@sazabi/browser 0.2.0-dev.g3566294

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Sazabi
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,148 @@
+# @sazabi/browser-sdk
+
+Capture what happens in your users' browsers with `@sazabi/browser-sdk`, the official Sazabi browser SDK. It emits a session-scoped stream of navigation, interactions, console output, JavaScript errors, and network calls as OTLP log records, and injects W3C trace context into your API requests so a frontend symptom and its backend cause share a trace id.
+
+`@sazabi/browser-sdk` is a zero-dependency browser library you install in your own web app. It lets you:
+
+- Follow a single visitor's session across tabs, from first page load to error
+- Catch uncaught exceptions and unhandled promise rejections with stack traces
+- See rage clicks and dead clicks — the interactions that signal frustration
+- Join frontend network calls to backend logs on a shared `trace_id`
+- Use AI to investigate a browser session end to end
+
+~8 KB gzipped, and designed to never break your app: every hook is wrapped, every patch is reversible, and input values are never captured.
+
+## Install
+
+```sh
+npm install @sazabi/browser-sdk
+# or: bun add / pnpm add / yarn add
+```
+
+## Get your intake URL
+
+Sign in to Sazabi, go to **Settings > Log streams**, choose **Web**, and click **Add**. Sazabi mints a public key and shows your complete intake URL at the top of the setup screen.
+
+The SDK needs both values: the intake URL as `intakeHost` (the SDK appends the `/v1/logs` signal path itself) and the full `sazabi_public_...` value as `publicKey`.
+
+Unlike most credentials, this one is **meant** to ship in your browser bundle — a public key can only write telemetry into your project, never read from it.
+
+## Quick start
+
+```ts
+// Import first, because a module that runs earlier can capture the native
+// fetch/XHR/history references before the SDK wraps them.
+import "@sazabi/browser-sdk/register";
+
+import { init } from "@sazabi/browser-sdk";
+
+init({
+  intakeHost: "https://<public-key-hex>.<region>.intake.sazabi.com",
+  publicKey: "sazabi_public_<public-key-hex>",
+  serviceName: "my-web-app",
+  serviceVersion: process.env.GIT_SHA,
+  environment: "production",
+});
+```
+
+`init()` is idempotent, never throws into your app, and no-ops during server-side rendering, so it is safe in a shared entry module.
+
+The register import is optional but recommended. `init()` alone also instruments, but only at call time — and every static import in your entry file evaluates before its first statement, so an HTTP client constructed at module scope wins that race. Requests that slip past instrumentation are still observed through a resource-timing fallback, and the SDK emits a once-per-origin `instrumentation_gap` diagnostic naming the escaped origin, so the gap is visible rather than silent.
+
+## What gets captured
+
+Every event carries a cross-tab `session.id`, a per-tab `session.window_id`, `session.distinct_id`, and the page URL, so one user's activity reads as a single ordered timeline. The `web.event_type` attribute names the kind:
+
+| `web.event_type` | Contents |
+|------------------|----------|
+| `navigation` | Page loads and SPA route changes — History API, hash, back/forward, and the Navigation API |
+| `click` | Capture-phase clicks with a privacy-safe selector and the element's label ("Save changes") |
+| `rage_click` / `dead_click` | Frustration signals: rapid repeat clicks, and clicks with no visible response |
+| `input` | One event per field engagement — which field, for how long, how many edits, whether pasted. Never keystrokes, values, or value lengths |
+| `error` | Uncaught exceptions and unhandled rejections with `exception.type`, `exception.message`, and `exception.stacktrace` |
+| `network` | fetch and XHR calls with method, status, and duration — plus the trace context injected into them |
+| `log` | Mirrored `console.error` / `console.warn` output, plus anything you send with `log()` |
+| `custom` | Marks you add with `addEvent()` |
+
+## Correlate with your backend
+
+The SDK injects a W3C `traceparent` header into same-origin requests by default. To reach an API on another origin, allowlist it — and make sure that API's CORS configuration includes `traceparent` in `Access-Control-Allow-Headers`, or the browser preflight fails and those requests break:
+
+```ts
+init({
+  // …
+  network: {
+    allowlist: ["https://api.example.com"],
+  },
+});
+```
+
+Backend log lines that run inside the extracted trace context then share a `trace_id` with the originating browser request. If your backend runs OpenTelemetry, that extraction already happens by default. Set `network: { sampledFlag: true }` if you also want your backend tracer to *record* those traces — the logs-side join works either way.
+
+The SDK also records platform request ids echoed on responses (`x-request-id`, `cf-ray`, `x-vercel-id`, and similar) as `web.network.request_id`, giving you an exact join key against CDN and platform logs with no backend changes. Reading these cross-origin requires the header in `Access-Control-Expose-Headers`.
+
+## Identify users
+
+```ts
+import { identify, reset } from "@sazabi/browser-sdk";
+
+identify("user_123", { plan: "pro" }); // on sign-in — use your internal id, not an email
+reset(); // on sign-out
+```
+
+`identify()` stamps `session.distinct_id` on subsequent events and records the traits on the identify event. `reset()` clears the identity and rotates the session and window ids, so activity on a shared device never threads into the previous user's timeline; switching identities without a `reset()` rotates automatically.
+
+Identity is client-asserted — treat it as a claim, not as authentication.
+
+## Logs, custom events, and console output
+
+```ts
+import { addEvent, log } from "@sazabi/browser-sdk";
+
+addEvent("checkout_started", { cartValue: 42 });
+log("WARN", "cache lookup failed", { requestId: "req_9" });
+```
+
+`console.error` and `console.warn` are mirrored into the event stream by default, and the original console behavior is untouched. Configure with `console: { levels: [...] }` or turn it off with `console: { capture: false }`.
+
+## Consent
+
+If your users must opt in before capture, pass a consent gate — nothing is installed and nothing is sent until it resolves true:
+
+```ts
+init({
+  // …
+  consent: () => cookieBanner.accepted(),
+});
+```
+
+`identify()` calls made while consent is pending are buffered and applied when capture starts.
+
+## Configuration
+
+| Option | Default | Purpose |
+|--------|---------|---------|
+| `network.capture` | `true` | Emit network events for fetch/XHR |
+| `network.propagateTraceContext` | `true` | Inject `traceparent` into eligible requests |
+| `network.allowlist` | same-origin only | Origins eligible for header injection |
+| `network.sampledFlag` | `false` | Mark minted traces sampled (`-01`) for backend tracers |
+| `network.resourceFallback` | `true` | Observe requests that bypass instrumentation |
+| `network.requestIdHeaders` | common platform headers | Response headers probed for a request id |
+| `console.capture` / `console.levels` | `true`, `["error", "warn"]` | Console mirroring |
+| `input.capture` | `true` | Field-interaction episodes |
+| `consent` | off | Hold all capture until it resolves true |
+| `flushIntervalMs` | `5000` | Batch flush cadence |
+
+## Privacy and safety
+
+- **Input values, keystrokes, request bodies, and response bodies are never captured** — not even value lengths.
+- Element names come from developer-authored sources only (`aria-label`, `<label>`, `placeholder`, button captions), and only for interactive elements. Clicks on plain containers, where user content lives, record selectors only.
+- Add `data-sazabi-mask` to any element to suppress text capture for its whole subtree, or `data-sazabi-name` to set an element's reported name explicitly.
+- Every patch is transparent, idempotent, and reversible. SDK failures are invisible to your app, and `shutdown()` restores the original functions.
+- Events are delivered as OTLP/HTTP log records with batching, and flushed with `keepalive` when the tab closes.
+
+## Verifying it works
+
+Load your app and click through a few pages. The SDK flushes every 5 seconds and again when the tab is hidden or closed, so the first events land within about 10 seconds. In your browser's network tab, filter for `intake` — POSTs to `/v1/logs` should return 200.
+
+Full setup guide and troubleshooting: [docs.sazabi.com/data/log-sources/endpoint/web](https://docs.sazabi.com/data/log-sources/endpoint/web).

package/dist/attributes.d.ts

@@ -0,0 +1,8 @@
+import type { EventAttributes } from "./types";
+export declare const truncateValue: (value: string, max?: number) => string;
+/**
+ * Flatten nested metadata into dot-keyed scalar attributes. Non-scalar leaves
+ * are JSON-stringified; strings are length-capped so a hostile or buggy page
+ * cannot inflate rows.
+ */
+export declare const flattenAttributes: (input: Record<string, unknown>, prefix?: string, depth?: number) => EventAttributes;

package/dist/chunk-rfm4nnme.js

@@ -0,0 +1,5 @@
+var l=(t)=>{try{Object.defineProperty(t,"__sazabiBrowserWrapped",{value:!0})}catch{}},R=(t)=>typeof t==="function"&&t.__sazabiBrowserWrapped===!0;var W={push:"pushState",replace:"replaceState",traverse:"popstate",reload:"reload"},I,y=(t)=>{let e=I;if(!e)return;try{let r=window.location.href,n=e.previousUrl;if(e.previousUrl=r,t!=="load"&&n===r)return;e.options.onNavigate(),e.options.emit({type:"navigation",body:`navigation ${window.location.pathname}`,severity:"INFO",timeUnixMs:Date.now(),attributes:{"web.navigation.type":t,"url.full":r,"web.navigation.from":n||void 0}})}catch{}},f,j=(t)=>{let{pushState:e,replaceState:r}=t;return{originalPushState:e,originalReplaceState:r,wrappedPushState:function(...s){e.apply(this,s),y("pushState")},wrappedReplaceState:function(...s){r.apply(this,s),y("replaceState")}}},_=()=>{let t=History.prototype;if(!R(t.pushState)){let e=j(t);l(e.wrappedPushState),l(e.wrappedReplaceState),t.pushState=e.wrappedPushState,t.replaceState=e.wrappedReplaceState,f=e}},Y=()=>{let t=History.prototype;if(f){if(t.pushState===f.wrappedPushState)t.pushState=f.originalPushState;if(t.replaceState===f.wrappedReplaceState)t.replaceState=f.originalReplaceState}f=void 0},J=(t)=>{_(),I={options:t,previousUrl:document.referrer||""};let e=()=>{y("popstate")},r=()=>{y("hashchange")};window.addEventListener("popstate",e),window.addEventListener("hashchange",r);let n=window.navigation,o=(s)=>{let g=s.navigationType,i=W[g??""];if(i)y(i)};return n?.addEventListener("currententrychange",o),y("load"),{teardown(){I=void 0,window.removeEventListener("popstate",e),window.removeEventListener("hashchange",r),n?.removeEventListener("currententrychange",o)}}};var N=(t)=>{try{let e=new URL(t);return e.origin===window.location.origin?e.pathname:`${e.host}${e.pathname}`}catch{return t}},U=(t)=>{if(t===0||t>=500)return"ERROR";if(t>=400)return"WARN";return"INFO"};var L=(t)=>{try{let e=new URL(t,window.location.href);return e.username="",e.password="",e.href}catch{return}},h,M=(t,e)=>{if(t.allowlist.length===0)try{return new URL(e).origin===window.location.origin}catch{return!1}return t.allowlist.some((r)=>typeof r==="string"?e.includes(r):r.test(e))},re=(t)=>{let e=h;if(!e?.propagateTraceContext)return!1;if(e.isInternalUrl(t))return!1;return M(e,t)},A=5000,E=300,w=[],T=(t)=>{if(w.push({url:t,startTime:performance.now()}),w.length>E)w=w.slice(-E)},ne=(t,e)=>{let r=w.findIndex((n)=>n.url===t&&Math.abs(n.startTime-e)<=A);if(r===-1)return!1;return w.splice(r,1),!0},C=(t,e)=>{try{let r=N(e.resolvedUrl),n=e.status>0?String(e.status):"failed",o={type:"network",body:`${e.method} ${r} → ${n}`,severity:U(e.status),timeUnixMs:Date.now(),attributes:{"http.request.method":e.method,"http.response.status_code":e.status>0?e.status:void 0,"url.full":e.resolvedUrl,"web.network.kind":e.kind,"web.network.duration_ms":Math.round(e.durationMs),"web.network.error":e.failureMessage,"web.network.request_id":e.requestId,"web.network.request_id_header":e.requestIdHeader}};if(e.injected)o.traceId=e.injected.traceId,o.spanId=e.injected.spanId;t.emit(o)}catch{}},D=(t,e)=>{try{for(let r of t.requestIdHeaders){let n=e.headers.get(r);if(n)return{requestId:n,requestIdHeader:r}}}catch{}return{}},F=(t,e)=>{try{for(let r of t.requestIdHeaders){let n=e.getResponseHeader(r);if(n)return{requestId:n,requestIdHeader:r}}}catch{}return{}},S,k=0,B=(t)=>{let e=(r,n,o)=>{k++;try{return t.call(r,n,o)}finally{k--}};return function(r,n){let o=h;if(!o||k>0||R(t))return t.call(this,r,n);let s,g="GET",i,p=n;try{let c=typeof r==="string"?r:r instanceof URL?r.href:r.url;if(s=L(c),typeof r==="object"&&"method"in r&&r.method)g=r.method.toUpperCase();if(n?.method)g=n.method.toUpperCase();let x=s===void 0||o.isInternalUrl(s);if(!x&&s&&o.propagateTraceContext&&M(o,s)){let H=o.traceContext.forRequest();if(r instanceof Request&&n===void 0)try{for(let[m,P]of Object.entries(H.headers))if(!r.headers.has(m))r.headers.set(m,P);i=H}catch{i=void 0}else{let m=r instanceof Request&&n?.headers===void 0?new Headers(r.headers):new Headers(n?.headers),P=m.has("traceparent");if(r instanceof Request&&r.headers.has("traceparent"))P=!0;if(!P){for(let[O,X]of Object.entries(H.headers))m.set(O,X);p={...n,headers:m},i=H}}}if(!x&&s!==void 0)T(s);if(x||!o.capture||s===void 0)return e(this,r,p)}catch{return e(this,r,n)}let a=performance.now(),v=s,u=g,q=i;return e(this,r,p).then((c)=>(C(o,{kind:"fetch",method:u,resolvedUrl:v,status:c.status,durationMs:performance.now()-a,injected:q,...D(o,c)}),c),(c)=>{throw C(o,{kind:"fetch",method:u,resolvedUrl:v,status:0,durationMs:performance.now()-a,failureMessage:c instanceof Error?c.message:String(c),injected:q}),c})}},b=new WeakMap,d,K=(t)=>{let{open:e,send:r,setRequestHeader:n}=t;return{originalOpen:e,originalSend:r,originalSetRequestHeader:n,wrappedOpen:function(...i){if(h)try{let[p,a]=i;b.set(this,{method:String(p).toUpperCase(),resolvedUrl:L(String(a)),customTraceparent:!1,start:0,processed:!1})}catch{}e.apply(this,i)},wrappedSend:function(i){let p=h;if(p)try{let a=b.get(this);if(a?.resolvedUrl&&!a.processed){a.processed=!0;let v=p.isInternalUrl(a.resolvedUrl);if(!v&&p.propagateTraceContext&&!a.customTraceparent&&M(p,a.resolvedUrl))try{let u=p.traceContext.forRequest();for(let[q,c]of Object.entries(u.headers))n.call(this,q,c);a.injected=u}catch{a.injected=void 0}if(!v)T(a.resolvedUrl);if(!v&&p.capture)a.start=performance.now(),this.addEventListener("loadend",()=>{let u=h??p;C(u,{kind:"xhr",method:a.method,resolvedUrl:a.resolvedUrl,status:this.status,durationMs:performance.now()-a.start,injected:a.injected,...F(u,this)})})}}catch{}r.call(this,i)},wrappedSetRequestHeader:function(i,p){if(h)try{if(i.toLowerCase()==="traceparent"){let a=b.get(this);if(a)a.customTraceparent=!0}}catch{}n.call(this,i,p)}}},G=()=>{if(!R(window.fetch)){let e=window.fetch,r=B(e);l(r),window.fetch=r,S={original:e,wrapped:r}}let t=XMLHttpRequest.prototype;if(!R(t.open)){let e=K(t);l(e.wrappedOpen),l(e.wrappedSetRequestHeader),l(e.wrappedSend),t.open=e.wrappedOpen,t.setRequestHeader=e.wrappedSetRequestHeader,t.send=e.wrappedSend,d=e}},ae=()=>{if(S&&window.fetch===S.wrapped)window.fetch=S.original;S=void 0;let t=XMLHttpRequest.prototype;if(d){if(t.open===d.wrappedOpen)t.open=d.originalOpen;if(t.setRequestHeader===d.wrappedSetRequestHeader)t.setRequestHeader=d.originalSetRequestHeader;if(t.send===d.wrappedSend)t.send=d.originalSend}d=void 0,w=[]},oe=(t)=>(G(),h=t,{teardown(){h=void 0}});
+export{l as a,R as b,_ as c,Y as d,J as e,N as f,U as g,re as h,ne as i,G as j,ae as k,oe as l};
+
+//# debugId=0E88B5801F6610F064756E2164756E21
+//# sourceMappingURL=chunk-rfm4nnme.js.map

package/dist/chunk-rfm4nnme.js.map

@@ -0,0 +1,13 @@
+{
+  "version": 3,
+  "sources": ["../src/patch-marker.ts", "../src/navigation.ts", "../src/network-event-format.ts", "../src/network.ts"],
+  "sourcesContent": [
+    "export const WRAPPED_MARKER = \"__sazabiBrowserWrapped\";\n\n/** Best-effort idempotency marker on wrapper functions. */\nexport const markWrapped = (fn: object): void => {\n  try {\n    Object.defineProperty(fn, WRAPPED_MARKER, { value: true });\n  } catch {\n    // Non-extensible function object — idempotency guard degrades gracefully.\n  }\n};\n\nexport const isWrapped = (fn: unknown): boolean =>\n  typeof fn === \"function\" &&\n  (fn as unknown as Record<string, unknown>)[WRAPPED_MARKER] === true;\n",
+    "import { isWrapped, markWrapped } from \"./patch-marker\";\nimport type { WebEvent } from \"./types\";\n\nexport interface NavigationCaptureOptions {\n  emit(event: WebEvent): void;\n  /** Fired on every captured navigation (dead-click signal). */\n  onNavigate(): void;\n}\n\nexport interface NavigationCaptureHandle {\n  teardown(): void;\n}\n\ntype NavigationType =\n  | \"load\"\n  | \"pushState\"\n  | \"replaceState\"\n  | \"popstate\"\n  | \"hashchange\"\n  | \"reload\";\n\n/**\n * Navigation API `currententrychange` types → our History-API-flavored\n * vocabulary, so queries see one taxonomy regardless of which API navigated.\n */\nconst NAVIGATION_API_TYPE_MAP: Record<string, NavigationType> = {\n  push: \"pushState\",\n  replace: \"replaceState\",\n  traverse: \"popstate\",\n  reload: \"reload\",\n};\n\n// ------------------------------------------------------------- activation --\n// History patches install dormant (routers commonly capture\n// History.prototype methods at module scope) and consult this slot per call.\n\ninterface ActiveNavigation {\n  options: NavigationCaptureOptions;\n  previousUrl: string;\n}\n\nlet active: ActiveNavigation | undefined;\n\nconst emitNavigation = (navigationType: NavigationType): void => {\n  const current = active;\n  if (!current) return;\n  try {\n    const currentUrl = window.location.href;\n    const from = current.previousUrl;\n    current.previousUrl = currentUrl;\n    if (navigationType !== \"load\" && from === currentUrl) {\n      return; // replaceState to the same URL etc. — not a navigation.\n    }\n    current.options.onNavigate();\n    current.options.emit({\n      type: \"navigation\",\n      body: `navigation ${window.location.pathname}`,\n      severity: \"INFO\",\n      timeUnixMs: Date.now(),\n      attributes: {\n        \"web.navigation.type\": navigationType,\n        \"url.full\": currentUrl,\n        \"web.navigation.from\": from || undefined,\n      },\n    });\n  } catch {\n    // Capture failures must never surface to the host.\n  }\n};\n\ninterface HistoryPatch {\n  originalPushState: History[\"pushState\"];\n  originalReplaceState: History[\"replaceState\"];\n  wrappedPushState: History[\"pushState\"];\n  wrappedReplaceState: History[\"replaceState\"];\n}\n\nlet historyPatch: HistoryPatch | undefined;\n\nconst makeHistoryPatch = (proto: History): HistoryPatch => {\n  const originalPushState = proto.pushState;\n  const originalReplaceState = proto.replaceState;\n\n  const wrappedPushState = function (\n    this: History,\n    ...args: Parameters<History[\"pushState\"]>\n  ): void {\n    originalPushState.apply(this, args);\n    emitNavigation(\"pushState\");\n  };\n\n  const wrappedReplaceState = function (\n    this: History,\n    ...args: Parameters<History[\"replaceState\"]>\n  ): void {\n    originalReplaceState.apply(this, args);\n    emitNavigation(\"replaceState\");\n  };\n\n  return {\n    originalPushState,\n    originalReplaceState,\n    wrappedPushState,\n    wrappedReplaceState,\n  };\n};\n\n/**\n * Install dormant history patches around whatever implementations are\n * currently live. Idempotent; re-wraps if a later actor replaced the methods\n * after an earlier install (the displaced wrappers are inert passthroughs).\n */\nexport const ensureNavigationPatches = (): void => {\n  const proto = History.prototype;\n  if (!isWrapped(proto.pushState)) {\n    const patch = makeHistoryPatch(proto);\n    markWrapped(patch.wrappedPushState);\n    markWrapped(patch.wrappedReplaceState);\n    proto.pushState = patch.wrappedPushState;\n    proto.replaceState = patch.wrappedReplaceState;\n    historyPatch = patch;\n  }\n};\n\n/** Restore the natives if the current implementations are still ours. */\nexport const uninstallNavigationPatches = (): void => {\n  const proto = History.prototype;\n  if (historyPatch) {\n    if (proto.pushState === historyPatch.wrappedPushState) {\n      proto.pushState = historyPatch.originalPushState;\n    }\n    if (proto.replaceState === historyPatch.wrappedReplaceState) {\n      proto.replaceState = historyPatch.originalReplaceState;\n    }\n  }\n  historyPatch = undefined;\n};\n\n/**\n * SPA navigation capture. Listeners alone miss programmatic navigation —\n * which is most navigation in React apps — so `history.pushState` /\n * `replaceState` are wrapped under the same isolation rules as the network\n * patch.\n */\nexport const installNavigationCapture = (\n  options: NavigationCaptureOptions,\n): NavigationCaptureHandle => {\n  ensureNavigationPatches();\n  active = { options, previousUrl: document.referrer || \"\" };\n\n  const onPopState = (): void => {\n    emitNavigation(\"popstate\");\n  };\n  const onHashChange = (): void => {\n    emitNavigation(\"hashchange\");\n  };\n  window.addEventListener(\"popstate\", onPopState);\n  window.addEventListener(\"hashchange\", onHashChange);\n\n  // Navigation API (Chromium): `navigation.navigate()` same-document\n  // navigations call neither pushState nor popstate, but every same-document\n  // navigation — whichever API initiated it — fires `currententrychange`.\n  // The same-URL dedupe in emitNavigation collapses the overlap with the\n  // history patch and legacy listeners; first signal wins.\n  const navigationApi = (window as { navigation?: EventTarget }).navigation;\n  const onCurrentEntryChange = (event: Event): void => {\n    const navigationType = (event as { navigationType?: string | null })\n      .navigationType;\n    const mapped = NAVIGATION_API_TYPE_MAP[navigationType ?? \"\"];\n    if (mapped) {\n      // Unmapped/null types (e.g. updateCurrentEntry metadata edits) are\n      // not navigations.\n      emitNavigation(mapped);\n    }\n  };\n  navigationApi?.addEventListener(\"currententrychange\", onCurrentEntryChange);\n\n  // The page we landed on is the first navigation of the window.\n  emitNavigation(\"load\");\n\n  return {\n    teardown() {\n      active = undefined;\n      window.removeEventListener(\"popstate\", onPopState);\n      window.removeEventListener(\"hashchange\", onHashChange);\n      navigationApi?.removeEventListener(\n        \"currententrychange\",\n        onCurrentEntryChange,\n      );\n    },\n  };\n};\n",
+    "import type { EventSeverity } from \"./types\";\n\n/** Compact display path: pathname when same-origin, host+path cross-origin. */\nexport const urlPath = (resolved: string): string => {\n  try {\n    const url = new URL(resolved);\n    return url.origin === window.location.origin\n      ? url.pathname\n      : `${url.host}${url.pathname}`;\n  } catch {\n    return resolved;\n  }\n};\n\n/** Status 0 means transport failure. */\nexport const severityForStatus = (status: number): EventSeverity => {\n  if (status === 0 || status >= 500) return \"ERROR\";\n  if (status >= 400) return \"WARN\";\n  return \"INFO\";\n};\n",
+    "import { severityForStatus, urlPath } from \"./network-event-format\";\nimport { isWrapped, markWrapped } from \"./patch-marker\";\nimport type { RequestTraceContext, TraceContextManager } from \"./trace-context\";\nimport type { WebEvent } from \"./types\";\n\nexport interface NetworkCaptureOptions {\n  emit(event: WebEvent): void;\n  traceContext: TraceContextManager;\n  /** Emit network events. */\n  capture: boolean;\n  /** Inject `traceparent` into allowlisted requests. */\n  propagateTraceContext: boolean;\n  /** Injection allowlist; empty means same-origin only. */\n  allowlist: (string | RegExp)[];\n  /** Response headers probed for a platform request id, in priority order. */\n  requestIdHeaders: string[];\n  /** SDK-internal endpoints: never captured, never injected. */\n  isInternalUrl(url: string): boolean;\n}\n\nexport interface NetworkCaptureHandle {\n  teardown(): void;\n}\n\nconst resolveUrl = (raw: string): string | undefined => {\n  try {\n    const url = new URL(raw, window.location.href);\n    url.username = \"\";\n    url.password = \"\";\n    return url.href;\n  } catch {\n    return undefined;\n  }\n};\n\n// ------------------------------------------------------------- activation --\n// Patches install dormant (possibly via `@sazabi/browser/register` before\n// any app module can capture the natives) and consult this slot per call.\n// Undefined slot = transparent passthrough.\n\nlet active: NetworkCaptureOptions | undefined;\n\nconst isAllowedForInjection = (\n  options: NetworkCaptureOptions,\n  resolved: string,\n): boolean => {\n  if (options.allowlist.length === 0) {\n    try {\n      return new URL(resolved).origin === window.location.origin;\n    } catch {\n      return false;\n    }\n  }\n  return options.allowlist.some((pattern) =>\n    typeof pattern === \"string\"\n      ? resolved.includes(pattern)\n      : pattern.test(resolved),\n  );\n};\n\n/** Injection eligibility for the active config; used by the resource observer\n * to decide whether a bypassed request is a diagnosable instrumentation gap. */\nexport const isActiveInjectionTarget = (resolved: string): boolean => {\n  const options = active;\n  if (!options?.propagateTraceContext) return false;\n  if (options.isInternalUrl(resolved)) return false;\n  return isAllowedForInjection(options, resolved);\n};\n\n// ----------------------------------------------------- wrapper-seen ledger --\n// Every request processed by an active wrapper is recorded so the resource-\n// timing observer can tell wrapper-captured traffic (skip: a richer event was\n// already emitted) from traffic that bypassed the patches entirely.\n\ninterface SeenRequest {\n  url: string;\n  /** performance.now() timebase, comparable to PerformanceEntry.startTime. */\n  startTime: number;\n}\n\nconst SEEN_MATCH_WINDOW_MS = 5_000;\nconst SEEN_MAX_ENTRIES = 300;\nlet seenByWrapper: SeenRequest[] = [];\n\nconst recordWrapperRequest = (url: string): void => {\n  seenByWrapper.push({ url, startTime: performance.now() });\n  if (seenByWrapper.length > SEEN_MAX_ENTRIES) {\n    seenByWrapper = seenByWrapper.slice(-SEEN_MAX_ENTRIES);\n  }\n};\n\n/** Consume a wrapper-seen record matching this resource entry, if any. */\nexport const consumeWrapperSeen = (url: string, startTime: number): boolean => {\n  const index = seenByWrapper.findIndex(\n    (seen) =>\n      seen.url === url &&\n      Math.abs(seen.startTime - startTime) <= SEEN_MATCH_WINDOW_MS,\n  );\n  if (index === -1) return false;\n  seenByWrapper.splice(index, 1);\n  return true;\n};\n\nconst emitNetworkEvent = (\n  options: NetworkCaptureOptions,\n  details: {\n    kind: \"fetch\" | \"xhr\";\n    method: string;\n    resolvedUrl: string;\n    status: number;\n    durationMs: number;\n    failureMessage?: string;\n    injected?: RequestTraceContext;\n    requestId?: string;\n    requestIdHeader?: string;\n  },\n): void => {\n  try {\n    const path = urlPath(details.resolvedUrl);\n    const outcome = details.status > 0 ? String(details.status) : \"failed\";\n    const event: WebEvent = {\n      type: \"network\",\n      body: `${details.method} ${path} → ${outcome}`,\n      severity: severityForStatus(details.status),\n      timeUnixMs: Date.now(),\n      attributes: {\n        \"http.request.method\": details.method,\n        \"http.response.status_code\":\n          details.status > 0 ? details.status : undefined,\n        \"url.full\": details.resolvedUrl,\n        \"web.network.kind\": details.kind,\n        \"web.network.duration_ms\": Math.round(details.durationMs),\n        \"web.network.error\": details.failureMessage,\n        \"web.network.request_id\": details.requestId,\n        \"web.network.request_id_header\": details.requestIdHeader,\n      },\n    };\n    if (details.injected) {\n      event.traceId = details.injected.traceId;\n      event.spanId = details.injected.spanId;\n    }\n    options.emit(event);\n  } catch {\n    // Capture failures must never surface to the host.\n  }\n};\n\nconst readFetchRequestId = (\n  options: NetworkCaptureOptions,\n  response: Response,\n): { requestId?: string; requestIdHeader?: string } => {\n  try {\n    for (const name of options.requestIdHeaders) {\n      const value = response.headers.get(name);\n      if (value) return { requestId: value, requestIdHeader: name };\n    }\n  } catch {\n    // Header access failures are ignorable detail loss.\n  }\n  return {};\n};\n\nconst readXhrRequestId = (\n  options: NetworkCaptureOptions,\n  xhr: XMLHttpRequest,\n): { requestId?: string; requestIdHeader?: string } => {\n  try {\n    for (const name of options.requestIdHeaders) {\n      const value = xhr.getResponseHeader(name);\n      if (value) return { requestId: value, requestIdHeader: name };\n    }\n  } catch {\n    // Cross-origin/invalid-state header access — ignorable detail loss.\n  }\n  return {};\n};\n\n// ------------------------------------------------------------------ fetch --\n\ninterface FetchPatch {\n  original: typeof fetch;\n  wrapped: typeof fetch;\n}\n\nlet fetchPatch: FetchPatch | undefined;\n\n/**\n * Outermost-wins sandwich guard. When a third party patches fetch between our\n * register-time install and init (Sentry, analytics), init's re-wrap makes\n * the chain ourWrapper2(thirdParty(ourWrapper1(native))) — two ACTIVE copies\n * of our wrapper in one call path, which would double-emit every event. The\n * outermost wrapper raises this depth for the synchronous span of its\n * call-through; inner copies see it and become pure passthroughs.\n */\nlet fetchProcessingDepth = 0;\n\nconst makeWrappedFetch = (originalFetch: typeof fetch): typeof fetch => {\n  const callThrough = (\n    thisArg: unknown,\n    input: RequestInfo | URL,\n    init?: RequestInit,\n  ): Promise<Response> => {\n    fetchProcessingDepth++;\n    try {\n      return originalFetch.call(thisArg, input, init);\n    } finally {\n      fetchProcessingDepth--;\n    }\n  };\n\n  return function (\n    this: unknown,\n    input: RequestInfo | URL,\n    init?: RequestInit,\n  ): Promise<Response> {\n    const options = active;\n    if (!options || fetchProcessingDepth > 0 || isWrapped(originalFetch)) {\n      return originalFetch.call(this, input, init);\n    }\n\n    let resolvedUrl: string | undefined;\n    let method = \"GET\";\n    let injected: RequestTraceContext | undefined;\n    let finalInit = init;\n\n    try {\n      const rawUrl =\n        typeof input === \"string\"\n          ? input\n          : input instanceof URL\n            ? input.href\n            : input.url;\n      resolvedUrl = resolveUrl(rawUrl);\n\n      if (typeof input === \"object\" && \"method\" in input && input.method) {\n        method = input.method.toUpperCase();\n      }\n      if (init?.method) {\n        method = init.method.toUpperCase();\n      }\n\n      const internal =\n        resolvedUrl === undefined || options.isInternalUrl(resolvedUrl);\n\n      if (\n        !internal &&\n        resolvedUrl &&\n        options.propagateTraceContext &&\n        isAllowedForInjection(options, resolvedUrl)\n      ) {\n        const requestContext = options.traceContext.forRequest();\n\n        if (input instanceof Request && init === undefined) {\n          // Headers on a constructed Request are mutable for non-forbidden\n          // names; if the guard rejects them, skip injection rather than\n          // clone (cloning can consume one-shot bodies).\n          try {\n            for (const [name, value] of Object.entries(\n              requestContext.headers,\n            )) {\n              if (!input.headers.has(name)) {\n                input.headers.set(name, value);\n              }\n            }\n            injected = requestContext;\n          } catch {\n            injected = undefined;\n          }\n        } else {\n          // Per fetch semantics, init.headers replaces the Request's own\n          // headers entirely. When the caller passed a Request plus an init\n          // WITHOUT headers, seed the merge from the Request so injection\n          // does not silently strip Authorization/Content-Type/etc.\n          const merged =\n            input instanceof Request && init?.headers === undefined\n              ? new Headers(input.headers)\n              : new Headers(init?.headers);\n          let alreadyTraced = merged.has(\"traceparent\");\n          if (input instanceof Request && input.headers.has(\"traceparent\")) {\n            alreadyTraced = true;\n          }\n          if (!alreadyTraced) {\n            for (const [name, value] of Object.entries(\n              requestContext.headers,\n            )) {\n              merged.set(name, value);\n            }\n            finalInit = { ...init, headers: merged };\n            injected = requestContext;\n          }\n        }\n      }\n\n      if (!internal && resolvedUrl !== undefined) {\n        recordWrapperRequest(resolvedUrl);\n      }\n\n      if (internal || !options.capture || resolvedUrl === undefined) {\n        return callThrough(this, input, finalInit);\n      }\n    } catch {\n      // Any preparation failure: fall through to a plain passthrough call.\n      return callThrough(this, input, init);\n    }\n\n    const start = performance.now();\n    const capturedUrl = resolvedUrl;\n    const capturedMethod = method;\n    const capturedInjection = injected;\n\n    return callThrough(this, input, finalInit).then(\n      (response) => {\n        emitNetworkEvent(options, {\n          kind: \"fetch\",\n          method: capturedMethod,\n          resolvedUrl: capturedUrl,\n          status: response.status,\n          durationMs: performance.now() - start,\n          injected: capturedInjection,\n          ...readFetchRequestId(options, response),\n        });\n        return response;\n      },\n      (error: unknown) => {\n        emitNetworkEvent(options, {\n          kind: \"fetch\",\n          method: capturedMethod,\n          resolvedUrl: capturedUrl,\n          status: 0,\n          durationMs: performance.now() - start,\n          failureMessage:\n            error instanceof Error ? error.message : String(error),\n          injected: capturedInjection,\n        });\n        throw error;\n      },\n    );\n  };\n};\n\n// ------------------------------------------------------------------ XHR --\n\ninterface XhrRequestState {\n  method: string;\n  resolvedUrl?: string;\n  customTraceparent: boolean;\n  injected?: RequestTraceContext;\n  start: number;\n  /** Set by the outermost of our send wrappers in a third-party sandwich. */\n  processed: boolean;\n}\n\nconst xhrState = new WeakMap<XMLHttpRequest, XhrRequestState>();\n\ninterface XhrPatch {\n  originalOpen: XMLHttpRequest[\"open\"];\n  originalSend: XMLHttpRequest[\"send\"];\n  originalSetRequestHeader: XMLHttpRequest[\"setRequestHeader\"];\n  wrappedOpen: XMLHttpRequest[\"open\"];\n  wrappedSend: XMLHttpRequest[\"send\"];\n  wrappedSetRequestHeader: XMLHttpRequest[\"setRequestHeader\"];\n}\n\nlet xhrPatch: XhrPatch | undefined;\n\nconst makeXhrPatch = (proto: XMLHttpRequest): XhrPatch => {\n  const originalOpen = proto.open;\n  const originalSend = proto.send;\n  const originalSetRequestHeader = proto.setRequestHeader;\n\n  // Forward `open` arguments with exact arity: `open(m, u, undefined)` would\n  // coerce async to false (sync XHR) — not equivalent to the 2-arg call.\n  const wrappedOpen = function (\n    this: XMLHttpRequest,\n    ...args: [string, string | URL, ...unknown[]]\n  ): void {\n    if (active) {\n      try {\n        const [method, url] = args;\n        xhrState.set(this, {\n          method: String(method).toUpperCase(),\n          resolvedUrl: resolveUrl(String(url)),\n          customTraceparent: false,\n          start: 0,\n          processed: false,\n        });\n      } catch {\n        // Tracking failure must not affect the request.\n      }\n    }\n    originalOpen.apply(this, args as Parameters<XMLHttpRequest[\"open\"]>);\n  };\n\n  const wrappedSetRequestHeader = function (\n    this: XMLHttpRequest,\n    name: string,\n    value: string,\n  ): void {\n    if (active) {\n      try {\n        if (name.toLowerCase() === \"traceparent\") {\n          const tracked = xhrState.get(this);\n          if (tracked) {\n            tracked.customTraceparent = true;\n          }\n        }\n      } catch {\n        // Ignore.\n      }\n    }\n    originalSetRequestHeader.call(this, name, value);\n  };\n\n  const wrappedSend = function (\n    this: XMLHttpRequest,\n    body?: Document | XMLHttpRequestBodyInit | null,\n  ): void {\n    const options = active;\n    if (options) {\n      try {\n        const tracked = xhrState.get(this);\n        // `processed` = an outer copy of our wrapper already handled this\n        // send (third-party sandwich); inner copies must not re-inject or\n        // attach a second loadend emitter.\n        if (tracked?.resolvedUrl && !tracked.processed) {\n          tracked.processed = true;\n          const internal = options.isInternalUrl(tracked.resolvedUrl);\n\n          if (\n            !internal &&\n            options.propagateTraceContext &&\n            !tracked.customTraceparent &&\n            isAllowedForInjection(options, tracked.resolvedUrl)\n          ) {\n            try {\n              const requestContext = options.traceContext.forRequest();\n              for (const [name, value] of Object.entries(\n                requestContext.headers,\n              )) {\n                originalSetRequestHeader.call(this, name, value);\n              }\n              tracked.injected = requestContext;\n            } catch {\n              tracked.injected = undefined;\n            }\n          }\n\n          if (!internal) {\n            recordWrapperRequest(tracked.resolvedUrl);\n          }\n\n          if (!internal && options.capture) {\n            tracked.start = performance.now();\n            this.addEventListener(\"loadend\", () => {\n              const current = active ?? options;\n              emitNetworkEvent(current, {\n                kind: \"xhr\",\n                method: tracked.method,\n                resolvedUrl: tracked.resolvedUrl as string,\n                status: this.status,\n                durationMs: performance.now() - tracked.start,\n                injected: tracked.injected,\n                ...readXhrRequestId(current, this),\n              });\n            });\n          }\n        }\n      } catch {\n        // Fall through to the untouched send.\n      }\n    }\n    originalSend.call(this, body);\n  };\n\n  return {\n    originalOpen,\n    originalSend,\n    originalSetRequestHeader,\n    wrappedOpen,\n    wrappedSend,\n    wrappedSetRequestHeader,\n  };\n};\n\n// ----------------------------------------------------------------- install --\n\n/**\n * Install dormant fetch/XHR patches around whatever implementations are\n * currently live. Idempotent, and re-wraps when a later actor (test stubs,\n * mocking layers) replaced the primitives after an earlier install — the\n * displaced wrapper is an inert passthrough, so single-processing holds.\n */\nexport const ensureNetworkPatches = (): void => {\n  if (!isWrapped(window.fetch)) {\n    const original = window.fetch;\n    const wrapped = makeWrappedFetch(original);\n    markWrapped(wrapped);\n    window.fetch = wrapped;\n    fetchPatch = { original, wrapped };\n  }\n\n  const proto = XMLHttpRequest.prototype;\n  if (!isWrapped(proto.open)) {\n    const patch = makeXhrPatch(proto);\n    markWrapped(patch.wrappedOpen);\n    markWrapped(patch.wrappedSetRequestHeader);\n    markWrapped(patch.wrappedSend);\n    proto.open = patch.wrappedOpen;\n    proto.setRequestHeader = patch.wrappedSetRequestHeader;\n    proto.send = patch.wrappedSend;\n    xhrPatch = patch;\n  }\n};\n\n/**\n * Restore the natives if the current implementations are still ours; if\n * someone patched on top of us, restoring would clobber them — the inactive\n * wrappers pass through.\n */\nexport const uninstallNetworkPatches = (): void => {\n  if (fetchPatch && window.fetch === fetchPatch.wrapped) {\n    window.fetch = fetchPatch.original;\n  }\n  fetchPatch = undefined;\n\n  const proto = XMLHttpRequest.prototype;\n  if (xhrPatch) {\n    if (proto.open === xhrPatch.wrappedOpen) {\n      proto.open = xhrPatch.originalOpen;\n    }\n    if (proto.setRequestHeader === xhrPatch.wrappedSetRequestHeader) {\n      proto.setRequestHeader = xhrPatch.originalSetRequestHeader;\n    }\n    if (proto.send === xhrPatch.wrappedSend) {\n      proto.send = xhrPatch.originalSend;\n    }\n  }\n  xhrPatch = undefined;\n  seenByWrapper = [];\n};\n\nexport const installNetworkCapture = (\n  options: NetworkCaptureOptions,\n): NetworkCaptureHandle => {\n  ensureNetworkPatches();\n  active = options;\n\n  return {\n    teardown() {\n      active = undefined;\n    },\n  };\n};\n"
+  ],
+  "mappings": "AAGO,IAAM,EAAc,CAAC,IAAqB,CAC/C,GAAI,CACF,OAAO,eAAe,EALI,yBAKgB,CAAE,MAAO,EAAK,CAAC,EACzD,KAAM,IAKG,EAAY,CAAC,IACxB,OAAO,IAAO,YACb,EAb2B,yBAamC,GCYjE,IAAM,EAA0D,CAC9D,KAAM,YACN,QAAS,eACT,SAAU,WACV,OAAQ,QACV,EAWI,EAEE,EAAiB,CAAC,IAAyC,CAC/D,IAAM,EAAU,EAChB,GAAI,CAAC,EAAS,OACd,GAAI,CACF,IAAM,EAAa,OAAO,SAAS,KAC7B,EAAO,EAAQ,YAErB,GADA,EAAQ,YAAc,EAClB,IAAmB,QAAU,IAAS,EACxC,OAEF,EAAQ,QAAQ,WAAW,EAC3B,EAAQ,QAAQ,KAAK,CACnB,KAAM,aACN,KAAM,cAAc,OAAO,SAAS,WACpC,SAAU,OACV,WAAY,KAAK,IAAI,EACrB,WAAY,CACV,sBAAuB,EACvB,WAAY,EACZ,sBAAuB,GAAQ,MACjC,CACF,CAAC,EACD,KAAM,IAYN,EAEE,EAAmB,CAAC,IAAiC,CACzD,IAAgC,UAA1B,EAC6B,aAA7B,GAAuB,EAkB7B,MAAO,CACL,oBACA,uBACA,iBAnBuB,QAAS,IAE7B,EACG,CACN,EAAkB,MAAM,KAAM,CAAI,EAClC,EAAe,WAAW,GAe1B,oBAZ0B,QAAS,IAEhC,EACG,CACN,EAAqB,MAAM,KAAM,CAAI,EACrC,EAAe,cAAc,EAQ/B,GAQW,EAA0B,IAAY,CACjD,IAAM,EAAQ,QAAQ,UACtB,GAAI,CAAC,EAAU,EAAM,SAAS,EAAG,CAC/B,IAAM,EAAQ,EAAiB,CAAK,EACpC,EAAY,EAAM,gBAAgB,EAClC,EAAY,EAAM,mBAAmB,EACrC,EAAM,UAAY,EAAM,iBACxB,EAAM,aAAe,EAAM,oBAC3B,EAAe,IAKN,EAA6B,IAAY,CACpD,IAAM,EAAQ,QAAQ,UACtB,GAAI,EAAc,CAChB,GAAI,EAAM,YAAc,EAAa,iBACnC,EAAM,UAAY,EAAa,kBAEjC,GAAI,EAAM,eAAiB,EAAa,oBACtC,EAAM,aAAe,EAAa,qBAGtC,EAAe,QASJ,EAA2B,CACtC,IAC4B,CAC5B,EAAwB,EACxB,EAAS,CAAE,UAAS,YAAa,SAAS,UAAY,EAAG,EAEzD,IAAM,EAAa,IAAY,CAC7B,EAAe,UAAU,GAErB,EAAe,IAAY,CAC/B,EAAe,YAAY,GAE7B,OAAO,iBAAiB,WAAY,CAAU,EAC9C,OAAO,iBAAiB,aAAc,CAAY,EAOlD,IAAM,EAAiB,OAAwC,WACzD,EAAuB,CAAC,IAAuB,CACnD,IAAM,EAAkB,EACrB,eACG,EAAS,EAAwB,GAAkB,IACzD,GAAI,EAGF,EAAe,CAAM,GAQzB,OALA,GAAe,iBAAiB,qBAAsB,CAAoB,EAG1E,EAAe,MAAM,EAEd,CACL,QAAQ,EAAG,CACT,EAAS,OACT,OAAO,oBAAoB,WAAY,CAAU,EACjD,OAAO,oBAAoB,aAAc,CAAY,EACrD,GAAe,oBACb,qBACA,CACF,EAEJ,GC3LK,IAAM,EAAU,CAAC,IAA6B,CACnD,GAAI,CACF,IAAM,EAAM,IAAI,IAAI,CAAQ,EAC5B,OAAO,EAAI,SAAW,OAAO,SAAS,OAClC,EAAI,SACJ,GAAG,EAAI,OAAO,EAAI,WACtB,KAAM,CACN,OAAO,IAKE,EAAoB,CAAC,IAAkC,CAClE,GAAI,IAAW,GAAK,GAAU,IAAK,MAAO,QAC1C,GAAI,GAAU,IAAK,MAAO,OAC1B,MAAO,QCMT,IAAM,EAAa,CAAC,IAAoC,CACtD,GAAI,CACF,IAAM,EAAM,IAAI,IAAI,EAAK,OAAO,SAAS,IAAI,EAG7C,OAFA,EAAI,SAAW,GACf,EAAI,SAAW,GACR,EAAI,KACX,KAAM,CACN,SASA,EAEE,EAAwB,CAC5B,EACA,IACY,CACZ,GAAI,EAAQ,UAAU,SAAW,EAC/B,GAAI,CACF,OAAO,IAAI,IAAI,CAAQ,EAAE,SAAW,OAAO,SAAS,OACpD,KAAM,CACN,MAAO,GAGX,OAAO,EAAQ,UAAU,KAAK,CAAC,IAC7B,OAAO,IAAY,SACf,EAAS,SAAS,CAAO,EACzB,EAAQ,KAAK,CAAQ,CAC3B,GAKW,GAA0B,CAAC,IAA8B,CACpE,IAAM,EAAU,EAChB,GAAI,CAAC,GAAS,sBAAuB,MAAO,GAC5C,GAAI,EAAQ,cAAc,CAAQ,EAAG,MAAO,GAC5C,OAAO,EAAsB,EAAS,CAAQ,GAc1C,EAAuB,KACvB,EAAmB,IACrB,EAA+B,CAAC,EAE9B,EAAuB,CAAC,IAAsB,CAElD,GADA,EAAc,KAAK,CAAE,MAAK,UAAW,YAAY,IAAI,CAAE,CAAC,EACpD,EAAc,OAAS,EACzB,EAAgB,EAAc,MAAM,CAAC,CAAgB,GAK5C,GAAqB,CAAC,EAAa,IAA+B,CAC7E,IAAM,EAAQ,EAAc,UAC1B,CAAC,IACC,EAAK,MAAQ,GACb,KAAK,IAAI,EAAK,UAAY,CAAS,GAAK,CAC5C,EACA,GAAI,IAAU,GAAI,MAAO,GAEzB,OADA,EAAc,OAAO,EAAO,CAAC,EACtB,IAGH,EAAmB,CACvB,EACA,IAWS,CACT,GAAI,CACF,IAAM,EAAO,EAAQ,EAAQ,WAAW,EAClC,EAAU,EAAQ,OAAS,EAAI,OAAO,EAAQ,MAAM,EAAI,SACxD,EAAkB,CACtB,KAAM,UACN,KAAM,GAAG,EAAQ,UAAU,OAAU,IACrC,SAAU,EAAkB,EAAQ,MAAM,EAC1C,WAAY,KAAK,IAAI,EACrB,WAAY,CACV,sBAAuB,EAAQ,OAC/B,4BACE,EAAQ,OAAS,EAAI,EAAQ,OAAS,OACxC,WAAY,EAAQ,YACpB,mBAAoB,EAAQ,KAC5B,0BAA2B,KAAK,MAAM,EAAQ,UAAU,EACxD,oBAAqB,EAAQ,eAC7B,yBAA0B,EAAQ,UAClC,gCAAiC,EAAQ,eAC3C,CACF,EACA,GAAI,EAAQ,SACV,EAAM,QAAU,EAAQ,SAAS,QACjC,EAAM,OAAS,EAAQ,SAAS,OAElC,EAAQ,KAAK,CAAK,EAClB,KAAM,IAKJ,EAAqB,CACzB,EACA,IACqD,CACrD,GAAI,CACF,QAAW,KAAQ,EAAQ,iBAAkB,CAC3C,IAAM,EAAQ,EAAS,QAAQ,IAAI,CAAI,EACvC,GAAI,EAAO,MAAO,CAAE,UAAW,EAAO,gBAAiB,CAAK,GAE9D,KAAM,EAGR,MAAO,CAAC,GAGJ,EAAmB,CACvB,EACA,IACqD,CACrD,GAAI,CACF,QAAW,KAAQ,EAAQ,iBAAkB,CAC3C,IAAM,EAAQ,EAAI,kBAAkB,CAAI,EACxC,GAAI,EAAO,MAAO,CAAE,UAAW,EAAO,gBAAiB,CAAK,GAE9D,KAAM,EAGR,MAAO,CAAC,GAUN,EAUA,EAAuB,EAErB,EAAmB,CAAC,IAA8C,CACtE,IAAM,EAAc,CAClB,EACA,EACA,IACsB,CACtB,IACA,GAAI,CACF,OAAO,EAAc,KAAK,EAAS,EAAO,CAAI,SAC9C,CACA,MAIJ,OAAO,QAAS,CAEd,EACA,EACmB,CACnB,IAAM,EAAU,EAChB,GAAI,CAAC,GAAW,EAAuB,GAAK,EAAU,CAAa,EACjE,OAAO,EAAc,KAAK,KAAM,EAAO,CAAI,EAG7C,IAAI,EACA,EAAS,MACT,EACA,EAAY,EAEhB,GAAI,CACF,IAAM,EACJ,OAAO,IAAU,SACb,EACA,aAAiB,IACf,EAAM,KACN,EAAM,IAGd,GAFA,EAAc,EAAW,CAAM,EAE3B,OAAO,IAAU,UAAY,WAAY,GAAS,EAAM,OAC1D,EAAS,EAAM,OAAO,YAAY,EAEpC,GAAI,GAAM,OACR,EAAS,EAAK,OAAO,YAAY,EAGnC,IAAM,EACJ,IAAgB,QAAa,EAAQ,cAAc,CAAW,EAEhE,GACE,CAAC,GACD,GACA,EAAQ,uBACR,EAAsB,EAAS,CAAW,EAC1C,CACA,IAAM,EAAiB,EAAQ,aAAa,WAAW,EAEvD,GAAI,aAAiB,SAAW,IAAS,OAIvC,GAAI,CACF,QAAY,EAAM,KAAU,OAAO,QACjC,EAAe,OACjB,EACE,GAAI,CAAC,EAAM,QAAQ,IAAI,CAAI,EACzB,EAAM,QAAQ,IAAI,EAAM,CAAK,EAGjC,EAAW,EACX,KAAM,CACN,EAAW,OAER,KAKL,IAAM,EACJ,aAAiB,SAAW,GAAM,UAAY,OAC1C,IAAI,QAAQ,EAAM,OAAO,EACzB,IAAI,QAAQ,GAAM,OAAO,EAC3B,EAAgB,EAAO,IAAI,aAAa,EAC5C,GAAI,aAAiB,SAAW,EAAM,QAAQ,IAAI,aAAa,EAC7D,EAAgB,GAElB,GAAI,CAAC,EAAe,CAClB,QAAY,EAAM,KAAU,OAAO,QACjC,EAAe,OACjB,EACE,EAAO,IAAI,EAAM,CAAK,EAExB,EAAY,IAAK,EAAM,QAAS,CAAO,EACvC,EAAW,IAKjB,GAAI,CAAC,GAAY,IAAgB,OAC/B,EAAqB,CAAW,EAGlC,GAAI,GAAY,CAAC,EAAQ,SAAW,IAAgB,OAClD,OAAO,EAAY,KAAM,EAAO,CAAS,EAE3C,KAAM,CAEN,OAAO,EAAY,KAAM,EAAO,CAAI,EAGtC,IAAM,EAAQ,YAAY,IAAI,EACxB,EAAc,EACd,EAAiB,EACjB,EAAoB,EAE1B,OAAO,EAAY,KAAM,EAAO,CAAS,EAAE,KACzC,CAAC,KACC,EAAiB,EAAS,CACxB,KAAM,QACN,OAAQ,EACR,YAAa,EACb,OAAQ,EAAS,OACjB,WAAY,YAAY,IAAI,EAAI,EAChC,SAAU,KACP,EAAmB,EAAS,CAAQ,CACzC,CAAC,EACM,GAET,CAAC,IAAmB,CAWlB,MAVA,EAAiB,EAAS,CACxB,KAAM,QACN,OAAQ,EACR,YAAa,EACb,OAAQ,EACR,WAAY,YAAY,IAAI,EAAI,EAChC,eACE,aAAiB,MAAQ,EAAM,QAAU,OAAO,CAAK,EACvD,SAAU,CACZ,CAAC,EACK,EAEV,IAgBE,EAAW,IAAI,QAWjB,EAEE,EAAe,CAAC,IAAoC,CACxD,IAA2B,KAArB,EACqB,KAArB,EACiC,iBAAjC,GADe,EA2GrB,MAAO,CACL,eACA,eACA,2BACA,YA1GkB,QAAS,IAExB,EACG,CACN,GAAI,EACF,GAAI,CACF,IAAO,EAAQ,GAAO,EACtB,EAAS,IAAI,KAAM,CACjB,OAAQ,OAAO,CAAM,EAAE,YAAY,EACnC,YAAa,EAAW,OAAO,CAAG,CAAC,EACnC,kBAAmB,GACnB,MAAO,EACP,UAAW,EACb,CAAC,EACD,KAAM,EAIV,EAAa,MAAM,KAAM,CAA0C,GAyFnE,YAlEkB,QAAS,CAE3B,EACM,CACN,IAAM,EAAU,EAChB,GAAI,EACF,GAAI,CACF,IAAM,EAAU,EAAS,IAAI,IAAI,EAIjC,GAAI,GAAS,aAAe,CAAC,EAAQ,UAAW,CAC9C,EAAQ,UAAY,GACpB,IAAM,EAAW,EAAQ,cAAc,EAAQ,WAAW,EAE1D,GACE,CAAC,GACD,EAAQ,uBACR,CAAC,EAAQ,mBACT,EAAsB,EAAS,EAAQ,WAAW,EAElD,GAAI,CACF,IAAM,EAAiB,EAAQ,aAAa,WAAW,EACvD,QAAY,EAAM,KAAU,OAAO,QACjC,EAAe,OACjB,EACE,EAAyB,KAAK,KAAM,EAAM,CAAK,EAEjD,EAAQ,SAAW,EACnB,KAAM,CACN,EAAQ,SAAW,OAIvB,GAAI,CAAC,EACH,EAAqB,EAAQ,WAAW,EAG1C,GAAI,CAAC,GAAY,EAAQ,QACvB,EAAQ,MAAQ,YAAY,IAAI,EAChC,KAAK,iBAAiB,UAAW,IAAM,CACrC,IAAM,EAAU,GAAU,EAC1B,EAAiB,EAAS,CACxB,KAAM,MACN,OAAQ,EAAQ,OAChB,YAAa,EAAQ,YACrB,OAAQ,KAAK,OACb,WAAY,YAAY,IAAI,EAAI,EAAQ,MACxC,SAAU,EAAQ,YACf,EAAiB,EAAS,IAAI,CACnC,CAAC,EACF,GAGL,KAAM,EAIV,EAAa,KAAK,KAAM,CAAI,GAS5B,wBAvF8B,QAAS,CAEvC,EACA,EACM,CACN,GAAI,EACF,GAAI,CACF,GAAI,EAAK,YAAY,IAAM,cAAe,CACxC,IAAM,EAAU,EAAS,IAAI,IAAI,EACjC,GAAI,EACF,EAAQ,kBAAoB,IAGhC,KAAM,EAIV,EAAyB,KAAK,KAAM,EAAM,CAAK,EAuEjD,GAWW,EAAuB,IAAY,CAC9C,GAAI,CAAC,EAAU,OAAO,KAAK,EAAG,CAC5B,IAAM,EAAW,OAAO,MAClB,EAAU,EAAiB,CAAQ,EACzC,EAAY,CAAO,EACnB,OAAO,MAAQ,EACf,EAAa,CAAE,WAAU,SAAQ,EAGnC,IAAM,EAAQ,eAAe,UAC7B,GAAI,CAAC,EAAU,EAAM,IAAI,EAAG,CAC1B,IAAM,EAAQ,EAAa,CAAK,EAChC,EAAY,EAAM,WAAW,EAC7B,EAAY,EAAM,uBAAuB,EACzC,EAAY,EAAM,WAAW,EAC7B,EAAM,KAAO,EAAM,YACnB,EAAM,iBAAmB,EAAM,wBAC/B,EAAM,KAAO,EAAM,YACnB,EAAW,IASF,GAA0B,IAAY,CACjD,GAAI,GAAc,OAAO,QAAU,EAAW,QAC5C,OAAO,MAAQ,EAAW,SAE5B,EAAa,OAEb,IAAM,EAAQ,eAAe,UAC7B,GAAI,EAAU,CACZ,GAAI,EAAM,OAAS,EAAS,YAC1B,EAAM,KAAO,EAAS,aAExB,GAAI,EAAM,mBAAqB,EAAS,wBACtC,EAAM,iBAAmB,EAAS,yBAEpC,GAAI,EAAM,OAAS,EAAS,YAC1B,EAAM,KAAO,EAAS,aAG1B,EAAW,OACX,EAAgB,CAAC,GAGN,GAAwB,CACnC,KAEA,EAAqB,EACrB,EAAS,EAEF,CACL,QAAQ,EAAG,CACT,EAAS,OAEb",
+  "debugId": "0E88B5801F6610F064756E2164756E21",
+  "names": []
+}

package/dist/console.d.ts

@@ -0,0 +1,17 @@
+import type { ConsoleCaptureLevel, WebEvent } from "./types";
+export interface ConsoleCaptureOptions {
+    emit(event: WebEvent): void;
+    levels: ConsoleCaptureLevel[];
+}
+export interface ConsoleCaptureHandle {
+    teardown(): void;
+}
+/** SDK-emitted console lines carry this prefix and are never re-captured. */
+export declare const SDK_CONSOLE_PREFIX = "[@sazabi/browser]";
+/**
+ * Mirror selected console levels into the event stream as `log` events.
+ * The original console method always runs first — devtools behavior is never
+ * altered — and capture failures are swallowed. Lines the SDK itself prints
+ * (prefixed with SDK_CONSOLE_PREFIX) are skipped to avoid self-capture.
+ */
+export declare const installConsoleCapture: (options: ConsoleCaptureOptions) => ConsoleCaptureHandle;

package/dist/element-name.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Human-readable element names for timeline events — a pragmatic subset of
+ * the ARIA accessible-name computation, biased hard toward developer-authored
+ * sources. The bright line: app-authored static text (labels, aria-label,
+ * placeholder, button captions) is capturable; user-reflected text (values,
+ * selected options, data rendered into the DOM) is not. `data-sazabi-name`
+ * overrides any element's reported name; `data-sazabi-mask` on an ancestor
+ * suppresses name capture for the whole subtree.
+ */
+/**
+ * Name for an input/textarea/select/contenteditable — developer-authored
+ * sources only; the field's value and (for selects) the chosen option text
+ * are never read.
+ */
+export declare const computeInputName: (element: Element) => string | undefined;
+/**
+ * Name for a click target: nearest interactive ancestor's accessible-ish
+ * name. Residual risk is labels that interpolate user data ("Delete 'My
+ * Project'") — that is app-authored markup, capped at 64 chars, and
+ * suppressible via `data-sazabi-mask` / overridable via `data-sazabi-name`.
+ */
+export declare const computeClickName: (target: Element) => string | undefined;

package/dist/errors.d.ts

@@ -0,0 +1,8 @@
+import type { WebEvent } from "./types";
+export interface ErrorCaptureOptions {
+    emit(event: WebEvent): void;
+}
+export interface ErrorCaptureHandle {
+    teardown(): void;
+}
+export declare const installErrorCapture: (options: ErrorCaptureOptions) => ErrorCaptureHandle;

package/dist/index.d.ts

@@ -0,0 +1,30 @@
+import type { BrowserSdkConfig, EventSeverity } from "./types";
+export type { AttributeValue, BrowserSdkConfig, ConsoleCaptureConfig, ConsoleCaptureLevel, EventAttributes, EventSeverity, InputCaptureConfig, NetworkCaptureConfig, WebEvent, WebEventType, } from "./types";
+export { SDK_VERSION } from "./version";
+/**
+ * Initialize the SDK. Idempotent: repeat calls are ignored. When `consent`
+ * is provided, nothing new is installed — no listeners, no patches, no
+ * network — until it resolves true; on false (or a throw) the SDK stays
+ * dormant. (Patches pre-installed by `@sazabi/browser/register` exist
+ * but remain inert passthroughs until activation.)
+ */
+export declare const init: (config: BrowserSdkConfig) => void;
+/** Set the client-asserted user identity (`session.distinct_id`). */
+export declare const identify: (distinctId: string, traits?: Record<string, unknown>) => void;
+/**
+ * Logout: clear the client-asserted identity and rotate both session and
+ * window ids, so later activity on this device never threads into the
+ * previous user's timeline.
+ */
+export declare const reset: () => void;
+/** Emit a custom mark into the session event stream. */
+export declare const addEvent: (name: string, attributes?: Record<string, unknown>) => void;
+/**
+ * Emit an application log line (`web.event_type: "log"`) with session context
+ * attached. Drops silently before init/consent, like all capture.
+ */
+export declare const log: (severity: EventSeverity, message: string, metadata?: Record<string, unknown>) => void;
+/** Force-flush queued events. */
+export declare const flush: () => Promise<void>;
+/** Tear down all patches/listeners (restoring originals) and flush. */
+export declare const shutdown: () => Promise<void>;

package/dist/index.js

@@ -0,0 +1,4 @@
+import{a as P,b as H,d as ae,e as ce,f as q,g as z,h as ue,i as J,k as de,l as le}from"./chunk-rfm4nnme.js";var v=(e,t=4096)=>e.length>t?e.slice(0,t):e,I=(e,t="",n=0)=>{let r={};for(let[s,o]of Object.entries(e)){let i=t?`${t}.${s}`:s;if(o===null||o===void 0)continue;if(typeof o==="object"&&!Array.isArray(o)&&n<4){Object.assign(r,I(o,i,n+1));continue}if(typeof o==="number"||typeof o==="boolean")r[i]=o;else if(typeof o==="string")r[i]=v(o);else try{r[i]=v(JSON.stringify(o)??"")}catch{}}return r};var R="[@sazabi/browser]",pe={error:"ERROR",warn:"WARN",info:"INFO",debug:"DEBUG"},D=1000,fe=4000,me=(e)=>{let t;if(typeof e==="string")t=e;else if(e instanceof Error)t=`${e.name}: ${e.message}`;else try{t=JSON.stringify(e)??String(e)}catch{t=String(e)}return t.length>D?`${t.slice(0,D)}…`:t},V=(e)=>{let t=[],n=!1;for(let r of e.levels){let s=console[r];if(typeof s!=="function"||H(s))continue;let o=function(...i){if(s.apply(this??console,i),n)return;try{if(typeof i[0]==="string"&&i[0].startsWith(R))return;n=!0;let c=i.map(me).join(" ").slice(0,fe);e.emit({type:"log",body:c||`console.${r}`,severity:pe[r],timeUnixMs:Date.now(),attributes:{"web.console.level":r}})}catch{}finally{n=!1}};P(o),console[r]=o,t.push(()=>{if(console[r]===o)console[r]=s})}return{teardown(){for(let r of t)try{r()}catch{}}}};var U=(e)=>{let t=(r)=>{try{let s=r.error,o=s instanceof Error?s.name:"Error",i=r.message||"Unknown error";e.emit({type:"error",body:v(`${o}: ${i}`,512),severity:"ERROR",timeUnixMs:Date.now(),attributes:{"exception.type":o,"exception.message":i,"exception.stacktrace":s instanceof Error?s.stack??"":"","web.error.kind":"uncaught","web.error.filename":r.filename||void 0,"web.error.lineno":r.lineno||void 0,"web.error.colno":r.colno||void 0}})}catch{}},n=(r)=>{try{let s=r.reason,o=s instanceof Error,i=o?s.name:"UnhandledRejection",c=o?s.message:String(s);e.emit({type:"error",body:v(`${i}: ${c}`,512),severity:"ERROR",timeUnixMs:Date.now(),attributes:{"exception.type":i,"exception.message":c,"exception.stacktrace":o?s.stack??"":"","web.error.kind":"unhandledrejection"}})}catch{}};return window.addEventListener("error",t),window.addEventListener("unhandledrejection",n),{teardown(){window.removeEventListener("error",t),window.removeEventListener("unhandledrejection",n)}}};var ge=["button","a[href]","summary",'[role="button"]','[role="link"]','[role="tab"]','[role="menuitem"]','[role="menuitemcheckbox"]','[role="menuitemradio"]','[role="option"]','[role="checkbox"]','[role="switch"]','input[type="submit"]','input[type="button"]','input[type="reset"]'].join(","),w=(e)=>{if(!e)return;let t=e.replace(/\s+/g," ").trim();if(!t)return;return t.length>64?`${t.slice(0,64)}…`:t},K=(e)=>{try{return e.closest("[data-sazabi-mask]")!==null}catch{return!0}},W=(e)=>{let t=w(e.getAttribute("data-sazabi-name"));if(t)return t;let n=w(e.getAttribute("aria-label"));if(n)return n;let r=e.getAttribute("aria-labelledby");if(!r)return;return w(r.split(/\s+/).map((s)=>document.getElementById(s)?.textContent??"").join(" "))},F=(e)=>{try{if(K(e))return;let t=W(e);if(t)return t;if(e instanceof HTMLInputElement||e instanceof HTMLTextAreaElement||e instanceof HTMLSelectElement)for(let r of Array.from(e.labels??[])){let s=w(r.textContent);if(s)return s}let n=w(e.getAttribute("placeholder"));if(n)return n;return w(e.getAttribute("name"))}catch{return}},G=(e)=>{try{let t=e.closest(ge);if(!t||K(t))return;let n=W(t);if(n)return n;if(t instanceof HTMLInputElement)return w(t.getAttribute("value"));return w(t.textContent)}catch{return}};var B=1000,Y=30,ye=4,Ee=800,be=200,ve="a,button,[role=button],input,select,textarea,label,summary,[tabindex],[onclick]",O=(e)=>{let t=e.getAttribute("data-testid");if(t)return`[data-testid="${t}"]`;if(e.id)return`#${e.id}`;let n=[],r=e;while(r&&n.length<3){let s=r.tagName.toLowerCase();if(r.id){n.unshift(`#${r.id}`);break}let o=Array.from(r.classList).slice(0,2);if(o.length>0)s+=`.${o.join(".")}`;n.unshift(s),r=r.parentElement}return n.join(" > ").slice(0,be)},j=(e)=>{let t=0,n=0,r=[],s=Number.NEGATIVE_INFINITY,o=new Set,i=new MutationObserver(()=>{t+=1});try{i.observe(document.documentElement,{subtree:!0,childList:!0,attributes:!0,characterData:!0})}catch{}let c=(m)=>{try{let y=m.target;if(!(y instanceof Element))return;let a=performance.now(),u=O(y),d=y.tagName.toLowerCase(),l=G(y);e.emit({type:"click",body:l?`click "${l}"`:`click ${u}`,severity:"INFO",timeUnixMs:Date.now(),attributes:{"web.element.selector":u,"web.element.tag":d,"web.element.name":l}}),r.push({time:a,x:m.clientX,y:m.clientY});while(r.length>0&&a-r[0].time>B)r.shift();let f=r.filter((g)=>Math.abs(g.x-m.clientX)<=Y&&Math.abs(g.y-m.clientY)<=Y);if(f.length>=ye&&a-s>B)s=a,e.emit({type:"rage_click",body:l?`rage click "${l}"`:`rage click ${u}`,severity:"WARN",timeUnixMs:Date.now(),attributes:{"web.element.selector":u,"web.element.tag":d,"web.element.name":l,"web.click_count":f.length}});if(y.closest(ve)){let g=t,S=n,h=window.setTimeout(()=>{o.delete(h);try{if(t===g&&n===S)e.emit({type:"dead_click",body:l?`dead click "${l}"`:`dead click ${u}`,severity:"WARN",timeUnixMs:Date.now(),attributes:{"web.element.selector":u,"web.element.tag":d,"web.element.name":l}})}catch{}},Ee);o.add(h)}}catch{}};return document.addEventListener("click",c,{capture:!0,passive:!0}),{notifyNavigation(){n+=1},teardown(){document.removeEventListener("click",c,{capture:!0}),i.disconnect();for(let m of o)window.clearTimeout(m);o.clear()}}};var we=1e4,Se=20,he=new Set(["button","submit","reset","image","checkbox","radio","range","file","color"]),Ie=(e)=>{if(e instanceof HTMLInputElement){let t=(e.type||"text").toLowerCase();return he.has(t)?void 0:t}if(e instanceof HTMLTextAreaElement)return"textarea";if(e instanceof HTMLSelectElement)return"select";if(e instanceof HTMLElement&&e.isContentEditable)return"contenteditable";return},X=(e)=>{let t=new Map,n=(a,u)=>{t.delete(a.element);try{e.emit({type:"input",body:a.name?`input "${a.name}"`:`input ${a.selector}`,severity:"INFO",timeUnixMs:a.startUnixMs,attributes:{"web.element.selector":a.selector,"web.element.name":a.name,"web.input.field_type":a.fieldType,"web.input.edit_count":a.editCount,"web.input.duration_ms":Math.max(0,Math.round(a.lastInputPerf-a.startPerf)),...a.pasted?{"web.input.pasted":!0}:{},"web.input.ended_by":u}})}catch{}},r=(a)=>{for(let u of Array.from(t.values()))n(u,a)},s=(a)=>{for(let u of Array.from(t.values()))if(a-u.lastInputPerf>we)n(u,"idle")},o=(a)=>{try{let u=performance.now();s(u);let d=a.target,l=Ie(d);if(l===void 0||!(d instanceof Element))return;if(a.type==="change"&&l!=="select")return;let f=t.get(d);if(!f){if(t.size>=Se)return;f={element:d,selector:O(d),name:F(d),fieldType:l,startUnixMs:Date.now(),startPerf:u,lastInputPerf:u,editCount:0,pasted:!1},t.set(d,f)}f.editCount+=1,f.lastInputPerf=u;let g=a.inputType;if(typeof g==="string"&&g.startsWith("insertFromPaste"))f.pasted=!0;if(a.type==="change"&&l==="select")n(f,"change")}catch{}},i=(a)=>{try{let u=a.target;if(u instanceof Element){let d=t.get(u);if(d)n(d,"blur")}}catch{}},c=(a)=>{try{if(a.key!=="Enter")return;let u=a.target;if(u instanceof Element){let d=t.get(u);if(d)n(d,"enter")}}catch{}},m=()=>{if(document.visibilityState==="hidden")r("hidden")},y=()=>{r("unload")};return document.addEventListener("input",o,{capture:!0,passive:!0}),document.addEventListener("change",o,{capture:!0,passive:!0}),document.addEventListener("focusout",i,{capture:!0,passive:!0}),document.addEventListener("keydown",c,{capture:!0,passive:!0}),document.addEventListener("visibilitychange",m),window.addEventListener("pagehide",y),{notifyNavigation(){r("navigation")},teardown(){document.removeEventListener("input",o,{capture:!0}),document.removeEventListener("change",o,{capture:!0}),document.removeEventListener("focusout",i,{capture:!0}),document.removeEventListener("keydown",c,{capture:!0}),document.removeEventListener("visibilitychange",m),window.removeEventListener("pagehide",y),r("unload")}}};var Q=(e)=>{if(typeof PerformanceObserver>"u")return{teardown(){}};let t=new Set,n=(o)=>{let i;try{i=new URL(o).origin}catch{return}if(t.has(i))return;t.add(i);let c=`requests to ${i} bypass SDK instrumentation (fetch/XHR captured pre-init). Fix: import "@sazabi/browser/register" first.`;e.emit({type:"log",body:c,severity:"WARN",timeUnixMs:Date.now(),attributes:{"web.sdk.diagnostic":"instrumentation_gap","web.sdk.bypassed_origin":i}});try{console.warn(`${R} ${c}`)}catch{}},r=(o)=>{try{if(o.initiatorType!=="fetch"&&o.initiatorType!=="xmlhttprequest")return;let i=o.name;if(e.isInternalUrl(i))return;if(J(i,o.startTime))return;let c=o.responseStatus??0,m=Math.round(performance.timeOrigin+o.startTime+o.duration);if(e.emit({type:"network",body:`request ${q(i)} → ${c>0?c:"observed"}`,severity:c>0?z(c):"INFO",timeUnixMs:m,attributes:{"http.response.status_code":c>0?c:void 0,"url.full":i,"web.network.kind":o.initiatorType==="fetch"?"fetch":"xhr","web.network.duration_ms":Math.round(o.duration),"web.network.source":"resource-timing"}}),e.isInjectionTarget(i))n(i)}catch{}},s;try{s=new PerformanceObserver((o)=>{for(let i of o.getEntries())r(i)}),s.observe({type:"resource",buffered:!0})}catch{return{teardown(){}}}return{teardown(){try{s.disconnect()}catch{}}}};var Ae=()=>{let e=new Uint8Array(8);return crypto.getRandomValues(e),Array.from(e,(t)=>t.toString(16).padStart(2,"0")).join("")},T=(e)=>`${e}_${Date.now().toString(36)}${Ae()}`,Z=(e)=>{let t=new Map;return{get(n){try{return e().getItem(n)}catch{return t.get(n)??null}},set(n,r){try{e().setItem(n,r)}catch{t.set(n,r)}},remove(n){t.delete(n);try{e().removeItem(n)}catch{}}}},_e=(e)=>{if(!e)return;try{let t=JSON.parse(e);if(typeof t==="object"&&t!==null&&typeof t.id==="string"&&typeof t.startedAt==="number"&&typeof t.lastActivityAt==="number")return t}catch{}return},ee=()=>{let e=Z(()=>window.localStorage),t=Z(()=>window.sessionStorage),n=0,r=()=>{let i=Date.now(),c=_e(e.get("sazabi.session"));if(c&&i-c.lastActivityAt<=1800000&&i-c.startedAt<=86400000)return c;let m={id:T("sess"),startedAt:i,lastActivityAt:i};return e.set("sazabi.session",JSON.stringify(m)),n=i,m},s=t.get("sazabi.windowId");if(!s)s=T("win"),t.set("sazabi.windowId",s);let o=()=>{let i=Date.now();e.set("sazabi.session",JSON.stringify({id:T("sess"),startedAt:i,lastActivityAt:i})),n=i,s=T("win"),t.set("sazabi.windowId",s)};return{getSessionId(){return r().id},getWindowId(){return s},getDistinctId(){return e.get("sazabi.distinctId")??void 0},setDistinctId(i){let c=e.get("sazabi.distinctId")??void 0;if(c!==void 0&&c!==i)o();e.set("sazabi.distinctId",i)},reset(){e.remove("sazabi.distinctId"),o()},touch(){let i=Date.now(),c=r();if(i-n>=5000)e.set("sazabi.session",JSON.stringify({...c,lastActivityAt:i})),n=i}}};var Te=/^[0-9a-f]{32}$/,Ce=/^[0-9a-f]{16}$/,xe="0".repeat(32),Re="0".repeat(16),te=(e)=>{let t=new Uint8Array(e);do crypto.getRandomValues(t);while(t.every((n)=>n===0));return Array.from(t,(n)=>n.toString(16).padStart(2,"0")).join("")},Oe=(e)=>{if(typeof e!=="object"||e===null)return!1;let{traceId:t,spanId:n,traceFlags:r}=e;return typeof t==="string"&&Te.test(t)&&t!==xe&&typeof n==="string"&&Ce.test(n)&&n!==Re&&typeof r==="number"},Ne=Symbol.for("opentelemetry.js.api.1"),ke=Symbol.for("OpenTelemetry Context Key SPAN"),Le=()=>{try{let r=globalThis[Ne]?.context?.active?.()?.getValue?.(ke)?.spanContext?.();return Oe(r)?r:void 0}catch{return}},Me=(e)=>{let t=(e.traceFlags&255).toString(16).padStart(2,"0");return`00-${e.traceId}-${e.spanId}-${t}`},De=(e)=>{try{return e.traceState?.serialize()||void 0}catch{return}},ne=(e)=>{let t=()=>({traceId:te(16),spanId:te(8),traceFlags:e.sampledFlag?1:0});return{forRequest(){let n=Le()??t(),r={traceparent:Me(n)},s=De(n);if(s)r.tracestate=s;return{headers:r,traceId:n.traceId,spanId:n.spanId}}}};var C="@sazabi/browser",A="0.2.0";var Pe={DEBUG:5,INFO:9,WARN:13,ERROR:17},He=1024,Ve=(e)=>{if(typeof e==="boolean")return{boolValue:e};if(typeof e==="number")return Number.isInteger(e)?{intValue:String(e)}:{doubleValue:e};return{stringValue:v(e)}},re=(e)=>{let t=[];for(let[n,r]of Object.entries(e)){if(r===void 0)continue;t.push({key:n,value:Ve(r)})}return t},oe=(e,t)=>{let n={timeUnixNano:`${e.timeUnixMs}000000`,severityNumber:Pe[e.severity],severityText:e.severity,body:{stringValue:v(e.body,He)},attributes:re({...t,...e.attributes})};if(e.traceId)n.traceId=e.traceId;if(e.spanId)n.spanId=e.spanId;return n},ie=(e)=>{let t=[],n=0,r,s=!1,o=(d)=>JSON.stringify({resourceLogs:[{resource:{attributes:re(e.resourceAttributes)},scopeLogs:[{scope:{name:C,version:A},logRecords:d}]}]}),i=o([]).length+64,c=Math.max(4096,e.maxBatchBytes-i),m=()=>{if(r!==void 0)window.clearTimeout(r),r=void 0},y=()=>{if(r!==void 0||s)return;r=window.setTimeout(()=>{r=void 0,u()},e.flushIntervalMs)},a=()=>{let d=[],l=[],f=0;for(let g of t){if(l.length>0&&f+g.bytes>c)d.push(l),l=[],f=0;l.push(g.record),f+=g.bytes}if(l.length>0)d.push(l);return t.length=0,n=0,d},u=async(d)=>{if(m(),t.length===0)return;let l=a().map((f)=>e.fetchImpl(e.url,{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${e.publicKey}`},body:o(f),keepalive:d?.keepalive===!0}).catch(()=>{}));await Promise.all(l)};return{enqueue(d){if(s)return;let l=JSON.stringify(d).length+1;t.push({record:d,bytes:l}),n+=l;while(t.length>e.maxQueuedEvents){let f=t.shift();if(f)n-=f.bytes}if(n>=c)u();else y()},flush:u,async shutdown(){s=!0,await u()}}};var Ue=5000,Ke=57344,$e=500,We=["x-request-id","cf-ray","x-vercel-id","x-amz-cf-id","fly-request-id"],E,N=!1,_,x=!1,se=(e)=>{let t=window.fetch.bind(window),n=e.intakeHost.replace(/\/+$/,""),r=`${n}/v1/logs`,s=ee();if(x)s.reset(),x=!1;let o=_;if(_=void 0,o)s.setDistinctId(o.distinctId);let i=ie({url:r,publicKey:e.publicKey,resourceAttributes:{"service.name":e.serviceName,"service.version":e.serviceVersion,"deployment.environment":e.environment,"telemetry.sdk.name":C,"telemetry.sdk.version":A,"telemetry.sdk.language":"webjs","browser.user_agent":navigator.userAgent,"browser.language":navigator.language},fetchImpl:t,flushIntervalMs:e.flushIntervalMs??Ue,maxBatchBytes:e.maxBatchBytes??Ke,maxQueuedEvents:e.maxQueuedEvents??$e}),c=(p)=>{try{s.touch();let b={"web.event_type":p.type,"session.id":s.getSessionId(),"session.window_id":s.getWindowId(),"session.distinct_id":s.getDistinctId(),"web.page.url":window.location.href,"derived.source":"sdk"};i.enqueue(oe(p,b))}catch{}},m=(p)=>p.startsWith(n),y=(p)=>{try{c(p())}catch{}},a=[],u=U({emit:c});a.push(()=>u.teardown());let d=j({emit:c});a.push(()=>d.teardown());let l;if(e.input?.capture!==!1)l=X({emit:c}),a.push(()=>l?.teardown());let f=ce({emit:c,onNavigate:()=>{d.notifyNavigation(),l?.notifyNavigation()}});if(a.push(()=>f.teardown()),e.console?.capture!==!1){let p=V({emit:c,levels:e.console?.levels??["error","warn"]});a.push(()=>p.teardown())}let g=e.network??{},S=g.capture??!0,h=g.propagateTraceContext??!0;if(S||h){let p=le({emit:c,traceContext:ne({sampledFlag:g.sampledFlag??!1}),capture:S,propagateTraceContext:h,allowlist:g.allowlist??[],requestIdHeaders:g.requestIdHeaders??We,isInternalUrl:m});a.push(()=>p.teardown())}if(S&&g.resourceFallback!==!1){let p=Q({emit:c,isInternalUrl:m,isInjectionTarget:ue});a.push(()=>p.teardown())}let k=()=>{if(document.visibilityState==="hidden")i.flush({keepalive:!0})},L=()=>{i.flush({keepalive:!0})};if(document.addEventListener("visibilitychange",k),window.addEventListener("pagehide",L),a.push(()=>{document.removeEventListener("visibilitychange",k),window.removeEventListener("pagehide",L)}),E={identify(p,b){y(()=>(s.setDistinctId(p),{type:"custom",body:`identify ${p}`,severity:"INFO",timeUnixMs:Date.now(),attributes:{"web.custom.name":"identify",...b?I(b,"custom"):{}}}))},reset(){try{s.reset()}catch{}},addEvent(p,b){y(()=>({type:"custom",body:`custom ${p}`,severity:"INFO",timeUnixMs:Date.now(),attributes:{"web.custom.name":p,...b?I(b,"custom"):{}}}))},log(p,b,M){y(()=>({type:"log",body:b,severity:p,timeUnixMs:Date.now(),attributes:M?I(M):{}}))},flush(){return i.flush()},async shutdown(){for(let p of a.reverse())try{p()}catch{}de(),ae(),await i.shutdown()}},o)E.identify(o.distinctId,o.traits)},ht=(e)=>{if(typeof window>"u")return;if(N)return;if(N=!0,!e.publicKey||!e.intakeHost||!e.serviceName){console.warn("[@sazabi/browser] init() requires publicKey, intakeHost, and serviceName; SDK disabled.");return}if(e.consent===void 0){se(e);return}try{Promise.resolve(e.consent()).then((t)=>{if(t===!0)se(e)}).catch(()=>{})}catch{}},It=(e,t)=>{if(E)E.identify(e,t);else _={distinctId:e,traits:t}},At=()=>{if(E)E.reset();else x=!0,_=void 0},_t=(e,t)=>{E?.addEvent(e,t)},Tt=(e,t,n)=>{E?.log(e,t,n)},Ct=async()=>{await E?.flush()},xt=async()=>{let e=E;E=void 0,N=!1,_=void 0,x=!1,await e?.shutdown()};export{A as SDK_VERSION,_t as addEvent,Ct as flush,It as identify,ht as init,Tt as log,At as reset,xt as shutdown};
+
+//# debugId=FEBA357242D8ABFD64756E2164756E21
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1,21 @@
+{
+  "version": 3,
+  "sources": ["../src/attributes.ts", "../src/console.ts", "../src/errors.ts", "../src/element-name.ts", "../src/interactions.ts", "../src/input-capture.ts", "../src/resource-observer.ts", "../src/session.ts", "../src/trace-context.ts", "../src/version.ts", "../src/transport.ts", "../src/index.ts"],
+  "sourcesContent": [
+    "import type { EventAttributes } from \"./types\";\n\nconst MAX_VALUE_LENGTH = 4096;\nconst MAX_FLATTEN_DEPTH = 4;\n\nexport const truncateValue = (value: string, max = MAX_VALUE_LENGTH): string =>\n  value.length > max ? value.slice(0, max) : value;\n\n/**\n * Flatten nested metadata into dot-keyed scalar attributes. Non-scalar leaves\n * are JSON-stringified; strings are length-capped so a hostile or buggy page\n * cannot inflate rows.\n */\nexport const flattenAttributes = (\n  input: Record<string, unknown>,\n  prefix = \"\",\n  depth = 0,\n): EventAttributes => {\n  const result: EventAttributes = {};\n\n  for (const [key, rawValue] of Object.entries(input)) {\n    const fullKey = prefix ? `${prefix}.${key}` : key;\n\n    if (rawValue === null || rawValue === undefined) {\n      continue;\n    }\n\n    if (\n      typeof rawValue === \"object\" &&\n      !Array.isArray(rawValue) &&\n      depth < MAX_FLATTEN_DEPTH\n    ) {\n      Object.assign(\n        result,\n        flattenAttributes(\n          rawValue as Record<string, unknown>,\n          fullKey,\n          depth + 1,\n        ),\n      );\n      continue;\n    }\n\n    if (typeof rawValue === \"number\" || typeof rawValue === \"boolean\") {\n      result[fullKey] = rawValue;\n    } else if (typeof rawValue === \"string\") {\n      result[fullKey] = truncateValue(rawValue);\n    } else {\n      try {\n        result[fullKey] = truncateValue(JSON.stringify(rawValue) ?? \"\");\n      } catch {\n        // Circular or unserializable — drop rather than throw into the host.\n      }\n    }\n  }\n\n  return result;\n};\n",
+    "import { isWrapped, markWrapped } from \"./patch-marker\";\nimport type { ConsoleCaptureLevel, EventSeverity, WebEvent } from \"./types\";\n\nexport interface ConsoleCaptureOptions {\n  emit(event: WebEvent): void;\n  levels: ConsoleCaptureLevel[];\n}\n\nexport interface ConsoleCaptureHandle {\n  teardown(): void;\n}\n\n/** SDK-emitted console lines carry this prefix and are never re-captured. */\nexport const SDK_CONSOLE_PREFIX = \"[@sazabi/browser]\";\n\nconst SEVERITY_BY_LEVEL: Record<ConsoleCaptureLevel, EventSeverity> = {\n  error: \"ERROR\",\n  warn: \"WARN\",\n  info: \"INFO\",\n  debug: \"DEBUG\",\n};\n\nconst MAX_ARG_CHARS = 1_000;\nconst MAX_BODY_CHARS = 4_000;\n\nconst stringifyArg = (value: unknown): string => {\n  let text: string;\n  if (typeof value === \"string\") {\n    text = value;\n  } else if (value instanceof Error) {\n    text = `${value.name}: ${value.message}`;\n  } else {\n    try {\n      text = JSON.stringify(value) ?? String(value);\n    } catch {\n      text = String(value);\n    }\n  }\n  return text.length > MAX_ARG_CHARS\n    ? `${text.slice(0, MAX_ARG_CHARS)}…`\n    : text;\n};\n\n/**\n * Mirror selected console levels into the event stream as `log` events.\n * The original console method always runs first — devtools behavior is never\n * altered — and capture failures are swallowed. Lines the SDK itself prints\n * (prefixed with SDK_CONSOLE_PREFIX) are skipped to avoid self-capture.\n */\nexport const installConsoleCapture = (\n  options: ConsoleCaptureOptions,\n): ConsoleCaptureHandle => {\n  const restores: Array<() => void> = [];\n  let emitting = false;\n\n  for (const level of options.levels) {\n    const original = console[level];\n    if (typeof original !== \"function\" || isWrapped(original)) {\n      continue;\n    }\n\n    const wrapped = function (this: unknown, ...args: unknown[]): void {\n      original.apply(this ?? console, args);\n      if (emitting) return;\n      try {\n        if (\n          typeof args[0] === \"string\" &&\n          args[0].startsWith(SDK_CONSOLE_PREFIX)\n        ) {\n          return;\n        }\n        emitting = true;\n        const body = args.map(stringifyArg).join(\" \").slice(0, MAX_BODY_CHARS);\n        options.emit({\n          type: \"log\",\n          body: body || `console.${level}`,\n          severity: SEVERITY_BY_LEVEL[level],\n          timeUnixMs: Date.now(),\n          attributes: {\n            \"web.console.level\": level,\n          },\n        });\n      } catch {\n        // Capture failures must never surface to the host.\n      } finally {\n        emitting = false;\n      }\n    };\n\n    markWrapped(wrapped);\n    console[level] = wrapped as typeof original;\n    restores.push(() => {\n      if (console[level] === wrapped) {\n        console[level] = original;\n      }\n    });\n  }\n\n  return {\n    teardown() {\n      for (const restore of restores) {\n        try {\n          restore();\n        } catch {\n          // Best-effort restore.\n        }\n      }\n    },\n  };\n};\n",
+    "import { truncateValue } from \"./attributes\";\nimport type { WebEvent } from \"./types\";\n\nexport interface ErrorCaptureOptions {\n  emit(event: WebEvent): void;\n}\n\nexport interface ErrorCaptureHandle {\n  teardown(): void;\n}\n\nexport const installErrorCapture = (\n  options: ErrorCaptureOptions,\n): ErrorCaptureHandle => {\n  const onError = (event: ErrorEvent): void => {\n    try {\n      const error: unknown = event.error;\n      const exceptionType = error instanceof Error ? error.name : \"Error\";\n      const message = event.message || \"Unknown error\";\n\n      options.emit({\n        type: \"error\",\n        body: truncateValue(`${exceptionType}: ${message}`, 512),\n        severity: \"ERROR\",\n        timeUnixMs: Date.now(),\n        attributes: {\n          \"exception.type\": exceptionType,\n          \"exception.message\": message,\n          \"exception.stacktrace\":\n            error instanceof Error ? (error.stack ?? \"\") : \"\",\n          \"web.error.kind\": \"uncaught\",\n          \"web.error.filename\": event.filename || undefined,\n          \"web.error.lineno\": event.lineno || undefined,\n          \"web.error.colno\": event.colno || undefined,\n        },\n      });\n    } catch {\n      // Capture failures must never surface to the host.\n    }\n  };\n\n  const onUnhandledRejection = (event: PromiseRejectionEvent): void => {\n    try {\n      const reason: unknown = event.reason;\n      const isError = reason instanceof Error;\n      const exceptionType = isError ? reason.name : \"UnhandledRejection\";\n      const message = isError ? reason.message : String(reason);\n\n      options.emit({\n        type: \"error\",\n        body: truncateValue(`${exceptionType}: ${message}`, 512),\n        severity: \"ERROR\",\n        timeUnixMs: Date.now(),\n        attributes: {\n          \"exception.type\": exceptionType,\n          \"exception.message\": message,\n          \"exception.stacktrace\": isError ? (reason.stack ?? \"\") : \"\",\n          \"web.error.kind\": \"unhandledrejection\",\n        },\n      });\n    } catch {\n      // Capture failures must never surface to the host.\n    }\n  };\n\n  window.addEventListener(\"error\", onError);\n  window.addEventListener(\"unhandledrejection\", onUnhandledRejection);\n\n  return {\n    teardown() {\n      window.removeEventListener(\"error\", onError);\n      window.removeEventListener(\"unhandledrejection\", onUnhandledRejection);\n    },\n  };\n};\n",
+    "/**\n * Human-readable element names for timeline events — a pragmatic subset of\n * the ARIA accessible-name computation, biased hard toward developer-authored\n * sources. The bright line: app-authored static text (labels, aria-label,\n * placeholder, button captions) is capturable; user-reflected text (values,\n * selected options, data rendered into the DOM) is not. `data-sazabi-name`\n * overrides any element's reported name; `data-sazabi-mask` on an ancestor\n * suppresses name capture for the whole subtree.\n */\n\nconst MAX_NAME_CHARS = 64;\nconst NAME_ATTRIBUTE = \"data-sazabi-name\";\nconst MASK_ATTRIBUTE = \"data-sazabi-mask\";\n\n/**\n * Click-name eligibility: genuinely interactive elements only. Clicks on\n * plain containers (divs, table cells — where user content lives) get a\n * selector but never text.\n */\nconst INTERACTIVE_NAME_SELECTOR = [\n  \"button\",\n  \"a[href]\",\n  \"summary\",\n  '[role=\"button\"]',\n  '[role=\"link\"]',\n  '[role=\"tab\"]',\n  '[role=\"menuitem\"]',\n  '[role=\"menuitemcheckbox\"]',\n  '[role=\"menuitemradio\"]',\n  '[role=\"option\"]',\n  '[role=\"checkbox\"]',\n  '[role=\"switch\"]',\n  'input[type=\"submit\"]',\n  'input[type=\"button\"]',\n  'input[type=\"reset\"]',\n].join(\",\");\n\nconst normalizeName = (raw: string | null | undefined): string | undefined => {\n  if (!raw) return undefined;\n  const collapsed = raw.replace(/\\s+/g, \" \").trim();\n  if (!collapsed) return undefined;\n  return collapsed.length > MAX_NAME_CHARS\n    ? `${collapsed.slice(0, MAX_NAME_CHARS)}…`\n    : collapsed;\n};\n\nconst isMasked = (element: Element): boolean => {\n  try {\n    return element.closest(`[${MASK_ATTRIBUTE}]`) !== null;\n  } catch {\n    return true; // Fail closed: no name beats a leaked name.\n  }\n};\n\n/** Shared dev-authored sources: override attr → aria-label → aria-labelledby. */\nconst authoredName = (element: Element): string | undefined => {\n  const explicit = normalizeName(element.getAttribute(NAME_ATTRIBUTE));\n  if (explicit) return explicit;\n  const ariaLabel = normalizeName(element.getAttribute(\"aria-label\"));\n  if (ariaLabel) return ariaLabel;\n\n  const ids = element.getAttribute(\"aria-labelledby\");\n  if (!ids) return undefined;\n  return normalizeName(\n    ids\n      .split(/\\s+/)\n      .map((id) => document.getElementById(id)?.textContent ?? \"\")\n      .join(\" \"),\n  );\n};\n\n/**\n * Name for an input/textarea/select/contenteditable — developer-authored\n * sources only; the field's value and (for selects) the chosen option text\n * are never read.\n */\nexport const computeInputName = (element: Element): string | undefined => {\n  try {\n    if (isMasked(element)) return undefined;\n\n    const named = authoredName(element);\n    if (named) return named;\n\n    if (\n      element instanceof HTMLInputElement ||\n      element instanceof HTMLTextAreaElement ||\n      element instanceof HTMLSelectElement\n    ) {\n      for (const label of Array.from(element.labels ?? [])) {\n        const labelText = normalizeName(label.textContent);\n        if (labelText) return labelText;\n      }\n    }\n\n    const placeholder = normalizeName(element.getAttribute(\"placeholder\"));\n    if (placeholder) return placeholder;\n    return normalizeName(element.getAttribute(\"name\"));\n  } catch {\n    return undefined;\n  }\n};\n\n/**\n * Name for a click target: nearest interactive ancestor's accessible-ish\n * name. Residual risk is labels that interpolate user data (\"Delete 'My\n * Project'\") — that is app-authored markup, capped at 64 chars, and\n * suppressible via `data-sazabi-mask` / overridable via `data-sazabi-name`.\n */\nexport const computeClickName = (target: Element): string | undefined => {\n  try {\n    const interactive = target.closest(INTERACTIVE_NAME_SELECTOR);\n    if (!interactive || isMasked(interactive)) return undefined;\n\n    const named = authoredName(interactive);\n    if (named) return named;\n\n    if (interactive instanceof HTMLInputElement) {\n      // submit/button/reset inputs: the value attribute IS the caption.\n      return normalizeName(interactive.getAttribute(\"value\"));\n    }\n    return normalizeName(interactive.textContent);\n  } catch {\n    return undefined;\n  }\n};\n",
+    "import { computeClickName } from \"./element-name\";\nimport type { WebEvent } from \"./types\";\n\nexport interface InteractionCaptureOptions {\n  emit(event: WebEvent): void;\n}\n\nexport interface InteractionCaptureHandle {\n  /** Navigation counts as a click response for dead-click detection. */\n  notifyNavigation(): void;\n  teardown(): void;\n}\n\nconst RAGE_WINDOW_MS = 1000;\nconst RAGE_RADIUS_PX = 30;\nconst RAGE_CLICK_COUNT = 4;\nconst DEAD_CLICK_TIMEOUT_MS = 800;\nconst MAX_SELECTOR_LENGTH = 200;\n\nconst INTERACTIVE_SELECTOR =\n  \"a,button,[role=button],input,select,textarea,label,summary,[tabindex],[onclick]\";\n\n/** Short, stable-ish selector for an element; never includes text content. */\nexport const computeSelector = (element: Element): string => {\n  const testId = element.getAttribute(\"data-testid\");\n  if (testId) {\n    return `[data-testid=\"${testId}\"]`;\n  }\n  if (element.id) {\n    return `#${element.id}`;\n  }\n\n  const segments: string[] = [];\n  let current: Element | null = element;\n  while (current && segments.length < 3) {\n    let segment = current.tagName.toLowerCase();\n    if (current.id) {\n      segments.unshift(`#${current.id}`);\n      break;\n    }\n    const classes = Array.from(current.classList).slice(0, 2);\n    if (classes.length > 0) {\n      segment += `.${classes.join(\".\")}`;\n    }\n    segments.unshift(segment);\n    current = current.parentElement;\n  }\n  return segments.join(\" > \").slice(0, MAX_SELECTOR_LENGTH);\n};\n\ninterface RecentClick {\n  time: number;\n  x: number;\n  y: number;\n}\n\nexport const installInteractionCapture = (\n  options: InteractionCaptureOptions,\n): InteractionCaptureHandle => {\n  // Monotonic counters, not timestamps. `performance.now()` is coarsened\n  // (Chromium clamps it, and more so without cross-origin isolation), and the\n  // click -> handler -> microtask -> MutationObserver path finishes well inside\n  // one tick — measured 142/200 equal readings in the Chromium suite's own\n  // environment. Any timestamp comparison therefore has to guess about\n  // same-tick activity: `<=` called every snappy answered click dead, while `<`\n  // let activity that merely *preceded* a click suppress a genuine dead one.\n  // Counters captured at click time ask the exact question instead — \"did\n  // anything happen after this click?\" — with no dependence on clock\n  // resolution.\n  let domActivityGeneration = 0;\n  let navigationGeneration = 0;\n  const recentClicks: RecentClick[] = [];\n  // Not 0: performance.now() < 1s during early page life would read as\n  // \"just reported\" and suppress a genuine first-second rage burst.\n  let rageReportedAt = Number.NEGATIVE_INFINITY;\n  const pendingDeadClickTimers = new Set<number>();\n\n  const observer = new MutationObserver(() => {\n    domActivityGeneration += 1;\n  });\n  try {\n    observer.observe(document.documentElement, {\n      subtree: true,\n      childList: true,\n      attributes: true,\n      characterData: true,\n    });\n  } catch {\n    // Without mutation signal, dead clicks are simply never reported.\n  }\n\n  const onClick = (event: MouseEvent): void => {\n    try {\n      const target = event.target;\n      if (!(target instanceof Element)) {\n        return;\n      }\n\n      const now = performance.now();\n      const selector = computeSelector(target);\n      const tag = target.tagName.toLowerCase();\n      const name = computeClickName(target);\n\n      options.emit({\n        type: \"click\",\n        body: name ? `click \"${name}\"` : `click ${selector}`,\n        severity: \"INFO\",\n        timeUnixMs: Date.now(),\n        attributes: {\n          \"web.element.selector\": selector,\n          \"web.element.tag\": tag,\n          \"web.element.name\": name,\n        },\n      });\n\n      // Rage click: repeated clicks in a tight radius within the window.\n      recentClicks.push({ time: now, x: event.clientX, y: event.clientY });\n      while (\n        recentClicks.length > 0 &&\n        now - (recentClicks[0] as RecentClick).time > RAGE_WINDOW_MS\n      ) {\n        recentClicks.shift();\n      }\n      const clustered = recentClicks.filter(\n        (click) =>\n          Math.abs(click.x - event.clientX) <= RAGE_RADIUS_PX &&\n          Math.abs(click.y - event.clientY) <= RAGE_RADIUS_PX,\n      );\n      if (\n        clustered.length >= RAGE_CLICK_COUNT &&\n        now - rageReportedAt > RAGE_WINDOW_MS\n      ) {\n        rageReportedAt = now;\n        options.emit({\n          type: \"rage_click\",\n          body: name ? `rage click \"${name}\"` : `rage click ${selector}`,\n          severity: \"WARN\",\n          timeUnixMs: Date.now(),\n          attributes: {\n            \"web.element.selector\": selector,\n            \"web.element.tag\": tag,\n            \"web.element.name\": name,\n            \"web.click_count\": clustered.length,\n          },\n        });\n      }\n\n      // Dead click: an interactive target where nothing observable follows.\n      if (target.closest(INTERACTIVE_SELECTOR)) {\n        const domGenAtClick = domActivityGeneration;\n        const navGenAtClick = navigationGeneration;\n        const timer = window.setTimeout(() => {\n          pendingDeadClickTimers.delete(timer);\n          try {\n            // Unchanged counters mean nothing observable followed the click.\n            if (\n              domActivityGeneration === domGenAtClick &&\n              navigationGeneration === navGenAtClick\n            ) {\n              options.emit({\n                type: \"dead_click\",\n                body: name ? `dead click \"${name}\"` : `dead click ${selector}`,\n                severity: \"WARN\",\n                timeUnixMs: Date.now(),\n                attributes: {\n                  \"web.element.selector\": selector,\n                  \"web.element.tag\": tag,\n                  \"web.element.name\": name,\n                },\n              });\n            }\n          } catch {\n            // Never throw from a timer into the host.\n          }\n        }, DEAD_CLICK_TIMEOUT_MS);\n        pendingDeadClickTimers.add(timer);\n      }\n    } catch {\n      // Capture failures must never surface to the host.\n    }\n  };\n\n  document.addEventListener(\"click\", onClick, { capture: true, passive: true });\n\n  return {\n    notifyNavigation() {\n      navigationGeneration += 1;\n    },\n    teardown() {\n      document.removeEventListener(\"click\", onClick, { capture: true });\n      observer.disconnect();\n      for (const timer of pendingDeadClickTimers) {\n        window.clearTimeout(timer);\n      }\n      pendingDeadClickTimers.clear();\n    },\n  };\n};\n",
+    "import { computeInputName } from \"./element-name\";\nimport { computeSelector } from \"./interactions\";\nimport type { WebEvent } from \"./types\";\n\nexport interface InputCaptureOptions {\n  emit(event: WebEvent): void;\n}\n\nexport interface InputCaptureHandle {\n  /** SPA navigation ends any open episodes. */\n  notifyNavigation(): void;\n  teardown(): void;\n}\n\nconst IDLE_END_MS = 10_000;\nconst MAX_TRACKED_EPISODES = 20;\n\n/** Input types that are click-like toggles, not typing surfaces. */\nconst NON_TEXT_INPUT_TYPES = new Set([\n  \"button\",\n  \"submit\",\n  \"reset\",\n  \"image\",\n  \"checkbox\",\n  \"radio\",\n  \"range\",\n  \"file\",\n  \"color\",\n]);\n\ntype EpisodeEndReason =\n  | \"blur\"\n  | \"enter\"\n  | \"change\"\n  | \"idle\"\n  | \"navigation\"\n  | \"hidden\"\n  | \"unload\";\n\ninterface InputEpisode {\n  element: Element;\n  selector: string;\n  name?: string;\n  fieldType: string;\n  startUnixMs: number;\n  startPerf: number;\n  lastInputPerf: number;\n  editCount: number;\n  pasted: boolean;\n}\n\nconst editableFieldType = (target: EventTarget | null): string | undefined => {\n  if (target instanceof HTMLInputElement) {\n    const type = (target.type || \"text\").toLowerCase();\n    return NON_TEXT_INPUT_TYPES.has(type) ? undefined : type;\n  }\n  if (target instanceof HTMLTextAreaElement) return \"textarea\";\n  if (target instanceof HTMLSelectElement) return \"select\";\n  if (target instanceof HTMLElement && target.isContentEditable) {\n    return \"contenteditable\";\n  }\n  return undefined;\n};\n\n/**\n * Field-interaction episodes: one `input` event per engagement with an\n * editable element, not per keystroke. The event is timestamped at episode\n * START (so the timeline reads causally: typed → the request that followed)\n * and emitted when the episode ends — blur, Enter, ~10s idle, SPA\n * navigation, tab hidden, or teardown.\n *\n * Privacy invariants: `event.data`, field values, selected option text, and\n * key identities are never read (Enter is inspected solely as a boundary and\n * never recorded); no value derivatives, including length. Names come from\n * developer-authored sources only (see element-name.ts).\n */\nexport const installInputCapture = (\n  options: InputCaptureOptions,\n): InputCaptureHandle => {\n  const episodes = new Map<Element, InputEpisode>();\n\n  const endEpisode = (\n    episode: InputEpisode,\n    endedBy: EpisodeEndReason,\n  ): void => {\n    episodes.delete(episode.element);\n    try {\n      options.emit({\n        type: \"input\",\n        body: episode.name\n          ? `input \"${episode.name}\"`\n          : `input ${episode.selector}`,\n        severity: \"INFO\",\n        timeUnixMs: episode.startUnixMs,\n        attributes: {\n          \"web.element.selector\": episode.selector,\n          \"web.element.name\": episode.name,\n          \"web.input.field_type\": episode.fieldType,\n          \"web.input.edit_count\": episode.editCount,\n          \"web.input.duration_ms\": Math.max(\n            0,\n            Math.round(episode.lastInputPerf - episode.startPerf),\n          ),\n          ...(episode.pasted ? { \"web.input.pasted\": true } : {}),\n          \"web.input.ended_by\": endedBy,\n        },\n      });\n    } catch {\n      // Capture failures must never surface to the host.\n    }\n  };\n\n  const endAll = (endedBy: EpisodeEndReason): void => {\n    for (const episode of Array.from(episodes.values())) {\n      endEpisode(episode, endedBy);\n    }\n  };\n\n  const sweepIdle = (now: number): void => {\n    for (const episode of Array.from(episodes.values())) {\n      if (now - episode.lastInputPerf > IDLE_END_MS) {\n        endEpisode(episode, \"idle\");\n      }\n    }\n  };\n\n  const onInput = (event: Event): void => {\n    try {\n      const now = performance.now();\n      sweepIdle(now);\n\n      const target = event.target;\n      const fieldType = editableFieldType(target);\n      if (fieldType === undefined || !(target instanceof Element)) {\n        return;\n      }\n      // `change` matters only for selects (option committed): for text\n      // fields it fires at commit time and would double-count the episode.\n      if (event.type === \"change\" && fieldType !== \"select\") {\n        return;\n      }\n\n      let episode = episodes.get(target);\n      if (!episode) {\n        if (episodes.size >= MAX_TRACKED_EPISODES) {\n          return; // Safety valve; the idle sweep keeps this map tiny.\n        }\n        episode = {\n          element: target,\n          selector: computeSelector(target),\n          name: computeInputName(target),\n          fieldType,\n          startUnixMs: Date.now(),\n          startPerf: now,\n          lastInputPerf: now,\n          editCount: 0,\n          pasted: false,\n        };\n        episodes.set(target, episode);\n      }\n\n      episode.editCount += 1;\n      episode.lastInputPerf = now;\n      // Only the paste marker is read off the event — never `data`/values.\n      const inputType = (event as InputEvent).inputType;\n      if (\n        typeof inputType === \"string\" &&\n        inputType.startsWith(\"insertFromPaste\")\n      ) {\n        episode.pasted = true;\n      }\n\n      // A select commits atomically on change; there is no blur to wait for\n      // (programmatic/JS-driven selects never focus the element).\n      if (event.type === \"change\" && fieldType === \"select\") {\n        endEpisode(episode, \"change\");\n      }\n    } catch {\n      // Capture failures must never surface to the host.\n    }\n  };\n\n  const onFocusOut = (event: Event): void => {\n    try {\n      const target = event.target;\n      if (target instanceof Element) {\n        const episode = episodes.get(target);\n        if (episode) endEpisode(episode, \"blur\");\n      }\n    } catch {\n      // Ignore.\n    }\n  };\n\n  const onKeyDown = (event: KeyboardEvent): void => {\n    try {\n      // Enter is the only key ever inspected, solely as an episode\n      // boundary; key identities are never recorded.\n      if (event.key !== \"Enter\") return;\n      const target = event.target;\n      if (target instanceof Element) {\n        const episode = episodes.get(target);\n        if (episode) endEpisode(episode, \"enter\");\n      }\n    } catch {\n      // Ignore.\n    }\n  };\n\n  const onVisibilityChange = (): void => {\n    if (document.visibilityState === \"hidden\") {\n      endAll(\"hidden\");\n    }\n  };\n  const onPageHide = (): void => {\n    endAll(\"unload\");\n  };\n\n  document.addEventListener(\"input\", onInput, { capture: true, passive: true });\n  // Selects commit through `change`; some drivers/frameworks emit it without\n  // a preceding `input`.\n  document.addEventListener(\"change\", onInput, {\n    capture: true,\n    passive: true,\n  });\n  document.addEventListener(\"focusout\", onFocusOut, {\n    capture: true,\n    passive: true,\n  });\n  document.addEventListener(\"keydown\", onKeyDown, {\n    capture: true,\n    passive: true,\n  });\n  document.addEventListener(\"visibilitychange\", onVisibilityChange);\n  window.addEventListener(\"pagehide\", onPageHide);\n\n  return {\n    notifyNavigation() {\n      endAll(\"navigation\");\n    },\n    teardown() {\n      document.removeEventListener(\"input\", onInput, { capture: true });\n      document.removeEventListener(\"change\", onInput, { capture: true });\n      document.removeEventListener(\"focusout\", onFocusOut, { capture: true });\n      document.removeEventListener(\"keydown\", onKeyDown, { capture: true });\n      document.removeEventListener(\"visibilitychange\", onVisibilityChange);\n      window.removeEventListener(\"pagehide\", onPageHide);\n      endAll(\"unload\");\n    },\n  };\n};\n",
+    "import { SDK_CONSOLE_PREFIX } from \"./console\";\nimport { consumeWrapperSeen } from \"./network\";\nimport { severityForStatus, urlPath } from \"./network-event-format\";\nimport type { WebEvent } from \"./types\";\n\nexport interface ResourceObserverOptions {\n  emit(event: WebEvent): void;\n  /** SDK-internal endpoints: never reported. */\n  isInternalUrl(url: string): boolean;\n  /** Would the active config have injected trace context into this URL? */\n  isInjectionTarget(url: string): boolean;\n}\n\nexport interface ResourceObserverHandle {\n  teardown(): void;\n}\n\n/**\n * Patch-independent network visibility: PerformanceObserver resource timing\n * sees every fetch/XHR the page performs — including ones issued by clients\n * that captured the native functions before the SDK patched (`buffered: true`\n * also replays requests from before init). Wrapper-captured requests are\n * deduped out via the wrapper-seen ledger; the leftovers get a degraded\n * network event (no method, no trace id — observation cannot inject), plus a\n * once-per-origin instrumentation-gap diagnostic when the URL was an\n * injection target, so bypass is a visible signal instead of silent loss.\n */\nexport const installResourceObserver = (\n  options: ResourceObserverOptions,\n): ResourceObserverHandle => {\n  if (typeof PerformanceObserver === \"undefined\") {\n    return { teardown() {} };\n  }\n\n  const diagnosedOrigins = new Set<string>();\n\n  const diagnoseBypass = (url: string): void => {\n    let origin: string;\n    try {\n      origin = new URL(url).origin;\n    } catch {\n      return;\n    }\n    if (diagnosedOrigins.has(origin)) return;\n    diagnosedOrigins.add(origin);\n\n    const message = `requests to ${origin} bypass SDK instrumentation (fetch/XHR captured pre-init). Fix: import \"@sazabi/browser/register\" first.`;\n    options.emit({\n      type: \"log\",\n      body: message,\n      severity: \"WARN\",\n      timeUnixMs: Date.now(),\n      attributes: {\n        \"web.sdk.diagnostic\": \"instrumentation_gap\",\n        \"web.sdk.bypassed_origin\": origin,\n      },\n    });\n    try {\n      console.warn(`${SDK_CONSOLE_PREFIX} ${message}`);\n    } catch {\n      // Console unavailability is not our problem.\n    }\n  };\n\n  const handleEntry = (entry: PerformanceResourceTiming): void => {\n    try {\n      if (\n        entry.initiatorType !== \"fetch\" &&\n        entry.initiatorType !== \"xmlhttprequest\"\n      ) {\n        return;\n      }\n      const url = entry.name;\n      if (options.isInternalUrl(url)) return;\n      if (consumeWrapperSeen(url, entry.startTime)) return;\n\n      // Typed required in current lib.dom, but absent in older engines.\n      const status = (entry.responseStatus as number | undefined) ?? 0;\n      const completedAtMs = Math.round(\n        performance.timeOrigin + entry.startTime + entry.duration,\n      );\n\n      options.emit({\n        type: \"network\",\n        body: `request ${urlPath(url)} → ${status > 0 ? status : \"observed\"}`,\n        severity: status > 0 ? severityForStatus(status) : \"INFO\",\n        timeUnixMs: completedAtMs,\n        attributes: {\n          \"http.response.status_code\": status > 0 ? status : undefined,\n          \"url.full\": url,\n          \"web.network.kind\": entry.initiatorType === \"fetch\" ? \"fetch\" : \"xhr\",\n          \"web.network.duration_ms\": Math.round(entry.duration),\n          \"web.network.source\": \"resource-timing\",\n        },\n      });\n\n      if (options.isInjectionTarget(url)) {\n        diagnoseBypass(url);\n      }\n    } catch {\n      // Observation failures must never surface to the host.\n    }\n  };\n\n  let observer: PerformanceObserver;\n  try {\n    observer = new PerformanceObserver((list) => {\n      for (const entry of list.getEntries()) {\n        handleEntry(entry as PerformanceResourceTiming);\n      }\n    });\n    observer.observe({ type: \"resource\", buffered: true });\n  } catch {\n    return { teardown() {} };\n  }\n\n  return {\n    teardown() {\n      try {\n        observer.disconnect();\n      } catch {\n        // Best-effort.\n      }\n    },\n  };\n};\n",
+    "const SESSION_STORAGE_KEY = \"sazabi.session\";\nconst WINDOW_STORAGE_KEY = \"sazabi.windowId\";\nconst DISTINCT_STORAGE_KEY = \"sazabi.distinctId\";\n\nconst SESSION_IDLE_MS = 30 * 60 * 1000;\nconst SESSION_MAX_MS = 24 * 60 * 60 * 1000;\n/** Throttle localStorage activity writes; click bursts must not spam storage. */\nconst ACTIVITY_PERSIST_INTERVAL_MS = 5_000;\n\ninterface StoredSession {\n  id: string;\n  startedAt: number;\n  lastActivityAt: number;\n}\n\nexport interface SessionManager {\n  getSessionId(): string;\n  getWindowId(): string;\n  getDistinctId(): string | undefined;\n  /**\n   * Set the client-asserted identity. Switching from one identity directly\n   * to a different one rotates the session and window ids so two users on a\n   * shared device never thread into one timeline.\n   */\n  setDistinctId(distinctId: string): void;\n  /** Logout: clear identity and rotate both session and window ids. */\n  reset(): void;\n  /** Record user activity; may rotate the session on idle/max-age expiry. */\n  touch(): void;\n}\n\nconst randomSuffix = (): string => {\n  const bytes = new Uint8Array(8);\n  crypto.getRandomValues(bytes);\n  return Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n};\n\nconst newId = (prefix: string): string =>\n  `${prefix}_${Date.now().toString(36)}${randomSuffix()}`;\n\n/**\n * Storage access that degrades to in-memory when storage is unavailable\n * (Safari private mode, disabled cookies, sandboxed iframes). A degraded\n * session is per-page rather than cross-tab — acceptable fallback.\n */\nconst createSafeStorage = (\n  getStore: () => Storage,\n): {\n  get(key: string): string | null;\n  set(key: string, value: string): void;\n  remove(key: string): void;\n} => {\n  const memory = new Map<string, string>();\n  return {\n    get(key) {\n      try {\n        return getStore().getItem(key);\n      } catch {\n        return memory.get(key) ?? null;\n      }\n    },\n    set(key, value) {\n      try {\n        getStore().setItem(key, value);\n      } catch {\n        memory.set(key, value);\n      }\n    },\n    remove(key) {\n      memory.delete(key);\n      try {\n        getStore().removeItem(key);\n      } catch {\n        // Fallback map already cleared.\n      }\n    },\n  };\n};\n\nconst parseStoredSession = (raw: string | null): StoredSession | undefined => {\n  if (!raw) return undefined;\n  try {\n    const parsed: unknown = JSON.parse(raw);\n    if (\n      typeof parsed === \"object\" &&\n      parsed !== null &&\n      typeof (parsed as StoredSession).id === \"string\" &&\n      typeof (parsed as StoredSession).startedAt === \"number\" &&\n      typeof (parsed as StoredSession).lastActivityAt === \"number\"\n    ) {\n      return parsed as StoredSession;\n    }\n  } catch {\n    // Corrupt value — treat as absent and rotate.\n  }\n  return undefined;\n};\n\n/**\n * Cross-tab session identity. `session.id` is the visit (localStorage, shared\n * across tabs, last-writer-wins on rotation races — a split session is\n * cosmetic, not data loss). `session.window_id` is this tab (sessionStorage).\n * `session.distinct_id` is read through storage so identify/reset in one tab\n * is visible to sibling tabs on their next event.\n */\nexport const createSessionManager = (): SessionManager => {\n  const local = createSafeStorage(() => window.localStorage);\n  const session = createSafeStorage(() => window.sessionStorage);\n\n  let lastPersistedActivity = 0;\n\n  const readOrRotate = (): StoredSession => {\n    const now = Date.now();\n    const stored = parseStoredSession(local.get(SESSION_STORAGE_KEY));\n\n    if (\n      stored &&\n      now - stored.lastActivityAt <= SESSION_IDLE_MS &&\n      now - stored.startedAt <= SESSION_MAX_MS\n    ) {\n      return stored;\n    }\n\n    const fresh: StoredSession = {\n      id: newId(\"sess\"),\n      startedAt: now,\n      lastActivityAt: now,\n    };\n    local.set(SESSION_STORAGE_KEY, JSON.stringify(fresh));\n    lastPersistedActivity = now;\n    return fresh;\n  };\n\n  let windowId = session.get(WINDOW_STORAGE_KEY);\n  if (!windowId) {\n    windowId = newId(\"win\");\n    session.set(WINDOW_STORAGE_KEY, windowId);\n  }\n\n  const rotate = (): void => {\n    const now = Date.now();\n    local.set(\n      SESSION_STORAGE_KEY,\n      JSON.stringify({\n        id: newId(\"sess\"),\n        startedAt: now,\n        lastActivityAt: now,\n      }),\n    );\n    lastPersistedActivity = now;\n    windowId = newId(\"win\");\n    session.set(WINDOW_STORAGE_KEY, windowId);\n  };\n\n  return {\n    getSessionId() {\n      return readOrRotate().id;\n    },\n    getWindowId() {\n      return windowId as string;\n    },\n    getDistinctId() {\n      return local.get(DISTINCT_STORAGE_KEY) ?? undefined;\n    },\n    setDistinctId(id: string) {\n      const current = local.get(DISTINCT_STORAGE_KEY) ?? undefined;\n      if (current !== undefined && current !== id) {\n        // Identity switch without reset(): defensive rotation so the new\n        // user's events never join the previous user's session.\n        rotate();\n      }\n      local.set(DISTINCT_STORAGE_KEY, id);\n    },\n    reset() {\n      local.remove(DISTINCT_STORAGE_KEY);\n      rotate();\n    },\n    touch() {\n      const now = Date.now();\n      const current = readOrRotate();\n      if (now - lastPersistedActivity >= ACTIVITY_PERSIST_INTERVAL_MS) {\n        local.set(\n          SESSION_STORAGE_KEY,\n          JSON.stringify({ ...current, lastActivityAt: now }),\n        );\n        lastPersistedActivity = now;\n      }\n    },\n  };\n};\n",
+    "export interface RequestTraceContext {\n  /** Headers to inject (`traceparent`, and `tracestate` when present). */\n  headers: Record<string, string>;\n  traceId: string;\n  spanId: string;\n}\n\nexport interface TraceContextManager {\n  /** Trace context for one outgoing request, minted at request time. */\n  forRequest(): RequestTraceContext;\n}\n\n/** The subset of an OTel SpanContext this module consumes. */\nexport interface HostSpanContext {\n  traceId: string;\n  spanId: string;\n  traceFlags: number;\n  traceState?: { serialize(): string };\n}\n\nconst SAMPLED_FLAG = 0x1;\nconst TRACE_ID_PATTERN = /^[0-9a-f]{32}$/;\nconst SPAN_ID_PATTERN = /^[0-9a-f]{16}$/;\nconst ALL_ZERO_TRACE_ID = \"0\".repeat(32);\nconst ALL_ZERO_SPAN_ID = \"0\".repeat(16);\n\nconst randomHexId = (byteLength: number): string => {\n  const bytes = new Uint8Array(byteLength);\n  do {\n    crypto.getRandomValues(bytes);\n  } while (bytes.every((b) => b === 0)); // all-zero ids are invalid per W3C spec\n  return Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n};\n\nconst isValidHostSpanContext = (\n  candidate: unknown,\n): candidate is HostSpanContext => {\n  if (typeof candidate !== \"object\" || candidate === null) return false;\n  const { traceId, spanId, traceFlags } = candidate as HostSpanContext;\n  return (\n    typeof traceId === \"string\" &&\n    TRACE_ID_PATTERN.test(traceId) &&\n    traceId !== ALL_ZERO_TRACE_ID &&\n    typeof spanId === \"string\" &&\n    SPAN_ID_PATTERN.test(spanId) &&\n    spanId !== ALL_ZERO_SPAN_ID &&\n    typeof traceFlags === \"number\"\n  );\n};\n\n// ------------------------------------------------- host OTel interop --------\n// Dependency-free read of the host app's active span, through the\n// @opentelemetry/api package's own cross-copy compatibility contract: every\n// api copy interoperates via the global delegate registered at\n// Symbol.for(\"opentelemetry.js.api.1\"), and context keys are Symbol.for(...)\n// strings — that registry IS the mechanism by which independent api copies\n// find each other, which is what makes it load-bearing rather than private.\n// An integration test against the real api package (devDependency) pins the\n// contract; any shape drift degrades here to \"no active span\" and we mint\n// our own roots instead.\n\nconst OTEL_GLOBAL_KEY = Symbol.for(\"opentelemetry.js.api.1\");\nconst OTEL_SPAN_CONTEXT_KEY = Symbol.for(\"OpenTelemetry Context Key SPAN\");\n\ninterface OtelGlobalShape {\n  context?: {\n    active?: () => { getValue?: (key: symbol) => unknown } | undefined;\n  };\n}\n\nexport const readHostSpanContext = (): HostSpanContext | undefined => {\n  try {\n    const otelApi = (globalThis as Record<symbol, unknown>)[OTEL_GLOBAL_KEY] as\n      | OtelGlobalShape\n      | undefined;\n    const activeContext = otelApi?.context?.active?.();\n    const span = activeContext?.getValue?.(OTEL_SPAN_CONTEXT_KEY) as\n      | { spanContext?: () => unknown }\n      | undefined;\n    const candidate = span?.spanContext?.();\n    return isValidHostSpanContext(candidate) ? candidate : undefined;\n  } catch {\n    return undefined;\n  }\n};\n\nconst formatTraceparent = (spanContext: HostSpanContext): string => {\n  const flags = (spanContext.traceFlags & 0xff).toString(16).padStart(2, \"0\");\n  return `00-${spanContext.traceId}-${spanContext.spanId}-${flags}`;\n};\n\nconst readTraceState = (spanContext: HostSpanContext): string | undefined => {\n  try {\n    const serialized = spanContext.traceState?.serialize();\n    return serialized || undefined;\n  } catch {\n    return undefined;\n  }\n};\n\n/**\n * W3C trace context for outgoing requests — hand-rolled header formatting\n * (equivalence-tested against OTel's W3CTraceContextPropagator), zero\n * runtime dependencies. If the host app runs its own OTel and has an active\n * span, that span's context (including its flags and tracestate) is reused\n * so we join the customer's trace instead of forking a new one; otherwise a\n * fresh root is minted with the sampled flag defaulting to off (`-00`).\n */\nexport const createTraceContextManager = (options: {\n  sampledFlag: boolean;\n}): TraceContextManager => {\n  const mintRootSpanContext = (): HostSpanContext => ({\n    traceId: randomHexId(16),\n    spanId: randomHexId(8),\n    traceFlags: options.sampledFlag ? SAMPLED_FLAG : 0,\n  });\n\n  return {\n    forRequest() {\n      const spanContext = readHostSpanContext() ?? mintRootSpanContext();\n      const headers: Record<string, string> = {\n        traceparent: formatTraceparent(spanContext),\n      };\n      const traceState = readTraceState(spanContext);\n      if (traceState) {\n        headers.tracestate = traceState;\n      }\n      return {\n        headers,\n        traceId: spanContext.traceId,\n        spanId: spanContext.spanId,\n      };\n    },\n  };\n};\n",
+    "export const SDK_NAME = \"@sazabi/browser\";\nexport const SDK_VERSION = \"0.2.0\";\n",
+    "import { truncateValue } from \"./attributes\";\nimport type {\n  AttributeValue,\n  EventAttributes,\n  EventSeverity,\n  WebEvent,\n} from \"./types\";\nimport { SDK_NAME, SDK_VERSION } from \"./version\";\n\ntype OtlpAnyValue =\n  | { stringValue: string }\n  | { intValue: string }\n  | { doubleValue: number }\n  | { boolValue: boolean };\n\ninterface OtlpKeyValue {\n  key: string;\n  value: OtlpAnyValue;\n}\n\nexport interface OtlpLogRecord {\n  timeUnixNano: string;\n  severityNumber: number;\n  severityText: EventSeverity;\n  body: { stringValue: string };\n  attributes: OtlpKeyValue[];\n  /** OTLP/JSON encodes trace/span ids as hex (unlike proto3 JSON's base64). */\n  traceId?: string;\n  spanId?: string;\n}\n\nconst SEVERITY_NUMBERS: Record<EventSeverity, number> = {\n  DEBUG: 5,\n  INFO: 9,\n  WARN: 13,\n  ERROR: 17,\n};\n\nconst MAX_BODY_LENGTH = 1024;\n\nconst encodeValue = (value: AttributeValue): OtlpAnyValue => {\n  if (typeof value === \"boolean\") {\n    return { boolValue: value };\n  }\n  if (typeof value === \"number\") {\n    // proto3 JSON maps int64 to string; doubles stay numeric.\n    return Number.isInteger(value)\n      ? { intValue: String(value) }\n      : { doubleValue: value };\n  }\n  return { stringValue: truncateValue(value) };\n};\n\nconst encodeAttributes = (attributes: EventAttributes): OtlpKeyValue[] => {\n  const encoded: OtlpKeyValue[] = [];\n  for (const [key, value] of Object.entries(attributes)) {\n    if (value === undefined) {\n      continue;\n    }\n    encoded.push({ key, value: encodeValue(value) });\n  }\n  return encoded;\n};\n\nexport const encodeLogRecord = (\n  event: WebEvent,\n  baseAttributes: EventAttributes,\n): OtlpLogRecord => {\n  const record: OtlpLogRecord = {\n    timeUnixNano: `${event.timeUnixMs}000000`,\n    severityNumber: SEVERITY_NUMBERS[event.severity],\n    severityText: event.severity,\n    body: { stringValue: truncateValue(event.body, MAX_BODY_LENGTH) },\n    attributes: encodeAttributes({ ...baseAttributes, ...event.attributes }),\n  };\n  if (event.traceId) {\n    record.traceId = event.traceId;\n  }\n  if (event.spanId) {\n    record.spanId = event.spanId;\n  }\n  return record;\n};\n\nexport interface TransportOptions {\n  /** Full OTLP logs endpoint, e.g. `https://web.<region>.intake.<domain>/v1/logs`. */\n  url: string;\n  publicKey: string;\n  resourceAttributes: EventAttributes;\n  /**\n   * The fetch to deliver with — captured before the SDK's network patch\n   * installs, so exporter traffic can never recurse through our own wrapper\n   * or appear in the captured event stream.\n   */\n  fetchImpl: typeof fetch;\n  flushIntervalMs: number;\n  maxBatchBytes: number;\n  maxQueuedEvents: number;\n}\n\nexport interface Transport {\n  enqueue(record: OtlpLogRecord): void;\n  /**\n   * Deliver everything queued. `keepalive: true` is for unload paths — each\n   * request body must stay inside the browser's ~64 KiB keepalive budget,\n   * which enqueue-side chunking guarantees via `maxBatchBytes`.\n   */\n  flush(options?: { keepalive?: boolean }): Promise<void>;\n  shutdown(): Promise<void>;\n}\n\ninterface QueuedRecord {\n  record: OtlpLogRecord;\n  bytes: number;\n}\n\nexport const createTransport = (options: TransportOptions): Transport => {\n  const queue: QueuedRecord[] = [];\n  let queuedBytes = 0;\n  let timer: number | undefined;\n  let shutDown = false;\n\n  const buildEnvelope = (records: OtlpLogRecord[]): string =>\n    JSON.stringify({\n      resourceLogs: [\n        {\n          resource: {\n            attributes: encodeAttributes(options.resourceAttributes),\n          },\n          scopeLogs: [\n            {\n              scope: { name: SDK_NAME, version: SDK_VERSION },\n              logRecords: records,\n            },\n          ],\n        },\n      ],\n    });\n\n  const envelopeOverhead = buildEnvelope([]).length + 64;\n  const chunkBudget = Math.max(4096, options.maxBatchBytes - envelopeOverhead);\n\n  const clearTimer = (): void => {\n    if (timer !== undefined) {\n      window.clearTimeout(timer);\n      timer = undefined;\n    }\n  };\n\n  const scheduleFlush = (): void => {\n    if (timer !== undefined || shutDown) {\n      return;\n    }\n    timer = window.setTimeout(() => {\n      timer = undefined;\n      void flush();\n    }, options.flushIntervalMs);\n  };\n\n  const takeChunks = (): OtlpLogRecord[][] => {\n    const chunks: OtlpLogRecord[][] = [];\n    let current: OtlpLogRecord[] = [];\n    let currentBytes = 0;\n\n    for (const queued of queue) {\n      if (current.length > 0 && currentBytes + queued.bytes > chunkBudget) {\n        chunks.push(current);\n        current = [];\n        currentBytes = 0;\n      }\n      current.push(queued.record);\n      currentBytes += queued.bytes;\n    }\n    if (current.length > 0) {\n      chunks.push(current);\n    }\n\n    queue.length = 0;\n    queuedBytes = 0;\n    return chunks;\n  };\n\n  const flush = async (flushOptions?: {\n    keepalive?: boolean;\n  }): Promise<void> => {\n    clearTimer();\n    if (queue.length === 0) {\n      return;\n    }\n\n    const requests = takeChunks().map((chunk) =>\n      options\n        .fetchImpl(options.url, {\n          method: \"POST\",\n          headers: {\n            \"content-type\": \"application/json\",\n            authorization: `Bearer ${options.publicKey}`,\n          },\n          body: buildEnvelope(chunk),\n          keepalive: flushOptions?.keepalive === true,\n        })\n        .catch(() => {\n          // Delivery is best-effort; the SDK must stay silent on failure.\n        }),\n    );\n\n    await Promise.all(requests);\n  };\n\n  return {\n    enqueue(record) {\n      if (shutDown) {\n        return;\n      }\n      const bytes = JSON.stringify(record).length + 1;\n      queue.push({ record, bytes });\n      queuedBytes += bytes;\n\n      while (queue.length > options.maxQueuedEvents) {\n        const dropped = queue.shift();\n        if (dropped) {\n          queuedBytes -= dropped.bytes;\n        }\n      }\n\n      if (queuedBytes >= chunkBudget) {\n        void flush();\n      } else {\n        scheduleFlush();\n      }\n    },\n    flush,\n    async shutdown() {\n      shutDown = true;\n      await flush();\n    },\n  };\n};\n",
+    "import { flattenAttributes } from \"./attributes\";\nimport { installConsoleCapture } from \"./console\";\nimport { installErrorCapture } from \"./errors\";\nimport { type InputCaptureHandle, installInputCapture } from \"./input-capture\";\nimport { installInteractionCapture } from \"./interactions\";\nimport {\n  installNavigationCapture,\n  uninstallNavigationPatches,\n} from \"./navigation\";\nimport {\n  installNetworkCapture,\n  isActiveInjectionTarget,\n  uninstallNetworkPatches,\n} from \"./network\";\nimport { installResourceObserver } from \"./resource-observer\";\nimport { createSessionManager } from \"./session\";\nimport { createTraceContextManager } from \"./trace-context\";\nimport { createTransport, encodeLogRecord } from \"./transport\";\nimport type {\n  BrowserSdkConfig,\n  EventAttributes,\n  EventSeverity,\n  NetworkCaptureConfig,\n  WebEvent,\n} from \"./types\";\nimport { SDK_NAME, SDK_VERSION } from \"./version\";\n\nexport type {\n  AttributeValue,\n  BrowserSdkConfig,\n  ConsoleCaptureConfig,\n  ConsoleCaptureLevel,\n  EventAttributes,\n  EventSeverity,\n  InputCaptureConfig,\n  NetworkCaptureConfig,\n  WebEvent,\n  WebEventType,\n} from \"./types\";\nexport { SDK_VERSION } from \"./version\";\n\nconst DEFAULT_FLUSH_INTERVAL_MS = 5_000;\nconst DEFAULT_MAX_BATCH_BYTES = 57_344;\nconst DEFAULT_MAX_QUEUED_EVENTS = 500;\n/**\n * Platform request-id response headers probed for `web.network.request_id`,\n * in priority order: generic first, then common CDN/PaaS edges.\n */\nconst DEFAULT_REQUEST_ID_HEADERS = [\n  \"x-request-id\",\n  \"cf-ray\",\n  \"x-vercel-id\",\n  \"x-amz-cf-id\",\n  \"fly-request-id\",\n];\n\ninterface SdkInstance {\n  identify(distinctId: string, traits?: Record<string, unknown>): void;\n  reset(): void;\n  addEvent(name: string, attributes?: Record<string, unknown>): void;\n  log(\n    severity: EventSeverity,\n    message: string,\n    metadata?: Record<string, unknown>,\n  ): void;\n  flush(): Promise<void>;\n  shutdown(): Promise<void>;\n}\n\ninterface PendingIdentity {\n  distinctId: string;\n  traits?: Record<string, unknown>;\n}\n\nlet instance: SdkInstance | undefined;\nlet initialized = false;\nlet pendingIdentity: PendingIdentity | undefined;\nlet pendingReset = false;\n\nconst start = (config: BrowserSdkConfig): void => {\n  // Bound before capture activates. Under `register` this may already be the\n  // dormant wrapper; intake URLs take its internal passthrough branch, so\n  // transport traffic never recurses into capture either way.\n  const prePatchFetch = window.fetch.bind(window);\n\n  const intakeBase = config.intakeHost.replace(/\\/+$/, \"\");\n  const intakeUrl = `${intakeBase}/v1/logs`;\n\n  const session = createSessionManager();\n  // Apply buffered identity before any capture emits, so even the initial\n  // navigation event carries the identity claimed while consent was pending.\n  if (pendingReset) {\n    session.reset();\n    pendingReset = false;\n  }\n  const appliedPendingIdentity = pendingIdentity;\n  pendingIdentity = undefined;\n  if (appliedPendingIdentity) {\n    session.setDistinctId(appliedPendingIdentity.distinctId);\n  }\n\n  const transport = createTransport({\n    url: intakeUrl,\n    publicKey: config.publicKey,\n    resourceAttributes: {\n      \"service.name\": config.serviceName,\n      \"service.version\": config.serviceVersion,\n      \"deployment.environment\": config.environment,\n      \"telemetry.sdk.name\": SDK_NAME,\n      \"telemetry.sdk.version\": SDK_VERSION,\n      \"telemetry.sdk.language\": \"webjs\",\n      \"browser.user_agent\": navigator.userAgent,\n      \"browser.language\": navigator.language,\n    },\n    fetchImpl: prePatchFetch,\n    flushIntervalMs: config.flushIntervalMs ?? DEFAULT_FLUSH_INTERVAL_MS,\n    maxBatchBytes: config.maxBatchBytes ?? DEFAULT_MAX_BATCH_BYTES,\n    maxQueuedEvents: config.maxQueuedEvents ?? DEFAULT_MAX_QUEUED_EVENTS,\n  });\n\n  const emit = (event: WebEvent): void => {\n    try {\n      session.touch();\n      const base: EventAttributes = {\n        \"web.event_type\": event.type,\n        \"session.id\": session.getSessionId(),\n        \"session.window_id\": session.getWindowId(),\n        \"session.distinct_id\": session.getDistinctId(),\n        \"web.page.url\": window.location.href,\n        \"derived.source\": \"sdk\",\n      };\n      transport.enqueue(encodeLogRecord(event, base));\n    } catch {\n      // Emitting must never throw into the host.\n    }\n  };\n\n  const isInternalUrl = (url: string): boolean => url.startsWith(intakeBase);\n\n  // Guards event construction (attribute flattening can throw on exotic\n  // input); emit() itself already guards delivery.\n  const safeEmitEvent = (build: () => WebEvent): void => {\n    try {\n      emit(build());\n    } catch {\n      // Never throw into the host.\n    }\n  };\n\n  const teardowns: Array<() => void> = [];\n\n  const errorCapture = installErrorCapture({ emit });\n  teardowns.push(() => errorCapture.teardown());\n\n  const interactions = installInteractionCapture({ emit });\n  teardowns.push(() => interactions.teardown());\n\n  let inputCapture: InputCaptureHandle | undefined;\n  if (config.input?.capture !== false) {\n    inputCapture = installInputCapture({ emit });\n    teardowns.push(() => inputCapture?.teardown());\n  }\n\n  const navigation = installNavigationCapture({\n    emit,\n    onNavigate: () => {\n      interactions.notifyNavigation();\n      inputCapture?.notifyNavigation();\n    },\n  });\n  teardowns.push(() => navigation.teardown());\n\n  if (config.console?.capture !== false) {\n    const consoleCapture = installConsoleCapture({\n      emit,\n      levels: config.console?.levels ?? [\"error\", \"warn\"],\n    });\n    teardowns.push(() => consoleCapture.teardown());\n  }\n\n  const networkConfig: NetworkCaptureConfig = config.network ?? {};\n  const networkCapture = networkConfig.capture ?? true;\n  const propagateTraceContext = networkConfig.propagateTraceContext ?? true;\n  if (networkCapture || propagateTraceContext) {\n    const network = installNetworkCapture({\n      emit,\n      traceContext: createTraceContextManager({\n        sampledFlag: networkConfig.sampledFlag ?? false,\n      }),\n      capture: networkCapture,\n      propagateTraceContext,\n      allowlist: networkConfig.allowlist ?? [],\n      requestIdHeaders:\n        networkConfig.requestIdHeaders ?? DEFAULT_REQUEST_ID_HEADERS,\n      isInternalUrl,\n    });\n    teardowns.push(() => network.teardown());\n  }\n\n  if (networkCapture && networkConfig.resourceFallback !== false) {\n    const resourceObserver = installResourceObserver({\n      emit,\n      isInternalUrl,\n      isInjectionTarget: isActiveInjectionTarget,\n    });\n    teardowns.push(() => resourceObserver.teardown());\n  }\n\n  // Unload flush: visibilitychange→hidden is the reliable signal; pagehide\n  // covers bfcache navigations. keepalive lets the batch outlive the page.\n  const onVisibilityChange = (): void => {\n    if (document.visibilityState === \"hidden\") {\n      void transport.flush({ keepalive: true });\n    }\n  };\n  const onPageHide = (): void => {\n    void transport.flush({ keepalive: true });\n  };\n  document.addEventListener(\"visibilitychange\", onVisibilityChange);\n  window.addEventListener(\"pagehide\", onPageHide);\n  teardowns.push(() => {\n    document.removeEventListener(\"visibilitychange\", onVisibilityChange);\n    window.removeEventListener(\"pagehide\", onPageHide);\n  });\n\n  instance = {\n    identify(distinctId, traits) {\n      safeEmitEvent(() => {\n        session.setDistinctId(distinctId);\n        return {\n          type: \"custom\",\n          body: `identify ${distinctId}`,\n          severity: \"INFO\",\n          timeUnixMs: Date.now(),\n          attributes: {\n            \"web.custom.name\": \"identify\",\n            ...(traits ? flattenAttributes(traits, \"custom\") : {}),\n          },\n        };\n      });\n    },\n    reset() {\n      try {\n        session.reset();\n      } catch {\n        // Never throw into the host.\n      }\n    },\n    addEvent(name, attributes) {\n      safeEmitEvent(() => ({\n        type: \"custom\",\n        body: `custom ${name}`,\n        severity: \"INFO\",\n        timeUnixMs: Date.now(),\n        attributes: {\n          \"web.custom.name\": name,\n          ...(attributes ? flattenAttributes(attributes, \"custom\") : {}),\n        },\n      }));\n    },\n    log(severity, message, metadata) {\n      safeEmitEvent(() => ({\n        type: \"log\",\n        body: message,\n        severity,\n        timeUnixMs: Date.now(),\n        // Raw-key flattening (no prefix) for parity with app loggers,\n        // so existing log queries keep their attribute names.\n        attributes: metadata ? flattenAttributes(metadata) : {},\n      }));\n    },\n    flush() {\n      return transport.flush();\n    },\n    async shutdown() {\n      for (const teardown of teardowns.reverse()) {\n        try {\n          teardown();\n        } catch {\n          // Teardown must be best-effort.\n        }\n      }\n      // Deactivation above leaves dormant patches; full shutdown restores\n      // the natives (when still ours).\n      uninstallNetworkPatches();\n      uninstallNavigationPatches();\n      await transport.shutdown();\n    },\n  };\n\n  // The identify event for a pre-consent identify() is emitted only now that\n  // capture exists; the id itself was applied to the session earlier.\n  if (appliedPendingIdentity) {\n    instance.identify(\n      appliedPendingIdentity.distinctId,\n      appliedPendingIdentity.traits,\n    );\n  }\n};\n\n/**\n * Initialize the SDK. Idempotent: repeat calls are ignored. When `consent`\n * is provided, nothing new is installed — no listeners, no patches, no\n * network — until it resolves true; on false (or a throw) the SDK stays\n * dormant. (Patches pre-installed by `@sazabi/browser/register` exist\n * but remain inert passthroughs until activation.)\n */\nexport const init = (config: BrowserSdkConfig): void => {\n  if (typeof window === \"undefined\") {\n    return; // SSR — nothing to capture.\n  }\n  if (initialized) {\n    return;\n  }\n  initialized = true;\n\n  if (!config.publicKey || !config.intakeHost || !config.serviceName) {\n    // Developer-facing misconfiguration: warn once, never throw.\n    console.warn(\n      \"[@sazabi/browser] init() requires publicKey, intakeHost, and serviceName; SDK disabled.\",\n    );\n    return;\n  }\n\n  if (config.consent === undefined) {\n    start(config);\n    return;\n  }\n\n  try {\n    void Promise.resolve(config.consent())\n      .then((granted) => {\n        if (granted === true) {\n          start(config);\n        }\n      })\n      .catch(() => {\n        // Consent evaluation failed — stay dormant.\n      });\n  } catch {\n    // Synchronous throw from consent() — stay dormant.\n  }\n};\n\n/** Set the client-asserted user identity (`session.distinct_id`). */\nexport const identify = (\n  distinctId: string,\n  traits?: Record<string, unknown>,\n): void => {\n  if (instance) {\n    instance.identify(distinctId, traits);\n  } else {\n    // Buffer identity across a pending consent gate; the identify event is\n    // emitted when capture starts.\n    pendingIdentity = { distinctId, traits };\n  }\n};\n\n/**\n * Logout: clear the client-asserted identity and rotate both session and\n * window ids, so later activity on this device never threads into the\n * previous user's timeline.\n */\nexport const reset = (): void => {\n  if (instance) {\n    instance.reset();\n  } else {\n    pendingReset = true;\n    pendingIdentity = undefined;\n  }\n};\n\n/** Emit a custom mark into the session event stream. */\nexport const addEvent = (\n  name: string,\n  attributes?: Record<string, unknown>,\n): void => {\n  instance?.addEvent(name, attributes);\n};\n\n/**\n * Emit an application log line (`web.event_type: \"log\"`) with session context\n * attached. Drops silently before init/consent, like all capture.\n */\nexport const log = (\n  severity: EventSeverity,\n  message: string,\n  metadata?: Record<string, unknown>,\n): void => {\n  instance?.log(severity, message, metadata);\n};\n\n/** Force-flush queued events. */\nexport const flush = async (): Promise<void> => {\n  await instance?.flush();\n};\n\n/** Tear down all patches/listeners (restoring originals) and flush. */\nexport const shutdown = async (): Promise<void> => {\n  const active = instance;\n  instance = undefined;\n  initialized = false;\n  pendingIdentity = undefined;\n  pendingReset = false;\n  await active?.shutdown();\n};\n"
+  ],
+  "mappings": "4GAKO,IAAM,EAAgB,CAAC,EAAe,EAHpB,OAIvB,EAAM,OAAS,EAAM,EAAM,MAAM,EAAG,CAAG,EAAI,EAOhC,EAAoB,CAC/B,EACA,EAAS,GACT,EAAQ,IACY,CACpB,IAAM,EAA0B,CAAC,EAEjC,QAAY,EAAK,KAAa,OAAO,QAAQ,CAAK,EAAG,CACnD,IAAM,EAAU,EAAS,GAAG,KAAU,IAAQ,EAE9C,GAAI,IAAa,MAAQ,IAAa,OACpC,SAGF,GACE,OAAO,IAAa,UACpB,CAAC,MAAM,QAAQ,CAAQ,GACvB,EA3BoB,EA4BpB,CACA,OAAO,OACL,EACA,EACE,EACA,EACA,EAAQ,CACV,CACF,EACA,SAGF,GAAI,OAAO,IAAa,UAAY,OAAO,IAAa,UACtD,EAAO,GAAW,EACb,QAAI,OAAO,IAAa,SAC7B,EAAO,GAAW,EAAc,CAAQ,EAExC,QAAI,CACF,EAAO,GAAW,EAAc,KAAK,UAAU,CAAQ,GAAK,EAAE,EAC9D,KAAM,GAMZ,OAAO,GC3CF,IAAM,EAAqB,oBAE5B,GAAgE,CACpE,MAAO,QACP,KAAM,OACN,KAAM,OACN,MAAO,OACT,EAEM,EAAgB,KAChB,GAAiB,KAEjB,GAAe,CAAC,IAA2B,CAC/C,IAAI,EACJ,GAAI,OAAO,IAAU,SACnB,EAAO,EACF,QAAI,aAAiB,MAC1B,EAAO,GAAG,EAAM,SAAS,EAAM,UAE/B,QAAI,CACF,EAAO,KAAK,UAAU,CAAK,GAAK,OAAO,CAAK,EAC5C,KAAM,CACN,EAAO,OAAO,CAAK,EAGvB,OAAO,EAAK,OAAS,EACjB,GAAG,EAAK,MAAM,EAAG,CAAa,KAC9B,GASO,EAAwB,CACnC,IACyB,CACzB,IAAM,EAA8B,CAAC,EACjC,EAAW,GAEf,QAAW,KAAS,EAAQ,OAAQ,CAClC,IAAM,EAAW,QAAQ,GACzB,GAAI,OAAO,IAAa,YAAc,EAAU,CAAQ,EACtD,SAGF,IAAM,EAAU,QAAS,IAAmB,EAAuB,CAEjE,GADA,EAAS,MAAM,MAAQ,QAAS,CAAI,EAChC,EAAU,OACd,GAAI,CACF,GACE,OAAO,EAAK,KAAO,UACnB,EAAK,GAAG,WAAW,CAAkB,EAErC,OAEF,EAAW,GACX,IAAM,EAAO,EAAK,IAAI,EAAY,EAAE,KAAK,GAAG,EAAE,MAAM,EAAG,EAAc,EACrE,EAAQ,KAAK,CACX,KAAM,MACN,KAAM,GAAQ,WAAW,IACzB,SAAU,GAAkB,GAC5B,WAAY,KAAK,IAAI,EACrB,WAAY,CACV,oBAAqB,CACvB,CACF,CAAC,EACD,KAAM,SAEN,CACA,EAAW,KAIf,EAAY,CAAO,EACnB,QAAQ,GAAS,EACjB,EAAS,KAAK,IAAM,CAClB,GAAI,QAAQ,KAAW,EACrB,QAAQ,GAAS,EAEpB,EAGH,MAAO,CACL,QAAQ,EAAG,CACT,QAAW,KAAW,EACpB,GAAI,CACF,EAAQ,EACR,KAAM,GAKd,GCjGK,IAAM,EAAsB,CACjC,IACuB,CACvB,IAAM,EAAU,CAAC,IAA4B,CAC3C,GAAI,CACF,IAAM,EAAiB,EAAM,MACvB,EAAgB,aAAiB,MAAQ,EAAM,KAAO,QACtD,EAAU,EAAM,SAAW,gBAEjC,EAAQ,KAAK,CACX,KAAM,QACN,KAAM,EAAc,GAAG,MAAkB,IAAW,GAAG,EACvD,SAAU,QACV,WAAY,KAAK,IAAI,EACrB,WAAY,CACV,iBAAkB,EAClB,oBAAqB,EACrB,uBACE,aAAiB,MAAS,EAAM,OAAS,GAAM,GACjD,iBAAkB,WAClB,qBAAsB,EAAM,UAAY,OACxC,mBAAoB,EAAM,QAAU,OACpC,kBAAmB,EAAM,OAAS,MACpC,CACF,CAAC,EACD,KAAM,IAKJ,EAAuB,CAAC,IAAuC,CACnE,GAAI,CACF,IAAM,EAAkB,EAAM,OACxB,EAAU,aAAkB,MAC5B,EAAgB,EAAU,EAAO,KAAO,qBACxC,EAAU,EAAU,EAAO,QAAU,OAAO,CAAM,EAExD,EAAQ,KAAK,CACX,KAAM,QACN,KAAM,EAAc,GAAG,MAAkB,IAAW,GAAG,EACvD,SAAU,QACV,WAAY,KAAK,IAAI,EACrB,WAAY,CACV,iBAAkB,EAClB,oBAAqB,EACrB,uBAAwB,EAAW,EAAO,OAAS,GAAM,GACzD,iBAAkB,oBACpB,CACF,CAAC,EACD,KAAM,IAQV,OAHA,OAAO,iBAAiB,QAAS,CAAO,EACxC,OAAO,iBAAiB,qBAAsB,CAAoB,EAE3D,CACL,QAAQ,EAAG,CACT,OAAO,oBAAoB,QAAS,CAAO,EAC3C,OAAO,oBAAoB,qBAAsB,CAAoB,EAEzE,GCtDF,IAAM,GAA4B,CAChC,SACA,UACA,UACA,kBACA,gBACA,eACA,oBACA,4BACA,yBACA,kBACA,oBACA,kBACA,uBACA,uBACA,qBACF,EAAE,KAAK,GAAG,EAEJ,EAAgB,CAAC,IAAuD,CAC5E,GAAI,CAAC,EAAK,OACV,IAAM,EAAY,EAAI,QAAQ,OAAQ,GAAG,EAAE,KAAK,EAChD,GAAI,CAAC,EAAW,OAChB,OAAO,EAAU,OA/BI,GAgCjB,GAAG,EAAU,MAAM,EAhCF,EAgCmB,KACpC,GAGA,EAAW,CAAC,IAA8B,CAC9C,GAAI,CACF,OAAO,EAAQ,QAAQ,oBAAqB,IAAM,KAClD,KAAM,CACN,MAAO,KAKL,EAAe,CAAC,IAAyC,CAC7D,IAAM,EAAW,EAAc,EAAQ,aA7ClB,kBA6C6C,CAAC,EACnE,GAAI,EAAU,OAAO,EACrB,IAAM,EAAY,EAAc,EAAQ,aAAa,YAAY,CAAC,EAClE,GAAI,EAAW,OAAO,EAEtB,IAAM,EAAM,EAAQ,aAAa,iBAAiB,EAClD,GAAI,CAAC,EAAK,OACV,OAAO,EACL,EACG,MAAM,KAAK,EACX,IAAI,CAAC,IAAO,SAAS,eAAe,CAAE,GAAG,aAAe,EAAE,EAC1D,KAAK,GAAG,CACb,GAQW,EAAmB,CAAC,IAAyC,CACxE,GAAI,CACF,GAAI,EAAS,CAAO,EAAG,OAEvB,IAAM,EAAQ,EAAa,CAAO,EAClC,GAAI,EAAO,OAAO,EAElB,GACE,aAAmB,kBACnB,aAAmB,qBACnB,aAAmB,kBAEnB,QAAW,KAAS,MAAM,KAAK,EAAQ,QAAU,CAAC,CAAC,EAAG,CACpD,IAAM,EAAY,EAAc,EAAM,WAAW,EACjD,GAAI,EAAW,OAAO,EAI1B,IAAM,EAAc,EAAc,EAAQ,aAAa,aAAa,CAAC,EACrE,GAAI,EAAa,OAAO,EACxB,OAAO,EAAc,EAAQ,aAAa,MAAM,CAAC,EACjD,KAAM,CACN,SAUS,EAAmB,CAAC,IAAwC,CACvE,GAAI,CACF,IAAM,EAAc,EAAO,QAAQ,EAAyB,EAC5D,GAAI,CAAC,GAAe,EAAS,CAAW,EAAG,OAE3C,IAAM,EAAQ,EAAa,CAAW,EACtC,GAAI,EAAO,OAAO,EAElB,GAAI,aAAuB,iBAEzB,OAAO,EAAc,EAAY,aAAa,OAAO,CAAC,EAExD,OAAO,EAAc,EAAY,WAAW,EAC5C,KAAM,CACN,SC7GJ,IAAM,EAAiB,KACjB,EAAiB,GACjB,GAAmB,EACnB,GAAwB,IACxB,GAAsB,IAEtB,GACJ,kFAGW,EAAkB,CAAC,IAA6B,CAC3D,IAAM,EAAS,EAAQ,aAAa,aAAa,EACjD,GAAI,EACF,MAAO,iBAAiB,MAE1B,GAAI,EAAQ,GACV,MAAO,IAAI,EAAQ,KAGrB,IAAM,EAAqB,CAAC,EACxB,EAA0B,EAC9B,MAAO,GAAW,EAAS,OAAS,EAAG,CACrC,IAAI,EAAU,EAAQ,QAAQ,YAAY,EAC1C,GAAI,EAAQ,GAAI,CACd,EAAS,QAAQ,IAAI,EAAQ,IAAI,EACjC,MAEF,IAAM,EAAU,MAAM,KAAK,EAAQ,SAAS,EAAE,MAAM,EAAG,CAAC,EACxD,GAAI,EAAQ,OAAS,EACnB,GAAW,IAAI,EAAQ,KAAK,GAAG,IAEjC,EAAS,QAAQ,CAAO,EACxB,EAAU,EAAQ,cAEpB,OAAO,EAAS,KAAK,KAAK,EAAE,MAAM,EAAG,EAAmB,GAS7C,EAA4B,CACvC,IAC6B,CAW7B,IAAI,EAAwB,EACxB,EAAuB,EACrB,EAA8B,CAAC,EAGjC,EAAiB,OAAO,kBACtB,EAAyB,IAAI,IAE7B,EAAW,IAAI,iBAAiB,IAAM,CAC1C,GAAyB,EAC1B,EACD,GAAI,CACF,EAAS,QAAQ,SAAS,gBAAiB,CACzC,QAAS,GACT,UAAW,GACX,WAAY,GACZ,cAAe,EACjB,CAAC,EACD,KAAM,EAIR,IAAM,EAAU,CAAC,IAA4B,CAC3C,GAAI,CACF,IAAM,EAAS,EAAM,OACrB,GAAI,EAAE,aAAkB,SACtB,OAGF,IAAM,EAAM,YAAY,IAAI,EACtB,EAAW,EAAgB,CAAM,EACjC,EAAM,EAAO,QAAQ,YAAY,EACjC,EAAO,EAAiB,CAAM,EAEpC,EAAQ,KAAK,CACX,KAAM,QACN,KAAM,EAAO,UAAU,KAAU,SAAS,IAC1C,SAAU,OACV,WAAY,KAAK,IAAI,EACrB,WAAY,CACV,uBAAwB,EACxB,kBAAmB,EACnB,mBAAoB,CACtB,CACF,CAAC,EAGD,EAAa,KAAK,CAAE,KAAM,EAAK,EAAG,EAAM,QAAS,EAAG,EAAM,OAAQ,CAAC,EACnE,MACE,EAAa,OAAS,GACtB,EAAO,EAAa,GAAmB,KAAO,EAE9C,EAAa,MAAM,EAErB,IAAM,EAAY,EAAa,OAC7B,CAAC,IACC,KAAK,IAAI,EAAM,EAAI,EAAM,OAAO,GAAK,GACrC,KAAK,IAAI,EAAM,EAAI,EAAM,OAAO,GAAK,CACzC,EACA,GACE,EAAU,QAAU,IACpB,EAAM,EAAiB,EAEvB,EAAiB,EACjB,EAAQ,KAAK,CACX,KAAM,aACN,KAAM,EAAO,eAAe,KAAU,cAAc,IACpD,SAAU,OACV,WAAY,KAAK,IAAI,EACrB,WAAY,CACV,uBAAwB,EACxB,kBAAmB,EACnB,mBAAoB,EACpB,kBAAmB,EAAU,MAC/B,CACF,CAAC,EAIH,GAAI,EAAO,QAAQ,EAAoB,EAAG,CACxC,IAAM,EAAgB,EAChB,EAAgB,EAChB,EAAQ,OAAO,WAAW,IAAM,CACpC,EAAuB,OAAO,CAAK,EACnC,GAAI,CAEF,GACE,IAA0B,GAC1B,IAAyB,EAEzB,EAAQ,KAAK,CACX,KAAM,aACN,KAAM,EAAO,eAAe,KAAU,cAAc,IACpD,SAAU,OACV,WAAY,KAAK,IAAI,EACrB,WAAY,CACV,uBAAwB,EACxB,kBAAmB,EACnB,mBAAoB,CACtB,CACF,CAAC,EAEH,KAAM,IAGP,EAAqB,EACxB,EAAuB,IAAI,CAAK,GAElC,KAAM,IAOV,OAFA,SAAS,iBAAiB,QAAS,EAAS,CAAE,QAAS,GAAM,QAAS,EAAK,CAAC,EAErE,CACL,gBAAgB,EAAG,CACjB,GAAwB,GAE1B,QAAQ,EAAG,CACT,SAAS,oBAAoB,QAAS,EAAS,CAAE,QAAS,EAAK,CAAC,EAChE,EAAS,WAAW,EACpB,QAAW,KAAS,EAClB,OAAO,aAAa,CAAK,EAE3B,EAAuB,MAAM,EAEjC,GCtLF,IAAM,GAAc,IACd,GAAuB,GAGvB,GAAuB,IAAI,IAAI,CACnC,SACA,SACA,QACA,QACA,WACA,QACA,QACA,OACA,OACF,CAAC,EAuBK,GAAoB,CAAC,IAAmD,CAC5E,GAAI,aAAkB,iBAAkB,CACtC,IAAM,GAAQ,EAAO,MAAQ,QAAQ,YAAY,EACjD,OAAO,GAAqB,IAAI,CAAI,EAAI,OAAY,EAEtD,GAAI,aAAkB,oBAAqB,MAAO,WAClD,GAAI,aAAkB,kBAAmB,MAAO,SAChD,GAAI,aAAkB,aAAe,EAAO,kBAC1C,MAAO,kBAET,QAeW,EAAsB,CACjC,IACuB,CACvB,IAAM,EAAW,IAAI,IAEf,EAAa,CACjB,EACA,IACS,CACT,EAAS,OAAO,EAAQ,OAAO,EAC/B,GAAI,CACF,EAAQ,KAAK,CACX,KAAM,QACN,KAAM,EAAQ,KACV,UAAU,EAAQ,QAClB,SAAS,EAAQ,WACrB,SAAU,OACV,WAAY,EAAQ,YACpB,WAAY,CACV,uBAAwB,EAAQ,SAChC,mBAAoB,EAAQ,KAC5B,uBAAwB,EAAQ,UAChC,uBAAwB,EAAQ,UAChC,wBAAyB,KAAK,IAC5B,EACA,KAAK,MAAM,EAAQ,cAAgB,EAAQ,SAAS,CACtD,KACI,EAAQ,OAAS,CAAE,mBAAoB,EAAK,EAAI,CAAC,EACrD,qBAAsB,CACxB,CACF,CAAC,EACD,KAAM,IAKJ,EAAS,CAAC,IAAoC,CAClD,QAAW,KAAW,MAAM,KAAK,EAAS,OAAO,CAAC,EAChD,EAAW,EAAS,CAAO,GAIzB,EAAY,CAAC,IAAsB,CACvC,QAAW,KAAW,MAAM,KAAK,EAAS,OAAO,CAAC,EAChD,GAAI,EAAM,EAAQ,cAAgB,GAChC,EAAW,EAAS,MAAM,GAK1B,EAAU,CAAC,IAAuB,CACtC,GAAI,CACF,IAAM,EAAM,YAAY,IAAI,EAC5B,EAAU,CAAG,EAEb,IAAM,EAAS,EAAM,OACf,EAAY,GAAkB,CAAM,EAC1C,GAAI,IAAc,QAAa,EAAE,aAAkB,SACjD,OAIF,GAAI,EAAM,OAAS,UAAY,IAAc,SAC3C,OAGF,IAAI,EAAU,EAAS,IAAI,CAAM,EACjC,GAAI,CAAC,EAAS,CACZ,GAAI,EAAS,MAAQ,GACnB,OAEF,EAAU,CACR,QAAS,EACT,SAAU,EAAgB,CAAM,EAChC,KAAM,EAAiB,CAAM,EAC7B,YACA,YAAa,KAAK,IAAI,EACtB,UAAW,EACX,cAAe,EACf,UAAW,EACX,OAAQ,EACV,EACA,EAAS,IAAI,EAAQ,CAAO,EAG9B,EAAQ,WAAa,EACrB,EAAQ,cAAgB,EAExB,IAAM,EAAa,EAAqB,UACxC,GACE,OAAO,IAAc,UACrB,EAAU,WAAW,iBAAiB,EAEtC,EAAQ,OAAS,GAKnB,GAAI,EAAM,OAAS,UAAY,IAAc,SAC3C,EAAW,EAAS,QAAQ,EAE9B,KAAM,IAKJ,EAAa,CAAC,IAAuB,CACzC,GAAI,CACF,IAAM,EAAS,EAAM,OACrB,GAAI,aAAkB,QAAS,CAC7B,IAAM,EAAU,EAAS,IAAI,CAAM,EACnC,GAAI,EAAS,EAAW,EAAS,MAAM,GAEzC,KAAM,IAKJ,EAAY,CAAC,IAA+B,CAChD,GAAI,CAGF,GAAI,EAAM,MAAQ,QAAS,OAC3B,IAAM,EAAS,EAAM,OACrB,GAAI,aAAkB,QAAS,CAC7B,IAAM,EAAU,EAAS,IAAI,CAAM,EACnC,GAAI,EAAS,EAAW,EAAS,OAAO,GAE1C,KAAM,IAKJ,EAAqB,IAAY,CACrC,GAAI,SAAS,kBAAoB,SAC/B,EAAO,QAAQ,GAGb,EAAa,IAAY,CAC7B,EAAO,QAAQ,GAqBjB,OAlBA,SAAS,iBAAiB,QAAS,EAAS,CAAE,QAAS,GAAM,QAAS,EAAK,CAAC,EAG5E,SAAS,iBAAiB,SAAU,EAAS,CAC3C,QAAS,GACT,QAAS,EACX,CAAC,EACD,SAAS,iBAAiB,WAAY,EAAY,CAChD,QAAS,GACT,QAAS,EACX,CAAC,EACD,SAAS,iBAAiB,UAAW,EAAW,CAC9C,QAAS,GACT,QAAS,EACX,CAAC,EACD,SAAS,iBAAiB,mBAAoB,CAAkB,EAChE,OAAO,iBAAiB,WAAY,CAAU,EAEvC,CACL,gBAAgB,EAAG,CACjB,EAAO,YAAY,GAErB,QAAQ,EAAG,CACT,SAAS,oBAAoB,QAAS,EAAS,CAAE,QAAS,EAAK,CAAC,EAChE,SAAS,oBAAoB,SAAU,EAAS,CAAE,QAAS,EAAK,CAAC,EACjE,SAAS,oBAAoB,WAAY,EAAY,CAAE,QAAS,EAAK,CAAC,EACtE,SAAS,oBAAoB,UAAW,EAAW,CAAE,QAAS,EAAK,CAAC,EACpE,SAAS,oBAAoB,mBAAoB,CAAkB,EACnE,OAAO,oBAAoB,WAAY,CAAU,EACjD,EAAO,QAAQ,EAEnB,GC9NK,IAAM,EAA0B,CACrC,IAC2B,CAC3B,GAAI,OAAO,oBAAwB,IACjC,MAAO,CAAE,QAAQ,EAAG,EAAG,EAGzB,IAAM,EAAmB,IAAI,IAEvB,EAAiB,CAAC,IAAsB,CAC5C,IAAI,EACJ,GAAI,CACF,EAAS,IAAI,IAAI,CAAG,EAAE,OACtB,KAAM,CACN,OAEF,GAAI,EAAiB,IAAI,CAAM,EAAG,OAClC,EAAiB,IAAI,CAAM,EAE3B,IAAM,EAAU,eAAe,4GAC/B,EAAQ,KAAK,CACX,KAAM,MACN,KAAM,EACN,SAAU,OACV,WAAY,KAAK,IAAI,EACrB,WAAY,CACV,qBAAsB,sBACtB,0BAA2B,CAC7B,CACF,CAAC,EACD,GAAI,CACF,QAAQ,KAAK,GAAG,KAAsB,GAAS,EAC/C,KAAM,IAKJ,EAAc,CAAC,IAA2C,CAC9D,GAAI,CACF,GACE,EAAM,gBAAkB,SACxB,EAAM,gBAAkB,iBAExB,OAEF,IAAM,EAAM,EAAM,KAClB,GAAI,EAAQ,cAAc,CAAG,EAAG,OAChC,GAAI,EAAmB,EAAK,EAAM,SAAS,EAAG,OAG9C,IAAM,EAAU,EAAM,gBAAyC,EACzD,EAAgB,KAAK,MACzB,YAAY,WAAa,EAAM,UAAY,EAAM,QACnD,EAgBA,GAdA,EAAQ,KAAK,CACX,KAAM,UACN,KAAM,WAAW,EAAQ,CAAG,OAAO,EAAS,EAAI,EAAS,aACzD,SAAU,EAAS,EAAI,EAAkB,CAAM,EAAI,OACnD,WAAY,EACZ,WAAY,CACV,4BAA6B,EAAS,EAAI,EAAS,OACnD,WAAY,EACZ,mBAAoB,EAAM,gBAAkB,QAAU,QAAU,MAChE,0BAA2B,KAAK,MAAM,EAAM,QAAQ,EACpD,qBAAsB,iBACxB,CACF,CAAC,EAEG,EAAQ,kBAAkB,CAAG,EAC/B,EAAe,CAAG,EAEpB,KAAM,IAKN,EACJ,GAAI,CACF,EAAW,IAAI,oBAAoB,CAAC,IAAS,CAC3C,QAAW,KAAS,EAAK,WAAW,EAClC,EAAY,CAAkC,EAEjD,EACD,EAAS,QAAQ,CAAE,KAAM,WAAY,SAAU,EAAK,CAAC,EACrD,KAAM,CACN,MAAO,CAAE,QAAQ,EAAG,EAAG,EAGzB,MAAO,CACL,QAAQ,EAAG,CACT,GAAI,CACF,EAAS,WAAW,EACpB,KAAM,GAIZ,GC7FF,IAAM,GAAe,IAAc,CACjC,IAAM,EAAQ,IAAI,WAAW,CAAC,EAE9B,OADA,OAAO,gBAAgB,CAAK,EACrB,MAAM,KAAK,EAAO,CAAC,IAAM,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,GAGpE,EAAQ,CAAC,IACb,GAAG,KAAU,KAAK,IAAI,EAAE,SAAS,EAAE,IAAI,GAAa,IAOhD,EAAoB,CACxB,IAKG,CACH,IAAM,EAAS,IAAI,IACnB,MAAO,CACL,GAAG,CAAC,EAAK,CACP,GAAI,CACF,OAAO,EAAS,EAAE,QAAQ,CAAG,EAC7B,KAAM,CACN,OAAO,EAAO,IAAI,CAAG,GAAK,OAG9B,GAAG,CAAC,EAAK,EAAO,CACd,GAAI,CACF,EAAS,EAAE,QAAQ,EAAK,CAAK,EAC7B,KAAM,CACN,EAAO,IAAI,EAAK,CAAK,IAGzB,MAAM,CAAC,EAAK,CACV,EAAO,OAAO,CAAG,EACjB,GAAI,CACF,EAAS,EAAE,WAAW,CAAG,EACzB,KAAM,GAIZ,GAGI,GAAqB,CAAC,IAAkD,CAC5E,GAAI,CAAC,EAAK,OACV,GAAI,CACF,IAAM,EAAkB,KAAK,MAAM,CAAG,EACtC,GACE,OAAO,IAAW,UAClB,IAAW,MACX,OAAQ,EAAyB,KAAO,UACxC,OAAQ,EAAyB,YAAc,UAC/C,OAAQ,EAAyB,iBAAmB,SAEpD,OAAO,EAET,KAAM,EAGR,QAUW,GAAuB,IAAsB,CACxD,IAAM,EAAQ,EAAkB,IAAM,OAAO,YAAY,EACnD,EAAU,EAAkB,IAAM,OAAO,cAAc,EAEzD,EAAwB,EAEtB,EAAe,IAAqB,CACxC,IAAM,EAAM,KAAK,IAAI,EACf,EAAS,GAAmB,EAAM,IAjHhB,gBAiHuC,CAAC,EAEhE,GACE,GACA,EAAM,EAAO,gBAjHK,SAkHlB,EAAM,EAAO,WAjHI,SAmHjB,OAAO,EAGT,IAAM,EAAuB,CAC3B,GAAI,EAAM,MAAM,EAChB,UAAW,EACX,eAAgB,CAClB,EAGA,OAFA,EAAM,IAhIkB,iBAgIO,KAAK,UAAU,CAAK,CAAC,EACpD,EAAwB,EACjB,GAGL,EAAW,EAAQ,IApIE,iBAoIoB,EAC7C,GAAI,CAAC,EACH,EAAW,EAAM,KAAK,EACtB,EAAQ,IAvIe,kBAuIS,CAAQ,EAG1C,IAAM,EAAS,IAAY,CACzB,IAAM,EAAM,KAAK,IAAI,EACrB,EAAM,IA7IkB,iBA+ItB,KAAK,UAAU,CACb,GAAI,EAAM,MAAM,EAChB,UAAW,EACX,eAAgB,CAClB,CAAC,CACH,EACA,EAAwB,EACxB,EAAW,EAAM,KAAK,EACtB,EAAQ,IAtJe,kBAsJS,CAAQ,GAG1C,MAAO,CACL,YAAY,EAAG,CACb,OAAO,EAAa,EAAE,IAExB,WAAW,EAAG,CACZ,OAAO,GAET,aAAa,EAAG,CACd,OAAO,EAAM,IAhKU,mBAgKc,GAAK,QAE5C,aAAa,CAAC,EAAY,CACxB,IAAM,EAAU,EAAM,IAnKC,mBAmKuB,GAAK,OACnD,GAAI,IAAY,QAAa,IAAY,EAGvC,EAAO,EAET,EAAM,IAzKiB,oBAyKS,CAAE,GAEpC,KAAK,EAAG,CACN,EAAM,OA5KiB,mBA4KU,EACjC,EAAO,GAET,KAAK,EAAG,CACN,IAAM,EAAM,KAAK,IAAI,EACf,EAAU,EAAa,EAC7B,GAAI,EAAM,GA7KqB,KA8K7B,EAAM,IArLc,iBAuLlB,KAAK,UAAU,IAAK,EAAS,eAAgB,CAAI,CAAC,CACpD,EACA,EAAwB,EAG9B,GCvKF,IAAM,GAAmB,iBACnB,GAAkB,iBAClB,GAAoB,IAAI,OAAO,EAAE,EACjC,GAAmB,IAAI,OAAO,EAAE,EAEhC,GAAc,CAAC,IAA+B,CAClD,IAAM,EAAQ,IAAI,WAAW,CAAU,EACvC,GACE,OAAO,gBAAgB,CAAK,QACrB,EAAM,MAAM,CAAC,IAAM,IAAM,CAAC,GACnC,OAAO,MAAM,KAAK,EAAO,CAAC,IAAM,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,GAGpE,GAAyB,CAC7B,IACiC,CACjC,GAAI,OAAO,IAAc,UAAY,IAAc,KAAM,MAAO,GAChE,IAAQ,UAAS,SAAQ,cAAe,EACxC,OACE,OAAO,IAAY,UACnB,GAAiB,KAAK,CAAO,GAC7B,IAAY,IACZ,OAAO,IAAW,UAClB,GAAgB,KAAK,CAAM,GAC3B,IAAW,IACX,OAAO,IAAe,UAepB,GAAkB,OAAO,IAAI,wBAAwB,EACrD,GAAwB,OAAO,IAAI,gCAAgC,EAQ5D,GAAsB,IAAmC,CACpE,GAAI,CAQF,IAAM,EAPW,WAAuC,KAGzB,SAAS,SAAS,GACrB,WAAW,EAAqB,GAGpC,cAAc,EACtC,OAAO,GAAuB,CAAS,EAAI,EAAY,OACvD,KAAM,CACN,SAIE,GAAoB,CAAC,IAAyC,CAClE,IAAM,GAAS,EAAY,WAAa,KAAM,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,EAC1E,MAAO,MAAM,EAAY,WAAW,EAAY,UAAU,KAGtD,GAAiB,CAAC,IAAqD,CAC3E,GAAI,CAEF,OADmB,EAAY,YAAY,UAAU,GAChC,OACrB,KAAM,CACN,SAYS,GAA4B,CAAC,IAEf,CACzB,IAAM,EAAsB,KAAwB,CAClD,QAAS,GAAY,EAAE,EACvB,OAAQ,GAAY,CAAC,EACrB,WAAY,EAAQ,YA9FH,EA8FgC,CACnD,GAEA,MAAO,CACL,UAAU,EAAG,CACX,IAAM,EAAc,GAAoB,GAAK,EAAoB,EAC3D,EAAkC,CACtC,YAAa,GAAkB,CAAW,CAC5C,EACM,EAAa,GAAe,CAAW,EAC7C,GAAI,EACF,EAAQ,WAAa,EAEvB,MAAO,CACL,UACA,QAAS,EAAY,QACrB,OAAQ,EAAY,MACtB,EAEJ,GCrIK,IAAM,EAAW,kBACX,EAAc,QC8B3B,IAAM,GAAkD,CACtD,MAAO,EACP,KAAM,EACN,KAAM,GACN,MAAO,EACT,EAEM,GAAkB,KAElB,GAAc,CAAC,IAAwC,CAC3D,GAAI,OAAO,IAAU,UACnB,MAAO,CAAE,UAAW,CAAM,EAE5B,GAAI,OAAO,IAAU,SAEnB,OAAO,OAAO,UAAU,CAAK,EACzB,CAAE,SAAU,OAAO,CAAK,CAAE,EAC1B,CAAE,YAAa,CAAM,EAE3B,MAAO,CAAE,YAAa,EAAc,CAAK,CAAE,GAGvC,GAAmB,CAAC,IAAgD,CACxE,IAAM,EAA0B,CAAC,EACjC,QAAY,EAAK,KAAU,OAAO,QAAQ,CAAU,EAAG,CACrD,GAAI,IAAU,OACZ,SAEF,EAAQ,KAAK,CAAE,MAAK,MAAO,GAAY,CAAK,CAAE,CAAC,EAEjD,OAAO,GAGI,GAAkB,CAC7B,EACA,IACkB,CAClB,IAAM,EAAwB,CAC5B,aAAc,GAAG,EAAM,mBACvB,eAAgB,GAAiB,EAAM,UACvC,aAAc,EAAM,SACpB,KAAM,CAAE,YAAa,EAAc,EAAM,KAAM,EAAe,CAAE,EAChE,WAAY,GAAiB,IAAK,KAAmB,EAAM,UAAW,CAAC,CACzE,EACA,GAAI,EAAM,QACR,EAAO,QAAU,EAAM,QAEzB,GAAI,EAAM,OACR,EAAO,OAAS,EAAM,OAExB,OAAO,GAmCI,GAAkB,CAAC,IAAyC,CACvE,IAAM,EAAwB,CAAC,EAC3B,EAAc,EACd,EACA,EAAW,GAET,EAAgB,CAAC,IACrB,KAAK,UAAU,CACb,aAAc,CACZ,CACE,SAAU,CACR,WAAY,GAAiB,EAAQ,kBAAkB,CACzD,EACA,UAAW,CACT,CACE,MAAO,CAAE,KAAM,EAAU,QAAS,CAAY,EAC9C,WAAY,CACd,CACF,CACF,CACF,CACF,CAAC,EAEG,EAAmB,EAAc,CAAC,CAAC,EAAE,OAAS,GAC9C,EAAc,KAAK,IAAI,KAAM,EAAQ,cAAgB,CAAgB,EAErE,EAAa,IAAY,CAC7B,GAAI,IAAU,OACZ,OAAO,aAAa,CAAK,EACzB,EAAQ,QAIN,EAAgB,IAAY,CAChC,GAAI,IAAU,QAAa,EACzB,OAEF,EAAQ,OAAO,WAAW,IAAM,CAC9B,EAAQ,OACH,EAAM,GACV,EAAQ,eAAe,GAGtB,EAAa,IAAyB,CAC1C,IAAM,EAA4B,CAAC,EAC/B,EAA2B,CAAC,EAC5B,EAAe,EAEnB,QAAW,KAAU,EAAO,CAC1B,GAAI,EAAQ,OAAS,GAAK,EAAe,EAAO,MAAQ,EACtD,EAAO,KAAK,CAAO,EACnB,EAAU,CAAC,EACX,EAAe,EAEjB,EAAQ,KAAK,EAAO,MAAM,EAC1B,GAAgB,EAAO,MAEzB,GAAI,EAAQ,OAAS,EACnB,EAAO,KAAK,CAAO,EAKrB,OAFA,EAAM,OAAS,EACf,EAAc,EACP,GAGH,EAAQ,MAAO,IAEA,CAEnB,GADA,EAAW,EACP,EAAM,SAAW,EACnB,OAGF,IAAM,EAAW,EAAW,EAAE,IAAI,CAAC,IACjC,EACG,UAAU,EAAQ,IAAK,CACtB,OAAQ,OACR,QAAS,CACP,eAAgB,mBAChB,cAAe,UAAU,EAAQ,WACnC,EACA,KAAM,EAAc,CAAK,EACzB,UAAW,GAAc,YAAc,EACzC,CAAC,EACA,MAAM,IAAM,EAEZ,CACL,EAEA,MAAM,QAAQ,IAAI,CAAQ,GAG5B,MAAO,CACL,OAAO,CAAC,EAAQ,CACd,GAAI,EACF,OAEF,IAAM,EAAQ,KAAK,UAAU,CAAM,EAAE,OAAS,EAC9C,EAAM,KAAK,CAAE,SAAQ,OAAM,CAAC,EAC5B,GAAe,EAEf,MAAO,EAAM,OAAS,EAAQ,gBAAiB,CAC7C,IAAM,EAAU,EAAM,MAAM,EAC5B,GAAI,EACF,GAAe,EAAQ,MAI3B,GAAI,GAAe,EACZ,EAAM,EAEX,OAAc,GAGlB,aACM,SAAQ,EAAG,CACf,EAAW,GACX,MAAM,EAAM,EAEhB,GCnMF,IAAM,GAA4B,KAC5B,GAA0B,MAC1B,GAA4B,IAK5B,GAA6B,CACjC,eACA,SACA,cACA,cACA,gBACF,EAoBI,EACA,EAAc,GACd,EACA,EAAe,GAEb,GAAQ,CAAC,IAAmC,CAIhD,IAAM,EAAgB,OAAO,MAAM,KAAK,MAAM,EAExC,EAAa,EAAO,WAAW,QAAQ,OAAQ,EAAE,EACjD,EAAY,GAAG,YAEf,EAAU,GAAqB,EAGrC,GAAI,EACF,EAAQ,MAAM,EACd,EAAe,GAEjB,IAAM,EAAyB,EAE/B,GADA,EAAkB,OACd,EACF,EAAQ,cAAc,EAAuB,UAAU,EAGzD,IAAM,EAAY,GAAgB,CAChC,IAAK,EACL,UAAW,EAAO,UAClB,mBAAoB,CAClB,eAAgB,EAAO,YACvB,kBAAmB,EAAO,eAC1B,yBAA0B,EAAO,YACjC,qBAAsB,EACtB,wBAAyB,EACzB,yBAA0B,QAC1B,qBAAsB,UAAU,UAChC,mBAAoB,UAAU,QAChC,EACA,UAAW,EACX,gBAAiB,EAAO,iBAAmB,GAC3C,cAAe,EAAO,eAAiB,GACvC,gBAAiB,EAAO,iBAAmB,EAC7C,CAAC,EAEK,EAAO,CAAC,IAA0B,CACtC,GAAI,CACF,EAAQ,MAAM,EACd,IAAM,EAAwB,CAC5B,iBAAkB,EAAM,KACxB,aAAc,EAAQ,aAAa,EACnC,oBAAqB,EAAQ,YAAY,EACzC,sBAAuB,EAAQ,cAAc,EAC7C,eAAgB,OAAO,SAAS,KAChC,iBAAkB,KACpB,EACA,EAAU,QAAQ,GAAgB,EAAO,CAAI,CAAC,EAC9C,KAAM,IAKJ,EAAgB,CAAC,IAAyB,EAAI,WAAW,CAAU,EAInE,EAAgB,CAAC,IAAgC,CACrD,GAAI,CACF,EAAK,EAAM,CAAC,EACZ,KAAM,IAKJ,EAA+B,CAAC,EAEhC,EAAe,EAAoB,CAAE,MAAK,CAAC,EACjD,EAAU,KAAK,IAAM,EAAa,SAAS,CAAC,EAE5C,IAAM,EAAe,EAA0B,CAAE,MAAK,CAAC,EACvD,EAAU,KAAK,IAAM,EAAa,SAAS,CAAC,EAE5C,IAAI,EACJ,GAAI,EAAO,OAAO,UAAY,GAC5B,EAAe,EAAoB,CAAE,MAAK,CAAC,EAC3C,EAAU,KAAK,IAAM,GAAc,SAAS,CAAC,EAG/C,IAAM,EAAa,GAAyB,CAC1C,OACA,WAAY,IAAM,CAChB,EAAa,iBAAiB,EAC9B,GAAc,iBAAiB,EAEnC,CAAC,EAGD,GAFA,EAAU,KAAK,IAAM,EAAW,SAAS,CAAC,EAEtC,EAAO,SAAS,UAAY,GAAO,CACrC,IAAM,EAAiB,EAAsB,CAC3C,OACA,OAAQ,EAAO,SAAS,QAAU,CAAC,QAAS,MAAM,CACpD,CAAC,EACD,EAAU,KAAK,IAAM,EAAe,SAAS,CAAC,EAGhD,IAAM,EAAsC,EAAO,SAAW,CAAC,EACzD,EAAiB,EAAc,SAAW,GAC1C,EAAwB,EAAc,uBAAyB,GACrE,GAAI,GAAkB,EAAuB,CAC3C,IAAM,EAAU,GAAsB,CACpC,OACA,aAAc,GAA0B,CACtC,YAAa,EAAc,aAAe,EAC5C,CAAC,EACD,QAAS,EACT,wBACA,UAAW,EAAc,WAAa,CAAC,EACvC,iBACE,EAAc,kBAAoB,GACpC,eACF,CAAC,EACD,EAAU,KAAK,IAAM,EAAQ,SAAS,CAAC,EAGzC,GAAI,GAAkB,EAAc,mBAAqB,GAAO,CAC9D,IAAM,EAAmB,EAAwB,CAC/C,OACA,gBACA,kBAAmB,EACrB,CAAC,EACD,EAAU,KAAK,IAAM,EAAiB,SAAS,CAAC,EAKlD,IAAM,EAAqB,IAAY,CACrC,GAAI,SAAS,kBAAoB,SAC1B,EAAU,MAAM,CAAE,UAAW,EAAK,CAAC,GAGtC,EAAa,IAAY,CACxB,EAAU,MAAM,CAAE,UAAW,EAAK,CAAC,GA4E1C,GA1EA,SAAS,iBAAiB,mBAAoB,CAAkB,EAChE,OAAO,iBAAiB,WAAY,CAAU,EAC9C,EAAU,KAAK,IAAM,CACnB,SAAS,oBAAoB,mBAAoB,CAAkB,EACnE,OAAO,oBAAoB,WAAY,CAAU,EAClD,EAED,EAAW,CACT,QAAQ,CAAC,EAAY,EAAQ,CAC3B,EAAc,KACZ,EAAQ,cAAc,CAAU,EACzB,CACL,KAAM,SACN,KAAM,YAAY,IAClB,SAAU,OACV,WAAY,KAAK,IAAI,EACrB,WAAY,CACV,kBAAmB,cACf,EAAS,EAAkB,EAAQ,QAAQ,EAAI,CAAC,CACtD,CACF,EACD,GAEH,KAAK,EAAG,CACN,GAAI,CACF,EAAQ,MAAM,EACd,KAAM,IAIV,QAAQ,CAAC,EAAM,EAAY,CACzB,EAAc,KAAO,CACnB,KAAM,SACN,KAAM,UAAU,IAChB,SAAU,OACV,WAAY,KAAK,IAAI,EACrB,WAAY,CACV,kBAAmB,KACf,EAAa,EAAkB,EAAY,QAAQ,EAAI,CAAC,CAC9D,CACF,EAAE,GAEJ,GAAG,CAAC,EAAU,EAAS,EAAU,CAC/B,EAAc,KAAO,CACnB,KAAM,MACN,KAAM,EACN,WACA,WAAY,KAAK,IAAI,EAGrB,WAAY,EAAW,EAAkB,CAAQ,EAAI,CAAC,CACxD,EAAE,GAEJ,KAAK,EAAG,CACN,OAAO,EAAU,MAAM,QAEnB,SAAQ,EAAG,CACf,QAAW,KAAY,EAAU,QAAQ,EACvC,GAAI,CACF,EAAS,EACT,KAAM,EAMV,GAAwB,EACxB,GAA2B,EAC3B,MAAM,EAAU,SAAS,EAE7B,EAII,EACF,EAAS,SACP,EAAuB,WACvB,EAAuB,MACzB,GAWS,GAAO,CAAC,IAAmC,CACtD,GAAI,OAAO,OAAW,IACpB,OAEF,GAAI,EACF,OAIF,GAFA,EAAc,GAEV,CAAC,EAAO,WAAa,CAAC,EAAO,YAAc,CAAC,EAAO,YAAa,CAElE,QAAQ,KACN,yFACF,EACA,OAGF,GAAI,EAAO,UAAY,OAAW,CAChC,GAAM,CAAM,EACZ,OAGF,GAAI,CACG,QAAQ,QAAQ,EAAO,QAAQ,CAAC,EAClC,KAAK,CAAC,IAAY,CACjB,GAAI,IAAY,GACd,GAAM,CAAM,EAEf,EACA,MAAM,IAAM,EAEZ,EACH,KAAM,IAMG,GAAW,CACtB,EACA,IACS,CACT,GAAI,EACF,EAAS,SAAS,EAAY,CAAM,EAIpC,OAAkB,CAAE,aAAY,QAAO,GAS9B,GAAQ,IAAY,CAC/B,GAAI,EACF,EAAS,MAAM,EAEf,OAAe,GACf,EAAkB,QAKT,GAAW,CACtB,EACA,IACS,CACT,GAAU,SAAS,EAAM,CAAU,GAOxB,GAAM,CACjB,EACA,EACA,IACS,CACT,GAAU,IAAI,EAAU,EAAS,CAAQ,GAI9B,GAAQ,SAA2B,CAC9C,MAAM,GAAU,MAAM,GAIX,GAAW,SAA2B,CACjD,IAAM,EAAS,EACf,EAAW,OACX,EAAc,GACd,EAAkB,OAClB,EAAe,GACf,MAAM,GAAQ,SAAS",
+  "debugId": "FEBA357242D8ABFD64756E2164756E21",
+  "names": []
+}

package/dist/input-capture.d.ts

@@ -0,0 +1,22 @@
+import type { WebEvent } from "./types";
+export interface InputCaptureOptions {
+    emit(event: WebEvent): void;
+}
+export interface InputCaptureHandle {
+    /** SPA navigation ends any open episodes. */
+    notifyNavigation(): void;
+    teardown(): void;
+}
+/**
+ * Field-interaction episodes: one `input` event per engagement with an
+ * editable element, not per keystroke. The event is timestamped at episode
+ * START (so the timeline reads causally: typed → the request that followed)
+ * and emitted when the episode ends — blur, Enter, ~10s idle, SPA
+ * navigation, tab hidden, or teardown.
+ *
+ * Privacy invariants: `event.data`, field values, selected option text, and
+ * key identities are never read (Enter is inspected solely as a boundary and
+ * never recorded); no value derivatives, including length. Names come from
+ * developer-authored sources only (see element-name.ts).
+ */
+export declare const installInputCapture: (options: InputCaptureOptions) => InputCaptureHandle;

package/dist/interactions.d.ts

@@ -0,0 +1,12 @@
+import type { WebEvent } from "./types";
+export interface InteractionCaptureOptions {
+    emit(event: WebEvent): void;
+}
+export interface InteractionCaptureHandle {
+    /** Navigation counts as a click response for dead-click detection. */
+    notifyNavigation(): void;
+    teardown(): void;
+}
+/** Short, stable-ish selector for an element; never includes text content. */
+export declare const computeSelector: (element: Element) => string;
+export declare const installInteractionCapture: (options: InteractionCaptureOptions) => InteractionCaptureHandle;

package/dist/navigation.d.ts

@@ -0,0 +1,24 @@
+import type { WebEvent } from "./types";
+export interface NavigationCaptureOptions {
+    emit(event: WebEvent): void;
+    /** Fired on every captured navigation (dead-click signal). */
+    onNavigate(): void;
+}
+export interface NavigationCaptureHandle {
+    teardown(): void;
+}
+/**
+ * Install dormant history patches around whatever implementations are
+ * currently live. Idempotent; re-wraps if a later actor replaced the methods
+ * after an earlier install (the displaced wrappers are inert passthroughs).
+ */
+export declare const ensureNavigationPatches: () => void;
+/** Restore the natives if the current implementations are still ours. */
+export declare const uninstallNavigationPatches: () => void;
+/**
+ * SPA navigation capture. Listeners alone miss programmatic navigation —
+ * which is most navigation in React apps — so `history.pushState` /
+ * `replaceState` are wrapped under the same isolation rules as the network
+ * patch.
+ */
+export declare const installNavigationCapture: (options: NavigationCaptureOptions) => NavigationCaptureHandle;

package/dist/network-event-format.d.ts

@@ -0,0 +1,5 @@
+import type { EventSeverity } from "./types";
+/** Compact display path: pathname when same-origin, host+path cross-origin. */
+export declare const urlPath: (resolved: string) => string;
+/** Status 0 means transport failure. */
+export declare const severityForStatus: (status: number) => EventSeverity;

package/dist/network.d.ts

@@ -0,0 +1,38 @@
+import type { TraceContextManager } from "./trace-context";
+import type { WebEvent } from "./types";
+export interface NetworkCaptureOptions {
+    emit(event: WebEvent): void;
+    traceContext: TraceContextManager;
+    /** Emit network events. */
+    capture: boolean;
+    /** Inject `traceparent` into allowlisted requests. */
+    propagateTraceContext: boolean;
+    /** Injection allowlist; empty means same-origin only. */
+    allowlist: (string | RegExp)[];
+    /** Response headers probed for a platform request id, in priority order. */
+    requestIdHeaders: string[];
+    /** SDK-internal endpoints: never captured, never injected. */
+    isInternalUrl(url: string): boolean;
+}
+export interface NetworkCaptureHandle {
+    teardown(): void;
+}
+/** Injection eligibility for the active config; used by the resource observer
+ * to decide whether a bypassed request is a diagnosable instrumentation gap. */
+export declare const isActiveInjectionTarget: (resolved: string) => boolean;
+/** Consume a wrapper-seen record matching this resource entry, if any. */
+export declare const consumeWrapperSeen: (url: string, startTime: number) => boolean;
+/**
+ * Install dormant fetch/XHR patches around whatever implementations are
+ * currently live. Idempotent, and re-wraps when a later actor (test stubs,
+ * mocking layers) replaced the primitives after an earlier install — the
+ * displaced wrapper is an inert passthrough, so single-processing holds.
+ */
+export declare const ensureNetworkPatches: () => void;
+/**
+ * Restore the natives if the current implementations are still ours; if
+ * someone patched on top of us, restoring would clobber them — the inactive
+ * wrappers pass through.
+ */
+export declare const uninstallNetworkPatches: () => void;
+export declare const installNetworkCapture: (options: NetworkCaptureOptions) => NetworkCaptureHandle;

package/dist/patch-marker.d.ts

@@ -0,0 +1,4 @@
+export declare const WRAPPED_MARKER = "__sazabiBrowserWrapped";
+/** Best-effort idempotency marker on wrapper functions. */
+export declare const markWrapped: (fn: object) => void;
+export declare const isWrapped: (fn: unknown) => boolean;

package/dist/register.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/register.js

@@ -0,0 +1,4 @@
+import{c as e,j as t}from"./chunk-rfm4nnme.js";if(typeof window<"u")try{t(),e()}catch{}
+
+//# debugId=711997A6CB99FCE864756E2164756E21
+//# sourceMappingURL=register.js.map

package/dist/register.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/register.ts"],
+  "sourcesContent": [
+    "/**\n * Early-instrumentation entrypoint: `import \"@sazabi/browser/register\"`.\n *\n * Importing this module installs the SDK's fetch/XHR/history patches as\n * dormant, transparent passthroughs at module-evaluation time — before any\n * other library's module-scope code can capture the native functions (the\n * race `init()` alone cannot win, since every static import in an app's\n * entry file evaluates before its first statement). `init()` later activates\n * them with configuration; until then they observe nothing, store nothing,\n * and send nothing.\n *\n * Put this import above all other imports in your application entry module.\n */\nimport { ensureNavigationPatches } from \"./navigation\";\nimport { ensureNetworkPatches } from \"./network\";\n\nif (typeof window !== \"undefined\") {\n  try {\n    ensureNetworkPatches();\n    ensureNavigationPatches();\n  } catch {\n    // Registration must never break the host app; init() re-ensures.\n  }\n}\n"
+  ],
+  "mappings": "+CAgBA,GAAI,OAAO,OAAW,IACpB,GAAI,CACF,EAAqB,EACrB,EAAwB,EACxB,KAAM",
+  "debugId": "711997A6CB99FCE864756E2164756E21",
+  "names": []
+}

package/dist/resource-observer.d.ts

@@ -0,0 +1,22 @@
+import type { WebEvent } from "./types";
+export interface ResourceObserverOptions {
+    emit(event: WebEvent): void;
+    /** SDK-internal endpoints: never reported. */
+    isInternalUrl(url: string): boolean;
+    /** Would the active config have injected trace context into this URL? */
+    isInjectionTarget(url: string): boolean;
+}
+export interface ResourceObserverHandle {
+    teardown(): void;
+}
+/**
+ * Patch-independent network visibility: PerformanceObserver resource timing
+ * sees every fetch/XHR the page performs — including ones issued by clients
+ * that captured the native functions before the SDK patched (`buffered: true`
+ * also replays requests from before init). Wrapper-captured requests are
+ * deduped out via the wrapper-seen ledger; the leftovers get a degraded
+ * network event (no method, no trace id — observation cannot inject), plus a
+ * once-per-origin instrumentation-gap diagnostic when the URL was an
+ * injection target, so bypass is a visible signal instead of silent loss.
+ */
+export declare const installResourceObserver: (options: ResourceObserverOptions) => ResourceObserverHandle;

package/dist/session.d.ts

@@ -0,0 +1,23 @@
+export interface SessionManager {
+    getSessionId(): string;
+    getWindowId(): string;
+    getDistinctId(): string | undefined;
+    /**
+     * Set the client-asserted identity. Switching from one identity directly
+     * to a different one rotates the session and window ids so two users on a
+     * shared device never thread into one timeline.
+     */
+    setDistinctId(distinctId: string): void;
+    /** Logout: clear identity and rotate both session and window ids. */
+    reset(): void;
+    /** Record user activity; may rotate the session on idle/max-age expiry. */
+    touch(): void;
+}
+/**
+ * Cross-tab session identity. `session.id` is the visit (localStorage, shared
+ * across tabs, last-writer-wins on rotation races — a split session is
+ * cosmetic, not data loss). `session.window_id` is this tab (sessionStorage).
+ * `session.distinct_id` is read through storage so identify/reset in one tab
+ * is visible to sibling tabs on their next event.
+ */
+export declare const createSessionManager: () => SessionManager;

package/dist/trace-context.d.ts

@@ -0,0 +1,31 @@
+export interface RequestTraceContext {
+    /** Headers to inject (`traceparent`, and `tracestate` when present). */
+    headers: Record<string, string>;
+    traceId: string;
+    spanId: string;
+}
+export interface TraceContextManager {
+    /** Trace context for one outgoing request, minted at request time. */
+    forRequest(): RequestTraceContext;
+}
+/** The subset of an OTel SpanContext this module consumes. */
+export interface HostSpanContext {
+    traceId: string;
+    spanId: string;
+    traceFlags: number;
+    traceState?: {
+        serialize(): string;
+    };
+}
+export declare const readHostSpanContext: () => HostSpanContext | undefined;
+/**
+ * W3C trace context for outgoing requests — hand-rolled header formatting
+ * (equivalence-tested against OTel's W3CTraceContextPropagator), zero
+ * runtime dependencies. If the host app runs its own OTel and has an active
+ * span, that span's context (including its flags and tracestate) is reused
+ * so we join the customer's trace instead of forking a new one; otherwise a
+ * fresh root is minted with the sampled flag defaulting to off (`-00`).
+ */
+export declare const createTraceContextManager: (options: {
+    sampledFlag: boolean;
+}) => TraceContextManager;

package/dist/transport.d.ts

@@ -0,0 +1,56 @@
+import type { EventAttributes, EventSeverity, WebEvent } from "./types";
+type OtlpAnyValue = {
+    stringValue: string;
+} | {
+    intValue: string;
+} | {
+    doubleValue: number;
+} | {
+    boolValue: boolean;
+};
+interface OtlpKeyValue {
+    key: string;
+    value: OtlpAnyValue;
+}
+export interface OtlpLogRecord {
+    timeUnixNano: string;
+    severityNumber: number;
+    severityText: EventSeverity;
+    body: {
+        stringValue: string;
+    };
+    attributes: OtlpKeyValue[];
+    /** OTLP/JSON encodes trace/span ids as hex (unlike proto3 JSON's base64). */
+    traceId?: string;
+    spanId?: string;
+}
+export declare const encodeLogRecord: (event: WebEvent, baseAttributes: EventAttributes) => OtlpLogRecord;
+export interface TransportOptions {
+    /** Full OTLP logs endpoint, e.g. `https://web.<region>.intake.<domain>/v1/logs`. */
+    url: string;
+    publicKey: string;
+    resourceAttributes: EventAttributes;
+    /**
+     * The fetch to deliver with — captured before the SDK's network patch
+     * installs, so exporter traffic can never recurse through our own wrapper
+     * or appear in the captured event stream.
+     */
+    fetchImpl: typeof fetch;
+    flushIntervalMs: number;
+    maxBatchBytes: number;
+    maxQueuedEvents: number;
+}
+export interface Transport {
+    enqueue(record: OtlpLogRecord): void;
+    /**
+     * Deliver everything queued. `keepalive: true` is for unload paths — each
+     * request body must stay inside the browser's ~64 KiB keepalive budget,
+     * which enqueue-side chunking guarantees via `maxBatchBytes`.
+     */
+    flush(options?: {
+        keepalive?: boolean;
+    }): Promise<void>;
+    shutdown(): Promise<void>;
+}
+export declare const createTransport: (options: TransportOptions) => Transport;
+export {};

package/dist/types.d.ts

@@ -0,0 +1,96 @@
+export type AttributeValue = string | number | boolean;
+export type EventAttributes = Record<string, AttributeValue | undefined>;
+export type EventSeverity = "DEBUG" | "INFO" | "WARN" | "ERROR";
+export type WebEventType = "navigation" | "click" | "rage_click" | "dead_click" | "input" | "network" | "error" | "custom" | "log";
+/** An SDK-internal semantic event, before OTLP encoding. */
+export interface WebEvent {
+    type: WebEventType;
+    body: string;
+    severity: EventSeverity;
+    timeUnixMs: number;
+    /** Set on network events when trace context was injected into the request. */
+    traceId?: string;
+    spanId?: string;
+    attributes: EventAttributes;
+}
+export interface InputCaptureConfig {
+    /**
+     * Emit one `input` event per field-interaction episode (never keystrokes,
+     * never values — see the privacy invariants in input-capture.ts).
+     * Default true.
+     */
+    capture?: boolean;
+}
+export type ConsoleCaptureLevel = "error" | "warn" | "info" | "debug";
+export interface ConsoleCaptureConfig {
+    /** Mirror console output into the event stream. Default true. */
+    capture?: boolean;
+    /** Console levels to mirror. Default ["error", "warn"]. */
+    levels?: ConsoleCaptureLevel[];
+}
+export interface NetworkCaptureConfig {
+    /** Emit network events for fetch/XHR. Default true. */
+    capture?: boolean;
+    /** Inject W3C `traceparent` into allowlisted requests. Default true. */
+    propagateTraceContext?: boolean;
+    /**
+     * Patch-independent fallback capture via PerformanceObserver resource
+     * timing: requests that bypass the fetch/XHR patches (clients that
+     * captured the natives before the SDK) still produce degraded network
+     * events plus a once-per-origin instrumentation-gap diagnostic.
+     * Default true.
+     */
+    resourceFallback?: boolean;
+    /**
+     * Response headers probed (in order) for a platform request id to attach
+     * as `web.network.request_id` — an exact join key against platform logs
+     * (CDN/edge/PaaS) without any backend change. Cross-origin reads require
+     * the header in `Access-Control-Expose-Headers`.
+     */
+    requestIdHeaders?: string[];
+    /**
+     * URL patterns eligible for `traceparent` injection. Strings match by
+     * substring, RegExps by test. Default: same-origin requests only —
+     * cross-origin injection requires the target to allowlist the header in
+     * CORS, so it is opt-in.
+     */
+    allowlist?: (string | RegExp)[];
+    /**
+     * Set the sampled flag (`-01`) on SDK-minted trace roots. Default false
+     * (`-00`): the sampled bit steers customers' ParentBased backend samplers,
+     * and forcing 100% backend trace sampling is not this SDK's call to make.
+     * The logs-side trace_id join works regardless of this flag.
+     */
+    sampledFlag?: boolean;
+}
+export interface BrowserSdkConfig {
+    /** Sazabi public ingest key (`sazabi_public_...`). */
+    publicKey: string;
+    /** Adapter intake host, e.g. `https://web.us-west-2.intake.sazabi.com`. */
+    intakeHost: string;
+    /** Logical service name for the frontend app. */
+    serviceName: string;
+    /** Service version (e.g. git SHA). */
+    serviceVersion?: string;
+    /** Deployment environment (e.g. "production"). */
+    environment?: string;
+    network?: NetworkCaptureConfig;
+    console?: ConsoleCaptureConfig;
+    input?: InputCaptureConfig;
+    /**
+     * Consent gate: capture holds until this resolves true. When it resolves
+     * false the SDK stays dormant. Richer semantics (revocation, per-plane
+     * grants) are deliberately deferred; only the API shape is stable.
+     */
+    consent?: () => boolean | Promise<boolean>;
+    /** Batch flush cadence in ms. Default 5000. */
+    flushIntervalMs?: number;
+    /**
+     * Soft cap per OTLP request body in bytes. Default 57344 (56 KiB), leaving
+     * headroom under the ~64 KiB fetch-keepalive budget that unload flushes
+     * must fit inside.
+     */
+    maxBatchBytes?: number;
+    /** Max buffered events before the oldest are dropped. Default 500. */
+    maxQueuedEvents?: number;
+}

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare const SDK_NAME = "@sazabi/browser";
+export declare const SDK_VERSION = "0.2.0";

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@sazabi/browser",
+  "description": "Sazabi browser observability SDK — semantic event stream capture with W3C trace context propagation",
+  "version": "0.2.0-dev.g3566294",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./register": {
+      "types": "./dist/register.d.ts",
+      "default": "./dist/register.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist"
+  ],
+  "sideEffects": [
+    "./dist/register.js"
+  ],
+  "license": "Apache-2.0",
+  "homepage": "https://github.com/sazabi/browser",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/sazabi/browser.git"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  }
+}