@edraj/sauron-browser 1.0.0 → 1.4.0

package/CHANGELOG.md

@@ -2,6 +2,78 @@
 
 All notable changes to `@edraj/sauron-browser` are documented here.
 
+## 1.4.0
+
+### Fixed
+
+- **`captureMessage()` poisoned the entire envelope.** It sent an `exception`
+  block with `type: null`, but the gateway's `ExceptionInfo.ty` is a
+  non-optional string with no default, so the envelope failed to deserialize and
+  was rejected whole (`400 invalid_envelope`) — taking every unrelated error,
+  event and transaction batched alongside it. Every SDK treats a 400 as
+  non-retryable, so the batch was dropped without a retry and without a trace.
+  A message item now carries no `exception` block at all and puts its text in
+  `message`, which is the shape the Python SDK already sent.
+
+  Worth knowing before you upgrade: this also changes server-side grouping.
+  Messages now fingerprint on their normalized text instead of piling into one
+  bucket keyed by a synthetic exception type, so existing message issues will
+  re-split into separate issues.
+- **A failed offline-queue drain silently deleted the rest of the backlog.**
+  `drain()` empties `localStorage` in one shot, so from that point the parked
+  envelopes exist only in a local array — and a send failure re-parked just the
+  payload that had failed before returning, discarding every payload behind it.
+  The whole untried remainder is now re-parked, at the head, preserving the
+  oldest-first order the byte-cap eviction policy depends on. This is the plain
+  reconnect-then-one-500 case the queue exists for. A 401/403 mid-drain now
+  keeps the backlog too — the credentials may be fixed and the client
+  re-inited — and logs a warning instead of disabling in silence.
+
+### Changed
+
+- The anonymous id is now persisted in `localStorage` under `sauron.anon_id`
+  instead of being re-minted in memory on every page load. **Every web app's
+  reported active-user count drops sharply and permanently on the day this is
+  adopted** — the old behaviour counted page loads, not people (a 5-10x
+  inflation, all of it in the "guest" half of the Active Users report). The
+  drop is a data artifact, not a regression.
+- The anonymous id is a durable first-party identifier stored on the user's
+  terminal. That is a retention and consent consequence, not just an
+  implementation detail.
+- `ExceptionValue.type` is `string`, no longer `string | null`, and `ErrorItem`
+  gained an optional `message`. A TypeScript caller that builds these by hand
+  will now see a type error where it previously compiled — passing `null` there
+  is precisely what produced the envelope rejection above.
+
+### Added
+
+- `reset()` — clears the scope user and mints a fresh anonymous id.
+  **Call it on logout.** `setUser(null)` now calls it for you. Without it, the
+  next anonymous visitor on a shared browser reuses the persisted id and a
+  later `identify()` aliases their activity to the previous account,
+  server-side, permanently.
+- `anonymous_id` is sent on the identify item only when the anonymous id was
+  actually used as a `distinct_id` in this browser session.
+
+## 1.3.0
+
+- **Workflows** — bound a named span of activity with start / end / cancel, and
+  read the active one back. Every event, error and transaction captured while a
+  workflow is active is stamped with its `workflow_id` / `workflow_name`, so the
+  dashboard can group a whole flow (`checkout`, `password_reset`, …) as one unit.
+  Entirely optional: an app that never starts a workflow behaves exactly as before.
+- **`beforeSend` can no longer throw into your app.** A hook that raises is logged
+  and the item is sent unmodified, rather than the exception escaping through the
+  capture call. Returning `null` still drops the item as before.
+
+## 1.2.0
+
+- **Breaking: the `environment` option has been removed.** An environment is now
+  identified by the ingest key it belongs to, not by a string the client sends.
+  Create environments in the dashboard under app settings; each one has its own
+  DSN. Delete `environment` from your `init` call and swap in the DSN of the
+  environment you want to report to.
+
 ## 1.0.0 - 2026-07-27
 
 First public release. Prior `0.x` versions were internal-only and were never