networkCaptureOptions: {
  // Record headers (boolean or per-type)
  recordHeaders: true,
  // or
  recordHeaders: {
    request: true,
    response: false,
  },
  
  // Record body (boolean, content-types array, or per-type)
  recordBody: true,
  // or
  recordBody: ['application/json', 'text/plain'],
  // or
  recordBody: {
    request: ['application/json'],
    response: true,
  },
  
  // Exclude certain URLs
  urlDenyList: [
    // By default, Signal excludes its own ingestion host:
    // ['api.trysignal.ai']
    /analytics/,
    /tracking/,
    'api.stripe.com',
  ],
  
  // Always redact these headers
  sensitiveHeaders: [
    'authorization',
    'cookie',
    'set-cookie',
    'x-api-key',
  ],
  
  // Maximum body size to capture in bytes (default: 1MB)
  payloadSizeLimitBytes: 1000000,
  
  // Custom request masking function
  maskRequestFn: (request) => {
    // Return null to exclude the request entirely
    // Modify and return request to include it
    return request;
  },
}

{
  url: 'https://api.example.com/users',
  method: 'POST',
  status: 200,
  initiatorType: 'fetch',  // or 'xmlhttprequest', 'navigation', etc.
  startTime: 1234.5,
  duration: 150,
  timestamp: '2024-01-15T10:30:00.000Z',
  
  // If headers recording is enabled
  requestHeaders: {
    'content-type': 'application/json',
    'authorization': '[REDACTED]',  // Sensitive headers masked
  },
  responseHeaders: { ... },
  
  // If body recording is enabled
  requestBody: '{"name":"John"}',
  responseBody: '{"id":123}',
}

urlDenyList: [
  // Default:
  'api.trysignal.ai',

  // Add your own:
  /analytics\.google\.com/i,  // Regex pattern
  /sentry\.io/i,
  'api.stripe.com',           // Exact hostname match
  /^https:\/\/internal\./,    // Pattern matching
]

sensitiveHeaders: [
  'authorization',
  'cookie',
  'set-cookie',
  'x-api-key',
  'x-auth-token',
  'x-csrf-token',
]

payloadSizeLimitBytes: 1000000,  // 1MB default

maskRequestFn: (request) => {
  // Exclude entire request
  if (request.url.includes('/admin')) {
    return null;
  }
  
  // Mask sensitive data in body
  if (request.body && request.body.password) {
    request.body.password = '***MASKED***';
  }
  
  // Return modified request
  return request;
}

recordBody: ['application/json', 'text/plain', 'application/xml']

recordBody: {
  request: ['application/json'],
  response: true,  // Capture all response bodies
}

import { createSignal } from '@signal-js/browser';

const signal = createSignal({
  apiKey: 'your-api-key',
  projectId: 'your-project-id',
  
  captureNetworkRequests: true,
  networkCaptureOptions: {
    recordHeaders: {
      request: true,
      response: true,
    },
    recordBody: ['application/json', 'text/plain'],
    urlDenyList: [
      /analytics\.google\.com/i,
      /sentry\.io/i,
    ],
    sensitiveHeaders: [
      'authorization',
      'cookie',
      'x-api-key',
    ],
    payloadSizeLimitBytes: 1000000,
    maskRequestFn: (request) => {
      // Exclude admin endpoints
      if (request.url.includes('/admin')) {
        return null;
      }
      return request;
    },
  },
});

await signal.start();