@newtalaria/browser 0.1.17 → 0.1.18

package/dist/replay/hooks.d.ts

@@ -1,4 +1,11 @@
 import type { FailedRequestStatusCode } from '../types.js';
+/**
+ * Fetch / XHR instrumentation for replay breadcrumbs and optional error promotion.
+ *
+ * Policy (see package README): always emit `talaria-network` breadcrumbs; promote
+ * to Talaria events only for same-origin or `networkErrorOrigins` (never invent
+ * a `cors` failure kind from status 0 / Failed to fetch).
+ */
 /** How the request was issued. */
 export type NetworkTransport = 'fetch' | 'xhr';
 /**
@@ -7,6 +14,8 @@ export type NetworkTransport = 'fetch' | 'xhr';
  * (status 0 / Failed to fetch cover many causes).
  */
 export type NetworkFailureKind = 'http' | 'network' | 'abort' | 'timeout';
+/** Same-origin vs cross-origin relative to the page. */
+export type NetworkParty = 'first_party' | 'third_party';
 export type Teardown = () => void;
 /**
  * Fire when the document becomes visible again (tab focus) or is restored
@@ -18,6 +27,8 @@ export interface NetworkMeta {
     method: string;
     /** Sanitized request URL (origin + pathname; query stripped by default). */
     url: string;
+    /** Request origin (scheme + host + port). */
+    origin?: string;
     hostname?: string;
     pathname?: string;
     /** Only when query capture is enabled. */
@@ -31,6 +42,8 @@ export interface NetworkMeta {
     errorMessage?: string;
     aborted?: boolean;
     failureKind?: NetworkFailureKind;
+    /** Same-origin (`first_party`) vs cross-origin (`third_party`). */
+    party?: NetworkParty;
 }
 export interface NetworkHookOptions {
     /** Still emit rrweb breadcrumbs for all requests. */
@@ -48,8 +61,17 @@ export interface NetworkHookOptions {
      */
     onNetworkError?: (meta: NetworkMeta) => void;
     captureFailedRequests?: boolean;
-    /** Promote CORS/offline/DNS fetch failures (default `true`). */
+    /** Promote transport failures for first-party / allowlisted origins (default `true`). */
     captureNetworkErrors?: boolean;
+    /**
+     * Extra origins eligible for error promotion (exact origin strings).
+     * Same-origin is always eligible. `['*']` promotes all origins.
+     */
+    networkErrorOrigins?: string[];
+    /**
+     * Override page origin (tests / non-browser). Defaults to `location.origin`.
+     */
+    pageOrigin?: string;
     /**
      * Keep URL query strings in network telemetry (after sensitive-key redaction).
      * Default `false`. Prefer `captureRequestQueryParameters` (same meaning).
@@ -68,10 +90,28 @@ export declare function statusMatches(status: number, codes: FailedRequestStatus
 /** Shared ignore list for HTTP + network failure promotion. */
 export declare function buildFailedRequestIgnoreUrls(failedRequestIgnoreUrls: string[], talariaBaseUrl?: string): string[];
 export declare function urlMatchesIgnoreList(url: string, ignoreUrls: string[]): boolean;
+/** Normalize an allowlist entry to an origin string (`https://host:port`). */
+export declare function normalizeNetworkOrigin(raw: string): string;
+export declare function resolvePageOrigin(pageOrigin?: string): string;
+/** Resolve the request origin from a (possibly relative) URL. */
+export declare function resolveRequestOrigin(rawUrl: string, pageOrigin?: string): string;
+/**
+ * Whether a request origin may be promoted to an error event.
+ * Same-origin and `networkErrorOrigins` entries (or `*`) are allowed.
+ */
+export declare function isAllowedNetworkOrigin(requestOrigin: string, opts: {
+    networkErrorOrigins: string[];
+    pageOrigin?: string;
+}): boolean;
+export declare function classifyNetworkParty(requestOrigin: string, pageOrigin?: string): NetworkParty;
+/** HTTP success = 2xx (aligned for fetch and XHR). */
+export declare function isHttpOkStatus(status: number): boolean;
 export declare function shouldPromoteFailedRequest(meta: NetworkMeta, opts: {
     captureFailedRequests: boolean;
     failedRequestStatusCodes: FailedRequestStatusCode[];
     failedRequestIgnoreUrls: string[];
+    networkErrorOrigins?: string[];
+    pageOrigin?: string;
     talariaBaseUrl?: string;
 }): meta is NetworkMeta & {
     status: number;
@@ -79,15 +119,18 @@ export declare function shouldPromoteFailedRequest(meta: NetworkMeta, opts: {
 /**
  * Promote fetch rejects / XHR status-0 failures (offline, DNS, blocked, etc.).
  * Abort is never promoted; timeout may be promoted as `failureKind: timeout`.
+ * Third-party origins are skipped unless allowlisted (or `*`).
  */
 export declare function shouldPromoteNetworkError(meta: NetworkMeta, opts: {
     captureNetworkErrors: boolean;
     failedRequestIgnoreUrls: string[];
+    networkErrorOrigins?: string[];
+    pageOrigin?: string;
     talariaBaseUrl?: string;
 }): boolean;
 export declare function enrichNetworkMeta(meta: NetworkMeta): NetworkMeta;
 /** Apply privacy sanitization to a raw request URL for network meta. */
-export declare function networkUrlParts(rawUrl: string, includeQuery: boolean): Pick<NetworkMeta, 'url' | 'hostname' | 'pathname' | 'search'>;
+export declare function networkUrlParts(rawUrl: string, includeQuery: boolean, pageOrigin?: string): Pick<NetworkMeta, 'url' | 'origin' | 'hostname' | 'pathname' | 'search'>;
 /** Capture fetch / XHR metadata (no bodies, no auth headers); optionally promote failures. */
 export declare function installNetworkHook(options?: NetworkHookOptions): Teardown;
 //# sourceMappingURL=hooks.d.ts.map

package/dist/replay/hooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../src/replay/hooks.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAM3D,kCAAkC;AAClC,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,KAAK,CAAC;AAE/C;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AAE1E,MAAM,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC;AAElC;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,QAAQ,CA4B1E;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,kBAAkB,CAAC;CAClC;AAED,MAAM,WAAW,kBAAkB;IACjC,qDAAqD;IACrD,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;IACxC;;;OAGG;IACH,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACnE;;;OAGG;IACH,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;IAC7C,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,gEAAgE;IAChE,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,iFAAiF;IACjF,6BAA6B,CAAC,EAAE,OAAO,CAAC;IACxC,wBAAwB,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACrD,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,qFAAqF;IACrF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAwCD,2EAA2E;AAC3E,wBAAgB,kBAAkB,IAAI,QAAQ,CA8B7C;AAaD,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,uBAAuB,EAAE,GAC/B,OAAO,CAUT;AAED,+DAA+D;AAC/D,wBAAgB,4BAA4B,CAC1C,uBAAuB,EAAE,MAAM,EAAE,EACjC,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,EAAE,CASV;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAM/E;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE;IACJ,qBAAqB,EAAE,OAAO,CAAC;IAC/B,wBAAwB,EAAE,uBAAuB,EAAE,CAAC;IACpD,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GACA,IAAI,IAAI,WAAW,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAc1C;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE;IACJ,oBAAoB,EAAE,OAAO,CAAC;IAC9B,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GACA,OAAO,CAcT;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,GAAG,WAAW,CA+BhE;AAED,wEAAwE;AACxE,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,OAAO,GACpB,IAAI,CAAC,WAAW,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,CAAC,CAQ/D;AAED,8FAA8F;AAC9F,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,kBAAuB,GAAG,QAAQ,CA8K7E"}
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../src/replay/hooks.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAM3D;;;;;;GAMG;AAEH,kCAAkC;AAClC,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,KAAK,CAAC;AAE/C;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AAE1E,wDAAwD;AACxD,MAAM,MAAM,YAAY,GAAG,aAAa,GAAG,aAAa,CAAC;AAEzD,MAAM,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC;AAElC;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,QAAQ,CA4B1E;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC;IACZ,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,mEAAmE;IACnE,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,qDAAqD;IACrD,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;IACxC;;;OAGG;IACH,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACnE;;;OAGG;IACH,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;IAC7C,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,yFAAyF;IACzF,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,iFAAiF;IACjF,6BAA6B,CAAC,EAAE,OAAO,CAAC;IACxC,wBAAwB,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACrD,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,qFAAqF;IACrF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAwCD,2EAA2E;AAC3E,wBAAgB,kBAAkB,IAAI,QAAQ,CA8B7C;AAaD,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,uBAAuB,EAAE,GAC/B,OAAO,CAUT;AAED,+DAA+D;AAC/D,wBAAgB,4BAA4B,CAC1C,uBAAuB,EAAE,MAAM,EAAE,EACjC,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,EAAE,CASV;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAM/E;AAED,8EAA8E;AAC9E,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAY1D;AAED,wBAAgB,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAY7D;AAED,iEAAiE;AACjE,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,UAAU,CAAC,EAAE,MAAM,GAClB,MAAM,CASR;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE;IAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3D,OAAO,CAOT;AAED,wBAAgB,oBAAoB,CAClC,aAAa,EAAE,MAAM,EACrB,UAAU,CAAC,EAAE,MAAM,GAClB,YAAY,CAId;AAED,sDAAsD;AACtD,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE;IACJ,qBAAqB,EAAE,OAAO,CAAC;IAC/B,wBAAwB,EAAE,uBAAuB,EAAE,CAAC;IACpD,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GACA,IAAI,IAAI,WAAW,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAyB1C;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE;IACJ,oBAAoB,EAAE,OAAO,CAAC;IAC9B,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GACA,OAAO,CAyBT;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,GAAG,WAAW,CAwChE;AAED,wEAAwE;AACxE,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,OAAO,EACrB,UAAU,CAAC,EAAE,MAAM,GAClB,IAAI,CAAC,WAAW,EAAE,KAAK,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,CAAC,CAa1E;AAED,8FAA8F;AAC9F,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,kBAAuB,GAAG,QAAQ,CAwL7E"}

package/dist/replay/privacy.d.ts

@@ -1,4 +1,4 @@
-/** Redact sensitive query params from a URL (keeps other query keys). */
+/** Redact sensitive / tracking query params from a URL (keeps other query keys). */
 export declare function redactUrl(raw: string): string;
 export interface SanitizedNetworkUrl {
     /** Safe URL for telemetry: origin + pathname (no query/hash by default). */

package/dist/replay/privacy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"privacy.d.ts","sourceRoot":"","sources":["../../src/replay/privacy.ts"],"names":[],"mappings":"AAEA,yEAAyE;AACzE,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAY7C;AAED,MAAM,WAAW,mBAAmB;IAClC,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACnD,mBAAmB,CAsCrB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAU3D"}
+{"version":3,"file":"privacy.d.ts","sourceRoot":"","sources":["../../src/replay/privacy.ts"],"names":[],"mappings":"AAUA,oFAAoF;AACpF,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAY7C;AAED,MAAM,WAAW,mBAAmB;IAClC,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACnD,mBAAmB,CAsCrB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAU3D"}

package/dist/sdk_meta.d.ts

@@ -1,4 +1,4 @@
 /** Bumped with package.json version for event metadata. */
 export declare const SDK_NAME = "@newtalaria/browser";
-export declare const SDK_VERSION = "0.1.17";
+export declare const SDK_VERSION = "0.1.18";
 //# sourceMappingURL=sdk_meta.d.ts.map

package/dist/talaria.browser.iife.js

@@ -274,7 +274,7 @@
 
   // src/sdk_meta.ts
   var SDK_NAME = "@newtalaria/browser";
-  var SDK_VERSION = "0.1.17";
+  var SDK_VERSION = "0.1.18";
 
   // src/transport/serverpod.ts
   var ServerpodTransport = class {
@@ -13484,18 +13484,22 @@
   var { takeFullSnapshot } = record;
 
   // src/replay/privacy.ts
-  var SENSITIVE_QUERY = /(?:^|[?&])(token|secret|password|auth|api[_-]?key|access[_-]?token)=([^&#]*)/gi;
+  var SENSITIVE_QUERY_KEY = /^(?:token|secret|password|auth|api[_-]?key|access[_-]?token|gclid|fbclid|gcl_au|msclkid|_ga(?:_.*)?|cid|sid)$/i;
+  var SENSITIVE_QUERY_LEGACY = /(?:^|[?&])(token|secret|password|auth|api[_-]?key|access[_-]?token|gclid|fbclid|gcl_au|msclkid|_ga(?:_[^=&#]*)?|cid|sid)=([^&#]*)/gi;
+  function isSensitiveQueryKey(key) {
+    return SENSITIVE_QUERY_KEY.test(key);
+  }
   function redactUrl(raw) {
     try {
       const url = new URL(raw, typeof location !== "undefined" ? location.href : void 0);
       for (const key of [...url.searchParams.keys()]) {
-        if (/token|secret|password|auth|api[_-]?key|access[_-]?token/i.test(key)) {
+        if (isSensitiveQueryKey(key)) {
           url.searchParams.set(key, "[Filtered]");
         }
       }
       return url.toString();
     } catch {
-      return raw.replace(SENSITIVE_QUERY, (_m, name) => `${name}=[Filtered]`);
+      return raw.replace(SENSITIVE_QUERY_LEGACY, (_m, name) => `${name}=[Filtered]`);
     }
   }
   function sanitizeNetworkUrl(raw, opts) {
@@ -13592,6 +13596,9 @@
   function isAbortError(error) {
     return error instanceof Error && error.name === "AbortError";
   }
+  function isTimeoutError(error) {
+    return error instanceof Error && error.name === "TimeoutError";
+  }
   function isLikelyNetworkFetchError(error) {
     if (!(error instanceof Error)) return false;
     if (error.name === "AbortError" || error.name === "TimeoutError") return false;
@@ -13599,6 +13606,9 @@
     const msg = error.message.toLowerCase().trim();
     return msg === "failed to fetch" || msg === "load failed" || msg === "networkerror when attempting to fetch resource." || msg.startsWith("networkerror") || msg.includes("failed to fetch");
   }
+  function isCorrelatableTransportError(error) {
+    return isLikelyNetworkFetchError(error) || isTimeoutError(error);
+  }
   function describeUnknownError(error) {
     if (error instanceof Error) {
       return {
@@ -13746,6 +13756,56 @@
     }
     return false;
   }
+  function normalizeNetworkOrigin(raw) {
+    const trimmed = (raw || "").trim();
+    if (!trimmed || trimmed === "*") return trimmed;
+    try {
+      return new URL(trimmed).origin;
+    } catch {
+      try {
+        return new URL(`https://${trimmed}`).origin;
+      } catch {
+        return trimmed.replace(/\/+$/, "");
+      }
+    }
+  }
+  function resolvePageOrigin(pageOrigin) {
+    if (pageOrigin) {
+      try {
+        return new URL(pageOrigin).origin;
+      } catch {
+        return pageOrigin.replace(/\/+$/, "");
+      }
+    }
+    if (typeof location !== "undefined" && location.origin) {
+      return location.origin;
+    }
+    return "";
+  }
+  function resolveRequestOrigin(rawUrl, pageOrigin) {
+    const base = pageOrigin || (typeof location !== "undefined" ? location.href : void 0);
+    try {
+      return new URL(rawUrl, base).origin;
+    } catch {
+      return "";
+    }
+  }
+  function isAllowedNetworkOrigin(requestOrigin, opts) {
+    if (!requestOrigin) return false;
+    const allow = opts.networkErrorOrigins.map(normalizeNetworkOrigin);
+    if (allow.includes("*")) return true;
+    const page = resolvePageOrigin(opts.pageOrigin);
+    if (page && requestOrigin === page) return true;
+    return allow.includes(requestOrigin);
+  }
+  function classifyNetworkParty(requestOrigin, pageOrigin) {
+    const page = resolvePageOrigin(pageOrigin);
+    if (page && requestOrigin && requestOrigin === page) return "first_party";
+    return "third_party";
+  }
+  function isHttpOkStatus(status) {
+    return status >= 200 && status < 300;
+  }
   function shouldPromoteFailedRequest(meta, opts) {
     if (!opts.captureFailedRequests) return false;
     if (typeof meta.status !== "number" || Number.isNaN(meta.status)) return false;
@@ -13756,6 +13816,13 @@
       opts.talariaBaseUrl
     );
     if (urlMatchesIgnoreList(meta.url || "", ignore)) return false;
+    const requestOrigin = meta.origin || resolveRequestOrigin(meta.url || "", opts.pageOrigin);
+    if (!isAllowedNetworkOrigin(requestOrigin, {
+      networkErrorOrigins: opts.networkErrorOrigins ?? [],
+      pageOrigin: opts.pageOrigin
+    })) {
+      return false;
+    }
     return true;
   }
   function shouldPromoteNetworkError(meta, opts) {
@@ -13769,6 +13836,13 @@
       opts.talariaBaseUrl
     );
     if (urlMatchesIgnoreList(meta.url || "", ignore)) return false;
+    const requestOrigin = meta.origin || resolveRequestOrigin(meta.url || "", opts.pageOrigin);
+    if (!isAllowedNetworkOrigin(requestOrigin, {
+      networkErrorOrigins: opts.networkErrorOrigins ?? [],
+      pageOrigin: opts.pageOrigin
+    })) {
+      return false;
+    }
     return true;
   }
   function enrichNetworkMeta(meta) {
@@ -13779,7 +13853,8 @@
         failureKind: meta.ok === false ? "http" : meta.failureKind
       };
     }
-    if (meta.ok === false || meta.errorName || meta.errorMessage || meta.aborted) {
+    const hasTransportSignal = !!meta.errorName || !!meta.errorMessage || !!meta.aborted || meta.failureKind === "abort" || meta.failureKind === "timeout" || meta.failureKind === "network";
+    if (hasTransportSignal) {
       const failureKind = meta.failureKind === "abort" || meta.failureKind === "timeout" || meta.failureKind === "network" ? meta.failureKind : classifyTransportFailure({
         aborted: meta.aborted,
         errorName: meta.errorName
@@ -13792,10 +13867,13 @@
     }
     return meta;
   }
-  function networkUrlParts(rawUrl, includeQuery) {
-    const parts = sanitizeNetworkUrl(rawUrl, { includeQuery });
+  function networkUrlParts(rawUrl, includeQuery, pageOrigin) {
+    const baseHref = pageOrigin || (typeof location !== "undefined" ? location.href : void 0);
+    const parts = sanitizeNetworkUrl(rawUrl, { includeQuery, baseHref });
+    const origin = resolveRequestOrigin(rawUrl, pageOrigin);
     return {
       url: parts.url,
+      origin: origin || void 0,
       hostname: parts.hostname,
       pathname: parts.pathname,
       ...parts.search ? { search: parts.search } : {}
@@ -13811,14 +13889,22 @@
       captureNetworkErrors: options.captureNetworkErrors ?? true,
       failedRequestStatusCodes: options.failedRequestStatusCodes ?? [[500, 599]],
       failedRequestIgnoreUrls: options.failedRequestIgnoreUrls ?? [],
+      networkErrorOrigins: options.networkErrorOrigins ?? [],
+      pageOrigin: options.pageOrigin,
       talariaBaseUrl: options.talariaBaseUrl
     };
     const includeQuery = options.captureRequestQueryParameters ?? options.includeNetworkUrlQuery ?? false;
     const handleMeta = (meta) => {
       const { rawUrl, ...rest } = meta;
+      const parts = networkUrlParts(rawUrl, includeQuery, matchOpts.pageOrigin);
+      const party = classifyNetworkParty(
+        parts.origin || "",
+        matchOpts.pageOrigin
+      );
       const enriched = enrichNetworkMeta({
         ...rest,
-        ...networkUrlParts(rawUrl, includeQuery)
+        ...parts,
+        party
       });
       try {
         emitNetwork(enriched);
@@ -13838,6 +13924,7 @@
         const rawUrl = typeof input2 === "string" ? input2 : input2 instanceof URL ? input2.toString() : input2.url;
         try {
           const response = await originalFetch(input2, init);
+          const opaque = response.type === "opaque" || response.type === "opaqueredirect";
           handleMeta({
             method,
             rawUrl,
@@ -13845,7 +13932,8 @@
             transport: "fetch",
             status: response.status,
             durationMs: Date.now() - started,
-            ok: response.ok
+            // Opaque responses resolve successfully with status 0 — not a failure.
+            ok: opaque ? true : response.ok
           });
           return response;
         } catch (error) {
@@ -13907,7 +13995,7 @@
             transport: "xhr",
             status,
             durationMs: Date.now() - (this.__talariaStarted ?? Date.now()),
-            ok: status >= 200 && status < 400,
+            ok: isHttpOkStatus(status),
             ...transportFail ? {
               failureKind,
               errorName,
@@ -13916,7 +14004,7 @@
             } : {}
           });
         };
-        this.addEventListener("loadend", onDone);
+        this.addEventListener("loadend", onDone, { once: true });
         return originalSend.call(this, body);
       };
     }
@@ -13928,10 +14016,16 @@
   }
 
   // src/client.ts
+  function networkExceptionClass(failure) {
+    if (failure.failureKind === "http") return "HttpError";
+    if (failure.failureKind === "timeout") return "TimeoutError";
+    return "NetworkError";
+  }
   function networkFailureTags(failure) {
     return {
       "http.method": failure.method || "GET",
       "network.failure_kind": failure.failureKind ?? "network",
+      ...failure.party ? { "network.party": failure.party } : {},
       ...failure.transport ? { "network.transport": failure.transport } : {},
       ...failure.errorName ? { "network.error_name": failure.errorName } : {}
     };
@@ -13941,6 +14035,7 @@
       method: failure.method || "GET",
       url: failure.url || "(unknown url)"
     };
+    if (failure.origin) http.origin = failure.origin;
     if (failure.hostname) http.hostname = failure.hostname;
     if (failure.pathname) http.pathname = failure.pathname;
     if (failure.search) http.search = failure.search;
@@ -13953,9 +14048,19 @@
     };
     if (failure.errorName) fail.name = failure.errorName;
     if (failure.errorMessage) fail.message = failure.errorMessage;
+    const statusCode = typeof failure.status === "number" && failure.status > 0 ? failure.status : null;
     return {
       http,
       failure: fail,
+      network: {
+        party: failure.party ?? "third_party",
+        durationMs: failure.durationMs,
+        aborted: failure.aborted ?? false,
+        ok: failure.ok ?? false
+      },
+      // Top-level for server fingerprint compatibility.
+      status_code: statusCode,
+      exception_class: networkExceptionClass(failure),
       durationMs: failure.durationMs,
       aborted: failure.aborted ?? false,
       ok: failure.ok ?? false
@@ -14001,6 +14106,7 @@
       disableDefaultIntegrations: options.disableDefaultIntegrations ?? false,
       captureFailedRequests: options.captureFailedRequests ?? true,
       captureNetworkErrors: options.captureNetworkErrors ?? true,
+      networkErrorOrigins: options.networkErrorOrigins ?? [],
       includeNetworkUrlQuery: options.captureRequestQueryParameters ?? options.includeNetworkUrlQuery ?? false,
       failedRequestStatusCodes: options.failedRequestStatusCodes ?? [[500, 599]],
       failedRequestIgnoreUrls: options.failedRequestIgnoreUrls ?? []
@@ -14130,6 +14236,8 @@
         installNetworkHook({
           captureFailedRequests: this.options.captureFailedRequests,
           captureNetworkErrors: this.options.captureNetworkErrors,
+          networkErrorOrigins: this.options.networkErrorOrigins,
+          pageOrigin: typeof location !== "undefined" ? location.origin : void 0,
           includeNetworkUrlQuery: this.options.includeNetworkUrlQuery,
           failedRequestStatusCodes: this.options.failedRequestStatusCodes,
           failedRequestIgnoreUrls: this.options.failedRequestIgnoreUrls,
@@ -14223,6 +14331,7 @@
       }
       const correlated = this.consumeCorrelatedNetworkFailure(err);
       if (correlated?.promoted) return;
+      if (correlated && correlated.party === "third_party") return;
       const mergedContext = correlated ? mergeNetworkFailureContext(context, correlated) : context;
       this.capturing = true;
       try {
@@ -14705,6 +14814,13 @@
       );
     }
     rememberNetworkFailure(meta, opts) {
+      if (this.options) {
+        const ignore = buildFailedRequestIgnoreUrls(
+          this.options.failedRequestIgnoreUrls,
+          this.options.baseUrl
+        );
+        if (urlMatchesIgnoreList(meta.url || "", ignore)) return;
+      }
       const now = Date.now();
       this.pruneRecentNetworkFailures(now);
       for (let i = this.recentNetworkFailures.length - 1; i >= 0; i--) {
@@ -14715,6 +14831,8 @@
           existing.errorName = meta.errorName ?? existing.errorName;
           existing.aborted = meta.aborted ?? existing.aborted;
           existing.failureKind = meta.failureKind ?? existing.failureKind;
+          existing.party = meta.party ?? existing.party;
+          existing.origin = meta.origin ?? existing.origin;
           return;
         }
       }
@@ -14725,11 +14843,12 @@
       });
     }
     /**
-     * Find a recent transport failure for a bare fetch TypeError.
+     * Find a recent transport failure for a bare fetch TypeError / TimeoutError.
      * Consumes the entry so a later duplicate path cannot reuse it.
      */
     consumeCorrelatedNetworkFailure(error) {
-      if (!isLikelyNetworkFetchError(error)) return null;
+      if (!isCorrelatableTransportError(error)) return null;
+      const wantKind = isTimeoutError(error) ? "timeout" : "network";
       const now = Date.now();
       this.pruneRecentNetworkFailures(now);
       const takeAt = (index2) => {
@@ -14738,14 +14857,14 @@
       };
       for (let i = this.recentNetworkFailures.length - 1; i >= 0; i--) {
         const failure = this.recentNetworkFailures[i];
-        if (failure.aborted || failure.failureKind !== "network") continue;
+        if (failure.aborted || failure.failureKind !== wantKind) continue;
         if (failure.errorMessage && failure.errorMessage === error.message) {
           return takeAt(i);
         }
       }
       for (let i = this.recentNetworkFailures.length - 1; i >= 0; i--) {
         const failure = this.recentNetworkFailures[i];
-        if (failure.aborted || failure.failureKind !== "network") continue;
+        if (failure.aborted || failure.failureKind !== wantKind) continue;
         return takeAt(i);
       }
       return null;