@rasputin-ai/browser 0.7.1 → 0.8.0

package/dist/browser-transport.d.ts

@@ -16,6 +16,7 @@ type CreateBrowserTransportOptions = {
     publicKey: string;
     sdkName: string;
     sdkVersion: string;
+    scrubPii?: boolean;
     enabled: boolean;
     fetch?: BrowserTransportFetch;
     beforeFlush?: () => void;

package/dist/browser-transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-transport.d.ts","sourceRoot":"","sources":["../src/browser-transport.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAEpE,KAAK,qBAAqB,GAAG,CAC5B,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,WAAW,KACd,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AAQ9C,KAAK,6BAA6B,GAAG;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,qBAAqB,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAkDF,eAAO,MAAM,sBAAsB,GAAI,SAAS,6BAA6B;qBAwDpD,kBAAkB;8BAIT,aAAa;yBA+OlB,MAAM;;oBAoBnB,6BAA6B;CAoB5C,CAAC"}
+{"version":3,"file":"browser-transport.d.ts","sourceRoot":"","sources":["../src/browser-transport.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAEpE,KAAK,qBAAqB,GAAG,CAC5B,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,WAAW,KACd,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AAQ9C,KAAK,6BAA6B,GAAG;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,qBAAqB,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAkDF,eAAO,MAAM,sBAAsB,GAAI,SAAS,6BAA6B;qBAwDpD,kBAAkB;8BAIT,aAAa;yBAgPlB,MAAM;;oBAoBnB,6BAA6B;CAoB5C,CAAC"}

package/dist/index.js

@@ -27,13 +27,6 @@ var DEFAULT_SENSITIVE_PROPERTY_NAMES = [
   "passwd",
   "pwd",
   "passphrase",
-  "token",
-  "accesstoken",
-  "refreshtoken",
-  "sessiontoken",
-  "authorization",
-  "auth",
-  "bearer",
   "cookie",
   "cookies",
   "signedcookies",
@@ -41,77 +34,18 @@ var DEFAULT_SENSITIVE_PROPERTY_NAMES = [
   "secret",
   "secrets",
   "clientsecret",
-  "apikey",
-  "xapikey",
-  "credential",
-  "credentials",
-  "privatekey",
-  "privkey",
-  "pem",
-  "jwt",
-  "otp",
-  "totp",
-  "pin",
-  "mfacode",
-  "sessionid",
-  "sid",
-  "databaseurl",
-  "connectionstring",
-  "dsn",
-  "mongouri",
-  "redisurl",
-  "signingkey",
-  "encryptionkey",
-  "cvv",
-  "cvc",
-  "cardnumber",
-  "ssn",
-  "creditcard",
-  "securitycode",
-  "twofactorcode",
-  "masterkey",
-  "servicerolekey",
-  "stripekey",
-  "rawheaders"
+  "authorization",
+  "proxyauthorization",
+  "bearer"
 ];
 var DEFAULT_SENSITIVE_PROPERTY_NAME_SET = new Set(DEFAULT_SENSITIVE_PROPERTY_NAMES);
-var SENSITIVE_SEGMENTS = /* @__PURE__ */ new Set([
+var SENSITIVE_SUFFIXES = [
   "password",
   "passwd",
-  "pwd",
   "passphrase",
-  "token",
-  "secret",
+  "pwd",
   "cookie",
-  "cookies",
-  "authorization",
-  "auth",
-  "bearer",
-  "credential",
-  "credentials",
-  "jwt",
-  "otp",
-  "totp",
-  "pin",
-  "sid",
-  "dsn",
-  "pem",
-  "privkey",
-  "cvv",
-  "cvc",
-  "ssn",
-  "secrets"
-]);
-var SENSITIVE_SUFFIXES = [
-  "password",
-  "passwd",
-  "token",
-  "secret",
-  "apikey",
-  "privatekey",
-  "credential",
-  "credentials",
-  "cookie"
+  "cookies"
 ];
 var compactKey = (key) => {
   let compacted = "";
@@ -131,34 +65,6 @@ var stripTrailingDigits = (value) => {
   }
   return end === 0 ? value : value.slice(0, end);
 };
-var segmentsOf = (key) => {
-  const segments = [];
-  let current = "";
-  for (let index = 0; index < key.length; index++) {
-    const char = key[index] ?? "";
-    const code = key.charCodeAt(index);
-    if (code === 45 || code === 46 || code === 95) {
-      if (current) segments.push(current.toLowerCase());
-      current = "";
-      continue;
-    }
-    if (current && code >= 65 && code <= 90) {
-      const prev = current.charCodeAt(current.length - 1);
-      const prevIsLower = prev >= 97 && prev <= 122;
-      const next = key.charCodeAt(index + 1);
-      const nextIsLower = next >= 97 && next <= 122;
-      if (prevIsLower || nextIsLower) {
-        segments.push(current.toLowerCase());
-        current = char;
-        continue;
-      }
-    }
-    current += char;
-  }
-  if (current) segments.push(current.toLowerCase());
-  return segments;
-};
-var adjacentPairsSensitive = (left, right) => left === "api" && right === "key" || left === "private" && right === "key" || left === "client" && right === "secret" || left === "set" && right === "cookie" || left === "database" && right === "url" || left === "connection" && right === "string" || left === "mongo" && (right === "uri" || right === "url") || left === "mongodb" && (right === "uri" || right === "url") || left === "redis" && (right === "uri" || right === "url") || left === "postgres" && (right === "uri" || right === "url") || left === "database" && right === "uri" || left === "signing" && right === "key" || left === "master" && right === "key" || left === "stripe" && right === "key" || left === "service" && right === "role" || left === "security" && right === "code" || left === "two" && right === "factor" || left === "encryption" && right === "key" || left === "session" && (right === "id" || right === "key" || right === "token") || left === "card" && right === "number" || left === "mfa" && right === "code";
 var propertyNameIsSensitive = (key) => {
   const compacted = compactKey(key);
   const compactForms = [compacted, stripTrailingDigits(compacted)].filter(
@@ -169,16 +75,6 @@ var propertyNameIsSensitive = (key) => {
     for (const suffix of SENSITIVE_SUFFIXES) {
       if (form.endsWith(suffix)) return true;
     }
-    if (form.includes("apikey") || form.includes("xapikey")) return true;
-  }
-  const segments = segmentsOf(key).map((segment) => stripTrailingDigits(segment) || segment);
-  for (const segment of segments) {
-    if (SENSITIVE_SEGMENTS.has(segment)) return true;
-  }
-  for (let index = 0; index < segments.length - 1; index++) {
-    const left = segments[index];
-    const right = segments[index + 1];
-    if (left && right && adjacentPairsSensitive(left, right)) return true;
   }
   return false;
 };
@@ -204,12 +100,6 @@ var toStackFrame = (frame) => {
 };
 var framesToStackFrames = (frames) => frames.slice(0, MAX_STACK_FRAMES).map(toStackFrame).filter((frame) => frame !== null);
 
-// ../core/src/suppression/identity-needs-message-template.ts
-var identityNeedsMessageTemplate = (type, code) => {
-  if (code != null && code !== "") return false;
-  return type === "Error";
-};
-
 // ../core/src/suppression/parameterize-message.ts
 var MAX_INPUT_LENGTH = 8192;
 var IPV4 = /^(?:(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)$/;
@@ -266,10 +156,6 @@ var RULES = [
   {
     token: "duration",
     pattern: /\b\d+(?:\.\d+)?\s?(?:ns|µs|us|ms|secs?|seconds?|mins?|minutes?|hrs?|hours?|days?)\b/giu
-  },
-  {
-    token: "id",
-    pattern: /\b(?=[a-z0-9]*[a-z])(?=[a-z0-9]*\d)[a-z0-9]{8,}\b/giu
   }
 ];
 var normalizeForIdentity = (normalized) => {
@@ -330,19 +216,22 @@ var frameBurstParts = (frames) => {
   const inApp = collapsed.filter((frame) => frame.in_app);
   const selected = (inApp.length > 0 ? inApp : collapsed).slice(0, FRAME_COUNT);
   return selected.map((frame) => {
-    const file = preferredFile(frame);
+    const loc = frame.original ?? frame.generated;
     const fn = normalizeFunction(frame.function ?? frame.original?.name);
-    return `${file}:${fn}`;
+    return `${loc.file}:${fn}:${loc.line ?? ""}:${loc.column ?? ""}`;
   });
 };
-var computeBurstKey = (errorType, message, code, frames) => {
+var computeBurstKey = (errorType, message, code, frames, route, method) => {
   const parts = frameBurstParts(frames);
   const codePart = code ?? "";
-  let key = `${errorType}\0${codePart}\0${parts.join("\0")}`;
-  if (parts.length === 0 || identityNeedsMessageTemplate(errorType, code)) {
-    key += `\0${parameterizeMessage(message)}`;
-  }
-  return key;
+  return [
+    errorType,
+    codePart,
+    method ?? "",
+    route ?? "",
+    parameterizeMessage(message),
+    parts.join("\0")
+  ].join("\0");
 };
 
 // ../core/src/suppression/create-suppression.ts
@@ -393,9 +282,12 @@ var createSuppression = (options = {}) => {
     windowStart: bucket.windowStart,
     windowEndMs,
     lastRelease: bucket.lastRelease,
+    lastRoute: bucket.lastRoute,
+    lastMethod: bucket.lastMethod,
     lastEnvironment: bucket.lastEnvironment,
     identity: bucket.identity,
-    captureRawFrames: bucket.captureRawFrames
+    captureRawFrames: bucket.captureRawFrames,
+    burstKey: bucket.burstKey
   });
   const toSummary = (draft, identity) => ({
     count: draft.count,
@@ -403,7 +295,8 @@ var createSuppression = (options = {}) => {
     window_end: new Date(draft.windowEndMs).toISOString(),
     release: draft.lastRelease,
     environment: draft.lastEnvironment,
-    ...identity
+    ...identity,
+    ...draft.lastRoute || draft.lastMethod ? { request: { route: draft.lastRoute, method: draft.lastMethod } } : {}
   });
   const flushSuppressed = (bucket, windowEndMs) => {
     if (bucket.suppressed <= 0) return;
@@ -414,9 +307,17 @@ var createSuppression = (options = {}) => {
     const now = input.now ?? Date.now();
     const identity = captureIdentity(input);
     const captureRawFrames = (input.rawFrames ?? []).slice(0, MAX_STACK_FRAMES);
-    const burstKey = computeBurstKey(input.errorType, input.message, input.code, input.frames);
+    const burstKey = computeBurstKey(
+      input.errorType,
+      input.message,
+      input.code,
+      input.frames,
+      input.route,
+      input.method
+    );
     const release = input.release;
     const route = input.route ?? null;
+    const method = input.method ?? null;
     let bucket = burstBuckets.get(burstKey);
     if (!bucket) {
       bucket = {
@@ -425,9 +326,11 @@ var createSuppression = (options = {}) => {
         windowStart: now,
         lastRelease: release,
         lastRoute: route,
+        lastMethod: method,
         lastEnvironment: input.environment,
         identity,
-        captureRawFrames
+        captureRawFrames,
+        burstKey
       };
       burstBuckets.set(burstKey, bucket);
       evictIfNeeded();
@@ -442,6 +345,7 @@ var createSuppression = (options = {}) => {
       bucket.windowStart = now;
       bucket.lastRelease = release;
       bucket.lastRoute = route;
+      bucket.lastMethod = method;
       bucket.lastEnvironment = input.environment;
       bucket.identity = identity;
       bucket.captureRawFrames = captureRawFrames;
@@ -451,6 +355,7 @@ var createSuppression = (options = {}) => {
       bucket.sentInWindow += 1;
       bucket.lastRelease = release;
       bucket.lastRoute = route;
+      bucket.lastMethod = method;
       bucket.lastEnvironment = input.environment;
       return { action: "send", priority: "repeat" };
     }
@@ -467,7 +372,8 @@ var createSuppression = (options = {}) => {
     }
     return drafts.map((draft) => ({
       summary: toSummary(draft, draft.identity),
-      rawFrames: draft.captureRawFrames
+      rawFrames: draft.captureRawFrames,
+      burstKey: draft.burstKey
     }));
   };
   const takeSummaries = async (now = Date.now(), prepareSummary) => {
@@ -2978,6 +2884,7 @@ var createBrowserTransport = (options) => {
     ...summaries.length > 0 ? { summaries } : {},
     sdk_version: options.sdkVersion,
     sdk_name: options.sdkName,
+    scrub_pii: options.scrubPii !== false,
     idempotency_key: idempotencyKey
   });
   const shrinkUnloadBody = (events, summaries, idempotencyKey) => {
@@ -3444,11 +3351,11 @@ var mapBrowserRuntimeState = (snapshot, buildId) => {
 
 // src/sdk-meta.ts
 var SDK_NAME = "@rasputin-ai/browser";
-var SDK_VERSION = "0.7.1";
+var SDK_VERSION = "0.8.0";
 
 // src/rasputin-init.ts
-var DEFAULT_API_URL = "https://api.rasputinai.dev";
 var SLOT = Symbol.for("rasputin.browser.client.v1");
+var DEFAULT_API_URL = "https://api.rasputinai.dev";
 var emptyTransport = () => ({
   queued: 0,
   enqueued: 0,
@@ -3626,6 +3533,7 @@ var RasputinInit = (options) => {
       publicKey: parsed.publicKey,
       sdkName: SDK_NAME,
       sdkVersion: SDK_VERSION,
+      scrubPii: internal.scrubPII !== false,
       enabled: ingestEnabled,
       fetch: internal.fetch,
       beforeFlush: () => enqueuePendingSummaries()

package/dist/public-types.d.ts

@@ -46,6 +46,14 @@ export type RasputinBrowserOptions = {
      * Observe `window` `error` and `unhandledrejection`. Default true.
      */
     installGlobalHandlers?: boolean;
+    /**
+     * When `true`, the ingest API also redacts PII such as names, emails, and
+     * phone numbers from stored runtime state. Authentication secrets are always
+     * redacted. Set to `false` to keep personal data in captured values.
+     *
+     * @default true
+     */
+    scrubPII?: boolean;
 };
 export type RasputinBrowserTransportStats = {
     queued: number;

package/dist/public-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"public-types.d.ts","sourceRoot":"","sources":["../src/public-types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACpC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;OAEG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,eAAe,EACZ,SAAS,GACT,eAAe,GACf,cAAc,GACd,cAAc,GACd,oBAAoB,GACpB,WAAW,GACX,IAAI,CAAC;IACR,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IAC1C,MAAM,EAAE,OAAO,CAAC;IAChB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,6BAA6B,EAAE,MAAM,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,mCAAmC,GAAG;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,6BAA6B,CAAC;IACzC,QAAQ,EAAE,4BAA4B,CAAC;IACvC,eAAe,EAAE,mCAAmC,CAAC;CACrD,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EACH,IAAI,GACJ,UAAU,GACV,aAAa,GACb,aAAa,GACb,iBAAiB,GACjB,qBAAqB,GACrB,yBAAyB,CAAC;IAC7B,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC7B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,aAAa,EAAE,OAAO,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,oFAAoF;IACpF,aAAa,EAAE,UAAU,GAAG,SAAS,CAAC;IACtC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IACnC,gBAAgB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAC3C,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,iFAAiF;IACjF,QAAQ,EAAE,MAAM,0BAA0B,CAAC;IAC3C,0EAA0E;IAC1E,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;CACxD,CAAC"}
+{"version":3,"file":"public-types.d.ts","sourceRoot":"","sources":["../src/public-types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACpC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;OAEG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,eAAe,EACZ,SAAS,GACT,eAAe,GACf,cAAc,GACd,cAAc,GACd,oBAAoB,GACpB,WAAW,GACX,IAAI,CAAC;IACR,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IAC1C,MAAM,EAAE,OAAO,CAAC;IAChB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,6BAA6B,EAAE,MAAM,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,mCAAmC,GAAG;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,6BAA6B,CAAC;IACzC,QAAQ,EAAE,4BAA4B,CAAC;IACvC,eAAe,EAAE,mCAAmC,CAAC;CACrD,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EACH,IAAI,GACJ,UAAU,GACV,aAAa,GACb,aAAa,GACb,iBAAiB,GACjB,qBAAqB,GACrB,yBAAyB,CAAC;IAC7B,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC7B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,aAAa,EAAE,OAAO,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,oFAAoF;IACpF,aAAa,EAAE,UAAU,GAAG,SAAS,CAAC;IACtC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IACnC,gBAAgB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAC3C,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,iFAAiF;IACjF,QAAQ,EAAE,MAAM,0BAA0B,CAAC;IAC3C,0EAA0E;IAC1E,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;CACxD,CAAC"}

package/dist/rasputin-init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rasputin-init.d.ts","sourceRoot":"","sources":["../src/rasputin-init.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EACX,qBAAqB,EAGrB,sBAAsB,EAGtB,MAAM,gBAAgB,CAAC;AAmKxB;;GAEG;AACH,eAAO,MAAM,YAAY,GAAI,SAAS,sBAAsB,KAAG,qBAqJ9D,CAAC"}
+{"version":3,"file":"rasputin-init.d.ts","sourceRoot":"","sources":["../src/rasputin-init.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EACX,qBAAqB,EAGrB,sBAAsB,EAGtB,MAAM,gBAAgB,CAAC;AAoKxB;;GAEG;AACH,eAAO,MAAM,YAAY,GAAI,SAAS,sBAAsB,KAAG,qBAsJ9D,CAAC"}

package/dist/sdk-meta.d.ts

@@ -1,4 +1,4 @@
 /** Generated by scripts/generate-sdk-meta.ts — do not edit. */
 export declare const SDK_NAME = "@rasputin-ai/browser";
-export declare const SDK_VERSION = "0.7.1";
+export declare const SDK_VERSION = "0.8.0";
 //# sourceMappingURL=sdk-meta.d.ts.map

package/dist/vite/index.js

@@ -10,6 +10,64 @@ var compactRuntimeFunctionId = (moduleIndex, planIndex) => `${moduleIndex}.${pla
 // ../core/src/create-ingest-event/truncate-ingest-message.ts
 var MAX_MESSAGE_BYTES = 8 * 1024;
 
+// ../core/src/derivation/sensitive-property-name.ts
+var DEFAULT_SENSITIVE_PROPERTY_NAMES = [
+  "password",
+  "passwd",
+  "pwd",
+  "passphrase",
+  "cookie",
+  "cookies",
+  "signedcookies",
+  "setcookie",
+  "secret",
+  "secrets",
+  "clientsecret",
+  "authorization",
+  "proxyauthorization",
+  "bearer"
+];
+var DEFAULT_SENSITIVE_PROPERTY_NAME_SET = new Set(DEFAULT_SENSITIVE_PROPERTY_NAMES);
+var SENSITIVE_SUFFIXES = [
+  "password",
+  "passwd",
+  "passphrase",
+  "pwd",
+  "cookie",
+  "cookies"
+];
+var compactKey = (key) => {
+  let compacted = "";
+  for (let index = 0; index < key.length; index++) {
+    const code = key.charCodeAt(index);
+    if (code === 45 || code === 46 || code === 95) continue;
+    compacted += code >= 65 && code <= 90 ? String.fromCharCode(code + 32) : key[index];
+  }
+  return compacted;
+};
+var stripTrailingDigits = (value) => {
+  let end = value.length;
+  while (end > 0) {
+    const code = value.charCodeAt(end - 1);
+    if (code < 48 || code > 57) break;
+    end--;
+  }
+  return end === 0 ? value : value.slice(0, end);
+};
+var propertyNameIsSensitive = (key) => {
+  const compacted = compactKey(key);
+  const compactForms = [compacted, stripTrailingDigits(compacted)].filter(
+    (value, index, values) => value.length > 0 && values.indexOf(value) === index
+  );
+  for (const form of compactForms) {
+    if (DEFAULT_SENSITIVE_PROPERTY_NAME_SET.has(form)) return true;
+    for (const suffix of SENSITIVE_SUFFIXES) {
+      if (form.endsWith(suffix)) return true;
+    }
+  }
+  return false;
+};
+
 // ../core/src/source-identity/source-identity.ts
 import { createHash } from "node:crypto";
 import { existsSync, readFileSync } from "node:fs";
@@ -610,6 +668,9 @@ function traceSegmentInternal(segments, memo, line, column, bias) {
 // ../core/src/resolve-source-maps/resolve-source-maps.ts
 var MAX_MAP_CACHE_BYTES = 8 * 1024 * 1024;
 
+// ../core/src/suppression/grouping-ref-cache.ts
+var GROUPING_REF_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
+
 // ../core/src/transport/process-shutdown-hooks.ts
 var SIGNAL_EXIT_CODES = { SIGTERM: 143, SIGINT: 130 };
 var RASPUTIN_PROCESS_LISTENER = Symbol.for("rasputin.process.listener.v1");
@@ -685,168 +746,6 @@ var runtimeStateUnavailable = Symbol.for(
   "rasputin.runtime-state.unavailable"
 );
 
-// ../core/src/derivation/sensitive-property-name.ts
-var DEFAULT_SENSITIVE_PROPERTY_NAMES = [
-  "password",
-  "passwd",
-  "pwd",
-  "passphrase",
-  "token",
-  "accesstoken",
-  "refreshtoken",
-  "sessiontoken",
-  "authorization",
-  "auth",
-  "bearer",
-  "cookie",
-  "cookies",
-  "signedcookies",
-  "setcookie",
-  "secret",
-  "secrets",
-  "clientsecret",
-  "apikey",
-  "xapikey",
-  "credential",
-  "credentials",
-  "privatekey",
-  "privkey",
-  "pem",
-  "jwt",
-  "otp",
-  "totp",
-  "pin",
-  "mfacode",
-  "sessionid",
-  "sid",
-  "databaseurl",
-  "connectionstring",
-  "dsn",
-  "mongouri",
-  "redisurl",
-  "signingkey",
-  "encryptionkey",
-  "cvv",
-  "cvc",
-  "cardnumber",
-  "ssn",
-  "creditcard",
-  "securitycode",
-  "twofactorcode",
-  "masterkey",
-  "servicerolekey",
-  "stripekey",
-  "rawheaders"
-];
-var DEFAULT_SENSITIVE_PROPERTY_NAME_SET = new Set(DEFAULT_SENSITIVE_PROPERTY_NAMES);
-var SENSITIVE_SEGMENTS = /* @__PURE__ */ new Set([
-  "password",
-  "passwd",
-  "pwd",
-  "passphrase",
-  "token",
-  "secret",
-  "cookie",
-  "cookies",
-  "authorization",
-  "auth",
-  "bearer",
-  "credential",
-  "credentials",
-  "jwt",
-  "otp",
-  "totp",
-  "pin",
-  "sid",
-  "dsn",
-  "pem",
-  "privkey",
-  "cvv",
-  "cvc",
-  "ssn",
-  "secrets"
-]);
-var SENSITIVE_SUFFIXES = [
-  "password",
-  "passwd",
-  "token",
-  "secret",
-  "apikey",
-  "privatekey",
-  "credential",
-  "credentials",
-  "cookie"
-];
-var compactKey = (key) => {
-  let compacted = "";
-  for (let index = 0; index < key.length; index++) {
-    const code = key.charCodeAt(index);
-    if (code === 45 || code === 46 || code === 95) continue;
-    compacted += code >= 65 && code <= 90 ? String.fromCharCode(code + 32) : key[index];
-  }
-  return compacted;
-};
-var stripTrailingDigits = (value) => {
-  let end = value.length;
-  while (end > 0) {
-    const code = value.charCodeAt(end - 1);
-    if (code < 48 || code > 57) break;
-    end--;
-  }
-  return end === 0 ? value : value.slice(0, end);
-};
-var segmentsOf = (key) => {
-  const segments = [];
-  let current = "";
-  for (let index = 0; index < key.length; index++) {
-    const char = key[index] ?? "";
-    const code = key.charCodeAt(index);
-    if (code === 45 || code === 46 || code === 95) {
-      if (current) segments.push(current.toLowerCase());
-      current = "";
-      continue;
-    }
-    if (current && code >= 65 && code <= 90) {
-      const prev = current.charCodeAt(current.length - 1);
-      const prevIsLower = prev >= 97 && prev <= 122;
-      const next = key.charCodeAt(index + 1);
-      const nextIsLower = next >= 97 && next <= 122;
-      if (prevIsLower || nextIsLower) {
-        segments.push(current.toLowerCase());
-        current = char;
-        continue;
-      }
-    }
-    current += char;
-  }
-  if (current) segments.push(current.toLowerCase());
-  return segments;
-};
-var adjacentPairsSensitive = (left, right) => left === "api" && right === "key" || left === "private" && right === "key" || left === "client" && right === "secret" || left === "set" && right === "cookie" || left === "database" && right === "url" || left === "connection" && right === "string" || left === "mongo" && (right === "uri" || right === "url") || left === "mongodb" && (right === "uri" || right === "url") || left === "redis" && (right === "uri" || right === "url") || left === "postgres" && (right === "uri" || right === "url") || left === "database" && right === "uri" || left === "signing" && right === "key" || left === "master" && right === "key" || left === "stripe" && right === "key" || left === "service" && right === "role" || left === "security" && right === "code" || left === "two" && right === "factor" || left === "encryption" && right === "key" || left === "session" && (right === "id" || right === "key" || right === "token") || left === "card" && right === "number" || left === "mfa" && right === "code";
-var propertyNameIsSensitive = (key) => {
-  const compacted = compactKey(key);
-  const compactForms = [compacted, stripTrailingDigits(compacted)].filter(
-    (value, index, values) => value.length > 0 && values.indexOf(value) === index
-  );
-  for (const form of compactForms) {
-    if (DEFAULT_SENSITIVE_PROPERTY_NAME_SET.has(form)) return true;
-    for (const suffix of SENSITIVE_SUFFIXES) {
-      if (form.endsWith(suffix)) return true;
-    }
-    if (form.includes("apikey") || form.includes("xapikey")) return true;
-  }
-  const segments = segmentsOf(key).map((segment) => stripTrailingDigits(segment) || segment);
-  for (const segment of segments) {
-    if (SENSITIVE_SEGMENTS.has(segment)) return true;
-  }
-  for (let index = 0; index < segments.length - 1; index++) {
-    const left = segments[index];
-    const right = segments[index + 1];
-    if (left && right && adjacentPairsSensitive(left, right)) return true;
-  }
-  return false;
-};
-
 // ../recorder/src/function-plan.ts
 var encodeFunctionPlan = (source) => {
   const locator = sourceLocatorFromFile(source.filePath);
@@ -2379,6 +2278,35 @@ var JSON_METHOD_CALLEE = "globalThis.__rasputinM";
 var JSON_AWAIT_CALLEE = "globalThis.__rasputinA";
 var JSON_ADOPT_CALLEE = "globalThis.__rasputinP";
 var JSON_PRODUCER_GUARD = "globalThis.__rasputinM??=function(r,f){return Reflect.apply(f,r,[].slice.call(arguments,2))};globalThis.__rasputinA??=function(v){return v};globalThis.__rasputinP??=function(p){return p};";
+var NON_PROVENANCE_ROOTS = /* @__PURE__ */ new Set([
+  "String",
+  "Number",
+  "Boolean",
+  "Object",
+  "Array",
+  "Error",
+  "TypeError",
+  "RangeError",
+  "SyntaxError",
+  "URIError",
+  "EvalError",
+  "ReferenceError",
+  "Symbol",
+  "BigInt",
+  "Math",
+  "JSON",
+  "Date",
+  "Promise",
+  "console",
+  "parseInt",
+  "parseFloat",
+  "isNaN",
+  "isFinite",
+  "encodeURIComponent",
+  "decodeURIComponent",
+  "encodeURI",
+  "decodeURI"
+]);
 var isSimpleReceiver = (expression) => {
   const receiver = peel(expression);
   return ts10.isIdentifier(receiver) || receiver.kind === ts10.SyntaxKind.ThisKeyword;
@@ -2459,35 +2387,6 @@ var isReturnedOrBoundCall = (node) => {
   }
   return false;
 };
-var NON_PROVENANCE_ROOTS = /* @__PURE__ */ new Set([
-  "String",
-  "Number",
-  "Boolean",
-  "Object",
-  "Array",
-  "Error",
-  "TypeError",
-  "RangeError",
-  "SyntaxError",
-  "URIError",
-  "EvalError",
-  "ReferenceError",
-  "Symbol",
-  "BigInt",
-  "Math",
-  "JSON",
-  "Date",
-  "Promise",
-  "console",
-  "parseInt",
-  "parseFloat",
-  "isNaN",
-  "isFinite",
-  "encodeURIComponent",
-  "decodeURIComponent",
-  "encodeURI",
-  "decodeURI"
-]);
 var callCanCarryProvenance = (node) => {
   const name = methodName(node);
   if (name === "json" || name === "parse") return true;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@rasputin-ai/browser",
-	"version": "0.7.1",
+	"version": "0.8.0",
 	"description": "Official Rasputin AI SDK for browser applications.",
 	"type": "module",
 	"exports": {