posthog-node 5.1.1 → 5.3.1

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Next
 
+# 5.3.1 - 2025-07-07
+
+1. feat: decouple feature flag local evaluation from personal API keys; support decrypting remote config payloads without relying on the feature flags poller
+
+# 5.2.1 - 2025-07-07
+
+1. feat: add captureExceptionImmediate method on posthog client
+
 # 5.1.1 - 2025-06-16
 
 1. fix: Handle double-encoded JSON payloads from the remote config endpoint

package/lib/edge/index.cjs

@@ -877,7 +877,7 @@ function applyChunkIds(frames, parser) {
 
 const SHUTDOWN_TIMEOUT = 2000;
 class ErrorTracking {
-  static async captureException(client, error, hint, distinctId, additionalProperties) {
+  static async buildEventMessage(error, hint, distinctId, additionalProperties) {
     const properties = {
       ...additionalProperties
     };
@@ -887,14 +887,14 @@ class ErrorTracking {
       properties.$process_person_profile = false;
     }
     const exceptionProperties = await propertiesFromUnknownInput(this.stackParser, this.frameModifiers, error, hint);
-    client.capture({
+    return {
       event: '$exception',
       distinctId: distinctId || uuidv7(),
       properties: {
         ...exceptionProperties,
         ...properties
       }
-    });
+    };
   }
   constructor(client, options) {
     this.client = client;
@@ -908,7 +908,9 @@ class ErrorTracking {
     }
   }
   onException(exception, hint) {
-    ErrorTracking.captureException(this.client, exception, hint);
+    void ErrorTracking.buildEventMessage(exception, hint).then(msg => {
+      this.client.capture(msg);
+    });
   }
   async onFatalError() {
     await this.client.shutdown(SHUTDOWN_TIMEOUT);
@@ -928,14 +930,14 @@ function setupExpressErrorHandler(_posthog, app) {
     };
     // Given stateless nature of Node SDK we capture exceptions using personless processing
     // when no user can be determined e.g. in the case of exception autocapture
-    ErrorTracking.captureException(_posthog, error, hint, uuidv7(), {
+    ErrorTracking.buildEventMessage(error, hint, uuidv7(), {
       $process_person_profile: false
-    });
+    }).then(msg => _posthog.capture(msg));
     next(error);
   });
 }
 
-var version = "5.1.1";
+var version = "5.3.1";
 
 var PostHogPersistedProperty;
 (function (PostHogPersistedProperty) {
@@ -973,6 +975,12 @@ var Compression;
 })(Compression || (Compression = {}));
 var SurveyPosition;
 (function (SurveyPosition) {
+    SurveyPosition["TopLeft"] = "top_left";
+    SurveyPosition["TopCenter"] = "top_center";
+    SurveyPosition["TopRight"] = "top_right";
+    SurveyPosition["MiddleLeft"] = "middle_left";
+    SurveyPosition["MiddleCenter"] = "middle_center";
+    SurveyPosition["MiddleRight"] = "middle_right";
     SurveyPosition["Left"] = "left";
     SurveyPosition["Right"] = "right";
     SurveyPosition["Center"] = "center";
@@ -2493,23 +2501,6 @@ class FeatureFlagsPoller {
   stopPoller() {
     clearTimeout(this.poller);
   }
-  _requestRemoteConfigPayload(flagKey) {
-    const url = `${this.host}/api/projects/@current/feature_flags/${flagKey}/remote_config/`;
-    const options = this.getPersonalApiKeyRequestOptions();
-    let abortTimeout = null;
-    if (this.timeout && typeof this.timeout === 'number') {
-      const controller = new AbortController();
-      abortTimeout = safeSetTimeout(() => {
-        controller.abort();
-      }, this.timeout);
-      options.signal = controller.signal;
-    }
-    try {
-      return this.fetch(url, options);
-    } finally {
-      clearTimeout(abortTimeout);
-    }
-  }
 }
 // # This function takes a distinct_id and a feature flag key and returns a float between 0 and 1.
 // # Given the same distinct_id and key, it'll always return the same float. These floats are
@@ -2794,21 +2785,25 @@ class PostHogBackendClient extends PostHogCoreStateless {
       if (options.personalApiKey.includes('phc_')) {
         throw new Error('Your Personal API key is invalid. These keys are prefixed with "phx_" and can be created in PostHog project settings.');
       }
-      this.featureFlagsPoller = new FeatureFlagsPoller({
-        pollingInterval: this.options.featureFlagsPollingInterval,
-        personalApiKey: options.personalApiKey,
-        projectApiKey: apiKey,
-        timeout: options.requestTimeout ?? 10000,
-        host: this.host,
-        fetch: options.fetch,
-        onError: err => {
-          this._events.emit('error', err);
-        },
-        onLoad: count => {
-          this._events.emit('localEvaluationFlagsLoaded', count);
-        },
-        customHeaders: this.getCustomHeaders()
-      });
+      // Only start the poller if local evaluation is enabled (defaults to true for backward compatibility)
+      const shouldEnableLocalEvaluation = options.enableLocalEvaluation !== false;
+      if (shouldEnableLocalEvaluation) {
+        this.featureFlagsPoller = new FeatureFlagsPoller({
+          pollingInterval: this.options.featureFlagsPollingInterval,
+          personalApiKey: options.personalApiKey,
+          projectApiKey: apiKey,
+          timeout: options.requestTimeout ?? 10000,
+          host: this.host,
+          fetch: options.fetch,
+          onError: err => {
+            this._events.emit('error', err);
+          },
+          onLoad: count => {
+            this._events.emit('localEvaluationFlagsLoaded', count);
+          },
+          customHeaders: this.getCustomHeaders()
+        });
+      }
     }
     this.errorTracking = new ErrorTracking(this, options);
     this.distinctIdHasSentFlagCalls = {};
@@ -3164,7 +3159,10 @@ class PostHogBackendClient extends PostHogCoreStateless {
     return response;
   }
   async getRemoteConfigPayload(flagKey) {
-    const response = await this.featureFlagsPoller?._requestRemoteConfigPayload(flagKey);
+    if (!this.options.personalApiKey) {
+      throw new Error('Personal API key is required for remote config payload decryption');
+    }
+    const response = await this._requestRemoteConfigPayload(flagKey);
     if (!response) {
       return undefined;
     }
@@ -3258,6 +3256,38 @@ class PostHogBackendClient extends PostHogCoreStateless {
     this.featureFlagsPoller?.stopPoller();
     return super._shutdown(shutdownTimeoutMs);
   }
+  async _requestRemoteConfigPayload(flagKey) {
+    if (!this.options.personalApiKey) {
+      return undefined;
+    }
+    const url = `${this.host}/api/projects/@current/feature_flags/${flagKey}/remote_config/`;
+    const options = {
+      method: 'GET',
+      headers: {
+        ...this.getCustomHeaders(),
+        'Content-Type': 'application/json',
+        Authorization: `Bearer ${this.options.personalApiKey}`
+      }
+    };
+    let abortTimeout = null;
+    if (this.options.requestTimeout && typeof this.options.requestTimeout === 'number') {
+      const controller = new AbortController();
+      abortTimeout = safeSetTimeout(() => {
+        controller.abort();
+      }, this.options.requestTimeout);
+      options.signal = controller.signal;
+    }
+    try {
+      return await this.fetch(url, options);
+    } catch (error) {
+      this._events.emit('error', error);
+      return undefined;
+    } finally {
+      if (abortTimeout) {
+        clearTimeout(abortTimeout);
+      }
+    }
+  }
   addLocalPersonAndGroupProperties(distinctId, groups, personProperties, groupProperties) {
     const allPersonProperties = {
       distinct_id: distinctId,
@@ -3279,9 +3309,18 @@ class PostHogBackendClient extends PostHogCoreStateless {
   }
   captureException(error, distinctId, additionalProperties) {
     const syntheticException = new Error('PostHog syntheticException');
-    ErrorTracking.captureException(this, error, {
+    ErrorTracking.buildEventMessage(error, {
+      syntheticException
+    }, distinctId, additionalProperties).then(msg => {
+      this.capture(msg);
+    });
+  }
+  async captureExceptionImmediate(error, distinctId, additionalProperties) {
+    const syntheticException = new Error('PostHog syntheticException');
+    const evtMsg = await ErrorTracking.buildEventMessage(error, {
       syntheticException
     }, distinctId, additionalProperties);
+    return await this.captureImmediate(evtMsg);
   }
 }