@fixback/sdk-core 0.2.0 → 0.3.0

package/README.md

@@ -1,19 +1,38 @@
 # @fixback/sdk-core
 
-The small, runtime-agnostic core shared by the Fixback capture SDKs
-(`@fixback/sdk` today; `@fixback/node` next). It holds the **pure** capture logic
-so every surface computes it the same way (ADR-0028):
+The runtime-agnostic core shared by every Fixback SDK — `@fixback/sdk`,
+`@fixback/expo`, `@fixback/node`, and the build-time `@fixback/cli`. It holds the
+capture logic none of them should own privately, so every surface computes it the
+same way (ADR-0028):
 
-- **Fingerprinting** — `computeFingerprint` and its `normalize` / `extractTopFrames`
-  helpers, so the same logical error groups identically across surfaces
-  (ADR-0027).
+- **Fingerprinting** — `computeFingerprint` and its `normalize` /
+  `extractTopFrames` helpers, so the same logical error groups identically across
+  surfaces (ADR-0027).
+- **Stack parsing** — one frame tokenizer (`parseStackLine`) behind the
+  fingerprint, the console call site, and `extractStructuredFrames` (the frames
+  server-side symbolication consumes).
 - **Scrubbing** — `scrubUrl`, `redactPii`, and the `runBeforeSend` choke point.
+- **The trace buffer** — `createBreadcrumbBuffer`'s three per-stream rings, the
+  crumb builders (`consoleCrumb`, `networkCrumb`, `navigationCrumb`,
+  `errorCrumb`, …), the structured console-arg caps, and `instrumentConsole`.
+- **Automatic error capture** — `createAutoCapture`: the dedup, token-bucket
+  burst limiter, session cap, causal error crumb, and occurrence flush each SDK's
+  `installErrorCapture` binds its runtime's error seam to.
 - **Backoff** — `AutoReportBackoff` + `parseRetryAfter`, honouring ingest's
   `429` / `Retry-After` backpressure.
+- **The ingest boot contract** — `requestBoot`, `bootEndpoint` /
+  `feedbackEndpoint`, `BootAnswer`, and `isFixbackApiRequest`.
+- **The shared init vocabulary** — `DEFAULT_API_URL`, `CommonInitOptions`,
+  `normaliseRelease`, and the anonymous-id key + generator.
 - **Wire shapes** — `ReportContent`, `CapturedFrame`, the `Annotation` /
   `Breadcrumb` value types, and the provenance vocabulary (`FeedbackSource`,
   `Platform`).
 
-It is deliberately **runtime-agnostic**: no DOM, no Node built-ins, no rrweb —
-those live in the consuming SDKs. This is an internal implementation package for
-the Fixback SDK family, not a public API.
+It is deliberately **runtime-agnostic**: no DOM, no Node built-ins, no rrweb.
+Every runtime touchpoint is either injected (a `console`, a `fetch`, a storage
+binding) or probed defensively off `globalThis` (`performance`, `TextEncoder`,
+`crypto`). This is an internal implementation package for the Fixback SDK family,
+not a public API.
+
+📖 Documentation for the SDKs that build on this core:
+[docs.fixback.dev](https://docs.fixback.dev).

package/{src/annotation.ts → dist/annotation.d.ts}

@@ -13,92 +13,81 @@
  * consuming SDK. Keep these in lock-step with the server's ingest contract
  * (spec §D/§H).
  */
-
 /** A point in screenshot (viewport) coordinate space. */
 export interface Point {
-  readonly x: number;
-  readonly y: number;
+    readonly x: number;
+    readonly y: number;
 }
-
 /** A rectangle in screenshot coordinates — the same shape as an element's rect. */
 export interface Rect {
-  readonly x: number;
-  readonly y: number;
-  readonly width: number;
-  readonly height: number;
+    readonly x: number;
+    readonly y: number;
+    readonly width: number;
+    readonly height: number;
 }
-
 /** The picked element's viewport rectangle, as the server's annotation `rect`. */
 export interface ElementRect {
-  readonly x: number;
-  readonly y: number;
-  readonly width: number;
-  readonly height: number;
+    readonly x: number;
+    readonly y: number;
+    readonly width: number;
+    readonly height: number;
 }
-
 /**
  * The picked element — the `element` layer of an {@link Annotation}: a stable CSS
  * selector, a readable DOM path, the tag, and the bounding rect. Exactly the
  * server's annotation `element` object shape.
  */
 export interface SelectedElement {
-  readonly selector: string;
-  readonly domPath: string;
-  readonly tag: string;
-  readonly rect: ElementRect;
+    readonly selector: string;
+    readonly domPath: string;
+    readonly tag: string;
+    readonly rect: ElementRect;
 }
-
 /** The draw tools the overlay offers, in toolbar order (spec §B, prototype). */
 export type DrawTool = "arrow" | "box" | "pen" | "text";
-
 /** Fields shared by every vector mark. */
 interface MarkBase {
-  /** Stroke/fill colour, as a CSS colour string. */
-  readonly color: string;
+    /** Stroke/fill colour, as a CSS colour string. */
+    readonly color: string;
 }
-
 /** A directional arrow from `(x0,y0)` to its tip at `(x1,y1)`. */
 export interface ArrowMark extends MarkBase {
-  readonly type: "arrow";
-  readonly x0: number;
-  readonly y0: number;
-  readonly x1: number;
-  readonly y1: number;
+    readonly type: "arrow";
+    readonly x0: number;
+    readonly y0: number;
+    readonly x1: number;
+    readonly y1: number;
 }
-
 /** A rectangle spanning the drag from `(x0,y0)` to `(x1,y1)`. */
 export interface BoxMark extends MarkBase {
-  readonly type: "box";
-  readonly x0: number;
-  readonly y0: number;
-  readonly x1: number;
-  readonly y1: number;
+    readonly type: "box";
+    readonly x0: number;
+    readonly y0: number;
+    readonly x1: number;
+    readonly y1: number;
 }
-
 /** A freehand polyline through `points` (in order). */
 export interface PenMark extends MarkBase {
-  readonly type: "pen";
-  readonly points: ReadonlyArray<Point>;
+    readonly type: "pen";
+    readonly points: ReadonlyArray<Point>;
 }
-
 /** A text label anchored at `(x,y)` (its baseline-left, as SVG text). */
 export interface TextMark extends MarkBase {
-  readonly type: "text";
-  readonly x: number;
-  readonly y: number;
-  readonly text: string;
+    readonly type: "text";
+    readonly x: number;
+    readonly y: number;
+    readonly text: string;
 }
-
 /** A single vector mark, in screenshot coordinates. */
 export type Mark = ArrowMark | BoxMark | PenMark | TextMark;
-
 /**
  * The structured Annotation carried on a report's content (spec §D): the three
  * optional layers. Every field is optional — a report may carry any subset or
  * none (a bare comment is a valid Send).
  */
 export interface Annotation {
-  readonly element?: SelectedElement;
-  readonly region?: Rect;
-  readonly marks?: ReadonlyArray<Mark>;
+    readonly element?: SelectedElement;
+    readonly region?: Rect;
+    readonly marks?: ReadonlyArray<Mark>;
 }
+export {};

package/dist/anonymous-id.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The Public Reporter's stable, first-party **anonymous id** (ADR-0028) — the key
+ * and the generator, shared by every capture SDK.
+ *
+ * When the host app supplies no identity of its own, an SDK establishes a
+ * per-device id and persists it, so repeated boots from the same device are one
+ * Reporter (the server counts distinct Reporters by it). The *storage binding*
+ * stays runtime-specific — `localStorage` in a browser, AsyncStorage on React
+ * Native — because one is synchronous and the other is not; only the key and the
+ * id shape are shared, so the value looks the same across clients.
+ *
+ * Persistence is best-effort everywhere: when storage is unavailable (private
+ * mode, blocked cookies, an absent native module) the SDK falls back to an
+ * ephemeral id rather than throwing — capture must never disturb the host app.
+ */
+/** The storage key every SDK persists the anonymous id under. */
+export declare const ANONYMOUS_ID_STORAGE_KEY = "fixback.anonymousId";
+/**
+ * A random id: a UUID where the platform offers one, else a compact
+ * timestamp+random fallback. `crypto.randomUUID` is read off `globalThis` and
+ * called defensively — it throws in some non-secure contexts.
+ */
+export declare function generateAnonymousId(): string;

package/dist/anonymous-id.js

@@ -0,0 +1,39 @@
+"use strict";
+/**
+ * The Public Reporter's stable, first-party **anonymous id** (ADR-0028) — the key
+ * and the generator, shared by every capture SDK.
+ *
+ * When the host app supplies no identity of its own, an SDK establishes a
+ * per-device id and persists it, so repeated boots from the same device are one
+ * Reporter (the server counts distinct Reporters by it). The *storage binding*
+ * stays runtime-specific — `localStorage` in a browser, AsyncStorage on React
+ * Native — because one is synchronous and the other is not; only the key and the
+ * id shape are shared, so the value looks the same across clients.
+ *
+ * Persistence is best-effort everywhere: when storage is unavailable (private
+ * mode, blocked cookies, an absent native module) the SDK falls back to an
+ * ephemeral id rather than throwing — capture must never disturb the host app.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ANONYMOUS_ID_STORAGE_KEY = void 0;
+exports.generateAnonymousId = generateAnonymousId;
+/** The storage key every SDK persists the anonymous id under. */
+exports.ANONYMOUS_ID_STORAGE_KEY = "fixback.anonymousId";
+/**
+ * A random id: a UUID where the platform offers one, else a compact
+ * timestamp+random fallback. `crypto.randomUUID` is read off `globalThis` and
+ * called defensively — it throws in some non-secure contexts.
+ */
+function generateAnonymousId() {
+    const c = globalThis.crypto;
+    if (c && typeof c.randomUUID === "function") {
+        try {
+            return c.randomUUID();
+        }
+        catch {
+            // Fall through to the compact fallback.
+        }
+    }
+    return `fb-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;
+}
+//# sourceMappingURL=anonymous-id.js.map

package/dist/anonymous-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anonymous-id.js","sourceRoot":"","sources":["../src/anonymous-id.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAUH,kDAUC;AAlBD,iEAAiE;AACpD,QAAA,wBAAwB,GAAG,qBAAqB,CAAC;AAE9D;;;;GAIG;AACH,SAAgB,mBAAmB;IACjC,MAAM,CAAC,GAAI,UAAyD,CAAC,MAAM,CAAC;IAC5E,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpF,CAAC"}

package/dist/auto-capture.d.ts

@@ -0,0 +1,129 @@
+/**
+ * The **automatic error-capture state machine** (spec 0003 §E, ADR-0011; research
+ * `sentry-error-capture-findings.md` §7.1–7.3) — the shared, runtime-agnostic half
+ * of "errors report themselves, no prompt" (ADR-0028).
+ *
+ * Every SDK's `installErrorCapture` is now a thin binding over this: it supplies
+ * the runtime's error seam (window listeners, React Native's `ErrorUtils`), an
+ * {@link AutoCaptureCoreConfig.extract} that distils that runtime's raw event into
+ * an {@link ExtractedError}, and an {@link AutoCaptureCoreConfig.submit} that ships
+ * one assembled report. Everything between — the per-session fingerprint dedup, the
+ * token-bucket burst limiter, the distinct-error session cap, the causal error
+ * crumb, the optimistic `sentCount` with rollback on a failed send, and the
+ * occurrence flush — lives here, once.
+ *
+ * Per-firing order (research §7.1): **dedup → rate-limit/cap → file**. The Gate
+ * check sits *outside*: a binding installs capture only after boot returned
+ * `canSubmit`, so an auto-error is never filed where a manual report would be
+ * refused. The scrub choke point sits *inside* `submit`, which each binding routes
+ * through `runBeforeSend` exactly as a manual report does.
+ *
+ * Nothing here throws: `capture` and `flush` swallow every failure, because an
+ * error raised while capturing an error must never surface in the host app.
+ */
+import type { Breadcrumb } from "./breadcrumb";
+import type { BreadcrumbBuffer } from "./trace/buffer";
+import type { CapturedFrame } from "./wire";
+/** Burst limiter capacity — how many auto-reports may fire back-to-back (§E). */
+export declare const DEFAULT_BURST_CAPACITY = 5;
+/** Burst limiter refill — one token returns every this-many ms (§E). */
+export declare const DEFAULT_BURST_REFILL_MS = 2000;
+/** Per-session ceiling on distinct auto-Feedback; beyond it, only a dropped-count (§E). */
+export declare const DEFAULT_MAX_DISTINCT_AUTO = 20;
+/** How many preceding entries an auto-error's causal pointer names (spec #122 §F). */
+export declare const CAUSED_BY_LIMIT = 5;
+/** Coerce any value to a string without throwing (a hostile `toString` can throw). */
+export declare function asString(value: unknown): string;
+/**
+ * The ids of up to the last {@link CAUSED_BY_LIMIT} entries preceding the throw, in
+ * time order — the causal pointer an auto-captured error carries (spec #122 §F), so a
+ * machine-filed crash names its lead-up. Entries without an id are skipped.
+ */
+export declare function precedingIds(entries: readonly Breadcrumb[] | undefined): string[];
+/** Configuration for {@link TokenBucket}. */
+export interface TokenBucketOptions {
+    readonly capacity: number;
+    readonly refillIntervalMs: number;
+    /** Clock source, injectable for tests. Defaults to `Date.now`. */
+    readonly now?: () => number;
+}
+/**
+ * A token bucket: starts full at `capacity`, refills one token every
+ * `refillIntervalMs`, and refuses (`take() === false`) when empty. So a fast error
+ * loop that dodges dedup with distinct fingerprints still can't machine-gun ingest.
+ * The clock is injectable so the window is unit-tested deterministically.
+ */
+export declare class TokenBucket {
+    private readonly options;
+    private tokens;
+    private last;
+    private readonly now;
+    constructor(options: TokenBucketOptions);
+    /** Consume a token if one is available (refilling first), else refuse. */
+    take(): boolean;
+}
+/** The distilled shape a fingerprint and a report are built from. */
+export interface ExtractedError {
+    readonly type: string;
+    readonly value: string;
+    readonly stack?: string;
+    /** The original throwable (Error, rejection reason, thrown string) for the trace crumb. */
+    readonly original: unknown;
+}
+/** One report the binding is asked to assemble, scrub, and ship. */
+export interface AutoReport {
+    /** The per-session fingerprint — the report's `errorSignature`. */
+    readonly fingerprint: string;
+    /** The occurrence count this send claims. */
+    readonly occurrences: number;
+    /**
+     * A **rich first report** (`true`) versus a light count-update flush (`false`).
+     * The trace, the structured frames, and (on the web) the buffered replay window
+     * ride only with the rich send; a flush is just the number.
+     */
+    readonly rich: boolean;
+    /**
+     * The structured stack frames parsed once from the fingerprint's first firing
+     * (#117, ADR-0024). Empty when the stack yielded none.
+     */
+    readonly frames: readonly CapturedFrame[];
+}
+/** Configuration for {@link createAutoCapture}, parameterised over the runtime's raw event. */
+export interface AutoCaptureCoreConfig<Raw> {
+    /**
+     * Distil the runtime's raw error event into a fingerprint-able shape, or `null`
+     * when it is not an uncaught exception at all (a resource-load `error` event).
+     */
+    readonly extract: (raw: Raw) => ExtractedError | null;
+    /**
+     * Assemble, scrub, and ship one report. Resolve `true` when it was accepted (or
+     * intentionally dropped at the scrub choke point — either way there is nothing to
+     * retry), `false` when it was held, refused, or unreachable, which rolls the
+     * entry's `sentCount` back so a later flush retries the count update.
+     */
+    readonly submit: (report: AutoReport) => Promise<boolean>;
+    /** The shared trace buffer; the failing error is added to it before filing. */
+    readonly buffer?: BreadcrumbBuffer | null;
+    /** Burst limiter capacity. Defaults to {@link DEFAULT_BURST_CAPACITY}. */
+    readonly burstCapacity?: number;
+    /** Burst limiter refill interval (ms). Defaults to {@link DEFAULT_BURST_REFILL_MS}. */
+    readonly burstRefillMs?: number;
+    /** Per-session distinct-Feedback cap. Defaults to {@link DEFAULT_MAX_DISTINCT_AUTO}. */
+    readonly maxDistinct?: number;
+    /** Clock source, injectable for tests. Defaults to `Date.now`. */
+    readonly now?: () => number;
+}
+/** The running state machine a binding drives from its runtime's error seam. */
+export interface AutoCaptureCore<Raw> {
+    /** Handle one raw error event: extract → dedup → rate-limit/cap → file. Never throws. */
+    capture(raw: Raw): void;
+    /** Flush the final occurrence count of every fingerprint that grew since its send. */
+    flush(): void;
+    /**
+     * Distinct auto-Feedback dropped by the burst limiter or the per-session cap —
+     * the "keep only a local dropped-count" fallback beyond the guardrails (spec §E).
+     */
+    droppedCount(): number;
+}
+/** Create the shared auto-capture state machine. See the module doc. */
+export declare function createAutoCapture<Raw>(config: AutoCaptureCoreConfig<Raw>): AutoCaptureCore<Raw>;

package/dist/auto-capture.js

@@ -0,0 +1,210 @@
+"use strict";
+/**
+ * The **automatic error-capture state machine** (spec 0003 §E, ADR-0011; research
+ * `sentry-error-capture-findings.md` §7.1–7.3) — the shared, runtime-agnostic half
+ * of "errors report themselves, no prompt" (ADR-0028).
+ *
+ * Every SDK's `installErrorCapture` is now a thin binding over this: it supplies
+ * the runtime's error seam (window listeners, React Native's `ErrorUtils`), an
+ * {@link AutoCaptureCoreConfig.extract} that distils that runtime's raw event into
+ * an {@link ExtractedError}, and an {@link AutoCaptureCoreConfig.submit} that ships
+ * one assembled report. Everything between — the per-session fingerprint dedup, the
+ * token-bucket burst limiter, the distinct-error session cap, the causal error
+ * crumb, the optimistic `sentCount` with rollback on a failed send, and the
+ * occurrence flush — lives here, once.
+ *
+ * Per-firing order (research §7.1): **dedup → rate-limit/cap → file**. The Gate
+ * check sits *outside*: a binding installs capture only after boot returned
+ * `canSubmit`, so an auto-error is never filed where a manual report would be
+ * refused. The scrub choke point sits *inside* `submit`, which each binding routes
+ * through `runBeforeSend` exactly as a manual report does.
+ *
+ * Nothing here throws: `capture` and `flush` swallow every failure, because an
+ * error raised while capturing an error must never surface in the host app.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenBucket = exports.CAUSED_BY_LIMIT = exports.DEFAULT_MAX_DISTINCT_AUTO = exports.DEFAULT_BURST_REFILL_MS = exports.DEFAULT_BURST_CAPACITY = void 0;
+exports.asString = asString;
+exports.precedingIds = precedingIds;
+exports.createAutoCapture = createAutoCapture;
+const fingerprint_1 = require("./fingerprint");
+const stack_1 = require("./stack");
+const crumbs_1 = require("./trace/crumbs");
+/** Burst limiter capacity — how many auto-reports may fire back-to-back (§E). */
+exports.DEFAULT_BURST_CAPACITY = 5;
+/** Burst limiter refill — one token returns every this-many ms (§E). */
+exports.DEFAULT_BURST_REFILL_MS = 2_000;
+/** Per-session ceiling on distinct auto-Feedback; beyond it, only a dropped-count (§E). */
+exports.DEFAULT_MAX_DISTINCT_AUTO = 20;
+/** How many preceding entries an auto-error's causal pointer names (spec #122 §F). */
+exports.CAUSED_BY_LIMIT = 5;
+/** Coerce any value to a string without throwing (a hostile `toString` can throw). */
+function asString(value) {
+    if (typeof value === "string")
+        return value;
+    if (value == null)
+        return "";
+    try {
+        return String(value);
+    }
+    catch {
+        return "";
+    }
+}
+/**
+ * The ids of up to the last {@link CAUSED_BY_LIMIT} entries preceding the throw, in
+ * time order — the causal pointer an auto-captured error carries (spec #122 §F), so a
+ * machine-filed crash names its lead-up. Entries without an id are skipped.
+ */
+function precedingIds(entries) {
+    if (!entries || entries.length === 0)
+        return [];
+    const ids = [];
+    for (let i = entries.length - 1; i >= 0 && ids.length < exports.CAUSED_BY_LIMIT; i -= 1) {
+        const id = entries[i]?.id;
+        if (typeof id === "string" && id.length > 0)
+            ids.unshift(id);
+    }
+    return ids;
+}
+/**
+ * A token bucket: starts full at `capacity`, refills one token every
+ * `refillIntervalMs`, and refuses (`take() === false`) when empty. So a fast error
+ * loop that dodges dedup with distinct fingerprints still can't machine-gun ingest.
+ * The clock is injectable so the window is unit-tested deterministically.
+ */
+class TokenBucket {
+    options;
+    tokens;
+    last;
+    now;
+    constructor(options) {
+        this.options = options;
+        this.now = options.now ?? Date.now;
+        this.tokens = Math.max(0, options.capacity);
+        this.last = this.now();
+    }
+    /** Consume a token if one is available (refilling first), else refuse. */
+    take() {
+        const now = this.now();
+        const { capacity, refillIntervalMs } = this.options;
+        if (refillIntervalMs > 0 && now > this.last) {
+            const refill = Math.floor((now - this.last) / refillIntervalMs);
+            if (refill > 0) {
+                this.tokens = Math.min(capacity, this.tokens + refill);
+                this.last += refill * refillIntervalMs;
+            }
+        }
+        if (this.tokens >= 1) {
+            this.tokens -= 1;
+            return true;
+        }
+        return false;
+    }
+}
+exports.TokenBucket = TokenBucket;
+/** Create the shared auto-capture state machine. See the module doc. */
+function createAutoCapture(config) {
+    const now = config.now ?? Date.now;
+    const maxDistinct = config.maxDistinct ?? exports.DEFAULT_MAX_DISTINCT_AUTO;
+    const bucket = new TokenBucket({
+        capacity: config.burstCapacity ?? exports.DEFAULT_BURST_CAPACITY,
+        refillIntervalMs: config.burstRefillMs ?? exports.DEFAULT_BURST_REFILL_MS,
+        now,
+    });
+    const seen = new Map();
+    let dropped = 0;
+    /**
+     * Ship one report for a fingerprint at a given count. Sets the entry's `sentCount`
+     * optimistically so a concurrent flush never double-sends, and rolls it back on a
+     * failed send so a later flush can retry the count update.
+     */
+    async function file(fingerprint, occurrences, rich) {
+        const entry = seen.get(fingerprint);
+        if (!entry)
+            return;
+        const previouslySent = entry.sentCount;
+        entry.sentCount = occurrences;
+        try {
+            const accepted = await config.submit({
+                fingerprint,
+                occurrences,
+                rich,
+                frames: entry.frames,
+            });
+            if (!accepted && entry.sentCount === occurrences) {
+                entry.sentCount = previouslySent;
+            }
+        }
+        catch {
+            if (entry.sentCount === occurrences)
+                entry.sentCount = previouslySent;
+            // The error path must never throw into the host app.
+        }
+    }
+    /** Handle one distilled error: dedup → burst limiter → session cap → file. */
+    function handle(extracted) {
+        const fingerprint = (0, fingerprint_1.computeFingerprint)(extracted.type, extracted.value, extracted.stack);
+        const existing = seen.get(fingerprint);
+        if (existing) {
+            // Dedup: one Feedback per fingerprint per session; count locally, flush later.
+            existing.count += 1;
+            existing.lastAt = now();
+            return;
+        }
+        if (!bucket.take()) {
+            dropped += 1; // burst limiter
+            return;
+        }
+        if (seen.size >= maxDistinct) {
+            dropped += 1; // per-session cap — keep only the local dropped-count
+            return;
+        }
+        const at = now();
+        seen.set(fingerprint, {
+            count: 1,
+            firstAt: at,
+            lastAt: at,
+            sentCount: 0,
+            // Parsed once per fingerprint, from the first firing's stack (#117) — the
+            // wire shape symbolication consumes, scrubbed like every captured URL.
+            frames: (0, stack_1.extractStructuredFrames)(extracted.stack),
+        });
+        // The failing error joins the trace so the lead-up and the failure both show,
+        // carrying a causal pointer to the ids of the entries that preceded the throw.
+        try {
+            const causedBy = precedingIds(config.buffer?.snapshot());
+            config.buffer?.add((0, crumbs_1.errorCrumb)(extracted.original, at, causedBy));
+        }
+        catch {
+            /* capture must never throw into the host app */
+        }
+        void file(fingerprint, 1, true);
+    }
+    return {
+        capture(raw) {
+            try {
+                const extracted = config.extract(raw);
+                if (extracted)
+                    handle(extracted);
+            }
+            catch {
+                /* never throw into the host app */
+            }
+        },
+        flush() {
+            try {
+                for (const [fingerprint, entry] of seen) {
+                    if (entry.count > entry.sentCount) {
+                        void file(fingerprint, entry.count, false);
+                    }
+                }
+            }
+            catch {
+                /* best-effort on unload / backgrounding */
+            }
+        },
+        droppedCount: () => dropped,
+    };
+}
+//# sourceMappingURL=auto-capture.js.map

package/dist/auto-capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-capture.js","sourceRoot":"","sources":["../src/auto-capture.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;;;AAoBH,4BAQC;AAOD,oCAQC;AAiID,8CAyGC;AAnRD,+CAAmD;AACnD,mCAAkD;AAGlD,2CAA4C;AAG5C,iFAAiF;AACpE,QAAA,sBAAsB,GAAG,CAAC,CAAC;AACxC,wEAAwE;AAC3D,QAAA,uBAAuB,GAAG,KAAK,CAAC;AAC7C,2FAA2F;AAC9E,QAAA,yBAAyB,GAAG,EAAE,CAAC;AAE5C,sFAAsF;AACzE,QAAA,eAAe,GAAG,CAAC,CAAC;AAEjC,sFAAsF;AACtF,SAAgB,QAAQ,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAAC,OAA0C;IACrE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,uBAAe,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAChF,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC1B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAYD;;;;;GAKG;AACH,MAAa,WAAW;IAKO;IAJrB,MAAM,CAAS;IACf,IAAI,CAAS;IACJ,GAAG,CAAe;IAEnC,YAA6B,OAA2B;QAA3B,YAAO,GAAP,OAAO,CAAoB;QACtD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,CAAC;IAED,0EAA0E;IAC1E,IAAI;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QACpD,IAAI,gBAAgB,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC;YAChE,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;gBACvD,IAAI,CAAC,IAAI,IAAI,MAAM,GAAG,gBAAgB,CAAC;YACzC,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AA5BD,kCA4BC;AAkFD,wEAAwE;AACxE,SAAgB,iBAAiB,CAC/B,MAAkC;IAElC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACnC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,iCAAyB,CAAC;IACpE,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC,aAAa,IAAI,8BAAsB;QACxD,gBAAgB,EAAE,MAAM,CAAC,aAAa,IAAI,+BAAuB;QACjE,GAAG;KACJ,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC1C,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB;;;;OAIG;IACH,KAAK,UAAU,IAAI,CAAC,WAAmB,EAAE,WAAmB,EAAE,IAAa;QACzE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,cAAc,GAAG,KAAK,CAAC,SAAS,CAAC;QACvC,KAAK,CAAC,SAAS,GAAG,WAAW,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC;gBACnC,WAAW;gBACX,WAAW;gBACX,IAAI;gBACJ,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;gBACjD,KAAK,CAAC,SAAS,GAAG,cAAc,CAAC;YACnC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,KAAK,CAAC,SAAS,KAAK,WAAW;gBAAE,KAAK,CAAC,SAAS,GAAG,cAAc,CAAC;YACtE,qDAAqD;QACvD,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,SAAS,MAAM,CAAC,SAAyB;QACvC,MAAM,WAAW,GAAG,IAAA,gCAAkB,EACpC,SAAS,CAAC,IAAI,EACd,SAAS,CAAC,KAAK,EACf,SAAS,CAAC,KAAK,CAChB,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvC,IAAI,QAAQ,EAAE,CAAC;YACb,+EAA+E;YAC/E,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;YACpB,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,CAAC,CAAC,gBAAgB;YAC9B,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,CAAC,CAAC,sDAAsD;YACpE,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE;YACpB,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,EAAE;YACV,SAAS,EAAE,CAAC;YACZ,0EAA0E;YAC1E,uEAAuE;YACvE,MAAM,EAAE,IAAA,+BAAuB,EAAC,SAAS,CAAC,KAAK,CAAC;SACjD,CAAC,CAAC;QACH,8EAA8E;QAC9E,+EAA+E;QAC/E,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACzD,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAA,mBAAU,EAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;QACD,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,OAAO;QACL,OAAO,CAAC,GAAQ;YACd,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACtC,IAAI,SAAS;oBAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,mCAAmC;YACrC,CAAC;QACH,CAAC;QACD,KAAK;YACH,IAAI,CAAC;gBACH,KAAK,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;oBACxC,IAAI,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;wBAClC,KAAK,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;oBAC7C,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,2CAA2C;YAC7C,CAAC;QACH,CAAC;QACD,YAAY,EAAE,GAAG,EAAE,CAAC,OAAO;KAC5B,CAAC;AACJ,CAAC"}