@leanbase.com/js 0.2.1 → 0.2.2-alpha.0

package/dist/types.d.ts

@@ -1,5 +1,6 @@
 import { FeatureFlagValue, JsonType, PostHogCoreOptions } from '@posthog/core';
 import { KnownUnsafeEditableEvent } from '@posthog/core';
+import type { recordOptions } from './extensions/replay/types/rrweb';
 import { Leanbase } from './leanbase';
 export declare const COPY_AUTOCAPTURE_EVENT = "$copy_autocapture";
 export type Property = any;
@@ -104,6 +105,19 @@ export interface LeanbaseConfig extends Partial<PostHogCoreOptions> {
      * @default true
      */
     autocapture: boolean | AutocaptureConfig;
+    /**
+     * Enables or disables session recording. When true, session recording is disabled on the client.
+     * @default false
+     */
+    disable_session_recording?: boolean;
+    /**
+     * Session recording configuration
+     */
+    session_recording?: SessionRecordingOptions;
+    /**
+     * Enable console.log recording for session replay (can be controlled remotely). Undefined defers to server.
+     */
+    enable_recording_console_log?: boolean;
     /**
      * Determines whether Leanbase should capture pageview events automatically.
      * Can be:
@@ -114,6 +128,12 @@ export interface LeanbaseConfig extends Partial<PostHogCoreOptions> {
      * @default true
      */
     capture_pageview: boolean | 'history_change';
+    /**
+     * Enables performance capture. When true, network performance timing can be forwarded to replay when enabled.
+     */
+    capture_performance?: boolean | {
+        network_timing?: boolean;
+    };
     /**
      * Determines the session idle timeout in seconds.
      * Any new event that's happened after this timeout will create a new session.
@@ -338,6 +358,73 @@ export interface LeanbaseConfig extends Partial<PostHogCoreOptions> {
      */
     loaded: (instance: Leanbase) => void;
 }
+export type SessionRecordingCanvasOptions = {
+    recordCanvas?: boolean | null;
+    canvasFps?: number | null;
+    canvasQuality?: string | null;
+};
+export interface SessionRecordingOptions {
+    blockClass?: string | RegExp;
+    blockSelector?: string | null;
+    ignoreClass?: string | RegExp;
+    maskTextClass?: string | RegExp;
+    maskTextSelector?: string | null;
+    maskTextFn?: ((text: string, element?: HTMLElement) => string) | null;
+    maskAllInputs?: boolean;
+    maskInputOptions?: recordOptions['maskInputOptions'];
+    maskInputFn?: ((text: string, element?: HTMLElement) => string) | null;
+    slimDOMOptions?: recordOptions['slimDOMOptions'];
+    collectFonts?: boolean;
+    inlineStylesheet?: boolean;
+    recordCrossOriginIframes?: boolean;
+    recordHeaders?: boolean;
+    recordBody?: boolean;
+    captureCanvas?: SessionRecordingCanvasOptions;
+    maskCapturedNetworkRequestFn?: ((data: CapturedNetworkRequest) => CapturedNetworkRequest | null | undefined) | null;
+    maskNetworkRequestFn?: ((data: NetworkRequest) => NetworkRequest | null | undefined) | null;
+    full_snapshot_interval_millis?: number;
+    compress_events?: boolean;
+    session_idle_threshold_ms?: number;
+    __mutationThrottlerRefillRate?: number;
+    __mutationThrottlerBucketSize?: number;
+    /**
+     * Force-enable session recording locally even if remote config disables it.
+     * Useful for dev/testing when the backend has sessionRecording set to false.
+     */
+    forceClientRecording?: boolean;
+}
+export type SessionRecordingPersistedConfig = Omit<SessionRecordingRemoteConfig, 'recordCanvas' | 'canvasFps' | 'canvasQuality' | 'networkPayloadCapture' | 'sampleRate' | 'minimumDurationMilliseconds'> & {
+    enabled: boolean;
+    networkPayloadCapture: SessionRecordingRemoteConfig['networkPayloadCapture'] & {
+        capturePerformance: RemoteConfig['capturePerformance'];
+    };
+    canvasRecording: {
+        enabled: SessionRecordingRemoteConfig['recordCanvas'];
+        fps: SessionRecordingRemoteConfig['canvasFps'];
+        quality: SessionRecordingRemoteConfig['canvasQuality'];
+    };
+    sampleRate: number | null;
+    minimumDurationMilliseconds: number | null | undefined;
+};
+export type SessionRecordingRemoteConfig = SessionRecordingCanvasOptions & {
+    endpoint?: string;
+    consoleLogRecordingEnabled?: boolean;
+    sampleRate?: string | null;
+    minimumDurationMilliseconds?: number;
+    linkedFlag?: string | {
+        flag: string;
+        variant: string;
+    } | null;
+    networkPayloadCapture?: Pick<NetworkRecordOptions, 'recordBody' | 'recordHeaders' | 'payloadHostDenyList'>;
+    masking?: Pick<SessionRecordingOptions, 'maskAllInputs' | 'maskTextSelector' | 'blockSelector'>;
+    urlTriggers?: SessionRecordingUrlTrigger[];
+    scriptConfig?: {
+        script?: string | undefined;
+    };
+    urlBlocklist?: SessionRecordingUrlTrigger[];
+    eventTriggers?: string[];
+    triggerMatchType?: 'any' | 'all';
+};
 export interface RageclickConfig {
     /**
      * List of CSS selectors to ignore rageclicks on
@@ -456,6 +543,10 @@ export interface RemoteConfig {
     autocaptureExceptions?: boolean | {
         endpoint?: string;
     };
+    /**
+     * Session recording configuration options
+     */
+    sessionRecording?: SessionRecordingRemoteConfig | false;
     /**
      * @deprecated, moved to toolbarParams
      */
@@ -533,6 +624,50 @@ export interface RequestWithOptions {
         next?: NextOptions;
     };
 }
+export type InitiatorType = 'audio' | 'beacon' | 'body' | 'css' | 'early-hint' | 'early-hints' | 'embed' | 'fetch' | 'frame' | 'iframe' | 'image' | 'img' | 'input' | 'link' | 'navigation' | 'object' | 'ping' | 'script' | 'track' | 'video' | 'xmlhttprequest';
+export type NetworkRecordOptions = {
+    initiatorTypes?: InitiatorType[];
+    maskRequestFn?: (data: CapturedNetworkRequest) => CapturedNetworkRequest | undefined;
+    recordHeaders?: boolean | {
+        request: boolean;
+        response: boolean;
+    };
+    recordBody?: boolean | string[] | {
+        request: boolean | string[];
+        response: boolean | string[];
+    };
+    recordInitialRequests?: boolean;
+    recordPerformance?: boolean;
+    performanceEntryTypeToObserve: string[];
+    payloadSizeLimitBytes: number;
+    payloadHostDenyList?: string[];
+};
+export type NetworkRequest = {
+    url: string;
+};
+export type Headers = Record<string, any>;
+type Writable<T> = {
+    -readonly [P in keyof T]: T[P];
+};
+export type CapturedNetworkRequest = Writable<Omit<PerformanceEntry, 'toJSON'>> & {
+    method?: string;
+    initiatorType?: InitiatorType;
+    status?: number;
+    timeOrigin?: number;
+    timestamp?: number;
+    startTime?: number;
+    endTime?: number;
+    requestHeaders?: Headers;
+    requestBody?: string | null;
+    responseHeaders?: Headers;
+    responseBody?: string | null;
+    isInitial?: boolean;
+};
+export interface SessionRecordingUrlTrigger {
+    url: string;
+    matching: 'regex';
+}
+export type SessionStartReason = 'sampling_overridden' | 'recording_initialized' | 'linked_flag_matched' | 'linked_flag_overridden' | 'sampled' | 'session_id_changed' | 'url_trigger_matched' | 'event_trigger_matched';
 export type SessionIdChangedCallback = (sessionId: string, windowId: string | null | undefined, changeReason?: {
     noSessionId: boolean;
     activityTimeout: boolean;

package/dist/utils/logger.d.ts

@@ -0,0 +1,10 @@
+export type PosthogJsLogger = {
+    info: (...args: any[]) => void;
+    warn: (...args: any[]) => void;
+    error: (...args: any[]) => void;
+    critical: (...args: any[]) => void;
+    uninitializedWarning: (methodName: string) => void;
+    createLogger: (prefix: string) => PosthogJsLogger;
+};
+export declare const logger: PosthogJsLogger;
+export declare const createLogger: (prefix: string) => PosthogJsLogger;

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const version = "0.2.1";
+export declare const version = "0.2.2-alpha.0";

package/lib/extensions/replay/external/config.d.ts

@@ -0,0 +1,9 @@
+import { LeanbaseConfig, NetworkRecordOptions } from '../../../types';
+export declare const defaultNetworkOptions: Required<NetworkRecordOptions>;
+/**
+ *  whether a maskRequestFn is provided or not,
+ *  we ensure that we remove the denied header from requests
+ *  we _never_ want to record that header by accident
+ *  if someone complains then we'll add an opt-in to let them override it
+ */
+export declare const buildNetworkRequestOptions: (instanceConfig: LeanbaseConfig, remoteNetworkOptions?: Pick<NetworkRecordOptions, "recordHeaders" | "recordBody" | "recordPerformance" | "payloadHostDenyList">) => NetworkRecordOptions;

package/lib/extensions/replay/external/config.js

@@ -0,0 +1,221 @@
+import { isArray, isFunction, isNullish, isString, isUndefined } from '@posthog/core';
+import { convertToURL } from '../../../utils/request-utils';
+import { logger } from '../../../utils/logger';
+import { shouldCaptureValue } from '../../../autocapture-utils';
+import { each } from '../../../utils';
+const LOGGER_PREFIX = '[SessionRecording]';
+const REDACTED = 'redacted';
+export const defaultNetworkOptions = {
+    initiatorTypes: [
+        'audio',
+        'beacon',
+        'body',
+        'css',
+        'early-hint', // ResourceTiming spec + browser parity with posthog-js
+        'embed',
+        'fetch',
+        'frame',
+        'iframe',
+        'image',
+        'img',
+        'input',
+        'link',
+        'navigation',
+        'object',
+        'ping',
+        'script',
+        'track',
+        'video',
+        'xmlhttprequest',
+    ],
+    maskRequestFn: (data) => data,
+    recordHeaders: false,
+    recordBody: false,
+    recordInitialRequests: false,
+    recordPerformance: false,
+    performanceEntryTypeToObserve: [
+        // 'event', // This is too noisy as it covers all browser events
+        'first-input',
+        // 'mark', // Mark is used too liberally. We would need to filter for specific marks
+        // 'measure', // Measure is used too liberally. We would need to filter for specific measures
+        'navigation',
+        'paint',
+        'resource',
+    ],
+    payloadSizeLimitBytes: 1000000,
+    payloadHostDenyList: [
+        '.lr-ingest.io',
+        '.ingest.sentry.io',
+        '.clarity.ms',
+        // NB no leading dot here
+        'analytics.google.com',
+        'bam.nr-data.net',
+    ],
+};
+const HEADER_DENY_LIST = [
+    'authorization',
+    'x-forwarded-for',
+    'authorization',
+    'cookie',
+    'set-cookie',
+    'x-api-key',
+    'x-real-ip',
+    'remote-addr',
+    'forwarded',
+    'proxy-authorization',
+    'x-csrf-token',
+    'x-csrftoken',
+    'x-xsrf-token',
+];
+const PAYLOAD_CONTENT_DENY_LIST = [
+    'password',
+    'secret',
+    'passwd',
+    'api_key',
+    'apikey',
+    'auth',
+    'credentials',
+    'mysql_pwd',
+    'privatekey',
+    'private_key',
+    'token',
+];
+// we always remove headers on the deny list because we never want to capture this sensitive data
+const removeAuthorizationHeader = (data) => {
+    const headers = data.requestHeaders;
+    if (!isNullish(headers)) {
+        const mutableHeaders = isArray(headers)
+            ? Object.fromEntries(headers)
+            : headers;
+        each(Object.keys(mutableHeaders ?? {}), (header) => {
+            if (HEADER_DENY_LIST.includes(header.toLowerCase())) {
+                mutableHeaders[header] = REDACTED;
+            }
+        });
+        data.requestHeaders = mutableHeaders;
+    }
+    return data;
+};
+const POSTHOG_PATHS_TO_IGNORE = ['/s/', '/e/', '/i/'];
+// want to ignore posthog paths when capturing requests, or we can get trapped in a loop
+// because calls to PostHog would be reported using a call to PostHog which would be reported....
+const ignorePostHogPaths = (data, apiHostConfig) => {
+    const url = convertToURL(data.name);
+    const host = apiHostConfig || '';
+    let replaceValue = host.indexOf('http') === 0 ? convertToURL(host)?.pathname : host;
+    if (replaceValue === '/') {
+        replaceValue = '';
+    }
+    const pathname = url?.pathname.replace(replaceValue || '', '');
+    if (url && pathname && POSTHOG_PATHS_TO_IGNORE.some((path) => pathname.indexOf(path) === 0)) {
+        return undefined;
+    }
+    return data;
+};
+function estimateBytes(payload) {
+    return new Blob([payload]).size;
+}
+function enforcePayloadSizeLimit(payload, headers, limit, description) {
+    if (isNullish(payload)) {
+        return payload;
+    }
+    let requestContentLength = headers?.['content-length'] || estimateBytes(payload);
+    if (isString(requestContentLength)) {
+        requestContentLength = parseInt(requestContentLength);
+    }
+    if (requestContentLength > limit) {
+        return LOGGER_PREFIX + ` ${description} body too large to record (${requestContentLength} bytes)`;
+    }
+    return payload;
+}
+// people can have arbitrarily large payloads on their site, but we don't want to ingest them
+const limitPayloadSize = (options) => {
+    // the smallest of 1MB or the specified limit if there is one
+    const limit = Math.min(1000000, options.payloadSizeLimitBytes ?? 1000000);
+    return (data) => {
+        if (data?.requestBody) {
+            data.requestBody = enforcePayloadSizeLimit(data.requestBody, data.requestHeaders, limit, 'Request');
+        }
+        if (data?.responseBody) {
+            data.responseBody = enforcePayloadSizeLimit(data.responseBody, data.responseHeaders, limit, 'Response');
+        }
+        return data;
+    };
+};
+function scrubPayload(payload, label) {
+    if (isNullish(payload)) {
+        return payload;
+    }
+    let scrubbed = payload;
+    if (!shouldCaptureValue(scrubbed, false)) {
+        scrubbed = LOGGER_PREFIX + ' ' + label + ' body ' + REDACTED;
+    }
+    each(PAYLOAD_CONTENT_DENY_LIST, (text) => {
+        if (scrubbed?.length && scrubbed?.indexOf(text) !== -1) {
+            scrubbed = LOGGER_PREFIX + ' ' + label + ' body ' + REDACTED + ' as might contain: ' + text;
+        }
+    });
+    return scrubbed;
+}
+function scrubPayloads(capturedRequest) {
+    if (isUndefined(capturedRequest)) {
+        return undefined;
+    }
+    capturedRequest.requestBody = scrubPayload(capturedRequest.requestBody, 'Request');
+    capturedRequest.responseBody = scrubPayload(capturedRequest.responseBody, 'Response');
+    return capturedRequest;
+}
+/**
+ *  whether a maskRequestFn is provided or not,
+ *  we ensure that we remove the denied header from requests
+ *  we _never_ want to record that header by accident
+ *  if someone complains then we'll add an opt-in to let them override it
+ */
+export const buildNetworkRequestOptions = (instanceConfig, remoteNetworkOptions = {}) => {
+    const remoteOptions = remoteNetworkOptions || {};
+    const config = {
+        payloadSizeLimitBytes: defaultNetworkOptions.payloadSizeLimitBytes,
+        performanceEntryTypeToObserve: [...defaultNetworkOptions.performanceEntryTypeToObserve],
+        payloadHostDenyList: [
+            ...(remoteOptions.payloadHostDenyList || []),
+            ...defaultNetworkOptions.payloadHostDenyList,
+        ],
+    };
+    // client can always disable despite remote options
+    const sessionRecordingConfig = instanceConfig.session_recording || {};
+    const canRecordHeaders = sessionRecordingConfig.recordHeaders === false ? false : !!remoteOptions.recordHeaders;
+    const canRecordBody = sessionRecordingConfig.recordBody === false ? false : !!remoteOptions.recordBody;
+    const canRecordPerformance = instanceConfig.capture_performance === false ? false : !!remoteOptions.recordPerformance;
+    const payloadLimiter = limitPayloadSize(config);
+    const enforcedCleaningFn = (d) => payloadLimiter(ignorePostHogPaths(removeAuthorizationHeader(d), instanceConfig.host || ''));
+    const hasDeprecatedMaskFunction = isFunction(sessionRecordingConfig.maskNetworkRequestFn);
+    if (hasDeprecatedMaskFunction && isFunction(sessionRecordingConfig.maskCapturedNetworkRequestFn)) {
+        logger.warn('Both `maskNetworkRequestFn` and `maskCapturedNetworkRequestFn` are defined. `maskNetworkRequestFn` will be ignored.');
+    }
+    if (hasDeprecatedMaskFunction) {
+        sessionRecordingConfig.maskCapturedNetworkRequestFn = (data) => {
+            const cleanedURL = sessionRecordingConfig.maskNetworkRequestFn({ url: data.name });
+            return {
+                ...data,
+                name: cleanedURL?.url,
+            };
+        };
+    }
+    config.maskRequestFn = isFunction(sessionRecordingConfig.maskCapturedNetworkRequestFn)
+        ? (data) => {
+            const cleanedRequest = enforcedCleaningFn(data);
+            return cleanedRequest
+                ? (sessionRecordingConfig.maskCapturedNetworkRequestFn?.(cleanedRequest) ?? undefined)
+                : undefined;
+        }
+        : (data) => scrubPayloads(enforcedCleaningFn(data));
+    return {
+        ...defaultNetworkOptions,
+        ...config,
+        recordHeaders: canRecordHeaders,
+        recordBody: canRecordBody,
+        recordPerformance: canRecordPerformance,
+        recordInitialRequests: canRecordPerformance,
+    };
+};
+//# sourceMappingURL=config.js.map

package/lib/extensions/replay/external/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../../src/extensions/replay/external/config.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAA;AAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAA;AAErC,MAAM,aAAa,GAAG,oBAAoB,CAAA;AAE1C,MAAM,QAAQ,GAAG,UAAU,CAAA;AAE3B,MAAM,CAAC,MAAM,qBAAqB,GAAmC;IACjE,cAAc,EAAE;QACZ,OAAO;QACP,QAAQ;QACR,MAAM;QACN,KAAK;QACL,YAAY,EAAE,uDAAuD;QACrE,OAAO;QACP,OAAO;QACP,OAAO;QACP,QAAQ;QACR,OAAO;QACP,KAAK;QACL,OAAO;QACP,MAAM;QACN,YAAY;QACZ,QAAQ;QACR,MAAM;QACN,QAAQ;QACR,OAAO;QACP,OAAO;QACP,gBAAgB;KACnB;IACD,aAAa,EAAE,CAAC,IAA4B,EAAE,EAAE,CAAC,IAAI;IACrD,aAAa,EAAE,KAAK;IACpB,UAAU,EAAE,KAAK;IACjB,qBAAqB,EAAE,KAAK;IAC5B,iBAAiB,EAAE,KAAK;IACxB,6BAA6B,EAAE;QAC3B,gEAAgE;QAChE,aAAa;QACb,oFAAoF;QACpF,6FAA6F;QAC7F,YAAY;QACZ,OAAO;QACP,UAAU;KACb;IACD,qBAAqB,EAAE,OAAO;IAC9B,mBAAmB,EAAE;QACjB,eAAe;QACf,mBAAmB;QACnB,aAAa;QACb,yBAAyB;QACzB,sBAAsB;QACtB,iBAAiB;KACpB;CACJ,CAAA;AAED,MAAM,gBAAgB,GAAG;IACrB,eAAe;IACf,iBAAiB;IACjB,eAAe;IACf,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,WAAW;IACX,aAAa;IACb,WAAW;IACX,qBAAqB;IACrB,cAAc;IACd,aAAa;IACb,cAAc;CACjB,CAAA;AAED,MAAM,yBAAyB,GAAG;IAC9B,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,MAAM;IACN,aAAa;IACb,WAAW;IACX,YAAY;IACZ,aAAa;IACb,OAAO;CACV,CAAA;AAED,iGAAiG;AACjG,MAAM,yBAAyB,GAAG,CAAC,IAA4B,EAA0B,EAAE;IACvF,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAA;IACnC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACtB,MAAM,cAAc,GAAwB,OAAO,CAAC,OAAO,CAAC;YACxD,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,OAAc,CAAC;YACpC,CAAC,CAAE,OAAe,CAAA;QAEtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/C,IAAI,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAClD,cAAc,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAA;YACrC,CAAC;QACL,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,cAAc,GAAG,cAAqB,CAAA;IAC/C,CAAC;IACD,OAAO,IAAI,CAAA;AACf,CAAC,CAAA;AAED,MAAM,uBAAuB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;AACrD,wFAAwF;AACxF,iGAAiG;AACjG,MAAM,kBAAkB,GAAG,CACvB,IAA4B,EAC5B,aAAqC,EACH,EAAE;IACpC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEnC,MAAM,IAAI,GAAG,aAAa,IAAI,EAAE,CAAA;IAChC,IAAI,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAA;IACnF,IAAI,YAAY,KAAK,GAAG,EAAE,CAAC;QACvB,YAAY,GAAG,EAAE,CAAA;IACrB,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;IAE9D,IAAI,GAAG,IAAI,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC1F,OAAO,SAAS,CAAA;IACpB,CAAC;IACD,OAAO,IAAI,CAAA;AACf,CAAC,CAAA;AAED,SAAS,aAAa,CAAC,OAAe;IAClC,OAAO,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;AACnC,CAAC;AAED,SAAS,uBAAuB,CAC5B,OAAkC,EAClC,OAAwC,EACxC,KAAa,EACb,WAAmB;IAEnB,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACrB,OAAO,OAAO,CAAA;IAClB,CAAC;IAED,IAAI,oBAAoB,GAAoB,OAAO,EAAE,CAAC,gBAAgB,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,CAAA;IACjG,IAAI,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACjC,oBAAoB,GAAG,QAAQ,CAAC,oBAAoB,CAAC,CAAA;IACzD,CAAC;IAED,IAAI,oBAAoB,GAAG,KAAK,EAAE,CAAC;QAC/B,OAAO,aAAa,GAAG,IAAI,WAAW,8BAA8B,oBAAoB,SAAS,CAAA;IACrG,CAAC;IAED,OAAO,OAAO,CAAA;AAClB,CAAC;AAED,6FAA6F;AAC7F,MAAM,gBAAgB,GAAG,CACrB,OAA6B,EACqD,EAAE;IACpF,6DAA6D;IAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,qBAAqB,IAAI,OAAO,CAAC,CAAA;IAEzE,OAAO,CAAC,IAAI,EAAE,EAAE;QACZ,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC;YACpB,IAAI,CAAC,WAAW,GAAG,uBAAuB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,SAAS,CAAC,CAAA;QACvG,CAAC;QAED,IAAI,IAAI,EAAE,YAAY,EAAE,CAAC;YACrB,IAAI,CAAC,YAAY,GAAG,uBAAuB,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;QAC3G,CAAC;QAED,OAAO,IAAI,CAAA;IACf,CAAC,CAAA;AACL,CAAC,CAAA;AAED,SAAS,YAAY,CAAC,OAAkC,EAAE,KAA6B;IACnF,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACrB,OAAO,OAAO,CAAA;IAClB,CAAC;IACD,IAAI,QAAQ,GAAG,OAAO,CAAA;IAEtB,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;QACvC,QAAQ,GAAG,aAAa,GAAG,GAAG,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAA;IAChE,CAAC;IACD,IAAI,CAAC,yBAAyB,EAAE,CAAC,IAAI,EAAE,EAAE;QACrC,IAAI,QAAQ,EAAE,MAAM,IAAI,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACrD,QAAQ,GAAG,aAAa,GAAG,GAAG,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,qBAAqB,GAAG,IAAI,CAAA;QAC/F,CAAC;IACL,CAAC,CAAC,CAAA;IAEF,OAAO,QAAQ,CAAA;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,eAAmD;IACtE,IAAI,WAAW,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/B,OAAO,SAAS,CAAA;IACpB,CAAC;IAED,eAAe,CAAC,WAAW,GAAG,YAAY,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;IAClF,eAAe,CAAC,YAAY,GAAG,YAAY,CAAC,eAAe,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;IAErF,OAAO,eAAe,CAAA;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACtC,cAA8B,EAC9B,uBAGI,EAAE,EACc,EAAE;IACtB,MAAM,aAAa,GAAG,oBAAoB,IAAI,EAAE,CAAA;IAChD,MAAM,MAAM,GAAyB;QACjC,qBAAqB,EAAE,qBAAqB,CAAC,qBAAqB;QAClE,6BAA6B,EAAE,CAAC,GAAG,qBAAqB,CAAC,6BAA6B,CAAC;QACvF,mBAAmB,EAAE;YACjB,GAAG,CAAC,aAAa,CAAC,mBAAmB,IAAI,EAAE,CAAC;YAC5C,GAAG,qBAAqB,CAAC,mBAAmB;SAC/C;KACJ,CAAA;IACD,mDAAmD;IACnD,MAAM,sBAAsB,GAAG,cAAc,CAAC,iBAAiB,IAAI,EAAE,CAAA;IACrE,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,aAAa,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,aAAa,CAAA;IAC/G,MAAM,aAAa,GAAG,sBAAsB,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,UAAU,CAAA;IACtG,MAAM,oBAAoB,GACtB,cAAc,CAAC,mBAAmB,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,iBAAiB,CAAA;IAE5F,MAAM,cAAc,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IAE/C,MAAM,kBAAkB,GAA0C,CAAC,CAAyB,EAAE,EAAE,CAC5F,cAAc,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAA;IAE/F,MAAM,yBAAyB,GAAG,UAAU,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,CAAA;IAEzF,IAAI,yBAAyB,IAAI,UAAU,CAAC,sBAAsB,CAAC,4BAA4B,CAAC,EAAE,CAAC;QAC/F,MAAM,CAAC,IAAI,CACP,qHAAqH,CACxH,CAAA;IACL,CAAC;IAED,IAAI,yBAAyB,EAAE,CAAC;QAC5B,sBAAsB,CAAC,4BAA4B,GAAG,CAAC,IAA4B,EAAE,EAAE;YACnF,MAAM,UAAU,GAAG,sBAAsB,CAAC,oBAAqB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;YACnF,OAAO;gBACH,GAAG,IAAI;gBACP,IAAI,EAAE,UAAU,EAAE,GAAG;aACE,CAAA;QAC/B,CAAC,CAAA;IACL,CAAC;IAED,MAAM,CAAC,aAAa,GAAG,UAAU,CAAC,sBAAsB,CAAC,4BAA4B,CAAC;QAClF,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE;YACL,MAAM,cAAc,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;YAC/C,OAAO,cAAc;gBACjB,CAAC,CAAC,CAAC,sBAAsB,CAAC,4BAA4B,EAAE,CAAC,cAAc,CAAC,IAAI,SAAS,CAAC;gBACtF,CAAC,CAAC,SAAS,CAAA;QACnB,CAAC;QACH,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAA;IAEvD,OAAO;QACH,GAAG,qBAAqB;QACxB,GAAG,MAAM;QACT,aAAa,EAAE,gBAAgB;QAC/B,UAAU,EAAE,aAAa;QACzB,iBAAiB,EAAE,oBAAoB;QACvC,qBAAqB,EAAE,oBAAoB;KAC9C,CAAA;AACL,CAAC,CAAA"}

package/lib/extensions/replay/external/denylist.d.ts

@@ -0,0 +1,5 @@
+import { NetworkRecordOptions } from '../../../types';
+export declare function isHostOnDenyList(url: string | URL | Request, options: NetworkRecordOptions): {
+    hostname: string | null;
+    isHostDenied: boolean;
+};

package/lib/extensions/replay/external/denylist.js

@@ -0,0 +1,28 @@
+function hostnameFromURL(url) {
+    try {
+        if (typeof url === 'string') {
+            return new URL(url).hostname;
+        }
+        if ('url' in url) {
+            return new URL(url.url).hostname;
+        }
+        return url.hostname;
+    }
+    catch {
+        return null;
+    }
+}
+export function isHostOnDenyList(url, options) {
+    const hostname = hostnameFromURL(url);
+    const defaultNotDenied = { hostname, isHostDenied: false };
+    if (!options.payloadHostDenyList?.length || !hostname?.trim().length) {
+        return defaultNotDenied;
+    }
+    for (const deny of options.payloadHostDenyList) {
+        if (hostname.endsWith(deny)) {
+            return { hostname, isHostDenied: true };
+        }
+    }
+    return defaultNotDenied;
+}
+//# sourceMappingURL=denylist.js.map

package/lib/extensions/replay/external/denylist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"denylist.js","sourceRoot":"","sources":["../../../../src/extensions/replay/external/denylist.ts"],"names":[],"mappings":"AAEA,SAAS,eAAe,CAAC,GAA+B;IACpD,IAAI,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAA;QAChC,CAAC;QACD,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;YACf,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAA;QACpC,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAA;IACf,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAA2B,EAAE,OAA6B;IACvF,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;IACrC,MAAM,gBAAgB,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;IAE1D,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QACnE,OAAO,gBAAgB,CAAA;IAC3B,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAC7C,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;QAC3C,CAAC;IACL,CAAC;IAED,OAAO,gBAAgB,CAAA;AAC3B,CAAC"}

package/lib/extensions/replay/external/lazy-loaded-session-recorder.d.ts

@@ -0,0 +1,153 @@
+import { EventType, eventWithTime, IncrementalSource } from '../types/rrweb-types';
+import { SessionRecordingStatus, TriggerType } from './triggerMatching';
+import { Leanbase } from '../../../leanbase';
+import { Properties, SessionRecordingPersistedConfig, SessionStartReason } from '../../../types';
+export declare const RECORDING_IDLE_THRESHOLD_MS: number;
+export declare const RECORDING_MAX_EVENT_SIZE: number;
+export declare const RECORDING_BUFFER_TIMEOUT = 2000;
+export declare const SESSION_RECORDING_BATCH_KEY = "recordings";
+export interface SnapshotBuffer {
+    size: number;
+    data: any[];
+    sessionId: string;
+    windowId: string;
+}
+export type compressedFullSnapshotEvent = {
+    type: EventType.FullSnapshot;
+    data: string;
+};
+export type compressedIncrementalSnapshotEvent = {
+    type: EventType.IncrementalSnapshot;
+    data: {
+        source: IncrementalSource;
+        texts: string;
+        attributes: string;
+        removes: string;
+        adds: string;
+    };
+};
+export type compressedIncrementalStyleSnapshotEvent = {
+    type: EventType.IncrementalSnapshot;
+    data: {
+        source: IncrementalSource.StyleSheetRule;
+        id?: number;
+        styleId?: number;
+        replace?: string;
+        replaceSync?: string;
+        adds?: string;
+        removes?: string;
+    };
+};
+export type compressedEvent = compressedIncrementalStyleSnapshotEvent | compressedFullSnapshotEvent | compressedIncrementalSnapshotEvent;
+export type compressedEventWithTime = compressedEvent & {
+    timestamp: number;
+    delay?: number;
+    cv: '2024-10';
+};
+export declare const SEVEN_MEGABYTES: number;
+export declare function splitBuffer(buffer: SnapshotBuffer, sizeLimit?: number): SnapshotBuffer[];
+export declare class LazyLoadedSessionRecording {
+    private readonly _instance;
+    private _endpoint;
+    private _mutationThrottler?;
+    /**
+     * Util to help developers working on this feature manually override
+     */
+    private _forceAllowLocalhostNetworkCapture;
+    private _stopRrweb;
+    private _lastActivityTimestamp;
+    /**
+     * if pageview capture is disabled,
+     * then we can manually track href changes
+     */
+    private _lastHref?;
+    /**
+     * and a queue - that contains rrweb events that we want to send to rrweb, but rrweb wasn't able to accept them yet
+     */
+    private _queuedRRWebEvents;
+    private _isIdle;
+    private _warnedMissingConsolePlugin;
+    private _linkedFlagMatching;
+    private _urlTriggerMatching;
+    private _eventTriggerMatching;
+    private _triggerMatching;
+    private _fullSnapshotTimer?;
+    private _windowId;
+    private _sessionId;
+    get sessionId(): string;
+    private _flushBufferTimer?;
+    private _buffer;
+    private _removePageViewCaptureHook;
+    private _removeEventTriggerCaptureHook;
+    private get _sessionManager();
+    private get _sessionIdleThresholdMilliseconds();
+    private get _isSampled();
+    private get _sampleRate();
+    private get _minimumDuration();
+    private _statusMatcher;
+    private _onSessionIdListener;
+    private _onSessionIdleResetForcedListener;
+    private _samplingSessionListener;
+    private _forceIdleSessionIdListener;
+    constructor(_instance: Leanbase);
+    private get _masking();
+    private get _canvasRecording();
+    private get _isConsoleLogCaptureEnabled();
+    private get _networkPayloadCapture();
+    private _gatherRRWebPlugins;
+    private _maskUrl;
+    private _tryRRWebMethod;
+    private _tryAddCustomEvent;
+    private _pageViewFallBack;
+    private _processQueuedEvents;
+    private _tryTakeFullSnapshot;
+    private get _fullSnapshotIntervalMillis();
+    private _scheduleFullSnapshot;
+    private _pauseRecording;
+    private _resumeRecording;
+    private _activateTrigger;
+    get isStarted(): boolean;
+    get _remoteConfig(): SessionRecordingPersistedConfig | undefined;
+    start(startReason?: SessionStartReason): void;
+    private _onSessionIdCallback;
+    stop(): void;
+    onRRwebEmit(rawEvent: eventWithTime): void;
+    get status(): SessionRecordingStatus;
+    log(message: string, level?: 'log' | 'warn' | 'error'): void;
+    overrideLinkedFlag(): void;
+    /**
+     * this ignores the sampling config and (if other conditions are met) causes capture to start
+     *
+     * It is not usual to call this directly,
+     * instead call `posthog.startSessionRecording({sampling: true})`
+     * */
+    overrideSampling(): void;
+    /**
+     * this ignores the URL/Event trigger config and (if other conditions are met) causes capture to start
+     *
+     * It is not usual to call this directly,
+     * instead call `posthog.startSessionRecording({trigger: 'url' | 'event'})`
+     * */
+    overrideTrigger(triggerType: TriggerType): void;
+    private _clearFlushBufferTimer;
+    private _flushBuffer;
+    private _captureSnapshotBuffered;
+    private _captureSnapshot;
+    private _snapshotUrl;
+    private get _sessionDuration();
+    private _clearBufferBeforeMostRecentMeta;
+    private _clearBuffer;
+    private _onBeforeUnload;
+    private _onOffline;
+    private _onOnline;
+    private _onVisibilityChange;
+    private _reportStarted;
+    private _isInteractiveEvent;
+    private _updateWindowAndSessionIds;
+    private _clearConditionalRecordingPersistence;
+    private _makeSamplingDecision;
+    private _addEventTriggerListener;
+    get sdkDebugProperties(): Properties;
+    private _startRecorder;
+    tryAddCustomEvent(tag: string, payload: any): boolean;
+}