@maple-dev/browser 0.9.0 → 0.10.1

package/dist/index.mjs

@@ -1,855 +1,2 @@
-import { A as setVisitorTracking, D as setActiveTraceIdProvider, M as scrubUrl, S as sdkHint, _ as isLikelyBot, a as recordTraceId, c as getActiveSink, d as claimReplaySample, f as getSession, g as postSessionMetaRow, h as rotateSession, i as readSessionSink, j as addUrlSanitizer, k as configureVisitorCookie, l as queuePending, n as getObservedTraceIds, o as startSessionLifecycle, r as publishSessionSink, s as clearPendingEvents, t as clearSessionSink, u as startEventSink, v as SDK_HINT_HEADER } from "./sink-DHPiMgU0.mjs";
-import { ProxyTracerProvider, SpanKind, SpanStatusCode, context, propagation, trace } from "@opentelemetry/api";
-import { OTLPTraceExporter } from "@opentelemetry/exporter-trace-otlp-http";
-import { registerInstrumentations } from "@opentelemetry/instrumentation";
-import { FetchInstrumentation } from "@opentelemetry/instrumentation-fetch";
-import { resourceFromAttributes } from "@opentelemetry/resources";
-import { BatchSpanProcessor } from "@opentelemetry/sdk-trace-base";
-import { WebTracerProvider } from "@opentelemetry/sdk-trace-web";
-import { ATTR_SERVICE_NAME, ATTR_SERVICE_VERSION } from "@opentelemetry/semantic-conventions";
-//#region ../browser-session/src/identity/consent.ts
-/**
-* Consent gating for session capture.
-*
-* The posture, deliberately:
-*
-* - `requireConsent` defaults to **false**. Flipping that default would
-*   silently stop telemetry for every existing install — an availability
-*   incident dressed up as a privacy win. Apps that need a consent gate opt in.
-* - Global Privacy Control **is** honored by default, but only against the
-*   persistent visitor id, not the session itself. GPC is a legally recognized
-*   signal in several US states and it maps exactly onto the one cross-session
-*   identifier this SDK stores; the session-scoped capture that powers replay
-*   and error triage is unaffected.
-* - `doNotTrack` is **not** honored by default. It is deprecated, removed from
-*   Safari, and ignored across the industry, so respecting it would mostly mean
-*   dropping data from users who never intended to opt out. Apps can turn it on.
-*/
-/**
-* Consent lives on `globalThis`, for the same reason the event sink does
-* (`events/events-sink.ts`): an app that bundles both `@maple-dev/browser` and the
-* Effect SDK gets **two copies** of this module, and per-copy state would mean
-* `setConsent(true)` on one never releases the other copy's exporters — or, the
-* other way round, one copy capturing while the other believes consent is
-* required. There is one user and one decision, so there is one state.
-*/
-const CONSENT_KEY = "__MAPLE_BROWSER_CONSENT__";
-function consentState() {
-	const owner = globalThis;
-	const existing = owner[CONSENT_KEY];
-	if (existing) return existing;
-	const fresh = {
-		allowedSince: 0,
-		granted: false,
-		listeners: /* @__PURE__ */ new Set(),
-		requireConsent: false,
-		respectDoNotTrack: false
-	};
-	owner[CONSENT_KEY] = fresh;
-	return fresh;
-}
-function updateEffectiveConsent(previous) {
-	const state = consentState();
-	const allowed = hasConsent();
-	if (allowed === previous) return;
-	state.allowedSince = allowed ? Date.now() : Number.POSITIVE_INFINITY;
-	for (const listener of state.listeners) try {
-		listener(allowed);
-	} catch {}
-}
-/**
-* Apply the host app's privacy config. Call before anything captures.
-*
-* Both SDKs call this at startup, and an app can init one of them without a
-* `privacy` block — so the gates only ever **tighten**. Letting the second
-* caller's absent option reset `requireConsent` back to false would silently
-* disable a gate the first caller asked for, and the resulting
-* denied→allowed transition would start capture on a user who never consented.
-* To genuinely relax a gate, reload without it.
-*/
-function configurePrivacy(options) {
-	const state = consentState();
-	const previous = hasConsent();
-	state.requireConsent = state.requireConsent || (options?.requireConsent ?? false);
-	state.respectDoNotTrack = state.respectDoNotTrack || (options?.respectDoNotTrack ?? false);
-	configureVisitorCookie({
-		crossSubdomainCookie: options?.crossSubdomainCookie,
-		cookieDomain: options?.cookieDomain
-	});
-	if (options?.sanitizeUrl) addUrlSanitizer(options.sanitizeUrl);
-	updateEffectiveConsent(previous);
-}
-/** Record the user's consent decision. No-op unless `requireConsent` is set. */
-function setConsent(nextGranted) {
-	const previous = hasConsent();
-	consentState().granted = nextGranted;
-	updateEffectiveConsent(previous);
-}
-/** Whether capture may proceed at all. */
-function hasConsent() {
-	const state = consentState();
-	return !state.requireConsent || state.granted;
-}
-/**
-* Subscribe to effective capture permission changes. The listener is invoked
-* only when capture actually transitions between allowed and denied; changing
-* the stored decision while `requireConsent` is off is deliberately silent.
-*/
-function onConsentChange(listener) {
-	const { listeners } = consentState();
-	listeners.add(listener);
-	return () => listeners.delete(listener);
-}
-/**
-* Earliest epoch-ms timestamp telemetry may export for the current grant.
-* `Infinity` means capture is denied. Exporters use this to discard anything
-* buffered before a late grant or across a revoke/re-grant cycle.
-*/
-function consentAllowedSince() {
-	return hasConsent() ? consentState().allowedSince : Number.POSITIVE_INFINITY;
-}
-/**
-* Whether a *persistent* identifier may be stored. Separate from `hasConsent`
-* because GPC/DNT suppress the cross-session id without suppressing capture.
-*/
-function mayPersistIdentifier() {
-	if (!hasConsent()) return false;
-	if (typeof navigator === "undefined") return true;
-	const nav = navigator;
-	if (nav.globalPrivacyControl === true) return false;
-	if (consentState().respectDoNotTrack && nav.doNotTrack === "1") return false;
-	return true;
-}
-//#endregion
-//#region ../browser-session/src/identity/identity.ts
-/**
-* Trait caps. The warehouse column is `Map(String, String)` — plain keys
-* precisely because they are arbitrary — so the cost of a unique key per user
-* is row size and query-time map width rather than a churned dictionary. The
-* cap bounds one row's damage; `warnOnIdLikeTraitKey` surfaces the pattern to
-* whoever wrote it, since an id in a trait key is nearly always a mistake.
-*/
-const MAX_TRAITS = 24;
-const MAX_TRAIT_KEY_LENGTH = 64;
-const MAX_TRAIT_VALUE_LENGTH = 256;
-let warnedAboutTraitKeys = false;
-/** Heuristic: a trait *key* that looks like an id is almost always a mistake. */
-function looksLikeId(key) {
-	return /^[0-9a-f]{8,}$/i.test(key) || /^(usr|user|org|cus|acct)_/i.test(key);
-}
-function coerceTraitValue(value) {
-	if (value === null || value === void 0) return void 0;
-	return (typeof value === "string" ? value : String(value)).slice(0, MAX_TRAIT_VALUE_LENGTH);
-}
-function normalizeTraits(traits) {
-	if (!traits) return {};
-	const out = {};
-	for (const [rawKey, rawValue] of Object.entries(traits)) {
-		if (Object.keys(out).length >= MAX_TRAITS) break;
-		const value = coerceTraitValue(rawValue);
-		if (value === void 0) continue;
-		const key = rawKey.slice(0, MAX_TRAIT_KEY_LENGTH);
-		if (!key) continue;
-		if (!warnedAboutTraitKeys && looksLikeId(key)) {
-			warnedAboutTraitKeys = true;
-			console.warn(`[maple] identity trait key "${key}" looks like an id. A key per user widens every session row's trait map; put ids in the value, or in id/groupId, not the key.`);
-		}
-		out[key] = value;
-	}
-	return out;
-}
-function trimmed(value) {
-	const text = value?.trim();
-	return text ? text : void 0;
-}
-/**
-* Normalize whatever a host app passed into the shape the metadata row wants.
-*
-* Each call *replaces* the identity rather than merging into the previous one.
-* Merging would leak a signed-out user's email into the next person to use a
-* shared device, and replacement is what the existing string-only `identify`
-* already did.
-*/
-function normalizeIdentity(input) {
-	if (input === null || input === void 0) return void 0;
-	if (typeof input === "string") {
-		const id = trimmed(input);
-		return id ? {
-			id,
-			traits: {}
-		} : void 0;
-	}
-	const resolved = {
-		id: trimmed(input.id),
-		email: trimmed(input.email),
-		username: trimmed(input.username),
-		groupId: trimmed(input.groupId),
-		groupName: trimmed(input.groupName),
-		traits: normalizeTraits(input.traits)
-	};
-	return resolved.id || resolved.email || resolved.username || resolved.groupId || resolved.groupName || Object.keys(resolved.traits).length > 0 ? resolved : void 0;
-}
-//#endregion
-//#region ../browser-session/src/session/metadata-session.ts
-/**
-* Metadata-only session lifecycle used whenever rrweb is disabled or unsampled.
-* It is the shared lifecycle driver with no capture of its own: the distilled
-* event sink runs on every page load regardless, so this owner only has to post
-* rows and flush that sink on the way out.
-*/
-function startMetadataSession(options) {
-	return startSessionLifecycle(options, {
-		recorded: false,
-		post: (row, keepalive) => {
-			postSessionMetaRow(options, row, keepalive);
-		},
-		onSuspend: ({ flush, keepalive }) => {
-			if (flush && keepalive) getActiveSink()?.flush(true);
-		},
-		onSessionChange: options.onSessionChange
-	});
-}
-//#endregion
-//#region ../browser-session/src/events/props.ts
-const MAX_PROPS = 32;
-const MAX_PROP_KEY_LENGTH = 64;
-const MAX_PROP_VALUE_LENGTH = 1024;
-const MAX_TOTAL_PROP_BYTES = 8192;
-/**
-* Coerce one property value to the string the warehouse column holds.
-*
-* `null`/`undefined`/functions/symbols are dropped rather than stringified —
-* `"undefined"` as a stored value is worse than an absent key.
-*/
-function coerce(value) {
-	if (value === null || value === void 0) return void 0;
-	switch (typeof value) {
-		case "string": return value.slice(0, MAX_PROP_VALUE_LENGTH);
-		case "number":
-		case "boolean":
-		case "bigint": return String(value);
-		case "function":
-		case "symbol": return;
-	}
-	try {
-		if (value instanceof Date) return value.toISOString();
-		return JSON.stringify(value)?.slice(0, MAX_PROP_VALUE_LENGTH);
-	} catch {
-		return;
-	}
-}
-/** Coerce and cap a `track()` property bag to the `Map(String, String)` the warehouse stores. */
-function coerceTrackProps(props) {
-	if (!props) return {};
-	const out = {};
-	let bytes = 0;
-	for (const [rawKey, rawValue] of Object.entries(props)) {
-		if (Object.keys(out).length >= MAX_PROPS) break;
-		const value = coerce(rawValue);
-		if (value === void 0) continue;
-		const key = rawKey.slice(0, MAX_PROP_KEY_LENGTH);
-		if (!key) continue;
-		bytes += key.length + value.length;
-		if (bytes > MAX_TOTAL_PROP_BYTES) break;
-		out[key] = value;
-	}
-	return out;
-}
-//#endregion
-//#region ../browser-session/src/events/track.ts
-let warnedAboutName = false;
-/**
-* Record a custom product event against the current session.
-*
-* Stored as a `session_events` row with `Type='custom'`, so it shows up inline
-* in the session transcript alongside the clicks and network calls that
-* surround it — not in a separate analytics silo.
-*
-* Safe to call before the SDK finishes initializing: events are queued (capped)
-* and drained once the sink starts. Never throws.
-*/
-function track(name, props) {
-	if (!hasConsent()) return;
-	if (typeof name !== "string" || name.trim().length === 0) {
-		if (!warnedAboutName) {
-			warnedAboutName = true;
-			console.warn("[maple] track() needs a non-empty event name; the call was ignored.");
-		}
-		return;
-	}
-	const ev = {
-		type: "custom",
-		message: name.trim().slice(0, 128),
-		attrs: coerceTrackProps(props),
-		timestamp: Date.now(),
-		url: typeof location !== "undefined" ? location.href : void 0
-	};
-	const sink = getActiveSink();
-	if (sink) sink.emit(ev);
-	else queuePending(ev);
-}
-//#endregion
-//#region ../browser-session/src/platform/region.ts
-const MAPLE_REGIONS = ["us", "eu"];
-const INGEST_ENDPOINTS = {
-	us: "https://ingest.maple.dev",
-	eu: "https://ingest.eu.maple.dev"
-};
-/**
-* Narrow an untyped region (an env var, or a JS caller outside the type
-* checker) to a known one. Case and surrounding whitespace are ignored;
-* anything else is `undefined`.
-*/
-function parseRegion(raw) {
-	if (typeof raw !== "string") return void 0;
-	const value = raw.trim().toLowerCase();
-	return MAPLE_REGIONS.find((region) => region === value);
-}
-let warnedRegions = /* @__PURE__ */ new Set();
-/**
-* The ingest base URL for a region. An unrecognized value falls back to the
-* default region with a console warning rather than throwing: the ingest key
-* belongs to one instance, so the other one rejects it and no data lands in
-* the wrong place.
-*/
-function ingestEndpointForRegion(region) {
-	if (region === void 0 || region === null || region === "") return INGEST_ENDPOINTS["us"];
-	const parsed = parseRegion(region);
-	if (parsed) return INGEST_ENDPOINTS[parsed];
-	const label = String(region);
-	if (!warnedRegions.has(label)) {
-		warnedRegions.add(label);
-		console.warn(`[maple] unknown region "${label}"; expected one of ${MAPLE_REGIONS.join(", ")}. Using "us".`);
-	}
-	return INGEST_ENDPOINTS["us"];
-}
-/** Loop rather than `/\/+$/`: that pattern backtracks polynomially on a long run of slashes. */
-function trimTrailingSlashes(value) {
-	let end = value.length;
-	while (end > 0 && value.charCodeAt(end - 1) === 47) end--;
-	return value.slice(0, end);
-}
-/**
-* Resolve the ingest base URL. An explicit URL always beats a region, whichever
-* source each came from, so a collector or proxy endpoint is never bypassed by
-* a region set elsewhere. Candidates are tried in order; the first non-empty
-* one wins.
-*/
-function resolveIngestEndpoint(options) {
-	for (const endpoint of options.endpoints) if (endpoint) return trimTrailingSlashes(endpoint);
-	return ingestEndpointForRegion(options.regions.find((value) => value !== void 0 && value !== null && value !== ""));
-}
-//#endregion
-//#region src/version.ts
-const SDK_VERSION = "0.9.0";
-/** The `x-maple-sdk` value this build sends. */
-const SDK_NAME = "maple-browser";
-//#endregion
-//#region src/tracing.ts
-/** Span attributes that carry a page or request URL. */
-const URL_ATTRIBUTES = ["url.full", "http.url"];
-/**
-* Captures every span's trace id into the session sink, and redacts URL
-* attributes before anything can export them. Lightweight: runs alongside the
-* BatchSpanProcessor, does no export of its own.
-*/
-var TraceIdCollector = class {
-	getUserId;
-	constructor(getUserId = () => void 0) {
-		this.getUserId = getUserId;
-	}
-	onStart(span) {
-		for (const key of URL_ATTRIBUTES) {
-			const value = span.attributes[key];
-			if (typeof value === "string") span.setAttribute(key, scrubUrl(value));
-		}
-		if (!hasConsent()) return;
-		recordTraceId(span.spanContext().traceId);
-		const sessionId = readSessionSink()?.sessionId;
-		if (sessionId !== void 0) span.setAttribute("session.id", sessionId);
-		const userId = this.getUserId();
-		if (userId !== void 0) span.setAttribute("user.id", userId);
-	}
-	onEnd(_span) {}
-	forceFlush() {
-		return Promise.resolve();
-	}
-	shutdown() {
-		return Promise.resolve();
-	}
-};
-/**
-* Drops buffered spans captured while consent was absent. Checking start time,
-* rather than only permission at flush time, also prevents a late grant from
-* releasing spans that began before that grant.
-*/
-var ConsentSpanExporter = class {
-	inner;
-	constructor(inner) {
-		this.inner = inner;
-	}
-	export(spans, callback) {
-		const since = consentAllowedSince();
-		if (!hasConsent() || !Number.isFinite(since)) {
-			callback({ code: 0 });
-			return;
-		}
-		const eligible = spans.filter((span) => span.startTime[0] * 1e3 + span.startTime[1] / 1e6 >= since);
-		if (eligible.length === 0) {
-			callback({ code: 0 });
-			return;
-		}
-		this.inner.export(eligible, callback);
-	}
-	forceFlush() {
-		return this.inner.forceFlush?.() ?? Promise.resolve();
-	}
-	shutdown() {
-		return this.inner.shutdown();
-	}
-};
-/**
-* How long a span may sit in the batch queue before export.
-*
-* Shorter than OTel's 5s default: in a browser the queue is only as durable as
-* the tab, and the unload flush below is a best-effort catch rather than a
-* guarantee (a crashed or killed tab fires neither event). 2s trades a few more
-* requests for a materially smaller loss window.
-*/
-const EXPORT_INTERVAL_MS = 2e3;
-/**
-* The provider this SDK registered, while it is live. `captureException` spans
-* through it directly: the global provider may belong to the host app, which
-* registered first and so kept the global.
-*/
-let mapleProvider;
-/** A tracer on Maple's provider when tracing is live, otherwise the global one. */
-function mapleTracer(name, version) {
-	return (mapleProvider ?? trace.getTracerProvider()).getTracer(name, version);
-}
-/**
-* Set up browser OTel tracing exporting to Maple's ingest. When
-* `tracingInstrumentFetch` is true, fetch() calls are auto-instrumented and
-* their trace ids feed the session. Disable it when an external tracer (e.g.
-* the Effect client SDK) already instruments requests — that tracer feeds the
-* session via the published sink instead, and this avoids redundant duplicate
-* network spans. Returns a shutdown function.
-*
-* `session.id` is deliberately **not** a resource attribute: the resource is
-* fixed for the provider's lifetime, but sessions rotate under it (idle
-* rotation, consent revoke→re-grant), so a resource-level id would attribute
-* every post-rotation span to the ended session. `TraceIdCollector` stamps the
-* live id per span instead.
-*/
-function setupTracing(config) {
-	const attributes = {
-		[ATTR_SERVICE_NAME]: config.serviceName,
-		"maple.sdk.type": "browser"
-	};
-	if (config.serviceNamespace) attributes["service.namespace"] = config.serviceNamespace;
-	if (config.serviceVersion) {
-		attributes[ATTR_SERVICE_VERSION] = config.serviceVersion;
-		if (/^[0-9a-f]{7,40}$/i.test(config.serviceVersion)) attributes["vcs.ref.head.revision"] = config.serviceVersion;
-	}
-	if (config.environment) {
-		attributes["deployment.environment"] = config.environment;
-		attributes["deployment.environment.name"] = config.environment;
-	}
-	const exporter = new ConsentSpanExporter(new OTLPTraceExporter({
-		url: `${config.endpoint}/v1/traces`,
-		headers: {
-			Authorization: `Bearer ${config.ingestKey}`,
-			[SDK_HINT_HEADER]: sdkHint(SDK_NAME, SDK_VERSION)
-		}
-	}));
-	const provider = new WebTracerProvider({
-		resource: resourceFromAttributes(attributes),
-		spanProcessors: [new TraceIdCollector(() => config.identity?.id), new BatchSpanProcessor(exporter, { scheduledDelayMillis: EXPORT_INTERVAL_MS })]
-	});
-	provider.register();
-	mapleProvider = provider;
-	const globalProvider = trace.getTracerProvider();
-	const ownsGlobals = globalProvider === provider || globalProvider instanceof ProxyTracerProvider && globalProvider.getDelegate() === provider;
-	const onExit = () => {
-		provider.forceFlush().catch(() => {});
-	};
-	const onVisibilityChange = () => {
-		if (document.visibilityState === "hidden") onExit();
-	};
-	const canListen = typeof document !== "undefined" && typeof document.addEventListener === "function";
-	if (canListen) {
-		document.addEventListener("visibilitychange", onVisibilityChange);
-		window.addEventListener("pagehide", onExit);
-	}
-	const unregisterInstrumentations = config.tracingInstrumentFetch ? registerInstrumentations({
-		tracerProvider: provider,
-		instrumentations: [new FetchInstrumentation({
-			ignoreUrls: [new RegExp(`${escapeRegExp(config.endpoint)}/v1/`)],
-			propagateTraceHeaderCorsUrls: [...config.propagateTraceHeaderCorsUrls]
-		})]
-	}) : void 0;
-	return async () => {
-		if (canListen) {
-			document.removeEventListener("visibilitychange", onVisibilityChange);
-			window.removeEventListener("pagehide", onExit);
-		}
-		unregisterInstrumentations?.();
-		if (mapleProvider === provider) mapleProvider = void 0;
-		await provider.shutdown();
-		if (ownsGlobals) {
-			trace.disable();
-			context.disable();
-			propagation.disable();
-		}
-	};
-}
-function escapeRegExp(value) {
-	return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-//#endregion
-//#region src/errors.ts
-const asError = (value) => {
-	if (value instanceof Error) return value;
-	if (typeof value === "string") return new Error(value);
-	if (typeof value === "object" && value !== null) {
-		const message = value.message;
-		if (typeof message === "string") return new Error(message);
-	}
-	try {
-		return new Error(String(value));
-	} catch {
-		return /* @__PURE__ */ new Error("Unknown error");
-	}
-};
-/**
-* Errors already reported, by identity. Module-level so the global handlers and
-* `captureException` share it: a framework boundary that reports an error and
-* then rethrows it would otherwise produce two issues for one crash.
-*/
-let reported = /* @__PURE__ */ new WeakSet();
-/** Whether this exact error object was already recorded. */
-const alreadyReported = (error) => typeof error === "object" && error !== null && reported.has(error);
-/**
-* Record `error` on a one-off span. The error is claimed only when the span is
-* recording: before `init()` the tracer is a no-op, and claiming it then would
-* swallow the same error reported again once tracing is live.
-*/
-function recordException(error, options) {
-	const normalized = asError(error);
-	const span = mapleTracer(SDK_NAME, SDK_VERSION).startSpan(options.name ?? "exception", {
-		kind: SpanKind.INTERNAL,
-		attributes: {
-			...typeof location !== "undefined" ? { "url.full": scrubUrl(location.href) } : void 0,
-			...options.attributes
-		}
-	});
-	if (span.isRecording() && typeof error === "object" && error !== null) reported.add(error);
-	span.recordException(normalized);
-	span.setStatus({
-		code: SpanStatusCode.ERROR,
-		message: normalized.message
-	});
-	span.end();
-}
-/**
-* Record an error that no span was watching. Safe before `init()`: without a
-* registered provider the OTel API hands back a no-op tracer and this does
-* nothing. Reporting the same error object twice records it once.
-*/
-function captureException(error, options = {}) {
-	if (alreadyReported(error)) return;
-	recordException(error, options);
-}
-/**
-* Register global handlers for uncaught errors and unhandled rejections.
-* Returns a teardown that removes them.
-*/
-function setupErrorCapture() {
-	if (typeof window === "undefined" || typeof window.addEventListener !== "function") return () => {};
-	const onError = (event) => {
-		const error = event.error ?? (event.message && event.filename ? new Error(event.message) : void 0);
-		if (error === void 0 || alreadyReported(error)) return;
-		recordException(error, {
-			name: "browser.uncaught_error",
-			attributes: {
-				"maple.exception.source": "window.onerror",
-				...event.filename ? { "code.file.path": event.filename } : void 0,
-				...event.lineno ? { "code.line.number": event.lineno } : void 0
-			}
-		});
-	};
-	const onUnhandledRejection = (event) => {
-		if (alreadyReported(event.reason)) return;
-		recordException(event.reason, {
-			name: "browser.unhandled_rejection",
-			attributes: { "maple.exception.source": "unhandledrejection" }
-		});
-	};
-	window.addEventListener("error", onError);
-	window.addEventListener("unhandledrejection", onUnhandledRejection);
-	return () => {
-		window.removeEventListener("error", onError);
-		window.removeEventListener("unhandledrejection", onUnhandledRejection);
-	};
-}
-//#endregion
-//#region src/config.ts
-/**
-* Resolve the identity from either the new `user` object or the legacy
-* `userId` string. `user` wins when both are set.
-*/
-function resolveIdentity(config) {
-	return normalizeIdentity(config.user ?? config.userId);
-}
-/**
-* A sample rate outside 0–1 (or not a number) is a typo, not a policy. Clamp it
-* and say so, rather than recording everyone or no one without a word.
-*/
-function resolveSampleRate(raw) {
-	if (raw === void 0) return 1;
-	if (typeof raw !== "number" || Number.isNaN(raw)) {
-		console.warn(`[maple] replay.sampleRate must be a number between 0 and 1; got ${String(raw)}. Using 1.`);
-		return 1;
-	}
-	if (raw < 0 || raw > 1) {
-		const clamped = Math.min(1, Math.max(0, raw));
-		console.warn(`[maple] replay.sampleRate must be between 0 and 1; got ${raw}. Using ${clamped}.`);
-		return clamped;
-	}
-	return raw;
-}
-function resolveConfig(config) {
-	if (!config.ingestKey) console.warn("[maple] MapleBrowser.init() has no ingestKey; ingest will reject every request.");
-	return {
-		ingestKey: config.ingestKey,
-		serviceName: config.serviceName,
-		endpoint: resolveIngestEndpoint({
-			endpoints: [config.endpoint],
-			regions: [config.region]
-		}),
-		serviceNamespace: config.serviceNamespace,
-		serviceVersion: config.serviceVersion,
-		environment: config.environment,
-		identity: resolveIdentity(config),
-		tracingEnabled: config.tracing?.enabled ?? true,
-		tracingInstrumentFetch: config.tracing?.instrumentFetch ?? true,
-		tracingCaptureErrors: config.tracing?.captureErrors ?? true,
-		propagateTraceHeaderCorsUrls: config.tracing?.propagateTraceHeaderCorsUrls ?? [],
-		replayEnabled: config.replay?.enabled ?? true,
-		replaySampleRate: resolveSampleRate(config.replay?.sampleRate),
-		maskAllInputs: config.privacy?.maskAllInputs ?? true,
-		maskAllText: config.privacy?.maskAllText ?? false,
-		persistVisitorId: config.privacy?.persistVisitorId ?? true,
-		crossSubdomainCookie: config.privacy?.crossSubdomainCookie ?? true,
-		cookieDomain: config.privacy?.cookieDomain,
-		requireConsent: config.privacy?.requireConsent ?? false,
-		captureUserEmail: config.privacy?.captureUserEmail ?? true,
-		respectDoNotTrack: config.privacy?.respectDoNotTrack ?? false,
-		sanitizeUrl: config.privacy?.sanitizeUrl
-	};
-}
-//#endregion
-//#region src/init.ts
-/** `x-maple-sdk` value for every request this build makes to ingest. */
-const SDK_HINT = sdkHint(SDK_NAME, SDK_VERSION);
-let active;
-let activeConfig;
-/**
-* An `identify()` made before `init()`, applied when it runs. Auth callbacks
-* routinely resolve before the SDK is initialized; dropping the call meant the
-* whole first session went anonymous. Wrapped so a pending *clear* (`undefined`)
-* is distinguishable from no call at all.
-*/
-let pendingIdentity;
-/**
-* Initialize Maple browser telemetry. With consent gating enabled the returned
-* handle remains live while denied: granting starts capture, revoking detaches
-* it without flushing, and a later grant starts cleanly again.
-*/
-function init(rawConfig) {
-	if (active) return active;
-	if (typeof window === "undefined") return {
-		sessionId: "",
-		shutdown: () => Promise.resolve()
-	};
-	const config = resolveConfig(rawConfig);
-	if (pendingIdentity) config.identity = normalizeIdentity(pendingIdentity.input);
-	pendingIdentity = void 0;
-	activeConfig = config;
-	configurePrivacy(config);
-	if (!hasConsent()) clearPendingEvents();
-	setActiveTraceIdProvider(() => trace.getActiveSpan()?.spanContext().traceId);
-	const replayEligible = config.replayEnabled && !isLikelyBot(navigator.userAgent);
-	let runtime;
-	let stopped = false;
-	let rotateOnNextStart = false;
-	let shutdownTracing;
-	let stopErrorCapture;
-	let generation = 0;
-	const startRuntime = () => {
-		if (stopped || runtime || !hasConsent()) return;
-		setVisitorTracking(config.persistVisitorId && mayPersistIdentifier());
-		const session = (rotateOnNextStart ? rotateSession() : void 0) ?? getSession();
-		rotateOnNextStart = false;
-		const recordReplay = replayEligible && claimReplaySample(config.replaySampleRate);
-		publishSessionSink(session.id);
-		const sink = startEventSink({
-			endpoint: config.endpoint,
-			ingestKey: config.ingestKey,
-			sdk: SDK_HINT,
-			maskAllInputs: config.maskAllInputs,
-			maskAllText: config.maskAllText,
-			getIdentity: () => activeConfig?.identity
-		}, session.id);
-		if (config.tracingEnabled && !shutdownTracing) shutdownTracing = setupTracing(config);
-		if (config.tracingEnabled && config.tracingCaptureErrors && !stopErrorCapture) stopErrorCapture = setupErrorCapture();
-		const shared = {
-			endpoint: config.endpoint,
-			ingestKey: config.ingestKey,
-			sdk: SDK_HINT,
-			serviceName: config.serviceName,
-			environment: config.environment,
-			serviceVersion: config.serviceVersion,
-			getIdentity: () => activeConfig?.identity,
-			captureUserEmail: config.captureUserEmail
-		};
-		const startMetadata = () => startMetadataSession({
-			...shared,
-			getTraceIds: getObservedTraceIds,
-			onSessionChange: publishSessionSink
-		});
-		if (!recordReplay) {
-			runtime = {
-				initialSessionId: session.id,
-				sink,
-				metadata: startMetadata()
-			};
-			return;
-		}
-		const next = {
-			initialSessionId: session.id,
-			sink
-		};
-		runtime = next;
-		const ownGeneration = ++generation;
-		const stale = () => stopped || !hasConsent() || generation !== ownGeneration || runtime !== next;
-		next.replayPending = import("./replay-session-gSlAYwqV.mjs").then(({ startReplaySession }) => {
-			if (stale()) return;
-			next.replay = startReplaySession({
-				...shared,
-				maskAllInputs: config.maskAllInputs,
-				maskAllText: config.maskAllText
-			});
-		}).catch(() => {
-			if (stale()) return;
-			next.metadata = startMetadata();
-		});
-	};
-	const stopRuntime = async (flush) => {
-		generation++;
-		const previous = runtime;
-		runtime = void 0;
-		if (!previous) return;
-		const replayShutdown = previous.replay?.shutdown({ flush });
-		const metadataShutdown = previous.metadata?.shutdown({ flush });
-		const currentSessionId = previous.replay?.sessionId ?? previous.metadata?.sessionId;
-		const liveSink = getActiveSink();
-		const sink = liveSink && currentSessionId && liveSink.sessionId === currentSessionId ? liveSink : previous.sink;
-		if (flush) await sink.flush(true);
-		sink.stop();
-		if (sink !== previous.sink) previous.sink.stop();
-		clearSessionSink(currentSessionId ?? previous.initialSessionId);
-		await Promise.all([
-			replayShutdown,
-			metadataShutdown,
-			previous.replayPending
-		]);
-	};
-	startRuntime();
-	const stopConsentListener = config.requireConsent ? onConsentChange((allowed) => {
-		if (allowed) {
-			startRuntime();
-			return;
-		}
-		rotateOnNextStart = runtime !== void 0;
-		clearPendingEvents();
-		setVisitorTracking(false);
-		stopRuntime(false);
-	}) : () => {};
-	const handle = {
-		get sessionId() {
-			return runtime?.replay?.sessionId ?? runtime?.metadata?.sessionId ?? runtime?.initialSessionId ?? "";
-		},
-		shutdown: async () => {
-			if (stopped) return;
-			stopped = true;
-			stopConsentListener();
-			await stopRuntime(true);
-			stopErrorCapture?.();
-			stopErrorCapture = void 0;
-			await shutdownTracing?.();
-			shutdownTracing = void 0;
-			setActiveTraceIdProvider(() => void 0);
-			active = void 0;
-			activeConfig = void 0;
-		}
-	};
-	active = handle;
-	return handle;
-}
-/**
-* Attach, replace, or clear the end-user identity on the active session.
-* Idempotent and safe to call on every render. Future browser-created spans
-* read the id when they start, and future session metadata rows read the whole
-* identity when they post.
-*
-* Accepts a bare user id or the full object:
-*
-* ```ts
-* MapleBrowser.identify("user_123")
-* MapleBrowser.identify({ id: "user_123", email: "a@b.com", groupId: "org_1", groupName: "Acme" })
-* ```
-*
-* Each call replaces the identity rather than merging — merging would leak a
-* signed-out user's email into whoever signs in next on a shared device.
-*
-* Safe before `init()`: the latest call is held and applied when `init()` runs,
-* taking precedence over the `user` passed to it.
-*/
-function identify(input) {
-	if (typeof window === "undefined") return;
-	if (!activeConfig) {
-		pendingIdentity = { input };
-		return;
-	}
-	activeConfig.identity = normalizeIdentity(input);
-}
-//#endregion
-//#region src/index.ts
-/**
-* Maple browser SDK. One call wires up OpenTelemetry tracing and rrweb session
-* replay, both tagged with a shared session id.
-*
-* @example
-* ```ts
-* import { MapleBrowser } from "@maple-dev/browser"
-*
-* MapleBrowser.init({
-*   ingestKey: "maple_pk_...",
-*   serviceName: "acme-web",
-*   region: "eu", // omit for the US region
-* })
-*
-* MapleBrowser.identify({ id: user.id, email: user.email, groupId: org.id, groupName: org.name })
-* MapleBrowser.track("checkout_completed", { plan: "pro", seats: 5 })
-* ```
-*/
-const MapleBrowser = {
-	init,
-	identify,
-	track,
-	captureException,
-	setConsent
-};
-//#endregion
+import { t as MapleBrowser } from "./src-D4e1o0x4.mjs";
 export { MapleBrowser };