@squasher-ai/browser-logger 0.1.1 → 0.3.0

package/dist/_vendor/sdk-runtime/runtime/redaction.d.ts

@@ -0,0 +1,14 @@
+export type RedactableValue = boolean | null | number | string | RedactableValue[] | {
+    [key: string]: RedactableValue;
+};
+export type RedactorKeyMask = RegExp | string;
+export type RedactorPathSegment = number | string;
+export type RedactorPathMask = readonly RedactorPathSegment[] | string;
+export interface RedactorOptions {
+    mask?: string;
+    keyMasks?: readonly RedactorKeyMask[];
+    pathMasks?: readonly RedactorPathMask[];
+    patternMasks?: readonly RegExp[];
+}
+export type Redactor = (value: RedactableValue) => RedactableValue;
+export declare function createRedactor(options?: RedactorOptions): Redactor;

package/dist/_vendor/sdk-runtime/runtime/redaction.js

@@ -0,0 +1,120 @@
+const DEFAULT_MASK = "[REDACTED]";
+const EMAIL_PATTERN = /\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/gi;
+const BEARER_PATTERN = /\bBearer\s+[A-Za-z0-9._~+/=-]+\b/gi;
+const JWT_PATTERN = /\beyJ[A-Za-z0-9_-]{5,}\.[A-Za-z0-9_-]{5,}\.[A-Za-z0-9_-]{5,}\b/g;
+const API_KEY_PATTERN = /\b(?:sk|pk|sq|squasher)_(?:pk|sk|live|test|dev|prod)?_?[A-Za-z0-9_-]{16,}\b/g;
+const SENSITIVE_KEY_PARTS = [
+    "apikey",
+    "authorization",
+    "authtoken",
+    "bearertoken",
+    "clientsecret",
+    "cookie",
+    "idtoken",
+    "password",
+    "passwd",
+    "privatekey",
+    "refreshtoken",
+    "secret",
+    "sessiontoken",
+    "squasherkey",
+    "token",
+];
+export function createRedactor(options = {}) {
+    const config = {
+        mask: options.mask ?? DEFAULT_MASK,
+        keyMasks: options.keyMasks ?? [],
+        pathMasks: options.pathMasks ?? [],
+        patternMasks: options.patternMasks ?? [],
+    };
+    return (value) => redactValue(value, [], config);
+}
+function redactValue(value, path, config) {
+    if (Object.prototype.toString.call(value) === "[object String]") {
+        return redactString(String(value), config);
+    }
+    if (Array.isArray(value)) {
+        return value.map((item, index) => redactValue(item, [...path, index], config));
+    }
+    if (!isRedactableRecord(value))
+        return value;
+    const result = {};
+    for (const [key, item] of Object.entries(value)) {
+        const itemPath = [...path, key];
+        result[key] = shouldMaskField(key, itemPath, config)
+            ? config.mask
+            : redactValue(item, itemPath, config);
+    }
+    return result;
+}
+function isRedactableRecord(value) {
+    if (value === null)
+        return false;
+    try {
+        const prototype = Object.getPrototypeOf(Object(value));
+        return prototype === null || Object.getPrototypeOf(prototype) === null;
+    }
+    catch {
+        return false;
+    }
+}
+function redactString(value, config) {
+    let redacted = value
+        .replace(EMAIL_PATTERN, config.mask)
+        .replace(BEARER_PATTERN, `Bearer ${config.mask}`)
+        .replace(JWT_PATTERN, config.mask)
+        .replace(API_KEY_PATTERN, config.mask);
+    for (const pattern of config.patternMasks) {
+        redacted = redacted.replace(globalPattern(pattern), config.mask);
+    }
+    return redacted;
+}
+function shouldMaskField(key, path, config) {
+    if (isSensitiveKey(key))
+        return true;
+    if (config.keyMasks.some((mask) => matchesKeyMask(mask, key)))
+        return true;
+    return config.pathMasks.some((mask) => matchesPathMask(mask, path));
+}
+function isSensitiveKey(key) {
+    const normalized = normalizeSegment(key);
+    return SENSITIVE_KEY_PARTS.some((part) => normalized.includes(part));
+}
+function matchesKeyMask(mask, key) {
+    if (isRegularExpression(mask)) {
+        mask.lastIndex = 0;
+        return RegExp.prototype.test.call(mask, key);
+    }
+    return normalizeSegment(String(mask)) === normalizeSegment(key);
+}
+function matchesPathMask(mask, path) {
+    const maskPath = Array.isArray(mask) ? mask : splitPath(String(mask));
+    if (maskPath.length !== path.length)
+        return false;
+    for (let index = 0; index < maskPath.length; index += 1) {
+        const segment = maskPath[index];
+        if (segment === "*")
+            continue;
+        if (normalizePathSegment(segment) !== normalizePathSegment(path[index]))
+            return false;
+    }
+    return true;
+}
+function isRegularExpression(mask) {
+    return Object.prototype.toString.call(mask) === "[object RegExp]";
+}
+function splitPath(path) {
+    return path.split(".").filter((segment) => segment.length > 0);
+}
+function normalizePathSegment(segment) {
+    return Object.prototype.toString.call(segment) === "[object Number]"
+        ? String(segment)
+        : normalizeSegment(String(segment ?? ""));
+}
+function normalizeSegment(segment) {
+    return segment.replace(/[^A-Za-z0-9]/g, "").toLowerCase();
+}
+function globalPattern(pattern) {
+    const flags = pattern.flags.includes("g") ? pattern.flags : `${pattern.flags}g`;
+    return new RegExp(pattern.source, flags);
+}

package/dist/_vendor/sdk-runtime/runtime/release.d.ts

@@ -0,0 +1,35 @@
+import { type RuntimeEnvironment } from "./environment.js";
+/**
+ * `canonical` is what every consumer should display / store: v-prefix
+ * stripped, `service@version+build` form rebuilt from the parsed components,
+ * so `v1.2.3` and `1.2.3` (or two inputs with different whitespace) compare
+ * equal by `canonical`.
+ */
+export interface ParsedRelease {
+    canonical: string;
+    service: string | null;
+    version: string;
+    build: string | null;
+    isSemver: boolean;
+}
+export type ReleaseInput = string | null | undefined;
+/**
+ * Parse + validate a release string. Returns `null` for empty input, junk
+ * sentinels, values over 200 chars, or strings with whitespace / control chars.
+ * Accepts: `1.2.3`, `v1.2.3`, `svc@1.2.3`, `svc@1.2.3+sha`, `1.2.3+sha`, and
+ * bare git shas (non-semver but valid).
+ */
+export declare function parseRelease(input: ReleaseInput): ParsedRelease | null;
+/**
+ * True when `parseRelease(input)` would accept the value. Pure boolean — use
+ * this at validation boundaries that don't need the parsed pieces (e.g. zod
+ * `.refine()`, ingest pre-filters).
+ */
+export declare function isValidRelease(input: ReleaseInput): input is string;
+/**
+ * Auto-detect a release from common CI/host env vars so customers on
+ * Vercel / Railway / Render / Fly / GitHub Actions get a useful release tag
+ * without configuring anything. Explicit `SQUASHER_RELEASE` always wins;
+ * values that fail `parseRelease` are skipped and detection continues.
+ */
+export declare function detectRelease(env?: Readonly<RuntimeEnvironment>): string | null;

package/dist/_vendor/sdk-runtime/runtime/release.js

@@ -0,0 +1,120 @@
+import { readProcessEnvironment } from "./environment.js";
+const MAX_LEN = 200;
+const JUNK_VALUES = new Set([
+    "",
+    "undefined",
+    "null",
+    "nan",
+    "latest",
+    "unknown",
+    "(none)",
+    "n/a",
+    "none",
+]);
+const SEMVER_RE = /^\d+\.\d+\.\d+(?:-[0-9a-zA-Z.-]+)?$/;
+const VERSION_CHAR_RE = /^[A-Za-z0-9._-]+$/;
+const BUILD_CHAR_RE = /^[A-Za-z0-9._-]+$/;
+const SERVICE_CHAR_RE = /^[A-Za-z0-9._/@-]+$/;
+/**
+ * Parse + validate a release string. Returns `null` for empty input, junk
+ * sentinels, values over 200 chars, or strings with whitespace / control chars.
+ * Accepts: `1.2.3`, `v1.2.3`, `svc@1.2.3`, `svc@1.2.3+sha`, `1.2.3+sha`, and
+ * bare git shas (non-semver but valid).
+ */
+export function parseRelease(input) {
+    if (Object.prototype.toString.call(input) !== "[object String]")
+        return null;
+    const raw = String(input).trim();
+    if (raw.length === 0 || raw.length > MAX_LEN)
+        return null;
+    if (JUNK_VALUES.has(raw.toLowerCase()))
+        return null;
+    // Reject whitespace + ASCII control chars (NUL..US, DEL).
+    // oxlint-disable-next-line no-control-regex
+    if (/[\s\x00-\x1f\x7f]/.test(raw))
+        return null;
+    // Only the LAST `@` separates service from version, so npm-style scopes
+    // like `@org/pkg@1.2.3` parse with `@org/pkg` as the service.
+    const atIndex = raw.lastIndexOf("@");
+    let service = null;
+    let rest = raw;
+    if (atIndex >= 0) {
+        const left = raw.slice(0, atIndex);
+        const right = raw.slice(atIndex + 1);
+        if (right.length === 0)
+            return null;
+        service = left.length > 0 ? left : null;
+        rest = right;
+    }
+    if (service !== null && !SERVICE_CHAR_RE.test(service))
+        return null;
+    const plusIndex = rest.indexOf("+");
+    let version;
+    let build;
+    if (plusIndex >= 0) {
+        version = rest.slice(0, plusIndex);
+        build = rest.slice(plusIndex + 1);
+        if (version.length === 0 || build.length === 0)
+            return null;
+        if (!BUILD_CHAR_RE.test(build))
+            return null;
+    }
+    else {
+        version = rest;
+        build = null;
+    }
+    if (!VERSION_CHAR_RE.test(version))
+        return null;
+    // Strip a `v` prefix only when followed by a digit — don't eat the first
+    // character of names like `viper`.
+    const normalizedVersion = version.length > 1 &&
+        (version[0] === "v" || version[0] === "V") &&
+        /[0-9]/.test(version[1] ?? "")
+        ? version.slice(1)
+        : version;
+    const isSemver = SEMVER_RE.test(normalizedVersion);
+    const canonical = [
+        service !== null ? `${service}@` : "",
+        normalizedVersion,
+        build !== null ? `+${build}` : "",
+    ].join("");
+    return { canonical, service, version: normalizedVersion, build, isSemver };
+}
+/**
+ * True when `parseRelease(input)` would accept the value. Pure boolean — use
+ * this at validation boundaries that don't need the parsed pieces (e.g. zod
+ * `.refine()`, ingest pre-filters).
+ */
+export function isValidRelease(input) {
+    return parseRelease(input) !== null;
+}
+/**
+ * Auto-detect a release from common CI/host env vars so customers on
+ * Vercel / Railway / Render / Fly / GitHub Actions get a useful release tag
+ * without configuring anything. Explicit `SQUASHER_RELEASE` always wins;
+ * values that fail `parseRelease` are skipped and detection continues.
+ */
+export function detectRelease(env = readProcessEnvironment()) {
+    const candidates = [
+        env.SQUASHER_RELEASE,
+        env.VERCEL_GIT_COMMIT_SHA,
+        env.RAILWAY_GIT_COMMIT_SHA,
+        env.RENDER_GIT_COMMIT,
+        env.FLY_MACHINE_VERSION,
+        env.GITHUB_SHA,
+        npmPackageCandidate(env),
+    ];
+    for (const value of candidates) {
+        const parsed = parseRelease(value);
+        if (parsed !== null)
+            return parsed.canonical;
+    }
+    return null;
+}
+function npmPackageCandidate(env) {
+    const version = env.npm_package_version;
+    if (!version)
+        return null;
+    const name = env.npm_package_name;
+    return name ? `${name}@${version}` : version;
+}

package/dist/_vendor/sdk-runtime/sampling/index.d.ts

@@ -0,0 +1,43 @@
+interface TelemetrySamplingConfig {
+    successRate?: number;
+    errorRate?: number;
+    slowRate?: number;
+    slowThresholdMs?: number;
+    alwaysSampleUserIds?: string[];
+    alwaysSampleReleases?: string[];
+}
+type SamplingAttributePrimitive = boolean | null | number | string;
+type SamplingAttributeValue = SamplingAttributePrimitive | SamplingAttributeValue[] | SamplingAttributes;
+interface SamplingAttributes {
+    [key: string]: SamplingAttributeValue;
+}
+interface SamplingEvent {
+    attributes?: SamplingAttributes;
+    distinct_id?: string;
+    event_name?: string;
+    kind?: string;
+    level?: string;
+    message: string;
+    release?: string;
+    session_id?: string;
+    timestamp?: number | string;
+    trace?: {
+        duration_ms?: number;
+        status?: string;
+        trace_id?: string;
+    };
+    user?: {
+        id?: string;
+    };
+}
+export interface ResolvedTelemetrySampling {
+    successRate: number;
+    errorRate: number;
+    slowRate: number;
+    slowThresholdMs: number;
+    alwaysSampleUserIds: ReadonlySet<string>;
+    alwaysSampleReleases: ReadonlySet<string>;
+}
+export declare function resolveTelemetrySampling(config: TelemetrySamplingConfig | undefined): ResolvedTelemetrySampling;
+export declare function shouldSampleTelemetry(event: SamplingEvent, config: ResolvedTelemetrySampling): boolean;
+export {};

package/dist/_vendor/sdk-runtime/sampling/index.js

@@ -0,0 +1,70 @@
+export function resolveTelemetrySampling(config) {
+    return {
+        successRate: rate(config?.successRate, 1),
+        errorRate: rate(config?.errorRate, 1),
+        slowRate: rate(config?.slowRate, 1),
+        slowThresholdMs: Math.max(0, config?.slowThresholdMs ?? 1_000),
+        alwaysSampleUserIds: new Set(config?.alwaysSampleUserIds ?? []),
+        alwaysSampleReleases: new Set(config?.alwaysSampleReleases ?? []),
+    };
+}
+export function shouldSampleTelemetry(event, config) {
+    if ((event.distinct_id && config.alwaysSampleUserIds.has(event.distinct_id)) ||
+        (event.user?.id && config.alwaysSampleUserIds.has(event.user.id)))
+        return true;
+    if (event.release && config.alwaysSampleReleases.has(event.release))
+        return true;
+    // AI generation events are metered usage: dropping them would under-report
+    // tokens, cost, and cache reads on the AI dashboards, so they are never sampled.
+    if (event.kind === "llm_generation")
+        return true;
+    // Events in one trace share a hash input, but each outcome class applies its
+    // configured threshold. This correlates their decisions without pretending
+    // that event sampling is whole-trace tail sampling.
+    const durationMs = event.trace?.duration_ms;
+    const selectedRate = isFailure(event)
+        ? config.errorRate
+        : durationMs !== undefined && durationMs >= config.slowThresholdMs
+            ? config.slowRate
+            : config.successRate;
+    if (selectedRate >= 1)
+        return true;
+    if (selectedRate <= 0)
+        return false;
+    return stableFraction(sampleKey(event)) < selectedRate;
+}
+function isFailure(event) {
+    if (event.level === "fatal" || event.level === "error" || event.level === "warning")
+        return true;
+    if (event.kind === "error" || event.trace?.status === "error")
+        return true;
+    const outcome = event.attributes?.["squasher.outcome"] ?? event.attributes?.outcome;
+    return outcome === "failure" || outcome === "error";
+}
+function sampleKey(event) {
+    if (event.trace?.trace_id)
+        return `trace:${event.trace.trace_id}`;
+    return [
+        event.session_id,
+        event.distinct_id,
+        event.user?.id,
+        event.event_name,
+        event.message,
+        event.timestamp === undefined ? undefined : String(event.timestamp),
+    ]
+        .filter((value) => Boolean(value))
+        .join("|");
+}
+function stableFraction(value) {
+    let hash = 2166136261;
+    for (let index = 0; index < value.length; index++) {
+        hash ^= value.charCodeAt(index);
+        hash = Math.imul(hash, 16777619);
+    }
+    return (hash >>> 0) / 0x1_0000_0000;
+}
+function rate(value, fallback) {
+    if (value === undefined || !Number.isFinite(value))
+        return fallback;
+    return Math.min(1, Math.max(0, value));
+}

package/dist/browser-logger.d.ts

@@ -1,4 +1,4 @@
-import type { BrowserLoggerConfig } from "./types";
+import type { BrowserLoggerConfig } from "./types.js";
 export declare class BrowserLogger {
     private readonly config;
     private readonly transport;
@@ -7,7 +7,6 @@ export declare class BrowserLogger {
     constructor(config: BrowserLoggerConfig);
     flush(): Promise<void>;
     close(): Promise<void>;
-    private installConsoleErrorCapture;
+    protected installConsoleErrorCapture(): void;
     private restoreConsoleErrorCapture;
 }
-//# sourceMappingURL=browser-logger.d.ts.map

package/dist/browser-logger.js

@@ -1,6 +1,6 @@
-import { buildConsoleEvent } from "./serializer";
-import { BrowserLoggerTransport } from "./transport";
-const DEFAULT_ENDPOINT = "https://ingest.squasher.ai";
+import { DEFAULT_INGEST_ENDPOINT } from "./_vendor/sdk-runtime/runtime/public-sdk-runtime.js";
+import { buildConsoleEvent } from "./serializer.js";
+import { BrowserLoggerTransport } from "./transport.js";
 export class BrowserLogger {
     config;
     transport;
@@ -33,7 +33,7 @@ export class BrowserLogger {
         }
         const originalConsoleError = this.originalConsoleError;
         console.error = (...args) => {
-            Reflect.apply(originalConsoleError, console, args);
+            originalConsoleError.call(console, ...args);
             this.transport.enqueue(buildConsoleEvent(args, "error"));
         };
         this.installed = true;
@@ -50,7 +50,7 @@ function resolveConfig(config) {
     return {
         apiKey: config.apiKey,
         projectId: config.projectId,
-        endpoint: config.endpoint ?? DEFAULT_ENDPOINT,
+        endpoint: config.endpoint ?? DEFAULT_INGEST_ENDPOINT,
         captureConsoleErrors: config.captureConsoleErrors ?? true,
     };
 }