@sentry/browser 10.53.0 → 10.54.0

package/build/npm/cjs/prod/tracing/request.js

@@ -4,160 +4,82 @@ const browser = require('@sentry/core/browser');
 const browserUtils = require('@sentry-internal/browser-utils');
 const utils = require('./utils.js');
 
-/** Options for Request Instrumentation */
-
-const responseToSpanId = new WeakMap();
-const spanIdToEndTimestamp = new Map();
-
 const defaultRequestInstrumentationOptions = {
   traceFetch: true,
   traceXHR: true,
   enableHTTPTimings: true,
-  trackFetchStreamPerformance: false,
+  trackFetchStreamPerformance: false
 };
-
-/** Registers span creators for xhr and fetch requests  */
 function instrumentOutgoingRequests(client, _options) {
   const {
     traceFetch,
     traceXHR,
-    trackFetchStreamPerformance,
     shouldCreateSpanForRequest,
     enableHTTPTimings,
     tracePropagationTargets,
     onRequestSpanStart,
-    onRequestSpanEnd,
+    onRequestSpanEnd
   } = {
     ...defaultRequestInstrumentationOptions,
-    ..._options,
+    ..._options
   };
-
-  const shouldCreateSpan =
-    typeof shouldCreateSpanForRequest === 'function' ? shouldCreateSpanForRequest : (_) => true;
-
+  const shouldCreateSpan = typeof shouldCreateSpanForRequest === "function" ? shouldCreateSpanForRequest : (_) => true;
   const shouldAttachHeadersWithTargets = (url) => shouldAttachHeaders(url, tracePropagationTargets);
-
   const spans = {};
-
-  const propagateTraceparent = (client ).getOptions().propagateTraceparent;
-
+  const propagateTraceparent = client.getOptions().propagateTraceparent;
   if (traceFetch) {
-    // Keeping track of http requests, whose body payloads resolved later than the initial resolved request
-    // e.g. streaming using server sent events (SSE)
-    client.addEventProcessor(event => {
-      if (event.type === 'transaction' && event.spans) {
-        event.spans.forEach(span => {
-          if (span.op === 'http.client') {
-            const updatedTimestamp = spanIdToEndTimestamp.get(span.span_id);
-            if (updatedTimestamp) {
-              span.timestamp = updatedTimestamp / 1000;
-              spanIdToEndTimestamp.delete(span.span_id);
-            }
-          }
-        });
-      }
-      return event;
-    });
-
-    if (trackFetchStreamPerformance) {
-      browser.addFetchEndInstrumentationHandler(handlerData => {
-        if (handlerData.response) {
-          const span = responseToSpanId.get(handlerData.response);
-          if (span && handlerData.endTimestamp) {
-            spanIdToEndTimestamp.set(span, handlerData.endTimestamp);
-          }
-        }
-      });
-    }
-
-    browser.addFetchInstrumentationHandler(handlerData => {
+    browser.addFetchInstrumentationHandler((handlerData) => {
       const createdSpan = browser.instrumentFetchRequest(handlerData, shouldCreateSpan, shouldAttachHeadersWithTargets, spans, {
         propagateTraceparent,
-        onRequestSpanEnd,
+        onRequestSpanEnd
       });
-
-      if (handlerData.response && handlerData.fetchData.__span) {
-        responseToSpanId.set(handlerData.response, handlerData.fetchData.__span);
-      }
-
-      // We cannot use `window.location` in the generic fetch instrumentation,
-      // but we need it for reliable `server.address` attribute.
-      // so we extend this in here
       if (createdSpan) {
         const fullUrl = utils.getFullURL(handlerData.fetchData.url);
-        const host = fullUrl ? browser.parseUrl(fullUrl).host : undefined;
+        const host = fullUrl ? browser.parseUrl(fullUrl).host : void 0;
         createdSpan.setAttributes({
-          'http.url': fullUrl ? browser.stripDataUrlContent(fullUrl) : undefined,
-          'server.address': host,
+          "http.url": fullUrl ? browser.stripDataUrlContent(fullUrl) : void 0,
+          "server.address": host
         });
-
         if (enableHTTPTimings) {
           addHTTPTimings(createdSpan, client);
         }
-
         onRequestSpanStart?.(createdSpan, { headers: handlerData.headers });
       }
     });
   }
-
   if (traceXHR) {
-    browserUtils.addXhrInstrumentationHandler(handlerData => {
+    browserUtils.addXhrInstrumentationHandler((handlerData) => {
       const createdSpan = xhrCallback(
         handlerData,
         shouldCreateSpan,
         shouldAttachHeadersWithTargets,
         spans,
         propagateTraceparent,
-        onRequestSpanEnd,
+        onRequestSpanEnd
       );
-
       if (createdSpan) {
         if (enableHTTPTimings) {
           addHTTPTimings(createdSpan, client);
         }
-
         onRequestSpanStart?.(createdSpan, {
-          headers: utils.createHeadersSafely(handlerData.xhr.__sentry_xhr_v3__?.request_headers),
+          headers: utils.createHeadersSafely(handlerData.xhr.__sentry_xhr_v3__?.request_headers)
         });
       }
     });
   }
 }
-
-/**
- * The maximum time (ms) to wait for PerformanceResourceTiming data before ending the span.
- * Same approach is used by OTel's browser fetch instrumentation:
- * See {@link https://github.com/open-telemetry/opentelemetry-js/blob/30f94fe99339287b1e4d3c8bb90172c2523f06f4/experimental/packages/opentelemetry-instrumentation-fetch/src/fetch.ts#L352-L372}
- */
 const HTTP_TIMING_WAIT_MS = 300;
-
-/**
- * Creates a temporary observer to listen to the next fetch/xhr resourcing timings,
- * so that when timings hit their per-browser limit they don't need to be removed.
- *
- * @param span A span that has yet to be finished, must contain `url` on data.
- */
 function addHTTPTimings(span, client) {
   const { url } = browser.spanToJSON(span).data;
-
-  if (!url || typeof url !== 'string') {
+  if (!url || typeof url !== "string") {
     return;
   }
-
-  // Clean up the performance observer and other resources
-  // We have to wait here because otherwise this cleans itself up before it is fully done.
-  // Default (non-streaming): just deregister the observer.
   let onEntryFound = () => void setTimeout(unsubscribePerformanceObsever);
-
-  // For streamed spans, we have to artificially delay the ending of the span until we
-  // either receive the timing data, or HTTP_TIMING_WAIT_MS elapses.
   if (browser.hasSpanStreamingEnabled(client)) {
     const originalEnd = span.end.bind(span);
-
     span.end = (endTimestamp) => {
       const capturedEndTimestamp = endTimestamp ?? browser.timestampInSeconds();
       let isEnded = false;
-
       const endSpanAndCleanup = () => {
         if (isEnded) {
           return;
@@ -167,18 +89,12 @@ function addHTTPTimings(span, client) {
         originalEnd(capturedEndTimestamp);
         clearTimeout(fallbackTimeout);
       };
-
       onEntryFound = endSpanAndCleanup;
-
-      // Fallback: always end the span after HTTP_TIMING_WAIT_MS even if no
-      // PerformanceResourceTiming entry arrives (e.g. cross-origin without
-      // Timing-Allow-Origin, or the browser didn't fire the observer in time).
       const fallbackTimeout = setTimeout(endSpanAndCleanup, HTTP_TIMING_WAIT_MS);
     };
   }
-
-  const unsubscribePerformanceObsever = browserUtils.addPerformanceInstrumentationHandler('resource', ({ entries }) => {
-    entries.forEach(entry => {
+  const unsubscribePerformanceObsever = browserUtils.addPerformanceInstrumentationHandler("resource", ({ entries }) => {
+    entries.forEach((entry) => {
       if (utils.isPerformanceResourceTiming(entry) && entry.name.endsWith(url)) {
         span.setAttributes(browserUtils.resourceTimingToSpanAttributes(entry));
         onEntryFound();
@@ -186,23 +102,9 @@ function addHTTPTimings(span, client) {
     });
   });
 }
-
-/**
- * A function that determines whether to attach tracing headers to a request.
- * We only export this function for testing purposes.
- */
-function shouldAttachHeaders(
-  targetUrl,
-  tracePropagationTargets,
-) {
-  // window.location.href not being defined is an edge case in the browser but we need to handle it.
-  // Potentially dangerous situations where it may not be defined: Browser Extensions, Web Workers, patching of the location obj
+function shouldAttachHeaders(targetUrl, tracePropagationTargets) {
   const href = browser.getLocationHref();
-
   if (!href) {
-    // If there is no window.location.origin, we default to only attaching tracing headers to relative requests, i.e. ones that start with `/`
-    // BIG DISCLAIMER: Users can call URLs with a double slash (fetch("//example.com/api")), this is a shorthand for "send to the same protocol",
-    // so we need a to exclude those requests, because they might be cross origin.
     const isRelativeSameOriginRequest = !!targetUrl.match(/^\/(?!\/)/);
     if (!tracePropagationTargets) {
       return isRelativeSameOriginRequest;
@@ -212,175 +114,108 @@ function shouldAttachHeaders(
   } else {
     let resolvedUrl;
     let currentOrigin;
-
-    // URL parsing may fail, we default to not attaching trace headers in that case.
     try {
       resolvedUrl = new URL(targetUrl, href);
       currentOrigin = new URL(href).origin;
     } catch {
       return false;
     }
-
     const isSameOriginRequest = resolvedUrl.origin === currentOrigin;
     if (!tracePropagationTargets) {
       return isSameOriginRequest;
     } else {
-      return (
-        browser.stringMatchesSomePattern(resolvedUrl.toString(), tracePropagationTargets) ||
-        (isSameOriginRequest && browser.stringMatchesSomePattern(resolvedUrl.pathname, tracePropagationTargets))
-      );
+      return browser.stringMatchesSomePattern(resolvedUrl.toString(), tracePropagationTargets) || isSameOriginRequest && browser.stringMatchesSomePattern(resolvedUrl.pathname, tracePropagationTargets);
     }
   }
 }
-
-/**
- * Create and track xhr request spans
- *
- * @returns Span if a span was created, otherwise void.
- */
-function xhrCallback(
-  handlerData,
-  shouldCreateSpan,
-  shouldAttachHeaders,
-  spans,
-  propagateTraceparent,
-  onRequestSpanEnd,
-) {
+function xhrCallback(handlerData, shouldCreateSpan, shouldAttachHeaders2, spans, propagateTraceparent, onRequestSpanEnd) {
   const xhr = handlerData.xhr;
   const sentryXhrData = xhr?.[browserUtils.SENTRY_XHR_DATA_KEY];
-
   if (!xhr || xhr.__sentry_own_request__ || !sentryXhrData) {
-    return undefined;
+    return void 0;
   }
-
   const { url, method } = sentryXhrData;
-
   const shouldCreateSpanResult = browser.hasSpansEnabled() && shouldCreateSpan(url);
-
-  // Handle XHR completion - clean up spans from the record
   if (handlerData.endTimestamp) {
     const spanId = xhr.__sentry_xhr_span_id__;
     if (!spanId) return;
-
-    const span = spans[spanId];
-
-    if (span) {
-      if (shouldCreateSpanResult && sentryXhrData.status_code !== undefined) {
-        browser.setHttpStatus(span, sentryXhrData.status_code);
-        span.end();
-
-        onRequestSpanEnd?.(span, {
-          headers: utils.createHeadersSafely(browserUtils.parseXhrResponseHeaders(xhr )),
-          error: handlerData.error,
+    const span2 = spans[spanId];
+    if (span2) {
+      if (shouldCreateSpanResult && sentryXhrData.status_code !== void 0) {
+        browser.setHttpStatus(span2, sentryXhrData.status_code);
+        span2.end();
+        onRequestSpanEnd?.(span2, {
+          headers: utils.createHeadersSafely(browserUtils.parseXhrResponseHeaders(xhr)),
+          error: handlerData.error
         });
       }
-
-      // eslint-disable-next-line @typescript-eslint/no-dynamic-delete
       delete spans[spanId];
     }
-
-    return undefined;
+    return void 0;
   }
-
   const fullUrl = utils.getFullURL(url);
   const parsedUrl = fullUrl ? browser.parseUrl(fullUrl) : browser.parseUrl(url);
-
   const urlForSpanName = browser.stripDataUrlContent(browser.stripUrlQueryAndFragment(url));
-
   const client = browser.getClient();
   const hasParent = !!browser.getActiveSpan();
-  // With span streaming, we always emit http.client spans, even without a parent span
-  const shouldEmitSpan = hasParent || (!!client && browser.hasSpanStreamingEnabled(client));
-
-  const span =
-    shouldCreateSpanResult && shouldEmitSpan
-      ? browser.startInactiveSpan({
-          name: `${method} ${urlForSpanName}`,
-          attributes: {
-            url: browser.stripDataUrlContent(url),
-            type: 'xhr',
-            'http.method': method,
-            'http.url': fullUrl ? browser.stripDataUrlContent(fullUrl) : undefined,
-            'server.address': parsedUrl?.host,
-            [browser.SEMANTIC_ATTRIBUTE_SENTRY_ORIGIN]: 'auto.http.browser',
-            [browser.SEMANTIC_ATTRIBUTE_SENTRY_OP]: 'http.client',
-            ...(parsedUrl?.search && { 'http.query': parsedUrl?.search }),
-            ...(parsedUrl?.hash && { 'http.fragment': parsedUrl?.hash }),
-          },
-        })
-      : new browser.SentryNonRecordingSpan();
-
+  const shouldEmitSpan = hasParent || !!client && browser.hasSpanStreamingEnabled(client);
+  const span = shouldCreateSpanResult && shouldEmitSpan ? browser.startInactiveSpan({
+    name: `${method} ${urlForSpanName}`,
+    attributes: {
+      url: browser.stripDataUrlContent(url),
+      type: "xhr",
+      "http.method": method,
+      "http.url": fullUrl ? browser.stripDataUrlContent(fullUrl) : void 0,
+      "server.address": parsedUrl?.host,
+      [browser.SEMANTIC_ATTRIBUTE_SENTRY_ORIGIN]: "auto.http.browser",
+      [browser.SEMANTIC_ATTRIBUTE_SENTRY_OP]: "http.client",
+      ...parsedUrl?.search && { "http.query": parsedUrl?.search },
+      ...parsedUrl?.hash && { "http.fragment": parsedUrl?.hash }
+    }
+  }) : new browser.SentryNonRecordingSpan();
   if (shouldCreateSpanResult && !shouldEmitSpan) {
-    client?.recordDroppedEvent('no_parent_span', 'span');
+    client?.recordDroppedEvent("no_parent_span", "span");
   }
-
   xhr.__sentry_xhr_span_id__ = span.spanContext().spanId;
   spans[xhr.__sentry_xhr_span_id__] = span;
-
-  if (shouldAttachHeaders(url)) {
+  if (shouldAttachHeaders2(url)) {
     addTracingHeadersToXhrRequest(
       xhr,
       // If performance is disabled (TWP) or there's no active root span (pageload/navigation/interaction),
       // we do not want to use the span as base for the trace headers,
       // which means that the headers will be generated from the scope and the sampling decision is deferred
-      browser.hasSpansEnabled() && shouldEmitSpan ? span : undefined,
-      propagateTraceparent,
+      browser.hasSpansEnabled() && shouldEmitSpan ? span : void 0,
+      propagateTraceparent
     );
   }
-
   if (client) {
-    client.emit('beforeOutgoingRequestSpan', span, handlerData );
+    client.emit("beforeOutgoingRequestSpan", span, handlerData);
   }
-
   return span;
 }
-
-function addTracingHeadersToXhrRequest(
-  xhr,
-  span,
-  propagateTraceparent,
-) {
-  const { 'sentry-trace': sentryTrace, baggage, traceparent } = browser.getTraceData({ span, propagateTraceparent });
-
+function addTracingHeadersToXhrRequest(xhr, span, propagateTraceparent) {
+  const { "sentry-trace": sentryTrace, baggage, traceparent } = browser.getTraceData({ span, propagateTraceparent });
   if (sentryTrace) {
     setHeaderOnXhr(xhr, sentryTrace, baggage, traceparent);
   }
 }
-
-function setHeaderOnXhr(
-  xhr,
-  sentryTraceHeader,
-  sentryBaggageHeader,
-  traceparentHeader,
-) {
+function setHeaderOnXhr(xhr, sentryTraceHeader, sentryBaggageHeader, traceparentHeader) {
   const originalHeaders = xhr.__sentry_xhr_v3__?.request_headers;
-
-  if (originalHeaders?.['sentry-trace'] || !xhr.setRequestHeader) {
-    // bail if a sentry-trace header is already set
+  if (originalHeaders?.["sentry-trace"] || !xhr.setRequestHeader) {
     return;
   }
-
   try {
-    xhr.setRequestHeader('sentry-trace', sentryTraceHeader);
-
-    if (traceparentHeader && !originalHeaders?.['traceparent']) {
-      xhr.setRequestHeader('traceparent', traceparentHeader);
+    xhr.setRequestHeader("sentry-trace", sentryTraceHeader);
+    if (traceparentHeader && !originalHeaders?.["traceparent"]) {
+      xhr.setRequestHeader("traceparent", traceparentHeader);
     }
-
     if (sentryBaggageHeader) {
-      // only add our headers if
-      // - no pre-existing baggage header exists
-      // - or it is set and doesn't yet contain sentry values
-      const originalBaggageHeader = originalHeaders?.['baggage'];
+      const originalBaggageHeader = originalHeaders?.["baggage"];
       if (!originalBaggageHeader || !utils.baggageHeaderHasSentryValues(originalBaggageHeader)) {
-        // From MDN: "If this method is called several times with the same header, the values are merged into one single request header."
-        // We can therefore simply set a baggage header without checking what was there before
-        // https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/setRequestHeader
-        xhr.setRequestHeader('baggage', sentryBaggageHeader);
+        xhr.setRequestHeader("baggage", sentryBaggageHeader);
       }
     }
   } catch {
-    // Error: InvalidStateError: Failed to execute 'setRequestHeader' on 'XMLHttpRequest': The object's state must be OPENED.
   }
 }
 

package/build/npm/cjs/prod/tracing/request.js.map

@@ -1 +1 @@
-{"version":3,"file":"request.js","sources":["../../../../../src/tracing/request.ts"],"sourcesContent":["/* eslint-disable max-lines */\nimport type {\n  Client,\n  HandlerDataXhr,\n  RequestHookInfo,\n  ResponseHookInfo,\n  SentryWrappedXMLHttpRequest,\n  Span,\n  SpanTimeInput,\n} from '@sentry/core/browser';\nimport {\n  addFetchEndInstrumentationHandler,\n  addFetchInstrumentationHandler,\n  getActiveSpan,\n  getClient,\n  getLocationHref,\n  getTraceData,\n  hasSpansEnabled,\n  hasSpanStreamingEnabled,\n  instrumentFetchRequest,\n  parseUrl,\n  SEMANTIC_ATTRIBUTE_SENTRY_OP,\n  SEMANTIC_ATTRIBUTE_SENTRY_ORIGIN,\n  SentryNonRecordingSpan,\n  setHttpStatus,\n  spanToJSON,\n  startInactiveSpan,\n  stringMatchesSomePattern,\n  stripDataUrlContent,\n  stripUrlQueryAndFragment,\n  timestampInSeconds,\n} from '@sentry/core/browser';\nimport type { XhrHint } from '@sentry-internal/browser-utils';\nimport {\n  addPerformanceInstrumentationHandler,\n  addXhrInstrumentationHandler,\n  parseXhrResponseHeaders,\n  resourceTimingToSpanAttributes,\n  SENTRY_XHR_DATA_KEY,\n} from '@sentry-internal/browser-utils';\nimport type { BrowserClient } from '../client';\nimport { baggageHeaderHasSentryValues, createHeadersSafely, getFullURL, isPerformanceResourceTiming } from './utils';\n\n/** Options for Request Instrumentation */\nexport interface RequestInstrumentationOptions {\n  /**\n   * List of strings and/or Regular Expressions used to determine which outgoing requests will have `sentry-trace` and `baggage`\n   * headers attached.\n   *\n   * **Default:** If this option is not provided, tracing headers will be attached to all outgoing requests.\n   * If you are using a browser SDK, by default, tracing headers will only be attached to outgoing requests to the same origin.\n   *\n   * **Disclaimer:** Carelessly setting this option in browser environments may result into CORS errors!\n   * Only attach tracing headers to requests to the same origin, or to requests to services you can control CORS headers of.\n   * Cross-origin requests, meaning requests to a different domain, for example a request to `https://api.example.com/` while you're on `https://example.com/`, take special care.\n   * If you are attaching headers to cross-origin requests, make sure the backend handling the request returns a `\"Access-Control-Allow-Headers: sentry-trace, baggage\"` header to ensure your requests aren't blocked.\n   *\n   * If you provide a `tracePropagationTargets` array, the entries you provide will be matched against the entire URL of the outgoing request.\n   * If you are using a browser SDK, the entries will also be matched against the pathname of the outgoing requests.\n   * This is so you can have matchers for relative requests, for example, `/^\\/api/` if you want to trace requests to your `/api` routes on the same domain.\n   *\n   * If any of the two match any of the provided values, tracing headers will be attached to the outgoing request.\n   * Both, the string values, and the RegExes you provide in the array will match if they partially match the URL or pathname.\n   *\n   * Examples:\n   * - `tracePropagationTargets: [/^\\/api/]` and request to `https://same-origin.com/api/posts`:\n   *   - Tracing headers will be attached because the request is sent to the same origin and the regex matches the pathname \"/api/posts\".\n   * - `tracePropagationTargets: [/^\\/api/]` and request to `https://different-origin.com/api/posts`:\n   *   - Tracing headers will not be attached because the pathname will only be compared when the request target lives on the same origin.\n   * - `tracePropagationTargets: [/^\\/api/, 'https://external-api.com']` and request to `https://external-api.com/v1/data`:\n   *   - Tracing headers will be attached because the request URL matches the string `'https://external-api.com'`.\n   */\n  tracePropagationTargets?: Array<string | RegExp>;\n\n  /**\n   * Flag to disable patching all together for fetch requests.\n   *\n   * Default: true\n   */\n  traceFetch: boolean;\n\n  /**\n   * Flag to disable patching all together for xhr requests.\n   *\n   * Default: true\n   */\n  traceXHR: boolean;\n\n  /**\n   * Flag to disable tracking of long-lived streams, like server-sent events (SSE) via fetch.\n   * Do not enable this in case you have live streams or very long running streams.\n   *\n   * Disabled by default since it can lead to issues with streams using the `cancel()` api\n   * (https://github.com/getsentry/sentry-javascript/issues/13950)\n   *\n   * Default: false\n   */\n  trackFetchStreamPerformance: boolean;\n\n  /**\n   * If true, Sentry will capture http timings and add them to the corresponding http spans.\n   *\n   * Default: true\n   */\n  enableHTTPTimings: boolean;\n\n  /**\n   * This function will be called before creating a span for a request with the given url.\n   * Return false if you don't want a span for the given url.\n   *\n   * Default: (url: string) => true\n   */\n  shouldCreateSpanForRequest?(this: void, url: string): boolean;\n\n  /**\n   * Is called when spans are started for outgoing requests.\n   */\n  onRequestSpanStart?(span: Span, requestInformation: RequestHookInfo): void;\n\n  /**\n   * Is called when spans end for outgoing requests, providing access to response headers.\n   */\n  onRequestSpanEnd?(span: Span, responseInformation: ResponseHookInfo): void;\n}\n\nconst responseToSpanId = new WeakMap<object, string>();\nconst spanIdToEndTimestamp = new Map<string, number>();\n\nexport const defaultRequestInstrumentationOptions: RequestInstrumentationOptions = {\n  traceFetch: true,\n  traceXHR: true,\n  enableHTTPTimings: true,\n  trackFetchStreamPerformance: false,\n};\n\n/** Registers span creators for xhr and fetch requests  */\nexport function instrumentOutgoingRequests(client: Client, _options?: Partial<RequestInstrumentationOptions>): void {\n  const {\n    traceFetch,\n    traceXHR,\n    trackFetchStreamPerformance,\n    shouldCreateSpanForRequest,\n    enableHTTPTimings,\n    tracePropagationTargets,\n    onRequestSpanStart,\n    onRequestSpanEnd,\n  } = {\n    ...defaultRequestInstrumentationOptions,\n    ..._options,\n  };\n\n  const shouldCreateSpan =\n    typeof shouldCreateSpanForRequest === 'function' ? shouldCreateSpanForRequest : (_: string) => true;\n\n  const shouldAttachHeadersWithTargets = (url: string): boolean => shouldAttachHeaders(url, tracePropagationTargets);\n\n  const spans: Record<string, Span> = {};\n\n  const propagateTraceparent = (client as BrowserClient).getOptions().propagateTraceparent;\n\n  if (traceFetch) {\n    // Keeping track of http requests, whose body payloads resolved later than the initial resolved request\n    // e.g. streaming using server sent events (SSE)\n    client.addEventProcessor(event => {\n      if (event.type === 'transaction' && event.spans) {\n        event.spans.forEach(span => {\n          if (span.op === 'http.client') {\n            const updatedTimestamp = spanIdToEndTimestamp.get(span.span_id);\n            if (updatedTimestamp) {\n              span.timestamp = updatedTimestamp / 1000;\n              spanIdToEndTimestamp.delete(span.span_id);\n            }\n          }\n        });\n      }\n      return event;\n    });\n\n    if (trackFetchStreamPerformance) {\n      addFetchEndInstrumentationHandler(handlerData => {\n        if (handlerData.response) {\n          const span = responseToSpanId.get(handlerData.response);\n          if (span && handlerData.endTimestamp) {\n            spanIdToEndTimestamp.set(span, handlerData.endTimestamp);\n          }\n        }\n      });\n    }\n\n    addFetchInstrumentationHandler(handlerData => {\n      const createdSpan = instrumentFetchRequest(handlerData, shouldCreateSpan, shouldAttachHeadersWithTargets, spans, {\n        propagateTraceparent,\n        onRequestSpanEnd,\n      });\n\n      if (handlerData.response && handlerData.fetchData.__span) {\n        responseToSpanId.set(handlerData.response, handlerData.fetchData.__span);\n      }\n\n      // We cannot use `window.location` in the generic fetch instrumentation,\n      // but we need it for reliable `server.address` attribute.\n      // so we extend this in here\n      if (createdSpan) {\n        const fullUrl = getFullURL(handlerData.fetchData.url);\n        const host = fullUrl ? parseUrl(fullUrl).host : undefined;\n        createdSpan.setAttributes({\n          'http.url': fullUrl ? stripDataUrlContent(fullUrl) : undefined,\n          'server.address': host,\n        });\n\n        if (enableHTTPTimings) {\n          addHTTPTimings(createdSpan, client);\n        }\n\n        onRequestSpanStart?.(createdSpan, { headers: handlerData.headers });\n      }\n    });\n  }\n\n  if (traceXHR) {\n    addXhrInstrumentationHandler(handlerData => {\n      const createdSpan = xhrCallback(\n        handlerData,\n        shouldCreateSpan,\n        shouldAttachHeadersWithTargets,\n        spans,\n        propagateTraceparent,\n        onRequestSpanEnd,\n      );\n\n      if (createdSpan) {\n        if (enableHTTPTimings) {\n          addHTTPTimings(createdSpan, client);\n        }\n\n        onRequestSpanStart?.(createdSpan, {\n          headers: createHeadersSafely(handlerData.xhr.__sentry_xhr_v3__?.request_headers),\n        });\n      }\n    });\n  }\n}\n\n/**\n * The maximum time (ms) to wait for PerformanceResourceTiming data before ending the span.\n * Same approach is used by OTel's browser fetch instrumentation:\n * See {@link https://github.com/open-telemetry/opentelemetry-js/blob/30f94fe99339287b1e4d3c8bb90172c2523f06f4/experimental/packages/opentelemetry-instrumentation-fetch/src/fetch.ts#L352-L372}\n */\nconst HTTP_TIMING_WAIT_MS = 300;\n\n/**\n * Creates a temporary observer to listen to the next fetch/xhr resourcing timings,\n * so that when timings hit their per-browser limit they don't need to be removed.\n *\n * @param span A span that has yet to be finished, must contain `url` on data.\n */\nfunction addHTTPTimings(span: Span, client: Client): void {\n  const { url } = spanToJSON(span).data;\n\n  if (!url || typeof url !== 'string') {\n    return;\n  }\n\n  // Clean up the performance observer and other resources\n  // We have to wait here because otherwise this cleans itself up before it is fully done.\n  // Default (non-streaming): just deregister the observer.\n  let onEntryFound = (): void => void setTimeout(unsubscribePerformanceObsever);\n\n  // For streamed spans, we have to artificially delay the ending of the span until we\n  // either receive the timing data, or HTTP_TIMING_WAIT_MS elapses.\n  if (hasSpanStreamingEnabled(client)) {\n    const originalEnd = span.end.bind(span);\n\n    span.end = (endTimestamp?: SpanTimeInput) => {\n      const capturedEndTimestamp = endTimestamp ?? timestampInSeconds();\n      let isEnded = false;\n\n      const endSpanAndCleanup = (): void => {\n        if (isEnded) {\n          return;\n        }\n        isEnded = true;\n        setTimeout(unsubscribePerformanceObsever);\n        originalEnd(capturedEndTimestamp);\n        clearTimeout(fallbackTimeout);\n      };\n\n      onEntryFound = endSpanAndCleanup;\n\n      // Fallback: always end the span after HTTP_TIMING_WAIT_MS even if no\n      // PerformanceResourceTiming entry arrives (e.g. cross-origin without\n      // Timing-Allow-Origin, or the browser didn't fire the observer in time).\n      const fallbackTimeout = setTimeout(endSpanAndCleanup, HTTP_TIMING_WAIT_MS);\n    };\n  }\n\n  const unsubscribePerformanceObsever = addPerformanceInstrumentationHandler('resource', ({ entries }) => {\n    entries.forEach(entry => {\n      if (isPerformanceResourceTiming(entry) && entry.name.endsWith(url)) {\n        span.setAttributes(resourceTimingToSpanAttributes(entry));\n        onEntryFound();\n      }\n    });\n  });\n}\n\n/**\n * A function that determines whether to attach tracing headers to a request.\n * We only export this function for testing purposes.\n */\nexport function shouldAttachHeaders(\n  targetUrl: string,\n  tracePropagationTargets: (string | RegExp)[] | undefined,\n): boolean {\n  // window.location.href not being defined is an edge case in the browser but we need to handle it.\n  // Potentially dangerous situations where it may not be defined: Browser Extensions, Web Workers, patching of the location obj\n  const href = getLocationHref();\n\n  if (!href) {\n    // If there is no window.location.origin, we default to only attaching tracing headers to relative requests, i.e. ones that start with `/`\n    // BIG DISCLAIMER: Users can call URLs with a double slash (fetch(\"//example.com/api\")), this is a shorthand for \"send to the same protocol\",\n    // so we need a to exclude those requests, because they might be cross origin.\n    const isRelativeSameOriginRequest = !!targetUrl.match(/^\\/(?!\\/)/);\n    if (!tracePropagationTargets) {\n      return isRelativeSameOriginRequest;\n    } else {\n      return stringMatchesSomePattern(targetUrl, tracePropagationTargets);\n    }\n  } else {\n    let resolvedUrl;\n    let currentOrigin;\n\n    // URL parsing may fail, we default to not attaching trace headers in that case.\n    try {\n      resolvedUrl = new URL(targetUrl, href);\n      currentOrigin = new URL(href).origin;\n    } catch {\n      return false;\n    }\n\n    const isSameOriginRequest = resolvedUrl.origin === currentOrigin;\n    if (!tracePropagationTargets) {\n      return isSameOriginRequest;\n    } else {\n      return (\n        stringMatchesSomePattern(resolvedUrl.toString(), tracePropagationTargets) ||\n        (isSameOriginRequest && stringMatchesSomePattern(resolvedUrl.pathname, tracePropagationTargets))\n      );\n    }\n  }\n}\n\n/**\n * Create and track xhr request spans\n *\n * @returns Span if a span was created, otherwise void.\n */\nfunction xhrCallback(\n  handlerData: HandlerDataXhr,\n  shouldCreateSpan: (url: string) => boolean,\n  shouldAttachHeaders: (url: string) => boolean,\n  spans: Record<string, Span>,\n  propagateTraceparent?: boolean,\n  onRequestSpanEnd?: RequestInstrumentationOptions['onRequestSpanEnd'],\n): Span | undefined {\n  const xhr = handlerData.xhr;\n  const sentryXhrData = xhr?.[SENTRY_XHR_DATA_KEY];\n\n  if (!xhr || xhr.__sentry_own_request__ || !sentryXhrData) {\n    return undefined;\n  }\n\n  const { url, method } = sentryXhrData;\n\n  const shouldCreateSpanResult = hasSpansEnabled() && shouldCreateSpan(url);\n\n  // Handle XHR completion - clean up spans from the record\n  if (handlerData.endTimestamp) {\n    const spanId = xhr.__sentry_xhr_span_id__;\n    if (!spanId) return;\n\n    const span = spans[spanId];\n\n    if (span) {\n      if (shouldCreateSpanResult && sentryXhrData.status_code !== undefined) {\n        setHttpStatus(span, sentryXhrData.status_code);\n        span.end();\n\n        onRequestSpanEnd?.(span, {\n          headers: createHeadersSafely(parseXhrResponseHeaders(xhr as XMLHttpRequest & SentryWrappedXMLHttpRequest)),\n          error: handlerData.error,\n        });\n      }\n\n      // eslint-disable-next-line @typescript-eslint/no-dynamic-delete\n      delete spans[spanId];\n    }\n\n    return undefined;\n  }\n\n  const fullUrl = getFullURL(url);\n  const parsedUrl = fullUrl ? parseUrl(fullUrl) : parseUrl(url);\n\n  const urlForSpanName = stripDataUrlContent(stripUrlQueryAndFragment(url));\n\n  const client = getClient();\n  const hasParent = !!getActiveSpan();\n  // With span streaming, we always emit http.client spans, even without a parent span\n  const shouldEmitSpan = hasParent || (!!client && hasSpanStreamingEnabled(client));\n\n  const span =\n    shouldCreateSpanResult && shouldEmitSpan\n      ? startInactiveSpan({\n          name: `${method} ${urlForSpanName}`,\n          attributes: {\n            url: stripDataUrlContent(url),\n            type: 'xhr',\n            'http.method': method,\n            'http.url': fullUrl ? stripDataUrlContent(fullUrl) : undefined,\n            'server.address': parsedUrl?.host,\n            [SEMANTIC_ATTRIBUTE_SENTRY_ORIGIN]: 'auto.http.browser',\n            [SEMANTIC_ATTRIBUTE_SENTRY_OP]: 'http.client',\n            ...(parsedUrl?.search && { 'http.query': parsedUrl?.search }),\n            ...(parsedUrl?.hash && { 'http.fragment': parsedUrl?.hash }),\n          },\n        })\n      : new SentryNonRecordingSpan();\n\n  if (shouldCreateSpanResult && !shouldEmitSpan) {\n    client?.recordDroppedEvent('no_parent_span', 'span');\n  }\n\n  xhr.__sentry_xhr_span_id__ = span.spanContext().spanId;\n  spans[xhr.__sentry_xhr_span_id__] = span;\n\n  if (shouldAttachHeaders(url)) {\n    addTracingHeadersToXhrRequest(\n      xhr,\n      // If performance is disabled (TWP) or there's no active root span (pageload/navigation/interaction),\n      // we do not want to use the span as base for the trace headers,\n      // which means that the headers will be generated from the scope and the sampling decision is deferred\n      hasSpansEnabled() && shouldEmitSpan ? span : undefined,\n      propagateTraceparent,\n    );\n  }\n\n  if (client) {\n    client.emit('beforeOutgoingRequestSpan', span, handlerData as XhrHint);\n  }\n\n  return span;\n}\n\nfunction addTracingHeadersToXhrRequest(\n  xhr: SentryWrappedXMLHttpRequest,\n  span?: Span,\n  propagateTraceparent?: boolean,\n): void {\n  const { 'sentry-trace': sentryTrace, baggage, traceparent } = getTraceData({ span, propagateTraceparent });\n\n  if (sentryTrace) {\n    setHeaderOnXhr(xhr, sentryTrace, baggage, traceparent);\n  }\n}\n\nfunction setHeaderOnXhr(\n  xhr: SentryWrappedXMLHttpRequest,\n  sentryTraceHeader: string,\n  sentryBaggageHeader: string | undefined,\n  traceparentHeader: string | undefined,\n): void {\n  const originalHeaders = xhr.__sentry_xhr_v3__?.request_headers;\n\n  if (originalHeaders?.['sentry-trace'] || !xhr.setRequestHeader) {\n    // bail if a sentry-trace header is already set\n    return;\n  }\n\n  try {\n    xhr.setRequestHeader('sentry-trace', sentryTraceHeader);\n\n    if (traceparentHeader && !originalHeaders?.['traceparent']) {\n      xhr.setRequestHeader('traceparent', traceparentHeader);\n    }\n\n    if (sentryBaggageHeader) {\n      // only add our headers if\n      // - no pre-existing baggage header exists\n      // - or it is set and doesn't yet contain sentry values\n      const originalBaggageHeader = originalHeaders?.['baggage'];\n      if (!originalBaggageHeader || !baggageHeaderHasSentryValues(originalBaggageHeader)) {\n        // From MDN: \"If this method is called several times with the same header, the values are merged into one single request header.\"\n        // We can therefore simply set a baggage header without checking what was there before\n        // https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/setRequestHeader\n        xhr.setRequestHeader('baggage', sentryBaggageHeader);\n      }\n    }\n  } catch {\n    // Error: InvalidStateError: Failed to execute 'setRequestHeader' on 'XMLHttpRequest': The object's state must be OPENED.\n  }\n}\n"],"names":["addFetchEndInstrumentationHandler","addFetchInstrumentationHandler","instrumentFetchRequest","getFullURL","parseUrl","stripDataUrlContent","addXhrInstrumentationHandler","createHeadersSafely","spanToJSON","hasSpanStreamingEnabled","timestampInSeconds","addPerformanceInstrumentationHandler","isPerformanceResourceTiming","resourceTimingToSpanAttributes","getLocationHref","stringMatchesSomePattern","SENTRY_XHR_DATA_KEY","hasSpansEnabled","setHttpStatus","parseXhrResponseHeaders","stripUrlQueryAndFragment","getClient","getActiveSpan","startInactiveSpan","SEMANTIC_ATTRIBUTE_SENTRY_ORIGIN","SEMANTIC_ATTRIBUTE_SENTRY_OP","SentryNonRecordingSpan","getTraceData","baggageHeaderHasSentryValues"],"mappings":";;;;;;AA2CA;;AAkFA,MAAM,gBAAA,GAAmB,IAAI,OAAO,EAAkB;AACtD,MAAM,oBAAA,GAAuB,IAAI,GAAG,EAAkB;;AAE/C,MAAM,oCAAoC,GAAkC;AACnF,EAAE,UAAU,EAAE,IAAI;AAClB,EAAE,QAAQ,EAAE,IAAI;AAChB,EAAE,iBAAiB,EAAE,IAAI;AACzB,EAAE,2BAA2B,EAAE,KAAK;AACpC;;AAEA;AACO,SAAS,0BAA0B,CAAC,MAAM,EAAU,QAAQ,EAAiD;AACpH,EAAE,MAAM;AACR,IAAI,UAAU;AACd,IAAI,QAAQ;AACZ,IAAI,2BAA2B;AAC/B,IAAI,0BAA0B;AAC9B,IAAI,iBAAiB;AACrB,IAAI,uBAAuB;AAC3B,IAAI,kBAAkB;AACtB,IAAI,gBAAgB;AACpB,MAAM;AACN,IAAI,GAAG,oCAAoC;AAC3C,IAAI,GAAG,QAAQ;AACf,GAAG;;AAEH,EAAE,MAAM,gBAAA;AACR,IAAI,OAAO,0BAAA,KAA+B,UAAA,GAAa,0BAAA,GAA6B,CAAC,CAAC,KAAa,IAAI;;AAEvG,EAAE,MAAM,8BAAA,GAAiC,CAAC,GAAG,KAAsB,mBAAmB,CAAC,GAAG,EAAE,uBAAuB,CAAC;;AAEpH,EAAE,MAAM,KAAK,GAAyB,EAAE;;AAExC,EAAE,MAAM,oBAAA,GAAuB,CAAC,MAAA,GAAyB,UAAU,EAAE,CAAC,oBAAoB;;AAE1F,EAAE,IAAI,UAAU,EAAE;AAClB;AACA;AACA,IAAI,MAAM,CAAC,iBAAiB,CAAC,SAAS;AACtC,MAAM,IAAI,KAAK,CAAC,IAAA,KAAS,aAAA,IAAiB,KAAK,CAAC,KAAK,EAAE;AACvD,QAAQ,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ;AACpC,UAAU,IAAI,IAAI,CAAC,EAAA,KAAO,aAAa,EAAE;AACzC,YAAY,MAAM,gBAAA,GAAmB,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;AAC3E,YAAY,IAAI,gBAAgB,EAAE;AAClC,cAAc,IAAI,CAAC,SAAA,GAAY,gBAAA,GAAmB,IAAI;AACtD,cAAc,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;AACvD,YAAY;AACZ,UAAU;AACV,QAAQ,CAAC,CAAC;AACV,MAAM;AACN,MAAM,OAAO,KAAK;AAClB,IAAI,CAAC,CAAC;;AAEN,IAAI,IAAI,2BAA2B,EAAE;AACrC,MAAMA,yCAAiC,CAAC,WAAA,IAAe;AACvD,QAAQ,IAAI,WAAW,CAAC,QAAQ,EAAE;AAClC,UAAU,MAAM,IAAA,GAAO,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC;AACjE,UAAU,IAAI,IAAA,IAAQ,WAAW,CAAC,YAAY,EAAE;AAChD,YAAY,oBAAoB,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,YAAY,CAAC;AACpE,UAAU;AACV,QAAQ;AACR,MAAM,CAAC,CAAC;AACR,IAAI;;AAEJ,IAAIC,sCAA8B,CAAC,WAAA,IAAe;AAClD,MAAM,MAAM,WAAA,GAAcC,8BAAsB,CAAC,WAAW,EAAE,gBAAgB,EAAE,8BAA8B,EAAE,KAAK,EAAE;AACvH,QAAQ,oBAAoB;AAC5B,QAAQ,gBAAgB;AACxB,OAAO,CAAC;;AAER,MAAM,IAAI,WAAW,CAAC,QAAA,IAAY,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE;AAChE,QAAQ,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC;AAChF,MAAM;;AAEN;AACA;AACA;AACA,MAAM,IAAI,WAAW,EAAE;AACvB,QAAQ,MAAM,OAAA,GAAUC,gBAAU,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC;AAC7D,QAAQ,MAAM,IAAA,GAAO,OAAA,GAAUC,gBAAQ,CAAC,OAAO,CAAC,CAAC,IAAA,GAAO,SAAS;AACjE,QAAQ,WAAW,CAAC,aAAa,CAAC;AAClC,UAAU,UAAU,EAAE,OAAA,GAAUC,2BAAmB,CAAC,OAAO,CAAA,GAAI,SAAS;AACxE,UAAU,gBAAgB,EAAE,IAAI;AAChC,SAAS,CAAC;;AAEV,QAAQ,IAAI,iBAAiB,EAAE;AAC/B,UAAU,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC;AAC7C,QAAQ;;AAER,QAAQ,kBAAkB,GAAG,WAAW,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,OAAA,EAAS,CAAC;AAC3E,MAAM;AACN,IAAI,CAAC,CAAC;AACN,EAAE;;AAEF,EAAE,IAAI,QAAQ,EAAE;AAChB,IAAIC,yCAA4B,CAAC,WAAA,IAAe;AAChD,MAAM,MAAM,WAAA,GAAc,WAAW;AACrC,QAAQ,WAAW;AACnB,QAAQ,gBAAgB;AACxB,QAAQ,8BAA8B;AACtC,QAAQ,KAAK;AACb,QAAQ,oBAAoB;AAC5B,QAAQ,gBAAgB;AACxB,OAAO;;AAEP,MAAM,IAAI,WAAW,EAAE;AACvB,QAAQ,IAAI,iBAAiB,EAAE;AAC/B,UAAU,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC;AAC7C,QAAQ;;AAER,QAAQ,kBAAkB,GAAG,WAAW,EAAE;AAC1C,UAAU,OAAO,EAAEC,yBAAmB,CAAC,WAAW,CAAC,GAAG,CAAC,iBAAiB,EAAE,eAAe,CAAC;AAC1F,SAAS,CAAC;AACV,MAAM;AACN,IAAI,CAAC,CAAC;AACN,EAAE;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA,MAAM,mBAAA,GAAsB,GAAG;;AAE/B;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,cAAc,CAAC,IAAI,EAAQ,MAAM,EAAgB;AAC1D,EAAE,MAAM,EAAE,GAAA,EAAI,GAAIC,kBAAU,CAAC,IAAI,CAAC,CAAC,IAAI;;AAEvC,EAAE,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,QAAQ,EAAE;AACvC,IAAI;AACJ,EAAE;;AAEF;AACA;AACA;AACA,EAAE,IAAI,eAAe,MAAY,KAAK,UAAU,CAAC,6BAA6B,CAAC;;AAE/E;AACA;AACA,EAAE,IAAIC,+BAAuB,CAAC,MAAM,CAAC,EAAE;AACvC,IAAI,MAAM,WAAA,GAAc,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;;AAE3C,IAAI,IAAI,CAAC,GAAA,GAAM,CAAC,YAAY,KAAqB;AACjD,MAAM,MAAM,oBAAA,GAAuB,gBAAgBC,0BAAkB,EAAE;AACvE,MAAM,IAAI,OAAA,GAAU,KAAK;;AAEzB,MAAM,MAAM,iBAAA,GAAoB,MAAY;AAC5C,QAAQ,IAAI,OAAO,EAAE;AACrB,UAAU;AACV,QAAQ;AACR,QAAQ,OAAA,GAAU,IAAI;AACtB,QAAQ,UAAU,CAAC,6BAA6B,CAAC;AACjD,QAAQ,WAAW,CAAC,oBAAoB,CAAC;AACzC,QAAQ,YAAY,CAAC,eAAe,CAAC;AACrC,MAAM,CAAC;;AAEP,MAAM,YAAA,GAAe,iBAAiB;;AAEtC;AACA;AACA;AACA,MAAM,MAAM,kBAAkB,UAAU,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;AAChF,IAAI,CAAC;AACL,EAAE;;AAEF,EAAE,MAAM,6BAAA,GAAgCC,iDAAoC,CAAC,UAAU,EAAE,CAAC,EAAE,OAAA,EAAS,KAAK;AAC1G,IAAI,OAAO,CAAC,OAAO,CAAC,SAAS;AAC7B,MAAM,IAAIC,iCAA2B,CAAC,KAAK,CAAA,IAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;AAC1E,QAAQ,IAAI,CAAC,aAAa,CAACC,2CAA8B,CAAC,KAAK,CAAC,CAAC;AACjE,QAAQ,YAAY,EAAE;AACtB,MAAM;AACN,IAAI,CAAC,CAAC;AACN,EAAE,CAAC,CAAC;AACJ;;AAEA;AACA;AACA;AACA;AACO,SAAS,mBAAmB;AACnC,EAAE,SAAS;AACX,EAAE,uBAAuB;AACzB,EAAW;AACX;AACA;AACA,EAAE,MAAM,IAAA,GAAOC,uBAAe,EAAE;;AAEhC,EAAE,IAAI,CAAC,IAAI,EAAE;AACb;AACA;AACA;AACA,IAAI,MAAM,2BAAA,GAA8B,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC;AACtE,IAAI,IAAI,CAAC,uBAAuB,EAAE;AAClC,MAAM,OAAO,2BAA2B;AACxC,IAAI,OAAO;AACX,MAAM,OAAOC,gCAAwB,CAAC,SAAS,EAAE,uBAAuB,CAAC;AACzE,IAAI;AACJ,EAAE,OAAO;AACT,IAAI,IAAI,WAAW;AACnB,IAAI,IAAI,aAAa;;AAErB;AACA,IAAI,IAAI;AACR,MAAM,WAAA,GAAc,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC;AAC5C,MAAM,aAAA,GAAgB,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM;AAC1C,IAAI,EAAE,MAAM;AACZ,MAAM,OAAO,KAAK;AAClB,IAAI;;AAEJ,IAAI,MAAM,mBAAA,GAAsB,WAAW,CAAC,MAAA,KAAW,aAAa;AACpE,IAAI,IAAI,CAAC,uBAAuB,EAAE;AAClC,MAAM,OAAO,mBAAmB;AAChC,IAAI,OAAO;AACX,MAAM;AACN,QAAQA,gCAAwB,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,uBAAuB,CAAA;AAChF,SAAS,mBAAA,IAAuBA,gCAAwB,CAAC,WAAW,CAAC,QAAQ,EAAE,uBAAuB,CAAC;AACvG;AACA,IAAI;AACJ,EAAE;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA,SAAS,WAAW;AACpB,EAAE,WAAW;AACb,EAAE,gBAAgB;AAClB,EAAE,mBAAmB;AACrB,EAAE,KAAK;AACP,EAAE,oBAAoB;AACtB,EAAE,gBAAgB;AAClB,EAAoB;AACpB,EAAE,MAAM,GAAA,GAAM,WAAW,CAAC,GAAG;AAC7B,EAAE,MAAM,aAAA,GAAgB,GAAG,GAAGC,gCAAmB,CAAC;;AAElD,EAAE,IAAI,CAAC,GAAA,IAAO,GAAG,CAAC,sBAAA,IAA0B,CAAC,aAAa,EAAE;AAC5D,IAAI,OAAO,SAAS;AACpB,EAAE;;AAEF,EAAE,MAAM,EAAE,GAAG,EAAE,MAAA,EAAO,GAAI,aAAa;;AAEvC,EAAE,MAAM,sBAAA,GAAyBC,uBAAe,MAAM,gBAAgB,CAAC,GAAG,CAAC;;AAE3E;AACA,EAAE,IAAI,WAAW,CAAC,YAAY,EAAE;AAChC,IAAI,MAAM,MAAA,GAAS,GAAG,CAAC,sBAAsB;AAC7C,IAAI,IAAI,CAAC,MAAM,EAAE;;AAEjB,IAAI,MAAM,IAAA,GAAO,KAAK,CAAC,MAAM,CAAC;;AAE9B,IAAI,IAAI,IAAI,EAAE;AACd,MAAM,IAAI,sBAAA,IAA0B,aAAa,CAAC,WAAA,KAAgB,SAAS,EAAE;AAC7E,QAAQC,qBAAa,CAAC,IAAI,EAAE,aAAa,CAAC,WAAW,CAAC;AACtD,QAAQ,IAAI,CAAC,GAAG,EAAE;;AAElB,QAAQ,gBAAgB,GAAG,IAAI,EAAE;AACjC,UAAU,OAAO,EAAEX,yBAAmB,CAACY,oCAAuB,CAAC,GAAA,EAAoD,CAAC;AACpH,UAAU,KAAK,EAAE,WAAW,CAAC,KAAK;AAClC,SAAS,CAAC;AACV,MAAM;;AAEN;AACA,MAAM,OAAO,KAAK,CAAC,MAAM,CAAC;AAC1B,IAAI;;AAEJ,IAAI,OAAO,SAAS;AACpB,EAAE;;AAEF,EAAE,MAAM,OAAA,GAAUhB,gBAAU,CAAC,GAAG,CAAC;AACjC,EAAE,MAAM,SAAA,GAAY,OAAA,GAAUC,gBAAQ,CAAC,OAAO,CAAA,GAAIA,gBAAQ,CAAC,GAAG,CAAC;;AAE/D,EAAE,MAAM,iBAAiBC,2BAAmB,CAACe,gCAAwB,CAAC,GAAG,CAAC,CAAC;;AAE3E,EAAE,MAAM,MAAA,GAASC,iBAAS,EAAE;AAC5B,EAAE,MAAM,SAAA,GAAY,CAAC,CAACC,qBAAa,EAAE;AACrC;AACA,EAAE,MAAM,cAAA,GAAiB,SAAA,KAAc,CAAC,CAAC,MAAA,IAAUb,+BAAuB,CAAC,MAAM,CAAC,CAAC;;AAEnF,EAAE,MAAM,IAAA;AACR,IAAI,0BAA0B;AAC9B,QAAQc,yBAAiB,CAAC;AAC1B,UAAU,IAAI,EAAE,CAAC,EAAA,MAAA,CAAA,CAAA,EAAA,cAAA,CAAA,CAAA;AACA,UAAA,UAAA,EAAA;AACA,YAAA,GAAA,EAAAlB,2BAAA,CAAA,GAAA,CAAA;AACA,YAAA,IAAA,EAAA,KAAA;AACA,YAAA,aAAA,EAAA,MAAA;AACA,YAAA,UAAA,EAAA,OAAA,GAAAA,2BAAA,CAAA,OAAA,CAAA,GAAA,SAAA;AACA,YAAA,gBAAA,EAAA,SAAA,EAAA,IAAA;AACA,YAAA,CAAAmB,wCAAA,GAAA,mBAAA;AACA,YAAA,CAAAC,oCAAA,GAAA,aAAA;AACA,YAAA,IAAA,SAAA,EAAA,MAAA,IAAA,EAAA,YAAA,EAAA,SAAA,EAAA,MAAA,EAAA,CAAA;AACA,YAAA,IAAA,SAAA,EAAA,IAAA,IAAA,EAAA,eAAA,EAAA,SAAA,EAAA,IAAA,EAAA,CAAA;AACA,WAAA;AACA,SAAA;AACA,QAAA,IAAAC,8BAAA,EAAA;;AAEA,EAAA,IAAA,sBAAA,IAAA,CAAA,cAAA,EAAA;AACA,IAAA,MAAA,EAAA,kBAAA,CAAA,gBAAA,EAAA,MAAA,CAAA;AACA,EAAA;;AAEA,EAAA,GAAA,CAAA,sBAAA,GAAA,IAAA,CAAA,WAAA,EAAA,CAAA,MAAA;AACA,EAAA,KAAA,CAAA,GAAA,CAAA,sBAAA,CAAA,GAAA,IAAA;;AAEA,EAAA,IAAA,mBAAA,CAAA,GAAA,CAAA,EAAA;AACA,IAAA,6BAAA;AACA,MAAA,GAAA;AACA;AACA;AACA;AACA,MAAAT,uBAAA,EAAA,IAAA,cAAA,GAAA,IAAA,GAAA,SAAA;AACA,MAAA,oBAAA;AACA,KAAA;AACA,EAAA;;AAEA,EAAA,IAAA,MAAA,EAAA;AACA,IAAA,MAAA,CAAA,IAAA,CAAA,2BAAA,EAAA,IAAA,EAAA,WAAA,EAAA;AACA,EAAA;;AAEA,EAAA,OAAA,IAAA;AACA;;AAEA,SAAA,6BAAA;AACA,EAAA,GAAA;AACA,EAAA,IAAA;AACA,EAAA,oBAAA;AACA,EAAA;AACA,EAAA,MAAA,EAAA,cAAA,EAAA,WAAA,EAAA,OAAA,EAAA,WAAA,EAAA,GAAAU,oBAAA,CAAA,EAAA,IAAA,EAAA,oBAAA,EAAA,CAAA;;AAEA,EAAA,IAAA,WAAA,EAAA;AACA,IAAA,cAAA,CAAA,GAAA,EAAA,WAAA,EAAA,OAAA,EAAA,WAAA,CAAA;AACA,EAAA;AACA;;AAEA,SAAA,cAAA;AACA,EAAA,GAAA;AACA,EAAA,iBAAA;AACA,EAAA,mBAAA;AACA,EAAA,iBAAA;AACA,EAAA;AACA,EAAA,MAAA,eAAA,GAAA,GAAA,CAAA,iBAAA,EAAA,eAAA;;AAEA,EAAA,IAAA,eAAA,GAAA,cAAA,CAAA,IAAA,CAAA,GAAA,CAAA,gBAAA,EAAA;AACA;AACA,IAAA;AACA,EAAA;;AAEA,EAAA,IAAA;AACA,IAAA,GAAA,CAAA,gBAAA,CAAA,cAAA,EAAA,iBAAA,CAAA;;AAEA,IAAA,IAAA,iBAAA,IAAA,CAAA,eAAA,GAAA,aAAA,CAAA,EAAA;AACA,MAAA,GAAA,CAAA,gBAAA,CAAA,aAAA,EAAA,iBAAA,CAAA;AACA,IAAA;;AAEA,IAAA,IAAA,mBAAA,EAAA;AACA;AACA;AACA;AACA,MAAA,MAAA,qBAAA,GAAA,eAAA,GAAA,SAAA,CAAA;AACA,MAAA,IAAA,CAAA,qBAAA,IAAA,CAAAC,kCAAA,CAAA,qBAAA,CAAA,EAAA;AACA;AACA;AACA;AACA,QAAA,GAAA,CAAA,gBAAA,CAAA,SAAA,EAAA,mBAAA,CAAA;AACA,MAAA;AACA,IAAA;AACA,EAAA,CAAA,CAAA,MAAA;AACA;AACA,EAAA;AACA;;;;;;"}
+{"version":3,"file":"request.js","sources":["../../../../../src/tracing/request.ts"],"sourcesContent":["/* eslint-disable max-lines */\nimport type {\n  Client,\n  HandlerDataXhr,\n  RequestHookInfo,\n  ResponseHookInfo,\n  SentryWrappedXMLHttpRequest,\n  Span,\n  SpanTimeInput,\n} from '@sentry/core/browser';\nimport {\n  addFetchInstrumentationHandler,\n  getActiveSpan,\n  getClient,\n  getLocationHref,\n  getTraceData,\n  hasSpansEnabled,\n  hasSpanStreamingEnabled,\n  instrumentFetchRequest,\n  parseUrl,\n  SEMANTIC_ATTRIBUTE_SENTRY_OP,\n  SEMANTIC_ATTRIBUTE_SENTRY_ORIGIN,\n  SentryNonRecordingSpan,\n  setHttpStatus,\n  spanToJSON,\n  startInactiveSpan,\n  stringMatchesSomePattern,\n  stripDataUrlContent,\n  stripUrlQueryAndFragment,\n  timestampInSeconds,\n} from '@sentry/core/browser';\nimport type { XhrHint } from '@sentry-internal/browser-utils';\nimport {\n  addPerformanceInstrumentationHandler,\n  addXhrInstrumentationHandler,\n  parseXhrResponseHeaders,\n  resourceTimingToSpanAttributes,\n  SENTRY_XHR_DATA_KEY,\n} from '@sentry-internal/browser-utils';\nimport type { BrowserClient } from '../client';\nimport { baggageHeaderHasSentryValues, createHeadersSafely, getFullURL, isPerformanceResourceTiming } from './utils';\n\n/** Options for Request Instrumentation */\nexport interface RequestInstrumentationOptions {\n  /**\n   * List of strings and/or Regular Expressions used to determine which outgoing requests will have `sentry-trace` and `baggage`\n   * headers attached.\n   *\n   * **Default:** If this option is not provided, tracing headers will be attached to all outgoing requests.\n   * If you are using a browser SDK, by default, tracing headers will only be attached to outgoing requests to the same origin.\n   *\n   * **Disclaimer:** Carelessly setting this option in browser environments may result into CORS errors!\n   * Only attach tracing headers to requests to the same origin, or to requests to services you can control CORS headers of.\n   * Cross-origin requests, meaning requests to a different domain, for example a request to `https://api.example.com/` while you're on `https://example.com/`, take special care.\n   * If you are attaching headers to cross-origin requests, make sure the backend handling the request returns a `\"Access-Control-Allow-Headers: sentry-trace, baggage\"` header to ensure your requests aren't blocked.\n   *\n   * If you provide a `tracePropagationTargets` array, the entries you provide will be matched against the entire URL of the outgoing request.\n   * If you are using a browser SDK, the entries will also be matched against the pathname of the outgoing requests.\n   * This is so you can have matchers for relative requests, for example, `/^\\/api/` if you want to trace requests to your `/api` routes on the same domain.\n   *\n   * If any of the two match any of the provided values, tracing headers will be attached to the outgoing request.\n   * Both, the string values, and the RegExes you provide in the array will match if they partially match the URL or pathname.\n   *\n   * Examples:\n   * - `tracePropagationTargets: [/^\\/api/]` and request to `https://same-origin.com/api/posts`:\n   *   - Tracing headers will be attached because the request is sent to the same origin and the regex matches the pathname \"/api/posts\".\n   * - `tracePropagationTargets: [/^\\/api/]` and request to `https://different-origin.com/api/posts`:\n   *   - Tracing headers will not be attached because the pathname will only be compared when the request target lives on the same origin.\n   * - `tracePropagationTargets: [/^\\/api/, 'https://external-api.com']` and request to `https://external-api.com/v1/data`:\n   *   - Tracing headers will be attached because the request URL matches the string `'https://external-api.com'`.\n   */\n  tracePropagationTargets?: Array<string | RegExp>;\n\n  /**\n   * Flag to disable patching all together for fetch requests.\n   *\n   * Default: true\n   */\n  traceFetch: boolean;\n\n  /**\n   * Flag to disable patching all together for xhr requests.\n   *\n   * Default: true\n   */\n  traceXHR: boolean;\n\n  /**\n   * Flag to disable tracking of long-lived streams, like server-sent events (SSE) via fetch.\n   * Do not enable this in case you have live streams or very long running streams.\n   *\n   * Disabled by default since it can lead to issues with streams using the `cancel()` api\n   * (https://github.com/getsentry/sentry-javascript/issues/13950)\n   *\n   * Default: false\n   *\n   * @deprecated Use `fetchStreamPerformanceIntegration()` instead. Add it to your `integrations` array\n   * to track the duration of streamed fetch response bodies.\n   */\n  trackFetchStreamPerformance: boolean;\n\n  /**\n   * If true, Sentry will capture http timings and add them to the corresponding http spans.\n   *\n   * Default: true\n   */\n  enableHTTPTimings: boolean;\n\n  /**\n   * This function will be called before creating a span for a request with the given url.\n   * Return false if you don't want a span for the given url.\n   *\n   * Default: (url: string) => true\n   */\n  shouldCreateSpanForRequest?(this: void, url: string): boolean;\n\n  /**\n   * Is called when spans are started for outgoing requests.\n   */\n  onRequestSpanStart?(span: Span, requestInformation: RequestHookInfo): void;\n\n  /**\n   * Is called when spans end for outgoing requests, providing access to response headers.\n   */\n  onRequestSpanEnd?(span: Span, responseInformation: ResponseHookInfo): void;\n}\n\nexport const defaultRequestInstrumentationOptions: RequestInstrumentationOptions = {\n  traceFetch: true,\n  traceXHR: true,\n  enableHTTPTimings: true,\n  trackFetchStreamPerformance: false,\n};\n\n/** Registers span creators for xhr and fetch requests  */\nexport function instrumentOutgoingRequests(client: Client, _options?: Partial<RequestInstrumentationOptions>): void {\n  const {\n    traceFetch,\n    traceXHR,\n    shouldCreateSpanForRequest,\n    enableHTTPTimings,\n    tracePropagationTargets,\n    onRequestSpanStart,\n    onRequestSpanEnd,\n  } = {\n    ...defaultRequestInstrumentationOptions,\n    ..._options,\n  };\n\n  const shouldCreateSpan =\n    typeof shouldCreateSpanForRequest === 'function' ? shouldCreateSpanForRequest : (_: string) => true;\n\n  const shouldAttachHeadersWithTargets = (url: string): boolean => shouldAttachHeaders(url, tracePropagationTargets);\n\n  const spans: Record<string, Span> = {};\n\n  const propagateTraceparent = (client as BrowserClient).getOptions().propagateTraceparent;\n\n  if (traceFetch) {\n    addFetchInstrumentationHandler(handlerData => {\n      const createdSpan = instrumentFetchRequest(handlerData, shouldCreateSpan, shouldAttachHeadersWithTargets, spans, {\n        propagateTraceparent,\n        onRequestSpanEnd,\n      });\n\n      // We cannot use `window.location` in the generic fetch instrumentation,\n      // but we need it for reliable `server.address` attribute.\n      // so we extend this in here\n      if (createdSpan) {\n        const fullUrl = getFullURL(handlerData.fetchData.url);\n        const host = fullUrl ? parseUrl(fullUrl).host : undefined;\n        createdSpan.setAttributes({\n          'http.url': fullUrl ? stripDataUrlContent(fullUrl) : undefined,\n          'server.address': host,\n        });\n\n        if (enableHTTPTimings) {\n          addHTTPTimings(createdSpan, client);\n        }\n\n        onRequestSpanStart?.(createdSpan, { headers: handlerData.headers });\n      }\n    });\n  }\n\n  if (traceXHR) {\n    addXhrInstrumentationHandler(handlerData => {\n      const createdSpan = xhrCallback(\n        handlerData,\n        shouldCreateSpan,\n        shouldAttachHeadersWithTargets,\n        spans,\n        propagateTraceparent,\n        onRequestSpanEnd,\n      );\n\n      if (createdSpan) {\n        if (enableHTTPTimings) {\n          addHTTPTimings(createdSpan, client);\n        }\n\n        onRequestSpanStart?.(createdSpan, {\n          headers: createHeadersSafely(handlerData.xhr.__sentry_xhr_v3__?.request_headers),\n        });\n      }\n    });\n  }\n}\n\n/**\n * The maximum time (ms) to wait for PerformanceResourceTiming data before ending the span.\n * Same approach is used by OTel's browser fetch instrumentation:\n * See {@link https://github.com/open-telemetry/opentelemetry-js/blob/30f94fe99339287b1e4d3c8bb90172c2523f06f4/experimental/packages/opentelemetry-instrumentation-fetch/src/fetch.ts#L352-L372}\n */\nconst HTTP_TIMING_WAIT_MS = 300;\n\n/**\n * Creates a temporary observer to listen to the next fetch/xhr resourcing timings,\n * so that when timings hit their per-browser limit they don't need to be removed.\n *\n * @param span A span that has yet to be finished, must contain `url` on data.\n */\nfunction addHTTPTimings(span: Span, client: Client): void {\n  const { url } = spanToJSON(span).data;\n\n  if (!url || typeof url !== 'string') {\n    return;\n  }\n\n  // Clean up the performance observer and other resources\n  // We have to wait here because otherwise this cleans itself up before it is fully done.\n  // Default (non-streaming): just deregister the observer.\n  let onEntryFound = (): void => void setTimeout(unsubscribePerformanceObsever);\n\n  // For streamed spans, we have to artificially delay the ending of the span until we\n  // either receive the timing data, or HTTP_TIMING_WAIT_MS elapses.\n  if (hasSpanStreamingEnabled(client)) {\n    const originalEnd = span.end.bind(span);\n\n    span.end = (endTimestamp?: SpanTimeInput) => {\n      const capturedEndTimestamp = endTimestamp ?? timestampInSeconds();\n      let isEnded = false;\n\n      const endSpanAndCleanup = (): void => {\n        if (isEnded) {\n          return;\n        }\n        isEnded = true;\n        setTimeout(unsubscribePerformanceObsever);\n        originalEnd(capturedEndTimestamp);\n        clearTimeout(fallbackTimeout);\n      };\n\n      onEntryFound = endSpanAndCleanup;\n\n      // Fallback: always end the span after HTTP_TIMING_WAIT_MS even if no\n      // PerformanceResourceTiming entry arrives (e.g. cross-origin without\n      // Timing-Allow-Origin, or the browser didn't fire the observer in time).\n      const fallbackTimeout = setTimeout(endSpanAndCleanup, HTTP_TIMING_WAIT_MS);\n    };\n  }\n\n  const unsubscribePerformanceObsever = addPerformanceInstrumentationHandler('resource', ({ entries }) => {\n    entries.forEach(entry => {\n      if (isPerformanceResourceTiming(entry) && entry.name.endsWith(url)) {\n        span.setAttributes(resourceTimingToSpanAttributes(entry));\n        onEntryFound();\n      }\n    });\n  });\n}\n\n/**\n * A function that determines whether to attach tracing headers to a request.\n * We only export this function for testing purposes.\n */\nexport function shouldAttachHeaders(\n  targetUrl: string,\n  tracePropagationTargets: (string | RegExp)[] | undefined,\n): boolean {\n  // window.location.href not being defined is an edge case in the browser but we need to handle it.\n  // Potentially dangerous situations where it may not be defined: Browser Extensions, Web Workers, patching of the location obj\n  const href = getLocationHref();\n\n  if (!href) {\n    // If there is no window.location.origin, we default to only attaching tracing headers to relative requests, i.e. ones that start with `/`\n    // BIG DISCLAIMER: Users can call URLs with a double slash (fetch(\"//example.com/api\")), this is a shorthand for \"send to the same protocol\",\n    // so we need a to exclude those requests, because they might be cross origin.\n    const isRelativeSameOriginRequest = !!targetUrl.match(/^\\/(?!\\/)/);\n    if (!tracePropagationTargets) {\n      return isRelativeSameOriginRequest;\n    } else {\n      return stringMatchesSomePattern(targetUrl, tracePropagationTargets);\n    }\n  } else {\n    let resolvedUrl;\n    let currentOrigin;\n\n    // URL parsing may fail, we default to not attaching trace headers in that case.\n    try {\n      resolvedUrl = new URL(targetUrl, href);\n      currentOrigin = new URL(href).origin;\n    } catch {\n      return false;\n    }\n\n    const isSameOriginRequest = resolvedUrl.origin === currentOrigin;\n    if (!tracePropagationTargets) {\n      return isSameOriginRequest;\n    } else {\n      return (\n        stringMatchesSomePattern(resolvedUrl.toString(), tracePropagationTargets) ||\n        (isSameOriginRequest && stringMatchesSomePattern(resolvedUrl.pathname, tracePropagationTargets))\n      );\n    }\n  }\n}\n\n/**\n * Create and track xhr request spans\n *\n * @returns Span if a span was created, otherwise void.\n */\nfunction xhrCallback(\n  handlerData: HandlerDataXhr,\n  shouldCreateSpan: (url: string) => boolean,\n  shouldAttachHeaders: (url: string) => boolean,\n  spans: Record<string, Span>,\n  propagateTraceparent?: boolean,\n  onRequestSpanEnd?: RequestInstrumentationOptions['onRequestSpanEnd'],\n): Span | undefined {\n  const xhr = handlerData.xhr;\n  const sentryXhrData = xhr?.[SENTRY_XHR_DATA_KEY];\n\n  if (!xhr || xhr.__sentry_own_request__ || !sentryXhrData) {\n    return undefined;\n  }\n\n  const { url, method } = sentryXhrData;\n\n  const shouldCreateSpanResult = hasSpansEnabled() && shouldCreateSpan(url);\n\n  // Handle XHR completion - clean up spans from the record\n  if (handlerData.endTimestamp) {\n    const spanId = xhr.__sentry_xhr_span_id__;\n    if (!spanId) return;\n\n    const span = spans[spanId];\n\n    if (span) {\n      if (shouldCreateSpanResult && sentryXhrData.status_code !== undefined) {\n        setHttpStatus(span, sentryXhrData.status_code);\n        span.end();\n\n        onRequestSpanEnd?.(span, {\n          headers: createHeadersSafely(parseXhrResponseHeaders(xhr as XMLHttpRequest & SentryWrappedXMLHttpRequest)),\n          error: handlerData.error,\n        });\n      }\n\n      // eslint-disable-next-line @typescript-eslint/no-dynamic-delete\n      delete spans[spanId];\n    }\n\n    return undefined;\n  }\n\n  const fullUrl = getFullURL(url);\n  const parsedUrl = fullUrl ? parseUrl(fullUrl) : parseUrl(url);\n\n  const urlForSpanName = stripDataUrlContent(stripUrlQueryAndFragment(url));\n\n  const client = getClient();\n  const hasParent = !!getActiveSpan();\n  // With span streaming, we always emit http.client spans, even without a parent span\n  const shouldEmitSpan = hasParent || (!!client && hasSpanStreamingEnabled(client));\n\n  const span =\n    shouldCreateSpanResult && shouldEmitSpan\n      ? startInactiveSpan({\n          name: `${method} ${urlForSpanName}`,\n          attributes: {\n            url: stripDataUrlContent(url),\n            type: 'xhr',\n            'http.method': method,\n            'http.url': fullUrl ? stripDataUrlContent(fullUrl) : undefined,\n            'server.address': parsedUrl?.host,\n            [SEMANTIC_ATTRIBUTE_SENTRY_ORIGIN]: 'auto.http.browser',\n            [SEMANTIC_ATTRIBUTE_SENTRY_OP]: 'http.client',\n            ...(parsedUrl?.search && { 'http.query': parsedUrl?.search }),\n            ...(parsedUrl?.hash && { 'http.fragment': parsedUrl?.hash }),\n          },\n        })\n      : new SentryNonRecordingSpan();\n\n  if (shouldCreateSpanResult && !shouldEmitSpan) {\n    client?.recordDroppedEvent('no_parent_span', 'span');\n  }\n\n  xhr.__sentry_xhr_span_id__ = span.spanContext().spanId;\n  spans[xhr.__sentry_xhr_span_id__] = span;\n\n  if (shouldAttachHeaders(url)) {\n    addTracingHeadersToXhrRequest(\n      xhr,\n      // If performance is disabled (TWP) or there's no active root span (pageload/navigation/interaction),\n      // we do not want to use the span as base for the trace headers,\n      // which means that the headers will be generated from the scope and the sampling decision is deferred\n      hasSpansEnabled() && shouldEmitSpan ? span : undefined,\n      propagateTraceparent,\n    );\n  }\n\n  if (client) {\n    client.emit('beforeOutgoingRequestSpan', span, handlerData as XhrHint);\n  }\n\n  return span;\n}\n\nfunction addTracingHeadersToXhrRequest(\n  xhr: SentryWrappedXMLHttpRequest,\n  span?: Span,\n  propagateTraceparent?: boolean,\n): void {\n  const { 'sentry-trace': sentryTrace, baggage, traceparent } = getTraceData({ span, propagateTraceparent });\n\n  if (sentryTrace) {\n    setHeaderOnXhr(xhr, sentryTrace, baggage, traceparent);\n  }\n}\n\nfunction setHeaderOnXhr(\n  xhr: SentryWrappedXMLHttpRequest,\n  sentryTraceHeader: string,\n  sentryBaggageHeader: string | undefined,\n  traceparentHeader: string | undefined,\n): void {\n  const originalHeaders = xhr.__sentry_xhr_v3__?.request_headers;\n\n  if (originalHeaders?.['sentry-trace'] || !xhr.setRequestHeader) {\n    // bail if a sentry-trace header is already set\n    return;\n  }\n\n  try {\n    xhr.setRequestHeader('sentry-trace', sentryTraceHeader);\n\n    if (traceparentHeader && !originalHeaders?.['traceparent']) {\n      xhr.setRequestHeader('traceparent', traceparentHeader);\n    }\n\n    if (sentryBaggageHeader) {\n      // only add our headers if\n      // - no pre-existing baggage header exists\n      // - or it is set and doesn't yet contain sentry values\n      const originalBaggageHeader = originalHeaders?.['baggage'];\n      if (!originalBaggageHeader || !baggageHeaderHasSentryValues(originalBaggageHeader)) {\n        // From MDN: \"If this method is called several times with the same header, the values are merged into one single request header.\"\n        // We can therefore simply set a baggage header without checking what was there before\n        // https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/setRequestHeader\n        xhr.setRequestHeader('baggage', sentryBaggageHeader);\n      }\n    }\n  } catch {\n    // Error: InvalidStateError: Failed to execute 'setRequestHeader' on 'XMLHttpRequest': The object's state must be OPENED.\n  }\n}\n"],"names":["addFetchInstrumentationHandler","instrumentFetchRequest","getFullURL","parseUrl","stripDataUrlContent","addXhrInstrumentationHandler","createHeadersSafely","spanToJSON","hasSpanStreamingEnabled","timestampInSeconds","addPerformanceInstrumentationHandler","isPerformanceResourceTiming","resourceTimingToSpanAttributes","getLocationHref","stringMatchesSomePattern","shouldAttachHeaders","SENTRY_XHR_DATA_KEY","hasSpansEnabled","span","setHttpStatus","parseXhrResponseHeaders","stripUrlQueryAndFragment","getClient","getActiveSpan","startInactiveSpan","SEMANTIC_ATTRIBUTE_SENTRY_ORIGIN","SEMANTIC_ATTRIBUTE_SENTRY_OP","SentryNonRecordingSpan","getTraceData","baggageHeaderHasSentryValues"],"mappings":";;;;;;AA+HO,MAAM,oCAAA,GAAsE;AAAA,EACjF,UAAA,EAAY,IAAA;AAAA,EACZ,QAAA,EAAU,IAAA;AAAA,EACV,iBAAA,EAAmB,IAAA;AAAA,EACnB,2BAAA,EAA6B;AAC/B;AAGO,SAAS,0BAAA,CAA2B,QAAgB,QAAA,EAAyD;AAClH,EAAA,MAAM;AAAA,IACJ,UAAA;AAAA,IACA,QAAA;AAAA,IACA,0BAAA;AAAA,IACA,iBAAA;AAAA,IACA,uBAAA;AAAA,IACA,kBAAA;AAAA,IACA;AAAA,GACF,GAAI;AAAA,IACF,GAAG,oCAAA;AAAA,IACH,GAAG;AAAA,GACL;AAEA,EAAA,MAAM,mBACJ,OAAO,0BAAA,KAA+B,UAAA,GAAa,0BAAA,GAA6B,CAAC,CAAA,KAAc,IAAA;AAEjG,EAAA,MAAM,8BAAA,GAAiC,CAAC,GAAA,KAAyB,mBAAA,CAAoB,KAAK,uBAAuB,CAAA;AAEjH,EAAA,MAAM,QAA8B,EAAC;AAErC,EAAA,MAAM,oBAAA,GAAwB,MAAA,CAAyB,UAAA,EAAW,CAAE,oBAAA;AAEpE,EAAA,IAAI,UAAA,EAAY;AACd,IAAAA,sCAAA,CAA+B,CAAA,WAAA,KAAe;AAC5C,MAAA,MAAM,WAAA,GAAcC,8BAAA,CAAuB,WAAA,EAAa,gBAAA,EAAkB,gCAAgC,KAAA,EAAO;AAAA,QAC/G,oBAAA;AAAA,QACA;AAAA,OACD,CAAA;AAKD,MAAA,IAAI,WAAA,EAAa;AACf,QAAA,MAAM,OAAA,GAAUC,gBAAA,CAAW,WAAA,CAAY,SAAA,CAAU,GAAG,CAAA;AACpD,QAAA,MAAM,IAAA,GAAO,OAAA,GAAUC,gBAAA,CAAS,OAAO,EAAE,IAAA,GAAO,MAAA;AAChD,QAAA,WAAA,CAAY,aAAA,CAAc;AAAA,UACxB,UAAA,EAAY,OAAA,GAAUC,2BAAA,CAAoB,OAAO,CAAA,GAAI,MAAA;AAAA,UACrD,gBAAA,EAAkB;AAAA,SACnB,CAAA;AAED,QAAA,IAAI,iBAAA,EAAmB;AACrB,UAAA,cAAA,CAAe,aAAa,MAAM,CAAA;AAAA,QACpC;AAEA,QAAA,kBAAA,GAAqB,WAAA,EAAa,EAAE,OAAA,EAAS,WAAA,CAAY,SAAS,CAAA;AAAA,MACpE;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,IAAI,QAAA,EAAU;AACZ,IAAAC,yCAAA,CAA6B,CAAA,WAAA,KAAe;AAC1C,MAAA,MAAM,WAAA,GAAc,WAAA;AAAA,QAClB,WAAA;AAAA,QACA,gBAAA;AAAA,QACA,8BAAA;AAAA,QACA,KAAA;AAAA,QACA,oBAAA;AAAA,QACA;AAAA,OACF;AAEA,MAAA,IAAI,WAAA,EAAa;AACf,QAAA,IAAI,iBAAA,EAAmB;AACrB,UAAA,cAAA,CAAe,aAAa,MAAM,CAAA;AAAA,QACpC;AAEA,QAAA,kBAAA,GAAqB,WAAA,EAAa;AAAA,UAChC,OAAA,EAASC,yBAAA,CAAoB,WAAA,CAAY,GAAA,CAAI,mBAAmB,eAAe;AAAA,SAChF,CAAA;AAAA,MACH;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AACF;AAOA,MAAM,mBAAA,GAAsB,GAAA;AAQ5B,SAAS,cAAA,CAAe,MAAY,MAAA,EAAsB;AACxD,EAAA,MAAM,EAAE,GAAA,EAAI,GAAIC,kBAAA,CAAW,IAAI,CAAA,CAAE,IAAA;AAEjC,EAAA,IAAI,CAAC,GAAA,IAAO,OAAO,GAAA,KAAQ,QAAA,EAAU;AACnC,IAAA;AAAA,EACF;AAKA,EAAA,IAAI,YAAA,GAAe,MAAY,KAAK,UAAA,CAAW,6BAA6B,CAAA;AAI5E,EAAA,IAAIC,+BAAA,CAAwB,MAAM,CAAA,EAAG;AACnC,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,IAAI,CAAA;AAEtC,IAAA,IAAA,CAAK,GAAA,GAAM,CAAC,YAAA,KAAiC;AAC3C,MAAA,MAAM,oBAAA,GAAuB,gBAAgBC,0BAAA,EAAmB;AAChE,MAAA,IAAI,OAAA,GAAU,KAAA;AAEd,MAAA,MAAM,oBAAoB,MAAY;AACpC,QAAA,IAAI,OAAA,EAAS;AACX,UAAA;AAAA,QACF;AACA,QAAA,OAAA,GAAU,IAAA;AACV,QAAA,UAAA,CAAW,6BAA6B,CAAA;AACxC,QAAA,WAAA,CAAY,oBAAoB,CAAA;AAChC,QAAA,YAAA,CAAa,eAAe,CAAA;AAAA,MAC9B,CAAA;AAEA,MAAA,YAAA,GAAe,iBAAA;AAKf,MAAA,MAAM,eAAA,GAAkB,UAAA,CAAW,iBAAA,EAAmB,mBAAmB,CAAA;AAAA,IAC3E,CAAA;AAAA,EACF;AAEA,EAAA,MAAM,gCAAgCC,iDAAA,CAAqC,UAAA,EAAY,CAAC,EAAE,SAAQ,KAAM;AACtG,IAAA,OAAA,CAAQ,QAAQ,CAAA,KAAA,KAAS;AACvB,MAAA,IAAIC,kCAA4B,KAAK,CAAA,IAAK,MAAM,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA,EAAG;AAClE,QAAA,IAAA,CAAK,aAAA,CAAcC,2CAAA,CAA+B,KAAK,CAAC,CAAA;AACxD,QAAA,YAAA,EAAa;AAAA,MACf;AAAA,IACF,CAAC,CAAA;AAAA,EACH,CAAC,CAAA;AACH;AAMO,SAAS,mBAAA,CACd,WACA,uBAAA,EACS;AAGT,EAAA,MAAM,OAAOC,uBAAA,EAAgB;AAE7B,EAAA,IAAI,CAAC,IAAA,EAAM;AAIT,IAAA,MAAM,2BAAA,GAA8B,CAAC,CAAC,SAAA,CAAU,MAAM,WAAW,CAAA;AACjE,IAAA,IAAI,CAAC,uBAAA,EAAyB;AAC5B,MAAA,OAAO,2BAAA;AAAA,IACT,CAAA,MAAO;AACL,MAAA,OAAOC,gCAAA,CAAyB,WAAW,uBAAuB,CAAA;AAAA,IACpE;AAAA,EACF,CAAA,MAAO;AACL,IAAA,IAAI,WAAA;AACJ,IAAA,IAAI,aAAA;AAGJ,IAAA,IAAI;AACF,MAAA,WAAA,GAAc,IAAI,GAAA,CAAI,SAAA,EAAW,IAAI,CAAA;AACrC,MAAA,aAAA,GAAgB,IAAI,GAAA,CAAI,IAAI,CAAA,CAAE,MAAA;AAAA,IAChC,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,MAAM,mBAAA,GAAsB,YAAY,MAAA,KAAW,aAAA;AACnD,IAAA,IAAI,CAAC,uBAAA,EAAyB;AAC5B,MAAA,OAAO,mBAAA;AAAA,IACT,CAAA,MAAO;AACL,MAAA,OACEA,gCAAA,CAAyB,WAAA,CAAY,QAAA,EAAS,EAAG,uBAAuB,KACvE,mBAAA,IAAuBA,gCAAA,CAAyB,WAAA,CAAY,QAAA,EAAU,uBAAuB,CAAA;AAAA,IAElG;AAAA,EACF;AACF;AAOA,SAAS,YACP,WAAA,EACA,gBAAA,EACAC,oBAAAA,EACA,KAAA,EACA,sBACA,gBAAA,EACkB;AAClB,EAAA,MAAM,MAAM,WAAA,CAAY,GAAA;AACxB,EAAA,MAAM,aAAA,GAAgB,MAAMC,gCAAmB,CAAA;AAE/C,EAAA,IAAI,CAAC,GAAA,IAAO,GAAA,CAAI,sBAAA,IAA0B,CAAC,aAAA,EAAe;AACxD,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,MAAM,EAAE,GAAA,EAAK,MAAA,EAAO,GAAI,aAAA;AAExB,EAAA,MAAM,sBAAA,GAAyBC,uBAAA,EAAgB,IAAK,gBAAA,CAAiB,GAAG,CAAA;AAGxE,EAAA,IAAI,YAAY,YAAA,EAAc;AAC5B,IAAA,MAAM,SAAS,GAAA,CAAI,sBAAA;AACnB,IAAA,IAAI,CAAC,MAAA,EAAQ;AAEb,IAAA,MAAMC,KAAAA,GAAO,MAAM,MAAM,CAAA;AAEzB,IAAA,IAAIA,KAAAA,EAAM;AACR,MAAA,IAAI,sBAAA,IAA0B,aAAA,CAAc,WAAA,KAAgB,MAAA,EAAW;AACrE,QAAAC,qBAAA,CAAcD,KAAAA,EAAM,cAAc,WAAW,CAAA;AAC7C,QAAAA,MAAK,GAAA,EAAI;AAET,QAAA,gBAAA,GAAmBA,KAAAA,EAAM;AAAA,UACvB,OAAA,EAASZ,yBAAA,CAAoBc,oCAAA,CAAwB,GAAmD,CAAC,CAAA;AAAA,UACzG,OAAO,WAAA,CAAY;AAAA,SACpB,CAAA;AAAA,MACH;AAGA,MAAA,OAAO,MAAM,MAAM,CAAA;AAAA,IACrB;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,MAAM,OAAA,GAAUlB,iBAAW,GAAG,CAAA;AAC9B,EAAA,MAAM,YAAY,OAAA,GAAUC,gBAAA,CAAS,OAAO,CAAA,GAAIA,iBAAS,GAAG,CAAA;AAE5D,EAAA,MAAM,cAAA,GAAiBC,2BAAA,CAAoBiB,gCAAA,CAAyB,GAAG,CAAC,CAAA;AAExE,EAAA,MAAM,SAASC,iBAAA,EAAU;AACzB,EAAA,MAAM,SAAA,GAAY,CAAC,CAACC,qBAAA,EAAc;AAElC,EAAA,MAAM,iBAAiB,SAAA,IAAc,CAAC,CAAC,MAAA,IAAUf,gCAAwB,MAAM,CAAA;AAE/E,EAAA,MAAM,IAAA,GACJ,sBAAA,IAA0B,cAAA,GACtBgB,yBAAA,CAAkB;AAAA,IAChB,IAAA,EAAM,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,cAAc,CAAA,CAAA;AAAA,IACjC,UAAA,EAAY;AAAA,MACV,GAAA,EAAKpB,4BAAoB,GAAG,CAAA;AAAA,MAC5B,IAAA,EAAM,KAAA;AAAA,MACN,aAAA,EAAe,MAAA;AAAA,MACf,UAAA,EAAY,OAAA,GAAUA,2BAAA,CAAoB,OAAO,CAAA,GAAI,MAAA;AAAA,MACrD,kBAAkB,SAAA,EAAW,IAAA;AAAA,MAC7B,CAACqB,wCAAgC,GAAG,mBAAA;AAAA,MACpC,CAACC,oCAA4B,GAAG,aAAA;AAAA,MAChC,GAAI,SAAA,EAAW,MAAA,IAAU,EAAE,YAAA,EAAc,WAAW,MAAA,EAAO;AAAA,MAC3D,GAAI,SAAA,EAAW,IAAA,IAAQ,EAAE,eAAA,EAAiB,WAAW,IAAA;AAAK;AAC5D,GACD,CAAA,GACD,IAAIC,8BAAA,EAAuB;AAEjC,EAAA,IAAI,sBAAA,IAA0B,CAAC,cAAA,EAAgB;AAC7C,IAAA,MAAA,EAAQ,kBAAA,CAAmB,kBAAkB,MAAM,CAAA;AAAA,EACrD;AAEA,EAAA,GAAA,CAAI,sBAAA,GAAyB,IAAA,CAAK,WAAA,EAAY,CAAE,MAAA;AAChD,EAAA,KAAA,CAAM,GAAA,CAAI,sBAAsB,CAAA,GAAI,IAAA;AAEpC,EAAA,IAAIZ,oBAAAA,CAAoB,GAAG,CAAA,EAAG;AAC5B,IAAA,6BAAA;AAAA,MACE,GAAA;AAAA;AAAA;AAAA;AAAA,MAIAE,uBAAA,EAAgB,IAAK,cAAA,GAAiB,IAAA,GAAO,MAAA;AAAA,MAC7C;AAAA,KACF;AAAA,EACF;AAEA,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,MAAA,CAAO,IAAA,CAAK,2BAAA,EAA6B,IAAA,EAAM,WAAsB,CAAA;AAAA,EACvE;AAEA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,6BAAA,CACP,GAAA,EACA,IAAA,EACA,oBAAA,EACM;AACN,EAAA,MAAM,EAAE,cAAA,EAAgB,WAAA,EAAa,OAAA,EAAS,WAAA,KAAgBW,oBAAA,CAAa,EAAE,IAAA,EAAM,oBAAA,EAAsB,CAAA;AAEzG,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,cAAA,CAAe,GAAA,EAAK,WAAA,EAAa,OAAA,EAAS,WAAW,CAAA;AAAA,EACvD;AACF;AAEA,SAAS,cAAA,CACP,GAAA,EACA,iBAAA,EACA,mBAAA,EACA,iBAAA,EACM;AACN,EAAA,MAAM,eAAA,GAAkB,IAAI,iBAAA,EAAmB,eAAA;AAE/C,EAAA,IAAI,eAAA,GAAkB,cAAc,CAAA,IAAK,CAAC,IAAI,gBAAA,EAAkB;AAE9D,IAAA;AAAA,EACF;AAEA,EAAA,IAAI;AACF,IAAA,GAAA,CAAI,gBAAA,CAAiB,gBAAgB,iBAAiB,CAAA;AAEtD,IAAA,IAAI,iBAAA,IAAqB,CAAC,eAAA,GAAkB,aAAa,CAAA,EAAG;AAC1D,MAAA,GAAA,CAAI,gBAAA,CAAiB,eAAe,iBAAiB,CAAA;AAAA,IACvD;AAEA,IAAA,IAAI,mBAAA,EAAqB;AAIvB,MAAA,MAAM,qBAAA,GAAwB,kBAAkB,SAAS,CAAA;AACzD,MAAA,IAAI,CAAC,qBAAA,IAAyB,CAACC,kCAAA,CAA6B,qBAAqB,CAAA,EAAG;AAIlF,QAAA,GAAA,CAAI,gBAAA,CAAiB,WAAW,mBAAmB,CAAA;AAAA,MACrD;AAAA,IACF;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;;;;;;"}

package/build/npm/cjs/prod/tracing/setActiveSpan.js

@@ -2,65 +2,18 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 
 const browser = require('@sentry/core/browser');
 
-/**
- * Sets an inactive span active on the current scope.
- *
- * This is useful in browser applications, if you want to create a span that cannot be finished
- * within its callback. Any spans started while the given span is active, will be children of the span.
- *
- * If there already was an active span on the scope prior to calling this function, it is replaced
- * with the given span and restored after the span ended. Otherwise, the span will simply be
- * removed, resulting in no active span on the scope.
- *
- * IMPORTANT: This function can ONLY be used in the browser! Calling this function in a server
- * environment (for example in a server-side rendered component) will result in undefined behaviour
- * and is not supported.
- * You MUST call `span.end()` manually, otherwise the span will never be finished.
- *
- * @example
- * ```js
- * let checkoutSpan;
- *
- * on('checkoutStarted', () => {
- *  checkoutSpan = Sentry.startInactiveSpan({ name: 'checkout-flow' });
- *  Sentry.setActiveSpanInBrowser(checkoutSpan);
- * })
- *
- * // during this time, any spans started will be children of `checkoutSpan`:
- * Sentry.startSpan({ name: 'checkout-step-1' }, () => {
- *  // ... `
- * })
- *
- * on('checkoutCompleted', () => {
- *  checkoutSpan?.end();
- * })
- * ```
- *
- * @param span - the span to set active
- */
 function setActiveSpanInBrowser(span) {
   const maybePreviousActiveSpan = browser.getActiveSpan();
-
-  // If the span is already active, there's no need to double-patch or set it again.
-  // This also guards against users (for whatever reason) calling setActiveSpanInBrowser on SDK-started
-  // idle spans like pageload or navigation spans. These will already be handled correctly by the SDK.
-  // For nested situations, we have to double-patch to ensure we restore the correct previous span (see tests)
   if (maybePreviousActiveSpan === span) {
     return;
   }
-
   const scope = browser.getCurrentScope();
-
-  // Putting a small patch onto the span.end method to ensure we
-  // remove the span from the scope when it ends.
-  // eslint-disable-next-line @typescript-eslint/unbound-method
   span.end = new Proxy(span.end, {
     apply(target, thisArg, args) {
       browser._INTERNAL_setSpanForScope(scope, maybePreviousActiveSpan);
       return Reflect.apply(target, thisArg, args);
-    },
+    }
   });
-
   browser._INTERNAL_setSpanForScope(scope, span);
 }