@kubesense/kubesense-browser-rum-core 1.8.0 → 2.0.0-beta.1

package/esm/domain/privacy.mjs

@@ -0,0 +1,161 @@
+import { getParentNode, isElementNode, isTextNode } from "../browser/htmlDomUtils.mjs";
+import { STABLE_ATTRIBUTES } from "./getSelectorFromElement.mjs";
+import { FORM_PRIVATE_TAG_NAMES, NodePrivacyLevel, getPrivacySelector } from "./privacyConstants.mjs";
+//#region src/domain/privacy.ts
+/**
+* Get node privacy level by iterating over its ancestors. When the direct parent privacy level is
+* know, it is best to use something like:
+*
+* derivePrivacyLevelGivenParent(getNodeSelfPrivacyLevel(node), parentNodePrivacyLevel)
+*/
+function getNodePrivacyLevel(node, defaultPrivacyLevel, cache) {
+	if (cache?.has(node)) return cache.get(node);
+	const parentNode = getParentNode(node);
+	const parentNodePrivacyLevel = parentNode ? getNodePrivacyLevel(parentNode, defaultPrivacyLevel, cache) : defaultPrivacyLevel;
+	const nodePrivacyLevel = reducePrivacyLevel(getNodeSelfPrivacyLevel(node), parentNodePrivacyLevel);
+	if (cache) cache.set(node, nodePrivacyLevel);
+	return nodePrivacyLevel;
+}
+/**
+* Reduces the next privacy level based on self + parent privacy levels
+*/
+function reducePrivacyLevel(childPrivacyLevel, parentNodePrivacyLevel) {
+	switch (parentNodePrivacyLevel) {
+		case NodePrivacyLevel.HIDDEN:
+		case NodePrivacyLevel.IGNORE: return parentNodePrivacyLevel;
+	}
+	switch (childPrivacyLevel) {
+		case NodePrivacyLevel.ALLOW:
+		case NodePrivacyLevel.MASK:
+		case NodePrivacyLevel.MASK_USER_INPUT:
+		case NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED:
+		case NodePrivacyLevel.HIDDEN:
+		case NodePrivacyLevel.IGNORE: return childPrivacyLevel;
+		default: return parentNodePrivacyLevel;
+	}
+}
+/**
+* Determines the node's own privacy level without checking for ancestors.
+*/
+function getNodeSelfPrivacyLevel(node) {
+	if (!isElementNode(node)) return;
+	if (node.tagName === "BASE") return NodePrivacyLevel.ALLOW;
+	if (node.tagName === "INPUT") {
+		const inputElement = node;
+		if (inputElement.type === "password" || inputElement.type === "email" || inputElement.type === "tel") return NodePrivacyLevel.MASK;
+		if (inputElement.type === "hidden") return NodePrivacyLevel.MASK;
+		const autocomplete = inputElement.getAttribute("autocomplete");
+		if (autocomplete && (autocomplete.startsWith("cc-") || autocomplete.endsWith("-password"))) return NodePrivacyLevel.MASK;
+	}
+	if (node.matches(getPrivacySelector(NodePrivacyLevel.HIDDEN))) return NodePrivacyLevel.HIDDEN;
+	if (node.matches(getPrivacySelector(NodePrivacyLevel.MASK))) return NodePrivacyLevel.MASK;
+	if (node.matches(getPrivacySelector(NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED))) return NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED;
+	if (node.matches(getPrivacySelector(NodePrivacyLevel.MASK_USER_INPUT))) return NodePrivacyLevel.MASK_USER_INPUT;
+	if (node.matches(getPrivacySelector(NodePrivacyLevel.ALLOW))) return NodePrivacyLevel.ALLOW;
+	if (shouldIgnoreElement(node)) return NodePrivacyLevel.IGNORE;
+}
+/**
+* Helper aiming to unify `mask` and `mask-user-input` privacy levels:
+*
+* In the `mask` case, it is trivial: we should mask the element.
+*
+* In the `mask-user-input` case, we should mask the element only if it is a "form" element or the
+* direct parent is a form element for text nodes).
+*
+* Other `shouldMaskNode` cases are edge cases that should not matter too much (ex: should we mask a
+* node if it is ignored or hidden? it doesn't matter since it won't be serialized).
+*/
+function shouldMaskNode(node, privacyLevel) {
+	switch (privacyLevel) {
+		case NodePrivacyLevel.MASK:
+		case NodePrivacyLevel.HIDDEN:
+		case NodePrivacyLevel.IGNORE: return true;
+		case NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED:
+			if (isTextNode(node)) return isFormElement(node.parentNode) ? true : !isAllowlisted(node.textContent || "");
+			return isFormElement(node);
+		case NodePrivacyLevel.MASK_USER_INPUT: return isTextNode(node) ? isFormElement(node.parentNode) : isFormElement(node);
+		default: return false;
+	}
+}
+function shouldMaskAttribute(tagName, attributeName, attributeValue, nodePrivacyLevel, configuration) {
+	if (nodePrivacyLevel !== NodePrivacyLevel.MASK && nodePrivacyLevel !== NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED) return false;
+	if (attributeName === "data-kubesense-privacy" || STABLE_ATTRIBUTES.includes(attributeName) || attributeName === configuration.actionNameAttribute) return false;
+	switch (attributeName) {
+		case "title":
+		case "alt":
+		case "placeholder":
+		case "aria-label":
+		case "name": return true;
+	}
+	if (tagName === "A" && attributeName === "href") return true;
+	if (tagName === "IFRAME" && attributeName === "srcdoc") return true;
+	if (attributeValue && attributeName.startsWith("data-")) return true;
+	if ((tagName === "IMG" || tagName === "SOURCE") && (attributeName === "src" || attributeName === "srcset")) return true;
+	return false;
+}
+function isFormElement(node) {
+	if (!node || node.nodeType !== node.ELEMENT_NODE) return false;
+	const element = node;
+	if (element.tagName === "INPUT") switch (element.type) {
+		case "button":
+		case "color":
+		case "reset":
+		case "submit": return false;
+	}
+	return !!FORM_PRIVATE_TAG_NAMES[element.tagName];
+}
+/**
+* Text censoring non-destructively maintains whitespace characters in order to preserve text shape
+* during replay.
+*/
+function censorText(text) {
+	return text.replace(/\S/g, "x");
+}
+function getTextContent(textNode, parentNodePrivacyLevel) {
+	const parentTagName = textNode.parentElement?.tagName;
+	let textContent = textNode.textContent || "";
+	const nodePrivacyLevel = parentNodePrivacyLevel;
+	if (parentTagName === "SCRIPT") textContent = "***";
+	else if (nodePrivacyLevel === NodePrivacyLevel.HIDDEN) textContent = "***";
+	else if (shouldMaskNode(textNode, nodePrivacyLevel)) {
+		if (parentTagName === "DATALIST" || parentTagName === "SELECT" || parentTagName === "OPTGROUP") {} else if (parentTagName === "OPTION") textContent = "***";
+		else textContent = censorText(textContent);
+	}
+	if (parentTagName === "HEAD" && !textContent.trim()) return "";
+	return textContent;
+}
+/**
+* TODO: Preserve CSS element order, and record the presence of the tag, just don't render
+* We don't need this logic on the recorder side.
+* For security related meta's, customer can mask themmanually given they
+* are easy to identify in the HEAD tag.
+*/
+function shouldIgnoreElement(element) {
+	if (element.nodeName === "SCRIPT") return true;
+	if (element.nodeName === "LINK") {
+		const relAttribute = getLowerCaseAttribute("rel");
+		return /preload|prefetch/i.test(relAttribute) && getLowerCaseAttribute("as") === "script" || relAttribute === "shortcut icon" || relAttribute === "icon";
+	}
+	if (element.nodeName === "META") {
+		const nameAttribute = getLowerCaseAttribute("name");
+		const relAttribute = getLowerCaseAttribute("rel");
+		const propertyAttribute = getLowerCaseAttribute("property");
+		return /^msapplication-tile(image|color)$/.test(nameAttribute) || nameAttribute === "application-name" || relAttribute === "icon" || relAttribute === "apple-touch-icon" || relAttribute === "shortcut icon" || nameAttribute === "keywords" || nameAttribute === "description" || /^(og|twitter|fb):/.test(propertyAttribute) || /^(og|twitter):/.test(nameAttribute) || nameAttribute === "pinterest" || nameAttribute === "robots" || nameAttribute === "googlebot" || nameAttribute === "bingbot" || element.hasAttribute("http-equiv") || nameAttribute === "author" || nameAttribute === "generator" || nameAttribute === "framework" || nameAttribute === "publisher" || nameAttribute === "progid" || /^article:/.test(propertyAttribute) || /^product:/.test(propertyAttribute) || nameAttribute === "google-site-verification" || nameAttribute === "yandex-verification" || nameAttribute === "csrf-token" || nameAttribute === "p:domain_verify" || nameAttribute === "verify-v1" || nameAttribute === "verification" || nameAttribute === "shopify-checkout-api-token";
+	}
+	function getLowerCaseAttribute(name) {
+		return (element.getAttribute(name) || "").toLowerCase();
+	}
+	return false;
+}
+function isAllowlisted(text) {
+	if (!text?.trim()) return true;
+	return window.$KUBESENSE_ALLOW?.has(text.toLocaleLowerCase()) || false;
+}
+function maskDisallowedTextContent(text, fixedMask) {
+	if (isAllowlisted(text)) return text;
+	return fixedMask || censorText(text);
+}
+//#endregion
+export { censorText, getNodePrivacyLevel, getNodeSelfPrivacyLevel, getTextContent, isAllowlisted, maskDisallowedTextContent, reducePrivacyLevel, shouldIgnoreElement, shouldMaskAttribute, shouldMaskNode };
+
+//# sourceMappingURL=privacy.mjs.map

package/esm/domain/privacy.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.mjs","names":[],"sources":["../../src/domain/privacy.ts"],"sourcesContent":["import { isElementNode, getParentNode, isTextNode } from '../browser/htmlDomUtils'\nimport {\n  NodePrivacyLevel,\n  FORM_PRIVATE_TAG_NAMES,\n  CENSORED_STRING_MARK,\n  getPrivacySelector,\n  TEXT_MASKING_CHAR,\n  PRIVACY_ATTR_NAME,\n} from './privacyConstants'\nimport { STABLE_ATTRIBUTES } from './getSelectorFromElement'\nimport type { RumConfiguration } from './configuration'\n\nexport type NodePrivacyLevelCache = Map<Node, NodePrivacyLevel>\n\n/**\n * Get node privacy level by iterating over its ancestors. When the direct parent privacy level is\n * know, it is best to use something like:\n *\n * derivePrivacyLevelGivenParent(getNodeSelfPrivacyLevel(node), parentNodePrivacyLevel)\n */\nexport function getNodePrivacyLevel(\n  node: Node,\n  defaultPrivacyLevel: NodePrivacyLevel,\n  cache?: NodePrivacyLevelCache\n): NodePrivacyLevel {\n  if (cache?.has(node)) {\n    return cache.get(node)!\n  }\n  const parentNode = getParentNode(node)\n  const parentNodePrivacyLevel = parentNode\n    ? getNodePrivacyLevel(parentNode, defaultPrivacyLevel, cache)\n    : defaultPrivacyLevel\n  const selfNodePrivacyLevel = getNodeSelfPrivacyLevel(node)\n  const nodePrivacyLevel = reducePrivacyLevel(selfNodePrivacyLevel, parentNodePrivacyLevel)\n  if (cache) {\n    cache.set(node, nodePrivacyLevel)\n  }\n  return nodePrivacyLevel\n}\n\n/**\n * Reduces the next privacy level based on self + parent privacy levels\n */\nexport function reducePrivacyLevel(\n  childPrivacyLevel: NodePrivacyLevel | undefined,\n  parentNodePrivacyLevel: NodePrivacyLevel\n): NodePrivacyLevel {\n  switch (parentNodePrivacyLevel) {\n    // These values cannot be overridden\n    case NodePrivacyLevel.HIDDEN:\n    case NodePrivacyLevel.IGNORE:\n      return parentNodePrivacyLevel\n  }\n  switch (childPrivacyLevel) {\n    case NodePrivacyLevel.ALLOW:\n    case NodePrivacyLevel.MASK:\n    case NodePrivacyLevel.MASK_USER_INPUT:\n    case NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED:\n    case NodePrivacyLevel.HIDDEN:\n    case NodePrivacyLevel.IGNORE:\n      return childPrivacyLevel\n    default:\n      return parentNodePrivacyLevel\n  }\n}\n\n/**\n * Determines the node's own privacy level without checking for ancestors.\n */\nexport function getNodeSelfPrivacyLevel(node: Node): NodePrivacyLevel | undefined {\n  // Only Element types can have a privacy level set\n  if (!isElementNode(node)) {\n    return\n  }\n\n  // Overrules for replay purpose\n  if (node.tagName === 'BASE') {\n    return NodePrivacyLevel.ALLOW\n  }\n\n  // Overrules to enforce end-user protection\n  if (node.tagName === 'INPUT') {\n    const inputElement = node as HTMLInputElement\n    if (inputElement.type === 'password' || inputElement.type === 'email' || inputElement.type === 'tel') {\n      return NodePrivacyLevel.MASK\n    }\n    if (inputElement.type === 'hidden') {\n      return NodePrivacyLevel.MASK\n    }\n    const autocomplete = inputElement.getAttribute('autocomplete')\n    // Handle input[autocomplete=cc-number/cc-csc/cc-exp/cc-exp-month/cc-exp-year/new-password/current-password]\n    if (autocomplete && (autocomplete.startsWith('cc-') || autocomplete.endsWith('-password'))) {\n      return NodePrivacyLevel.MASK\n    }\n  }\n\n  // Check HTML privacy attributes and classes\n  if (node.matches(getPrivacySelector(NodePrivacyLevel.HIDDEN))) {\n    return NodePrivacyLevel.HIDDEN\n  }\n\n  if (node.matches(getPrivacySelector(NodePrivacyLevel.MASK))) {\n    return NodePrivacyLevel.MASK\n  }\n\n  if (node.matches(getPrivacySelector(NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED))) {\n    return NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED\n  }\n\n  if (node.matches(getPrivacySelector(NodePrivacyLevel.MASK_USER_INPUT))) {\n    return NodePrivacyLevel.MASK_USER_INPUT\n  }\n\n  if (node.matches(getPrivacySelector(NodePrivacyLevel.ALLOW))) {\n    return NodePrivacyLevel.ALLOW\n  }\n\n  if (shouldIgnoreElement(node)) {\n    return NodePrivacyLevel.IGNORE\n  }\n}\n\n/**\n * Helper aiming to unify `mask` and `mask-user-input` privacy levels:\n *\n * In the `mask` case, it is trivial: we should mask the element.\n *\n * In the `mask-user-input` case, we should mask the element only if it is a \"form\" element or the\n * direct parent is a form element for text nodes).\n *\n * Other `shouldMaskNode` cases are edge cases that should not matter too much (ex: should we mask a\n * node if it is ignored or hidden? it doesn't matter since it won't be serialized).\n */\nexport function shouldMaskNode(node: Node, privacyLevel: NodePrivacyLevel) {\n  switch (privacyLevel) {\n    case NodePrivacyLevel.MASK:\n    case NodePrivacyLevel.HIDDEN:\n    case NodePrivacyLevel.IGNORE:\n      return true\n    case NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED:\n      if (isTextNode(node)) {\n        // Always return true if our parent is a form element, like MASK_USER_INPUT.\n        // Otherwise, decide whether to mask based on the allowlist.\n        return isFormElement(node.parentNode) ? true : !isAllowlisted(node.textContent || '')\n      }\n      // Always return true if we're a form element, like MASK_USER_INPUT.\n      // Otherwise, return false; MASK_UNLESS_ALLOWLISTED only directly masks text nodes.\n      return isFormElement(node)\n    case NodePrivacyLevel.MASK_USER_INPUT:\n      return isTextNode(node) ? isFormElement(node.parentNode) : isFormElement(node)\n    default:\n      return false\n  }\n}\n\nexport function shouldMaskAttribute(\n  tagName: string,\n  attributeName: string,\n  attributeValue: string | null,\n  nodePrivacyLevel: NodePrivacyLevel,\n  configuration: RumConfiguration\n) {\n  if (nodePrivacyLevel !== NodePrivacyLevel.MASK && nodePrivacyLevel !== NodePrivacyLevel.MASK_UNLESS_ALLOWLISTED) {\n    return false\n  }\n  if (\n    attributeName === PRIVACY_ATTR_NAME ||\n    STABLE_ATTRIBUTES.includes(attributeName) ||\n    attributeName === configuration.actionNameAttribute\n  ) {\n    return false\n  }\n\n  switch (attributeName) {\n    case 'title':\n    case 'alt':\n    case 'placeholder':\n    case 'aria-label':\n    case 'name':\n      return true\n  }\n  if (tagName === 'A' && attributeName === 'href') {\n    return true\n  }\n  if (tagName === 'IFRAME' && attributeName === 'srcdoc') {\n    return true\n  }\n  if (attributeValue && attributeName.startsWith('data-')) {\n    return true\n  }\n  if ((tagName === 'IMG' || tagName === 'SOURCE') && (attributeName === 'src' || attributeName === 'srcset')) {\n    return true\n  }\n\n  return false\n}\n\nfunction isFormElement(node: Node | null): boolean {\n  if (!node || node.nodeType !== node.ELEMENT_NODE) {\n    return false\n  }\n  const element = node as HTMLInputElement\n  if (element.tagName === 'INPUT') {\n    switch (element.type) {\n      case 'button':\n      case 'color':\n      case 'reset':\n      case 'submit':\n        return false\n    }\n  }\n  return !!FORM_PRIVATE_TAG_NAMES[element.tagName]\n}\n\n/**\n * Text censoring non-destructively maintains whitespace characters in order to preserve text shape\n * during replay.\n */\nexport function censorText(text: string): string {\n  return text.replace(/\\S/g, TEXT_MASKING_CHAR)\n}\n\nexport function getTextContent(textNode: Node, parentNodePrivacyLevel: NodePrivacyLevel): string {\n  // The parent node may not be a html element which has a tagName attribute.\n  // So just let it be undefined which is ok in this use case.\n  const parentTagName = textNode.parentElement?.tagName\n  let textContent = textNode.textContent || ''\n  const nodePrivacyLevel = parentNodePrivacyLevel\n\n  if (parentTagName === 'SCRIPT') {\n    // For perf reasons, we don't record script (heuristic)\n    textContent = CENSORED_STRING_MARK\n  } else if (nodePrivacyLevel === NodePrivacyLevel.HIDDEN) {\n    // Should never occur, but just in case, we set to CENSORED_MARK.\n    textContent = CENSORED_STRING_MARK\n  } else if (shouldMaskNode(textNode, nodePrivacyLevel)) {\n    if (parentTagName === 'DATALIST' || parentTagName === 'SELECT' || parentTagName === 'OPTGROUP') {\n      // Masking the child list breaks text nodes for DATALIST/SELECT/OPTGROUP.\n      // TODO: Reinvestigate this.\n    } else if (parentTagName === 'OPTION') {\n      // <Option> has low entropy in charset + text length, so use `CENSORED_STRING_MARK` when masked\n      textContent = CENSORED_STRING_MARK\n    } else {\n      textContent = censorText(textContent)\n    }\n  }\n\n  const shouldCollapseWhiteSpace = parentTagName === 'HEAD'\n  if (shouldCollapseWhiteSpace && !textContent.trim()) {\n    return ''\n  }\n\n  return textContent\n}\n\n/**\n * TODO: Preserve CSS element order, and record the presence of the tag, just don't render\n * We don't need this logic on the recorder side.\n * For security related meta's, customer can mask themmanually given they\n * are easy to identify in the HEAD tag.\n */\nexport function shouldIgnoreElement(element: Element): boolean {\n  if (element.nodeName === 'SCRIPT') {\n    return true\n  }\n\n  if (element.nodeName === 'LINK') {\n    const relAttribute = getLowerCaseAttribute('rel')\n    return (\n      // Link as script - Ignore only when rel=preload, modulepreload or prefetch\n      (/preload|prefetch/i.test(relAttribute) && getLowerCaseAttribute('as') === 'script') ||\n      // Favicons\n      relAttribute === 'shortcut icon' ||\n      relAttribute === 'icon'\n    )\n  }\n\n  if (element.nodeName === 'META') {\n    const nameAttribute = getLowerCaseAttribute('name')\n    const relAttribute = getLowerCaseAttribute('rel')\n    const propertyAttribute = getLowerCaseAttribute('property')\n    return (\n      // Favicons\n      /^msapplication-tile(image|color)$/.test(nameAttribute) ||\n      nameAttribute === 'application-name' ||\n      relAttribute === 'icon' ||\n      relAttribute === 'apple-touch-icon' ||\n      relAttribute === 'shortcut icon' ||\n      // Description\n      nameAttribute === 'keywords' ||\n      nameAttribute === 'description' ||\n      // Social\n      /^(og|twitter|fb):/.test(propertyAttribute) ||\n      /^(og|twitter):/.test(nameAttribute) ||\n      nameAttribute === 'pinterest' ||\n      // Robots\n      nameAttribute === 'robots' ||\n      nameAttribute === 'googlebot' ||\n      nameAttribute === 'bingbot' ||\n      // Http headers. Ex: X-UA-Compatible, Content-Type, Content-Language, cache-control,\n      // X-Translated-By\n      element.hasAttribute('http-equiv') ||\n      // Authorship\n      nameAttribute === 'author' ||\n      nameAttribute === 'generator' ||\n      nameAttribute === 'framework' ||\n      nameAttribute === 'publisher' ||\n      nameAttribute === 'progid' ||\n      /^article:/.test(propertyAttribute) ||\n      /^product:/.test(propertyAttribute) ||\n      // Verification\n      nameAttribute === 'google-site-verification' ||\n      nameAttribute === 'yandex-verification' ||\n      nameAttribute === 'csrf-token' ||\n      nameAttribute === 'p:domain_verify' ||\n      nameAttribute === 'verify-v1' ||\n      nameAttribute === 'verification' ||\n      nameAttribute === 'shopify-checkout-api-token'\n    )\n  }\n\n  function getLowerCaseAttribute(name: string) {\n    return (element.getAttribute(name) || '').toLowerCase()\n  }\n\n  return false\n}\n\nexport interface BrowserWindow extends Window {\n  $KUBESENSE_ALLOW?: Set<string>\n}\n\nexport function isAllowlisted(text: string): boolean {\n  if (!text?.trim()) {\n    return true\n  }\n  // We are using toLocaleLowerCase when adding to the allowlist to avoid case sensitivity\n  // so we need to do the same here\n  return (window as BrowserWindow).$KUBESENSE_ALLOW?.has(text.toLocaleLowerCase()) || false\n}\n\nexport function maskDisallowedTextContent(text: string, fixedMask?: string): string {\n  if (isAllowlisted(text)) {\n    return text\n  }\n  return fixedMask || censorText(text)\n}\n"],"mappings":";;;;;;;;;;AAoBA,SAAgB,oBACd,MACA,qBACA,OACkB;CAClB,IAAI,OAAO,IAAI,IAAI,GACjB,OAAO,MAAM,IAAI,IAAI;CAEvB,MAAM,aAAa,cAAc,IAAI;CACrC,MAAM,yBAAyB,aAC3B,oBAAoB,YAAY,qBAAqB,KAAK,IAC1D;CAEJ,MAAM,mBAAmB,mBADI,wBAAwB,IACU,GAAG,sBAAsB;CACxF,IAAI,OACF,MAAM,IAAI,MAAM,gBAAgB;CAElC,OAAO;AACT;;;;AAKA,SAAgB,mBACd,mBACA,wBACkB;CAClB,QAAQ,wBAAR;EAEE,KAAK,iBAAiB;EACtB,KAAK,iBAAiB,QACpB,OAAO;CACX;CACA,QAAQ,mBAAR;EACE,KAAK,iBAAiB;EACtB,KAAK,iBAAiB;EACtB,KAAK,iBAAiB;EACtB,KAAK,iBAAiB;EACtB,KAAK,iBAAiB;EACtB,KAAK,iBAAiB,QACpB,OAAO;EACT,SACE,OAAO;CACX;AACF;;;;AAKA,SAAgB,wBAAwB,MAA0C;CAEhF,IAAI,CAAC,cAAc,IAAI,GACrB;CAIF,IAAI,KAAK,YAAY,QACnB,OAAO,iBAAiB;CAI1B,IAAI,KAAK,YAAY,SAAS;EAC5B,MAAM,eAAe;EACrB,IAAI,aAAa,SAAS,cAAc,aAAa,SAAS,WAAW,aAAa,SAAS,OAC7F,OAAO,iBAAiB;EAE1B,IAAI,aAAa,SAAS,UACxB,OAAO,iBAAiB;EAE1B,MAAM,eAAe,aAAa,aAAa,cAAc;EAE7D,IAAI,iBAAiB,aAAa,WAAW,KAAK,KAAK,aAAa,SAAS,WAAW,IACtF,OAAO,iBAAiB;CAE5B;CAGA,IAAI,KAAK,QAAQ,mBAAmB,iBAAiB,MAAM,CAAC,GAC1D,OAAO,iBAAiB;CAG1B,IAAI,KAAK,QAAQ,mBAAmB,iBAAiB,IAAI,CAAC,GACxD,OAAO,iBAAiB;CAG1B,IAAI,KAAK,QAAQ,mBAAmB,iBAAiB,uBAAuB,CAAC,GAC3E,OAAO,iBAAiB;CAG1B,IAAI,KAAK,QAAQ,mBAAmB,iBAAiB,eAAe,CAAC,GACnE,OAAO,iBAAiB;CAG1B,IAAI,KAAK,QAAQ,mBAAmB,iBAAiB,KAAK,CAAC,GACzD,OAAO,iBAAiB;CAG1B,IAAI,oBAAoB,IAAI,GAC1B,OAAO,iBAAiB;AAE5B;;;;;;;;;;;;AAaA,SAAgB,eAAe,MAAY,cAAgC;CACzE,QAAQ,cAAR;EACE,KAAK,iBAAiB;EACtB,KAAK,iBAAiB;EACtB,KAAK,iBAAiB,QACpB,OAAO;EACT,KAAK,iBAAiB;GACpB,IAAI,WAAW,IAAI,GAGjB,OAAO,cAAc,KAAK,UAAU,IAAI,OAAO,CAAC,cAAc,KAAK,eAAe,EAAE;GAItF,OAAO,cAAc,IAAI;EAC3B,KAAK,iBAAiB,iBACpB,OAAO,WAAW,IAAI,IAAI,cAAc,KAAK,UAAU,IAAI,cAAc,IAAI;EAC/E,SACE,OAAO;CACX;AACF;AAEA,SAAgB,oBACd,SACA,eACA,gBACA,kBACA,eACA;CACA,IAAI,qBAAqB,iBAAiB,QAAQ,qBAAqB,iBAAiB,yBACtF,OAAO;CAET,IACE,kBAAA,4BACA,kBAAkB,SAAS,aAAa,KACxC,kBAAkB,cAAc,qBAEhC,OAAO;CAGT,QAAQ,eAAR;EACE,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,QACH,OAAO;CACX;CACA,IAAI,YAAY,OAAO,kBAAkB,QACvC,OAAO;CAET,IAAI,YAAY,YAAY,kBAAkB,UAC5C,OAAO;CAET,IAAI,kBAAkB,cAAc,WAAW,OAAO,GACpD,OAAO;CAET,KAAK,YAAY,SAAS,YAAY,cAAc,kBAAkB,SAAS,kBAAkB,WAC/F,OAAO;CAGT,OAAO;AACT;AAEA,SAAS,cAAc,MAA4B;CACjD,IAAI,CAAC,QAAQ,KAAK,aAAa,KAAK,cAClC,OAAO;CAET,MAAM,UAAU;CAChB,IAAI,QAAQ,YAAY,SACtB,QAAQ,QAAQ,MAAhB;EACE,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,UACH,OAAO;CACX;CAEF,OAAO,CAAC,CAAC,uBAAuB,QAAQ;AAC1C;;;;;AAMA,SAAgB,WAAW,MAAsB;CAC/C,OAAO,KAAK,QAAQ,OAAA,GAAwB;AAC9C;AAEA,SAAgB,eAAe,UAAgB,wBAAkD;CAG/F,MAAM,gBAAgB,SAAS,eAAe;CAC9C,IAAI,cAAc,SAAS,eAAe;CAC1C,MAAM,mBAAmB;CAEzB,IAAI,kBAAkB,UAEpB,cAAA;MACK,IAAI,qBAAqB,iBAAiB,QAE/C,cAAA;MACK,IAAI,eAAe,UAAU,gBAAgB,GAAG;EACrD,IAAI,kBAAkB,cAAc,kBAAkB,YAAY,kBAAkB,YAAY,CAGhG,OAAO,IAAI,kBAAkB,UAE3B,cAAA;OAEA,cAAc,WAAW,WAAW;CAExC;CAGA,IADiC,kBAAkB,UACnB,CAAC,YAAY,KAAK,GAChD,OAAO;CAGT,OAAO;AACT;;;;;;;AAQA,SAAgB,oBAAoB,SAA2B;CAC7D,IAAI,QAAQ,aAAa,UACvB,OAAO;CAGT,IAAI,QAAQ,aAAa,QAAQ;EAC/B,MAAM,eAAe,sBAAsB,KAAK;EAChD,OAEG,oBAAoB,KAAK,YAAY,KAAK,sBAAsB,IAAI,MAAM,YAE3E,iBAAiB,mBACjB,iBAAiB;CAErB;CAEA,IAAI,QAAQ,aAAa,QAAQ;EAC/B,MAAM,gBAAgB,sBAAsB,MAAM;EAClD,MAAM,eAAe,sBAAsB,KAAK;EAChD,MAAM,oBAAoB,sBAAsB,UAAU;EAC1D,OAEE,oCAAoC,KAAK,aAAa,KACtD,kBAAkB,sBAClB,iBAAiB,UACjB,iBAAiB,sBACjB,iBAAiB,mBAEjB,kBAAkB,cAClB,kBAAkB,iBAElB,oBAAoB,KAAK,iBAAiB,KAC1C,iBAAiB,KAAK,aAAa,KACnC,kBAAkB,eAElB,kBAAkB,YAClB,kBAAkB,eAClB,kBAAkB,aAGlB,QAAQ,aAAa,YAAY,KAEjC,kBAAkB,YAClB,kBAAkB,eAClB,kBAAkB,eAClB,kBAAkB,eAClB,kBAAkB,YAClB,YAAY,KAAK,iBAAiB,KAClC,YAAY,KAAK,iBAAiB,KAElC,kBAAkB,8BAClB,kBAAkB,yBAClB,kBAAkB,gBAClB,kBAAkB,qBAClB,kBAAkB,eAClB,kBAAkB,kBAClB,kBAAkB;CAEtB;CAEA,SAAS,sBAAsB,MAAc;EAC3C,QAAQ,QAAQ,aAAa,IAAI,KAAK,GAAA,CAAI,YAAY;CACxD;CAEA,OAAO;AACT;AAMA,SAAgB,cAAc,MAAuB;CACnD,IAAI,CAAC,MAAM,KAAK,GACd,OAAO;CAIT,OAAQ,OAAyB,kBAAkB,IAAI,KAAK,kBAAkB,CAAC,KAAK;AACtF;AAEA,SAAgB,0BAA0B,MAAc,WAA4B;CAClF,IAAI,cAAc,IAAI,GACpB,OAAO;CAET,OAAO,aAAa,WAAW,IAAI;AACrC"}

package/esm/domain/privacyConstants.mjs

@@ -0,0 +1,36 @@
+import { DefaultPrivacyLevel } from "@kubesense/kubesense-browser-core";
+//#region src/domain/privacyConstants.ts
+const NodePrivacyLevel = {
+	IGNORE: "ignore",
+	HIDDEN: "hidden",
+	ALLOW: DefaultPrivacyLevel.ALLOW,
+	MASK: DefaultPrivacyLevel.MASK,
+	MASK_USER_INPUT: DefaultPrivacyLevel.MASK_USER_INPUT,
+	MASK_UNLESS_ALLOWLISTED: DefaultPrivacyLevel.MASK_UNLESS_ALLOWLISTED
+};
+const PRIVACY_ATTR_NAME = "data-kubesense-privacy";
+const PRIVACY_ATTR_VALUE_ALLOW = "allow";
+const PRIVACY_ATTR_VALUE_MASK = "mask";
+const PRIVACY_ATTR_VALUE_MASK_USER_INPUT = "mask-user-input";
+const PRIVACY_ATTR_VALUE_MASK_UNLESS_ALLOWLISTED = "mask-unless-allowlisted";
+const PRIVACY_ATTR_VALUE_HIDDEN = "hidden";
+const PRIVACY_CLASS_PREFIX = "kubesense-privacy-";
+const CENSORED_STRING_MARK = "***";
+const CENSORED_IMG_MARK = "data:image/gif;base64,R0lGODlhAQABAIAAAMLCwgAAACH5BAAAAAAALAAAAAABAAEAAAICRAEAOw==";
+const FORM_PRIVATE_TAG_NAMES = {
+	INPUT: true,
+	OUTPUT: true,
+	TEXTAREA: true,
+	SELECT: true,
+	OPTION: true,
+	DATALIST: true,
+	OPTGROUP: true
+};
+const TEXT_MASKING_CHAR = "x";
+function getPrivacySelector(privacyLevel) {
+	return `[${PRIVACY_ATTR_NAME}="${privacyLevel}"], .${PRIVACY_CLASS_PREFIX}${privacyLevel}`;
+}
+//#endregion
+export { CENSORED_IMG_MARK, CENSORED_STRING_MARK, FORM_PRIVATE_TAG_NAMES, NodePrivacyLevel, PRIVACY_ATTR_NAME, PRIVACY_ATTR_VALUE_ALLOW, PRIVACY_ATTR_VALUE_HIDDEN, PRIVACY_ATTR_VALUE_MASK, PRIVACY_ATTR_VALUE_MASK_UNLESS_ALLOWLISTED, PRIVACY_ATTR_VALUE_MASK_USER_INPUT, PRIVACY_CLASS_PREFIX, TEXT_MASKING_CHAR, getPrivacySelector };
+
+//# sourceMappingURL=privacyConstants.mjs.map

package/esm/domain/privacyConstants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacyConstants.mjs","names":[],"sources":["../../src/domain/privacyConstants.ts"],"sourcesContent":["import { DefaultPrivacyLevel } from '@kubesense/kubesense-browser-core'\n\nexport const NodePrivacyLevel = {\n  IGNORE: 'ignore',\n  HIDDEN: 'hidden',\n  ALLOW: DefaultPrivacyLevel.ALLOW,\n  MASK: DefaultPrivacyLevel.MASK,\n  MASK_USER_INPUT: DefaultPrivacyLevel.MASK_USER_INPUT,\n  MASK_UNLESS_ALLOWLISTED: DefaultPrivacyLevel.MASK_UNLESS_ALLOWLISTED,\n} as const\nexport type NodePrivacyLevel = (typeof NodePrivacyLevel)[keyof typeof NodePrivacyLevel]\n\nexport const PRIVACY_ATTR_NAME = 'data-kubesense-privacy'\n\n// Privacy Attrs\nexport const PRIVACY_ATTR_VALUE_ALLOW = 'allow'\nexport const PRIVACY_ATTR_VALUE_MASK = 'mask'\nexport const PRIVACY_ATTR_VALUE_MASK_USER_INPUT = 'mask-user-input'\nexport const PRIVACY_ATTR_VALUE_MASK_UNLESS_ALLOWLISTED = 'mask-unless-allowlisted'\nexport const PRIVACY_ATTR_VALUE_HIDDEN = 'hidden'\n\n// Privacy Classes - not all customers can set plain HTML attributes, so support classes too\nexport const PRIVACY_CLASS_PREFIX = 'kubesense-privacy-'\n\n// Private Replacement Templates\nexport const CENSORED_STRING_MARK = '***'\nexport const CENSORED_IMG_MARK = 'data:image/gif;base64,R0lGODlhAQABAIAAAMLCwgAAACH5BAAAAAAALAAAAAABAAEAAAICRAEAOw=='\n\nexport const FORM_PRIVATE_TAG_NAMES: { [tagName: string]: true } = {\n  INPUT: true,\n  OUTPUT: true,\n  TEXTAREA: true,\n  SELECT: true,\n  OPTION: true,\n  DATALIST: true,\n  OPTGROUP: true,\n}\n\nexport const TEXT_MASKING_CHAR = 'x'\n\nexport function getPrivacySelector(privacyLevel: string) {\n  return `[${PRIVACY_ATTR_NAME}=\"${privacyLevel}\"], .${PRIVACY_CLASS_PREFIX}${privacyLevel}`\n}\n"],"mappings":";;AAEA,MAAa,mBAAmB;CAC9B,QAAQ;CACR,QAAQ;CACR,OAAO,oBAAoB;CAC3B,MAAM,oBAAoB;CAC1B,iBAAiB,oBAAoB;CACrC,yBAAyB,oBAAoB;AAC/C;AAGA,MAAa,oBAAoB;AAGjC,MAAa,2BAA2B;AACxC,MAAa,0BAA0B;AACvC,MAAa,qCAAqC;AAClD,MAAa,6CAA6C;AAC1D,MAAa,4BAA4B;AAGzC,MAAa,uBAAuB;AAGpC,MAAa,uBAAuB;AACpC,MAAa,oBAAoB;AAEjC,MAAa,yBAAsD;CACjE,OAAO;CACP,QAAQ;CACR,UAAU;CACV,QAAQ;CACR,QAAQ;CACR,UAAU;CACV,UAAU;AACZ;AAEA,MAAa,oBAAoB;AAEjC,SAAgB,mBAAmB,cAAsB;CACvD,OAAO,IAAI,kBAAkB,IAAI,aAAa,OAAO,uBAAuB;AAC9E"}

package/esm/domain/requestCollection.mjs

@@ -0,0 +1,86 @@
+import "./lifeCycle.mjs";
+import { isAllowedRequestUrl } from "./resource/resourceUtils.mjs";
+import { startTracer } from "./tracing/tracer.mjs";
+import { findGraphQlConfiguration } from "./resource/graphql.mjs";
+import { elapsed, timeStampNow } from "@kubesense/kubesense-js-core/time";
+import { BufferedDataType, RequestType, ResponseBodyAction, initFetchObservable, initXhrObservable } from "@kubesense/kubesense-browser-core";
+//#region src/domain/requestCollection.ts
+let nextRequestIndex = 1;
+function startRequestCollection(lifeCycle, configuration, sessionManager, userContext, accountContext, bufferedDataObservable) {
+	const tracer = startTracer(configuration, sessionManager, userContext, accountContext);
+	trackXhr(lifeCycle, tracer, bufferedDataObservable);
+	trackFetch(lifeCycle, configuration, tracer, bufferedDataObservable);
+}
+function trackXhr(lifeCycle, tracer, bufferedDataObservable) {
+	const subscriptions = [];
+	subscriptions.push(initXhrObservable().subscribe((context) => {
+		if (context.state === "start" && isAllowedRequestUrl(context.url)) {
+			tracer.traceXhr(context, context.xhr);
+			assignRequestIndex(context);
+		}
+	}));
+	subscriptions.push(bufferedDataObservable.subscribe(({ data, type }) => {
+		if (type !== BufferedDataType.XHR) return;
+		const context = data;
+		if (!isAllowedRequestUrl(context.url)) return;
+		switch (context.state) {
+			case "start":
+				assignRequestIndex(context);
+				lifeCycle.notify(7, {
+					requestIndex: context.requestIndex,
+					url: context.url
+				});
+				break;
+			case "complete":
+				tracer.clearTracingIfNeeded(context);
+				lifeCycle.notify(8, {
+					...context,
+					type: RequestType.XHR,
+					isAbortedOnStart: false
+				});
+		}
+	}));
+	return { stop: () => subscriptions.forEach((subscription) => subscription.unsubscribe()) };
+}
+function trackFetch(lifeCycle, configuration, tracer, bufferedDataObservable) {
+	const subscriptions = [];
+	subscriptions.push(initFetchObservable({ responseBodyAction: (context) => {
+		if (findGraphQlConfiguration(context.url, configuration)?.trackResponseErrors) return ResponseBodyAction.COLLECT;
+		return ResponseBodyAction.IGNORE;
+	} }).subscribe((context) => {
+		if (context.state === "start" && isAllowedRequestUrl(context.url)) {
+			tracer.traceFetch(context);
+			assignRequestIndex(context);
+		}
+	}));
+	subscriptions.push(bufferedDataObservable.subscribe(({ data, type }) => {
+		if (type !== BufferedDataType.FETCH) return;
+		const context = data;
+		if (!isAllowedRequestUrl(context.url)) return;
+		switch (context.state) {
+			case "start":
+				assignRequestIndex(context);
+				lifeCycle.notify(7, {
+					requestIndex: context.requestIndex,
+					url: context.url
+				});
+				break;
+			case "resolve":
+				tracer.clearTracingIfNeeded(context);
+				lifeCycle.notify(8, {
+					...context,
+					duration: elapsed(context.startClocks.timeStamp, timeStampNow()),
+					type: RequestType.FETCH,
+					requestBody: context.init?.body
+				});
+		}
+	}));
+	return { stop: () => subscriptions.forEach((subscription) => subscription.unsubscribe()) };
+}
+function assignRequestIndex(context) {
+	if (!context.requestIndex) context.requestIndex = nextRequestIndex++;
+}
+//#endregion
+export { startRequestCollection, trackFetch, trackXhr };
+
+//# sourceMappingURL=requestCollection.mjs.map

package/esm/domain/requestCollection.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestCollection.mjs","names":[],"sources":["../../src/domain/requestCollection.ts"],"sourcesContent":["import { elapsed, timeStampNow } from '@kubesense/kubesense-js-core/time'\nimport type { Duration, ClocksState } from '@kubesense/kubesense-js-core/time'\nimport type {\n  XhrCompleteContext,\n  XhrStartContext,\n  FetchStartContext,\n  FetchResolveContext,\n  ContextManager,\n  SessionManager,\n  Observable,\n  BufferedData,\n  Subscription,\n} from '@kubesense/kubesense-browser-core'\nimport {\n  RequestType,\n  ResponseBodyAction,\n  BufferedDataType,\n  initFetchObservable,\n  initXhrObservable,\n} from '@kubesense/kubesense-browser-core'\nimport type { RumConfiguration } from './configuration'\nimport type { LifeCycle } from './lifeCycle'\nimport { LifeCycleEventType } from './lifeCycle'\nimport { isAllowedRequestUrl } from './resource/resourceUtils'\nimport type { Tracer } from './tracing/tracer'\nimport { startTracer } from './tracing/tracer'\nimport type { SpanIdentifier, TraceIdentifier } from './tracing/identifier'\nimport { findGraphQlConfiguration } from './resource/graphql'\n\nexport interface CustomContext {\n  requestIndex: number\n  spanId?: SpanIdentifier\n  traceId?: TraceIdentifier\n  traceSampled?: boolean\n}\nexport interface RumFetchStartContext extends FetchStartContext, CustomContext {}\nexport interface RumFetchResolveContext extends FetchResolveContext, CustomContext {}\nexport interface RumXhrStartContext extends XhrStartContext, CustomContext {}\nexport interface RumXhrCompleteContext extends XhrCompleteContext, CustomContext {}\n\nexport interface RequestStartEvent {\n  requestIndex: number\n  url: string\n}\nexport interface RequestCompleteEvent {\n  requestIndex: number\n  type: RequestType\n  method: string\n  url: string\n  status: number\n  responseType?: string\n  startClocks: ClocksState\n  duration: Duration\n  spanId?: SpanIdentifier\n  traceId?: TraceIdentifier\n  traceSampled?: boolean\n  xhr?: XMLHttpRequest\n  response?: Response\n  input?: unknown\n  init?: RequestInit\n  error?: Error\n  isAborted: boolean\n  isAbortedOnStart: boolean\n  handlingStack?: string\n  requestBody?: unknown\n  responseBody?: string\n}\n\nlet nextRequestIndex = 1\n\nexport function startRequestCollection(\n  lifeCycle: LifeCycle,\n  configuration: RumConfiguration,\n  sessionManager: SessionManager,\n  userContext: ContextManager,\n  accountContext: ContextManager,\n  bufferedDataObservable: Observable<BufferedData>\n) {\n  const tracer = startTracer(configuration, sessionManager, userContext, accountContext)\n  trackXhr(lifeCycle, tracer, bufferedDataObservable)\n  trackFetch(lifeCycle, configuration, tracer, bufferedDataObservable)\n}\n\nexport function trackXhr(lifeCycle: LifeCycle, tracer: Tracer, bufferedDataObservable: Observable<BufferedData>) {\n  const subscriptions: Subscription[] = []\n\n  subscriptions.push(\n    initXhrObservable().subscribe((context) => {\n      if (context.state === 'start' && isAllowedRequestUrl(context.url)) {\n        tracer.traceXhr(context, context.xhr)\n        assignRequestIndex(context as RumXhrStartContext)\n      }\n    })\n  )\n\n  subscriptions.push(\n    bufferedDataObservable.subscribe(({ data, type }) => {\n      if (type !== BufferedDataType.XHR) {\n        return\n      }\n      const context = data as RumXhrStartContext | RumXhrCompleteContext\n      if (!isAllowedRequestUrl(context.url)) {\n        return\n      }\n\n      switch (context.state) {\n        case 'start':\n          assignRequestIndex(context)\n          lifeCycle.notify(LifeCycleEventType.REQUEST_STARTED, {\n            requestIndex: context.requestIndex,\n            url: context.url,\n          })\n          break\n        case 'complete':\n          tracer.clearTracingIfNeeded(context)\n          lifeCycle.notify(LifeCycleEventType.REQUEST_COMPLETED, {\n            ...context,\n            type: RequestType.XHR,\n            isAbortedOnStart: false,\n          })\n          break\n      }\n    })\n  )\n\n  return { stop: () => subscriptions.forEach((subscription) => subscription.unsubscribe()) }\n}\n\nexport function trackFetch(\n  lifeCycle: LifeCycle,\n  configuration: RumConfiguration,\n  tracer: Tracer,\n  bufferedDataObservable: Observable<BufferedData>\n) {\n  const subscriptions: Subscription[] = []\n\n  subscriptions.push(\n    initFetchObservable({\n      responseBodyAction: (context) => {\n        if (findGraphQlConfiguration(context.url, configuration)?.trackResponseErrors) {\n          return ResponseBodyAction.COLLECT\n        }\n        return ResponseBodyAction.IGNORE\n      },\n    }).subscribe((context) => {\n      if (context.state === 'start' && isAllowedRequestUrl(context.url)) {\n        tracer.traceFetch(context)\n        assignRequestIndex(context as RumFetchStartContext)\n      }\n    })\n  )\n\n  subscriptions.push(\n    bufferedDataObservable.subscribe(({ data, type }) => {\n      if (type !== BufferedDataType.FETCH) {\n        return\n      }\n      const context = data as RumFetchResolveContext | RumFetchStartContext\n      if (!isAllowedRequestUrl(context.url)) {\n        return\n      }\n\n      switch (context.state) {\n        case 'start':\n          assignRequestIndex(context)\n          lifeCycle.notify(LifeCycleEventType.REQUEST_STARTED, {\n            requestIndex: context.requestIndex,\n            url: context.url,\n          })\n          break\n        case 'resolve':\n          tracer.clearTracingIfNeeded(context)\n          lifeCycle.notify(LifeCycleEventType.REQUEST_COMPLETED, {\n            ...context,\n            duration: elapsed(context.startClocks.timeStamp, timeStampNow()),\n            type: RequestType.FETCH,\n            requestBody: context.init?.body,\n          })\n          break\n      }\n    })\n  )\n  return { stop: () => subscriptions.forEach((subscription) => subscription.unsubscribe()) }\n}\n\nfunction assignRequestIndex(context: CustomContext) {\n  if (!context.requestIndex) {\n    context.requestIndex = nextRequestIndex++\n  }\n}\n"],"mappings":";;;;;;;AAoEA,IAAI,mBAAmB;AAEvB,SAAgB,uBACd,WACA,eACA,gBACA,aACA,gBACA,wBACA;CACA,MAAM,SAAS,YAAY,eAAe,gBAAgB,aAAa,cAAc;CACrF,SAAS,WAAW,QAAQ,sBAAsB;CAClD,WAAW,WAAW,eAAe,QAAQ,sBAAsB;AACrE;AAEA,SAAgB,SAAS,WAAsB,QAAgB,wBAAkD;CAC/G,MAAM,gBAAgC,CAAC;CAEvC,cAAc,KACZ,kBAAkB,CAAC,CAAC,WAAW,YAAY;EACzC,IAAI,QAAQ,UAAU,WAAW,oBAAoB,QAAQ,GAAG,GAAG;GACjE,OAAO,SAAS,SAAS,QAAQ,GAAG;GACpC,mBAAmB,OAA6B;EAClD;CACF,CAAC,CACH;CAEA,cAAc,KACZ,uBAAuB,WAAW,EAAE,MAAM,WAAW;EACnD,IAAI,SAAS,iBAAiB,KAC5B;EAEF,MAAM,UAAU;EAChB,IAAI,CAAC,oBAAoB,QAAQ,GAAG,GAClC;EAGF,QAAQ,QAAQ,OAAhB;GACE,KAAK;IACH,mBAAmB,OAAO;IAC1B,UAAU,OAAA,GAA2C;KACnD,cAAc,QAAQ;KACtB,KAAK,QAAQ;IACf,CAAC;IACD;GACF,KAAK;IACH,OAAO,qBAAqB,OAAO;IACnC,UAAU,OAAA,GAA6C;KACrD,GAAG;KACH,MAAM,YAAY;KAClB,kBAAkB;IACpB,CAAC;EAEL;CACF,CAAC,CACH;CAEA,OAAO,EAAE,YAAY,cAAc,SAAS,iBAAiB,aAAa,YAAY,CAAC,EAAE;AAC3F;AAEA,SAAgB,WACd,WACA,eACA,QACA,wBACA;CACA,MAAM,gBAAgC,CAAC;CAEvC,cAAc,KACZ,oBAAoB,EAClB,qBAAqB,YAAY;EAC/B,IAAI,yBAAyB,QAAQ,KAAK,aAAa,CAAC,EAAE,qBACxD,OAAO,mBAAmB;EAE5B,OAAO,mBAAmB;CAC5B,EACF,CAAC,CAAC,CAAC,WAAW,YAAY;EACxB,IAAI,QAAQ,UAAU,WAAW,oBAAoB,QAAQ,GAAG,GAAG;GACjE,OAAO,WAAW,OAAO;GACzB,mBAAmB,OAA+B;EACpD;CACF,CAAC,CACH;CAEA,cAAc,KACZ,uBAAuB,WAAW,EAAE,MAAM,WAAW;EACnD,IAAI,SAAS,iBAAiB,OAC5B;EAEF,MAAM,UAAU;EAChB,IAAI,CAAC,oBAAoB,QAAQ,GAAG,GAClC;EAGF,QAAQ,QAAQ,OAAhB;GACE,KAAK;IACH,mBAAmB,OAAO;IAC1B,UAAU,OAAA,GAA2C;KACnD,cAAc,QAAQ;KACtB,KAAK,QAAQ;IACf,CAAC;IACD;GACF,KAAK;IACH,OAAO,qBAAqB,OAAO;IACnC,UAAU,OAAA,GAA6C;KACrD,GAAG;KACH,UAAU,QAAQ,QAAQ,YAAY,WAAW,aAAa,CAAC;KAC/D,MAAM,YAAY;KAClB,aAAa,QAAQ,MAAM;IAC7B,CAAC;EAEL;CACF,CAAC,CACH;CACA,OAAO,EAAE,YAAY,cAAc,SAAS,iBAAiB,aAAa,YAAY,CAAC,EAAE;AAC3F;AAEA,SAAS,mBAAmB,SAAwB;CAClD,IAAI,CAAC,QAAQ,cACX,QAAQ,eAAe;AAE3B"}

package/esm/domain/resource/graphql.mjs

@@ -0,0 +1,93 @@
+import { buildUrl } from "@kubesense/kubesense-js-core/util";
+import { ONE_KIBI_BYTE, isNonEmptyArray, matchList, safeTruncate, tryJsonParse } from "@kubesense/kubesense-browser-core";
+//#region src/domain/resource/graphql.ts
+/**
+* arbitrary value, byte precision not needed
+*/
+const GRAPHQL_PAYLOAD_LIMIT = 32 * ONE_KIBI_BYTE;
+function extractGraphQlMetadata(request, graphQlConfig) {
+	const metadata = extractGraphQlRequestMetadata(request, graphQlConfig.trackPayload);
+	if (!metadata) return;
+	if (graphQlConfig.trackResponseErrors && request.responseBody) {
+		const responseErrors = parseGraphQlResponse(request.responseBody);
+		if (responseErrors) {
+			metadata.error_count = responseErrors.length;
+			metadata.errors = responseErrors;
+		}
+	}
+	return metadata;
+}
+function parseGraphQlResponse(responseText) {
+	const response = tryJsonParse(responseText);
+	if (!response || typeof response !== "object") return;
+	const responseObj = response;
+	if (!isNonEmptyArray(responseObj.errors)) return;
+	return responseObj.errors.map((error) => {
+		return {
+			message: error.message,
+			path: error.path,
+			locations: error.locations,
+			code: error.extensions?.code
+		};
+	});
+}
+function findGraphQlConfiguration(url, configuration) {
+	return configuration.allowedGraphQlUrls.find((graphQlOption) => matchList([graphQlOption.match], url));
+}
+function extractGraphQlRequestMetadata(request, trackPayload = false) {
+	let rawMetadata;
+	if (request.method === "POST") rawMetadata = extractFromBody(request.requestBody);
+	else if (request.method === "GET") rawMetadata = extractFromUrlQueryParams(request.url);
+	if (!rawMetadata) return;
+	return sanitizeGraphQlMetadata(rawMetadata, trackPayload);
+}
+function extractFromBody(requestBody) {
+	if (!requestBody || typeof requestBody !== "string") return;
+	const graphqlBody = tryJsonParse(requestBody);
+	if (!graphqlBody) return;
+	return {
+		query: graphqlBody.query,
+		operationName: graphqlBody.operationName,
+		variables: graphqlBody.variables ? JSON.stringify(graphqlBody.variables) : void 0,
+		operationType: graphqlBody.operationType
+	};
+}
+function extractFromUrlQueryParams(url) {
+	const searchParams = buildUrl(url).searchParams;
+	const variablesParam = searchParams.get("variables");
+	const variables = variablesParam && tryJsonParse(variablesParam) !== void 0 ? variablesParam : void 0;
+	return {
+		query: searchParams.get("query") || void 0,
+		operationName: searchParams.get("operationName") || void 0,
+		variables,
+		operationType: searchParams.get("operationType") || void 0
+	};
+}
+function sanitizeGraphQlMetadata(rawMetadata, trackPayload) {
+	let operationType;
+	let payload;
+	let variables;
+	if (rawMetadata.query) {
+		const trimmedQuery = rawMetadata.query.trim();
+		operationType = getOperationType(trimmedQuery);
+		if (trackPayload) payload = safeTruncate(trimmedQuery, GRAPHQL_PAYLOAD_LIMIT, "...");
+	}
+	if (!operationType) {
+		const bodyType = rawMetadata.operationType;
+		if (bodyType === "query" || bodyType === "mutation" || bodyType === "subscription") operationType = bodyType;
+	}
+	if (rawMetadata.variables) variables = rawMetadata.variables;
+	return {
+		operationType,
+		operationName: rawMetadata.operationName,
+		variables,
+		payload
+	};
+}
+function getOperationType(query) {
+	return query.match(/^\s*(query|mutation|subscription)\b/i)?.[1];
+}
+//#endregion
+export { extractGraphQlMetadata, extractGraphQlRequestMetadata, findGraphQlConfiguration, parseGraphQlResponse };
+
+//# sourceMappingURL=graphql.mjs.map

package/esm/domain/resource/graphql.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql.mjs","names":[],"sources":["../../../src/domain/resource/graphql.ts"],"sourcesContent":["import {\n  isNonEmptyArray,\n  matchList,\n  ONE_KIBI_BYTE,\n  safeTruncate,\n  tryJsonParse,\n} from '@kubesense/kubesense-browser-core'\nimport { buildUrl } from '@kubesense/kubesense-js-core/util'\nimport type { RumConfiguration, GraphQlUrlOption } from '../configuration'\nimport type { RequestCompleteEvent } from '../requestCollection'\n\n/**\n * arbitrary value, byte precision not needed\n */\nconst GRAPHQL_PAYLOAD_LIMIT = 32 * ONE_KIBI_BYTE\n\ninterface RawGraphQlMetadata {\n  query?: string\n  operationName?: string\n  variables?: string\n  operationType?: string\n}\n\nexport interface GraphQlError {\n  message: string\n  code?: string\n  locations?: Array<{ line: number; column: number }>\n  path?: Array<string | number>\n}\n\nexport interface GraphQlMetadata {\n  operationType?: 'query' | 'mutation' | 'subscription'\n  operationName?: string\n  variables?: string\n  payload?: string\n  error_count?: number\n  errors?: GraphQlError[]\n}\n\nexport function extractGraphQlMetadata(\n  request: RequestCompleteEvent,\n  graphQlConfig: GraphQlUrlOption\n): GraphQlMetadata | undefined {\n  const metadata = extractGraphQlRequestMetadata(request, graphQlConfig.trackPayload)\n  if (!metadata) {\n    return\n  }\n\n  if (graphQlConfig.trackResponseErrors && request.responseBody) {\n    const responseErrors = parseGraphQlResponse(request.responseBody)\n    if (responseErrors) {\n      metadata.error_count = responseErrors.length\n      metadata.errors = responseErrors\n    }\n  }\n\n  return metadata\n}\n\nexport function parseGraphQlResponse(responseText: string): GraphQlError[] | undefined {\n  const response = tryJsonParse(responseText)\n\n  if (!response || typeof response !== 'object') {\n    return\n  }\n\n  const responseObj = response as Record<string, unknown>\n\n  if (!isNonEmptyArray(responseObj.errors)) {\n    return\n  }\n\n  const errors = (responseObj.errors as Array<Record<string, unknown>>).map((error) => {\n    const graphqlError: GraphQlError = {\n      message: error.message as string,\n      path: error.path as Array<string | number>,\n      locations: error.locations as Array<{ line: number; column: number }>,\n      code: (error.extensions as Record<string, unknown> | undefined)?.code as string,\n    }\n\n    return graphqlError\n  })\n\n  return errors\n}\n\nexport function findGraphQlConfiguration(url: string, configuration: RumConfiguration): GraphQlUrlOption | undefined {\n  return configuration.allowedGraphQlUrls.find((graphQlOption) => matchList([graphQlOption.match], url))\n}\n\nexport function extractGraphQlRequestMetadata(\n  request: Pick<RequestCompleteEvent, 'method' | 'url' | 'requestBody'>,\n  trackPayload: boolean = false\n): GraphQlMetadata | undefined {\n  let rawMetadata: RawGraphQlMetadata | undefined\n\n  if (request.method === 'POST') {\n    rawMetadata = extractFromBody(request.requestBody)\n  } else if (request.method === 'GET') {\n    rawMetadata = extractFromUrlQueryParams(request.url)\n  }\n\n  if (!rawMetadata) {\n    return\n  }\n\n  return sanitizeGraphQlMetadata(rawMetadata, trackPayload)\n}\n\nfunction extractFromBody(requestBody: unknown): RawGraphQlMetadata | undefined {\n  if (!requestBody || typeof requestBody !== 'string') {\n    return\n  }\n\n  const graphqlBody = tryJsonParse<{\n    query?: string\n    operationName?: string\n    variables?: unknown\n    operationType?: string\n  }>(requestBody)\n\n  if (!graphqlBody) {\n    return\n  }\n\n  return {\n    query: graphqlBody.query,\n    operationName: graphqlBody.operationName,\n    variables: graphqlBody.variables ? JSON.stringify(graphqlBody.variables) : undefined,\n    operationType: graphqlBody.operationType,\n  }\n}\n\nfunction extractFromUrlQueryParams(url: string): RawGraphQlMetadata {\n  const searchParams = buildUrl(url).searchParams\n  const variablesParam = searchParams.get('variables')\n  const variables = variablesParam && tryJsonParse(variablesParam) !== undefined ? variablesParam : undefined\n\n  return {\n    query: searchParams.get('query') || undefined,\n    operationName: searchParams.get('operationName') || undefined,\n    variables,\n    operationType: searchParams.get('operationType') || undefined,\n  }\n}\n\nfunction sanitizeGraphQlMetadata(rawMetadata: RawGraphQlMetadata, trackPayload: boolean): GraphQlMetadata {\n  let operationType: 'query' | 'mutation' | 'subscription' | undefined\n  let payload: string | undefined\n  let variables: string | undefined\n\n  if (rawMetadata.query) {\n    const trimmedQuery = rawMetadata.query.trim()\n    operationType = getOperationType(trimmedQuery)\n    if (trackPayload) {\n      payload = safeTruncate(trimmedQuery, GRAPHQL_PAYLOAD_LIMIT, '...')\n    }\n  }\n\n  if (!operationType) {\n    const bodyType = rawMetadata.operationType\n    if (bodyType === 'query' || bodyType === 'mutation' || bodyType === 'subscription') {\n      operationType = bodyType\n    }\n  }\n\n  if (rawMetadata.variables) {\n    variables = rawMetadata.variables\n  }\n\n  return {\n    operationType,\n    operationName: rawMetadata.operationName,\n    variables,\n    payload,\n  }\n}\n\nfunction getOperationType(query: string) {\n  return query.match(/^\\s*(query|mutation|subscription)\\b/i)?.[1] as 'query' | 'mutation' | 'subscription' | undefined\n}\n"],"mappings":";;;;;;AAcA,MAAM,wBAAwB,KAAK;AAyBnC,SAAgB,uBACd,SACA,eAC6B;CAC7B,MAAM,WAAW,8BAA8B,SAAS,cAAc,YAAY;CAClF,IAAI,CAAC,UACH;CAGF,IAAI,cAAc,uBAAuB,QAAQ,cAAc;EAC7D,MAAM,iBAAiB,qBAAqB,QAAQ,YAAY;EAChE,IAAI,gBAAgB;GAClB,SAAS,cAAc,eAAe;GACtC,SAAS,SAAS;EACpB;CACF;CAEA,OAAO;AACT;AAEA,SAAgB,qBAAqB,cAAkD;CACrF,MAAM,WAAW,aAAa,YAAY;CAE1C,IAAI,CAAC,YAAY,OAAO,aAAa,UACnC;CAGF,MAAM,cAAc;CAEpB,IAAI,CAAC,gBAAgB,YAAY,MAAM,GACrC;CAcF,OAXgB,YAAY,OAA0C,KAAK,UAAU;EAQnF,OAAO;GANL,SAAS,MAAM;GACf,MAAM,MAAM;GACZ,WAAW,MAAM;GACjB,MAAO,MAAM,YAAoD;EAGjD;CACpB,CAEY;AACd;AAEA,SAAgB,yBAAyB,KAAa,eAA+D;CACnH,OAAO,cAAc,mBAAmB,MAAM,kBAAkB,UAAU,CAAC,cAAc,KAAK,GAAG,GAAG,CAAC;AACvG;AAEA,SAAgB,8BACd,SACA,eAAwB,OACK;CAC7B,IAAI;CAEJ,IAAI,QAAQ,WAAW,QACrB,cAAc,gBAAgB,QAAQ,WAAW;MAC5C,IAAI,QAAQ,WAAW,OAC5B,cAAc,0BAA0B,QAAQ,GAAG;CAGrD,IAAI,CAAC,aACH;CAGF,OAAO,wBAAwB,aAAa,YAAY;AAC1D;AAEA,SAAS,gBAAgB,aAAsD;CAC7E,IAAI,CAAC,eAAe,OAAO,gBAAgB,UACzC;CAGF,MAAM,cAAc,aAKjB,WAAW;CAEd,IAAI,CAAC,aACH;CAGF,OAAO;EACL,OAAO,YAAY;EACnB,eAAe,YAAY;EAC3B,WAAW,YAAY,YAAY,KAAK,UAAU,YAAY,SAAS,IAAI,KAAA;EAC3E,eAAe,YAAY;CAC7B;AACF;AAEA,SAAS,0BAA0B,KAAiC;CAClE,MAAM,eAAe,SAAS,GAAG,CAAC,CAAC;CACnC,MAAM,iBAAiB,aAAa,IAAI,WAAW;CACnD,MAAM,YAAY,kBAAkB,aAAa,cAAc,MAAM,KAAA,IAAY,iBAAiB,KAAA;CAElG,OAAO;EACL,OAAO,aAAa,IAAI,OAAO,KAAK,KAAA;EACpC,eAAe,aAAa,IAAI,eAAe,KAAK,KAAA;EACpD;EACA,eAAe,aAAa,IAAI,eAAe,KAAK,KAAA;CACtD;AACF;AAEA,SAAS,wBAAwB,aAAiC,cAAwC;CACxG,IAAI;CACJ,IAAI;CACJ,IAAI;CAEJ,IAAI,YAAY,OAAO;EACrB,MAAM,eAAe,YAAY,MAAM,KAAK;EAC5C,gBAAgB,iBAAiB,YAAY;EAC7C,IAAI,cACF,UAAU,aAAa,cAAc,uBAAuB,KAAK;CAErE;CAEA,IAAI,CAAC,eAAe;EAClB,MAAM,WAAW,YAAY;EAC7B,IAAI,aAAa,WAAW,aAAa,cAAc,aAAa,gBAClE,gBAAgB;CAEpB;CAEA,IAAI,YAAY,WACd,YAAY,YAAY;CAG1B,OAAO;EACL;EACA,eAAe,YAAY;EAC3B;EACA;CACF;AACF;AAEA,SAAS,iBAAiB,OAAe;CACvC,OAAO,MAAM,MAAM,sCAAsC,CAAC,GAAG;AAC/D"}

package/esm/domain/resource/requestRegistry.mjs

@@ -0,0 +1,32 @@
+import "../lifeCycle.mjs";
+//#region src/domain/resource/requestRegistry.ts
+const MAX_REQUESTS = 1e3;
+function createRequestRegistry(lifeCycle) {
+	const requests = /* @__PURE__ */ new Set();
+	const subscription = lifeCycle.subscribe(8, (request) => {
+		requests.add(request);
+		if (requests.size > 1e3) requests.delete(requests.values().next().value);
+	});
+	return {
+		getMatchingRequest(entry) {
+			let minTimeDifference = Infinity;
+			let closestRequest;
+			for (const request of requests) {
+				const timeDifference = entry.startTime - request.startClocks.relative;
+				if (0 <= timeDifference && timeDifference < minTimeDifference && request.url === entry.name) {
+					minTimeDifference = Math.abs(timeDifference);
+					closestRequest = request;
+				}
+			}
+			if (closestRequest) requests.delete(closestRequest);
+			return closestRequest;
+		},
+		stop() {
+			subscription.unsubscribe();
+		}
+	};
+}
+//#endregion
+export { MAX_REQUESTS, createRequestRegistry };
+
+//# sourceMappingURL=requestRegistry.mjs.map

package/esm/domain/resource/requestRegistry.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestRegistry.mjs","names":[],"sources":["../../../src/domain/resource/requestRegistry.ts"],"sourcesContent":["import type { RumPerformanceResourceTiming } from '../../browser/performanceObservable'\nimport type { LifeCycle } from '../lifeCycle'\nimport { LifeCycleEventType } from '../lifeCycle'\nimport type { RequestCompleteEvent } from '../requestCollection'\n\nexport interface RequestRegistry {\n  getMatchingRequest(entry: RumPerformanceResourceTiming): RequestCompleteEvent | undefined\n  stop(): void\n}\n\n// Maximum number of requests to keep in the registry. Requests should be removed quite quickly in\n// general, this is just a safety limit to avoid memory leaks in case of a bug.\nexport const MAX_REQUESTS = 1000\n\nexport function createRequestRegistry(lifeCycle: LifeCycle): RequestRegistry {\n  const requests = new Set<RequestCompleteEvent>()\n\n  const subscription = lifeCycle.subscribe(LifeCycleEventType.REQUEST_COMPLETED, (request) => {\n    requests.add(request)\n\n    if (requests.size > MAX_REQUESTS) {\n      requests.delete(requests.values().next().value!)\n    }\n  })\n\n  return {\n    getMatchingRequest(entry) {\n      // Returns the closest request object that happened before the entry\n      let minTimeDifference = Infinity\n      let closestRequest: RequestCompleteEvent | undefined\n      for (const request of requests) {\n        const timeDifference = entry.startTime - request.startClocks.relative\n        if (0 <= timeDifference && timeDifference < minTimeDifference && request.url === entry.name) {\n          minTimeDifference = Math.abs(timeDifference)\n          closestRequest = request\n        }\n      }\n\n      if (closestRequest) {\n        requests.delete(closestRequest)\n      }\n\n      return closestRequest\n    },\n\n    stop() {\n      subscription.unsubscribe()\n    },\n  }\n}\n"],"mappings":";;AAYA,MAAa,eAAe;AAE5B,SAAgB,sBAAsB,WAAuC;CAC3E,MAAM,2BAAW,IAAI,IAA0B;CAE/C,MAAM,eAAe,UAAU,UAAA,IAAiD,YAAY;EAC1F,SAAS,IAAI,OAAO;EAEpB,IAAI,SAAS,OAAA,KACX,SAAS,OAAO,SAAS,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAM;CAEnD,CAAC;CAED,OAAO;EACL,mBAAmB,OAAO;GAExB,IAAI,oBAAoB;GACxB,IAAI;GACJ,KAAK,MAAM,WAAW,UAAU;IAC9B,MAAM,iBAAiB,MAAM,YAAY,QAAQ,YAAY;IAC7D,IAAI,KAAK,kBAAkB,iBAAiB,qBAAqB,QAAQ,QAAQ,MAAM,MAAM;KAC3F,oBAAoB,KAAK,IAAI,cAAc;KAC3C,iBAAiB;IACnB;GACF;GAEA,IAAI,gBACF,SAAS,OAAO,cAAc;GAGhC,OAAO;EACT;EAEA,OAAO;GACL,aAAa,YAAY;EAC3B;CACF;AACF"}