes(1);
+      const urlArgument = nestedAuthSpy.mock.calls[0][0] as URL;
+      expect(urlArgument).toBeInstanceOf(URL);
+      expect(urlArgument.searchParams.get("code")).toBe("one-time-code");
+      expect(urlArgument.searchParams.get("state")).toBe("nested-oauth-state");
+    } finally {
+      nestedAuthSpy.mockRestore();
+      globalThis.window = previousWindow;
+      globalThis.document = previousDocument;
+    }
+  });
+
   it("uses direct sign-out instead of hosted sign-out redirects when code execution is available", async () => {
     const clientApp = new StackClientApp({
       baseUrl: "http://localhost:12345",

package/src/lib/hexclave-app/apps/implementations/client-app-impl.ts

@@ -690,8 +690,12 @@ export class _HexclaveClientAppImplIncomplete<HasTokenStore extends boolean, Pro
     }
 
     if (isBrowserLike()) {
+      // The OAuth callback resolution scheduled above synchronously strips `code` and `state`
+      // from the URL before its token exchange, so the nested handler must decide based on the
+      // URL the page was loaded with, not whatever is in the address bar when it runs.
+      const urlAtConstructionTime = new URL(window.location.href);
       this._trackPendingAuthResolution(async () => {
-        await this._maybeHandleNestedCrossDomainAuth();
+        await this._maybeHandleNestedCrossDomainAuth(urlAtConstructionTime);
       });
     }
 
@@ -858,11 +862,15 @@ export class _HexclaveClientAppImplIncomplete<HasTokenStore extends boolean, Pro
     return targetUrl.toString();
   }
 
-  protected async _maybeHandleNestedCrossDomainAuth(): Promise<boolean> {
+  protected async _maybeHandleNestedCrossDomainAuth(urlAtConstructionTime?: URL): Promise<boolean> {
     if (typeof window === "undefined") return false;
     const currentUrl = new URL(window.location.href);
     // A real OAuth callback wins over nested handoff detection on the final return to b.com.
+    // The OAuth callback resolution strips `code` and `state` from the live URL before this
+    // runs, so the check must also consult the URL captured at construction time — otherwise
+    // we'd re-bounce to the source domain while the token exchange is still in flight.
     if (currentUrl.searchParams.has("code") && currentUrl.searchParams.has("state")) return false;
+    if (urlAtConstructionTime != null && urlAtConstructionTime.searchParams.has("code") && urlAtConstructionTime.searchParams.has("state")) return false;
     const refreshTokenId = currentUrl.searchParams.get(nestedCrossDomainAuthQueryParams.refreshTokenId);
     if (refreshTokenId == null) return false;
 
@@ -1501,10 +1509,14 @@ export class _HexclaveClientAppImplIncomplete<HasTokenStore extends boolean, Pro
     const tokenStore = this._getOrCreateTokenStore(await this._createCookieHelper());
     tokenStore.set(tokens);
 
-    // Pre-fetch the current user for the new session so the cache is already
-    // populated when useUser() re-renders, avoiding a stale-cache render cycle.
-    const newSession = this._getSessionFromTokenStore(tokenStore);
-    this._currentUserCache.getOrWait([newSession], "write-only").catch(() => {});
+    // If these tokens resolve to a session we already have (eg. the RDE dashboard re-installing a freshly minted
+    // access token for the same access-only session), push the new token into it in place; constructing a new
+    // session here would cold-invalidate every session-scoped cache and suspend the UI on each refresh.
+    const session = this._getSessionFromTokenStore(tokenStore);
+    session.updateAccessToken(tokens);
+
+    // Pre-fetch the current user so the cache is warm when useUser() re-renders (write-only, so it never suspends).
+    runAsynchronously(this._currentUserCache.getOrWait([session], "write-only"));
   }
 
   protected _getTokenStoreInitForFreshTokens(tokens: { accessToken: string | null, refreshToken: string }): TokenStoreInit | undefined {

package/src/lib/hexclave-app/apps/implementations/event-tracker.ts

@@ -128,6 +128,7 @@ export class EventTracker {
         viewport_height: window.innerHeight,
         screen_width: screenObject.width,
         screen_height: screenObject.height,
+        user_agent: typeof navigator !== "undefined" ? navigator.userAgent : null,
       },
     });
   }