@belvador/browser 0.2.0 → 0.4.0

package/README.md

@@ -32,7 +32,7 @@ Allow the ingest origin in your Content-Security-Policy: `connect-src https://in
 ## What it sends
 
 Errors only (exceptions, messages, breadcrumbs you turn on, attachments if you enable them).
-No tracing, session replay, logs or profiling — those items are dropped inside your app.
+No spans, session replay, logs, profiling or check-ins — those items are dropped inside your app.
 
 Before anything leaves your app the SDK removes `Authorization`, `Cookie` and `Set-Cookie`
 headers, request bodies and cookies, client IP headers, and masks credentials in URLs, query
@@ -45,6 +45,16 @@ each attempt times out after 10 s, failed sends retry at most 5 times, `429` rat
 respected, and a revoked key (`401`/`403`) stops sending for the life of the page or isolate.
 Every public function catches its own errors.
 
+## Link requests with one trace
+
+Off by default. `tracePropagation: { targets: [/^\/api\//, "https://api.example.com"] }` adds
+`traceparent` and `sentry-trace` headers to `fetch` calls to those URLs (relative patterns
+match same-origin paths), so a browser error and the server error behind the same request
+share one trace id. The receiving API must allow these headers in CORS. No spans or
+transactions are sent; `baggage` only with `baggage: true`. A View Transition the browser
+skipped on purpose is not reported unless you set `captureViewTransitionSkips: true`.
+See https://belvador.dev/docs/sdk/tracing
+
 ## Check the connection
 
 "No errors" is not proof that errors arrive. Call `verifyIntegration()` from `@belvador/browser` once after `init`:

package/dist/internal.js

@@ -1,7 +1,7 @@
 // Shared by @belvador/browser, /react and /tanstack-start: browser engine
 // options and the idempotent init. Not a public API.
 import { breadcrumbsIntegration, browserApiErrorsIntegration, dedupeIntegration, eventFiltersIntegration, functionToStringIntegration, getClient, globalHandlersIntegration, httpContextIntegration, linkedErrorsIntegration, } from "@sentry/browser";
-import { BELVADOR_MARKER, buildEngineOptions, isActive, reportDiagnostic, runVerification, warnOnce, } from "@belvador/core";
+import { BELVADOR_MARKER, OTEL_OPTION, TRACE_OPTION, buildEngineOptions, otelBridgeIntegration, installTracePropagation, isActive, reportDiagnostic, runVerification, warnOnce, } from "@belvador/core";
 const EXTENSION_URLS = [
     /^chrome-extension:\/\//i,
     /^moz-extension:\/\//i,
@@ -33,6 +33,9 @@ export function browserEngineOptions(options, runtime) {
         integrations.push(breadcrumbsIntegration(crumbs));
     if (options.wrapBrowserApis === true)
         integrations.push(functionToStringIntegration(), browserApiErrorsIntegration());
+    const otel = base[OTEL_OPTION];
+    if (otel)
+        integrations.push(otelBridgeIntegration(otel));
     return {
         ...base,
         integrations,
@@ -60,6 +63,9 @@ export function initWith(engineInit, options, runtime) {
         if (!engineOptions)
             return false;
         engineInit(engineOptions);
+        // Only when the app asked for it (spec 06 §5): fetch to its targets carries the trace.
+        if (engineOptions[TRACE_OPTION])
+            installTracePropagation();
         return isActive();
     }
     catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@belvador/browser",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "description": "Belvador error tracking for the browser: one init, errors only, private by default.",
   "license": "MIT",
   "author": "Belvador (https://belvador.dev)",
@@ -37,7 +37,7 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@belvador/core": "0.2.0",
+    "@belvador/core": "0.4.0",
     "@sentry/browser": "10.76.2"
   },
   "publishConfig": {