接口监控 SDK 怎样代理 fetch 和 XHR？怎样采集耗时与错误，又避免上报死循环和泄露隐私？

function createMonitoredFetch(originalFetch, options) {
  const { reportUrl, report, now } = options;

  return function monitoredFetch(input, init) {
    const url = typeof input === 'string' ? input : input.url;
    // 上报请求自己也走 fetch，不跳过就会无限上报。
    if (url.startsWith(reportUrl)) return originalFetch(input, init);

    const start = now();
    const method = (init && init.method) || 'GET';
    // 只保留路径，查询参数里可能有手机号、token。
    const path = url.split('?')[0];

    return originalFetch(input, init).then(
      (response) => {
        report({ path, method, status: response.status, ok: response.ok, duration: now() - start });
        return response;
      },
      (error) => {
        report({ path, method, status: 0, ok: false, duration: now() - start, error: error.name });
        throw error;
      },
    );
  };
}

let clock = 0;
const now = () => clock;
const records = [];

function fakeFetch(url) {
  clock += 120;
  if (url.includes('offline')) return Promise.reject(new TypeError('Failed to fetch'));
  const status = url.includes('missing') ? 404 : 200;
  return Promise.resolve({ status, ok: status < 400 });
}

const monitoredFetch = createMonitoredFetch(fakeFetch, {
  reportUrl: '/log',
  now,
  report(record) {
    records.push(record);
    monitoredFetch('/log', { method: 'POST' });
  },
});

monitoredFetch('/api/user?phone=13800000000')
  .then(() => monitoredFetch('/api/missing'))
  .then(() => monitoredFetch('/api/offline'))
  .catch((error) => console.log(error.name)) // TypeError
  .then(() => {
    const line = (r) => `${r.method} ${r.path} ${r.status} ${r.ok} ${r.duration}`;
    console.log(line(records[0])); // GET /api/user 200 true 120
    console.log(line(records[1])); // GET /api/missing 404 false 120
    console.log(line(records[2])); // GET /api/offline 0 false 120
    console.log(records.length); // 3
  });

const originalOpen = XMLHttpRequest.prototype.open;
const originalSend = XMLHttpRequest.prototype.send;

XMLHttpRequest.prototype.open = function (method, url, ...rest) {
  this.__monitor = { method, url: String(url) };
  return originalOpen.call(this, method, url, ...rest);
};

XMLHttpRequest.prototype.send = function (body) {
  const info = this.__monitor;
  if (info && !info.url.startsWith(REPORT_URL)) {
    const start = performance.now();
    this.addEventListener('loadend', () => {
      report({
        method: info.method,
        path: info.url.split('?')[0],
        status: this.status,
        duration: performance.now() - start,
      });
    });
  }
  return originalSend.call(this, body);
};