chore(dapp): ensure session replay does not run on devmode (#1140)

* ensure session replay does not run on devmode

* add comments for devs

* cleanup

Author: evavirseda

dapp/src/lib/utils/analytics/amplitude.ts

@@ -10,9 +10,11 @@ import { ampli } from './ampli';
 import { AMP_COOKIES_KEY } from './constants';
 import { contextEnrichmentPlugin } from './plugins/contextEnrichmentPlugin';
 
-const IS_ENABLED =
-    process.env.NEXT_PUBLIC_BUILD_ENV === 'production' &&
-    process.env.NEXT_PUBLIC_AMPLITUDE_ENABLED === 'true';
+// Dev note: do not change, production-only gate (Session Replay must never run outside prod)
+const IS_PRODUCTION = process.env.NEXT_PUBLIC_BUILD_ENV === 'production';
+
+// Dev note: set IS_ENABLED=true to test Amplitude events locally
+const IS_ENABLED = IS_PRODUCTION && process.env.NEXT_PUBLIC_AMPLITUDE_ENABLED === 'true';
 
 /**
  * Check if user has previously given consent for cookies/tracking.
@@ -67,19 +69,22 @@ export async function initAmplitude() {
         // Add context enrichment plugin to add page context to all events
         if (IS_ENABLED) {
             ampli.client.add(contextEnrichmentPlugin());
-            const sessionReplayTracking = sessionReplayPlugin({
-                sampleRate: 1, // set to 1 to capture all sessions; adjust as needed (e.g., 0.1 for 10%)
-                privacyConfig: {
-                    defaultMaskLevel: 'medium',
-                    maskSelector: [
-                        '.amp-obfuscation', // any element with this class will be masked according to the defaultMaskLevel
-                        // specific selectors for the dropdown menu (comes from @iota/dapp-kit) to ensure it's fully masked
-                        '[data-radix-popper-content-wrapper]',
-                        '[class*="AccountDropdownMenu"]',
-                    ],
-                },
-            });
-            ampli.client.add(sessionReplayTracking);
+            // Session Replay runs only in production (safety gate to avoid polluting recordings)
+            if (IS_PRODUCTION) {
+                const sessionReplayTracking = sessionReplayPlugin({
+                    sampleRate: 1, // set to 1 to capture all sessions; adjust as needed (e.g., 0.1 for 10%)
+                    privacyConfig: {
+                        defaultMaskLevel: 'medium',
+                        maskSelector: [
+                            '.amp-obfuscation', // any element with this class will be masked according to the defaultMaskLevel
+                            // specific selectors for the dropdown menu (comes from @iota/dapp-kit) to ensure it's fully masked
+                            '[data-radix-popper-content-wrapper]',
+                            '[class*="AccountDropdownMenu"]',
+                        ],
+                    },
+                });
+                ampli.client.add(sessionReplayTracking);
+            }
         }
     } catch (error) {
         console.error('[Amplitude] Initialization failed:', error);