@lunardinos/browser 0.2.2 → 0.2.4

package/dist/recorder-core.js

@@ -4527,8 +4527,40 @@ function createPersistence(mode) {
   return mode === "cookie" ? createCookiePersistence() : createCookielessPersistence();
 }
 
+// src/session-lifecycle.ts
+var SESSION_TIMEOUT_MS = 30 * 60 * 1000;
+var USER_ACTIVITY_SOURCES = new Set([
+  1,
+  2,
+  3,
+  5,
+  6,
+  7,
+  12,
+  14
+]);
+function isUserActivity(event) {
+  if (event.type === 7)
+    return true;
+  if (event.type === 3)
+    return USER_ACTIVITY_SOURCES.has(event.data?.source ?? -1);
+  return false;
+}
+function sessionExpired(lastActivityAt, now) {
+  if (lastActivityAt <= 0)
+    return false;
+  return now - lastActivityAt > SESSION_TIMEOUT_MS;
+}
+function storedSessionUsable(storedAt, now) {
+  if (!Number.isFinite(storedAt) || storedAt <= 0)
+    return false;
+  return now - storedAt < SESSION_TIMEOUT_MS;
+}
+
 // src/recorder-core.ts
 var DEFAULT_ENDPOINT = "https://ingest.lunardinos.com";
+var SESSION_ACTIVITY_KEY = "__ld_sid_at";
+var FULL_SNAPSHOT_INTERVAL_MS = 60 * 1000;
 async function gzipCompress(input) {
   try {
     if (typeof CompressionStream === "undefined")
@@ -4560,6 +4592,30 @@ function truncateText(text) {
     return null;
   return text.length > 40 ? `${text.slice(0, 37)}...` : text;
 }
+var AUTH_URL_KEYS = "access[_-]?token|refresh[_-]?token|provider[_-]?token|provider[_-]?refresh[_-]?token|id[_-]?token|token|token[_-]?type|expires[_-]?at|expires[_-]?in|code|client[_-]?secret|session[_-]?token|jwt|api[_-]?key|password|secret";
+var AUTH_PAIR = new RegExp(`\\b(${AUTH_URL_KEYS})=[^&#\\s"']*`, "gi");
+var AUTH_FRAG = new RegExp(`#[^#\\s]*\\b(?:${AUTH_URL_KEYS})=`, "i");
+function redactAuthFromUrl(value) {
+  if (value == null)
+    return value;
+  if (value.indexOf("=") === -1)
+    return value;
+  let v = value;
+  if (AUTH_FRAG.test(v)) {
+    const h = v.indexOf("#");
+    if (h >= 0)
+      v = v.slice(0, h);
+  }
+  return v.replace(AUTH_PAIR, (m) => `${m.slice(0, m.indexOf("=") + 1)}REDACTED`);
+}
+function readHtmlLang() {
+  try {
+    const lang = document.documentElement.getAttribute("lang");
+    return lang?.trim() ? lang.trim().toLowerCase() : null;
+  } catch {
+    return null;
+  }
+}
 function extractUtmParams() {
   const params = new URLSearchParams(window.location.search);
   const utm = {};
@@ -4572,6 +4628,8 @@ function extractUtmParams() {
 }
 function createLunarDinosRecorder(config) {
   const { apiKey, endpoint = DEFAULT_ENDPOINT, rrwebOptions = {}, batchInterval = 2000 } = config;
+  const configLocale = config.locale ?? null;
+  const resolveLocale = (explicit) => explicit ?? readHtmlLang() ?? configLocale;
   const defaultRrwebOptions = {
     inlineImages: true
   };
@@ -4619,7 +4677,10 @@ function createLunarDinosRecorder(config) {
   let visitorId = null;
   let stopFn = null;
   let intervalId = null;
+  let checkoutIntervalId = null;
   let recording2 = false;
+  let lastActivityAt = 0;
+  let rotating = false;
   let pendingClickContext = null;
   let pendingInputContext = null;
   function captureSubmit(e) {
@@ -4663,9 +4724,35 @@ function createLunarDinosRecorder(config) {
     };
     const role = clicked.getAttribute("role") ?? TAG_ROLES[tag] ?? null;
     const name = clicked.getAttribute("aria-label") ?? clicked.getAttribute("name") ?? clicked.getAttribute("title") ?? truncateText(getDirectText(clicked)) ?? clicked.querySelector("[aria-label]")?.getAttribute("aria-label") ?? null;
-    const href = tag === "a" ? clicked.getAttribute("href") : clicked.closest("a")?.getAttribute("href") ?? null;
+    const href = redactAuthFromUrl(tag === "a" ? clicked.getAttribute("href") : clicked.closest("a")?.getAttribute("href") ?? null);
     pendingClickContext = { clickTag: tag, clickRole: role, clickName: name, clickHref: href };
   }
+  function rotateSession() {
+    if (rotating)
+      return;
+    rotating = true;
+    try {
+      flush();
+      sessionId = crypto.randomUUID();
+      persistence.setSessionId(sessionId);
+      if (typeof sessionStorage !== "undefined") {
+        sessionStorage.setItem("__ld_sid", sessionId);
+      }
+      lastActivityAt = Date.now();
+      markActivity();
+      try {
+        record_default.takeFullSnapshot(true);
+      } catch {}
+    } finally {
+      rotating = false;
+    }
+  }
+  function markActivity() {
+    lastActivityAt = Date.now();
+    if (typeof sessionStorage !== "undefined") {
+      sessionStorage.setItem(SESSION_ACTIVITY_KEY, String(lastActivityAt));
+    }
+  }
   function flush(options) {
     if (events.length === 0 || !sessionId)
       return;
@@ -4705,11 +4792,12 @@ function createLunarDinosRecorder(config) {
       return;
     try {
       record_default.takePageviewSnapshot({
-        href: payload.href,
+        href: redactAuthFromUrl(payload.href) ?? payload.href,
         title: payload.title,
         routePattern: payload.routePattern ?? undefined,
         params: payload.params,
-        referrer: payload.referrer ?? externalReferrer()
+        referrer: payload.referrer ?? externalReferrer(),
+        locale: resolveLocale(payload.locale)
       });
     } catch {}
   }
@@ -4769,7 +4857,8 @@ function createLunarDinosRecorder(config) {
     let isNewSession = false;
     if (persistence.mode === "cookie") {
       const persistedSession = persistence.getSessionId();
-      const storedSession = typeof sessionStorage !== "undefined" ? sessionStorage.getItem(SESSION_STORAGE_KEY) : null;
+      const storedAt = typeof sessionStorage !== "undefined" ? Number(sessionStorage.getItem(SESSION_ACTIVITY_KEY)) : Number.NaN;
+      const storedSession = storedSessionUsable(storedAt, Date.now()) && typeof sessionStorage !== "undefined" ? sessionStorage.getItem(SESSION_STORAGE_KEY) : null;
       isNewSession = !persistedSession && !storedSession;
       sessionId = persistedSession || storedSession || existingSessionId || crypto.randomUUID();
       persistence.setSessionId(sessionId);
@@ -4786,6 +4875,7 @@ function createLunarDinosRecorder(config) {
     }
     events = [];
     recording2 = true;
+    markActivity();
     document.addEventListener("click", captureClickContext, true);
     document.addEventListener("input", captureInputContext, true);
     document.addEventListener("change", captureInputContext, true);
@@ -4796,14 +4886,21 @@ function createLunarDinosRecorder(config) {
       ...defaultRrwebOptions,
       ...rrwebOptions,
       initialPageMetadata: startOpts.pageMetadata ? {
-        href: startOpts.pageMetadata.href,
+        href: redactAuthFromUrl(startOpts.pageMetadata.href) ?? startOpts.pageMetadata.href,
         title: startOpts.pageMetadata.title,
         routePattern: startOpts.pageMetadata.routePattern ?? undefined,
         params: startOpts.pageMetadata.params,
-        referrer: startOpts.pageMetadata.referrer ?? undefined
+        referrer: startOpts.pageMetadata.referrer ?? undefined,
+        locale: resolveLocale(startOpts.pageMetadata.locale)
       } : undefined,
       emit(event) {
         const ev = event;
+        if (isUserActivity(ev) && !rotating) {
+          if (sessionExpired(lastActivityAt, Date.now()))
+            rotateSession();
+          else
+            markActivity();
+        }
         if (ev.type === 3 && ev.data?.source === 2 && ev.data?.type === 2 && pendingClickContext) {
           const d = ev.data;
           d.clickTag = pendingClickContext.clickTag;
@@ -4826,6 +4923,11 @@ function createLunarDinosRecorder(config) {
     }
     flush();
     intervalId = setInterval(flush, batchInterval);
+    checkoutIntervalId = setInterval(() => {
+      try {
+        record_default.takeFullSnapshot(true);
+      } catch {}
+    }, FULL_SNAPSHOT_INTERVAL_MS);
     return sessionId;
   }
   function stop() {
@@ -4845,6 +4947,10 @@ function createLunarDinosRecorder(config) {
       clearInterval(intervalId);
       intervalId = null;
     }
+    if (checkoutIntervalId) {
+      clearInterval(checkoutIntervalId);
+      checkoutIntervalId = null;
+    }
     stopFn?.();
     stopFn = null;
     recording2 = false;

package/dist/src/recorder-core.d.ts

@@ -11,6 +11,13 @@ interface RecorderConfig {
     batchInterval?: number;
     /** Initial persistence mode: 'cookie' (default) or 'cookieless'. Can be changed at runtime via setPersistence(). */
     defaultPersistence?: PersistenceMode;
+    /**
+     * BCP-47 language the app renders in (e.g. "de"). Static fallback used when a page
+     * event doesn't carry its own locale and `<html lang>` isn't set. Prefer passing the
+     * current locale per navigation via the framework SDK's page metadata, since the app
+     * knows the shown language and it can change at runtime.
+     */
+    locale?: string;
 }
 interface PageEventPayload {
     href: string;
@@ -18,6 +25,8 @@ interface PageEventPayload {
     routePattern: string | null;
     params: Record<string, string> | null;
     referrer?: string | null;
+    /** BCP-47 language this page was rendered in (e.g. "de"). The app knows this. */
+    locale?: string | null;
 }
 export interface IdentifyPayload {
     user: {

package/dist/src/recorder-core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recorder-core.d.ts","sourceRoot":"","sources":["../../src/recorder-core.ts"],"names":[],"mappings":"AACA,OAAO,EAA8C,KAAK,eAAe,EAAE,MAAM,eAAe,CAAA;AAEhG,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAIpD,UAAU,cAAc;IACtB,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAA;IACd,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACtC,6CAA6C;IAC7C,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,oHAAoH;IACpH,kBAAkB,CAAC,EAAE,eAAe,CAAA;CACrC;AA4BD,UAAU,gBAAgB;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAA;IACrC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM,CAAA;QACV,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,CAAA;IACD,OAAO,CAAC,EAAE;QACR,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,SAAS,CAAC,EAAE,OAAO,CAAA;QACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,CAAA;IACD,IAAI,CAAC,EAAE;QACL,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,CAAA;CACF;AAuCD,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,8FAA8F;IAC9F,YAAY,CAAC,EAAE,gBAAgB,CAAA;CAChC;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,YAAY,KAAK,MAAM,CAAA;IAClD,IAAI,EAAE,MAAM,IAAI,CAAA;IAChB,+FAA+F;IAC/F,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAA;IAC/C,YAAY,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;IACjC,YAAY,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;IACjC,WAAW,EAAE,MAAM,OAAO,CAAA;IAC1B,iFAAiF;IACjF,aAAa,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,IAAI,CAAA;IAClD,4EAA4E;IAC5E,QAAQ,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,IAAI,CAAA;IAC5C,2EAA2E;IAC3E,cAAc,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,IAAI,CAAA;CAChD;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,cAAc,GAAG,QAAQ,CA+bzE"}
+{"version":3,"file":"recorder-core.d.ts","sourceRoot":"","sources":["../../src/recorder-core.ts"],"names":[],"mappings":"AACA,OAAO,EAA8C,KAAK,eAAe,EAAE,MAAM,eAAe,CAAA;AAQhG,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAuBpD,UAAU,cAAc;IACtB,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAA;IACd,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACtC,6CAA6C;IAC7C,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,oHAAoH;IACpH,kBAAkB,CAAC,EAAE,eAAe,CAAA;IACpC;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AA4BD,UAAU,gBAAgB;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAA;IACrC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,iFAAiF;IACjF,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM,CAAA;QACV,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,CAAA;IACD,OAAO,CAAC,EAAE;QACR,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,SAAS,CAAC,EAAE,OAAO,CAAA;QACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,CAAA;IACD,IAAI,CAAC,EAAE;QACL,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,CAAA;CACF;AAuED,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,8FAA8F;IAC9F,YAAY,CAAC,EAAE,gBAAgB,CAAA;CAChC;AAED,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,YAAY,KAAK,MAAM,CAAA;IAClD,IAAI,EAAE,MAAM,IAAI,CAAA;IAChB,+FAA+F;IAC/F,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAA;IAC/C,YAAY,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;IACjC,YAAY,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;IACjC,WAAW,EAAE,MAAM,OAAO,CAAA;IAC1B,iFAAiF;IACjF,aAAa,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,IAAI,CAAA;IAClD,4EAA4E;IAC5E,QAAQ,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,IAAI,CAAA;IAC5C,2EAA2E;IAC3E,cAAc,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,IAAI,CAAA;CAChD;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,cAAc,GAAG,QAAQ,CA4hBzE"}

package/dist/src/recorder-core.js

@@ -1,6 +1,24 @@
 import record from "@lunardinos/rrweb-record";
 import { createPersistence } from "./persistence";
+import { isUserActivity, SESSION_TIMEOUT_MS, sessionExpired, storedSessionUsable, } from "./session-lifecycle";
 const DEFAULT_ENDPOINT = "https://ingest.lunardinos.com";
+/** Timestamp of the last user activity, alongside the session id in sessionStorage. */
+const SESSION_ACTIVITY_KEY = "__ld_sid_at";
+/**
+ * How often to force a full snapshot.
+ *
+ * These are the replay's keyframes: the player can only start rendering from a
+ * snapshot, so seeking to an arbitrary point costs replaying every mutation
+ * since the preceding one. That makes this interval the ceiling on seek latency
+ * — at five minutes, jumping around a long recording meant fast-forwarding
+ * through up to five minutes of DOM mutations per jump.
+ *
+ * The tradeoff is upload size: each snapshot is the whole DOM. Stylesheets and
+ * images are content-addressed and deduplicated across the session, so the
+ * marginal cost of an extra snapshot is mostly the node tree, which compresses
+ * well — worth paying for a 5x cut in seek latency.
+ */
+const FULL_SNAPSHOT_INTERVAL_MS = 60 * 1000;
 /** Compress a string via the CompressionStream API (gzip). Returns null if unavailable or on error. */
 async function gzipCompress(input) {
     try {
@@ -37,6 +55,38 @@ function truncateText(text) {
         return null;
     return text.length > 40 ? `${text.slice(0, 37)}...` : text;
 }
+// Hard filter for auth tokens / secrets apps leak into URLs — notably Supabase,
+// which puts `#access_token=…&refresh_token=…` in the location hash after an OAuth
+// callback. Strip them here so live tokens never leave the browser. The server
+// re-applies the same filter on ingest (defense-in-depth). Kept in sync with
+// packages/shared/src/redact-url.ts (the SDK bundle is standalone, so it can't
+// import the shared server module).
+const AUTH_URL_KEYS = "access[_-]?token|refresh[_-]?token|provider[_-]?token|provider[_-]?refresh[_-]?token|id[_-]?token|token|token[_-]?type|expires[_-]?at|expires[_-]?in|code|client[_-]?secret|session[_-]?token|jwt|api[_-]?key|password|secret";
+const AUTH_PAIR = new RegExp(`\\b(${AUTH_URL_KEYS})=[^&#\\s"']*`, "gi");
+const AUTH_FRAG = new RegExp(`#[^#\\s]*\\b(?:${AUTH_URL_KEYS})=`, "i");
+function redactAuthFromUrl(value) {
+    if (value == null)
+        return value;
+    if (value.indexOf("=") === -1)
+        return value;
+    let v = value;
+    if (AUTH_FRAG.test(v)) {
+        const h = v.indexOf("#");
+        if (h >= 0)
+            v = v.slice(0, h);
+    }
+    return v.replace(AUTH_PAIR, (m) => `${m.slice(0, m.indexOf("=") + 1)}REDACTED`);
+}
+/** Read the page's rendered language from `<html lang>`, lowercased, or null. */
+function readHtmlLang() {
+    try {
+        const lang = document.documentElement.getAttribute("lang");
+        return lang?.trim() ? lang.trim().toLowerCase() : null;
+    }
+    catch {
+        return null;
+    }
+}
 /** Extract UTM parameters from the current URL. */
 function extractUtmParams() {
     const params = new URLSearchParams(window.location.search);
@@ -57,6 +107,13 @@ function extractUtmParams() {
  */
 export function createLunarDinosRecorder(config) {
     const { apiKey, endpoint = DEFAULT_ENDPOINT, rrwebOptions = {}, batchInterval = 2000 } = config;
+    const configLocale = config.locale ?? null;
+    /**
+     * Resolve the locale to stamp on a page event: an explicit per-page value wins
+     * (the app told us), then the live `<html lang>` (authoritative and updates on
+     * navigation), then the static config default.
+     */
+    const resolveLocale = (explicit) => explicit ?? readHtmlLang() ?? configLocale;
     // Always inline images so they display correctly in replay (the replay
     // iframe is on a different origin and can't fetch original URLs).
     const defaultRrwebOptions = {
@@ -120,7 +177,15 @@ export function createLunarDinosRecorder(config) {
     let visitorId = null;
     let stopFn = null;
     let intervalId = null;
+    // Periodic full-snapshot ("checkout") timer. Bounds segment size for long
+    // single-page sessions: each snapshot becomes an independently-replayable
+    // segment boundary, so the player never has to load one giant blob.
+    let checkoutIntervalId = null;
     let recording = false;
+    /** Last user activity, for {@link SESSION_TIMEOUT_MS}. */
+    let lastActivityAt = 0;
+    /** Set while rotating, since taking the new session's snapshot re-enters emit. */
+    let rotating = false;
     // Click enrichment state
     let pendingClickContext = null;
     // Input enrichment state
@@ -185,11 +250,50 @@ export function createLunarDinosRecorder(config) {
             truncateText(getDirectText(clicked)) ??
             clicked.querySelector("[aria-label]")?.getAttribute("aria-label") ??
             null;
-        const href = tag === "a"
+        const href = redactAuthFromUrl(tag === "a"
             ? clicked.getAttribute("href")
-            : (clicked.closest("a")?.getAttribute("href") ?? null);
+            : (clicked.closest("a")?.getAttribute("href") ?? null));
         pendingClickContext = { clickTag: tag, clickRole: role, clickName: name, clickHref: href };
     }
+    /**
+     * End the current session and open a new one.
+     *
+     * Order matters: pending events belong to the session that produced them, so
+     * they go out first, and the new session opens on a full snapshot — without
+     * one it starts mid-stream against a DOM the player has never seen and can't
+     * be replayed at all.
+     */
+    function rotateSession() {
+        if (rotating)
+            return;
+        rotating = true;
+        try {
+            flush();
+            sessionId = crypto.randomUUID();
+            persistence.setSessionId(sessionId);
+            if (typeof sessionStorage !== "undefined") {
+                sessionStorage.setItem("__ld_sid", sessionId);
+            }
+            lastActivityAt = Date.now();
+            markActivity();
+            try {
+                record.takeFullSnapshot(true);
+            }
+            catch {
+                // Recording already stopped; the next start() will snapshot anyway.
+            }
+        }
+        finally {
+            rotating = false;
+        }
+    }
+    /** Persist the activity clock so a reload in the same tab can honour it. */
+    function markActivity() {
+        lastActivityAt = Date.now();
+        if (typeof sessionStorage !== "undefined") {
+            sessionStorage.setItem(SESSION_ACTIVITY_KEY, String(lastActivityAt));
+        }
+    }
     function flush(options) {
         if (events.length === 0 || !sessionId)
             return;
@@ -238,11 +342,12 @@ export function createLunarDinosRecorder(config) {
         try {
             // Single Pageview event carries both DOM snapshot and route metadata
             record.takePageviewSnapshot({
-                href: payload.href,
+                href: redactAuthFromUrl(payload.href) ?? payload.href,
                 title: payload.title,
                 routePattern: payload.routePattern ?? undefined,
                 params: payload.params,
                 referrer: payload.referrer ?? externalReferrer(),
+                locale: resolveLocale(payload.locale),
             });
         }
         catch {
@@ -324,7 +429,15 @@ export function createLunarDinosRecorder(config) {
         let isNewSession = false;
         if (persistence.mode === "cookie") {
             const persistedSession = persistence.getSessionId();
-            const storedSession = typeof sessionStorage !== "undefined" ? sessionStorage.getItem(SESSION_STORAGE_KEY) : null;
+            // sessionStorage outlives the session cookie — it's scoped to the tab, not
+            // to 30 minutes — so reusing it unconditionally resurrected sessions the
+            // cookie had already expired. Only honour it while it's still fresh.
+            const storedAt = typeof sessionStorage !== "undefined"
+                ? Number(sessionStorage.getItem(SESSION_ACTIVITY_KEY))
+                : Number.NaN;
+            const storedSession = storedSessionUsable(storedAt, Date.now()) && typeof sessionStorage !== "undefined"
+                ? sessionStorage.getItem(SESSION_STORAGE_KEY)
+                : null;
             isNewSession = !persistedSession && !storedSession;
             sessionId = persistedSession || storedSession || existingSessionId || crypto.randomUUID();
             persistence.setSessionId(sessionId);
@@ -345,6 +458,7 @@ export function createLunarDinosRecorder(config) {
         }
         events = [];
         recording = true;
+        markActivity();
         // Listen for clicks/inputs in capture phase to grab context before rrweb sees it
         document.addEventListener("click", captureClickContext, true);
         document.addEventListener("input", captureInputContext, true);
@@ -357,15 +471,25 @@ export function createLunarDinosRecorder(config) {
             ...rrwebOptions,
             initialPageMetadata: startOpts.pageMetadata
                 ? {
-                    href: startOpts.pageMetadata.href,
+                    href: redactAuthFromUrl(startOpts.pageMetadata.href) ?? startOpts.pageMetadata.href,
                     title: startOpts.pageMetadata.title,
                     routePattern: startOpts.pageMetadata.routePattern ?? undefined,
                     params: startOpts.pageMetadata.params,
                     referrer: startOpts.pageMetadata.referrer ?? undefined,
+                    locale: resolveLocale(startOpts.pageMetadata.locale),
                 }
                 : undefined,
             emit(event) {
                 const ev = event;
+                // A navigation, or anything a human did, keeps the session alive; if the
+                // gap since the last one is too long this is a new sitting, so close the
+                // old session before the event is recorded against it.
+                if (isUserActivity(ev) && !rotating) {
+                    if (sessionExpired(lastActivityAt, Date.now()))
+                        rotateSession();
+                    else
+                        markActivity();
+                }
                 // Attach click context to rrweb click events
                 if (ev.type === 3 && ev.data?.source === 2 && ev.data?.type === 2 && pendingClickContext) {
                     const d = ev.data;
@@ -395,6 +519,16 @@ export function createLunarDinosRecorder(config) {
         // ~64 KB limit) is delivered via regular fetch before the user navigates away.
         flush();
         intervalId = setInterval(flush, batchInterval);
+        // Take a periodic full snapshot so long single-page sessions are split into
+        // bounded, independently-replayable segments (matches PostHog's 5-min cadence).
+        checkoutIntervalId = setInterval(() => {
+            try {
+                record.takeFullSnapshot(true);
+            }
+            catch {
+                /* not recording / mid-teardown */
+            }
+        }, FULL_SNAPSHOT_INTERVAL_MS);
         return sessionId;
     }
     function stop() {
@@ -417,6 +551,10 @@ export function createLunarDinosRecorder(config) {
             clearInterval(intervalId);
             intervalId = null;
         }
+        if (checkoutIntervalId) {
+            clearInterval(checkoutIntervalId);
+            checkoutIntervalId = null;
+        }
         stopFn?.();
         stopFn = null;
         recording = false;

package/dist/src/session-lifecycle.d.ts

@@ -0,0 +1,38 @@
+/**
+ * When a recorded session ends.
+ *
+ * A session is one sitting. The recorder used to resolve its id once at start
+ * and never revisit it, so a tab left open stayed a single session for as long
+ * as the tab lived — production accumulated recordings of 20 days and 14k
+ * segments, which are neither watchable nor meaningful as analytics.
+ */
+/**
+ * User inactivity that ends a session. Matched to the session cookie's max-age
+ * so the in-tab and cross-navigation rules agree on when a session ends.
+ */
+export declare const SESSION_TIMEOUT_MS: number;
+/** rrweb event types, narrowed to what this module needs. */
+interface ActivityEvent {
+    type: number;
+    data?: {
+        source?: number;
+    };
+}
+/** Whether this event is evidence a person is still there. */
+export declare function isUserActivity(event: ActivityEvent): boolean;
+/**
+ * Whether the gap since `lastActivityAt` has ended the session.
+ *
+ * `lastActivityAt` of 0 means nothing has happened yet, which is the start of a
+ * session rather than the end of one.
+ */
+export declare function sessionExpired(lastActivityAt: number, now: number): boolean;
+/**
+ * Whether a session id cached in sessionStorage may still be used.
+ *
+ * sessionStorage is scoped to the tab, not to 30 minutes, so without this check
+ * a reload resurrects a session the cookie had already expired.
+ */
+export declare function storedSessionUsable(storedAt: number, now: number): boolean;
+export {};
+//# sourceMappingURL=session-lifecycle.d.ts.map

package/dist/src/session-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-lifecycle.d.ts","sourceRoot":"","sources":["../../src/session-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;GAGG;AACH,eAAO,MAAM,kBAAkB,QAAiB,CAAA;AAoBhD,6DAA6D;AAC7D,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAC3B;AAED,8DAA8D;AAC9D,wBAAgB,cAAc,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAM5D;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAG3E;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAG1E"}

package/dist/src/session-lifecycle.js

@@ -0,0 +1,62 @@
+/**
+ * When a recorded session ends.
+ *
+ * A session is one sitting. The recorder used to resolve its id once at start
+ * and never revisit it, so a tab left open stayed a single session for as long
+ * as the tab lived — production accumulated recordings of 20 days and 14k
+ * segments, which are neither watchable nor meaningful as analytics.
+ */
+/**
+ * User inactivity that ends a session. Matched to the session cookie's max-age
+ * so the in-tab and cross-navigation rules agree on when a session ends.
+ */
+export const SESSION_TIMEOUT_MS = 30 * 60 * 1000;
+/**
+ * rrweb incremental sources that mean a human did something.
+ *
+ * Deliberately excludes mutations (source 0): a page that polls, animates or
+ * re-renders on a timer emits those forever with nobody watching, and counting
+ * them as activity is exactly what keeps an abandoned tab alive.
+ */
+const USER_ACTIVITY_SOURCES = new Set([
+    1, // MouseMove
+    2, // MouseInteraction
+    3, // Scroll
+    5, // Input
+    6, // TouchMove
+    7, // MediaInteraction
+    12, // Drag
+    14, // Selection
+]);
+/** Whether this event is evidence a person is still there. */
+export function isUserActivity(event) {
+    // Pageview (7) — a navigation is always a person doing something.
+    if (event.type === 7)
+        return true;
+    // IncrementalSnapshot (3) — only the interaction sources count.
+    if (event.type === 3)
+        return USER_ACTIVITY_SOURCES.has(event.data?.source ?? -1);
+    return false;
+}
+/**
+ * Whether the gap since `lastActivityAt` has ended the session.
+ *
+ * `lastActivityAt` of 0 means nothing has happened yet, which is the start of a
+ * session rather than the end of one.
+ */
+export function sessionExpired(lastActivityAt, now) {
+    if (lastActivityAt <= 0)
+        return false;
+    return now - lastActivityAt > SESSION_TIMEOUT_MS;
+}
+/**
+ * Whether a session id cached in sessionStorage may still be used.
+ *
+ * sessionStorage is scoped to the tab, not to 30 minutes, so without this check
+ * a reload resurrects a session the cookie had already expired.
+ */
+export function storedSessionUsable(storedAt, now) {
+    if (!Number.isFinite(storedAt) || storedAt <= 0)
+        return false;
+    return now - storedAt < SESSION_TIMEOUT_MS;
+}

package/dist/src/session-lifecycle.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=session-lifecycle.test.d.ts.map

package/dist/src/session-lifecycle.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-lifecycle.test.d.ts","sourceRoot":"","sources":["../../src/session-lifecycle.test.ts"],"names":[],"mappings":""}

package/dist/src/session-lifecycle.test.js

@@ -0,0 +1,85 @@
+import { describe, expect, test } from "bun:test";
+import { isUserActivity, SESSION_TIMEOUT_MS, sessionExpired, storedSessionUsable, } from "./session-lifecycle";
+/**
+ * These rules decide how a visitor's time is cut into sessions, and both failure
+ * directions are expensive: too permissive and a tab left open becomes a 20-day
+ * recording, too strict and one sitting fragments into dozens of stubs.
+ */
+const NOW = 1_700_000_000_000;
+/** rrweb IncrementalSnapshot with the given source. */
+const inc = (source) => ({ type: 3, data: { source } });
+describe("isUserActivity", () => {
+    test("counts the things a person does", () => {
+        expect(isUserActivity(inc(1))).toBe(true); // mouse move
+        expect(isUserActivity(inc(2))).toBe(true); // click
+        expect(isUserActivity(inc(3))).toBe(true); // scroll
+        expect(isUserActivity(inc(5))).toBe(true); // input
+        expect(isUserActivity(inc(6))).toBe(true); // touch
+        expect(isUserActivity(inc(12))).toBe(true); // drag
+        expect(isUserActivity(inc(14))).toBe(true); // selection
+    });
+    test("a navigation is always activity", () => {
+        expect(isUserActivity({ type: 7 })).toBe(true);
+    });
+    test("does NOT count DOM mutations", () => {
+        // The whole point: a polling or animating page emits these forever with
+        // nobody watching. Counting them is what created the 20-day recordings.
+        expect(isUserActivity(inc(0))).toBe(false);
+    });
+    test("does not count other machine-driven sources", () => {
+        expect(isUserActivity(inc(4))).toBe(false); // viewport resize
+        expect(isUserActivity(inc(8))).toBe(false); // stylesheet rule
+        expect(isUserActivity(inc(9))).toBe(false); // canvas mutation
+        expect(isUserActivity(inc(11))).toBe(false); // log
+        expect(isUserActivity(inc(15))).toBe(false); // adopted stylesheet
+    });
+    test("ignores non-incremental event types", () => {
+        expect(isUserActivity({ type: 2 })).toBe(false); // full snapshot
+        expect(isUserActivity({ type: 4 })).toBe(false); // meta
+        expect(isUserActivity({ type: 5 })).toBe(false); // custom
+    });
+    test("tolerates a missing source", () => {
+        expect(isUserActivity({ type: 3 })).toBe(false);
+        expect(isUserActivity({ type: 3, data: {} })).toBe(false);
+    });
+});
+describe("sessionExpired", () => {
+    test("holds the session open right up to the timeout", () => {
+        expect(sessionExpired(NOW, NOW + SESSION_TIMEOUT_MS - 1)).toBe(false);
+        expect(sessionExpired(NOW, NOW + SESSION_TIMEOUT_MS)).toBe(false);
+    });
+    test("ends it past the timeout", () => {
+        expect(sessionExpired(NOW, NOW + SESSION_TIMEOUT_MS + 1)).toBe(true);
+    });
+    test("a long sitting stays one session while activity continues", () => {
+        // Activity every 25 minutes for 8 hours never expires — the gap is what
+        // matters, not the total duration.
+        let last = NOW;
+        for (let i = 0; i < 20; i++) {
+            const next = last + 25 * 60_000;
+            expect(sessionExpired(last, next)).toBe(false);
+            last = next;
+        }
+    });
+    test("an idle tab expires once, not repeatedly", () => {
+        // 20 days of silence is a single expiry, and the caller resets the clock.
+        expect(sessionExpired(NOW, NOW + 20 * 24 * 60 * 60_000)).toBe(true);
+    });
+    test("no activity yet is not an expiry", () => {
+        expect(sessionExpired(0, NOW)).toBe(false);
+    });
+});
+describe("storedSessionUsable", () => {
+    test("reuses a session the tab touched recently", () => {
+        expect(storedSessionUsable(NOW, NOW + 60_000)).toBe(true);
+    });
+    test("refuses one the cookie would already have expired", () => {
+        expect(storedSessionUsable(NOW, NOW + SESSION_TIMEOUT_MS)).toBe(false);
+        expect(storedSessionUsable(NOW, NOW + SESSION_TIMEOUT_MS + 1)).toBe(false);
+    });
+    test("refuses a missing or unparseable timestamp", () => {
+        // An SDK upgrade leaves tabs with no stored timestamp; those start fresh.
+        expect(storedSessionUsable(Number.NaN, NOW)).toBe(false);
+        expect(storedSessionUsable(0, NOW)).toBe(false);
+    });
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunardinos/browser",
-  "version": "0.2.2",
+  "version": "0.2.4",
   "type": "module",
   "exports": {
     ".": {