@newrelic/browser-agent 1.316.0 → 1.317.0-rc.0

package/CHANGELOG.md

@@ -3,6 +3,21 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.317.0](https://github.com/newrelic/newrelic-browser-agent/compare/v1.316.0...v1.317.0) (2026-06-18)
+
+
+### Features
+
+* Detect and report AJAX payloads ([#1651](https://github.com/newrelic/newrelic-browser-agent/issues/1651)) ([08394db](https://github.com/newrelic/newrelic-browser-agent/commit/08394db8a5a9f2b6fd627e9eee76022977cb433c))
+* Enhance obfuscation to support event filter ([#1782](https://github.com/newrelic/newrelic-browser-agent/issues/1782)) ([c97aaf9](https://github.com/newrelic/newrelic-browser-agent/commit/c97aaf9773cfb0b62a810eb07b37e6f5b96d5ab5))
+
+
+### Bug Fixes
+
+* Calculate browser_stack_hash from truncated stack trace ([#1789](https://github.com/newrelic/newrelic-browser-agent/issues/1789)) ([f7df627](https://github.com/newrelic/newrelic-browser-agent/commit/f7df627b14e3e5e8fa4a8d94433ea76e9a9902bb))
+* Get responseBodySize from body if content-length is missing ([#1793](https://github.com/newrelic/newrelic-browser-agent/issues/1793)) ([58663ec](https://github.com/newrelic/newrelic-browser-agent/commit/58663ec19dc99ec94e34c17a5dfaa20a07038dba))
+* Patch handling of inlining images for Session Replay ([#1765](https://github.com/newrelic/newrelic-browser-agent/issues/1765)) ([b330f8e](https://github.com/newrelic/newrelic-browser-agent/commit/b330f8e3e35f2fda076967092bcb70e792de6eeb))
+
 ## [1.316.0](https://github.com/newrelic/newrelic-browser-agent/compare/v1.315.0...v1.316.0) (2026-06-01)
 
 

package/dist/cjs/common/config/configurable.js

@@ -24,7 +24,7 @@ function getModeledObject(obj, model) {
           output[key] = null;
           continue;
         }
-        if (Array.isArray(obj[key]) && Array.isArray(model[key])) output[key] = Array.from(new Set([...obj[key], ...model[key]]));else if (obj[key] instanceof Map || obj[key] instanceof Set || obj[key] instanceof Date || obj[key] instanceof RegExp) output[key] = obj[key];else if (typeof obj[key] === 'object' && typeof model[key] === 'object') output[key] = getModeledObject(obj[key], model[key]);else output[key] = obj[key];
+        if (Array.isArray(obj[key]) && Array.isArray(model[key])) output[key] = Array.from(new Set([...obj[key], ...model[key]]));else if (obj[key] instanceof Map || obj[key] instanceof Set || obj[key] instanceof Date || obj[key] instanceof RegExp) output[key] = obj[key];else if (typeof obj[key] === 'object' && model[key] !== null && typeof model[key] === 'object') output[key] = getModeledObject(obj[key], model[key]);else output[key] = obj[key];
       } catch (e) {
         if (!output[key]) (0, _console.warn)(1, e);
       }

package/dist/cjs/common/config/init-types.js

@@ -16,6 +16,7 @@ exports.default = void 0;
  * @property {boolean} [ajax.block_internal] - If true, agent requests going to harvest endpoint are treated as on deny list. In other words, agent will not self-report AJAX.
  * @property {boolean} [ajax.enabled] - Turn on/off the ajax feature (on by default).
  * @property {boolean} [ajax.autoStart] - If true, the agent will automatically start the ajax feature. Otherwise, it will be in a deferred state until the `start` API method is called.
+ * @property {('none'|'failures'|'all')} [ajax.capture_payloads] - Controls when AJAX request/response payloads are captured. 'none' = never capture, 'failures' = capture only on errors (4xx, 5xx, network errors, GraphQL errors), 'all' = always capture.
  * @property {Object} [api]
  * @property {Object} [api.register]
  * @property {boolean} [api.register.enabled] - If true, the agent will allow registered children to be sent to the server.

package/dist/cjs/common/config/init.js

@@ -5,8 +5,9 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports.mergeInit = void 0;
 var _constants = require("../../features/generic_events/constants");
+var _constants2 = require("../../features/ajax/constants");
 var _querySelector = require("../dom/query-selector");
-var _constants2 = require("../session/constants");
+var _constants3 = require("../session/constants");
 var _console = require("../util/console");
 var _configurable = require("./configurable");
 /**
@@ -57,7 +58,8 @@ const InitModelFn = () => {
       deny_list: undefined,
       block_internal: true,
       enabled: true,
-      autoStart: true
+      autoStart: true,
+      capture_payloads: _constants2.CAPTURE_PAYLOAD_SETTINGS.NONE
     },
     api: {
       register: {
@@ -141,8 +143,8 @@ const InitModelFn = () => {
       beacon: undefined
     },
     session: {
-      expiresMs: _constants2.DEFAULT_EXPIRES_MS,
-      inactiveMs: _constants2.DEFAULT_INACTIVE_MS
+      expiresMs: _constants3.DEFAULT_EXPIRES_MS,
+      inactiveMs: _constants3.DEFAULT_INACTIVE_MS
     },
     session_replay: {
       autoStart: true,

package/dist/cjs/common/constants/env.cdn.js

@@ -17,7 +17,7 @@ exports.VERSION = exports.RRWEB_VERSION = exports.RRWEB_PACKAGE_NAME = exports.D
 /**
  * Exposes the version of the agent
  */
-const VERSION = exports.VERSION = "1.316.0";
+const VERSION = exports.VERSION = "1.317.0-rc.0";
 
 /**
  * Exposes the build type of the agent
@@ -31,4 +31,4 @@ const BUILD_ENV = exports.BUILD_ENV = "CDN";
 const DIST_METHOD = exports.DIST_METHOD = 'CDN';
 const RRWEB_PACKAGE_NAME = exports.RRWEB_PACKAGE_NAME = '@newrelic/rrweb';
 // Babel will inline this with the rrweb (fork) version on CDN builds.
-const RRWEB_VERSION = exports.RRWEB_VERSION = "1.1.0";
+const RRWEB_VERSION = exports.RRWEB_VERSION = "^1.1.2";

package/dist/cjs/common/constants/env.npm.js

@@ -17,7 +17,7 @@ exports.VERSION = exports.RRWEB_VERSION = exports.RRWEB_PACKAGE_NAME = exports.D
 /**
  * Exposes the version of the agent
  */
-const VERSION = exports.VERSION = "1.316.0";
+const VERSION = exports.VERSION = "1.317.0-rc.0";
 
 /**
  * Exposes the build type of the agent
@@ -32,4 +32,4 @@ const BUILD_ENV = exports.BUILD_ENV = 'NPM';
 const DIST_METHOD = exports.DIST_METHOD = 'NPM';
 const RRWEB_PACKAGE_NAME = exports.RRWEB_PACKAGE_NAME = '@newrelic/rrweb';
 // Babel will inline this with the rrweb (fork) version on NPM dist esm/cjs builds.
-const RRWEB_VERSION = exports.RRWEB_VERSION = "1.1.0";
+const RRWEB_VERSION = exports.RRWEB_VERSION = "^1.1.2";

package/dist/cjs/common/constants/events.js

@@ -0,0 +1,26 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.EVENT_TYPES = void 0;
+/**
+ * Copyright 2020-2026 New Relic, Inc. All rights reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+const EVENT_TYPES = exports.EVENT_TYPES = {
+  AJAX: 'AjaxRequest',
+  PA: 'PageAction',
+  UA: 'UserAction',
+  BP: 'BrowserPerformance',
+  WS: 'WebSocket',
+  SPV: 'SecurityPolicyViolation',
+  JSE: 'JavaScriptError',
+  LOG: 'Log',
+  PVE: 'PageView',
+  PVT: 'PageViewTiming',
+  SR: 'SessionReplay',
+  ST: 'SessionTrace',
+  BI: 'BrowserInteraction'
+};

package/dist/cjs/common/harvest/harvester.js

@@ -4,21 +4,13 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.Harvester = void 0;
-exports.send = send;
 var _constants = require("../../features/metrics/constants");
 var _features = require("../../loaders/features/features");
-var _env = require("../constants/env.npm");
-var _runtime = require("../constants/runtime");
 var _handle = require("../event-emitter/handle");
-var _eventListenerOpts = require("../event-listener/event-listener-opts");
-var _now = require("../timing/now");
 var _eol = require("../unload/eol");
-var _cleanUrl = require("../url/clean-url");
-var _encode = require("../url/encode");
-var _console = require("../util/console");
-var _stringify = require("../util/stringify");
 var _submitData = require("../util/submit-data");
-var _globalEvent = require("../dispatch/global-event");
+var _send = require("./send");
+var _obfuscate = require("../util/obfuscate");
 /**
  * Copyright 2020-2026 New Relic, Inc. All rights reserved.
  * SPDX-License-Identifier: Apache-2.0
@@ -33,6 +25,10 @@ class Harvester {
   initializedAggregates = [];
   constructor(agentRef) {
     this.agentRef = agentRef;
+
+    // Create obfuscator for harvest metadata (referrer URL, etc.)
+    // No event type specified - applies to all harvests regardless of feature
+    this.obfuscator = new _obfuscate.Obfuscator(agentRef);
     (0, _eol.subscribeToEOL)(() => {
       // do one last harvest round or check
       this.initializedAggregates.forEach(aggregateInst => {
@@ -74,11 +70,12 @@ class Harvester {
     const shouldRetryOnFail = !localOpts.isFinalHarvest && submitMethod === _submitData.xhr; // always retry all features harvests except for final
     output.payload = aggregateInst.makeHarvestPayload(shouldRetryOnFail, localOpts);
     if (!output.payload) return output;
-    send(this.agentRef, {
+    (0, _send.send)(this.agentRef, {
       endpoint: _features.FEATURE_TO_ENDPOINT[aggregateInst.featureName],
       payload: output.payload,
       localOpts,
       submitMethod,
+      harvesterObfuscator: this.obfuscator,
       cbFinished,
       raw: aggregateInst.harvestOpts.raw,
       featureName: aggregateInst.featureName,
@@ -108,209 +105,4 @@ class Harvester {
     }
   }
 }
-
-/**
- * @typedef {import('./types.js').NetworkSendSpec} NetworkSendSpec
- */
-exports.Harvester = Harvester;
-const warnings = {};
-/**
-  * Initiate a harvest call.
-  * @param {NetworkSendSpec} param0 Specification for sending data
-  * @returns {boolean} True if a network call was made. Note that this does not mean or guarantee that it was successful.
-  */
-function send(agentRef, {
-  endpoint,
-  payload,
-  localOpts = {},
-  submitMethod,
-  cbFinished,
-  raw,
-  featureName,
-  endpointVersion = 1
-}) {
-  if (!agentRef.info.errorBeacon) return false;
-  let {
-    body,
-    qs
-  } = cleanPayload(payload);
-  if (Object.keys(body).length === 0 && !localOpts.sendEmptyBody) {
-    // if there's no body to send, just run onfinish stuff and return
-    if (cbFinished) cbFinished({
-      sent: false
-    });
-    return false;
-  }
-  const protocol = agentRef.init.ssl === false ? 'http' : 'https';
-  const perceivedBeacon = agentRef.init.proxy.beacon || agentRef.info.errorBeacon;
-  const url = raw ? "".concat(protocol, "://").concat(perceivedBeacon, "/").concat(endpoint) : "".concat(protocol, "://").concat(perceivedBeacon).concat(endpoint !== _features.RUM ? '/' + endpoint : '', "/").concat(endpointVersion, "/").concat(agentRef.info.licenseKey);
-  const baseParams = !raw ? baseQueryString(agentRef, qs, endpoint) : '';
-  let payloadParams = (0, _encode.obj)(qs, agentRef.runtime.maxBytes);
-  if (baseParams === '' && payloadParams.startsWith('&')) {
-    payloadParams = payloadParams.substring(1);
-  }
-  const fullUrl = "".concat(url, "?").concat(baseParams).concat(payloadParams);
-  const gzip = !!qs?.attributes?.includes('gzip');
-
-  // all gzipped data is already in the correct format and needs no transformation
-  // all features going to 'events' endpoint should already be serialized & stringified
-  let stringBody = gzip || endpoint === _features.EVENTS ? body : (0, _stringify.stringify)(body);
-
-  // If body is null, undefined, or an empty object or array after stringifying, send an empty string instead.
-  if (!stringBody || stringBody.length === 0 || stringBody === '{}' || stringBody === '[]') stringBody = '';
-
-  // Warn--once per endpoint--if the agent tries to send large payloads
-  if (endpoint !== _features.BLOBS && stringBody.length > 750000 && (warnings[endpoint] = (warnings[endpoint] || 0) + 1) === 1) (0, _console.warn)(28, endpoint);
-  const headers = [{
-    key: 'content-type',
-    value: 'text/plain'
-  }];
-
-  /* Since workers don't support sendBeacon right now, they can only use XHR method.
-      Because they still do permit synch XHR, the idea is that at final harvest time (worker is closing),
-      we just make a BLOCKING request--trivial impact--with the remaining data as a temp fill-in for sendBeacon.
-     Following the removal of img-element method. */
-  let result = submitMethod({
-    url: fullUrl,
-    body: stringBody,
-    sync: localOpts.isFinalHarvest && _runtime.isWorkerScope,
-    headers
-  });
-  if (!localOpts.isFinalHarvest && cbFinished) {
-    // final harvests don't hold onto buffer data (shouldRetryOnFail is false), so cleanup isn't needed
-    if (submitMethod === _submitData.xhr) {
-      result.addEventListener('loadend', function () {
-        // `this` here in block refers to the XHR object in this scope, do not change the anon function to an arrow function
-        // status 0 refers to a local error, such as CORS or network failure, or a blocked request by the browser (e.g. adblocker)
-        const cbResult = {
-          sent: this.status !== 0,
-          status: this.status,
-          retry: shouldRetry(this.status),
-          fullUrl,
-          xhr: this,
-          responseText: this.responseText
-        };
-        cbFinished(cbResult);
-
-        /** temporary audit of consistency of harvest metadata flags */
-        if (!shouldRetry(this.status)) trackHarvestMetadata();
-      }, (0, _eventListenerOpts.eventListenerOpts)(false));
-    } else if (submitMethod === _submitData.xhrFetch) {
-      result.then(async function (response) {
-        const status = response.status;
-        const cbResult = {
-          sent: true,
-          status,
-          retry: shouldRetry(status),
-          fullUrl,
-          fetchResponse: response,
-          responseText: await response.text()
-        };
-        cbFinished(cbResult);
-        /** temporary audit of consistency of harvest metadata flags */
-        if (!shouldRetry(status)) trackHarvestMetadata();
-      });
-    }
-    function trackHarvestMetadata() {
-      try {
-        if (featureName === _features.FEATURE_NAMES.jserrors && !body?.err) return;
-        const hasReplay = baseParams.includes('hr=1');
-        const hasTrace = baseParams.includes('ht=1');
-        const hasError = qs?.attributes?.includes('hasError=true');
-        (0, _handle.handle)('harvest-metadata', [{
-          [featureName]: {
-            ...(hasReplay && {
-              hasReplay
-            }),
-            ...(hasTrace && {
-              hasTrace
-            }),
-            ...(hasError && {
-              hasError
-            })
-          }
-        }], undefined, _features.FEATURE_NAMES.metrics, agentRef.ee);
-      } catch (err) {
-        // do nothing
-      }
-    }
-  }
-  (0, _globalEvent.dispatchGlobalEvent)({
-    drained: !!agentRef.runtime?.activatedFeatures,
-    type: 'data',
-    name: 'harvest',
-    feature: featureName,
-    data: {
-      endpoint,
-      headers,
-      payload,
-      submitMethod: getSubmitMethodName(),
-      raw,
-      synchronousXhr: !!(localOpts.isFinalHarvest && _runtime.isWorkerScope)
-    }
-  });
-  return true;
-  function shouldRetry(status) {
-    switch (status) {
-      case 408:
-      case 429:
-      case 500:
-        return true;
-    }
-    return status >= 502 && status <= 504 || status >= 512 && status <= 530;
-  }
-  function getSubmitMethodName() {
-    if (submitMethod === _submitData.xhr) return 'xhr';
-    if (submitMethod === _submitData.xhrFetch) return 'fetch';
-    return 'beacon';
-  }
-}
-
-/**
- * Cleans and returns a payload object containing a body and qs
- * object with key/value pairs. KV pairs where the value is null,
- * undefined, or an empty string are removed to save on transmission
- * size.
- * @param {HarvestPayload} payload Payload to be sent to the endpoint.
- * @returns {HarvestPayload} Cleaned payload payload to be sent to the endpoint.
- */
-function cleanPayload(payload = {}) {
-  const clean = input => {
-    if (typeof Uint8Array !== 'undefined' && input instanceof Uint8Array || Array.isArray(input)) return input;
-    if (typeof input === 'string') return input;
-    return Object.entries(input || {}).reduce((accumulator, [key, value]) => {
-      if (typeof value === 'number' || typeof value === 'string' && value.length > 0 || typeof value === 'object' && Object.keys(value || {}).length > 0) {
-        accumulator[key] = value;
-      }
-      return accumulator;
-    }, {});
-  };
-  return {
-    body: clean(payload.body),
-    qs: clean(payload.qs)
-  };
-}
-
-// The stuff that gets sent every time.
-function baseQueryString(agentRef, qs, endpoint) {
-  const ref = agentRef.runtime.obfuscator.obfuscateString((0, _cleanUrl.cleanURL)('' + _runtime.globalScope.location));
-  const session = agentRef.runtime.session;
-  const hr = !!session?.state.sessionReplaySentFirstChunk && session?.state.sessionReplayMode === 1 && endpoint !== _features.JSERRORS;
-  const ht = !!session?.state.traceHarvestStarted && session?.state.sessionTraceMode === 1 && ![_features.LOGS, _features.BLOBS].includes(endpoint);
-  const qps = ['a=' + agentRef.info.applicationID, (0, _encode.param)('sa', agentRef.info.sa ? '' + agentRef.info.sa : ''), (0, _encode.param)('v', _env.VERSION), transactionNameParam(), (0, _encode.param)('ct', agentRef.runtime.customTransaction), '&rst=' + (0, _now.now)(), '&ck=0',
-  // ck param DEPRECATED - still expected by backend
-  '&s=' + (session?.state.value || '0'),
-  // the 0 id encaps all untrackable and default traffic
-  (0, _encode.param)('ref', ref), (0, _encode.param)('ptid', agentRef.runtime.ptid ? '' + agentRef.runtime.ptid : '')];
-  if (hr) qps.push((0, _encode.param)('hr', '1', qs));
-  if (ht) qps.push((0, _encode.param)('ht', '1', qs));
-  return qps.join('');
-
-  // Constructs the transaction name param for the beacon URL.
-  // Prefers the obfuscated transaction name over the plain text.
-  // Falls back to making up a name.
-  function transactionNameParam() {
-    if (agentRef.info.transactionName) return (0, _encode.param)('to', agentRef.info.transactionName);
-    return (0, _encode.param)('t', agentRef.info.tNamePlain || 'Unnamed Transaction');
-  }
-}
+exports.Harvester = Harvester;

package/dist/cjs/common/harvest/send.js

@@ -0,0 +1,232 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.send = send;
+var _features = require("../../loaders/features/features");
+var _env = require("../constants/env.npm");
+var _runtime = require("../constants/runtime");
+var _handle = require("../event-emitter/handle");
+var _eventListenerOpts = require("../event-listener/event-listener-opts");
+var _now = require("../timing/now");
+var _cleanUrl = require("../url/clean-url");
+var _encode = require("../url/encode");
+var _console = require("../util/console");
+var _stringify = require("../util/stringify");
+var _submitData = require("../util/submit-data");
+var _globalEvent = require("../dispatch/global-event");
+/**
+ * Copyright 2020-2026 New Relic, Inc. All rights reserved.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+/**
+ * @typedef {import('./types.js').NetworkSendSpec} NetworkSendSpec
+ */
+
+const warnings = {};
+
+/**
+ * Initiate a harvest call.
+ * @param {object} agentRef The initialized agent reference
+ * @param {NetworkSendSpec} spec Specification for sending data
+ * @returns {boolean} True if a network call was made. Note that this does not mean or guarantee that it was successful.
+ */
+function send(agentRef, {
+  endpoint,
+  payload,
+  localOpts = {},
+  submitMethod,
+  cbFinished,
+  raw,
+  featureName,
+  endpointVersion = 1,
+  harvesterObfuscator
+}) {
+  if (!agentRef.info.errorBeacon) return false;
+  let {
+    body,
+    qs
+  } = cleanPayload(payload);
+  if (Object.keys(body).length === 0 && !localOpts.sendEmptyBody) {
+    // if there's no body to send, just run onfinish stuff and return
+    if (cbFinished) cbFinished({
+      sent: false
+    });
+    return false;
+  }
+  const protocol = agentRef.init.ssl === false ? 'http' : 'https';
+  const perceivedBeacon = agentRef.init.proxy.beacon || agentRef.info.errorBeacon;
+  const url = raw ? "".concat(protocol, "://").concat(perceivedBeacon, "/").concat(endpoint) : "".concat(protocol, "://").concat(perceivedBeacon).concat(endpoint !== _features.RUM ? '/' + endpoint : '', "/").concat(endpointVersion, "/").concat(agentRef.info.licenseKey);
+  const baseParams = !raw ? baseQueryString(agentRef, qs, endpoint, harvesterObfuscator) : '';
+  let payloadParams = (0, _encode.obj)(qs, agentRef.runtime.maxBytes);
+  if (baseParams === '' && payloadParams.startsWith('&')) {
+    payloadParams = payloadParams.substring(1);
+  }
+  const fullUrl = "".concat(url, "?").concat(baseParams).concat(payloadParams);
+  const gzip = !!qs?.attributes?.includes('gzip');
+
+  // all gzipped data is already in the correct format and needs no transformation
+  // all features going to 'events' endpoint should already be serialized & stringified
+  let stringBody = gzip || endpoint === _features.EVENTS ? body : (0, _stringify.stringify)(body);
+
+  // If body is null, undefined, or an empty object or array after stringifying, send an empty string instead.
+  if (!stringBody || stringBody.length === 0 || stringBody === '{}' || stringBody === '[]') stringBody = '';
+
+  // Warn--once per endpoint--if the agent tries to send large payloads
+  if (endpoint !== _features.BLOBS && stringBody.length > 750000 && (warnings[endpoint] = (warnings[endpoint] || 0) + 1) === 1) (0, _console.warn)(28, endpoint);
+  const headers = [{
+    key: 'content-type',
+    value: 'text/plain'
+  }];
+
+  /* Since workers don't support sendBeacon right now, they can only use XHR method.
+      Because they still do permit synch XHR, the idea is that at final harvest time (worker is closing),
+      we just make a BLOCKING request--trivial impact--with the remaining data as a temp fill-in for sendBeacon.
+     Following the removal of img-element method. */
+  let result = submitMethod({
+    url: fullUrl,
+    body: stringBody,
+    sync: localOpts.isFinalHarvest && _runtime.isWorkerScope,
+    headers
+  });
+  if (!localOpts.isFinalHarvest && cbFinished) {
+    // final harvests don't hold onto buffer data (shouldRetryOnFail is false), so cleanup isn't needed
+    if (submitMethod === _submitData.xhr) {
+      result.addEventListener('loadend', function () {
+        // `this` here in block refers to the XHR object in this scope, do not change the anon function to an arrow function
+        // status 0 refers to a local error, such as CORS or network failure, or a blocked request by the browser (e.g. adblocker)
+        const cbResult = {
+          sent: this.status !== 0,
+          status: this.status,
+          retry: shouldRetry(this.status),
+          fullUrl,
+          xhr: this,
+          responseText: this.responseText
+        };
+        cbFinished(cbResult);
+
+        /** temporary audit of consistency of harvest metadata flags */
+        if (!shouldRetry(this.status)) trackHarvestMetadata();
+      }, (0, _eventListenerOpts.eventListenerOpts)(false));
+    } else if (submitMethod === _submitData.xhrFetch) {
+      result.then(async function (response) {
+        const status = response.status;
+        const cbResult = {
+          sent: true,
+          status,
+          retry: shouldRetry(status),
+          fullUrl,
+          fetchResponse: response,
+          responseText: await response.text()
+        };
+        cbFinished(cbResult);
+        /** temporary audit of consistency of harvest metadata flags */
+        if (!shouldRetry(status)) trackHarvestMetadata();
+      });
+    }
+    function trackHarvestMetadata() {
+      try {
+        if (featureName === _features.FEATURE_NAMES.jserrors && !body?.err) return;
+        const hasReplay = baseParams.includes('hr=1');
+        const hasTrace = baseParams.includes('ht=1');
+        const hasError = qs?.attributes?.includes('hasError=true');
+        (0, _handle.handle)('harvest-metadata', [{
+          [featureName]: {
+            ...(hasReplay && {
+              hasReplay
+            }),
+            ...(hasTrace && {
+              hasTrace
+            }),
+            ...(hasError && {
+              hasError
+            })
+          }
+        }], undefined, _features.FEATURE_NAMES.metrics, agentRef.ee);
+      } catch (err) {
+        // do nothing
+      }
+    }
+  }
+  (0, _globalEvent.dispatchGlobalEvent)({
+    drained: !!agentRef.runtime?.activatedFeatures,
+    type: 'data',
+    name: 'harvest',
+    feature: featureName,
+    data: {
+      endpoint,
+      headers,
+      payload,
+      submitMethod: getSubmitMethodName(),
+      raw,
+      synchronousXhr: !!(localOpts.isFinalHarvest && _runtime.isWorkerScope)
+    }
+  });
+  return true;
+  function shouldRetry(status) {
+    switch (status) {
+      case 408:
+      case 429:
+      case 500:
+        return true;
+    }
+    return status >= 502 && status <= 504 || status >= 512 && status <= 530;
+  }
+  function getSubmitMethodName() {
+    if (submitMethod === _submitData.xhr) return 'xhr';
+    if (submitMethod === _submitData.xhrFetch) return 'fetch';
+    return 'beacon';
+  }
+}
+
+/**
+ * Cleans and returns a payload object containing a body and qs
+ * object with key/value pairs. KV pairs where the value is null,
+ * undefined, or an empty string are removed to save on transmission
+ * size.
+ * @param {HarvestPayload} payload Payload to be sent to the endpoint.
+ * @returns {HarvestPayload} Cleaned payload payload to be sent to the endpoint.
+ */
+function cleanPayload(payload = {}) {
+  const clean = input => {
+    if (typeof Uint8Array !== 'undefined' && input instanceof Uint8Array || Array.isArray(input)) return input;
+    if (typeof input === 'string') return input;
+    return Object.entries(input || {}).reduce((accumulator, [key, value]) => {
+      if (typeof value === 'number' || typeof value === 'string' && value.length > 0 || typeof value === 'object' && Object.keys(value || {}).length > 0) {
+        accumulator[key] = value;
+      }
+      return accumulator;
+    }, {});
+  };
+  return {
+    body: clean(payload.body),
+    qs: clean(payload.qs)
+  };
+}
+
+// The stuff that gets sent every time.
+function baseQueryString(agentRef, qs, endpoint, harvesterObfuscator) {
+  const cleanedURL = (0, _cleanUrl.cleanURL)('' + _runtime.globalScope.location);
+  const ref = harvesterObfuscator?.obfuscateString(cleanedURL) ?? cleanedURL;
+  const session = agentRef.runtime.session;
+  const hr = !!session?.state.sessionReplaySentFirstChunk && session?.state.sessionReplayMode === 1 && endpoint !== _features.JSERRORS;
+  const ht = !!session?.state.traceHarvestStarted && session?.state.sessionTraceMode === 1 && ![_features.LOGS, _features.BLOBS].includes(endpoint);
+  const qps = ['a=' + agentRef.info.applicationID, (0, _encode.param)('sa', agentRef.info.sa ? '' + agentRef.info.sa : ''), (0, _encode.param)('v', _env.VERSION), transactionNameParam(), (0, _encode.param)('ct', agentRef.runtime.customTransaction), '&rst=' + (0, _now.now)(), '&ck=0',
+  // ck param DEPRECATED - still expected by backend
+  '&s=' + (session?.state.value || '0'),
+  // the 0 id encaps all untrackable and default traffic
+  (0, _encode.param)('ref', ref), (0, _encode.param)('ptid', agentRef.runtime.ptid ? '' + agentRef.runtime.ptid : '')];
+  if (hr) qps.push((0, _encode.param)('hr', '1', qs));
+  if (ht) qps.push((0, _encode.param)('ht', '1', qs));
+  return qps.join('');
+
+  // Constructs the transaction name param for the beacon URL.
+  // Prefers the obfuscated transaction name over the plain text.
+  // Falls back to making up a name.
+  function transactionNameParam() {
+    if (agentRef.info.transactionName) return (0, _encode.param)('to', agentRef.info.transactionName);
+    return (0, _encode.param)('t', agentRef.info.tNamePlain || 'Unnamed Transaction');
+  }
+}

package/dist/cjs/common/harvest/types.js

@@ -5,7 +5,7 @@ Object.defineProperty(exports, "__esModule", {
 });
 exports.unused = void 0;
 /**
- * Copyright 2020-2025 New Relic, Inc. All rights reserved.
+ * Copyright 2020-2026 New Relic, Inc. All rights reserved.
  * SPDX-License-Identifier: Apache-2.0
  */
 
@@ -29,11 +29,15 @@ exports.unused = void 0;
  * @typedef {object} NetworkSendSpec
  * @property {HarvestEndpointIdentifier} endpoint The endpoint to use (jserrors, events, resources etc.)
  * @property {HarvestPayload} payload Object representing payload.
- * @property {object} localOpts Additional options for sending data
- * @property {boolean} localOpts.isFinalHarvest Specify whether the call is a final harvest during page unload.
- * @property {boolean} localOpts.sendEmptyBody Specify whether the call should be made even if the body is empty. Useful for rum calls.
- * @property {boolean} localOpts.forceNoRetry Don't save the buffered data in the case of a need to retry the transmission.
+ * @property {object} [localOpts] Additional options for sending data
+ * @property {boolean} [localOpts.isFinalHarvest] Specify whether the call is a final harvest during page unload.
+ * @property {boolean} [localOpts.sendEmptyBody] Specify whether the call should be made even if the body is empty. Useful for rum calls.
+ * @property {boolean} [localOpts.forceNoRetry] Don't save the buffered data in the case of a need to retry the transmission.
  * @property {import('../util/submit-data.js').NetworkMethods} submitMethod The network method to use {@link ../util/submit-data.js}
+ * @property {function(object): void} [cbFinished] Callback invoked with the result once the network request completes. Receives an object with sent, status, retry, fullUrl, responseText, and either xhr or fetchResponse.
+ * @property {boolean} [raw] If true, skips standard versioned URL path construction and uses a bare endpoint URL.
+ * @property {string} [featureName] The feature name associated with this harvest, used for metadata tracking and the global harvest event.
+ * @property {number} [endpointVersion] The endpoint version included in the URL path. Defaults to 1.
  */
 
 const unused = exports.unused = {};