@scalebun-release/web 2.2.2

package/dist/features/network/NetworkFeature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NetworkFeature.js","sourceRoot":"","sources":["../../../src/features/network/NetworkFeature.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAqBlD,SAAS,QAAQ,CAAC,GAAoB,EAAE,GAAW;IACjD,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,OAAO,cAAc;IAA3B;QACW,SAAI,GAAG,SAAS,CAAC;QAClB,WAAM,GAAG,KAAK,CAAC;QACf,eAAU,GAAsB,EAAE,CAAC;QACnC,WAAM,GAAG,eAAe,CAAC;QACzB,eAAU,GAAG,CAAC,CAAC;QACf,YAAO,GAAG,CAAC,CAAC,CAAC,0CAA0C;QAEvD,aAAQ,GAAmC,EAAE,CAAC;QAC9C,mBAAc,GAAG,KAAK,CAAC;QAGd,gBAAW,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACjD,aAAQ,GAAG,KAAK,CAAC;QAGR,aAAQ,GAAG;YAC1B,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAiC;YAChF,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAgC;YACtH,OAAO,EAAE,CAAC;YACV,iBAAiB,EAAE,CAAC;YACpB,SAAS,EAAE,CAAC;YACZ,cAAc,EAAE,CAAC;SAClB,CAAC;IA4OJ,CAAC;IA1OC,iEAAiE;IACjE,KAAK;QACH,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;YAChC,UAAU,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE;YAC3C,SAAS,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE;YACzC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO;YAC9B,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB;YAClD,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAClC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc;SAC7C,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,GAAmB;QACvB,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAO;QAE1C,MAAM,IAAI,GAAG,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,IAAI,eAAe,CAAC;QACpD,IAAI,CAAC,UAAU,GAAG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,4FAA4F;QAC5F,MAAM,EAAE,GAAI,IAAmC,CAAC,aAAa,CAAC;QAC9D,IAAI,CAAC,OAAO,GAAG,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,GAAG,IAAI,OAAO,CACxB,IAAI,CAAC,OAAO,EACZ,CAAC,IAAI,EAAE,EAAE;gBACP,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAClB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC,EACD,GAAG,EAAE;gBACH,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC1B,CAAC,CACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QACpC,2FAA2F;QAC3F,8FAA8F;QAC9F,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,iBAAiB,KAAK,IAAI,CAAC;QACtD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;QAC5C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,+FAA+F;QAC/F,yEAAyE;QACzE,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC,QAAQ,GAAG;gBACd,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC;gBACzE,oBAAoB,EAClB,IAAI,CAAC,oBAAoB,IAAI,IAAI,CAAC,oBAAoB,CAAC,MAAM;oBAC3D,CAAC,CAAC,IAAI,CAAC,oBAAoB;oBAC3B,CAAC,CAAC,CAAC,kBAAkB,EAAE,YAAY,CAAC;aACzC,CAAC;QACJ,CAAC;QAED,8FAA8F;QAC9F,4FAA4F;QAC5F,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QAE3C,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC;QAC5B,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,CAAC,CAAa,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAExD,4FAA4F;QAC5F,4FAA4F;QAC5F,EAAE;QACF,6FAA6F;QAC7F,8FAA8F;QAC9F,gGAAgG;QAChG,4FAA4F;QAC5F,8DAA8D;QAC9D,EAAE;QACF,2FAA2F;QAC3F,EAAE;QACF,oFAAoF;QACpF,8FAA8F;QAC9F,gFAAgF;QAChF,4EAA4E;QAC5E,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,IAAI,SAAS,CAAC;QAE3E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,MAA4C,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;QAClH,IAAI,CAAC,UAAU,CAAC,IAAI,CAClB,UAAU,CAAC,MAA8D,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,CAC5G,CAAC;QAEF,6FAA6F;QAC7F,8FAA8F;QAC9F,MAAM,KAAK,GAAG;YACZ,EAAE,EAAE,IAAI,CAAC,cAAc,KAAK,KAAK;YACjC,GAAG,EAAE,IAAI,CAAC,QAAQ,KAAK,KAAK;YAC5B,MAAM,EAAE,IAAI;SACb,CAAC;QACF,MAAM,GAAG,GAAG,OAAO,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,KAAK,MAAM,CAAC,qBAAqB,CAAC;aAC/B,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YACV,IAAI,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,MAAe,EAAE,GAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QACvH,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE;YACV,6DAA6D;QAC/D,CAAC,CAAC,CAAC;QAEL,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,wFAAwF;IAChF,MAAM,CAAC,GAAmB,EAAE,CAAa;QAC/C;;;;;;;;;;WAUG;QACH,IACE,CAAC,IAAI,CAAC,cAAc;YACpB,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,kBAAkB,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,EAC5E,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;YAClC,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QACD,6FAA6F;QAC7F,6FAA6F;QAC7F,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC;QACnC,IAAI,IAAI,CAAC,QAAQ,IAAI,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChE,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC,IAAI,CAAC,MAAM;oBAAE,OAAO;gBACzB,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC1D,IAAI,MAAM,CAAC,MAAM;oBAAE,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC5C,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS;oBAAE,CAAC,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;gBAC5G,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACxB,CAAC,EAAE,CAAC,CAAC,CAAC;YACN,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACxB,CAAC;IAEO,QAAQ,CAAC,GAAmB,EAAE,CAAa;QACjD,4FAA4F;QAC5F,iGAAiG;QACjG,wDAAwD;QACxD,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC;QACnC,MAAM,WAAW,GAAG,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACxF,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,KAAK,KAAK,MAAM,CAAC;QACrD,IAAI,WAAW,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,CAAC,QAAQ,CAAC;iBACb,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;iBACzG,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;iBACf,OAAO,CAAC,GAAG,EAAE;gBACZ,IAAI,IAAI,CAAC,MAAM;oBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACrC,CAAC,CAAC,CAAC;YACL,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,4FAA4F;IACpF,YAAY,CAAC,CAAa;QAChC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QACtC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAChF,CAAC;IAEO,IAAI,CAAC,GAAmB,EAAE,CAAa;QAC7C,IAAI,IAAI,GAAG,aAAa,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrD,iGAAiG;QACjG,yEAAyE;QACzE,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,UAAU,CACrB,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,EAC7E,IAAI,CAAC,UAAU,CAChB,CAAC;YACF,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACxB,OAAO;YACT,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC5B,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAClC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;oBAChB,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACxB,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,GAAG,CAAC;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,2EAA2E;YAC7E,CAAC;QACH,CAAC;QACD,kGAAkG;QAClG,wGAAwG;QACxG,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO;YAAE,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED;+FAC2F;IACnF,QAAQ,CAAC,GAAmB,EAAE,IAAiB;QACrD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,2DAA2D;YACpF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IAED,2EAA2E;IACnE,MAAM,CAAC,IAAiB;QAC9B,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACzB,MAAM,KAAK,GAAI,IAAI,CAAC,QAAoC,IAAI,MAAM,CAAC;QACnE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAiC,CAAC;QACvD,IAAI,OAAO;YAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;IACpE,CAAC;IAED,QAAQ;QACN,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU;YAAE,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;CACF"}

package/dist/features/network/capture/body.d.ts

@@ -0,0 +1,31 @@
+/**
+ * N4 — hardened request/response body capture (LAZY chunk, opt-in via `network.captureBodies`).
+ * Off by default for privacy. When on, this is the ONLY place a body/header is read into an item, and
+ * it is defended:
+ *   - content-type allowlist (default json + text) — binary / unknown types are skipped.
+ *   - hard byte cap (default 8 KB, ceiling-enforced) — oversized bodies are truncated with a marker.
+ *   - PII redaction (`scrubText`) over the captured text + a header denylist (auth/cookies/tokens).
+ * Stream-safety is guaranteed by the interceptor (it clones the response before the host reads it);
+ * here we only consume the already-cloned text. Never throws — capture is best-effort.
+ */
+import type { NetCapture } from '../types.js';
+export interface BodyCaptureOptions {
+    bodyMaxBytes: number;
+    contentTypeAllowlist: string[];
+}
+export declare const DEFAULT_BODY_MAX_BYTES = 8192;
+export declare const BODY_MAX_CEILING: number;
+export declare const DEFAULT_CONTENT_TYPES: string[];
+export declare function resolveBodyOptions(o?: Partial<BodyCaptureOptions>): BodyCaptureOptions;
+/** True when a content-type is eligible for capture (prefix match, e.g. 'application/json; charset…'). */
+export declare function isAllowedContentType(ct: string | undefined, allowlist: string[]): boolean;
+/** Cap + redact a body string. Returns the (possibly truncated, scrubbed) text. */
+export declare function sanitizeBody(text: string, maxBytes: number): string;
+/** Build a redacted header map, dropping denylisted keys. */
+export declare function sanitizeHeaders(headers: Record<string, string> | undefined): Record<string, string> | undefined;
+/**
+ * Enrich a settled capture with request/response bodies in place, honoring the allowlist + cap +
+ * redaction. Mutates `c.request` / `c.response`. Best-effort; never throws.
+ */
+export declare function captureBodies(c: NetCapture, opts: BodyCaptureOptions): Promise<void>;
+//# sourceMappingURL=body.d.ts.map

package/dist/features/network/capture/body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.d.ts","sourceRoot":"","sources":["../../../../src/features/network/capture/body.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAW,UAAU,EAAE,MAAM,UAAU,CAAC;AAEpD,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,EAAE,CAAC;CAChC;AAED,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAC3C,eAAO,MAAM,gBAAgB,QAAY,CAAC;AAC1C,eAAO,MAAM,qBAAqB,UAAqC,CAAC;AAYxE,wBAAgB,kBAAkB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,kBAAkB,CAItF;AAED,0GAA0G;AAC1G,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAIzF;AAED,mFAAmF;AACnF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAInE;AAED,6DAA6D;AAC7D,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAS/G;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB1F"}

package/dist/features/network/capture/body.js

@@ -0,0 +1,81 @@
+/**
+ * N4 — hardened request/response body capture (LAZY chunk, opt-in via `network.captureBodies`).
+ * Off by default for privacy. When on, this is the ONLY place a body/header is read into an item, and
+ * it is defended:
+ *   - content-type allowlist (default json + text) — binary / unknown types are skipped.
+ *   - hard byte cap (default 8 KB, ceiling-enforced) — oversized bodies are truncated with a marker.
+ *   - PII redaction (`scrubText`) over the captured text + a header denylist (auth/cookies/tokens).
+ * Stream-safety is guaranteed by the interceptor (it clones the response before the host reads it);
+ * here we only consume the already-cloned text. Never throws — capture is best-effort.
+ */
+import { scrubText } from '../../../core/index.js';
+export const DEFAULT_BODY_MAX_BYTES = 8192;
+export const BODY_MAX_CEILING = 64 * 1024; // hard ceiling regardless of config (caps egress)
+export const DEFAULT_CONTENT_TYPES = ['application/json', 'text/plain'];
+/** Header names never captured (case-insensitive) — auth material + cookies must never leave. */
+const HEADER_DENYLIST = new Set([
+    'authorization',
+    'cookie',
+    'set-cookie',
+    'x-api-key',
+    'x-auth-token',
+    'proxy-authorization',
+]);
+export function resolveBodyOptions(o) {
+    const max = Math.min(Math.max(0, o?.bodyMaxBytes ?? DEFAULT_BODY_MAX_BYTES), BODY_MAX_CEILING);
+    const types = o?.contentTypeAllowlist && o.contentTypeAllowlist.length ? o.contentTypeAllowlist : DEFAULT_CONTENT_TYPES;
+    return { bodyMaxBytes: max, contentTypeAllowlist: types };
+}
+/** True when a content-type is eligible for capture (prefix match, e.g. 'application/json; charset…'). */
+export function isAllowedContentType(ct, allowlist) {
+    if (!ct)
+        return false;
+    const lc = ct.toLowerCase();
+    return allowlist.some((a) => lc.startsWith(a.toLowerCase()));
+}
+/** Cap + redact a body string. Returns the (possibly truncated, scrubbed) text. */
+export function sanitizeBody(text, maxBytes) {
+    let out = text;
+    if (out.length > maxBytes)
+        out = out.slice(0, maxBytes) + '…[truncated]';
+    return scrubText(out);
+}
+/** Build a redacted header map, dropping denylisted keys. */
+export function sanitizeHeaders(headers) {
+    if (!headers)
+        return undefined;
+    const out = {};
+    for (const k in headers) {
+        if (HEADER_DENYLIST.has(k.toLowerCase()))
+            continue;
+        const v = headers[k];
+        if (typeof v === 'string')
+            out[k] = scrubText(v);
+    }
+    return Object.keys(out).length ? out : undefined;
+}
+/**
+ * Enrich a settled capture with request/response bodies in place, honoring the allowlist + cap +
+ * redaction. Mutates `c.request` / `c.response`. Best-effort; never throws.
+ */
+export async function captureBodies(c, opts) {
+    try {
+        // Request body — already a string when the interceptor could read it (string / URLSearchParams).
+        if (c.reqBody && isAllowedContentType(c.reqContentType, opts.contentTypeAllowlist)) {
+            const req = { body: sanitizeBody(c.reqBody, opts.bodyMaxBytes) };
+            c.request = c.request ? { ...c.request, ...req } : req;
+        }
+        // Response body — read the stream-safe clone, gated by content-type.
+        if (c.readResponseText && isAllowedContentType(c.resContentType, opts.contentTypeAllowlist)) {
+            const text = await c.readResponseText();
+            if (text != null) {
+                const res = { body: sanitizeBody(text, opts.bodyMaxBytes) };
+                c.response = c.response ? { ...c.response, ...res } : res;
+            }
+        }
+    }
+    catch {
+        /* capture is best-effort — never lose the item over a body read */
+    }
+}
+//# sourceMappingURL=body.js.map

package/dist/features/network/capture/body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.js","sourceRoot":"","sources":["../../../../src/features/network/capture/body.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAQ1C,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAC3C,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,kDAAkD;AAC7F,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;AAExE,iGAAiG;AACjG,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,eAAe;IACf,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,cAAc;IACd,qBAAqB;CACtB,CAAC,CAAC;AAEH,MAAM,UAAU,kBAAkB,CAAC,CAA+B;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,YAAY,IAAI,sBAAsB,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC/F,MAAM,KAAK,GAAG,CAAC,EAAE,oBAAoB,IAAI,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,qBAAqB,CAAC;IACxH,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;AAC5D,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,oBAAoB,CAAC,EAAsB,EAAE,SAAmB;IAC9E,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5B,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,QAAgB;IACzD,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,IAAI,GAAG,CAAC,MAAM,GAAG,QAAQ;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,cAAc,CAAC;IACzE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,eAAe,CAAC,OAA2C;IACzE,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QACnD,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,CAAa,EAAE,IAAwB;IACzE,IAAI,CAAC;QACH,iGAAiG;QACjG,IAAI,CAAC,CAAC,OAAO,IAAI,oBAAoB,CAAC,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACnF,MAAM,GAAG,GAAY,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1E,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACzD,CAAC;QACD,qEAAqE;QACrE,IAAI,CAAC,CAAC,gBAAgB,IAAI,oBAAoB,CAAC,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAC5F,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;YACxC,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;gBACjB,MAAM,GAAG,GAAY,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;gBACrE,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;IACrE,CAAC;AACH,CAAC"}

package/dist/features/network/classify.d.ts

@@ -0,0 +1,21 @@
+/**
+ * N0 — failure taxonomy + slow flag. Turns the interceptor's raw outcome (status / thrown error /
+ * abort) into a stable `failure` enum the dashboard can triage by, plus a `slow` flag. Pure +
+ * zero-dep. The taxonomy mirrors the wire enum on `NetworkItemSchema.failure`.
+ *
+ * A CORS-blocked fetch and a genuine network drop both surface to JS as a thrown TypeError with
+ * status 0 — we disambiguate by the error message shape (browsers say "Failed to fetch" / mention
+ * CORS) but stay conservative: ambiguous → `network_error`.
+ */
+import type { NetFailure } from './types.js';
+export declare const DEFAULT_SLOW_MS = 2000;
+/** Map a settled HTTP request to a failure class, or undefined when it succeeded. */
+export declare function classifyHttp(input: {
+    status?: number;
+    error?: string;
+    aborted?: boolean;
+    timedOut?: boolean;
+}): NetFailure | undefined;
+/** Whether a request crossed the slow threshold (failures are kept regardless; slow is orthogonal). */
+export declare function isSlow(duration: number, slowMs?: number): boolean;
+//# sourceMappingURL=classify.d.ts.map

package/dist/features/network/classify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.d.ts","sourceRoot":"","sources":["../../../src/features/network/classify.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC,qFAAqF;AACrF,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,GAAG,UAAU,GAAG,SAAS,CAkBzB;AAED,uGAAuG;AACvG,wBAAgB,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,SAAkB,GAAG,OAAO,CAE1E"}

package/dist/features/network/classify.js

@@ -0,0 +1,50 @@
+/**
+ * N0 — failure taxonomy + slow flag. Turns the interceptor's raw outcome (status / thrown error /
+ * abort) into a stable `failure` enum the dashboard can triage by, plus a `slow` flag. Pure +
+ * zero-dep. The taxonomy mirrors the wire enum on `NetworkItemSchema.failure`.
+ *
+ * A CORS-blocked fetch and a genuine network drop both surface to JS as a thrown TypeError with
+ * status 0 — we disambiguate by the error message shape (browsers say "Failed to fetch" / mention
+ * CORS) but stay conservative: ambiguous → `network_error`.
+ */
+export const DEFAULT_SLOW_MS = 2000;
+/** Map a settled HTTP request to a failure class, or undefined when it succeeded. */
+export function classifyHttp(input) {
+    const { status, error, aborted, timedOut } = input;
+    if (aborted)
+        return 'abort';
+    if (timedOut)
+        return 'timeout';
+    // status 0 with a thrown error ⇒ transport-level failure (CORS / network drop).
+    if ((status === 0 || status === undefined) && error) {
+        if (isAbortMessage(error))
+            return 'abort';
+        if (isTimeoutMessage(error))
+            return 'timeout';
+        if (isCorsMessage(error))
+            return 'cors';
+        return 'network_error';
+    }
+    if (typeof status === 'number') {
+        if (status >= 500)
+            return 'http_5xx';
+        if (status >= 400)
+            return 'http_4xx';
+    }
+    return undefined;
+}
+/** Whether a request crossed the slow threshold (failures are kept regardless; slow is orthogonal). */
+export function isSlow(duration, slowMs = DEFAULT_SLOW_MS) {
+    return typeof duration === 'number' && duration >= slowMs;
+}
+function isAbortMessage(msg) {
+    return /\babort(ed)?\b/i.test(msg);
+}
+function isTimeoutMessage(msg) {
+    return /\btimed?\s*out\b|\btimeout\b/i.test(msg);
+}
+/** Heuristic CORS detection from a thrown-error message (best-effort; browsers vary). */
+function isCorsMessage(msg) {
+    return /\bcors\b|cross-origin|access-control|opaque/i.test(msg);
+}
+//# sourceMappingURL=classify.js.map

package/dist/features/network/classify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.js","sourceRoot":"","sources":["../../../src/features/network/classify.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AAEpC,qFAAqF;AACrF,MAAM,UAAU,YAAY,CAAC,KAK5B;IACC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IACnD,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,QAAQ;QAAE,OAAO,SAAS,CAAC;IAE/B,gFAAgF;IAChF,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,SAAS,CAAC,IAAI,KAAK,EAAE,CAAC;QACpD,IAAI,cAAc,CAAC,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC;QAC1C,IAAI,gBAAgB,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9C,IAAI,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QACxC,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,MAAM,IAAI,GAAG;YAAE,OAAO,UAAU,CAAC;QACrC,IAAI,MAAM,IAAI,GAAG;YAAE,OAAO,UAAU,CAAC;IACvC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,MAAM,CAAC,QAAgB,EAAE,MAAM,GAAG,eAAe;IAC/D,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,IAAI,MAAM,CAAC;AAC5D,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,OAAO,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,OAAO,+BAA+B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnD,CAAC;AAED,yFAAyF;AACzF,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,8CAA8C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClE,CAAC"}

package/dist/features/network/dedup.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Network request dedup (opt-in via `network.dedupWindowMs`). Collapses a burst of identical requests
+ * — keyed by `method|route|status` — within a time window into ONE trailing item carrying `repeat: N`.
+ *
+ * Design:
+ *  - The FIRST request of a burst emits IMMEDIATELY (zero added latency); subsequent identical ones
+ *    within the window are suppressed + counted, and one collapsed item is emitted once the burst goes
+ *    quiet (window of silence). A lone request emits once with no trailing item.
+ *  - BOUNDED: at most MAX_KEYS active windows; when full, the oldest is evicted (its pending repeat
+ *    flushed first) so high-cardinality traffic can never grow the map unbounded.
+ *  - `dispose()` clears all pending timers WITHOUT emitting (the pipeline is shutting down).
+ */
+import type { NetworkItem } from '@scalebun/protocol';
+type EmitFn = (item: NetworkItem) => void;
+/** Cap on concurrently-tracked dedup windows (memory guard). */
+export declare const MAX_KEYS = 500;
+export declare class Deduper {
+    private readonly windowMs;
+    private readonly emit;
+    /** Stats hook fired once per suppressed (collapsed) request. */
+    private readonly onSuppress?;
+    private readonly map;
+    constructor(windowMs: number, emit: EmitFn, 
+    /** Stats hook fired once per suppressed (collapsed) request. */
+    onSuppress?: (() => void) | undefined);
+    /** Returns true if the item was emitted now, false if suppressed into a pending window. */
+    push(item: NetworkItem): boolean;
+    private flush;
+    private evictOldest;
+    /** Pending-window count (diagnostics/tests). */
+    get pending(): number;
+    /** Teardown: clear all timers without emitting. */
+    dispose(): void;
+}
+export {};
+//# sourceMappingURL=dedup.d.ts.map

package/dist/features/network/dedup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dedup.d.ts","sourceRoot":"","sources":["../../../src/features/network/dedup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,KAAK,MAAM,GAAG,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;AAO1C,gEAAgE;AAChE,eAAO,MAAM,QAAQ,MAAM,CAAC;AAE5B,qBAAa,OAAO;IAIhB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,gEAAgE;IAChE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;IAN9B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA4B;gBAG7B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM;IAC7B,gEAAgE;IAC/C,UAAU,CAAC,GAAE,MAAM,IAAI,aAAA;IAG1C,2FAA2F;IAC3F,IAAI,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO;IAiBhC,OAAO,CAAC,KAAK;IAMb,OAAO,CAAC,WAAW;IASnB,gDAAgD;IAChD,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,mDAAmD;IACnD,OAAO,IAAI,IAAI;CAIhB"}

package/dist/features/network/dedup.js

@@ -0,0 +1,68 @@
+/**
+ * Network request dedup (opt-in via `network.dedupWindowMs`). Collapses a burst of identical requests
+ * — keyed by `method|route|status` — within a time window into ONE trailing item carrying `repeat: N`.
+ *
+ * Design:
+ *  - The FIRST request of a burst emits IMMEDIATELY (zero added latency); subsequent identical ones
+ *    within the window are suppressed + counted, and one collapsed item is emitted once the burst goes
+ *    quiet (window of silence). A lone request emits once with no trailing item.
+ *  - BOUNDED: at most MAX_KEYS active windows; when full, the oldest is evicted (its pending repeat
+ *    flushed first) so high-cardinality traffic can never grow the map unbounded.
+ *  - `dispose()` clears all pending timers WITHOUT emitting (the pipeline is shutting down).
+ */
+/** Cap on concurrently-tracked dedup windows (memory guard). */
+export const MAX_KEYS = 500;
+export class Deduper {
+    constructor(windowMs, emit, 
+    /** Stats hook fired once per suppressed (collapsed) request. */
+    onSuppress) {
+        this.windowMs = windowMs;
+        this.emit = emit;
+        this.onSuppress = onSuppress;
+        this.map = new Map();
+    }
+    /** Returns true if the item was emitted now, false if suppressed into a pending window. */
+    push(item) {
+        const key = `${item.method}|${item.route ?? item.url}|${item.status ?? item.error ?? ''}`;
+        const e = this.map.get(key);
+        if (e) {
+            e.count++;
+            e.item = item; // keep the latest representative
+            clearTimeout(e.timer);
+            e.timer = setTimeout(() => this.flush(key), this.windowMs);
+            this.onSuppress?.();
+            return false;
+        }
+        if (this.map.size >= MAX_KEYS)
+            this.evictOldest();
+        this.map.set(key, { count: 0, item, timer: setTimeout(() => this.flush(key), this.windowMs) });
+        this.emit(item);
+        return true;
+    }
+    flush(key) {
+        const e = this.map.get(key);
+        this.map.delete(key);
+        if (e && e.count > 0)
+            this.emit({ ...e.item, repeat: e.count });
+    }
+    evictOldest() {
+        const oldest = this.map.keys().next().value; // Map preserves insertion order
+        if (oldest !== undefined) {
+            const e = this.map.get(oldest);
+            if (e)
+                clearTimeout(e.timer);
+            this.flush(oldest); // emit its pending repeat (if any) before dropping it
+        }
+    }
+    /** Pending-window count (diagnostics/tests). */
+    get pending() {
+        return this.map.size;
+    }
+    /** Teardown: clear all timers without emitting. */
+    dispose() {
+        for (const e of this.map.values())
+            clearTimeout(e.timer);
+        this.map.clear();
+    }
+}
+//# sourceMappingURL=dedup.js.map

package/dist/features/network/dedup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dedup.js","sourceRoot":"","sources":["../../../src/features/network/dedup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAWH,gEAAgE;AAChE,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAG,CAAC;AAE5B,MAAM,OAAO,OAAO;IAGlB,YACmB,QAAgB,EAChB,IAAY;IAC7B,gEAAgE;IAC/C,UAAuB;QAHvB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,SAAI,GAAJ,IAAI,CAAQ;QAEZ,eAAU,GAAV,UAAU,CAAa;QANzB,QAAG,GAAG,IAAI,GAAG,EAAiB,CAAC;IAO7C,CAAC;IAEJ,2FAA2F;IAC3F,IAAI,CAAC,IAAiB;QACpB,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,IAAK,IAA2B,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QAClH,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,EAAE,CAAC;YACN,CAAC,CAAC,KAAK,EAAE,CAAC;YACV,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,iCAAiC;YAChD,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3D,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,QAAQ;YAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAClD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/F,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,GAAW;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAiB,CAAC,CAAC;IACjF,CAAC;IAEO,WAAW;QACjB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,gCAAgC;QAC7E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,CAAC;gBAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,sDAAsD;QAC5E,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,mDAAmD;IACnD,OAAO;QACL,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;YAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;CACF"}

package/dist/features/network/fetchInterceptor.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Patches `fetch` to record method/url/status/duration (+ sizes from headers). Bodies are NOT read
+ * (we never consume the stream) — body capture is a later, opt-in enhancement. Self-excludes the
+ * SDK's own ingestion traffic. `target` is injectable so it's unit-testable in node.
+ */
+import type { OnRecord, IsOwnUrl, InjectTrace } from './types.js';
+type FetchHolder = {
+    fetch: typeof fetch;
+};
+export declare function installFetch(target: FetchHolder, onRecord: OnRecord, isOwnUrl: IsOwnUrl, injectTrace?: InjectTrace): () => void;
+/** Never buffer more than this to inspect/capture a response body (memory guard for huge responses). */
+export declare const RESPONSE_READ_CEILING: number;
+/**
+ * Read a (cloned, stream-safe) response as text, stopping at RESPONSE_READ_CEILING bytes — cancels the
+ * stream once the ceiling is hit so the rest is never buffered. Falls back to `.text()` where the body
+ * stream is unavailable (jsdom/node). Never throws — resolves null on failure.
+ */
+export declare function readCapped(res: Response): Promise<string | null>;
+export {};
+//# sourceMappingURL=fetchInterceptor.d.ts.map

package/dist/features/network/fetchInterceptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetchInterceptor.d.ts","sourceRoot":"","sources":["../../../src/features/network/fetchInterceptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAG/D,KAAK,WAAW,GAAG;IAAE,KAAK,EAAE,OAAO,KAAK,CAAA;CAAE,CAAC;AAE3C,wBAAgB,YAAY,CAC1B,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,QAAQ,EAClB,WAAW,CAAC,EAAE,WAAW,GACxB,MAAM,IAAI,CA+EZ;AAED,wGAAwG;AACxG,eAAO,MAAM,qBAAqB,QAAY,CAAC;AAE/C;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA4BtE"}

package/dist/features/network/fetchInterceptor.js

@@ -0,0 +1,158 @@
+/**
+ * Patches `fetch` to record method/url/status/duration (+ sizes from headers). Bodies are NOT read
+ * (we never consume the stream) — body capture is a later, opt-in enhancement. Self-excludes the
+ * SDK's own ingestion traffic. `target` is injectable so it's unit-testable in node.
+ */
+import { requestBodyBytes, contentLengthBytes, perfNow } from './size.js';
+export function installFetch(target, onRecord, isOwnUrl, injectTrace) {
+    const original = target.fetch;
+    if (typeof original !== 'function')
+        return () => { };
+    target.fetch = async function patchedFetch(input, init) {
+        const url = urlOf(input);
+        const method = methodOf(input, init);
+        // Never record (or loop on) our own egress.
+        if (isOwnUrl(url))
+            return original.call(this, input, init);
+        // P4.3 — inject a W3C traceparent for allowlisted origins (FE→BE correlation handoff).
+        let traceId;
+        let callInit = init;
+        const trace = injectTrace?.(url);
+        if (trace) {
+            traceId = trace.traceId;
+            const headers = new Headers(init?.headers ?? (input instanceof Request ? input.headers : undefined));
+            headers.set('traceparent', trace.header);
+            callInit = { ...init, headers };
+        }
+        const startedAt = Date.now(); // epoch — for the wire timestamp + ResourceTiming match
+        const t0 = perfNow(); // monotonic — for duration (immune to clock jumps)
+        const reqBody = bodyString(callInit?.body);
+        const rh = reqHeaders(input, callInit); // effective request headers (init or a Request input)
+        try {
+            const res = await original.call(this, input, callInit);
+            // Stream-safe response read: clone BEFORE the host consumes the body (a clone has its own
+            // stream). Lazily read on demand so we never pay the cost unless N2/N4 actually needs it.
+            let cloned = null;
+            try {
+                cloned = typeof res.clone === 'function' ? res.clone() : null;
+            }
+            catch {
+                cloned = null;
+            }
+            onRecord({
+                method,
+                url,
+                status: res.status,
+                startedAt,
+                duration: Math.round(perfNow() - t0),
+                requestSize: requestBodyBytes(callInit?.body) ?? contentLengthBytes(rh?.get?.('content-length')),
+                responseSize: contentLengthBytes(res.headers?.get?.('content-length')),
+                reqBody,
+                reqContentType: rh?.get?.('content-type') ?? undefined,
+                resContentType: res.headers?.get?.('content-type') ?? undefined,
+                // Stream-read capped at a ceiling so a huge text/JSON response is never fully buffered just to
+                // inspect (GraphQL errors[]) or capture (N4) the first few KB. Lazy: only called during enrich.
+                readResponseText: cloned ? () => readCapped(cloned) : undefined,
+                traceId,
+            });
+            return res;
+        }
+        catch (err) {
+            const e = err;
+            // AbortController → DOMException 'AbortError'; init.signal timeouts surface as 'TimeoutError'.
+            const aborted = e?.name === 'AbortError';
+            const timedOut = e?.name === 'TimeoutError';
+            onRecord({
+                method,
+                url,
+                status: 0,
+                startedAt,
+                duration: Math.round(perfNow() - t0),
+                error: e?.message ?? 'network error',
+                aborted,
+                timedOut,
+            });
+            throw err;
+        }
+    };
+    return () => {
+        target.fetch = original;
+    };
+}
+/** Never buffer more than this to inspect/capture a response body (memory guard for huge responses). */
+export const RESPONSE_READ_CEILING = 64 * 1024;
+/**
+ * Read a (cloned, stream-safe) response as text, stopping at RESPONSE_READ_CEILING bytes — cancels the
+ * stream once the ceiling is hit so the rest is never buffered. Falls back to `.text()` where the body
+ * stream is unavailable (jsdom/node). Never throws — resolves null on failure.
+ */
+export async function readCapped(res) {
+    try {
+        const stream = res.body;
+        if (!stream || typeof stream.getReader !== 'function') {
+            const t = await res.text();
+            return t.length > RESPONSE_READ_CEILING ? t.slice(0, RESPONSE_READ_CEILING) : t;
+        }
+        const reader = stream.getReader();
+        const decoder = typeof TextDecoder !== 'undefined' ? new TextDecoder() : undefined;
+        let out = '';
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            if (value && decoder)
+                out += decoder.decode(value, { stream: true });
+            if (out.length >= RESPONSE_READ_CEILING) {
+                try {
+                    await reader.cancel();
+                }
+                catch {
+                    /* ignore */
+                }
+                return out.slice(0, RESPONSE_READ_CEILING);
+            }
+        }
+        if (decoder)
+            out += decoder.decode(); // flush any trailing multibyte char
+        return out;
+    }
+    catch {
+        return null;
+    }
+}
+function urlOf(input) {
+    if (typeof input === 'string')
+        return input;
+    if (input instanceof URL)
+        return input.href;
+    return input.url;
+}
+function methodOf(input, init) {
+    const m = init?.method ??
+        (typeof input !== 'string' && !(input instanceof URL) ? input.method : undefined);
+    return (m ?? 'GET').toUpperCase();
+}
+/** The request body as a string when it's a plain string body (URLSearchParams stringifies too). */
+function bodyString(body) {
+    if (typeof body === 'string')
+        return body;
+    if (typeof URLSearchParams !== 'undefined' && body instanceof URLSearchParams)
+        return body.toString();
+    return undefined; // FormData / Blob / ArrayBuffer / streams — not read (binary / would consume)
+}
+/** Effective request headers — `init.headers`, else a `Request` input's headers. Used for the
+ *  content-type allowlist + a content-length size fallback when the body isn't a measurable `init.body`
+ *  (e.g. `fetch(new Request(url, { body }))`). Sync — never consumes the body stream. */
+function reqHeaders(input, init) {
+    try {
+        if (init?.headers)
+            return new Headers(init.headers);
+        if (typeof Request !== 'undefined' && input instanceof Request)
+            return input.headers;
+    }
+    catch {
+        /* ignore */
+    }
+    return undefined;
+}
+//# sourceMappingURL=fetchInterceptor.js.map

package/dist/features/network/fetchInterceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetchInterceptor.js","sourceRoot":"","sources":["../../../src/features/network/fetchInterceptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAIvE,MAAM,UAAU,YAAY,CAC1B,MAAmB,EACnB,QAAkB,EAClB,QAAkB,EAClB,WAAyB;IAEzB,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC;IAC9B,IAAI,OAAO,QAAQ,KAAK,UAAU;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAEpD,MAAM,CAAC,KAAK,GAAG,KAAK,UAAU,YAAY,CAExC,KAAwB,EACxB,IAAkB;QAElB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAErC,4CAA4C;QAC5C,IAAI,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAa,EAAE,KAAoB,EAAE,IAAI,CAAC,CAAC;QAEnF,uFAAuF;QACvF,IAAI,OAA2B,CAAC;QAChC,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YACxB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YACrG,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACzC,QAAQ,GAAG,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,wDAAwD;QACtF,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,mDAAmD;QACzE,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,sDAAsD;QAC9F,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAa,EAAE,KAAoB,EAAE,QAAQ,CAAC,CAAC;YAC/E,0FAA0F;YAC1F,0FAA0F;YAC1F,IAAI,MAAM,GAAoB,IAAI,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,GAAG,OAAO,GAAG,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAChE,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;YACD,QAAQ,CAAC;gBACP,MAAM;gBACN,GAAG;gBACH,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,SAAS;gBACT,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;gBACpC,WAAW,EAAE,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,kBAAkB,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,CAAC;gBAChG,YAAY,EAAE,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,CAAC;gBACtE,OAAO;gBACP,cAAc,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,SAAS;gBACtD,cAAc,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,SAAS;gBAC/D,+FAA+F;gBAC/F,gGAAgG;gBAChG,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC/D,OAAO;aACR,CAAC,CAAC;YACH,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,GAA0C,CAAC;YACrD,+FAA+F;YAC/F,MAAM,OAAO,GAAG,CAAC,EAAE,IAAI,KAAK,YAAY,CAAC;YACzC,MAAM,QAAQ,GAAG,CAAC,EAAE,IAAI,KAAK,cAAc,CAAC;YAC5C,QAAQ,CAAC;gBACP,MAAM;gBACN,GAAG;gBACH,MAAM,EAAE,CAAC;gBACT,SAAS;gBACT,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;gBACpC,KAAK,EAAE,CAAC,EAAE,OAAO,IAAI,eAAe;gBACpC,OAAO;gBACP,QAAQ;aACT,CAAC,CAAC;YACH,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAiB,CAAC;IAElB,OAAO,GAAG,EAAE;QACV,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC;IAC1B,CAAC,CAAC;AACJ,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,CAAC;AAE/C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAa;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAI,GAAoD,CAAC,IAAI,CAAC;QAC1E,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YACtD,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,OAAO,CAAC,CAAC,MAAM,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,OAAO,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,SAAS,CAAC;YACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,IAAI,KAAK,IAAI,OAAO;gBAAE,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACrE,IAAI,GAAG,CAAC,MAAM,IAAI,qBAAqB,EAAE,CAAC;gBACxC,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC;oBACP,YAAY;gBACd,CAAC;gBACD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,IAAI,OAAO;YAAE,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,oCAAoC;QAC1E,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,KAAwB;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,YAAY,GAAG;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC;IAC5C,OAAQ,KAAiB,CAAC,GAAG,CAAC;AAChC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAwB,EAAE,IAAkB;IAC5D,MAAM,CAAC,GACL,IAAI,EAAE,MAAM;QACZ,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,CAAE,KAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjG,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,oGAAoG;AACpG,SAAS,UAAU,CAAC,IAAiC;IACnD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,OAAO,eAAe,KAAK,WAAW,IAAI,IAAI,YAAY,eAAe;QAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACtG,OAAO,SAAS,CAAC,CAAC,8EAA8E;AAClG,CAAC;AAED;;yFAEyF;AACzF,SAAS,UAAU,CAAC,KAAwB,EAAE,IAAkB;IAC9D,IAAI,CAAC;QACH,IAAI,IAAI,EAAE,OAAO;YAAE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,KAAK,YAAY,OAAO;YAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACvF,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/features/network/intercept/beacon.d.ts

@@ -0,0 +1,14 @@
+/**
+ * N6 — `navigator.sendBeacon` capture (LAZY chunk). Beacons are fire-and-forget POSTs used for
+ * analytics / unload-time telemetry — invisible to fetch/XHR interceptors. We record one `network`
+ * item per call (protocol 'beacon') with the byte size; `sendBeacon` returns a boolean (queued or
+ * not) synchronously, which we map to a success/failure. Self-excludes the SDK's own egress. Patches
+ * `navigator.sendBeacon`; restores on teardown.
+ */
+import type { OnRecord, IsOwnUrl } from '../types.js';
+type NavHolder = {
+    sendBeacon: typeof navigator.sendBeacon;
+};
+export declare function installBeacon(nav: NavHolder, onRecord: OnRecord, isOwnUrl: IsOwnUrl): () => void;
+export {};
+//# sourceMappingURL=beacon.d.ts.map

package/dist/features/network/intercept/beacon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"beacon.d.ts","sourceRoot":"","sources":["../../../../src/features/network/intercept/beacon.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAc,MAAM,UAAU,CAAC;AAE/D,KAAK,SAAS,GAAG;IAAE,UAAU,EAAE,OAAO,SAAS,CAAC,UAAU,CAAA;CAAE,CAAC;AAgB7D,wBAAgB,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,GAAG,MAAM,IAAI,CA4BhG"}

package/dist/features/network/intercept/beacon.js

@@ -0,0 +1,56 @@
+/**
+ * N6 — `navigator.sendBeacon` capture (LAZY chunk). Beacons are fire-and-forget POSTs used for
+ * analytics / unload-time telemetry — invisible to fetch/XHR interceptors. We record one `network`
+ * item per call (protocol 'beacon') with the byte size; `sendBeacon` returns a boolean (queued or
+ * not) synchronously, which we map to a success/failure. Self-excludes the SDK's own egress. Patches
+ * `navigator.sendBeacon`; restores on teardown.
+ */
+function beaconSize(data) {
+    try {
+        if (data == null)
+            return 0;
+        if (typeof data === 'string')
+            return data.length;
+        if (typeof Blob !== 'undefined' && data instanceof Blob)
+            return data.size;
+        if (data instanceof ArrayBuffer)
+            return data.byteLength;
+        if (ArrayBuffer.isView(data))
+            return data.byteLength;
+        if (typeof URLSearchParams !== 'undefined' && data instanceof URLSearchParams)
+            return data.toString().length;
+    }
+    catch {
+        /* defensive */
+    }
+    return undefined;
+}
+export function installBeacon(nav, onRecord, isOwnUrl) {
+    const original = nav.sendBeacon;
+    if (typeof original !== 'function')
+        return () => { };
+    nav.sendBeacon = function patchedSendBeacon(url, data) {
+        const urlStr = String(url);
+        if (isOwnUrl(urlStr))
+            return original.call(nav, url, data ?? undefined);
+        const startedAt = Date.now();
+        const queued = original.call(nav, url, data ?? undefined);
+        const c = {
+            protocol: 'beacon',
+            method: 'POST', // sendBeacon always issues a POST
+            url: urlStr,
+            // Beacon gives no status; a false return means the UA refused to queue it (e.g. over quota).
+            status: queued ? undefined : 0,
+            startedAt,
+            duration: Date.now() - startedAt,
+            requestSize: beaconSize(data),
+            error: queued ? undefined : 'beacon not queued',
+        };
+        onRecord(c);
+        return queued;
+    };
+    return () => {
+        nav.sendBeacon = original;
+    };
+}
+//# sourceMappingURL=beacon.js.map

package/dist/features/network/intercept/beacon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"beacon.js","sourceRoot":"","sources":["../../../../src/features/network/intercept/beacon.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,SAAS,UAAU,CAAC,IAAiC;IACnD,IAAI,CAAC;QACH,IAAI,IAAI,IAAI,IAAI;YAAE,OAAO,CAAC,CAAC;QAC3B,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QACjD,IAAI,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,YAAY,IAAI;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC;QAC1E,IAAI,IAAI,YAAY,WAAW;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC;QACxD,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,OAAQ,IAAwB,CAAC,UAAU,CAAC;QAC1E,IAAI,OAAO,eAAe,KAAK,WAAW,IAAI,IAAI,YAAY,eAAe;YAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC;IAC/G,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAc,EAAE,QAAkB,EAAE,QAAkB;IAClF,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC;IAChC,IAAI,OAAO,QAAQ,KAAK,UAAU;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAEpD,GAAG,CAAC,UAAU,GAAG,SAAS,iBAAiB,CAAgB,GAAiB,EAAE,IAAsB;QAClG,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,IAAI,SAAS,CAAC,CAAC;QAExE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,IAAI,SAAS,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAe;YACpB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,MAAM,EAAE,kCAAkC;YAClD,GAAG,EAAE,MAAM;YACX,6FAA6F;YAC7F,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC9B,SAAS;YACT,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAChC,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC;YAC7B,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB;SAChD,CAAC;QACF,QAAQ,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,OAAO,GAAG,EAAE;QACV,GAAG,CAAC,UAAU,GAAG,QAAQ,CAAC;IAC5B,CAAC,CAAC;AACJ,CAAC"}

package/dist/features/network/intercept/sse.d.ts

@@ -0,0 +1,16 @@
+/**
+ * N3 — Server-Sent-Events (EventSource) lifecycle capture (LAZY chunk). Like WebSocket, an SSE
+ * stream is long-lived: ONE `network` item per connection, settled on close. SSE is receive-only, so
+ * we count received messages + bytes (the `data` payload) and surface connection errors. Patches the
+ * global `EventSource`; restores on teardown. Counters are bounded integers.
+ *
+ * EventSource has no programmatic "close" event — the host calls `.close()`. We patch that to settle,
+ * and also settle on a terminal `error` (readyState CLOSED) so a dropped connection still emits.
+ */
+import type { OnRecord, IsOwnUrl } from '../types.js';
+type EsHolder = {
+    EventSource: typeof EventSource;
+};
+export declare function installEventSource(target: EsHolder, onRecord: OnRecord, isOwnUrl: IsOwnUrl): () => void;
+export {};
+//# sourceMappingURL=sse.d.ts.map