@atlaskit/editor-synced-block-provider 8.5.3 → 8.5.5

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # @atlaskit/editor-synced-block-provider
 
+## 8.5.5
+
+### Patch Changes
+
+- [`b1ff8c881a4aa`](https://bitbucket.org/atlassian/atlassian-frontend-monorepo/commits/b1ff8c881a4aa) -
+  [ux] Synced Blocks: de-opaque the renderer error-boundary fetch analytics event. The event now
+  routes through the shared fetch-error attribution builder (emitting structured
+  `reason`/`benign`/`sourceProduct`/`statusCode`, gated on `platform_editor_blocks_patch_4`) and a
+  PII-safe original error message is threaded from the upstream fetch catch so previously-opaque
+  `errored` failures can be classified and inspected.
+- Updated dependencies
+
+## 8.5.4
+
+### Patch Changes
+
+- [`1b4390dfedd97`](https://bitbucket.org/atlassian/atlassian-frontend-monorepo/commits/1b4390dfedd97) -
+  Rename the internal analytics payload builder `createSuccessPayloadNew` to
+  `createSuccessOperationalPayload` to make the operational-vs-track distinction clear at the call
+  site. This is a pure rename with no behavioural or payload change.
+- Updated dependencies
+
 ## 8.5.3
 
 ### Patch Changes

package/dist/cjs/entry-points/errorHandling.js

@@ -3,10 +3,22 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
+Object.defineProperty(exports, "buildFetchErrorAttribution", {
+  enumerable: true,
+  get: function get() {
+    return _errorHandling.buildFetchErrorAttribution;
+  }
+});
 Object.defineProperty(exports, "fetchErrorPayload", {
   enumerable: true,
   get: function get() {
     return _errorHandling.fetchErrorPayload;
   }
 });
+Object.defineProperty(exports, "getPiiSafeOriginalError", {
+  enumerable: true,
+  get: function get() {
+    return _errorHandling.getPiiSafeOriginalError;
+  }
+});
 var _errorHandling = require("../utils/errorHandling");

package/dist/cjs/hooks/useFetchSyncBlockData.js

@@ -107,13 +107,16 @@ var useFetchSyncBlockData = exports.useFetchSyncBlockData = function useFetchSyn
           });
           fireAnalyticsEvent === null || fireAnalyticsEvent === void 0 || fireAnalyticsEvent((0, _errorHandling.fetchErrorPayload)(_t.message, resourceId, (0, _utils.getSourceProductFromResourceIdSafe)(resourceId), (0, _errorHandling.buildFetchErrorAttribution)((0, _platformFeatureFlags.fg)('platform_editor_blocks_patch_3'), _t.message)));
 
-          // Set error state if fetching fails
+          // Thread the PII-safe original message/name so the renderer can de-opaque
+          // this otherwise-bare `errored` failure. `originalMessage` carries the
+          // Error.message and is preferred over `reason` by the renderer, so no
+          // separate `reason` is set here.
           setFetchState({
             syncBlockInstance: {
               resourceId: resourceId || '',
-              error: {
+              error: _objectSpread({
                 type: _types.SyncBlockError.Errored
-              }
+              }, (0, _errorHandling.getPiiSafeOriginalError)(_t))
             },
             isLoading: false
           });

package/dist/cjs/providers/block-service/blockServiceAPI.js

@@ -415,12 +415,12 @@ var _batchFetchData = exports.batchFetchData = /*#__PURE__*/function () {
         case 21:
           return _context2.abrupt("return", blockNodeIdentifiers.map(function (blockNodeIdentifier) {
             return {
-              error: _objectSpread({
+              error: _objectSpread(_objectSpread({
                 type: _t4 instanceof _blockService.BlockError ? mapBlockError(_t4) : _types.SyncBlockError.Errored,
                 reason: _t4.message
               }, _t4 instanceof _blockService.BlockError && {
                 statusCode: _t4.status
-              }),
+              }), (0, _errorHandling.getPiiSafeOriginalError)(_t4)),
               resourceId: blockNodeIdentifier.resourceId
             };
           }));
@@ -670,19 +670,19 @@ var BlockServiceADFFetchProvider = /*#__PURE__*/function () {
                 break;
               }
               return _context5.abrupt("return", {
-                error: {
+                error: _objectSpread({
                   type: mapBlockError(_t7),
                   reason: _t7.message,
                   statusCode: _t7.status
-                },
+                }, (0, _errorHandling.getPiiSafeOriginalError)(_t7)),
                 resourceId: resourceId
               });
             case 5:
               return _context5.abrupt("return", {
-                error: {
+                error: _objectSpread({
                   type: _types.SyncBlockError.Errored,
                   reason: _t7.message
-                },
+                }, (0, _errorHandling.getPiiSafeOriginalError)(_t7)),
                 resourceId: resourceId
               });
             case 6:

package/dist/cjs/store-manager/sourceSyncBlockStoreManager.js

@@ -414,7 +414,7 @@ var SourceSyncBlockStoreManager = exports.SourceSyncBlockStoreManager = /*#__PUR
         // Operational create-success event with the join key.
         if ((0, _platformFeatureFlags.fg)('platform_editor_blocks_patch_4')) {
           var _this$fireAnalyticsEv5, _this$syncBlockCache$;
-          (_this$fireAnalyticsEv5 = this.fireAnalyticsEvent) === null || _this$fireAnalyticsEv5 === void 0 || _this$fireAnalyticsEv5.call(this, (0, _errorHandling.createSuccessPayloadNew)(resourceId || '', (_this$syncBlockCache$ = this.syncBlockCache.get(resourceId)) === null || _this$syncBlockCache$ === void 0 ? void 0 : _this$syncBlockCache$.blockInstanceId, sourceProduct));
+          (_this$fireAnalyticsEv5 = this.fireAnalyticsEvent) === null || _this$fireAnalyticsEv5 === void 0 || _this$fireAnalyticsEv5.call(this, (0, _errorHandling.createSuccessOperationalPayload)(resourceId || '', (_this$syncBlockCache$ = this.syncBlockCache.get(resourceId)) === null || _this$syncBlockCache$ === void 0 ? void 0 : _this$syncBlockCache$.blockInstanceId, sourceProduct));
         }
       } else {
         var _this$fireAnalyticsEv6;

package/dist/cjs/utils/errorHandling.js

@@ -4,9 +4,9 @@ var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefau
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.fetchSuccessPayload = exports.fetchReferencesErrorPayload = exports.fetchErrorPayload = exports.deleteSuccessPayload = exports.deleteErrorPayload = exports.createSuccessPayloadNew = exports.createSuccessPayload = exports.createErrorPayload = exports.classifyFetchErrorReason = exports.classifyErrorReason = exports.cacheDeletionForcedPayload = exports.buildFetchErrorAttribution = exports.buildErrorAttribution = exports.FETCH_BENIGN_REASONS = void 0;
+exports.fetchSuccessPayload = exports.fetchReferencesErrorPayload = exports.fetchErrorPayload = exports.deleteSuccessPayload = exports.deleteErrorPayload = exports.createSuccessPayload = exports.createSuccessOperationalPayload = exports.createErrorPayload = exports.classifyFetchErrorReason = exports.classifyErrorReason = exports.cacheDeletionForcedPayload = exports.buildFetchErrorAttribution = exports.buildErrorAttribution = exports.FETCH_BENIGN_REASONS = void 0;
 exports.getErrorPayload = getErrorPayload;
-exports.updateSuccessPayload = exports.updateReferenceErrorPayload = exports.updateErrorPayload = exports.updateCacheErrorPayload = exports.stringifyError = exports.sourceInfoOrphanedPayload = exports.getSourceInfoErrorPayload = void 0;
+exports.updateSuccessPayload = exports.updateReferenceErrorPayload = exports.updateErrorPayload = exports.updateCacheErrorPayload = exports.stringifyError = exports.sourceInfoOrphanedPayload = exports.getSourceInfoErrorPayload = exports.getPiiSafeOriginalError = void 0;
 var _slicedToArray2 = _interopRequireDefault(require("@babel/runtime/helpers/slicedToArray"));
 var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/defineProperty"));
 var _analytics = require("@atlaskit/editor-common/analytics");
@@ -21,6 +21,24 @@ var stringifyError = exports.stringifyError = function stringifyError(error) {
   }
 };
 
+/**
+ * PII-safe extraction of `message`/`name` from an unknown caught error, used to
+ * de-opaque `errored` failures. Only ever reads `Error.message` / `Error.name` — it
+ * never stringifies arbitrary objects (which could pull in node content / UGC), and
+ * non-`Error` values yield `{}` so no `[object Object]` or serialized payload leaks
+ * into analytics.
+ */
+var getPiiSafeOriginalError = exports.getPiiSafeOriginalError = function getPiiSafeOriginalError(error) {
+  if (error instanceof Error) {
+    return _objectSpread(_objectSpread({}, error.message && {
+      originalMessage: error.message
+    }), error.name && {
+      originalName: error.name
+    });
+  }
+  return {};
+};
+
 /**
  * The set of categorical failure reasons emitted on synced-block operational error
  * events (EDITOR-7796). These let the analytics dashboard break delete/update/create
@@ -92,13 +110,16 @@ var buildErrorAttribution = exports.buildErrorAttribution = function buildErrorA
 var FETCH_BENIGN_REASONS = exports.FETCH_BENIGN_REASONS = new Set(['source_deleted', 'source_unpublished', 'source_unsynced', 'source_not_found', 'permission_denied', 'unauthenticated',
 // Mirror the benign write-path enum equivalents so already-classified errors are
 // treated consistently.
-'not_found', 'forbidden', 'unpublished'
-// NOTE: `entity_not_found` and `offline` are intentionally NOT benign.
-// - `entity_not_found` is retried up to ENTITY_NOT_FOUND_MAX_RETRIES (analytics are
-//   suppressed during retries); by the time the error event fires, retries are
-//   exhausted and it is a genuine failure.
-// - `offline` is genuine client connectivity loss, not a working-as-designed outcome.
-// Both still emit `reason` (so they can be inspected) but are counted as true errors.
+'not_found', 'forbidden', 'unpublished',
+// `offline` is an expected client connectivity state, not a read-path system failure:
+// the error component is rendered for the offline experience, so it should not inflate
+// the true error rate. It still emits `reason` (so its volume can be inspected) but is
+// excluded from true-error counts.
+'offline'
+// NOTE: `entity_not_found` is intentionally NOT benign — it is retried up to
+// ENTITY_NOT_FOUND_MAX_RETRIES (analytics are suppressed during retries); by the time
+// the error event fires, retries are exhausted and it is a genuine failure. It still
+// emits `reason` (so it can be inspected) but is counted as a true error.
 ]);
 
 /**
@@ -340,7 +361,7 @@ var createSuccessPayload = exports.createSuccessPayload = function createSuccess
  * existed, so dashboards had no create denominator). Fired behind
  * `platform_editor_blocks_patch_4` with the `blockInstanceId` join key.
  */
-var createSuccessPayloadNew = exports.createSuccessPayloadNew = function createSuccessPayloadNew(resourceId, blockInstanceId, sourceProduct) {
+var createSuccessOperationalPayload = exports.createSuccessOperationalPayload = function createSuccessOperationalPayload(resourceId, blockInstanceId, sourceProduct) {
   return {
     action: _analytics.ACTION.INSERTED,
     actionSubject: _analytics.ACTION_SUBJECT.SYNCED_BLOCK,

package/dist/es2019/entry-points/errorHandling.js

@@ -1,2 +1,2 @@
 /* eslint-disable @atlaskit/editor/no-re-export */
-export { fetchErrorPayload } from '../utils/errorHandling';
+export { buildFetchErrorAttribution, fetchErrorPayload, getPiiSafeOriginalError } from '../utils/errorHandling';

package/dist/es2019/hooks/useFetchSyncBlockData.js

@@ -3,7 +3,7 @@ import { isSSR } from '@atlaskit/editor-common/core-utils';
 import { logException } from '@atlaskit/editor-common/monitoring';
 import { fg } from '@atlaskit/platform-feature-flags';
 import { isProviderNotReadyError, SyncBlockError } from '../common/types';
-import { buildFetchErrorAttribution, fetchErrorPayload } from '../utils/errorHandling';
+import { buildFetchErrorAttribution, fetchErrorPayload, getPiiSafeOriginalError } from '../utils/errorHandling';
 import { createSyncBlockNode, getSourceProductFromResourceIdSafe } from '../utils/utils';
 export const useFetchSyncBlockData = (manager, resourceId, localId, fireAnalyticsEvent) => {
   var _manager$referenceMan2, _manager$referenceMan3, _manager$referenceMan4;
@@ -74,12 +74,16 @@ export const useFetchSyncBlockData = (manager, resourceId, localId, fireAnalytic
       });
       fireAnalyticsEvent === null || fireAnalyticsEvent === void 0 ? void 0 : fireAnalyticsEvent(fetchErrorPayload(error.message, resourceId, getSourceProductFromResourceIdSafe(resourceId), buildFetchErrorAttribution(fg('platform_editor_blocks_patch_3'), error.message)));
 
-      // Set error state if fetching fails
+      // Thread the PII-safe original message/name so the renderer can de-opaque
+      // this otherwise-bare `errored` failure. `originalMessage` carries the
+      // Error.message and is preferred over `reason` by the renderer, so no
+      // separate `reason` is set here.
       setFetchState({
         syncBlockInstance: {
           resourceId: resourceId || '',
           error: {
-            type: SyncBlockError.Errored
+            type: SyncBlockError.Errored,
+            ...getPiiSafeOriginalError(error)
           }
         },
         isLoading: false

package/dist/es2019/providers/block-service/blockServiceAPI.js

@@ -4,7 +4,7 @@ import { expValEquals } from '@atlaskit/tmp-editor-statsig/exp-val-equals';
 import { generateBlockAri, generateBlockAriFromReference } from '../../clients/block-service/ari';
 import { batchRetrieveSyncedBlocks, BlockError, BlockNotFoundError, BlockTimeoutError, createSyncedBlock, deleteSyncedBlock, getReferenceSyncedBlocks, getReferenceSyncedBlocksByBlockAri, getSyncedBlockContent, updateReferenceSyncedBlockOnDocument, updateSyncedBlock, updateSyncedBlocks } from '../../clients/block-service/blockService';
 import { SyncBlockError } from '../../common/types';
-import { stringifyError } from '../../utils/errorHandling';
+import { getPiiSafeOriginalError, stringifyError } from '../../utils/errorHandling';
 import { createResourceIdForReference } from '../../utils/resourceId';
 import { convertContentUpdatedAt } from '../../utils/utils';
 const BLOCK_ARI_TO_RESOURCE_ID_REGEX = /^ari:cloud:blocks:.*:synced-block\/(.+)$/;
@@ -304,14 +304,16 @@ export const batchFetchData = async (cloudId, parentAri, blockNodeIdentifiers, c
 
     // If batch request fails, return error for all resourceIds. Capture the HTTP
     // status from `BlockError` so fetch analytics can break failures down by
-    // statusCode (EDITOR-7862); undefined for non-HTTP failures.
+    // statusCode (EDITOR-7862); undefined for non-HTTP failures. Thread the PII-safe
+    // original message/name so the renderer can de-opaque the `errored` bucket.
     return blockNodeIdentifiers.map(blockNodeIdentifier => ({
       error: {
         type: error instanceof BlockError ? mapBlockError(error) : SyncBlockError.Errored,
         reason: error.message,
         ...(error instanceof BlockError && {
           statusCode: error.status
-        })
+        }),
+        ...getPiiSafeOriginalError(error)
       },
       resourceId: blockNodeIdentifier.resourceId
     }));
@@ -466,12 +468,14 @@ class BlockServiceADFFetchProvider {
     } catch (error) {
       if (error instanceof BlockError) {
         // Capture the HTTP status so fetch analytics can break failures down by
-        // statusCode (EDITOR-7862).
+        // statusCode (EDITOR-7862). Thread the PII-safe original message/name so
+        // the renderer can de-opaque failures.
         return {
           error: {
             type: mapBlockError(error),
             reason: error.message,
-            statusCode: error.status
+            statusCode: error.status,
+            ...getPiiSafeOriginalError(error)
           },
           resourceId
         };
@@ -479,7 +483,8 @@ class BlockServiceADFFetchProvider {
       return {
         error: {
           type: SyncBlockError.Errored,
-          reason: error.message
+          reason: error.message,
+          ...getPiiSafeOriginalError(error)
         },
         resourceId
       };

package/dist/es2019/store-manager/sourceSyncBlockStoreManager.js

@@ -2,7 +2,7 @@ import _defineProperty from "@babel/runtime/helpers/defineProperty";
 import { logException } from '@atlaskit/editor-common/monitoring';
 import { fg } from '@atlaskit/platform-feature-flags';
 import { SyncBlockError } from '../common/types';
-import { updateErrorPayload, createErrorPayload, deleteErrorPayload, updateCacheErrorPayload, getSourceInfoErrorPayload, updateSuccessPayload, createSuccessPayload, createSuccessPayloadNew, deleteSuccessPayload, fetchReferencesErrorPayload, buildErrorAttribution } from '../utils/errorHandling';
+import { updateErrorPayload, createErrorPayload, deleteErrorPayload, updateCacheErrorPayload, getSourceInfoErrorPayload, updateSuccessPayload, createSuccessPayload, createSuccessOperationalPayload, deleteSuccessPayload, fetchReferencesErrorPayload, buildErrorAttribution } from '../utils/errorHandling';
 import { getCreateSourceExperience, getDeleteSourceExperience, getSaveSourceExperience, getFetchSourceInfoExperience } from '../utils/experienceTracking';
 import { convertSyncBlockPMNodeToSyncBlockData, getSourceProductFromResourceIdSafe } from '../utils/utils';
 /** Maximum time (ms) flush() will wait for in-flight block creations before proceeding. */
@@ -341,7 +341,7 @@ export class SourceSyncBlockStoreManager {
       // Operational create-success event with the join key.
       if (fg('platform_editor_blocks_patch_4')) {
         var _this$fireAnalyticsEv7, _this$syncBlockCache$;
-        (_this$fireAnalyticsEv7 = this.fireAnalyticsEvent) === null || _this$fireAnalyticsEv7 === void 0 ? void 0 : _this$fireAnalyticsEv7.call(this, createSuccessPayloadNew(resourceId || '', (_this$syncBlockCache$ = this.syncBlockCache.get(resourceId)) === null || _this$syncBlockCache$ === void 0 ? void 0 : _this$syncBlockCache$.blockInstanceId, sourceProduct));
+        (_this$fireAnalyticsEv7 = this.fireAnalyticsEvent) === null || _this$fireAnalyticsEv7 === void 0 ? void 0 : _this$fireAnalyticsEv7.call(this, createSuccessOperationalPayload(resourceId || '', (_this$syncBlockCache$ = this.syncBlockCache.get(resourceId)) === null || _this$syncBlockCache$ === void 0 ? void 0 : _this$syncBlockCache$.blockInstanceId, sourceProduct));
       }
     } else {
       var _this$fireAnalyticsEv8;

package/dist/es2019/utils/errorHandling.js

@@ -8,6 +8,27 @@ export const stringifyError = error => {
   }
 };
 
+/**
+ * PII-safe extraction of `message`/`name` from an unknown caught error, used to
+ * de-opaque `errored` failures. Only ever reads `Error.message` / `Error.name` — it
+ * never stringifies arbitrary objects (which could pull in node content / UGC), and
+ * non-`Error` values yield `{}` so no `[object Object]` or serialized payload leaks
+ * into analytics.
+ */
+export const getPiiSafeOriginalError = error => {
+  if (error instanceof Error) {
+    return {
+      ...(error.message && {
+        originalMessage: error.message
+      }),
+      ...(error.name && {
+        originalName: error.name
+      })
+    };
+  }
+  return {};
+};
+
 /**
  * The set of categorical failure reasons emitted on synced-block operational error
  * events (EDITOR-7796). These let the analytics dashboard break delete/update/create
@@ -80,13 +101,16 @@ export const buildErrorAttribution = (gateEnabled, error, statusCode) => {
 export const FETCH_BENIGN_REASONS = new Set(['source_deleted', 'source_unpublished', 'source_unsynced', 'source_not_found', 'permission_denied', 'unauthenticated',
 // Mirror the benign write-path enum equivalents so already-classified errors are
 // treated consistently.
-'not_found', 'forbidden', 'unpublished'
-// NOTE: `entity_not_found` and `offline` are intentionally NOT benign.
-// - `entity_not_found` is retried up to ENTITY_NOT_FOUND_MAX_RETRIES (analytics are
-//   suppressed during retries); by the time the error event fires, retries are
-//   exhausted and it is a genuine failure.
-// - `offline` is genuine client connectivity loss, not a working-as-designed outcome.
-// Both still emit `reason` (so they can be inspected) but are counted as true errors.
+'not_found', 'forbidden', 'unpublished',
+// `offline` is an expected client connectivity state, not a read-path system failure:
+// the error component is rendered for the offline experience, so it should not inflate
+// the true error rate. It still emits `reason` (so its volume can be inspected) but is
+// excluded from true-error counts.
+'offline'
+// NOTE: `entity_not_found` is intentionally NOT benign — it is retried up to
+// ENTITY_NOT_FOUND_MAX_RETRIES (analytics are suppressed during retries); by the time
+// the error event fires, retries are exhausted and it is a genuine failure. It still
+// emits `reason` (so it can be inspected) but is counted as a true error.
 ]);
 
 /**
@@ -319,7 +343,7 @@ export const createSuccessPayload = (resourceId, sourceProduct) => {
  * existed, so dashboards had no create denominator). Fired behind
  * `platform_editor_blocks_patch_4` with the `blockInstanceId` join key.
  */
-export const createSuccessPayloadNew = (resourceId, blockInstanceId, sourceProduct) => ({
+export const createSuccessOperationalPayload = (resourceId, blockInstanceId, sourceProduct) => ({
   action: ACTION.INSERTED,
   actionSubject: ACTION_SUBJECT.SYNCED_BLOCK,
   actionSubjectId: ACTION_SUBJECT_ID.SYNCED_BLOCK_CREATE,

package/dist/esm/entry-points/errorHandling.js

@@ -1,2 +1,2 @@
 /* eslint-disable @atlaskit/editor/no-re-export */
-export { fetchErrorPayload } from '../utils/errorHandling';
+export { buildFetchErrorAttribution, fetchErrorPayload, getPiiSafeOriginalError } from '../utils/errorHandling';

package/dist/esm/hooks/useFetchSyncBlockData.js

@@ -9,7 +9,7 @@ import { isSSR } from '@atlaskit/editor-common/core-utils';
 import { logException } from '@atlaskit/editor-common/monitoring';
 import { fg } from '@atlaskit/platform-feature-flags';
 import { isProviderNotReadyError, SyncBlockError } from '../common/types';
-import { buildFetchErrorAttribution, fetchErrorPayload } from '../utils/errorHandling';
+import { buildFetchErrorAttribution, fetchErrorPayload, getPiiSafeOriginalError } from '../utils/errorHandling';
 import { createSyncBlockNode, getSourceProductFromResourceIdSafe } from '../utils/utils';
 export var useFetchSyncBlockData = function useFetchSyncBlockData(manager, resourceId, localId, fireAnalyticsEvent) {
   var _manager$referenceMan2, _manager$referenceMan3, _manager$referenceMan4;
@@ -100,13 +100,16 @@ export var useFetchSyncBlockData = function useFetchSyncBlockData(manager, resou
           });
           fireAnalyticsEvent === null || fireAnalyticsEvent === void 0 || fireAnalyticsEvent(fetchErrorPayload(_t.message, resourceId, getSourceProductFromResourceIdSafe(resourceId), buildFetchErrorAttribution(fg('platform_editor_blocks_patch_3'), _t.message)));
 
-          // Set error state if fetching fails
+          // Thread the PII-safe original message/name so the renderer can de-opaque
+          // this otherwise-bare `errored` failure. `originalMessage` carries the
+          // Error.message and is preferred over `reason` by the renderer, so no
+          // separate `reason` is set here.
           setFetchState({
             syncBlockInstance: {
               resourceId: resourceId || '',
-              error: {
+              error: _objectSpread({
                 type: SyncBlockError.Errored
-              }
+              }, getPiiSafeOriginalError(_t))
             },
             isLoading: false
           });

package/dist/esm/providers/block-service/blockServiceAPI.js

@@ -15,7 +15,7 @@ import { expValEquals } from '@atlaskit/tmp-editor-statsig/exp-val-equals';
 import { generateBlockAri as _generateBlockAri, generateBlockAriFromReference } from '../../clients/block-service/ari';
 import { batchRetrieveSyncedBlocks, BlockError, BlockNotFoundError, BlockTimeoutError, createSyncedBlock, deleteSyncedBlock, getReferenceSyncedBlocks, getReferenceSyncedBlocksByBlockAri, getSyncedBlockContent, updateReferenceSyncedBlockOnDocument, updateSyncedBlock, updateSyncedBlocks } from '../../clients/block-service/blockService';
 import { SyncBlockError } from '../../common/types';
-import { stringifyError } from '../../utils/errorHandling';
+import { getPiiSafeOriginalError, stringifyError } from '../../utils/errorHandling';
 import { createResourceIdForReference } from '../../utils/resourceId';
 import { convertContentUpdatedAt } from '../../utils/utils';
 var BLOCK_ARI_TO_RESOURCE_ID_REGEX = /^ari:cloud:blocks:.*:synced-block\/(.+)$/;
@@ -407,12 +407,12 @@ var _batchFetchData = /*#__PURE__*/function () {
         case 21:
           return _context2.abrupt("return", blockNodeIdentifiers.map(function (blockNodeIdentifier) {
             return {
-              error: _objectSpread({
+              error: _objectSpread(_objectSpread({
                 type: _t4 instanceof BlockError ? mapBlockError(_t4) : SyncBlockError.Errored,
                 reason: _t4.message
               }, _t4 instanceof BlockError && {
                 statusCode: _t4.status
-              }),
+              }), getPiiSafeOriginalError(_t4)),
               resourceId: blockNodeIdentifier.resourceId
             };
           }));
@@ -663,19 +663,19 @@ var BlockServiceADFFetchProvider = /*#__PURE__*/function () {
                 break;
               }
               return _context5.abrupt("return", {
-                error: {
+                error: _objectSpread({
                   type: mapBlockError(_t7),
                   reason: _t7.message,
                   statusCode: _t7.status
-                },
+                }, getPiiSafeOriginalError(_t7)),
                 resourceId: resourceId
               });
             case 5:
               return _context5.abrupt("return", {
-                error: {
+                error: _objectSpread({
                   type: SyncBlockError.Errored,
                   reason: _t7.message
-                },
+                }, getPiiSafeOriginalError(_t7)),
                 resourceId: resourceId
               });
             case 6:

package/dist/esm/store-manager/sourceSyncBlockStoreManager.js

@@ -12,7 +12,7 @@ function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t =
 import { logException } from '@atlaskit/editor-common/monitoring';
 import { fg } from '@atlaskit/platform-feature-flags';
 import { SyncBlockError } from '../common/types';
-import { updateErrorPayload, createErrorPayload, deleteErrorPayload, updateCacheErrorPayload, getSourceInfoErrorPayload, updateSuccessPayload, createSuccessPayload, createSuccessPayloadNew, deleteSuccessPayload, fetchReferencesErrorPayload, buildErrorAttribution } from '../utils/errorHandling';
+import { updateErrorPayload, createErrorPayload, deleteErrorPayload, updateCacheErrorPayload, getSourceInfoErrorPayload, updateSuccessPayload, createSuccessPayload, createSuccessOperationalPayload, deleteSuccessPayload, fetchReferencesErrorPayload, buildErrorAttribution } from '../utils/errorHandling';
 import { getCreateSourceExperience, getDeleteSourceExperience, getSaveSourceExperience, getFetchSourceInfoExperience } from '../utils/experienceTracking';
 import { convertSyncBlockPMNodeToSyncBlockData, getSourceProductFromResourceIdSafe } from '../utils/utils';
 /** Maximum time (ms) flush() will wait for in-flight block creations before proceeding. */
@@ -407,7 +407,7 @@ export var SourceSyncBlockStoreManager = /*#__PURE__*/function () {
         // Operational create-success event with the join key.
         if (fg('platform_editor_blocks_patch_4')) {
           var _this$fireAnalyticsEv5, _this$syncBlockCache$;
-          (_this$fireAnalyticsEv5 = this.fireAnalyticsEvent) === null || _this$fireAnalyticsEv5 === void 0 || _this$fireAnalyticsEv5.call(this, createSuccessPayloadNew(resourceId || '', (_this$syncBlockCache$ = this.syncBlockCache.get(resourceId)) === null || _this$syncBlockCache$ === void 0 ? void 0 : _this$syncBlockCache$.blockInstanceId, sourceProduct));
+          (_this$fireAnalyticsEv5 = this.fireAnalyticsEvent) === null || _this$fireAnalyticsEv5 === void 0 || _this$fireAnalyticsEv5.call(this, createSuccessOperationalPayload(resourceId || '', (_this$syncBlockCache$ = this.syncBlockCache.get(resourceId)) === null || _this$syncBlockCache$ === void 0 ? void 0 : _this$syncBlockCache$.blockInstanceId, sourceProduct));
         }
       } else {
         var _this$fireAnalyticsEv6;

package/dist/esm/utils/errorHandling.js

@@ -12,6 +12,24 @@ export var stringifyError = function stringifyError(error) {
   }
 };
 
+/**
+ * PII-safe extraction of `message`/`name` from an unknown caught error, used to
+ * de-opaque `errored` failures. Only ever reads `Error.message` / `Error.name` — it
+ * never stringifies arbitrary objects (which could pull in node content / UGC), and
+ * non-`Error` values yield `{}` so no `[object Object]` or serialized payload leaks
+ * into analytics.
+ */
+export var getPiiSafeOriginalError = function getPiiSafeOriginalError(error) {
+  if (error instanceof Error) {
+    return _objectSpread(_objectSpread({}, error.message && {
+      originalMessage: error.message
+    }), error.name && {
+      originalName: error.name
+    });
+  }
+  return {};
+};
+
 /**
  * The set of categorical failure reasons emitted on synced-block operational error
  * events (EDITOR-7796). These let the analytics dashboard break delete/update/create
@@ -83,13 +101,16 @@ export var buildErrorAttribution = function buildErrorAttribution(gateEnabled, e
 export var FETCH_BENIGN_REASONS = new Set(['source_deleted', 'source_unpublished', 'source_unsynced', 'source_not_found', 'permission_denied', 'unauthenticated',
 // Mirror the benign write-path enum equivalents so already-classified errors are
 // treated consistently.
-'not_found', 'forbidden', 'unpublished'
-// NOTE: `entity_not_found` and `offline` are intentionally NOT benign.
-// - `entity_not_found` is retried up to ENTITY_NOT_FOUND_MAX_RETRIES (analytics are
-//   suppressed during retries); by the time the error event fires, retries are
-//   exhausted and it is a genuine failure.
-// - `offline` is genuine client connectivity loss, not a working-as-designed outcome.
-// Both still emit `reason` (so they can be inspected) but are counted as true errors.
+'not_found', 'forbidden', 'unpublished',
+// `offline` is an expected client connectivity state, not a read-path system failure:
+// the error component is rendered for the offline experience, so it should not inflate
+// the true error rate. It still emits `reason` (so its volume can be inspected) but is
+// excluded from true-error counts.
+'offline'
+// NOTE: `entity_not_found` is intentionally NOT benign — it is retried up to
+// ENTITY_NOT_FOUND_MAX_RETRIES (analytics are suppressed during retries); by the time
+// the error event fires, retries are exhausted and it is a genuine failure. It still
+// emits `reason` (so it can be inspected) but is counted as a true error.
 ]);
 
 /**
@@ -331,7 +352,7 @@ export var createSuccessPayload = function createSuccessPayload(resourceId, sour
  * existed, so dashboards had no create denominator). Fired behind
  * `platform_editor_blocks_patch_4` with the `blockInstanceId` join key.
  */
-export var createSuccessPayloadNew = function createSuccessPayloadNew(resourceId, blockInstanceId, sourceProduct) {
+export var createSuccessOperationalPayload = function createSuccessOperationalPayload(resourceId, blockInstanceId, sourceProduct) {
   return {
     action: ACTION.INSERTED,
     actionSubject: ACTION_SUBJECT.SYNCED_BLOCK,

package/dist/types/entry-points/errorHandling.d.ts

@@ -1 +1 @@
-export { fetchErrorPayload } from '../utils/errorHandling';
+export { buildFetchErrorAttribution, fetchErrorPayload, getPiiSafeOriginalError, } from '../utils/errorHandling';

package/dist/types/providers/types.d.ts

@@ -5,6 +5,17 @@ import { NodeDataProvider } from '@atlaskit/node-data-provider';
 import type { TaskDecisionProvider } from '@atlaskit/task-decision/types';
 import type { SyncBlockData, SyncBlockStatus, ResourceId, SyncBlockError, SyncBlockNode, SyncBlockProduct, BlockInstanceId, SyncBlockAttrs, ReferenceSyncBlockData, DeletionReason } from '../common/types';
 type SyncBlockErrorInfo = {
+    /**
+     * PII-safe `Error.name` from the upstream catch, used to de-opaque `errored`
+     * failures. Only ever `Error.name` — never node content, titles, or any UGC.
+     */
+    originalName?: string;
+    /**
+     * PII-safe `Error.message` from the upstream catch, so the classifier can bucket
+     * the real cause. Distinct from `reason` (may be synthetic/enum): carries the raw
+     * framework/HTTP text. Only ever `Error.message` — never node content or UGC.
+     */
+    originalMessage?: string;
     reason?: string;
     sourceAri?: string;
     /**

package/dist/types/utils/errorHandling.d.ts

@@ -3,6 +3,17 @@ import type { RendererSyncBlockEventPayload, OperationalAEP, SyncBlockEventPaylo
 import { SyncBlockError } from '../common/types';
 import type { DeletionMechanism, DeletionReason } from '../common/types';
 export declare const stringifyError: (error: unknown) => string | undefined;
+/**
+ * PII-safe extraction of `message`/`name` from an unknown caught error, used to
+ * de-opaque `errored` failures. Only ever reads `Error.message` / `Error.name` — it
+ * never stringifies arbitrary objects (which could pull in node content / UGC), and
+ * non-`Error` values yield `{}` so no `[object Object]` or serialized payload leaks
+ * into analytics.
+ */
+export declare const getPiiSafeOriginalError: (error: unknown) => {
+    originalMessage?: string;
+    originalName?: string;
+};
 /**
  * The set of categorical failure reasons emitted on synced-block operational error
  * events (EDITOR-7796). These let the analytics dashboard break delete/update/create
@@ -168,7 +179,7 @@ export declare const createSuccessPayload: (resourceId: string, sourceProduct?:
  * existed, so dashboards had no create denominator). Fired behind
  * `platform_editor_blocks_patch_4` with the `blockInstanceId` join key.
  */
-export declare const createSuccessPayloadNew: (resourceId: string, blockInstanceId?: string, sourceProduct?: string) => SyncBlockEventPayload;
+export declare const createSuccessOperationalPayload: (resourceId: string, blockInstanceId?: string, sourceProduct?: string) => SyncBlockEventPayload;
 export declare const updateSuccessPayload: (resourceId: string, hasReference?: boolean, sourceProduct?: string) => SyncBlockEventPayload;
 /**
  * Optional enrichment for the `syncedBlockDelete` success event behind

package/package.json

@@ -16,12 +16,12 @@
 	],
 	"atlaskit:src": "src/index.ts",
 	"dependencies": {
-		"@atlaskit/adf-utils": "^20.2.0",
+		"@atlaskit/adf-utils": "^20.3.0",
 		"@atlaskit/editor-json-transformer": "^9.0.0",
 		"@atlaskit/editor-prosemirror": "^8.0.0",
 		"@atlaskit/node-data-provider": "^13.0.0",
 		"@atlaskit/platform-feature-flags": "^2.0.0",
-		"@atlaskit/tmp-editor-statsig": "^121.0.0",
+		"@atlaskit/tmp-editor-statsig": "^122.0.0",
 		"@babel/runtime": "^7.0.0",
 		"@compiled/react": "^0.20.0",
 		"graphql-ws": "^5.14.2",
@@ -30,7 +30,7 @@
 		"uuid": "^3.1.0"
 	},
 	"peerDependencies": {
-		"@atlaskit/editor-common": "^116.22.0",
+		"@atlaskit/editor-common": "^116.24.0",
 		"react": "^18.2.0"
 	},
 	"devDependencies": {
@@ -74,7 +74,7 @@
 		}
 	},
 	"name": "@atlaskit/editor-synced-block-provider",
-	"version": "8.5.3",
+	"version": "8.5.5",
 	"description": "Synced Block Provider for @atlaskit/editor-plugin-synced-block",
 	"author": "Atlassian Pty Ltd",
 	"license": "Apache-2.0",