@drakkar.software/sunglasses-core 0.11.0 → 0.13.0

package/dist/index.d.mts

@@ -523,9 +523,8 @@ interface ISunglassesTypedClient<T extends EventMap> extends ISunglassesClient {
     capture<K extends keyof T & string>(eventName: K, ...args: T[K] extends undefined ? [properties?: Record<string, unknown>] : [properties: T[K]]): void;
 }
 /**
- * Standard properties emitted by error-capturing adapters as `$error` events.
- * Shared by `@drakkar.software/sunglasses-adapter-sentry`,
- * `@drakkar.software/sunglasses-adapter-posthog`, and `SunglassesErrorBoundary`.
+ * Standard properties emitted by error-capturing code as `$error` events.
+ * Used by `captureException`, `SunglassesErrorBoundary`, and `autoCaptureErrors`.
  */
 interface ErrorEventProperties {
     $error_message: string;
@@ -534,8 +533,42 @@ interface ErrorEventProperties {
     $error_handled: boolean;
     /** Sentry-compatible severity level. Usually `'error'`. */
     $error_level: string;
-    /** Optional stringified stack trace. Disabled by default for privacy. */
+    /** Stringified stack trace (trimmed to `maxStackFrames`). On by default. */
     $error_stack?: string;
+    /**
+     * React component stack from `errorInfo.componentStack` (boundaries only).
+     * Populated when the error is caught by a `SunglassesErrorBoundary` or
+     * `SunglassesGlobalErrorBoundary`.
+     */
+    $error_component_stack?: string;
+    /**
+     * Serialized `error.cause` chain — each link formatted as `"Name: message"`,
+     * joined by `"\ncaused by: "`, depth-capped at 3 levels.
+     */
+    $error_cause?: string;
+    /**
+     * Custom enumerable properties on the Error object beyond the standard
+     * `message / name / stack / cause` keys (e.g. `code`, `statusCode`).
+     * Scalar values only (string/number/boolean); nested objects are skipped.
+     */
+    $error_extra?: Record<string, unknown>;
+    /**
+     * Whether the error was fatal (React Native `ErrorUtils` `isFatal` only).
+     * Absent on web.
+     */
+    $error_fatal?: boolean;
+    /**
+     * Where the error was captured: `'boundary'` (error boundary / component
+     * `componentDidCatch`), `'global'` (platform global handler), `'rejection'`
+     * (unhandled promise), or `'console'` (console patching).
+     */
+    $error_source?: string;
+    /** Source filename for web `window 'error'` events (`ErrorEvent.filename`). */
+    $error_filename?: string;
+    /** Source line number for web `window 'error'` events (`ErrorEvent.lineno`). */
+    $error_line?: number;
+    /** Source column number for web `window 'error'` events (`ErrorEvent.colno`). */
+    $error_column?: number;
     /** Allows adapter-specific extension properties (e.g. from `beforeCapture`). */
     [key: string]: unknown;
 }
@@ -677,7 +710,14 @@ declare class PiiSanitizer implements IMiddleware {
      * - Recurse into nested objects and arrays
      */
     private deepSanitizeValues;
-    private containsPii;
+    /**
+     * Replace every PII match in `value` with `'[redacted]'`, preserving the
+     * surrounding text. This is safer than whole-value redaction for stack traces
+     * and error messages that may contain PII alongside non-sensitive context.
+     *
+     * Each pattern must have the `g` (global) flag so all occurrences are replaced.
+     */
+    private maskPiiSubstrings;
 }
 
 interface Logger {
@@ -1149,8 +1189,9 @@ interface CaptureExceptionOptions {
     /** Sentry-compatible severity level. Default: `'error'`. */
     level?: string;
     /**
-     * Include the stack trace in `$error_stack`. Default: `false` (privacy-safe).
-     * Stack traces may expose internal file paths and function names.
+     * Include the stack trace in `$error_stack`. Default: `true`.
+     * Stack traces may expose internal file paths and function names; set to
+     * `false` to disable if your privacy policy requires it.
      */
     includeStack?: boolean;
     /**
@@ -1179,6 +1220,37 @@ interface CaptureExceptionOptions {
      * object to capture, or `null` to skip capture entirely.
      */
     beforeCapture?: (props: ErrorEventProperties) => Record<string, unknown> | null;
+    /**
+     * Drop errors with the same fingerprint (name + message + first stack frame)
+     * captured within {@link dedupeWindowMs}. This collapses the common
+     * double-capture cases — e.g. an error boundary plus `console.error` capture
+     * reporting the same render error, or a global handler firing repeatedly for
+     * the same throw. The fingerprint deliberately ignores the `handled` flag and
+     * `$error_source`, so the first capture wins. Default: `true`.
+     */
+    dedupe?: boolean;
+    /**
+     * Time window (ms) used by {@link dedupe}. Identical errors within this window
+     * are dropped. Default: `1000`.
+     */
+    dedupeWindowMs?: number;
+    /**
+     * React component stack from `errorInfo.componentStack`, set by error
+     * boundaries. Emitted as `$error_component_stack`. Framework-set — takes
+     * precedence over any value in `properties`.
+     */
+    componentStack?: string;
+    /**
+     * Whether the error was fatal (React Native `ErrorUtils` `isFatal`).
+     * Emitted as `$error_fatal`. Framework-set — takes precedence over `properties`.
+     */
+    fatal?: boolean;
+    /**
+     * Origin of the capture: `'boundary'`, `'global'`, `'rejection'`, or
+     * `'console'`. Emitted as `$error_source`. Framework-set — takes precedence
+     * over any value in `properties`.
+     */
+    source?: string;
 }
 /**
  * Normalize any thrown value into a SunGlasses `$error` event and capture it
@@ -1230,10 +1302,15 @@ interface ConsoleCaptureOptions {
  */
 interface AutoCaptureErrorsOptions extends CaptureExceptionOptions {
     /**
-     * Install the platform global error handlers (web `window` `error` /
-     * `unhandledrejection`, React Native `ErrorUtils`). Default: `true`.
+     * Install the platform uncaught-error handlers (web `window` `'error'`,
+     * React Native `ErrorUtils`). Default: `true`.
      */
     globalHandlers?: boolean;
+    /**
+     * Capture unhandled promise rejections (web `window` `'unhandledrejection'`,
+     * React Native engine-specific rejection tracking). Default: `true`.
+     */
+    unhandledRejections?: boolean;
     /**
      * Also capture console output as `$error` events. `true` captures
      * `console.error`; pass {@link ConsoleCaptureOptions} to configure levels.
@@ -1268,6 +1345,43 @@ interface AutoCaptureErrorsOptions extends CaptureExceptionOptions {
  */
 declare function patchConsole(client: ISunglassesClient, options?: ConsoleCaptureOptions): () => void;
 
+/**
+ * Describes a global (non-render) error surfaced by a platform global handler.
+ * Published by the providers' auto-capture handlers and consumed by
+ * `SunglassesGlobalErrorBoundary` to decide whether to render its fallback UI.
+ *
+ * The raw `error` reference is forwarded only to in-process subscribers; nothing
+ * is persisted, logged, or sent anywhere by the bus itself.
+ */
+interface GlobalErrorInfo {
+    /** The thrown value (an `Error`, string, or arbitrary object). */
+    error: unknown;
+    /**
+     * Whether the runtime considered the error fatal. Uncaught errors are fatal
+     * unless the platform reports otherwise; unhandled promise rejections are
+     * non-fatal.
+     */
+    fatal: boolean;
+    /** Whether the error came from an uncaught error or an unhandled rejection. */
+    kind: 'error' | 'rejection';
+}
+/** A subscriber notified for every published {@link GlobalErrorInfo}. */
+type GlobalErrorListener = (info: GlobalErrorInfo) => void;
+/**
+ * Publish a global error to all current subscribers. Subscriber errors are
+ * swallowed so one faulty listener cannot break others or the caller.
+ *
+ * @param info - The global error descriptor.
+ */
+declare function publishGlobalError(info: GlobalErrorInfo): void;
+/**
+ * Subscribe to global errors published via {@link publishGlobalError}.
+ *
+ * @param listener - Called for each published error.
+ * @returns An unsubscribe function.
+ */
+declare function subscribeGlobalError(listener: GlobalErrorListener): () => void;
+
 /**
  * A typed analytics stub that is safe to use before the SDK initialises.
  *
@@ -1340,4 +1454,4 @@ declare function sha256Hex(input: string): Promise<string>;
  */
 declare function nowISO(): string;
 
-export { type AppMetadata, type AppUpdateInfo, type AutoCaptureErrorsOptions, type CaptureExceptionOptions, type CleanupConfig, type ConsentHistoryEntry, ConsentManager, type ConsentState, type ConsentStatus, type ConsoleCaptureOptions, type ConsoleLevel, type ErrorEventProperties, type EventContext, type EventCountPeriod, EventCounter, type EventMap, EventQueue, type EventType, FrequencyMiddleware, type FrequencyMiddlewareOptions, type HttpAdapterConfig, type IAnalyticsAdapter, type IEventCounter, type IMiddleware, type IStorageAdapter, type ISunglassesClient, type ISunglassesTypedClient, IdentityManager, type IdentityState, LocalEventArchive, type Logger, type MiddlewareNext, MiddlewarePipeline, PiiSanitizer, SamplingMiddleware, type SamplingMiddlewareOptions, type ScreenTrackingOptions, SessionManager, type SessionState, type SunglassesConfig, SunglassesCore, type SunglassesEvent, TraitManager, type UserDataExport, asTyped, captureException, createLazyClient, createLogger, generateUUID, nowISO, patchConsole, sha256Hex };
+export { type AppMetadata, type AppUpdateInfo, type AutoCaptureErrorsOptions, type CaptureExceptionOptions, type CleanupConfig, type ConsentHistoryEntry, ConsentManager, type ConsentState, type ConsentStatus, type ConsoleCaptureOptions, type ConsoleLevel, type ErrorEventProperties, type EventContext, type EventCountPeriod, EventCounter, type EventMap, EventQueue, type EventType, FrequencyMiddleware, type FrequencyMiddlewareOptions, type GlobalErrorInfo, type GlobalErrorListener, type HttpAdapterConfig, type IAnalyticsAdapter, type IEventCounter, type IMiddleware, type IStorageAdapter, type ISunglassesClient, type ISunglassesTypedClient, IdentityManager, type IdentityState, LocalEventArchive, type Logger, type MiddlewareNext, MiddlewarePipeline, PiiSanitizer, SamplingMiddleware, type SamplingMiddlewareOptions, type ScreenTrackingOptions, SessionManager, type SessionState, type SunglassesConfig, SunglassesCore, type SunglassesEvent, TraitManager, type UserDataExport, asTyped, captureException, createLazyClient, createLogger, generateUUID, nowISO, patchConsole, publishGlobalError, sha256Hex, subscribeGlobalError };

package/dist/index.d.ts

@@ -523,9 +523,8 @@ interface ISunglassesTypedClient<T extends EventMap> extends ISunglassesClient {
     capture<K extends keyof T & string>(eventName: K, ...args: T[K] extends undefined ? [properties?: Record<string, unknown>] : [properties: T[K]]): void;
 }
 /**
- * Standard properties emitted by error-capturing adapters as `$error` events.
- * Shared by `@drakkar.software/sunglasses-adapter-sentry`,
- * `@drakkar.software/sunglasses-adapter-posthog`, and `SunglassesErrorBoundary`.
+ * Standard properties emitted by error-capturing code as `$error` events.
+ * Used by `captureException`, `SunglassesErrorBoundary`, and `autoCaptureErrors`.
  */
 interface ErrorEventProperties {
     $error_message: string;
@@ -534,8 +533,42 @@ interface ErrorEventProperties {
     $error_handled: boolean;
     /** Sentry-compatible severity level. Usually `'error'`. */
     $error_level: string;
-    /** Optional stringified stack trace. Disabled by default for privacy. */
+    /** Stringified stack trace (trimmed to `maxStackFrames`). On by default. */
     $error_stack?: string;
+    /**
+     * React component stack from `errorInfo.componentStack` (boundaries only).
+     * Populated when the error is caught by a `SunglassesErrorBoundary` or
+     * `SunglassesGlobalErrorBoundary`.
+     */
+    $error_component_stack?: string;
+    /**
+     * Serialized `error.cause` chain — each link formatted as `"Name: message"`,
+     * joined by `"\ncaused by: "`, depth-capped at 3 levels.
+     */
+    $error_cause?: string;
+    /**
+     * Custom enumerable properties on the Error object beyond the standard
+     * `message / name / stack / cause` keys (e.g. `code`, `statusCode`).
+     * Scalar values only (string/number/boolean); nested objects are skipped.
+     */
+    $error_extra?: Record<string, unknown>;
+    /**
+     * Whether the error was fatal (React Native `ErrorUtils` `isFatal` only).
+     * Absent on web.
+     */
+    $error_fatal?: boolean;
+    /**
+     * Where the error was captured: `'boundary'` (error boundary / component
+     * `componentDidCatch`), `'global'` (platform global handler), `'rejection'`
+     * (unhandled promise), or `'console'` (console patching).
+     */
+    $error_source?: string;
+    /** Source filename for web `window 'error'` events (`ErrorEvent.filename`). */
+    $error_filename?: string;
+    /** Source line number for web `window 'error'` events (`ErrorEvent.lineno`). */
+    $error_line?: number;
+    /** Source column number for web `window 'error'` events (`ErrorEvent.colno`). */
+    $error_column?: number;
     /** Allows adapter-specific extension properties (e.g. from `beforeCapture`). */
     [key: string]: unknown;
 }
@@ -677,7 +710,14 @@ declare class PiiSanitizer implements IMiddleware {
      * - Recurse into nested objects and arrays
      */
     private deepSanitizeValues;
-    private containsPii;
+    /**
+     * Replace every PII match in `value` with `'[redacted]'`, preserving the
+     * surrounding text. This is safer than whole-value redaction for stack traces
+     * and error messages that may contain PII alongside non-sensitive context.
+     *
+     * Each pattern must have the `g` (global) flag so all occurrences are replaced.
+     */
+    private maskPiiSubstrings;
 }
 
 interface Logger {
@@ -1149,8 +1189,9 @@ interface CaptureExceptionOptions {
     /** Sentry-compatible severity level. Default: `'error'`. */
     level?: string;
     /**
-     * Include the stack trace in `$error_stack`. Default: `false` (privacy-safe).
-     * Stack traces may expose internal file paths and function names.
+     * Include the stack trace in `$error_stack`. Default: `true`.
+     * Stack traces may expose internal file paths and function names; set to
+     * `false` to disable if your privacy policy requires it.
      */
     includeStack?: boolean;
     /**
@@ -1179,6 +1220,37 @@ interface CaptureExceptionOptions {
      * object to capture, or `null` to skip capture entirely.
      */
     beforeCapture?: (props: ErrorEventProperties) => Record<string, unknown> | null;
+    /**
+     * Drop errors with the same fingerprint (name + message + first stack frame)
+     * captured within {@link dedupeWindowMs}. This collapses the common
+     * double-capture cases — e.g. an error boundary plus `console.error` capture
+     * reporting the same render error, or a global handler firing repeatedly for
+     * the same throw. The fingerprint deliberately ignores the `handled` flag and
+     * `$error_source`, so the first capture wins. Default: `true`.
+     */
+    dedupe?: boolean;
+    /**
+     * Time window (ms) used by {@link dedupe}. Identical errors within this window
+     * are dropped. Default: `1000`.
+     */
+    dedupeWindowMs?: number;
+    /**
+     * React component stack from `errorInfo.componentStack`, set by error
+     * boundaries. Emitted as `$error_component_stack`. Framework-set — takes
+     * precedence over any value in `properties`.
+     */
+    componentStack?: string;
+    /**
+     * Whether the error was fatal (React Native `ErrorUtils` `isFatal`).
+     * Emitted as `$error_fatal`. Framework-set — takes precedence over `properties`.
+     */
+    fatal?: boolean;
+    /**
+     * Origin of the capture: `'boundary'`, `'global'`, `'rejection'`, or
+     * `'console'`. Emitted as `$error_source`. Framework-set — takes precedence
+     * over any value in `properties`.
+     */
+    source?: string;
 }
 /**
  * Normalize any thrown value into a SunGlasses `$error` event and capture it
@@ -1230,10 +1302,15 @@ interface ConsoleCaptureOptions {
  */
 interface AutoCaptureErrorsOptions extends CaptureExceptionOptions {
     /**
-     * Install the platform global error handlers (web `window` `error` /
-     * `unhandledrejection`, React Native `ErrorUtils`). Default: `true`.
+     * Install the platform uncaught-error handlers (web `window` `'error'`,
+     * React Native `ErrorUtils`). Default: `true`.
      */
     globalHandlers?: boolean;
+    /**
+     * Capture unhandled promise rejections (web `window` `'unhandledrejection'`,
+     * React Native engine-specific rejection tracking). Default: `true`.
+     */
+    unhandledRejections?: boolean;
     /**
      * Also capture console output as `$error` events. `true` captures
      * `console.error`; pass {@link ConsoleCaptureOptions} to configure levels.
@@ -1268,6 +1345,43 @@ interface AutoCaptureErrorsOptions extends CaptureExceptionOptions {
  */
 declare function patchConsole(client: ISunglassesClient, options?: ConsoleCaptureOptions): () => void;
 
+/**
+ * Describes a global (non-render) error surfaced by a platform global handler.
+ * Published by the providers' auto-capture handlers and consumed by
+ * `SunglassesGlobalErrorBoundary` to decide whether to render its fallback UI.
+ *
+ * The raw `error` reference is forwarded only to in-process subscribers; nothing
+ * is persisted, logged, or sent anywhere by the bus itself.
+ */
+interface GlobalErrorInfo {
+    /** The thrown value (an `Error`, string, or arbitrary object). */
+    error: unknown;
+    /**
+     * Whether the runtime considered the error fatal. Uncaught errors are fatal
+     * unless the platform reports otherwise; unhandled promise rejections are
+     * non-fatal.
+     */
+    fatal: boolean;
+    /** Whether the error came from an uncaught error or an unhandled rejection. */
+    kind: 'error' | 'rejection';
+}
+/** A subscriber notified for every published {@link GlobalErrorInfo}. */
+type GlobalErrorListener = (info: GlobalErrorInfo) => void;
+/**
+ * Publish a global error to all current subscribers. Subscriber errors are
+ * swallowed so one faulty listener cannot break others or the caller.
+ *
+ * @param info - The global error descriptor.
+ */
+declare function publishGlobalError(info: GlobalErrorInfo): void;
+/**
+ * Subscribe to global errors published via {@link publishGlobalError}.
+ *
+ * @param listener - Called for each published error.
+ * @returns An unsubscribe function.
+ */
+declare function subscribeGlobalError(listener: GlobalErrorListener): () => void;
+
 /**
  * A typed analytics stub that is safe to use before the SDK initialises.
  *
@@ -1340,4 +1454,4 @@ declare function sha256Hex(input: string): Promise<string>;
  */
 declare function nowISO(): string;
 
-export { type AppMetadata, type AppUpdateInfo, type AutoCaptureErrorsOptions, type CaptureExceptionOptions, type CleanupConfig, type ConsentHistoryEntry, ConsentManager, type ConsentState, type ConsentStatus, type ConsoleCaptureOptions, type ConsoleLevel, type ErrorEventProperties, type EventContext, type EventCountPeriod, EventCounter, type EventMap, EventQueue, type EventType, FrequencyMiddleware, type FrequencyMiddlewareOptions, type HttpAdapterConfig, type IAnalyticsAdapter, type IEventCounter, type IMiddleware, type IStorageAdapter, type ISunglassesClient, type ISunglassesTypedClient, IdentityManager, type IdentityState, LocalEventArchive, type Logger, type MiddlewareNext, MiddlewarePipeline, PiiSanitizer, SamplingMiddleware, type SamplingMiddlewareOptions, type ScreenTrackingOptions, SessionManager, type SessionState, type SunglassesConfig, SunglassesCore, type SunglassesEvent, TraitManager, type UserDataExport, asTyped, captureException, createLazyClient, createLogger, generateUUID, nowISO, patchConsole, sha256Hex };
+export { type AppMetadata, type AppUpdateInfo, type AutoCaptureErrorsOptions, type CaptureExceptionOptions, type CleanupConfig, type ConsentHistoryEntry, ConsentManager, type ConsentState, type ConsentStatus, type ConsoleCaptureOptions, type ConsoleLevel, type ErrorEventProperties, type EventContext, type EventCountPeriod, EventCounter, type EventMap, EventQueue, type EventType, FrequencyMiddleware, type FrequencyMiddlewareOptions, type GlobalErrorInfo, type GlobalErrorListener, type HttpAdapterConfig, type IAnalyticsAdapter, type IEventCounter, type IMiddleware, type IStorageAdapter, type ISunglassesClient, type ISunglassesTypedClient, IdentityManager, type IdentityState, LocalEventArchive, type Logger, type MiddlewareNext, MiddlewarePipeline, PiiSanitizer, SamplingMiddleware, type SamplingMiddlewareOptions, type ScreenTrackingOptions, SessionManager, type SessionState, type SunglassesConfig, SunglassesCore, type SunglassesEvent, TraitManager, type UserDataExport, asTyped, captureException, createLazyClient, createLogger, generateUUID, nowISO, patchConsole, publishGlobalError, sha256Hex, subscribeGlobalError };

package/dist/index.js

@@ -39,7 +39,9 @@ __export(index_exports, {
   generateUUID: () => generateUUID,
   nowISO: () => nowISO,
   patchConsole: () => patchConsole,
-  sha256Hex: () => sha256Hex
+  publishGlobalError: () => publishGlobalError,
+  sha256Hex: () => sha256Hex,
+  subscribeGlobalError: () => subscribeGlobalError
 });
 module.exports = __toCommonJS(index_exports);
 
@@ -676,13 +678,13 @@ var BUILTIN_DENIED_KEYS = /* @__PURE__ */ new Set([
 ]);
 var PII_PATTERNS = [
   // Email (requires letter-only TLD)
-  /[a-zA-Z0-9._%+\-]+@[a-zA-Z0-9.\-]+\.[a-zA-Z]{2,}/,
+  /[a-zA-Z0-9._%+\-]+@[a-zA-Z0-9.\-]+\.[a-zA-Z]{2,}/g,
   // Phone (US/international, various formats)
-  /(\+?1?\s?)?\(?\d{3}\)?[\s.\-]\d{3}[\s.\-]\d{4}/,
+  /(\+?1?\s?)?\(?\d{3}\)?[\s.\-]\d{3}[\s.\-]\d{4}/g,
   // IPv4
-  /\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\b/,
+  /\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\b/g,
   // Credit card (major formats: 16 digits with optional separators)
-  /\b\d{4}[- ]?\d{4}[- ]?\d{4}[- ]?\d{4}\b/
+  /\b\d{4}[- ]?\d{4}[- ]?\d{4}[- ]?\d{4}\b/g
 ];
 var PiiSanitizer = class {
   constructor(allowedProperties, deniedProperties) {
@@ -730,16 +732,25 @@ var PiiSanitizer = class {
       }
       return result;
     }
-    if (typeof value === "string" && this.containsPii(value)) {
-      return "[redacted]";
+    if (typeof value === "string") {
+      return this.maskPiiSubstrings(value);
     }
     return value;
   }
-  containsPii(value) {
+  /**
+   * Replace every PII match in `value` with `'[redacted]'`, preserving the
+   * surrounding text. This is safer than whole-value redaction for stack traces
+   * and error messages that may contain PII alongside non-sensitive context.
+   *
+   * Each pattern must have the `g` (global) flag so all occurrences are replaced.
+   */
+  maskPiiSubstrings(value) {
+    let result = value;
     for (const pattern of PII_PATTERNS) {
-      if (pattern.test(value)) return true;
+      pattern.lastIndex = 0;
+      result = result.replace(pattern, "[redacted]");
     }
-    return false;
+    return result;
   }
 };
 
@@ -1612,20 +1623,87 @@ function extractStack(stack, maxFrames) {
   }
   return void 0;
 }
+var STANDARD_ERROR_KEYS = /* @__PURE__ */ new Set(["message", "name", "stack", "cause"]);
+var MAX_EXTRA_PROPS = 20;
+function extractErrorExtras(error, maxMessageLength) {
+  const extras = {};
+  let count = 0;
+  for (const key of Object.getOwnPropertyNames(error)) {
+    if (STANDARD_ERROR_KEYS.has(key)) continue;
+    if (count >= MAX_EXTRA_PROPS) break;
+    const val = error[key];
+    const t = typeof val;
+    if (t === "string") {
+      extras[key] = val.slice(0, maxMessageLength);
+      count++;
+    } else if (t === "number" || t === "boolean") {
+      extras[key] = val;
+      count++;
+    }
+  }
+  return count > 0 ? extras : void 0;
+}
+function serializeCauseChain(error, maxDepth, maxMessageLength) {
+  if (!(error instanceof Error) || !("cause" in error)) return void 0;
+  const parts = [];
+  let current = error.cause;
+  for (let depth = 0; depth < maxDepth && current != null; depth++) {
+    if (current instanceof Error) {
+      parts.push(`${current.name}: ${current.message.slice(0, maxMessageLength)}`);
+      current = "cause" in current ? current.cause : void 0;
+    } else if (typeof current === "string") {
+      parts.push(current.slice(0, maxMessageLength));
+      break;
+    } else if (current && typeof current === "object" && "message" in current) {
+      parts.push(String(current.message).slice(0, maxMessageLength));
+      break;
+    } else {
+      parts.push(String(current).slice(0, maxMessageLength));
+      break;
+    }
+  }
+  return parts.length > 0 ? parts.join("\ncaused by: ") : void 0;
+}
+var dedupeStore = /* @__PURE__ */ new WeakMap();
+function isDuplicate(client, fingerprint, windowMs) {
+  const now = Date.now();
+  let seen = dedupeStore.get(client);
+  if (!seen) {
+    seen = /* @__PURE__ */ new Map();
+    dedupeStore.set(client, seen);
+  }
+  for (const [fp, ts] of seen) {
+    if (now - ts > windowMs) seen.delete(fp);
+  }
+  const last = seen.get(fingerprint);
+  if (last !== void 0 && now - last <= windowMs) return true;
+  seen.set(fingerprint, now);
+  return false;
+}
 function captureException(client, error, options = {}) {
   const {
     handled = true,
     level = "error",
-    includeStack = false,
+    includeStack = true,
     maxStackFrames = 5,
     maxMessageLength = 200,
     ignorePatterns = [],
     properties,
-    beforeCapture
+    beforeCapture,
+    dedupe = true,
+    dedupeWindowMs = 1e3,
+    componentStack,
+    fatal,
+    source
   } = options;
   const normalized = normalizeError(error);
   const rawMessage = normalized.message;
   if (ignorePatterns.some((p) => p.test(rawMessage))) return;
+  if (dedupe) {
+    const firstFrame = extractStack(normalized.stack, 1) ?? "";
+    const fingerprint = `${normalized.name}|${rawMessage}|${firstFrame}`;
+    if (isDuplicate(client, fingerprint, dedupeWindowMs)) return;
+  }
   let props = {
     ...properties,
     $error_message: rawMessage.slice(0, maxMessageLength),
@@ -1637,6 +1715,15 @@ function captureException(client, error, options = {}) {
     const frames = extractStack(normalized.stack, maxStackFrames);
     if (frames) props = { ...props, $error_stack: frames };
   }
+  const cause = serializeCauseChain(error, 3, maxMessageLength);
+  if (cause) props = { ...props, $error_cause: cause };
+  if (error instanceof Error) {
+    const extra = extractErrorExtras(error, maxMessageLength);
+    if (extra) props = { ...props, $error_extra: extra };
+  }
+  if (componentStack) props = { ...props, $error_component_stack: componentStack };
+  if (fatal !== void 0) props = { ...props, $error_fatal: fatal };
+  if (source) props = { ...props, $error_source: source };
   if (beforeCapture) {
     const transformed = beforeCapture(props);
     if (!transformed) return;
@@ -1668,7 +1755,7 @@ function patchConsole(client, options = {}) {
     levels = ["error"],
     ignorePatterns = [],
     maxMessageLength = 200,
-    includeStack = false,
+    includeStack = true,
     properties
   } = options;
   const uniqueLevels = Array.from(new Set(levels));
@@ -1691,7 +1778,8 @@ function patchConsole(client, options = {}) {
           level: LEVEL_TO_SEVERITY[level],
           includeStack,
           maxMessageLength,
-          properties: { ...properties, $error_source: "console" }
+          source: "console",
+          properties
         });
       } finally {
         isCapturing = false;
@@ -1705,6 +1793,23 @@ function patchConsole(client, options = {}) {
   };
 }
 
+// src/errorBus.ts
+var listeners = /* @__PURE__ */ new Set();
+function publishGlobalError(info) {
+  for (const listener of listeners) {
+    try {
+      listener(info);
+    } catch {
+    }
+  }
+}
+function subscribeGlobalError(listener) {
+  listeners.add(listener);
+  return () => {
+    listeners.delete(listener);
+  };
+}
+
 // src/LazyClient.ts
 function createLazyClient() {
   let _inner = null;
@@ -1843,5 +1948,7 @@ function createLazyClient() {
   generateUUID,
   nowISO,
   patchConsole,
-  sha256Hex
+  publishGlobalError,
+  sha256Hex,
+  subscribeGlobalError
 });

package/dist/index.mjs

@@ -631,13 +631,13 @@ var BUILTIN_DENIED_KEYS = /* @__PURE__ */ new Set([
 ]);
 var PII_PATTERNS = [
   // Email (requires letter-only TLD)
-  /[a-zA-Z0-9._%+\-]+@[a-zA-Z0-9.\-]+\.[a-zA-Z]{2,}/,
+  /[a-zA-Z0-9._%+\-]+@[a-zA-Z0-9.\-]+\.[a-zA-Z]{2,}/g,
   // Phone (US/international, various formats)
-  /(\+?1?\s?)?\(?\d{3}\)?[\s.\-]\d{3}[\s.\-]\d{4}/,
+  /(\+?1?\s?)?\(?\d{3}\)?[\s.\-]\d{3}[\s.\-]\d{4}/g,
   // IPv4
-  /\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\b/,
+  /\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\b/g,
   // Credit card (major formats: 16 digits with optional separators)
-  /\b\d{4}[- ]?\d{4}[- ]?\d{4}[- ]?\d{4}\b/
+  /\b\d{4}[- ]?\d{4}[- ]?\d{4}[- ]?\d{4}\b/g
 ];
 var PiiSanitizer = class {
   constructor(allowedProperties, deniedProperties) {
@@ -685,16 +685,25 @@ var PiiSanitizer = class {
       }
       return result;
     }
-    if (typeof value === "string" && this.containsPii(value)) {
-      return "[redacted]";
+    if (typeof value === "string") {
+      return this.maskPiiSubstrings(value);
     }
     return value;
   }
-  containsPii(value) {
+  /**
+   * Replace every PII match in `value` with `'[redacted]'`, preserving the
+   * surrounding text. This is safer than whole-value redaction for stack traces
+   * and error messages that may contain PII alongside non-sensitive context.
+   *
+   * Each pattern must have the `g` (global) flag so all occurrences are replaced.
+   */
+  maskPiiSubstrings(value) {
+    let result = value;
     for (const pattern of PII_PATTERNS) {
-      if (pattern.test(value)) return true;
+      pattern.lastIndex = 0;
+      result = result.replace(pattern, "[redacted]");
     }
-    return false;
+    return result;
   }
 };
 
@@ -1567,20 +1576,87 @@ function extractStack(stack, maxFrames) {
   }
   return void 0;
 }
+var STANDARD_ERROR_KEYS = /* @__PURE__ */ new Set(["message", "name", "stack", "cause"]);
+var MAX_EXTRA_PROPS = 20;
+function extractErrorExtras(error, maxMessageLength) {
+  const extras = {};
+  let count = 0;
+  for (const key of Object.getOwnPropertyNames(error)) {
+    if (STANDARD_ERROR_KEYS.has(key)) continue;
+    if (count >= MAX_EXTRA_PROPS) break;
+    const val = error[key];
+    const t = typeof val;
+    if (t === "string") {
+      extras[key] = val.slice(0, maxMessageLength);
+      count++;
+    } else if (t === "number" || t === "boolean") {
+      extras[key] = val;
+      count++;
+    }
+  }
+  return count > 0 ? extras : void 0;
+}
+function serializeCauseChain(error, maxDepth, maxMessageLength) {
+  if (!(error instanceof Error) || !("cause" in error)) return void 0;
+  const parts = [];
+  let current = error.cause;
+  for (let depth = 0; depth < maxDepth && current != null; depth++) {
+    if (current instanceof Error) {
+      parts.push(`${current.name}: ${current.message.slice(0, maxMessageLength)}`);
+      current = "cause" in current ? current.cause : void 0;
+    } else if (typeof current === "string") {
+      parts.push(current.slice(0, maxMessageLength));
+      break;
+    } else if (current && typeof current === "object" && "message" in current) {
+      parts.push(String(current.message).slice(0, maxMessageLength));
+      break;
+    } else {
+      parts.push(String(current).slice(0, maxMessageLength));
+      break;
+    }
+  }
+  return parts.length > 0 ? parts.join("\ncaused by: ") : void 0;
+}
+var dedupeStore = /* @__PURE__ */ new WeakMap();
+function isDuplicate(client, fingerprint, windowMs) {
+  const now = Date.now();
+  let seen = dedupeStore.get(client);
+  if (!seen) {
+    seen = /* @__PURE__ */ new Map();
+    dedupeStore.set(client, seen);
+  }
+  for (const [fp, ts] of seen) {
+    if (now - ts > windowMs) seen.delete(fp);
+  }
+  const last = seen.get(fingerprint);
+  if (last !== void 0 && now - last <= windowMs) return true;
+  seen.set(fingerprint, now);
+  return false;
+}
 function captureException(client, error, options = {}) {
   const {
     handled = true,
     level = "error",
-    includeStack = false,
+    includeStack = true,
     maxStackFrames = 5,
     maxMessageLength = 200,
     ignorePatterns = [],
     properties,
-    beforeCapture
+    beforeCapture,
+    dedupe = true,
+    dedupeWindowMs = 1e3,
+    componentStack,
+    fatal,
+    source
   } = options;
   const normalized = normalizeError(error);
   const rawMessage = normalized.message;
   if (ignorePatterns.some((p) => p.test(rawMessage))) return;
+  if (dedupe) {
+    const firstFrame = extractStack(normalized.stack, 1) ?? "";
+    const fingerprint = `${normalized.name}|${rawMessage}|${firstFrame}`;
+    if (isDuplicate(client, fingerprint, dedupeWindowMs)) return;
+  }
   let props = {
     ...properties,
     $error_message: rawMessage.slice(0, maxMessageLength),
@@ -1592,6 +1668,15 @@ function captureException(client, error, options = {}) {
     const frames = extractStack(normalized.stack, maxStackFrames);
     if (frames) props = { ...props, $error_stack: frames };
   }
+  const cause = serializeCauseChain(error, 3, maxMessageLength);
+  if (cause) props = { ...props, $error_cause: cause };
+  if (error instanceof Error) {
+    const extra = extractErrorExtras(error, maxMessageLength);
+    if (extra) props = { ...props, $error_extra: extra };
+  }
+  if (componentStack) props = { ...props, $error_component_stack: componentStack };
+  if (fatal !== void 0) props = { ...props, $error_fatal: fatal };
+  if (source) props = { ...props, $error_source: source };
   if (beforeCapture) {
     const transformed = beforeCapture(props);
     if (!transformed) return;
@@ -1623,7 +1708,7 @@ function patchConsole(client, options = {}) {
     levels = ["error"],
     ignorePatterns = [],
     maxMessageLength = 200,
-    includeStack = false,
+    includeStack = true,
     properties
   } = options;
   const uniqueLevels = Array.from(new Set(levels));
@@ -1646,7 +1731,8 @@ function patchConsole(client, options = {}) {
           level: LEVEL_TO_SEVERITY[level],
           includeStack,
           maxMessageLength,
-          properties: { ...properties, $error_source: "console" }
+          source: "console",
+          properties
         });
       } finally {
         isCapturing = false;
@@ -1660,6 +1746,23 @@ function patchConsole(client, options = {}) {
   };
 }
 
+// src/errorBus.ts
+var listeners = /* @__PURE__ */ new Set();
+function publishGlobalError(info) {
+  for (const listener of listeners) {
+    try {
+      listener(info);
+    } catch {
+    }
+  }
+}
+function subscribeGlobalError(listener) {
+  listeners.add(listener);
+  return () => {
+    listeners.delete(listener);
+  };
+}
+
 // src/LazyClient.ts
 function createLazyClient() {
   let _inner = null;
@@ -1797,5 +1900,7 @@ export {
   generateUUID,
   nowISO,
   patchConsole,
-  sha256Hex
+  publishGlobalError,
+  sha256Hex,
+  subscribeGlobalError
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@drakkar.software/sunglasses-core",
-  "version": "0.11.0",
+  "version": "0.13.0",
   "description": "Platform-agnostic event tracking engine for SunGlasses",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",