Web SDK

Web SDK changelog

Customer-facing changes in each published version of @flamioai/web-sdk.

Flamio documents the SDK version published as latest on npm. Versions before 0.9.0 are not covered here.

0.9.0 — 2026-09-27

Added

  • idlePauseMs option. Recording pauses on a visible tab that nobody clicks, scrolls, types in or touches for 5 minutes by default. The next interaction resumes the same session.
  • captureConsoleWarn option, to record console.warn messages as well as errors.

Changed

  • console.warn messages are no longer recorded by default. Set captureConsoleWarn: true to keep them. Console errors are always recorded.
  • With consent: 'wait' or 'denied', the SDK stores nothing in the browser and sends nothing until Flamio.consent('granted'). Earlier versions created the anonymous visitor ID at init.
  • Flamio.consent('denied') after a grant discards data that was not sent yet, instead of sending it. A later Flamio.consent('granted') on the same page starts recording again.
  • sampleRate is decided once per visit instead of once per page, so a recorded visit is recorded on every page.
  • urlAllowlist and urlBlocklist now stop everything on an excluded page, including console errors, failed requests and Web Vitals — not only the page content.
  • Long console messages are shortened, rapid repeats are combined, and each page keeps a limited number of console entries.
  • When Flamio refuses the project key — revoked key, On-Live turned off, or a domain missing from Allowed domains — the SDK stops sending from that browser for up to an hour.
  • When installed from npm or loaded from esm.sh, the SDK downloads the recorder only on pages that are recorded. Visitors outside your sample, without consent or on an excluded page do not download it.
  • Uploads are prepared in a background worker. If your Content Security Policy blocks blob: workers, the SDK does this work on the main thread. See Content Security Policy.
  • The default batchMaxSize is now 1048576, up from 50000, so the SDK sends fewer, larger uploads.

Fixed

  • Clicking a download link, cancelling a "Leave site?" dialog, or coming back through the browser's back and forward cache no longer ends the session.
  • Web Vitals of visitors who leave a page quickly are no longer lost.
  • Uploads no longer fail when the user ID or traits passed to Flamio.identify contain characters outside Latin-1, such as Cyrillic letters or emoji.
  • A session is no longer lost when its first upload fails.

Upgrading from 0.8.x

npm install @flamioai/web-sdk@0.9.0
  • To keep recording console warnings, add captureConsoleWarn: true to Flamio.init.
  • If you set batchMaxSize yourself, remove it to use the new default.
  • If your site has a Content Security Policy, add blob: to worker-src. This is optional.
  • If you load the SDK from esm.sh, change the version in the URL to @0.9.0.

No other code changes are needed.