@newtalaria/browser 0.1.16 → 0.1.18

package/dist/replay/hooks.d.ts

@@ -1,4 +1,21 @@
 import type { FailedRequestStatusCode } from '../types.js';
+/**
+ * Fetch / XHR instrumentation for replay breadcrumbs and optional error promotion.
+ *
+ * Policy (see package README): always emit `talaria-network` breadcrumbs; promote
+ * to Talaria events only for same-origin or `networkErrorOrigins` (never invent
+ * a `cors` failure kind from status 0 / Failed to fetch).
+ */
+/** How the request was issued. */
+export type NetworkTransport = 'fetch' | 'xhr';
+/**
+ * Failure classification for network telemetry.
+ * `cors` is intentionally absent — browsers do not expose CORS reliably
+ * (status 0 / Failed to fetch cover many causes).
+ */
+export type NetworkFailureKind = 'http' | 'network' | 'abort' | 'timeout';
+/** Same-origin vs cross-origin relative to the page. */
+export type NetworkParty = 'first_party' | 'third_party';
 export type Teardown = () => void;
 /**
  * Fire when the document becomes visible again (tab focus) or is restored
@@ -10,19 +27,23 @@ export interface NetworkMeta {
     method: string;
     /** Sanitized request URL (origin + pathname; query stripped by default). */
     url: string;
+    /** Request origin (scheme + host + port). */
+    origin?: string;
     hostname?: string;
     pathname?: string;
-    /** Only when `includeNetworkUrlQuery` is enabled. */
+    /** Only when query capture is enabled. */
     search?: string;
     status?: number;
     durationMs?: number;
     ok?: boolean;
+    transport?: NetworkTransport;
     /** Present on transport failures (fetch reject / XHR status 0). */
     errorName?: string;
     errorMessage?: string;
     aborted?: boolean;
-    /** `http` = completed response with status; `network` = no usable status. */
-    failureKind?: 'http' | 'network';
+    failureKind?: NetworkFailureKind;
+    /** Same-origin (`first_party`) vs cross-origin (`third_party`). */
+    party?: NetworkParty;
 }
 export interface NetworkHookOptions {
     /** Still emit rrweb breadcrumbs for all requests. */
@@ -40,13 +61,24 @@ export interface NetworkHookOptions {
      */
     onNetworkError?: (meta: NetworkMeta) => void;
     captureFailedRequests?: boolean;
-    /** Promote CORS/offline/DNS fetch failures (default `true`). */
+    /** Promote transport failures for first-party / allowlisted origins (default `true`). */
     captureNetworkErrors?: boolean;
+    /**
+     * Extra origins eligible for error promotion (exact origin strings).
+     * Same-origin is always eligible. `['*']` promotes all origins.
+     */
+    networkErrorOrigins?: string[];
+    /**
+     * Override page origin (tests / non-browser). Defaults to `location.origin`.
+     */
+    pageOrigin?: string;
     /**
      * Keep URL query strings in network telemetry (after sensitive-key redaction).
-     * Default `false` — GA/ads URLs often carry cid/sid/dl identifiers.
+     * Default `false`. Prefer `captureRequestQueryParameters` (same meaning).
      */
     includeNetworkUrlQuery?: boolean;
+    /** Alias of `includeNetworkUrlQuery` — privacy-preserving default is `false`. */
+    captureRequestQueryParameters?: boolean;
     failedRequestStatusCodes?: FailedRequestStatusCode[];
     failedRequestIgnoreUrls?: string[];
     /** SDK base URL — requests under this host + /events|/replays are never promoted. */
@@ -58,26 +90,47 @@ export declare function statusMatches(status: number, codes: FailedRequestStatus
 /** Shared ignore list for HTTP + network failure promotion. */
 export declare function buildFailedRequestIgnoreUrls(failedRequestIgnoreUrls: string[], talariaBaseUrl?: string): string[];
 export declare function urlMatchesIgnoreList(url: string, ignoreUrls: string[]): boolean;
+/** Normalize an allowlist entry to an origin string (`https://host:port`). */
+export declare function normalizeNetworkOrigin(raw: string): string;
+export declare function resolvePageOrigin(pageOrigin?: string): string;
+/** Resolve the request origin from a (possibly relative) URL. */
+export declare function resolveRequestOrigin(rawUrl: string, pageOrigin?: string): string;
+/**
+ * Whether a request origin may be promoted to an error event.
+ * Same-origin and `networkErrorOrigins` entries (or `*`) are allowed.
+ */
+export declare function isAllowedNetworkOrigin(requestOrigin: string, opts: {
+    networkErrorOrigins: string[];
+    pageOrigin?: string;
+}): boolean;
+export declare function classifyNetworkParty(requestOrigin: string, pageOrigin?: string): NetworkParty;
+/** HTTP success = 2xx (aligned for fetch and XHR). */
+export declare function isHttpOkStatus(status: number): boolean;
 export declare function shouldPromoteFailedRequest(meta: NetworkMeta, opts: {
     captureFailedRequests: boolean;
     failedRequestStatusCodes: FailedRequestStatusCode[];
     failedRequestIgnoreUrls: string[];
+    networkErrorOrigins?: string[];
+    pageOrigin?: string;
     talariaBaseUrl?: string;
 }): meta is NetworkMeta & {
     status: number;
 };
 /**
- * Promote fetch rejects / XHR status-0 failures (CORS, offline, DNS).
- * AbortError is never promoted.
+ * Promote fetch rejects / XHR status-0 failures (offline, DNS, blocked, etc.).
+ * Abort is never promoted; timeout may be promoted as `failureKind: timeout`.
+ * Third-party origins are skipped unless allowlisted (or `*`).
  */
 export declare function shouldPromoteNetworkError(meta: NetworkMeta, opts: {
     captureNetworkErrors: boolean;
     failedRequestIgnoreUrls: string[];
+    networkErrorOrigins?: string[];
+    pageOrigin?: string;
     talariaBaseUrl?: string;
 }): boolean;
 export declare function enrichNetworkMeta(meta: NetworkMeta): NetworkMeta;
 /** Apply privacy sanitization to a raw request URL for network meta. */
-export declare function networkUrlParts(rawUrl: string, includeQuery: boolean): Pick<NetworkMeta, 'url' | 'hostname' | 'pathname' | 'search'>;
+export declare function networkUrlParts(rawUrl: string, includeQuery: boolean, pageOrigin?: string): Pick<NetworkMeta, 'url' | 'origin' | 'hostname' | 'pathname' | 'search'>;
 /** Capture fetch / XHR metadata (no bodies, no auth headers); optionally promote failures. */
 export declare function installNetworkHook(options?: NetworkHookOptions): Teardown;
 //# sourceMappingURL=hooks.d.ts.map

package/dist/replay/hooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../src/replay/hooks.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAG3D,MAAM,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC;AAElC;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,QAAQ,CA4B1E;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,kBAAkB;IACjC,qDAAqD;IACrD,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;IACxC;;;OAGG;IACH,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACnE;;;OAGG;IACH,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;IAC7C,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,gEAAgE;IAChE,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,wBAAwB,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACrD,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,qFAAqF;IACrF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAwCD,2EAA2E;AAC3E,wBAAgB,kBAAkB,IAAI,QAAQ,CA8B7C;AAaD,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,uBAAuB,EAAE,GAC/B,OAAO,CAUT;AAED,+DAA+D;AAC/D,wBAAgB,4BAA4B,CAC1C,uBAAuB,EAAE,MAAM,EAAE,EACjC,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,EAAE,CASV;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAM/E;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE;IACJ,qBAAqB,EAAE,OAAO,CAAC;IAC/B,wBAAwB,EAAE,uBAAuB,EAAE,CAAC;IACpD,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GACA,IAAI,IAAI,WAAW,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAc1C;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE;IACJ,oBAAoB,EAAE,OAAO,CAAC;IAC9B,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GACA,OAAO,CAYT;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,GAAG,WAAW,CAqBhE;AAED,wEAAwE;AACxE,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,OAAO,GACpB,IAAI,CAAC,WAAW,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,CAAC,CAQ/D;AAED,8FAA8F;AAC9F,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,kBAAuB,GAAG,QAAQ,CAiI7E"}
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../src/replay/hooks.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAM3D;;;;;;GAMG;AAEH,kCAAkC;AAClC,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,KAAK,CAAC;AAE/C;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AAE1E,wDAAwD;AACxD,MAAM,MAAM,YAAY,GAAG,aAAa,GAAG,aAAa,CAAC;AAEzD,MAAM,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC;AAElC;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,QAAQ,CA4B1E;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC;IACZ,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,mEAAmE;IACnE,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,qDAAqD;IACrD,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;IACxC;;;OAGG;IACH,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACnE;;;OAGG;IACH,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;IAC7C,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,yFAAyF;IACzF,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,iFAAiF;IACjF,6BAA6B,CAAC,EAAE,OAAO,CAAC;IACxC,wBAAwB,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACrD,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,qFAAqF;IACrF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAwCD,2EAA2E;AAC3E,wBAAgB,kBAAkB,IAAI,QAAQ,CA8B7C;AAaD,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,uBAAuB,EAAE,GAC/B,OAAO,CAUT;AAED,+DAA+D;AAC/D,wBAAgB,4BAA4B,CAC1C,uBAAuB,EAAE,MAAM,EAAE,EACjC,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,EAAE,CASV;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAM/E;AAED,8EAA8E;AAC9E,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAY1D;AAED,wBAAgB,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAY7D;AAED,iEAAiE;AACjE,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,UAAU,CAAC,EAAE,MAAM,GAClB,MAAM,CASR;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE;IAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3D,OAAO,CAOT;AAED,wBAAgB,oBAAoB,CAClC,aAAa,EAAE,MAAM,EACrB,UAAU,CAAC,EAAE,MAAM,GAClB,YAAY,CAId;AAED,sDAAsD;AACtD,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE;IACJ,qBAAqB,EAAE,OAAO,CAAC;IAC/B,wBAAwB,EAAE,uBAAuB,EAAE,CAAC;IACpD,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GACA,IAAI,IAAI,WAAW,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAyB1C;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE;IACJ,oBAAoB,EAAE,OAAO,CAAC;IAC9B,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GACA,OAAO,CAyBT;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,GAAG,WAAW,CAwChE;AAED,wEAAwE;AACxE,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,OAAO,EACrB,UAAU,CAAC,EAAE,MAAM,GAClB,IAAI,CAAC,WAAW,EAAE,KAAK,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,CAAC,CAa1E;AAED,8FAA8F;AAC9F,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,kBAAuB,GAAG,QAAQ,CAwL7E"}

package/dist/replay/privacy.d.ts

@@ -1,4 +1,4 @@
-/** Redact sensitive query params from a URL (keeps other query keys). */
+/** Redact sensitive / tracking query params from a URL (keeps other query keys). */
 export declare function redactUrl(raw: string): string;
 export interface SanitizedNetworkUrl {
     /** Safe URL for telemetry: origin + pathname (no query/hash by default). */

package/dist/replay/privacy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"privacy.d.ts","sourceRoot":"","sources":["../../src/replay/privacy.ts"],"names":[],"mappings":"AAEA,yEAAyE;AACzE,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAY7C;AAED,MAAM,WAAW,mBAAmB;IAClC,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACnD,mBAAmB,CAsCrB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAU3D"}
+{"version":3,"file":"privacy.d.ts","sourceRoot":"","sources":["../../src/replay/privacy.ts"],"names":[],"mappings":"AAUA,oFAAoF;AACpF,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAY7C;AAED,MAAM,WAAW,mBAAmB;IAClC,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACnD,mBAAmB,CAsCrB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAU3D"}

package/dist/sdk_meta.d.ts

@@ -1,4 +1,4 @@
 /** Bumped with package.json version for event metadata. */
 export declare const SDK_NAME = "@newtalaria/browser";
-export declare const SDK_VERSION = "0.1.16";
+export declare const SDK_VERSION = "0.1.18";
 //# sourceMappingURL=sdk_meta.d.ts.map