@simplr-ai/react-native 1.1.0 → 1.2.1

package/dist/index.cjs

@@ -20,6 +20,98 @@ var SimplrError = class _SimplrError extends Error {
   }
 };
 
+// src/network-log.ts
+var SENSITIVE_HEADERS = /* @__PURE__ */ new Set([
+  "authorization",
+  "cookie",
+  "set-cookie",
+  "x-api-key",
+  "x-auth-token",
+  "x-csrf-token",
+  "x-xsrf-token"
+]);
+var SENSITIVE_KEY_PARTS = [
+  "password",
+  "passwd",
+  "secret",
+  "token",
+  "api_key",
+  "apikey",
+  "authorization",
+  "auth",
+  "credential",
+  "private_key",
+  "card",
+  "cardnumber",
+  "pan",
+  "cvv",
+  "cvc",
+  "ssn",
+  "pin",
+  "otp"
+];
+var MAX_REDACT_DEPTH = 8;
+var MAX_BODY_CHARS = 1e4;
+function isSensitiveKey(key, extraKeys) {
+  const lower = key.toLowerCase();
+  if (extraKeys.some((k) => lower === k.toLowerCase())) return true;
+  return SENSITIVE_KEY_PARTS.some((part) => lower.includes(part));
+}
+function redactDeep(value, extraKeys, depth = 0) {
+  if (depth >= MAX_REDACT_DEPTH) return "[truncated]";
+  if (Array.isArray(value)) return value.map((v) => redactDeep(v, extraKeys, depth + 1));
+  if (value && typeof value === "object") {
+    const out = {};
+    for (const [key, val] of Object.entries(value)) {
+      out[key] = isSensitiveKey(key, extraKeys) ? "[REDACTED]" : redactDeep(val, extraKeys, depth + 1);
+    }
+    return out;
+  }
+  return value;
+}
+function redactHeaders(headers) {
+  if (!headers) return void 0;
+  const out = {};
+  const set = (key, value) => {
+    out[key] = SENSITIVE_HEADERS.has(key.toLowerCase()) ? "[REDACTED]" : value;
+  };
+  if (typeof headers.forEach === "function" && !Array.isArray(headers)) {
+    headers.forEach((value, key) => set(key, value));
+  } else {
+    for (const [key, value] of Object.entries(headers)) {
+      set(key, String(value));
+    }
+  }
+  return out;
+}
+function previewBody(raw, redactFields = []) {
+  if (raw === void 0 || raw === null) return void 0;
+  let value = raw;
+  if (typeof raw === "string") {
+    try {
+      value = JSON.parse(raw);
+    } catch {
+      return raw.length > MAX_BODY_CHARS ? raw.slice(0, MAX_BODY_CHARS) + "\u2026[truncated]" : raw;
+    }
+  }
+  const redacted = redactDeep(value, redactFields);
+  let text;
+  try {
+    text = JSON.stringify(redacted);
+  } catch {
+    return "[unserializable]";
+  }
+  if (text.length > MAX_BODY_CHARS) {
+    return text.slice(0, MAX_BODY_CHARS) + "\u2026[truncated]";
+  }
+  return redacted;
+}
+function newLogId() {
+  const uuid = globalThis?.crypto?.randomUUID;
+  if (typeof uuid === "function") return uuid.call(globalThis.crypto);
+  return `req_${Date.now().toString(36)}${Math.random().toString(36).slice(2, 10)}`;
+}
+
 // src/http.ts
 async function apiRequest(cfg, method, path, body) {
   const fetchImpl = cfg.fetchImpl ?? globalThis.fetch;
@@ -28,13 +120,32 @@ async function apiRequest(cfg, method, path, body) {
   }
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), cfg.timeoutMs);
+  const url = `${cfg.baseUrl}${path}`;
+  const requestHeaders = {
+    "Content-Type": "application/json",
+    ...cfg.authHeaders
+  };
+  const startedAt = Date.now();
+  const log = cfg.onNetworkLog ? {
+    id: newLogId(),
+    source: "frontend",
+    timestamp: new Date(startedAt).toISOString(),
+    method,
+    url,
+    requestHeaders: redactHeaders(requestHeaders),
+    requestBody: cfg.logBodies ? previewBody(body, cfg.redactFields) : void 0
+  } : null;
+  const emit = (extra) => {
+    if (!log || !cfg.onNetworkLog) return;
+    try {
+      cfg.onNetworkLog({ ...log, durationMs: Date.now() - startedAt, ...extra });
+    } catch {
+    }
+  };
   try {
-    const res = await fetchImpl(`${cfg.baseUrl}${path}`, {
+    const res = await fetchImpl(url, {
       method,
-      headers: {
-        "Content-Type": "application/json",
-        ...cfg.authHeaders
-      },
+      headers: requestHeaders,
       body: body !== void 0 ? JSON.stringify(body) : void 0,
       signal: controller.signal
     });
@@ -45,6 +156,13 @@ async function apiRequest(cfg, method, path, body) {
     } catch {
       parsed = text;
     }
+    emit({
+      status: res.status,
+      statusText: res.statusText,
+      ok: res.ok,
+      responseHeaders: redactHeaders(res.headers),
+      responseBody: cfg.logBodies ? previewBody(parsed ?? text, cfg.redactFields) : void 0
+    });
     if (!res.ok) {
       const message = parsed && (parsed.message || parsed.error) || `Simplr API error ${res.status}`;
       throw new SimplrError(message, res.status, parsed);
@@ -53,8 +171,10 @@ async function apiRequest(cfg, method, path, body) {
   } catch (err) {
     if (err instanceof SimplrError) throw err;
     if (err instanceof Error && err.name === "AbortError") {
+      emit({ ok: false, error: `timed out after ${cfg.timeoutMs}ms` });
       throw new SimplrError(`Request to ${path} timed out after ${cfg.timeoutMs}ms`, 0, null);
     }
+    emit({ ok: false, error: err instanceof Error ? err.message : "Network error" });
     throw new SimplrError(err instanceof Error ? err.message : "Network error", 0, null);
   } finally {
     clearTimeout(timer);
@@ -64,6 +184,57 @@ function normalizeBaseUrl(url) {
   return url.replace(/\/+$/, "");
 }
 
+// src/network-shipper.ts
+var DEFAULT_BATCH = 25;
+var DEFAULT_FLUSH_MS = 5e3;
+var NetworkLogShipper = class {
+  constructor(cfg) {
+    this.queue = [];
+    this.timer = null;
+    this.cfg = cfg;
+  }
+  start() {
+    if (this.timer) return;
+    const interval = this.cfg.flushIntervalMs ?? DEFAULT_FLUSH_MS;
+    this.timer = setInterval(() => {
+      void this.flush();
+    }, interval);
+    this.timer?.unref?.();
+  }
+  add(entry) {
+    this.queue.push({
+      ...entry,
+      sdk: this.cfg.sdk,
+      applicationId: entry.applicationId ?? this.cfg.applicationId,
+      environment: entry.environment ?? this.cfg.environment
+    });
+    if (this.queue.length >= (this.cfg.batchSize ?? DEFAULT_BATCH)) {
+      void this.flush();
+    }
+  }
+  async flush() {
+    if (this.queue.length === 0) return;
+    const logs = this.queue;
+    this.queue = [];
+    try {
+      await this.cfg.fetchImpl(`${this.cfg.baseUrl}/v1/network-logs`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "X-API-Key": this.cfg.apiKey
+        },
+        body: JSON.stringify({ logs })
+      });
+    } catch {
+    }
+  }
+  stop() {
+    if (this.timer) clearInterval(this.timer);
+    this.timer = null;
+    void this.flush();
+  }
+};
+
 // src/hash.ts
 function murmurHash3(input, seed = 0) {
   let h1 = seed;
@@ -391,6 +562,9 @@ var SimplrProfiles = class {
     this.baseUrl = config.baseUrl ? normalizeBaseUrl(config.baseUrl) : DEFAULT_BASE_URL;
     if (config.timeoutMs !== void 0) this.timeoutMs = config.timeoutMs;
     this.fetchImpl = config.fetchImpl;
+    this.onNetworkLog = config.onNetworkLog;
+    this.logBodies = config.logBodies;
+    this.redactFields = config.redactFields;
     this.configured = true;
     return this;
   }
@@ -411,7 +585,10 @@ var SimplrProfiles = class {
       authHeaders: { "X-API-Key": this.apiKey },
       baseUrl: this.baseUrl,
       timeoutMs: this.timeoutMs,
-      fetchImpl: this.fetchImpl
+      fetchImpl: this.fetchImpl,
+      onNetworkLog: this.onNetworkLog,
+      logBodies: this.logBodies,
+      redactFields: this.redactFields
     };
   }
   /** Create or update an anonymous profile and link the current device. */
@@ -639,6 +816,9 @@ var SimplrAI = class {
     this.baseUrl = config.baseUrl ? normalizeBaseUrl(config.baseUrl) : DEFAULT_BASE_URL3;
     if (config.timeoutMs !== void 0) this.timeoutMs = config.timeoutMs;
     this.fetchImpl = config.fetchImpl;
+    this.onNetworkLog = config.onNetworkLog;
+    this.logBodies = config.logBodies;
+    this.redactFields = config.redactFields;
     this.configured = true;
     return this;
   }
@@ -652,7 +832,10 @@ var SimplrAI = class {
       authHeaders: { "X-API-Key": this.apiKey },
       baseUrl: this.baseUrl,
       timeoutMs: this.timeoutMs,
-      fetchImpl: this.fetchImpl
+      fetchImpl: this.fetchImpl,
+      onNetworkLog: this.onNetworkLog,
+      logBodies: this.logBodies,
+      redactFields: this.redactFields
     };
   }
   /** Create a new AI delegation token for a user. POST /v1/ai/delegations. */
@@ -775,12 +958,37 @@ var SimplrFraud = class {
     this.baseUrl = config.baseUrl ? normalizeBaseUrl(config.baseUrl) : DEFAULT_BASE_URL4;
     if (config.timeoutMs !== void 0) this.timeoutMs = config.timeoutMs;
     this.fetchImpl = config.fetchImpl;
+    const logSelf = !!config.logSelfCalls;
+    this.logBodies = config.logBodies ?? (config.shipNetworkLogs && logSelf);
+    this.redactFields = config.redactFields;
     this.configured = true;
+    this.shipper?.stop();
+    this.shipper = void 0;
+    if (config.shipNetworkLogs && logSelf) {
+      this.shipper = new NetworkLogShipper({
+        baseUrl: this.baseUrl,
+        apiKey: this.apiKey,
+        fetchImpl: this.fetchImpl ?? globalThis.fetch,
+        sdk: "react-native",
+        applicationId: config.applicationId,
+        environment: config.environment
+      });
+      this.shipper.start();
+    }
+    const shipper = this.shipper;
+    const userLog = config.onNetworkLog;
+    this.onNetworkLog = shipper || userLog ? (entry) => {
+      shipper?.add(entry);
+      userLog?.(entry);
+    } : void 0;
     const sub = {
       apiKey: this.apiKey,
       baseUrl: this.baseUrl,
       timeoutMs: this.timeoutMs,
-      fetchImpl: this.fetchImpl
+      fetchImpl: this.fetchImpl,
+      onNetworkLog: this.onNetworkLog,
+      logBodies: this.logBodies,
+      redactFields: this.redactFields
     };
     this.profiles.configure(sub);
     this.ai.configure(sub);
@@ -799,9 +1007,20 @@ var SimplrFraud = class {
       authHeaders: { "X-API-Key": this.apiKey },
       baseUrl: this.baseUrl,
       timeoutMs: this.timeoutMs,
-      fetchImpl: this.fetchImpl
+      fetchImpl: this.fetchImpl,
+      onNetworkLog: this.onNetworkLog,
+      logBodies: this.logBodies,
+      redactFields: this.redactFields
     };
   }
+  /** Flush any queued network logs to /v1/network-logs. */
+  flushNetworkLogs() {
+    return this.shipper?.flush() ?? Promise.resolve();
+  }
+  /** Stop the network-log shipper and flush remaining logs. */
+  close() {
+    this.shipper?.stop();
+  }
   // --- Biometrics ---------------------------------------------------------
   /** Start collecting touch biometrics and reset the form timer. */
   startTracking() {
@@ -987,6 +1206,7 @@ var simplrFlags = new SimplrFlags();
 // src/index.ts
 var src_default = SimplrFraud;
 
+exports.NetworkLogShipper = NetworkLogShipper;
 exports.SimplrAI = SimplrAI;
 exports.SimplrError = SimplrError;
 exports.SimplrFlags = SimplrFlags;