mixpanel-browser 2.75.0 → 2.77.0

package/dist/rrweb-bundled.js

@@ -9304,14 +9304,7 @@ class MutationBuffer {
       };
       while (this.mapRemoves.length) {
         const removedNode = this.mapRemoves.shift();
-        if (removedNode.nodeName === "IFRAME") {
-          try {
-            this.iframeManager.removeIframe(removedNode);
-          } catch (e2) {
-          }
-        } else {
-          this.stylesheetManager.cleanupStylesheetsForRemovedNode(removedNode);
-        }
+        this.cleanupRemovedNode(removedNode);
         this.mirror.removeNodeFromMap(removedNode);
       }
       for (const n2 of this.movedSet) {
@@ -9620,6 +9613,22 @@ class MutationBuffer {
         }
       }
     });
+    __publicField$1(this, "cleanupRemovedNode", (node2) => {
+      if (node2.nodeName === "IFRAME") {
+        try {
+          this.iframeManager.removeIframe(node2);
+        } catch (e2) {
+        }
+      } else {
+        try {
+          this.stylesheetManager.cleanupStylesheetsForRemovedNode(node2);
+        } catch (e2) {
+        }
+      }
+      node2.childNodes.forEach((child) => {
+        this.cleanupRemovedNode(child);
+      });
+    });
   }
   init(options) {
     [
@@ -11844,6 +11853,35 @@ class ProcessedNodeManager {
   destroy() {
   }
 }
+function toOrigin(url) {
+  try {
+    const origin = new URL(url).origin;
+    return origin !== "null" ? origin : null;
+  } catch {
+    return null;
+  }
+}
+function buildAllowedOriginSet(origins) {
+  if (!Array.isArray(origins) || origins.length === 0) {
+    throw new Error(
+      "[rrweb] allowedIframeOrigins must be a non-empty array of origin strings."
+    );
+  }
+  const set = /* @__PURE__ */ new Set();
+  for (let i2 = 0; i2 < origins.length; i2++) {
+    const entry = origins[i2];
+    if (typeof entry !== "string") {
+      throw new Error(
+        `[rrweb] allowedIframeOrigins[${i2}] must be a string, got ${typeof entry}.`
+      );
+    }
+    const origin = toOrigin(entry);
+    if (origin) {
+      set.add(origin);
+    }
+  }
+  return Object.freeze(set);
+}
 let wrappedEmit;
 let takeFullSnapshot$1;
 let canvasManager;
@@ -11884,6 +11922,7 @@ function record(options = {}) {
     recordDOM = true,
     recordCanvas = false,
     recordCrossOriginIframes = false,
+    allowedIframeOrigins,
     recordAfter = options.recordAfter === "DOMContentLoaded" ? options.recordAfter : "load",
     userTriggeredOnInput = false,
     collectFonts = false,
@@ -11894,6 +11933,13 @@ function record(options = {}) {
     errorHandler: errorHandler2
   } = options;
   registerErrorHandler(errorHandler2);
+  let validatedOrigins;
+  if (recordCrossOriginIframes && allowedIframeOrigins && allowedIframeOrigins.length > 0) {
+    validatedOrigins = buildAllowedOriginSet(allowedIframeOrigins);
+    if (validatedOrigins.size === 0) {
+      validatedOrigins = void 0;
+    }
+  }
   const inEmittingFrame = recordCrossOriginIframes ? window.parent === window : true;
   let passEmitsToParent = false;
   if (!inEmittingFrame) {
@@ -11981,7 +12027,13 @@ function record(options = {}) {
         origin: window.location.origin,
         isCheckout
       };
-      window.parent.postMessage(message, "*");
+      if (validatedOrigins) {
+        for (const targetOrigin of validatedOrigins) {
+          window.parent.postMessage(message, targetOrigin);
+        }
+      } else {
+        window.parent.postMessage(message, "*");
+      }
     }
     if (e2.type === EventType.FullSnapshot) {
       lastFullSnapshotEvent = e2;

package/dist/rrweb-compiled.js

@@ -10695,13 +10695,7 @@ var MutationBuffer = /*#__PURE__*/ function() {
             };
             while(_this.mapRemoves.length){
                 var removedNode = _this.mapRemoves.shift();
-                if (removedNode.nodeName === "IFRAME") {
-                    try {
-                        _this.iframeManager.removeIframe(removedNode);
-                    } catch (e2) {}
-                } else {
-                    _this.stylesheetManager.cleanupStylesheetsForRemovedNode(removedNode);
-                }
+                _this.cleanupRemovedNode(removedNode);
                 _this.mirror.removeNodeFromMap(removedNode);
             }
             for(var _iterator = _create_for_of_iterator_helper_loose(_this.movedSet), _step; !(_step = _iterator()).done;){
@@ -11021,6 +11015,20 @@ var MutationBuffer = /*#__PURE__*/ function() {
                 }
             }
         });
+        __publicField$1(this, "cleanupRemovedNode", function(node2) {
+            if (node2.nodeName === "IFRAME") {
+                try {
+                    _this.iframeManager.removeIframe(node2);
+                } catch (e2) {}
+            } else {
+                try {
+                    _this.stylesheetManager.cleanupStylesheetsForRemovedNode(node2);
+                } catch (e2) {}
+            }
+            node2.childNodes.forEach(function(child) {
+                _this.cleanupRemovedNode(child);
+            });
+        });
     }
     var _proto = MutationBuffer.prototype;
     _proto.init = function init(options) {
@@ -13248,6 +13256,31 @@ var ProcessedNodeManager = /*#__PURE__*/ function() {
     _proto.destroy = function destroy() {};
     return ProcessedNodeManager;
 }();
+function toOrigin(url) {
+    try {
+        var origin = new URL(url).origin;
+        return origin !== "null" ? origin : null;
+    } catch (e) {
+        return null;
+    }
+}
+function buildAllowedOriginSet(origins) {
+    if (!Array.isArray(origins) || origins.length === 0) {
+        throw new Error("[rrweb] allowedIframeOrigins must be a non-empty array of origin strings.");
+    }
+    var set = /* @__PURE__ */ new Set();
+    for(var i2 = 0; i2 < origins.length; i2++){
+        var entry = origins[i2];
+        if (typeof entry !== "string") {
+            throw new Error("[rrweb] allowedIframeOrigins[" + i2 + "] must be a string, got " + (typeof entry === "undefined" ? "undefined" : _type_of(entry)) + ".");
+        }
+        var origin = toOrigin(entry);
+        if (origin) {
+            set.add(origin);
+        }
+    }
+    return Object.freeze(set);
+}
 var wrappedEmit;
 var takeFullSnapshot$1;
 var canvasManager;
@@ -13269,10 +13302,17 @@ try {
 var mirror = createMirror$2();
 function record(options) {
     if (options === void 0) options = {};
-    var emit = options.emit, checkoutEveryNms = options.checkoutEveryNms, checkoutEveryNth = options.checkoutEveryNth, _options_blockClass = options.blockClass, blockClass = _options_blockClass === void 0 ? "rr-block" : _options_blockClass, _options_blockSelector = options.blockSelector, blockSelector = _options_blockSelector === void 0 ? null : _options_blockSelector, _options_ignoreClass = options.ignoreClass, ignoreClass = _options_ignoreClass === void 0 ? "rr-ignore" : _options_ignoreClass, _options_ignoreSelector = options.ignoreSelector, ignoreSelector = _options_ignoreSelector === void 0 ? null : _options_ignoreSelector, _options_maskTextClass = options.maskTextClass, maskTextClass = _options_maskTextClass === void 0 ? "rr-mask" : _options_maskTextClass, _options_maskTextSelector = options.maskTextSelector, maskTextSelector = _options_maskTextSelector === void 0 ? null : _options_maskTextSelector, _options_inlineStylesheet = options.inlineStylesheet, inlineStylesheet = _options_inlineStylesheet === void 0 ? true : _options_inlineStylesheet, maskAllInputs = options.maskAllInputs, _maskInputOptions = options.maskInputOptions, _slimDOMOptions = options.slimDOMOptions, maskInputFn = options.maskInputFn, maskTextFn = options.maskTextFn, hooks = options.hooks, packFn = options.packFn, _options_sampling = options.sampling, sampling = _options_sampling === void 0 ? {} : _options_sampling, _options_dataURLOptions = options.dataURLOptions, dataURLOptions = _options_dataURLOptions === void 0 ? {} : _options_dataURLOptions, mousemoveWait = options.mousemoveWait, _options_recordDOM = options.recordDOM, recordDOM = _options_recordDOM === void 0 ? true : _options_recordDOM, _options_recordCanvas = options.recordCanvas, recordCanvas = _options_recordCanvas === void 0 ? false : _options_recordCanvas, _options_recordCrossOriginIframes = options.recordCrossOriginIframes, recordCrossOriginIframes = _options_recordCrossOriginIframes === void 0 ? false : _options_recordCrossOriginIframes, _options_recordAfter = options.recordAfter, recordAfter = _options_recordAfter === void 0 ? options.recordAfter === "DOMContentLoaded" ? options.recordAfter : "load" : _options_recordAfter, _options_userTriggeredOnInput = options.userTriggeredOnInput, userTriggeredOnInput = _options_userTriggeredOnInput === void 0 ? false : _options_userTriggeredOnInput, _options_collectFonts = options.collectFonts, collectFonts = _options_collectFonts === void 0 ? false : _options_collectFonts, _options_inlineImages = options.inlineImages, inlineImages = _options_inlineImages === void 0 ? false : _options_inlineImages, plugins = options.plugins, _options_keepIframeSrcFn = options.keepIframeSrcFn, keepIframeSrcFn = _options_keepIframeSrcFn === void 0 ? function() {
+    var emit = options.emit, checkoutEveryNms = options.checkoutEveryNms, checkoutEveryNth = options.checkoutEveryNth, _options_blockClass = options.blockClass, blockClass = _options_blockClass === void 0 ? "rr-block" : _options_blockClass, _options_blockSelector = options.blockSelector, blockSelector = _options_blockSelector === void 0 ? null : _options_blockSelector, _options_ignoreClass = options.ignoreClass, ignoreClass = _options_ignoreClass === void 0 ? "rr-ignore" : _options_ignoreClass, _options_ignoreSelector = options.ignoreSelector, ignoreSelector = _options_ignoreSelector === void 0 ? null : _options_ignoreSelector, _options_maskTextClass = options.maskTextClass, maskTextClass = _options_maskTextClass === void 0 ? "rr-mask" : _options_maskTextClass, _options_maskTextSelector = options.maskTextSelector, maskTextSelector = _options_maskTextSelector === void 0 ? null : _options_maskTextSelector, _options_inlineStylesheet = options.inlineStylesheet, inlineStylesheet = _options_inlineStylesheet === void 0 ? true : _options_inlineStylesheet, maskAllInputs = options.maskAllInputs, _maskInputOptions = options.maskInputOptions, _slimDOMOptions = options.slimDOMOptions, maskInputFn = options.maskInputFn, maskTextFn = options.maskTextFn, hooks = options.hooks, packFn = options.packFn, _options_sampling = options.sampling, sampling = _options_sampling === void 0 ? {} : _options_sampling, _options_dataURLOptions = options.dataURLOptions, dataURLOptions = _options_dataURLOptions === void 0 ? {} : _options_dataURLOptions, mousemoveWait = options.mousemoveWait, _options_recordDOM = options.recordDOM, recordDOM = _options_recordDOM === void 0 ? true : _options_recordDOM, _options_recordCanvas = options.recordCanvas, recordCanvas = _options_recordCanvas === void 0 ? false : _options_recordCanvas, _options_recordCrossOriginIframes = options.recordCrossOriginIframes, recordCrossOriginIframes = _options_recordCrossOriginIframes === void 0 ? false : _options_recordCrossOriginIframes, allowedIframeOrigins = options.allowedIframeOrigins, _options_recordAfter = options.recordAfter, recordAfter = _options_recordAfter === void 0 ? options.recordAfter === "DOMContentLoaded" ? options.recordAfter : "load" : _options_recordAfter, _options_userTriggeredOnInput = options.userTriggeredOnInput, userTriggeredOnInput = _options_userTriggeredOnInput === void 0 ? false : _options_userTriggeredOnInput, _options_collectFonts = options.collectFonts, collectFonts = _options_collectFonts === void 0 ? false : _options_collectFonts, _options_inlineImages = options.inlineImages, inlineImages = _options_inlineImages === void 0 ? false : _options_inlineImages, plugins = options.plugins, _options_keepIframeSrcFn = options.keepIframeSrcFn, keepIframeSrcFn = _options_keepIframeSrcFn === void 0 ? function() {
         return false;
     } : _options_keepIframeSrcFn, _options_ignoreCSSAttributes = options.ignoreCSSAttributes, ignoreCSSAttributes = _options_ignoreCSSAttributes === void 0 ? /* @__PURE__ */ new Set([]) : _options_ignoreCSSAttributes, errorHandler2 = options.errorHandler;
     registerErrorHandler(errorHandler2);
+    var validatedOrigins;
+    if (recordCrossOriginIframes && allowedIframeOrigins && allowedIframeOrigins.length > 0) {
+        validatedOrigins = buildAllowedOriginSet(allowedIframeOrigins);
+        if (validatedOrigins.size === 0) {
+            validatedOrigins = void 0;
+        }
+    }
     var inEmittingFrame = recordCrossOriginIframes ? window.parent === window : true;
     var passEmitsToParent = false;
     if (!inEmittingFrame) {
@@ -13364,7 +13404,14 @@ function record(options) {
                 origin: window.location.origin,
                 isCheckout: isCheckout
             };
-            window.parent.postMessage(message, "*");
+            if (validatedOrigins) {
+                for(var _iterator = _create_for_of_iterator_helper_loose(validatedOrigins), _step; !(_step = _iterator()).done;){
+                    var targetOrigin = _step.value;
+                    window.parent.postMessage(message, targetOrigin);
+                }
+            } else {
+                window.parent.postMessage(message, "*");
+            }
         }
         if (e2.type === EventType.FullSnapshot) {
             lastFullSnapshotEvent = e2;

package/logo.svg

@@ -0,0 +1,5 @@
+<svg viewBox="0 0 798 189" fill="none" xmlns="http://www.w3.org/2000/svg">
+    <path
+        d="M0 146.539H47.835V141.455H44.243C37.2513 141.455 35.5676 139.547 35.5676 132.572V69.5024C40.4425 61.244 47.0011 55.9521 55.2596 55.9521C65.6348 55.9521 71.985 63.5692 71.985 77.9694V132.588C71.985 139.579 70.2852 141.471 63.5181 141.471H59.7016V146.555H106.478V141.471H103.095C96.103 141.471 94.4192 139.563 94.4192 132.588V75.6282C94.4192 73.7199 94.4192 71.8116 94.2108 69.9194C98.8612 61.4524 105.853 55.9521 114.111 55.9521C124.487 55.9521 130.837 63.5692 130.837 77.9694V132.588C130.837 139.579 129.137 141.471 122.37 141.471H118.553V146.555H165.33V141.471H162.155C154.955 141.471 153.271 139.563 153.271 132.588V75.6282C153.271 54.2523 141.212 42.4018 123.637 42.4018C110.519 42.4018 99.0857 49.6019 92.9439 63.9861C89.3519 50.0189 78.7682 42.4018 64.7849 42.4018C52.293 42.4018 41.5008 49.169 35.5676 62.7193V44.9355H0V50.0189H4.23347C11.4336 50.0189 13.1173 51.9271 13.1173 58.9027V132.572C13.1173 139.563 11.4175 141.455 4.23347 141.455H0V146.539ZM193.473 28.0016C201.09 28.0016 207.44 21.6514 207.44 14.0344C207.44 6.41731 201.09 0.0671082 193.473 0.0671082C185.856 0.0671082 179.506 6.41731 179.506 14.0344C179.506 21.6514 185.856 28.0016 193.473 28.0016ZM169.772 146.539H216.757V141.455H213.582C206.59 141.455 204.906 139.547 204.906 132.572V44.9355H169.339V50.0189H173.572C180.772 50.0189 182.456 51.9271 182.456 58.9027V132.572C182.456 139.563 180.756 141.455 173.572 141.455H169.756V146.539H169.772ZM251.058 86.8533H264.608C261.224 84.7365 259.958 81.7699 258.258 76.2696L253.174 57.4274C250.849 48.9605 248.941 44.9355 239.624 44.9355H220.157V50.0189H222.915C228.623 50.0189 229.265 52.1356 230.965 58.4858L235.407 75.0028C237.732 83.0528 241.34 86.8533 251.074 86.8533H251.058ZM282.392 86.8533H295.942C305.676 86.8533 309.059 83.0367 311.401 75.0028L315.843 58.4858C317.542 52.1356 318.376 50.0189 323.893 50.0189H326.651V44.9355H307.392C297.866 44.9355 295.958 48.752 293.841 57.4274L288.758 76.2696C287.058 81.9784 285.775 84.7365 282.392 86.8533ZM264.608 104.637H282.392V86.8533H264.608V104.637ZM220.157 146.555H239.624C248.941 146.555 250.849 142.53 253.174 134.063L258.258 115.221C259.958 109.72 261.224 106.754 264.608 104.637H251.058C241.324 104.637 237.716 108.454 235.391 116.488L230.949 133.005C229.249 139.355 228.623 141.471 222.899 141.471H220.141V146.555H220.157ZM307.36 146.555H326.619V141.471H323.861C318.36 141.471 317.51 139.355 315.811 133.005L311.369 116.488C309.043 108.438 305.66 104.637 295.91 104.637H282.392C285.775 106.754 287.01 109.512 288.71 115.221L293.793 134.063C295.91 142.738 297.818 146.555 307.344 146.555H307.36ZM329.377 188.89H378.479V183.806H373.395C366.628 183.806 364.928 181.898 364.928 174.922V134.496C371.07 143.604 381.445 149.105 393.713 149.105C416.788 149.105 435.198 128.787 435.198 93.6525C435.198 61.9014 417.847 42.4339 395.397 42.4339C382.279 42.4339 371.263 50.0509 364.912 63.6012V44.9676H329.345V50.0509H333.578C340.57 50.0509 342.462 51.9592 342.462 58.9348V174.906C342.462 181.898 340.554 183.79 333.578 183.79H329.345V188.874L329.377 188.89ZM387.379 55.5352C401.137 55.5352 412.363 68.4441 412.363 94.0534C412.363 121.988 401.987 137.238 387.812 137.238C378.703 137.238 370.669 132.363 364.944 123.896V71.3947C370.445 61.0195 378.286 55.5192 387.379 55.5192V55.5352ZM468.665 148.672C482.423 148.672 493.424 142.113 501.682 127.296V129.621C501.682 142.321 509.732 147.822 523.058 147.822C527.083 147.822 532.167 147.405 535.55 146.346V141.055C533.85 141.471 532.583 141.696 531.317 141.696C526.025 141.696 524.325 138.521 524.325 133.437V79.2362C524.325 54.2523 510.358 42.4018 486.865 42.4018C471.198 42.4018 455.964 49.6019 446.23 57.219L449.614 63.1522C459.781 56.1606 469.723 52.1516 480.515 52.1516C494.482 52.1516 501.682 59.7687 501.682 77.5525V82.2029L475.64 92.3696C451.939 102.103 443.248 111.212 443.248 124.971C443.248 138.729 452.981 148.672 468.648 148.672H468.665ZM465.489 119.454C465.489 108.871 471.631 101.253 484.123 95.7532L501.698 88.1361V121.154C495.14 130.262 487.523 135.554 479.264 135.554C471.006 135.554 465.505 129.845 465.505 119.47L465.489 119.454ZM539.784 146.555H588.052V141.471H584.027C577.035 141.471 575.351 139.563 575.351 132.588V69.7109C580.226 61.244 587.41 55.9521 595.877 55.9521C606.878 55.9521 613.869 63.5692 613.869 77.9694V132.588C613.869 139.579 612.17 141.471 605.402 141.471H601.377V146.555H649.421V141.471H645.187C637.987 141.471 636.304 139.563 636.304 132.588V75.6282C636.304 54.2523 623.603 42.4018 605.611 42.4018C592.494 42.4018 581.477 49.169 575.335 62.7193V44.9355H539.768V50.0189H544.001C551.201 50.0189 552.885 51.9271 552.885 58.9027V132.572C552.885 139.563 551.185 141.455 544.001 141.455H539.768V146.539L539.784 146.555ZM704.456 149.089C718.423 149.089 731.557 142.738 741.082 135.121L737.907 130.471C729.44 136.613 719.915 139.355 711.031 139.355C689.446 139.355 676.746 124.121 676.746 94.4863V90.6698H743.632C743.215 62.0939 725.639 42.6263 700.03 42.6263C674.421 42.6263 653.879 65.7019 653.879 96.1861C653.879 129.637 672.93 149.105 704.472 149.105L704.456 149.089ZM700.223 47.9021C712.923 47.9021 720.748 61.6609 722.031 84.945H677.163C679.071 61.4524 687.955 47.9021 700.239 47.9021H700.223ZM748.266 146.539H797.368V141.455H792.493C785.501 141.455 783.818 139.547 783.818 132.572V2.60078H748.25V7.68415H752.483C759.475 7.68415 761.367 9.59242 761.367 16.568V132.572C761.367 139.563 759.459 141.455 752.483 141.455H748.25V146.539H748.266Z"
+        fill="black" />
+</svg>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mixpanel-browser",
-  "version": "2.75.0",
+  "version": "2.77.0",
   "description": "The official Mixpanel JavaScript browser client library",
   "main": "dist/mixpanel.cjs.js",
   "module": "dist/mixpanel.module.js",
@@ -91,8 +91,10 @@
     "webpack": "1.12.2"
   },
   "dependencies": {
-    "@mixpanel/rrweb": "2.0.0-alpha.18.3",
-    "@mixpanel/rrweb-plugin-console-record": "2.0.0-alpha.18.3",
-    "json-logic-js": "2.0.5"
+    "@mixpanel/rrweb": "2.0.0-alpha.18.4",
+    "@mixpanel/rrweb-plugin-console-record": "2.0.0-alpha.18.4",
+    "@mixpanel/rrweb-utils": "2.0.0-alpha.18.4",
+    "json-logic-js": "2.0.5",
+    "@types/json-logic-js": "2.0.5"
   }
 }

package/rollup.config.mjs

@@ -8,21 +8,52 @@ import nodeResolve from '@rollup/plugin-node-resolve';
 import swc from '@rollup/plugin-swc';
 import browserTestBuilds from './tests/browser/client/rollup.config.mjs';
 
+// Capture the hash of async-loaded bundles so we can inject the correct filenames into the main build
+const asyncBundleManifest = {};
+
 const COMPILED_RRWEB_PATH = `build/rrweb-compiled.js`;
 const BUNDLED_RRWEB_PATH = `build/rrweb-bundled.js`;
 
+const ASYNC_MODULE_BUILD_PATH = `build/async-modules`;
+const RECORDER_BUNDLE_NAME = `mixpanel_recorder`;
+const RECORDER_MIN_BUNDLE_NAME = `mixpanel_recorder_min`;
+const TARGETING_BUNDLE_NAME = `mixpanel_targeting`;
+const TARGETING_MIN_BUNDLE_NAME = `mixpanel_targeting_min`;
+
+
 // Delete output files at build start so build errors don't silently use stale files
+let hasCleanedOnFull = false;
 const cleanOnRebuild = () => {
-  let outputFiles = [];
+  let filesToClean = [];
   return {
     name: `clean-on-rebuild`,
     options(opts) {
       const outputs = Array.isArray(opts.output) ? opts.output : [opts.output];
-      outputFiles = outputs.map(o => o && o.file).filter(Boolean);
+      filesToClean = outputs.flatMap(o => {
+        if (o.file) {
+          return [o.file];
+        }
+
+        if (o.dir && o.entryFileNames) {
+          if (!fs.existsSync(o.dir)) return [];
+
+          // match against regexes like mixpanel-recorder-[hash].js to find the actual output file(s) to clean up
+          const regex = new RegExp(`^` + o.entryFileNames.replace(/\./g, `\\.`).replace(`[hash]`, `.+`));
+          return fs.readdirSync(o.dir).filter(f => regex.test(f)).map(f => path.join(o.dir, f));
+        }
+        return [];
+      });
     },
     buildStart() {
-      // Delete outputs right before this specific build runs
-      for (const file of outputFiles) {
+      if (process.env.FULL && !hasCleanedOnFull) {
+        if (fs.existsSync(`build`)) {
+          fs.rmSync(`build`, {recursive: true});
+        }
+        hasCleanedOnFull = true;
+        return;
+      }
+
+      for (const file of filesToClean) {
         if (fs.existsSync(file)) {
           fs.unlinkSync(file);
         }
@@ -31,10 +62,53 @@ const cleanOnRebuild = () => {
   };
 };
 
-const withCleanOnRebuild = (builds) => builds.map(build => ({
-  ...build,
-  plugins: [cleanOnRebuild(), ...(build.plugins || [])]
-}));
+// Capture the resolved (hashed) output filenames from recorder/targeting builds.
+// Stores them in `asyncBundleManifest` so `injectAsyncBundleNames` can inject them into the main build.
+const writeToManifest = () => ({
+  name: `write-to-manifest`,
+  generateBundle(options, bundle) {
+    for (const chunk of Object.values(bundle)) {
+      if (chunk.type === `chunk`) {
+        asyncBundleManifest[options.name] = chunk.fileName;
+      }
+    }
+  }
+});
+
+// Replace __MP_*__ placeholders in src/config.js with build-time values.
+// For the main library build (which runs after), they will be the real hashed filenames.
+const injectAsyncBundleNames = () => ({
+  name: `inject-async-bundle-names`,
+  renderChunk(code, _chunk, outputOptions) {
+    const isMinified = outputOptions.file && outputOptions.file.endsWith(`.min.js`);
+
+    let recorderBundleName = RECORDER_BUNDLE_NAME;
+    let targetingBundleName = TARGETING_BUNDLE_NAME;
+    if (isMinified) {
+      recorderBundleName = RECORDER_MIN_BUNDLE_NAME;
+      targetingBundleName = TARGETING_MIN_BUNDLE_NAME;
+    }
+
+    if (!asyncBundleManifest[recorderBundleName] || !asyncBundleManifest[targetingBundleName]) {
+      throw new Error(`Async bundle names not found in manifest. Manifest contents: ${JSON.stringify(asyncBundleManifest)}`);
+    }
+
+    const replaced = code
+      .replace(`__MP_RECORDER_FILENAME__`, asyncBundleManifest[recorderBundleName])
+      .replace(`__MP_TARGETING_FILENAME__`, asyncBundleManifest[targetingBundleName]);
+    return { code: replaced, map: null };
+  }
+});
+
+const withBasePlugins = (builds) => builds.map((build) => {
+  return {
+    ...build,
+    plugins: [
+      cleanOnRebuild(),
+      ...(build.plugins || [])
+    ]
+  };
+});
 
 const aliasRrweb = () => alias({
   entries: [
@@ -69,44 +143,47 @@ const COMMON_CLOSURE_FLAGS = {
 
 const MINIFY = process.env.MINIFY || process.env.FULL;
 
-// Main builds used to develop / iterate quickly
-const MAIN_BUILDS = [
-  {
-    'input': `src/recorder/rrweb-entrypoint.js`,
-    'output': [
-      {
-        file: BUNDLED_RRWEB_PATH,
-        format: `es`,
-      }
-    ],
-    plugins: [nodeResolve({browser: true})]
-  },
-  {
-    'input': BUNDLED_RRWEB_PATH,
-    'output': [
-      {
-        file: COMPILED_RRWEB_PATH,
-        format: `es`,
-      }
-    ],
-    plugins: [swc({swc: {jsc: {target: `es5`}}})]
-  },
-
-  // IIFE recorder bundle that is loaded asynchronously
-  // rrweb uses esbuild to minify, so do that here as well
+/**
+ * Async bundles for the recorder and targeting modules.
+ *
+ * These are loaded on-demand by the main library at runtime via script injection.
+ * Filenames include a content hash so the main build can reference an exact, immutable
+ * bundle — guaranteeing the async module matches what the library expects.
+ * The hash is captured in `asyncBundleManifest` and injected into the main build
+ * via `injectAsyncBundleNames`.
+ *
+ * We also produce non-hashed "legacy" versions of each bundle for backward compatibility
+ * with customers who proxy specific filenames from the Mixpanel CDN.
+ */
+const ASYNC_BUNDLE_BUILDS = [
+  // Recorder bundle (wraps rrweb)
   {
     input: `src/recorder/index.js`,
     output: [
+      {
+        dir: ASYNC_MODULE_BUILD_PATH,
+        entryFileNames: `mixpanel-recorder-[hash].js`,
+        name: RECORDER_BUNDLE_NAME,
+        format: `iife`,
+      },
       {
         file: `build/mixpanel-recorder.js`,
-        name: `mixpanel_recorder`,
+        name: `legacy_recorder_bundle`,
         format: `iife`,
       },
       ...(MINIFY
         ? [
+          {
+            dir: ASYNC_MODULE_BUILD_PATH,
+            entryFileNames: `mixpanel-recorder-[hash].min.js`,
+            name: RECORDER_MIN_BUNDLE_NAME,
+            format: `iife`,
+            plugins: [esbuild({target: `es5`, minify: true, sourceMap: true})],
+            sourcemap: true,
+          },
           {
             file: `build/mixpanel-recorder.min.js`,
-            name: `mixpanel_recorder`,
+            name: `legacy_recorder_min_bundle`,
             format: `iife`,
             plugins: [esbuild({target: `es5`, minify: true, sourceMap: true})],
             sourcemap: true,
@@ -114,23 +191,37 @@ const MAIN_BUILDS = [
         ]
         : []),
     ],
-    plugins: [aliasRrweb()],
+    plugins: [aliasRrweb(), writeToManifest()],
   },
 
-  // IIFE targeting bundle that is loaded asynchronously
+  // Targeting bundle (feature flags / experiments)
   {
     input: `src/targeting/index.js`,
     output: [
+      {
+        dir: ASYNC_MODULE_BUILD_PATH,
+        entryFileNames: `mixpanel-targeting-[hash].js`,
+        name: TARGETING_BUNDLE_NAME,
+        format: `iife`,
+      },
       {
         file: `build/mixpanel-targeting.js`,
-        name: `mixpanel_targeting`,
+        name: `legacy_targeting_bundle`,
         format: `iife`,
       },
       ...(MINIFY
         ? [
+          {
+            dir: ASYNC_MODULE_BUILD_PATH,
+            entryFileNames: `mixpanel-targeting-[hash].min.js`,
+            name: TARGETING_MIN_BUNDLE_NAME,
+            format: `iife`,
+            plugins: [esbuild({target: `es5`, minify: true, sourceMap: true})],
+            sourcemap: true,
+          },
           {
             file: `build/mixpanel-targeting.min.js`,
-            name: `mixpanel_targeting`,
+            name: `legacy_targeting_min_bundle`,
             format: `iife`,
             plugins: [esbuild({target: `es5`, minify: true, sourceMap: true})],
             sourcemap: true,
@@ -138,9 +229,35 @@ const MAIN_BUILDS = [
         ]
         : []),
     ],
-    plugins: [commonjs(), nodeResolve({browser: true})],
+    plugins: [commonjs(), nodeResolve({browser: true}), writeToManifest()],
+  },
+];
+
+// Main builds used to develop / iterate quickly
+const MAIN_BUILDS = [
+  {
+    'input': `src/recorder/rrweb-entrypoint.js`,
+    'output': [
+      {
+        file: BUNDLED_RRWEB_PATH,
+        format: `es`,
+      }
+    ],
+    plugins: [nodeResolve({browser: true})]
+  },
+  {
+    'input': BUNDLED_RRWEB_PATH,
+    'output': [
+      {
+        file: COMPILED_RRWEB_PATH,
+        format: `es`,
+      }
+    ],
+    plugins: [swc({swc: {jsc: {target: `es5`}}})]
   },
 
+  ...ASYNC_BUNDLE_BUILDS,
+
   // IIFE main mixpanel build
   {
     input: `src/loaders/loader-globals.js`,
@@ -161,6 +278,7 @@ const MAIN_BUILDS = [
         : []),
     ],
     plugins: [
+      injectAsyncBundleNames(),
       nodeResolve({
         browser: true,
         main: true,
@@ -228,7 +346,6 @@ const ALL_BUILDS = [
     ],
   },
 
-
   // Modules builds that are bundled with the recorder and targeting
   {
     input: `src/loaders/loader-module.js`,
@@ -266,7 +383,6 @@ const ALL_BUILDS = [
     ],
   },
 
-
   // Alternative CJS builds without recorder
   {
     input: `src/loaders/loader-module-core.js`,
@@ -303,6 +419,7 @@ const ALL_BUILDS = [
       },
     ],
     plugins: [
+      injectAsyncBundleNames(),
       aliasRrweb(),
       nodeResolve({
         browser: true,
@@ -312,9 +429,9 @@ const ALL_BUILDS = [
       copyTypes(),
     ],
   },
-
-  ...browserTestBuilds,
 ];
 
-const builds = process.env.FULL ? ALL_BUILDS : MAIN_BUILDS;
-export default withCleanOnRebuild(builds);
+const srcBuilds = process.env.FULL ? ALL_BUILDS : MAIN_BUILDS;
+const builds = [...srcBuilds, ...browserTestBuilds];
+
+export default withBasePlugins(builds);

package/src/autocapture/index.js

@@ -1,4 +1,4 @@
-import { _, document, safewrap, safewrapClass } from '../utils';
+import { _, document, safewrap, safewrapClass, urlMatchesRegexList } from '../utils';
 import { window } from '../window';
 import {
     getPolyfillScrollEndFunction, getPropsForDOMEvent, logger, minDOMApisSupported,
@@ -112,27 +112,15 @@ Autocapture.prototype.getConfig = function(key) {
 };
 
 Autocapture.prototype.currentUrlBlocked = function() {
-    var i;
     var currentUrl = _.info.currentUrl();
 
     var allowUrlRegexes = this.getConfig(CONFIG_ALLOW_URL_REGEXES) || [];
     if (allowUrlRegexes.length) {
         // we're using an allowlist, only track if current URL matches
-        var allowed = false;
-        for (i = 0; i < allowUrlRegexes.length; i++) {
-            var allowRegex = allowUrlRegexes[i];
-            try {
-                if (currentUrl.match(allowRegex)) {
-                    allowed = true;
-                    break;
-                }
-            } catch (err) {
-                logger.critical('Error while checking block URL regex: ' + allowRegex, err);
-                return true;
-            }
-        }
-        if (!allowed) {
-            // wasn't allowed by any regex
+        try {
+            return !urlMatchesRegexList(currentUrl, allowUrlRegexes);
+        } catch (err) {
+            logger.critical('Error while checking block URL regexes: ', err);
             return true;
         }
     }
@@ -142,17 +130,12 @@ Autocapture.prototype.currentUrlBlocked = function() {
         return false;
     }
 
-    for (i = 0; i < blockUrlRegexes.length; i++) {
-        try {
-            if (currentUrl.match(blockUrlRegexes[i])) {
-                return true;
-            }
-        } catch (err) {
-            logger.critical('Error while checking block URL regex: ' + blockUrlRegexes[i], err);
-            return true;
-        }
+    try {
+        return urlMatchesRegexList(currentUrl, blockUrlRegexes);
+    } catch (err) {
+        logger.critical('Error while checking block URL regexes: ', err);
+        return true;
     }
-    return false;
 };
 
 Autocapture.prototype.pageviewTrackingConfig = function() {

package/src/config.js

@@ -1,6 +1,12 @@
-var Config = {
+export var Config = {
     DEBUG: false,
-    LIB_VERSION: '2.75.0'
+    LIB_VERSION: '2.77.0'
 };
 
-export default Config;
+// Window global names for async modules
+export var TARGETING_GLOBAL_NAME = '__mp_targeting';
+export var RECORDER_GLOBAL_NAME = '__mp_recorder';
+
+// Constants that are injected at build-time for the names of async modules.
+export var RECORDER_FILENAME = '__MP_RECORDER_FILENAME__';
+export var TARGETING_FILENAME = '__MP_TARGETING_FILENAME__';

package/src/flags/index.js

@@ -1,10 +1,9 @@
 import { _, console_with_prefix, generateTraceparent, safewrapClass } from '../utils'; // eslint-disable-line camelcase
 import { window } from '../window';
-import Config from '../config';
+import { Config, TARGETING_GLOBAL_NAME } from '../config';
 import {
     getTargetingPromise
 } from '../targeting/loader';
-import { TARGETING_GLOBAL_NAME } from '../globals';
 
 var logger = console_with_prefix('flags');
 var FLAGS_CONFIG_KEY = 'flags';