@oxvo/browser 7.1.0 → 7.3.4

package/dist/types/main/app/cross_domain_iframe.d.ts

@@ -0,0 +1,44 @@
+import type Message from './messages.gen.js';
+export declare const CROSS_DOMAIN_IFRAME_PROTOCOL_VERSION: 1;
+export declare const CROSS_DOMAIN_IFRAME_ALLOWED_MESSAGE_TYPES: ReadonlySet<number>;
+export type CrossDomainIframeEnvelope = {
+    protocolVersion: typeof CROSS_DOMAIN_IFRAME_PROTOCOL_VERSION;
+    context: string;
+    nonce: string;
+    capability: string;
+};
+export type CrossDomainIframeHandshake = Omit<CrossDomainIframeEnvelope, 'capability'> & {
+    projectKey: string;
+};
+export type CrossDomainIframeSession = {
+    sessionID: string;
+    projectID?: string;
+    startedAt: number;
+    delayMs: number;
+    userUUID: string;
+};
+export type CrossDomainIframeCanvas = {
+    enabled: boolean;
+    quality?: 'low' | 'medium' | 'high';
+    fps?: number;
+    framesSupport?: boolean;
+};
+type ParsedIframeBatch = {
+    messages: Message[];
+    bytes: number;
+} | null;
+export declare function normalizeCrossDomainOrigin(value: unknown): string | null;
+export declare function normalizeCrossDomainOrigins(values: unknown): Set<string>;
+export declare function createCrossDomainSecret(): string | null;
+export declare function parseCrossDomainHandshake(data: unknown, expectedLine: string, expectedProjectKey: string): CrossDomainIframeHandshake | null;
+export declare function matchesCrossDomainEnvelope(data: unknown, expectedLine: string, expected: CrossDomainIframeEnvelope): data is Record<string, unknown> & CrossDomainIframeEnvelope;
+export declare function parseCrossDomainFrameInit(data: unknown, expectedLine: string, expected: Pick<CrossDomainIframeEnvelope, 'context' | 'nonce'>): (CrossDomainIframeEnvelope & {
+    id: number;
+    frameOrderNumber: number;
+    frameLevel: number;
+    capabilityExpiresAt: number;
+    session: CrossDomainIframeSession;
+    canvas?: CrossDomainIframeCanvas;
+}) | null;
+export declare function parseCrossDomainIframeBatch(messages: unknown): ParsedIframeBatch;
+export {};

package/dist/types/main/app/index.d.ts

@@ -1,13 +1,14 @@
 import type { Options as WebworkerOptions } from '../../common/interaction.js';
 import AttributeSender from '../modules/attributeSender.js';
 import type { Options as NetworkOptions } from '../modules/network.js';
+import type TagMatcher from '../modules/tagMatcher.js';
 import Logger, { ILogLevel } from './logger.js';
 import Message from './messages.gen.js';
 import Nodes from './nodes/index.js';
 import type { Options as ObserverOptions } from './observer/top_observer.js';
 import Observer from './observer/top_observer.js';
 import type { Options as SanitizerOptions } from './sanitizer.js';
-import Sanitizer from './sanitizer.js';
+import Sanitizer, { SanitizeLevel } from './sanitizer.js';
 import type { Options as SessOptions } from './session.js';
 import Session from './session.js';
 import Ticker from './ticker.js';
@@ -29,6 +30,7 @@ export interface StartOptions {
 interface OnStartInfo {
     sessionID: string;
     sessionToken: string;
+    assistToken?: string;
     userUUID: string;
 }
 declare const CANCELED: "canceled";
@@ -64,6 +66,7 @@ type AppOptions = {
     __is_snippet: boolean;
     __debug_report_edp: string | null;
     __debug__?: ILogLevel;
+    __local_debug?: boolean;
     localStorage: Storage | null;
     sessionStorage: Storage | null;
     forceSingleTab?: boolean;
@@ -95,11 +98,16 @@ type AppOptions = {
          * */
         enabled?: boolean;
         /**
-         * used to send message up, will be '*' by default
-         * (check your CSP settings)
-         * @default '*'
+         * Exact parent origin used by a tracker running inside a child iframe.
+         * Wildcards are rejected.
          * */
         parentDomain?: string;
+        /**
+         * Exact child origins allowed to join the top-level recording. The
+         * cross-domain listener is not installed unless this list is non-empty.
+         * Wildcards are rejected.
+         * */
+        childOrigins?: string[];
     };
     networkCapture?: NetworkOptions;
     /**
@@ -129,6 +137,7 @@ export default class App {
     readonly ticker: Ticker;
     readonly projectKey: string;
     readonly sanitizer: Sanitizer;
+    private readonly resanitizeCallbacks;
     readonly debug: Logger;
     readonly notify: Logger;
     readonly session: Session;
@@ -159,29 +168,52 @@ export default class App {
     private canvasRecorder;
     private conditionsManager;
     private readonly markerWatcher;
+    private readonly bootstrapAttempts;
+    private offlineRecordingSessionToken;
+    get tagMatcher(): TagMatcher;
     private canStart;
     private rootId;
     private pageFrames;
     private frameOderNumber;
     private frameLevel;
     private emptyBatchCounter;
+    private readonly crossDomainChildOrigins;
+    private readonly crossDomainParentOrigin;
+    private readonly crossDomainFrameNonce;
+    private crossDomainFrameCapability;
+    private crossDomainFrameCapabilityExpiresAt;
+    private crossDomainFrameSession;
+    private crossDomainFrameCanvas;
+    private crossDomainResumeAfterHandshake;
+    private crossDomainConnectionRequested;
+    private readonly crossDomainFrames;
+    private readonly crossDomainEnvelopeBudgets;
+    private readonly pendingCrossDomainFrames;
+    private crossDomainAuthorizationGeneration;
+    private nextCrossDomainFrameOrder;
+    private crossDomainCanvasConfig;
     constructor(projectKey: string, sessionToken: string | undefined, options: Partial<Options>, signalError: (error: string, apis: string[]) => void, insideIframe: boolean);
     /** used by child iframes for crossdomain only */
     parentActive: boolean;
     checkStatus: () => boolean;
+    private postToParent;
+    private postHandshakeToParent;
+    private applyCrossDomainFrameInit;
+    private clearCrossDomainFrameAuthorization;
     parentCrossDomainFrameListener: (event: MessageEvent) => void;
-    /**
-     * context ids for iframes,
-     * order is not so important as long as its consistent
-     * */
-    trackedFrames: string[];
+    private findCrossDomainFrame;
+    private revokeCrossDomainFrame;
+    private pruneDetachedCrossDomainFrames;
+    private currentCrossDomainSession;
+    private frameInitPayload;
+    private rotateCrossDomainFrameCapability;
+    private crossDomainFrameNeedsRotation;
+    private postToCrossDomainFrame;
+    private consumeCrossDomainEnvelopeBudget;
+    private establishCrossDomainFrame;
+    private validatedCrossDomainFrame;
+    private consumeCrossDomainFrameBudget;
     crossDomainIframeListener: (event: MessageEvent) => void;
-    /**
-     * { command : [remaining iframes] }
-     * + order of commands
-     **/
-    pollingQueue: Record<string, any>;
-    private readonly addCommand;
     bootChildrenFrames: () => Promise<void>;
     killChildrenFrames: () => void;
     signalIframeTracker: () => void;
@@ -218,6 +250,15 @@ export default class App {
     checkRequiredVersion(version: string): boolean;
     private getTrackerInfo;
     private buildStartPayload;
+    private getBootstrapAttemptStorageKey;
+    private isValidBootstrapAttempt;
+    private removeStoredBootstrapAttempt;
+    private loadBootstrapAttempt;
+    private getOrCreateBootstrapAttempt;
+    private clearBootstrapAttempt;
+    private buildBootstrapIntentFingerprint;
+    private parseBootstrapIntent;
+    private bootstrapIntentsMatch;
     getSessionMeta(): {
         userUUID: string | null;
         projectKey: string;
@@ -290,10 +331,17 @@ export default class App {
      * */
     uploadOfflineRecording(): Promise<void>;
     prevOpts: StartOptions;
+    private userStartCallback?;
+    private startCrossDomainFrame;
     private _start;
     restartCanvasTracking: () => void;
+    attachResanitizeCallback: (cb: (node: Node, id: number) => void) => void;
+    callResanitizeCallbacks: (node: Node, id: number) => void;
+    resanitize: (el?: Element) => void;
+    checkSanitization: (el: Node) => SanitizeLevel | undefined;
     flushBuffer: (buffer: Message[]) => Promise<unknown>;
     waitStart(): Promise<unknown>;
+    private waitCrossDomainStart;
     waitStarted(): Promise<unknown>;
     waitStatus(status: ActivityState): Promise<unknown>;
     /**

package/dist/types/main/app/messages.gen.d.ts

@@ -1,5 +1,7 @@
 import * as Messages from '../../common/messages.gen.js';
 export { default, Type } from '../../common/messages.gen.js';
+export type MessageFieldType = 'number' | 'string' | 'boolean';
+export declare const MESSAGE_FIELD_TYPES: Readonly<Record<number, readonly MessageFieldType[]>>;
 export declare function Timestamp(timestamp: number): Messages.Timestamp;
 export declare function SetPageLocationDeprecated(url: string, referrer: string, navigationStart: number): Messages.SetPageLocationDeprecated;
 export declare function SetViewportSize(width: number, height: number): Messages.SetViewportSize;
@@ -62,7 +64,6 @@ export declare function AdoptedSSRemoveOwner(sheetID: number, id: number): Messa
 export declare function JSException(name: string, message: string, payload: string, metadata: string): Messages.JSException;
 export declare function Zustand(mutation: string, state: string): Messages.Zustand;
 export declare function BatchMetadata(version: number, pageNo: number, firstIndex: number, timestamp: number, location: string): Messages.BatchMetadata;
-export declare function PartitionedMessage(partNo: number, partTotal: number): Messages.PartitionedMessage;
 export declare function NetworkRequest(type: string, method: string, url: string, request: string, response: string, status: number, timestamp: number, duration: number, transferredBodySize: number): Messages.NetworkRequest;
 export declare function WSChannel(chType: string, channelName: string, data: string, timestamp: number, dir: string, messageType: string): Messages.WSChannel;
 export declare function ResourceTiming(timestamp: number, duration: number, ttfb: number, headerSize: number, encodedBodySize: number, decodedBodySize: number, url: string, initiator: string, transferredSize: number, cached: boolean, queueing: number, dnsLookup: number, initialConnection: number, ssl: number, contentDownload: number, total: number, stalled: number): Messages.ResourceTiming;

package/dist/types/main/app/observer/observer.d.ts

@@ -28,6 +28,12 @@ export default abstract class Observer {
     private readonly inlineRemoteCss;
     private readonly inlinerOptions;
     private readonly domParser;
+    /**
+     * Bumped on every disconnect(). Stale async CSS-inlining callbacks from a
+     * previous session (e.g. agent reload → tracker restart) compare against
+     * this and bail instead of sending messages that reference vanished node ids.
+     */
+    private generation;
     constructor(app: App, isTopContext?: boolean, options?: Options);
     private clear;
     /**
@@ -47,6 +53,16 @@ export default abstract class Observer {
     private commitNode;
     private commitNodes;
     protected observeRoot(node: Node, beforeCommit: (id?: number) => unknown, nodeToBind?: Node): void;
+    /**
+     * Re-evaluates sanitization for every tracked node in `root`'s subtree against
+     * the current DOM and re-emits whatever changed. Pass the highest node you
+     * changed (or the document root) so inherited levels propagate correctly.
+     */
+    resanitizeSubtree(root: Node): void;
+    private resanitizeNode;
+    private recreateSubtree;
+    private clearSubtreeRegistration;
+    private reemitNode;
     disconnect(): void;
 }
 export {};

package/dist/types/main/app/sanitizer.d.ts

@@ -35,8 +35,7 @@ export interface Options {
 }
 export declare const stringWiper: (input: string) => string;
 export default class Sanitizer {
-    private readonly obscured;
-    private readonly hidden;
+    private readonly levels;
     private readonly options;
     readonly maskAllByDefault: boolean;
     private readonly app;
@@ -44,7 +43,10 @@ export default class Sanitizer {
         app: App;
         options?: Partial<Options>;
     });
-    handleNode(id: number, parentID: number, node: Node): Set<number> | undefined;
+    computeLevel(node: Node, parentLevel: SanitizeLevel): SanitizeLevel;
+    getLevel(id: number): SanitizeLevel;
+    setLevel(id: number, level: SanitizeLevel): SanitizeLevel;
+    handleNode(id: number, parentID: number, node: Node): void;
     sanitize(id: number, data: string): string;
     isObscured(id: number): boolean;
     isHidden(id: number): boolean;

package/dist/types/main/app/session.d.ts

@@ -47,6 +47,7 @@ export default class Session {
     getSessionSecret: (projectKey?: string) => string | undefined;
     getRawSecretWithProject: () => string | null;
     setSessionSecret: (token: string, projectKey: string) => void;
+    clearSessionSecret: () => void;
     applySessionHash(hash: string): void;
     getSessionHash(): string | undefined;
     getTabId(): string;

package/dist/types/main/entry.d.ts

@@ -1,6 +1,6 @@
-import TrackerClass from './index';
-export { default as App } from './app/index';
-export { default as browser, default as oxvosessions } from './singleton';
-export { SanitizeLevel, Messages, Options } from './index';
-export { default as Analytics } from './modules/analytics/index';
+import TrackerClass from './index.js';
+export { default as App } from './app/index.js';
+export { default as browser, default as oxvosessions } from './singleton.js';
+export { SanitizeLevel, Messages, Options } from './index.js';
+export { default as Analytics } from './modules/analytics/index.js';
 export default TrackerClass;

package/dist/types/main/index.d.ts

@@ -1,4 +1,4 @@
-import App from './app/index';
+import App from './app/index.js';
 export { default as App } from './app/index.js';
 import * as _Messages from './app/messages.gen.js';
 export declare const Messages: typeof _Messages;
@@ -27,6 +27,7 @@ export type Options = Partial<AppOptions & ConsoleOptions & ExceptionOptions & I
     resetTabOnWindowOpen?: boolean;
     networkCapture?: Partial<NetworkOptions>;
     mouse?: Partial<MouseHandlerOptions>;
+    customAttributes?: string[];
     devAllowInsecure?: boolean;
     css: CssRulesOptions;
     webAnimations?: WapOptions;
@@ -46,6 +47,21 @@ export default class API {
     checkDoNotTrack: () => boolean | undefined;
     signalStartIssue: (reason: string, missingApi: string[]) => void;
     restartCanvasTracking: () => void;
+    /**
+     * Re-evaluates sanitization against the current DOM and re-emits whatever
+     * changed, updating already-recorded nodes mid-session. Call after toggling
+     * `data-oxvosessions-*` attributes or after changing whatever your `domSanitizer`
+     * keys on (class/id/etc).
+     *
+     * @param el - the highest node you changed; omit to re-scan the whole document;
+     * scanning the entire doc is O(dom size)
+     * */
+    resanitize: (el?: Element) => void;
+    /**
+     * Returns the sanitization level the tracker currently has for a node
+     * (0 = Plain, 1 = Obscured, 2 = Hidden), or undefined if it isn't tracked.
+     * */
+    checkSanitization: (el: Node) => import("./app/sanitizer.js").SanitizeLevel | undefined;
     use<T>(fn: (app: App | null, options?: Partial<Options>) => T): T;
     isActive(): boolean;
     /**

package/dist/types/main/modules/analytics/batcher.d.ts

@@ -15,13 +15,15 @@ declare class Batcher {
     private readonly backendUrl;
     private readonly getToken;
     private readonly init;
+    private readonly standalone;
     private readonly autosendInterval;
     private readonly retryTimeout;
     private readonly retryLimit;
     private readonly apiEdp;
     private batch;
     private intervalId;
-    constructor(backendUrl: string, getToken: () => string | null, init: () => Promise<void>);
+    private stopped;
+    constructor(backendUrl: string, getToken: () => string | null, init: () => Promise<void>, standalone: boolean);
     getBatches(): {
         data: {
             user_actions: PeopleEvent[];
@@ -38,8 +40,11 @@ declare class Batcher {
     dedupePeopleEvents(): PeopleEvent[];
     private squashPeopleEvents;
     private sendBatch;
+    private paused;
+    private onVisibilityChange;
     startAutosend(): void;
     flush(): void;
     stop(): void;
+    restart(): void;
 }
 export default Batcher;

package/dist/types/main/modules/analytics/index.d.ts

@@ -32,6 +32,7 @@ export default class Analytics {
     private readonly getTimestamp;
     private readonly setUserId;
     private readonly standalone;
+    private pendingStartAttempt;
     /**
      * @param localStorage Class or Object that implements Storage-like interface that stores
      * values persistently like window.localStorage or any other file-based storage
@@ -50,7 +51,16 @@ export default class Analytics {
     constructor(options: Options);
     _getToken: () => string | null;
     _getTimestamp: () => number;
+    private loadStartAttempt;
+    private isValidStartAttempt;
+    private startAttempt;
+    private clearStartAttempt;
     init: () => Promise<void>;
+    /**
+     * Used by tracker when running in blundled mode
+     */
+    onStart: () => void;
+    onStop: () => void;
     reset: () => void;
     /**
      * COMPATIBILITY LAYER

package/dist/types/main/modules/input.d.ts

@@ -1,6 +1,6 @@
 import type App from '../app/index.js';
 type TextFieldElement = HTMLInputElement | HTMLTextAreaElement;
-export declare function getInputLabel(node: TextFieldElement): string;
+export declare function getInputLabel(node: TextFieldElement, customAttributes?: string[]): string;
 export declare const InputMode: {
     readonly Plain: 0;
     readonly Obscured: 1;
@@ -29,6 +29,7 @@ export interface Options {
      * will override other settings.
      * */
     inputPrivacyMode: InputModeT;
+    customAttributes?: string[];
 }
 export default function (app: App, opts: Partial<Options>): void;
 export {};

package/dist/types/main/modules/markerWatcher.d.ts

@@ -1,10 +1,9 @@
+import TagMatcher, { type Tag } from './tagMatcher.js';
 export declare const WATCHED_MARKERS_KEY = "__or__watched_markers__";
 declare class MarkerWatcher {
     interval: ReturnType<typeof setInterval> | null;
-    tags: {
-        id: number;
-        selector: string;
-    }[];
+    tags: Tag[];
+    readonly matcher: TagMatcher;
     observer: IntersectionObserver;
     private readonly sessionStorage;
     private readonly errLog;
@@ -15,10 +14,7 @@ declare class MarkerWatcher {
         onMarkerHit: (markerId: number) => void;
     });
     fetchTags(ingest: string, token: string): Promise<void>;
-    setTags(tags: {
-        id: number;
-        selector: string;
-    }[]): void;
+    setTags(tags: Tag[]): void;
     onMarkerRendered(markerId: number): void;
     clear(): void;
 }

package/dist/types/main/modules/mouse.d.ts

@@ -8,6 +8,7 @@ export interface MouseHandlerOptions {
      * default 7 = 210ms
      * */
     trackingOffset?: number;
+    customAttributes?: string[];
 }
 export default function (app: App, options?: MouseHandlerOptions): void;
 export declare function getCSSPath(el: any): string | false;

package/dist/types/main/modules/tagMatcher.d.ts

@@ -0,0 +1,28 @@
+export type Tag = {
+    id: number;
+    selector: string;
+    location?: string;
+};
+/**
+ * Two-tier tag matching:
+ * 1. Fast fingerprint lookup by id, data-attr,
+ *    or class from the selector's last segment
+ * 2. Fallback iteration using native element.matches()
+ */
+declare class TagMatcher {
+    private tags;
+    private byId;
+    private byDataAttr;
+    private byClass;
+    private fallback;
+    setTags(tags: Tag[]): void;
+    getTags(): Tag[];
+    /** Match element, its parent, or direct children against known tag selectors */
+    match(el: Element): Tag | null;
+    private matchExact;
+    clear(): void;
+}
+export declare function matchesLocation(tag: {
+    location?: string;
+}): boolean;
+export default TagMatcher;

package/dist/types/main/singleton.d.ts

@@ -97,6 +97,30 @@ declare class BrowserSingleton {
     forceFlushBatch(): void;
     getSessionMeta(): import("./app/session.js").SessionInfo | null;
     getTabId(): string | null;
+    /**
+     * Re-evaluates sanitization against the current DOM and re-emits whatever
+     * changed, updating already-recorded nodes mid-session. Call after toggling
+     * `data-oxvosessions-*` attributes or after changing whatever your `domSanitizer`
+     * keys on (class/id/etc).
+     *
+     * @param el - the highest node you changed; omit to re-scan the whole document.
+     * */
+    resanitize(el?: Element): void;
+    /**
+     * Returns the sanitization level the tracker currently has for a node
+     * (0 = Plain, 1 = Obscured, 2 = Hidden), or undefined if it isn't tracked.
+     * */
+    checkSanitization(el: Node): import("./index.js").SanitizeLevel | undefined;
+    incident(options: {
+        label?: string;
+        startTime: number;
+        endTime?: number;
+    }): void;
+    /**
+     * Use custom token for analytics events without session recording.
+     * */
+    setAnalyticsToken(token: string): void;
+    getAnalyticsToken(): string | undefined;
 }
 declare const browser: BrowserSingleton;
 export default browser;

package/dist/types/main/utils.d.ts

@@ -11,6 +11,8 @@ export declare const DOCS_HOST = "https://docs.oxvo.com";
 export declare function isLoopbackHost(hostname: string): boolean;
 export declare function canUseTrackerOrigin(protocol: string, hostname: string, devAllowInsecure?: boolean): boolean;
 export declare function deprecationWarn(nameOfFeature: string, useInstead: string, docsPath?: string): void;
+export declare function getCustomAttributeLabel(e: Element, customAttributes?: string[]): string;
+export declare function getClassSelector(e: Element): string;
 export declare function getLabelAttribute(e: Element): string | null;
 export declare function hasOxvoSessionsAttribute(e: Element, attr: string): boolean;
 /**

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@oxvo/browser",
   "description": "OxvoSessions Browser SDK for session replay and frontend observability.",
-  "version": "7.1.0",
+  "version": "7.3.4",
   "keywords": [
     "browser-sdk",
     "session-replay",
@@ -23,7 +23,8 @@
     },
     "./cjs": {
       "require": "./dist/cjs/entry.js",
-      "types": "./dist/cjs/main/entry.d.ts"
+      "import": "./dist/lib/entry.js",
+      "types": "./dist/lib/main/entry.d.ts"
     }
   },
   "files": [
@@ -42,7 +43,7 @@
     "clean": "rm -Rf build && rm -Rf dist",
     "build:common": "tsc -b src/common",
     "compile": "tsc --project src/main/tsconfig.json",
-    "create-types": "mkdir dist/lib/ dist/cjs && cp -r dist/types/* dist/lib/ && cp -r dist/types/* dist/cjs/",
+    "create-types": "mkdir dist/lib/ dist/cjs && cp -r dist/types/* dist/lib/ && cp -r dist/types/* dist/cjs/ && printf '{\"type\":\"commonjs\"}\\n' > dist/cjs/package.json",
     "build": "bun run clean && bun compile && bun create-types && rollup --config rollup.config.js",
     "test": "jest --coverage=false",
     "test:ci": "jest --coverage=true",
@@ -51,24 +52,24 @@
   },
   "devDependencies": {
     "@oxvo/network-instrumentation": "file:../../networkProxy",
-    "@babel/core": "^7.28.5",
+    "@babel/core": "^7.29.0",
     "@jest/globals": "^29.7.0",
     "@rollup/plugin-babel": "^6.1.0",
-    "@rollup/plugin-commonjs": "^28.0.3",
-    "@rollup/plugin-node-resolve": "^15.3.0",
-    "@rollup/plugin-replace": "^6.0.2",
+    "@rollup/plugin-commonjs": "^29.0.0",
+    "@rollup/plugin-node-resolve": "^16.0.3",
+    "@rollup/plugin-replace": "^6.0.3",
     "@rollup/plugin-terser": "0.4.4",
     "@rollup/plugin-typescript": "^12.3.0",
-    "@typescript-eslint/eslint-plugin": "^8.45.0",
-    "@typescript-eslint/parser": "^8.45.0",
-    "eslint": "^9.37.0",
+    "@typescript-eslint/eslint-plugin": "^8.54.0",
+    "@typescript-eslint/parser": "^8.54.0",
+    "eslint": "^9.39.2",
     "eslint-config-prettier": "^9.1.0",
-    "eslint-plugin-prettier": "^5.5.4",
+    "eslint-plugin-prettier": "^5.5.5",
     "jest": "^30.2.0",
     "jest-environment-jsdom": "^30.2.0",
-    "prettier": "^3.7.4",
+    "prettier": "^3.8.1",
     "replace-in-files": "^2.0.3",
-    "rollup": "^4.55.1",
+    "rollup": "^4.57.1",
     "semver": "^6.3.0",
     "ts-jest": "^29.4.6",
     "tslib": "^2.8.1",
@@ -77,7 +78,6 @@
   "dependencies": {
     "error-stack-parser": "^2.1.4",
     "error-stack-parser-es": "^0.1.5",
-    "fflate": "^0.8.2",
     "web-vitals": "^5.1.0"
   },
   "engines": {