@drakkar.software/sunglasses-core 0.12.0 → 0.14.0

package/dist/index.d.mts

@@ -533,8 +533,42 @@ interface ErrorEventProperties {
     $error_handled: boolean;
     /** Sentry-compatible severity level. Usually `'error'`. */
     $error_level: string;
-    /** Optional stringified stack trace. Disabled by default for privacy. */
+    /** Stringified stack trace (trimmed to `maxStackFrames`). On by default. */
     $error_stack?: string;
+    /**
+     * React component stack from `errorInfo.componentStack` (boundaries only).
+     * Populated when the error is caught by a `SunglassesErrorBoundary` or
+     * `SunglassesGlobalErrorBoundary`.
+     */
+    $error_component_stack?: string;
+    /**
+     * Serialized `error.cause` chain — each link formatted as `"Name: message"`,
+     * joined by `"\ncaused by: "`, depth-capped at 3 levels.
+     */
+    $error_cause?: string;
+    /**
+     * Custom enumerable properties on the Error object beyond the standard
+     * `message / name / stack / cause` keys (e.g. `code`, `statusCode`).
+     * Scalar values only (string/number/boolean); nested objects are skipped.
+     */
+    $error_extra?: Record<string, unknown>;
+    /**
+     * Whether the error was fatal (React Native `ErrorUtils` `isFatal` only).
+     * Absent on web.
+     */
+    $error_fatal?: boolean;
+    /**
+     * Where the error was captured: `'boundary'` (error boundary / component
+     * `componentDidCatch`), `'global'` (platform global handler), `'rejection'`
+     * (unhandled promise), or `'console'` (console patching).
+     */
+    $error_source?: string;
+    /** Source filename for web `window 'error'` events (`ErrorEvent.filename`). */
+    $error_filename?: string;
+    /** Source line number for web `window 'error'` events (`ErrorEvent.lineno`). */
+    $error_line?: number;
+    /** Source column number for web `window 'error'` events (`ErrorEvent.colno`). */
+    $error_column?: number;
     /** Allows adapter-specific extension properties (e.g. from `beforeCapture`). */
     [key: string]: unknown;
 }
@@ -676,7 +710,14 @@ declare class PiiSanitizer implements IMiddleware {
      * - Recurse into nested objects and arrays
      */
     private deepSanitizeValues;
-    private containsPii;
+    /**
+     * Replace every PII match in `value` with `'[redacted]'`, preserving the
+     * surrounding text. This is safer than whole-value redaction for stack traces
+     * and error messages that may contain PII alongside non-sensitive context.
+     *
+     * Each pattern must have the `g` (global) flag so all occurrences are replaced.
+     */
+    private maskPiiSubstrings;
 }
 
 interface Logger {
@@ -1148,8 +1189,9 @@ interface CaptureExceptionOptions {
     /** Sentry-compatible severity level. Default: `'error'`. */
     level?: string;
     /**
-     * Include the stack trace in `$error_stack`. Default: `false` (privacy-safe).
-     * Stack traces may expose internal file paths and function names.
+     * Include the stack trace in `$error_stack`. Default: `true`.
+     * Stack traces may expose internal file paths and function names; set to
+     * `false` to disable if your privacy policy requires it.
      */
     includeStack?: boolean;
     /**
@@ -1192,6 +1234,23 @@ interface CaptureExceptionOptions {
      * are dropped. Default: `1000`.
      */
     dedupeWindowMs?: number;
+    /**
+     * React component stack from `errorInfo.componentStack`, set by error
+     * boundaries. Emitted as `$error_component_stack`. Framework-set — takes
+     * precedence over any value in `properties`.
+     */
+    componentStack?: string;
+    /**
+     * Whether the error was fatal (React Native `ErrorUtils` `isFatal`).
+     * Emitted as `$error_fatal`. Framework-set — takes precedence over `properties`.
+     */
+    fatal?: boolean;
+    /**
+     * Origin of the capture: `'boundary'`, `'global'`, `'rejection'`, or
+     * `'console'`. Emitted as `$error_source`. Framework-set — takes precedence
+     * over any value in `properties`.
+     */
+    source?: string;
 }
 /**
  * Normalize any thrown value into a SunGlasses `$error` event and capture it

package/dist/index.d.ts

@@ -533,8 +533,42 @@ interface ErrorEventProperties {
     $error_handled: boolean;
     /** Sentry-compatible severity level. Usually `'error'`. */
     $error_level: string;
-    /** Optional stringified stack trace. Disabled by default for privacy. */
+    /** Stringified stack trace (trimmed to `maxStackFrames`). On by default. */
     $error_stack?: string;
+    /**
+     * React component stack from `errorInfo.componentStack` (boundaries only).
+     * Populated when the error is caught by a `SunglassesErrorBoundary` or
+     * `SunglassesGlobalErrorBoundary`.
+     */
+    $error_component_stack?: string;
+    /**
+     * Serialized `error.cause` chain — each link formatted as `"Name: message"`,
+     * joined by `"\ncaused by: "`, depth-capped at 3 levels.
+     */
+    $error_cause?: string;
+    /**
+     * Custom enumerable properties on the Error object beyond the standard
+     * `message / name / stack / cause` keys (e.g. `code`, `statusCode`).
+     * Scalar values only (string/number/boolean); nested objects are skipped.
+     */
+    $error_extra?: Record<string, unknown>;
+    /**
+     * Whether the error was fatal (React Native `ErrorUtils` `isFatal` only).
+     * Absent on web.
+     */
+    $error_fatal?: boolean;
+    /**
+     * Where the error was captured: `'boundary'` (error boundary / component
+     * `componentDidCatch`), `'global'` (platform global handler), `'rejection'`
+     * (unhandled promise), or `'console'` (console patching).
+     */
+    $error_source?: string;
+    /** Source filename for web `window 'error'` events (`ErrorEvent.filename`). */
+    $error_filename?: string;
+    /** Source line number for web `window 'error'` events (`ErrorEvent.lineno`). */
+    $error_line?: number;
+    /** Source column number for web `window 'error'` events (`ErrorEvent.colno`). */
+    $error_column?: number;
     /** Allows adapter-specific extension properties (e.g. from `beforeCapture`). */
     [key: string]: unknown;
 }
@@ -676,7 +710,14 @@ declare class PiiSanitizer implements IMiddleware {
      * - Recurse into nested objects and arrays
      */
     private deepSanitizeValues;
-    private containsPii;
+    /**
+     * Replace every PII match in `value` with `'[redacted]'`, preserving the
+     * surrounding text. This is safer than whole-value redaction for stack traces
+     * and error messages that may contain PII alongside non-sensitive context.
+     *
+     * Each pattern must have the `g` (global) flag so all occurrences are replaced.
+     */
+    private maskPiiSubstrings;
 }
 
 interface Logger {
@@ -1148,8 +1189,9 @@ interface CaptureExceptionOptions {
     /** Sentry-compatible severity level. Default: `'error'`. */
     level?: string;
     /**
-     * Include the stack trace in `$error_stack`. Default: `false` (privacy-safe).
-     * Stack traces may expose internal file paths and function names.
+     * Include the stack trace in `$error_stack`. Default: `true`.
+     * Stack traces may expose internal file paths and function names; set to
+     * `false` to disable if your privacy policy requires it.
      */
     includeStack?: boolean;
     /**
@@ -1192,6 +1234,23 @@ interface CaptureExceptionOptions {
      * are dropped. Default: `1000`.
      */
     dedupeWindowMs?: number;
+    /**
+     * React component stack from `errorInfo.componentStack`, set by error
+     * boundaries. Emitted as `$error_component_stack`. Framework-set — takes
+     * precedence over any value in `properties`.
+     */
+    componentStack?: string;
+    /**
+     * Whether the error was fatal (React Native `ErrorUtils` `isFatal`).
+     * Emitted as `$error_fatal`. Framework-set — takes precedence over `properties`.
+     */
+    fatal?: boolean;
+    /**
+     * Origin of the capture: `'boundary'`, `'global'`, `'rejection'`, or
+     * `'console'`. Emitted as `$error_source`. Framework-set — takes precedence
+     * over any value in `properties`.
+     */
+    source?: string;
 }
 /**
  * Normalize any thrown value into a SunGlasses `$error` event and capture it

package/dist/index.js

@@ -678,13 +678,13 @@ var BUILTIN_DENIED_KEYS = /* @__PURE__ */ new Set([
 ]);
 var PII_PATTERNS = [
   // Email (requires letter-only TLD)
-  /[a-zA-Z0-9._%+\-]+@[a-zA-Z0-9.\-]+\.[a-zA-Z]{2,}/,
+  /[a-zA-Z0-9._%+\-]+@[a-zA-Z0-9.\-]+\.[a-zA-Z]{2,}/g,
   // Phone (US/international, various formats)
-  /(\+?1?\s?)?\(?\d{3}\)?[\s.\-]\d{3}[\s.\-]\d{4}/,
+  /(\+?1?\s?)?\(?\d{3}\)?[\s.\-]\d{3}[\s.\-]\d{4}/g,
   // IPv4
-  /\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\b/,
+  /\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\b/g,
   // Credit card (major formats: 16 digits with optional separators)
-  /\b\d{4}[- ]?\d{4}[- ]?\d{4}[- ]?\d{4}\b/
+  /\b\d{4}[- ]?\d{4}[- ]?\d{4}[- ]?\d{4}\b/g
 ];
 var PiiSanitizer = class {
   constructor(allowedProperties, deniedProperties) {
@@ -732,16 +732,25 @@ var PiiSanitizer = class {
       }
       return result;
     }
-    if (typeof value === "string" && this.containsPii(value)) {
-      return "[redacted]";
+    if (typeof value === "string") {
+      return this.maskPiiSubstrings(value);
     }
     return value;
   }
-  containsPii(value) {
+  /**
+   * Replace every PII match in `value` with `'[redacted]'`, preserving the
+   * surrounding text. This is safer than whole-value redaction for stack traces
+   * and error messages that may contain PII alongside non-sensitive context.
+   *
+   * Each pattern must have the `g` (global) flag so all occurrences are replaced.
+   */
+  maskPiiSubstrings(value) {
+    let result = value;
     for (const pattern of PII_PATTERNS) {
-      if (pattern.test(value)) return true;
+      pattern.lastIndex = 0;
+      result = result.replace(pattern, "[redacted]");
     }
-    return false;
+    return result;
   }
 };
 
@@ -1614,6 +1623,47 @@ function extractStack(stack, maxFrames) {
   }
   return void 0;
 }
+var STANDARD_ERROR_KEYS = /* @__PURE__ */ new Set(["message", "name", "stack", "cause"]);
+var MAX_EXTRA_PROPS = 20;
+function extractErrorExtras(error, maxMessageLength) {
+  const extras = {};
+  let count = 0;
+  for (const key of Object.getOwnPropertyNames(error)) {
+    if (STANDARD_ERROR_KEYS.has(key)) continue;
+    if (count >= MAX_EXTRA_PROPS) break;
+    const val = error[key];
+    const t = typeof val;
+    if (t === "string") {
+      extras[key] = val.slice(0, maxMessageLength);
+      count++;
+    } else if (t === "number" || t === "boolean") {
+      extras[key] = val;
+      count++;
+    }
+  }
+  return count > 0 ? extras : void 0;
+}
+function serializeCauseChain(error, maxDepth, maxMessageLength) {
+  if (!(error instanceof Error) || !("cause" in error)) return void 0;
+  const parts = [];
+  let current = error.cause;
+  for (let depth = 0; depth < maxDepth && current != null; depth++) {
+    if (current instanceof Error) {
+      parts.push(`${current.name}: ${current.message.slice(0, maxMessageLength)}`);
+      current = "cause" in current ? current.cause : void 0;
+    } else if (typeof current === "string") {
+      parts.push(current.slice(0, maxMessageLength));
+      break;
+    } else if (current && typeof current === "object" && "message" in current) {
+      parts.push(String(current.message).slice(0, maxMessageLength));
+      break;
+    } else {
+      parts.push(String(current).slice(0, maxMessageLength));
+      break;
+    }
+  }
+  return parts.length > 0 ? parts.join("\ncaused by: ") : void 0;
+}
 var dedupeStore = /* @__PURE__ */ new WeakMap();
 function isDuplicate(client, fingerprint, windowMs) {
   const now = Date.now();
@@ -1634,14 +1684,17 @@ function captureException(client, error, options = {}) {
   const {
     handled = true,
     level = "error",
-    includeStack = false,
+    includeStack = true,
     maxStackFrames = 5,
     maxMessageLength = 200,
     ignorePatterns = [],
     properties,
     beforeCapture,
     dedupe = true,
-    dedupeWindowMs = 1e3
+    dedupeWindowMs = 1e3,
+    componentStack,
+    fatal,
+    source
   } = options;
   const normalized = normalizeError(error);
   const rawMessage = normalized.message;
@@ -1662,6 +1715,15 @@ function captureException(client, error, options = {}) {
     const frames = extractStack(normalized.stack, maxStackFrames);
     if (frames) props = { ...props, $error_stack: frames };
   }
+  const cause = serializeCauseChain(error, 3, maxMessageLength);
+  if (cause) props = { ...props, $error_cause: cause };
+  if (error instanceof Error) {
+    const extra = extractErrorExtras(error, maxMessageLength);
+    if (extra) props = { ...props, $error_extra: extra };
+  }
+  if (componentStack) props = { ...props, $error_component_stack: componentStack };
+  if (fatal !== void 0) props = { ...props, $error_fatal: fatal };
+  if (source) props = { ...props, $error_source: source };
   if (beforeCapture) {
     const transformed = beforeCapture(props);
     if (!transformed) return;
@@ -1693,7 +1755,7 @@ function patchConsole(client, options = {}) {
     levels = ["error"],
     ignorePatterns = [],
     maxMessageLength = 200,
-    includeStack = false,
+    includeStack = true,
     properties
   } = options;
   const uniqueLevels = Array.from(new Set(levels));
@@ -1716,7 +1778,8 @@ function patchConsole(client, options = {}) {
           level: LEVEL_TO_SEVERITY[level],
           includeStack,
           maxMessageLength,
-          properties: { ...properties, $error_source: "console" }
+          source: "console",
+          properties
         });
       } finally {
         isCapturing = false;

package/dist/index.mjs

@@ -631,13 +631,13 @@ var BUILTIN_DENIED_KEYS = /* @__PURE__ */ new Set([
 ]);
 var PII_PATTERNS = [
   // Email (requires letter-only TLD)
-  /[a-zA-Z0-9._%+\-]+@[a-zA-Z0-9.\-]+\.[a-zA-Z]{2,}/,
+  /[a-zA-Z0-9._%+\-]+@[a-zA-Z0-9.\-]+\.[a-zA-Z]{2,}/g,
   // Phone (US/international, various formats)
-  /(\+?1?\s?)?\(?\d{3}\)?[\s.\-]\d{3}[\s.\-]\d{4}/,
+  /(\+?1?\s?)?\(?\d{3}\)?[\s.\-]\d{3}[\s.\-]\d{4}/g,
   // IPv4
-  /\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\b/,
+  /\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\b/g,
   // Credit card (major formats: 16 digits with optional separators)
-  /\b\d{4}[- ]?\d{4}[- ]?\d{4}[- ]?\d{4}\b/
+  /\b\d{4}[- ]?\d{4}[- ]?\d{4}[- ]?\d{4}\b/g
 ];
 var PiiSanitizer = class {
   constructor(allowedProperties, deniedProperties) {
@@ -685,16 +685,25 @@ var PiiSanitizer = class {
       }
       return result;
     }
-    if (typeof value === "string" && this.containsPii(value)) {
-      return "[redacted]";
+    if (typeof value === "string") {
+      return this.maskPiiSubstrings(value);
     }
     return value;
   }
-  containsPii(value) {
+  /**
+   * Replace every PII match in `value` with `'[redacted]'`, preserving the
+   * surrounding text. This is safer than whole-value redaction for stack traces
+   * and error messages that may contain PII alongside non-sensitive context.
+   *
+   * Each pattern must have the `g` (global) flag so all occurrences are replaced.
+   */
+  maskPiiSubstrings(value) {
+    let result = value;
     for (const pattern of PII_PATTERNS) {
-      if (pattern.test(value)) return true;
+      pattern.lastIndex = 0;
+      result = result.replace(pattern, "[redacted]");
     }
-    return false;
+    return result;
   }
 };
 
@@ -1567,6 +1576,47 @@ function extractStack(stack, maxFrames) {
   }
   return void 0;
 }
+var STANDARD_ERROR_KEYS = /* @__PURE__ */ new Set(["message", "name", "stack", "cause"]);
+var MAX_EXTRA_PROPS = 20;
+function extractErrorExtras(error, maxMessageLength) {
+  const extras = {};
+  let count = 0;
+  for (const key of Object.getOwnPropertyNames(error)) {
+    if (STANDARD_ERROR_KEYS.has(key)) continue;
+    if (count >= MAX_EXTRA_PROPS) break;
+    const val = error[key];
+    const t = typeof val;
+    if (t === "string") {
+      extras[key] = val.slice(0, maxMessageLength);
+      count++;
+    } else if (t === "number" || t === "boolean") {
+      extras[key] = val;
+      count++;
+    }
+  }
+  return count > 0 ? extras : void 0;
+}
+function serializeCauseChain(error, maxDepth, maxMessageLength) {
+  if (!(error instanceof Error) || !("cause" in error)) return void 0;
+  const parts = [];
+  let current = error.cause;
+  for (let depth = 0; depth < maxDepth && current != null; depth++) {
+    if (current instanceof Error) {
+      parts.push(`${current.name}: ${current.message.slice(0, maxMessageLength)}`);
+      current = "cause" in current ? current.cause : void 0;
+    } else if (typeof current === "string") {
+      parts.push(current.slice(0, maxMessageLength));
+      break;
+    } else if (current && typeof current === "object" && "message" in current) {
+      parts.push(String(current.message).slice(0, maxMessageLength));
+      break;
+    } else {
+      parts.push(String(current).slice(0, maxMessageLength));
+      break;
+    }
+  }
+  return parts.length > 0 ? parts.join("\ncaused by: ") : void 0;
+}
 var dedupeStore = /* @__PURE__ */ new WeakMap();
 function isDuplicate(client, fingerprint, windowMs) {
   const now = Date.now();
@@ -1587,14 +1637,17 @@ function captureException(client, error, options = {}) {
   const {
     handled = true,
     level = "error",
-    includeStack = false,
+    includeStack = true,
     maxStackFrames = 5,
     maxMessageLength = 200,
     ignorePatterns = [],
     properties,
     beforeCapture,
     dedupe = true,
-    dedupeWindowMs = 1e3
+    dedupeWindowMs = 1e3,
+    componentStack,
+    fatal,
+    source
   } = options;
   const normalized = normalizeError(error);
   const rawMessage = normalized.message;
@@ -1615,6 +1668,15 @@ function captureException(client, error, options = {}) {
     const frames = extractStack(normalized.stack, maxStackFrames);
     if (frames) props = { ...props, $error_stack: frames };
   }
+  const cause = serializeCauseChain(error, 3, maxMessageLength);
+  if (cause) props = { ...props, $error_cause: cause };
+  if (error instanceof Error) {
+    const extra = extractErrorExtras(error, maxMessageLength);
+    if (extra) props = { ...props, $error_extra: extra };
+  }
+  if (componentStack) props = { ...props, $error_component_stack: componentStack };
+  if (fatal !== void 0) props = { ...props, $error_fatal: fatal };
+  if (source) props = { ...props, $error_source: source };
   if (beforeCapture) {
     const transformed = beforeCapture(props);
     if (!transformed) return;
@@ -1646,7 +1708,7 @@ function patchConsole(client, options = {}) {
     levels = ["error"],
     ignorePatterns = [],
     maxMessageLength = 200,
-    includeStack = false,
+    includeStack = true,
     properties
   } = options;
   const uniqueLevels = Array.from(new Set(levels));
@@ -1669,7 +1731,8 @@ function patchConsole(client, options = {}) {
           level: LEVEL_TO_SEVERITY[level],
           includeStack,
           maxMessageLength,
-          properties: { ...properties, $error_source: "console" }
+          source: "console",
+          properties
         });
       } finally {
         isCapturing = false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@drakkar.software/sunglasses-core",
-  "version": "0.12.0",
+  "version": "0.14.0",
   "description": "Platform-agnostic event tracking engine for SunGlasses",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",