@fixback/sdk-core 0.2.0 → 0.3.0

package/dist/trace/source.js

@@ -0,0 +1,59 @@
+"use strict";
+/**
+ * The console crumb's **call site** (spec #122 §C) — the best-effort `file:line` a
+ * `console.*` call was made from, shared runtime-agnostically (ADR-0028).
+ *
+ * Frames are tokenized by the core's single stack parser (`stack.ts`), so a stack
+ * that yields a fingerprint frame yields a source location too — the browser's V8
+ * and Firefox/Safari dialects and React Native's Hermes/JSC ones alike. A query
+ * string on the asset URL is dropped, both for parse safety and privacy (it may be
+ * a cache-buster, or defensively a token).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CONSOLE_SOURCE_SKIP_FRAMES = void 0;
+exports.parseStackFrame = parseStackFrame;
+exports.sourceFromStack = sourceFromStack;
+const stack_1 = require("../stack");
+/**
+ * Parse a single **trimmed** stack line into a `{ file, line }` location, or
+ * `undefined` when the line names no locatable file:line.
+ */
+function parseStackFrame(line) {
+    const tokens = (0, stack_1.parseStackLine)(line);
+    if (!tokens || !tokens.location)
+        return undefined;
+    const loc = tokens.location.replace(/\?[^:]*/, "");
+    const m = loc.match(/^(.*):(\d+):\d+$/) ?? loc.match(/^(.*):(\d+)$/);
+    if (!m)
+        return undefined;
+    const file = m[1] ?? "";
+    const lineNo = Number(m[2]);
+    if (!file || !Number.isFinite(lineNo))
+        return undefined;
+    return { file, line: lineNo };
+}
+/**
+ * The best-effort `file:line` a console call was made from (spec #122 §C). Parses the
+ * frames of a stack, skipping `skipFrames` leading (SDK-internal) frames so the source
+ * points at the host code that called `console.*`. Returns `undefined` when no frame
+ * yields a usable location — the crumb then simply omits `source`.
+ */
+function sourceFromStack(stack, skipFrames = 0) {
+    if (typeof stack !== "string" || stack.length === 0)
+        return undefined;
+    const frames = [];
+    for (const raw of stack.split("\n")) {
+        const frame = parseStackFrame(raw.trim());
+        if (frame)
+            frames.push(frame);
+    }
+    return frames[skipFrames];
+}
+/**
+ * Frames between `new Error()` (created inside the console wrapper) and the host
+ * caller: just the wrapper frame itself. Skipping it points {@link sourceFromStack}
+ * at the app code. The wrapper is called through the console object's property, so
+ * it is not a direct-call inlining candidate — keeping this skip count stable.
+ */
+exports.CONSOLE_SOURCE_SKIP_FRAMES = 1;
+//# sourceMappingURL=source.js.map

package/dist/trace/source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.js","sourceRoot":"","sources":["../../src/trace/source.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AASH,0CAUC;AAQD,0CAWC;AApCD,oCAA0C;AAG1C;;;GAGG;AACH,SAAgB,eAAe,CAAC,IAAY;IAC1C,MAAM,MAAM,GAAG,IAAA,sBAAc,EAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACrE,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IACxD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,eAAe,CAC7B,KAAyB,EACzB,UAAU,GAAG,CAAC;IAEd,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACtE,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;GAKG;AACU,QAAA,0BAA0B,GAAG,CAAC,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,13 @@
+/**
+ * `@fixback/sdk-core`'s own version string, kept as an inlined constant rather
+ * than a runtime `package.json` import so the published build stays
+ * self-contained (the same posture as `packages/sdk/src/version.ts`,
+ * `packages/expo/src/version.ts`, and `packages/node/src/version.ts`).
+ *
+ * It must equal `package.json`'s `version`. Two things keep it there: the
+ * Changesets `version` step syncs it automatically (`scripts/sync-sdk-version.mjs`,
+ * wired into `version-packages`), and `version.test.ts` fails the build if the two
+ * ever drift. Do not hand-edit this line to a value other than `package.json`'s
+ * version.
+ */
+export declare const SDK_CORE_VERSION = "0.3.0";

package/dist/version.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SDK_CORE_VERSION = void 0;
+/**
+ * `@fixback/sdk-core`'s own version string, kept as an inlined constant rather
+ * than a runtime `package.json` import so the published build stays
+ * self-contained (the same posture as `packages/sdk/src/version.ts`,
+ * `packages/expo/src/version.ts`, and `packages/node/src/version.ts`).
+ *
+ * It must equal `package.json`'s `version`. Two things keep it there: the
+ * Changesets `version` step syncs it automatically (`scripts/sync-sdk-version.mjs`,
+ * wired into `version-packages`), and `version.test.ts` fails the build if the two
+ * ever drift. Do not hand-edit this line to a value other than `package.json`'s
+ * version.
+ */
+exports.SDK_CORE_VERSION = "0.3.0";
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;GAWG;AACU,QAAA,gBAAgB,GAAG,OAAO,CAAC"}

package/dist/wire.d.ts

@@ -0,0 +1,101 @@
+/**
+ * The shared **ingest wire shapes** (ADR-0028) — the value contract a captured
+ * report carries to `POST /api/ingest/feedback`, shared by every Fixback capture
+ * SDK so they all speak the same shape.
+ *
+ * Like the rest of the core these are runtime-agnostic value types: the browser
+ * and (future) backend SDKs both assemble a {@link ReportContent} from what they
+ * captured. Keep them in lock-step with the server: the JSON `payload` part the
+ * ingest controller parses (`apps/api/src/ingest/ingest.controller.ts`) and the
+ * `SubmissionContent` it maps to (`apps/api/src/ingest/reporter-identity.ts`).
+ * Each SDK keeps vendoring its own transport envelope (ticket #47) — the core
+ * carries the pure content shape, not the multipart envelope.
+ */
+import type { Annotation } from "./annotation";
+import type { Breadcrumb } from "./breadcrumb";
+/**
+ * Where a Feedback came from — a human in the overlay (`reporter`, the default) or
+ * a runtime error the SDK captured (`error`, ADR-0025: covers both an uncaught
+ * crash and a manual capture, on any runtime). Mirrors the server's
+ * `FEEDBACK_SOURCES`; the server derives trust independently and ignores anything
+ * else the client claims.
+ */
+export type FeedbackSource = "reporter" | "error";
+/**
+ * The **Platform** a Feedback was captured on (ADR-0025): `browser` (the web SDK),
+ * `node` (the backend SDK), or `expo` (the mobile SDK). Additive — future runtimes
+ * become new values. Mirrors the server's `PLATFORMS` (`@fixback/shared`) by value;
+ * the server stamps it from the ingest route, so it is **not** carried on
+ * {@link ReportContent} (the client never declares its own platform).
+ */
+export type Platform = "browser" | "node" | "expo";
+/** The capture environment recorded alongside a report. */
+export interface CaptureEnvironment {
+    readonly viewportWidth?: number;
+    readonly viewportHeight?: number;
+    readonly browser?: string;
+    readonly sdkVersion?: string;
+    /**
+     * The host app's **Release** — the build identifier the builder configured at
+     * `init` (#117, ADR-0024). Uploaded sourcemaps are keyed by it, so the server
+     * can symbolicate this session's stack traces against the exact build that
+     * produced them. Omitted when the Project doesn't set one.
+     */
+    readonly release?: string;
+}
+/**
+ * One structured frame of a captured stack trace (#117, ADR-0024), top of stack
+ * first — the server's `errorFrames` wire shape. `file` is the scrubbed script
+ * URL; `line`/`column` are 1-based as browsers report them.
+ */
+export interface CapturedFrame {
+    readonly file: string;
+    readonly line: number;
+    readonly column: number | null;
+    readonly function: string | null;
+}
+/**
+ * The JSON content of a feedback submission — the object serialised into the
+ * multipart `payload` part next to the `key` and identity evidence. Every field
+ * is optional: none of it feeds the server's trust decision, so a submission may
+ * carry any subset. `annotation` is the structured `{ element?, region?, marks? }`
+ * (spec §D); the screenshot is a separate binary part, never part of this JSON.
+ */
+export interface ReportContent {
+    readonly comment?: string;
+    readonly url?: string;
+    readonly environment?: CaptureEnvironment;
+    readonly annotation?: Annotation;
+    /** The masked breadcrumb trace buffer that rode on this report (spec §C). */
+    readonly trace?: readonly Breadcrumb[];
+    /**
+     * Provenance (spec §D/§E). Omitted for a manual report — the transport stamps the
+     * `reporter` default on the wire; set to `error` by the SDK's error capture.
+     */
+    readonly source?: FeedbackSource;
+    /**
+     * For `source: error` only — whether the error was **handled** (ADR-0025):
+     * `false` = an uncaught crash, `true` = a manual capture. Set by the backend SDK
+     * (`@fixback/node`), which distinguishes the two; the browser SDK captures only
+     * uncaught errors and leaves it unset.
+     */
+    readonly handled?: boolean;
+    /**
+     * The deploy **Environment** the SDK was configured with (ADR-0025) —
+     * `production` / `staging` / … — distinct from {@link CaptureEnvironment.release}
+     * (a build version). Named apart from `environment` (the capture bag above) to
+     * avoid the collision. Set by the backend SDK; unset by the browser SDK for now.
+     */
+    readonly deployEnvironment?: string;
+    /** For `source: error` only — the SDK's per-session error fingerprint (spec §E). */
+    readonly errorSignature?: string;
+    /** For `source: error` only — the running occurrence count within the session (spec §E). */
+    readonly occurrences?: number;
+    /**
+     * For `source: error` only — the captured error's parsed stack frames (#117,
+     * ADR-0024), top of stack first, capped client-side. The analysis worker
+     * matches them against the release's uploaded sourcemaps to write the Issue's
+     * Code-area pointer.
+     */
+    readonly errorFrames?: readonly CapturedFrame[];
+}

package/package.json

@@ -1,23 +1,22 @@
 {
   "name": "@fixback/sdk-core",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Runtime-agnostic core shared by the Fixback capture SDKs — fingerprinting, scrubbing, backoff, and the shared wire shapes.",
   "license": "MIT",
   "type": "module",
   "sideEffects": false,
   "main": "./dist/index.js",
-  "types": "./src/index.ts",
+  "types": "./dist/index.d.ts",
   "exports": {
     ".": {
-      "types": "./src/index.ts",
-      "import": "./src/index.ts",
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
       "require": "./dist/index.js"
     },
     "./package.json": "./package.json"
   },
   "files": [
     "dist",
-    "src",
     "README.md",
     "LICENSE"
   ],
@@ -32,17 +31,22 @@
     "url": "git+https://github.com/wemuda/fixback.git",
     "directory": "packages/sdk-core"
   },
-  "homepage": "https://github.com/wemuda/fixback/tree/master/packages/sdk-core#readme",
-  "bugs": "https://github.com/wemuda/fixback/issues",
+  "homepage": "https://docs.fixback.dev",
+  "bugs": "https://docs.fixback.dev",
   "publishConfig": {
     "access": "public"
   },
   "devDependencies": {
+    "esbuild": "^0.25.0",
     "typescript": "5.9.3",
     "vitest": "^4.1.10"
   },
+  "engines": {
+    "node": ">=20.12"
+  },
+  "module": "./dist/index.mjs",
   "scripts": {
-    "build": "tsc -p tsconfig.build.json && node scripts/finalize-cjs.mjs",
+    "build": "tsc -p tsconfig.build.json && node ../../scripts/finalize-cjs.mjs dist && esbuild src/index.ts --bundle --format=esm --platform=neutral --target=es2020 --sourcemap --outfile=dist/index.mjs",
     "lint": "eslint .",
     "typecheck": "tsc --noEmit",
     "test": "vitest run"

package/src/backoff.test.ts

@@ -1,94 +0,0 @@
-import { describe, expect, it } from "vitest";
-
-import {
-  AutoReportBackoff,
-  DEFAULT_RETRY_AFTER_SECONDS,
-  parseRetryAfter,
-} from "./backoff";
-
-describe("parseRetryAfter", () => {
-  const NOW = 1_000_000;
-
-  it("reads the delta-seconds form", () => {
-    expect(parseRetryAfter("30", NOW)).toBe(30);
-    expect(parseRetryAfter("  0 ", NOW)).toBe(0);
-  });
-
-  it("reads the HTTP-date form as whole seconds from now (rounded up)", () => {
-    // toUTCString carries whole seconds only, so the header parses to NOW + 45_000.
-    const when = new Date(NOW + 45_000).toUTCString();
-    expect(parseRetryAfter(when, NOW)).toBe(45);
-    // A sub-second remainder rounds up: from NOW - 500 the gap is 45_500 ms.
-    expect(parseRetryAfter(when, NOW - 500)).toBe(46);
-  });
-
-  it("clamps a past HTTP-date to zero", () => {
-    const when = new Date(NOW - 10_000).toUTCString();
-    expect(parseRetryAfter(when, NOW)).toBe(0);
-  });
-
-  it("falls back to the default when the header is absent, blank, or unparseable", () => {
-    expect(parseRetryAfter(null, NOW)).toBe(DEFAULT_RETRY_AFTER_SECONDS);
-    expect(parseRetryAfter(undefined, NOW)).toBe(DEFAULT_RETRY_AFTER_SECONDS);
-    expect(parseRetryAfter("", NOW)).toBe(DEFAULT_RETRY_AFTER_SECONDS);
-    expect(parseRetryAfter("   ", NOW)).toBe(DEFAULT_RETRY_AFTER_SECONDS);
-    expect(parseRetryAfter("soon", NOW)).toBe(DEFAULT_RETRY_AFTER_SECONDS);
-  });
-
-  it("defaults to 60 seconds", () => {
-    expect(DEFAULT_RETRY_AFTER_SECONDS).toBe(60);
-  });
-});
-
-describe("AutoReportBackoff", () => {
-  function at(t: number): { clock: { t: number }; backoff: AutoReportBackoff } {
-    const clock = { t };
-    return { clock, backoff: new AutoReportBackoff(() => clock.t) };
-  }
-
-  it("starts clear", () => {
-    const { backoff } = at(1_000);
-    expect(backoff.isPaused()).toBe(false);
-    expect(backoff.retryAfterSeconds()).toBe(0);
-  });
-
-  it("opens a window from a Retry-After value and clears when it elapses", () => {
-    const { clock, backoff } = at(1_000);
-
-    expect(backoff.hold("30")).toBe(30);
-    expect(backoff.isPaused()).toBe(true);
-    expect(backoff.retryAfterSeconds()).toBe(30);
-
-    clock.t = 1_000 + 29_000;
-    expect(backoff.isPaused()).toBe(true);
-
-    clock.t = 1_000 + 30_000;
-    expect(backoff.isPaused()).toBe(false);
-    expect(backoff.retryAfterSeconds()).toBe(0);
-  });
-
-  it("defaults to 60 seconds when the header is absent", () => {
-    const { clock, backoff } = at(1_000);
-
-    expect(backoff.hold(null)).toBe(60);
-    clock.t = 1_000 + 59_000;
-    expect(backoff.isPaused()).toBe(true);
-    clock.t = 1_000 + 60_000;
-    expect(backoff.isPaused()).toBe(false);
-  });
-
-  it("extends the window but never shrinks it", () => {
-    const { clock, backoff } = at(1_000);
-
-    backoff.hold("60"); // until 61_000
-    clock.t = 1_000 + 10_000; // t = 11_000
-    backoff.hold("5"); // would end at 16_000 — earlier than 61_000, so ignored
-    clock.t = 1_000 + 20_000; // t = 21_000, still inside the original window
-    expect(backoff.isPaused()).toBe(true);
-
-    clock.t = 1_000 + 10_000; // back inside; extend past the original
-    backoff.hold("120"); // until 71_000
-    clock.t = 1_000 + 65_000; // t = 66_000 — past the original 61_000
-    expect(backoff.isPaused()).toBe(true);
-  });
-});

package/src/breadcrumb.ts

@@ -1,169 +0,0 @@
-/**
- * The trace **breadcrumb wire types** (spec 0003 §C, spec #122) — the shared,
- * runtime-agnostic shapes for one entry of a captured trace stream (ADR-0028).
- *
- * A breadcrumb records recent activity — console, navigation, network metadata,
- * masked user actions, and the failing error — that rides on a report as
- * Evidence. This module carries only the value types; the SDK's ring buffer and
- * DOM/Node instrumentation that produce them live in the consuming SDK.
- * Everything private is kept out **at the source** by that instrumentation:
- * `ui.input` records that an input changed, never its value; network crumbs carry
- * method + URL + status only, never bodies.
- */
-
-/** Console-style severity a `console` crumb records. */
-export type BreadcrumbLevel =
-  | "log"
-  | "info"
-  | "warn"
-  | "error"
-  | "assert"
-  | "debug";
-
-/** The kind of activity a crumb records. */
-export type BreadcrumbCategory =
-  | "console"
-  | "navigation"
-  | "fetch"
-  | "xhr"
-  | "beacon"
-  | "ui.click"
-  | "ui.input"
-  | "error";
-
-/**
- * Which browser API issued a captured network request (spec #122 §D, ticket #139).
- * Every network crumb's `category` is one of these too, so a stream router and the
- * read model agree on what is a network entry.
- */
-export type NetworkApi = "fetch" | "xhr" | "beacon";
-
-/**
- * A network request's failure classification (spec #122 §D, ticket #139). `ok` and
- * the HTTP status classes come from a settled response; `network-error` / `timeout`
- * / `aborted` from how a request failed; `opaque-cors` from a cross-origin response
- * whose status is unreadable. The Network tab flags every non-`ok` outcome.
- */
-export type NetworkOutcome =
-  | "ok"
-  | "http-4xx"
-  | "http-5xx"
-  | "network-error"
-  | "timeout"
-  | "aborted"
-  | "opaque-cors";
-
-/**
- * A crumb's structured detail. Deliberately narrow: there is **no** field for a
- * request/response body or an input value, so those can never be recorded.
- */
-export interface BreadcrumbData {
-  readonly url?: string;
-  readonly method?: string;
-  readonly status?: number;
-  /** A masked CSS selector for a `ui.*` target — never its text or value. */
-  readonly target?: string;
-  readonly from?: string;
-  readonly to?: string;
-  readonly errorType?: string;
-}
-
-/**
- * The type tag on a structured console argument (spec #122 §C, decision D7). A
- * console call's arguments are preserved **type-tagged** rather than flattened to a
- * string, so an object/array argument can be inspected in the Console tab rather
- * than read as `[object Object]`: `string`/`number`/`bool`/`null` carry the value
- * directly, `json` a depth-/byte-capped JSON-safe clone, and `error` an Error's
- * `{ name, message, stack }`.
- */
-export type ConsoleArgType =
-  | "string"
-  | "number"
-  | "bool"
-  | "null"
-  | "json"
-  | "error";
-
-/**
- * One structured console argument (spec #122 §C): a type tag plus a JSON-safe value.
- * `v` is always serializable — a `json` arg is depth-, breadth-, and string-capped at
- * assembly, and exotic values (bigint, symbol, function, circular refs) are rendered
- * to safe text — so a console crumb can never carry an unserializable or unbounded
- * value onto the wire.
- */
-export interface ConsoleArg {
-  readonly t: ConsoleArgType;
-  readonly v: unknown;
-}
-
-/** A `file:line` source location (spec #122 §C) — where a console call was made. */
-export interface SourceLocation {
-  readonly file: string;
-  readonly line: number;
-}
-
-/**
- * One entry in a trace stream. Alongside its semantic fields every entry carries a
- * stable {@link id} and a high-res monotonic {@link mono} timestamp — both stamped
- * by the buffer on `add` — so entries from the three independent streams order and
- * cross-link exactly (spec #122 §B, decision D9). `timestamp` stays epoch ms.
- */
-export interface Breadcrumb {
-  readonly category: BreadcrumbCategory;
-  readonly message?: string;
-  readonly level?: BreadcrumbLevel;
-  /** Epoch milliseconds when the crumb was recorded. */
-  readonly timestamp: number;
-  /** A stable id, unique within the buffer — assigned on `add` when not already set. */
-  readonly id?: string;
-  /** A high-res monotonic timestamp (`performance.now()`) — assigned on `add`. */
-  readonly mono?: number;
-  readonly data?: BreadcrumbData;
-  /**
-   * For a `console` crumb (spec #122 §C): the call's arguments preserved as
-   * structured, type-tagged values (see {@link ConsoleArg}), so the Console tab can
-   * render each argument expandably instead of a flattened string. `message` stays
-   * the one-line preview. Absent on non-console crumbs.
-   */
-  readonly args?: readonly ConsoleArg[];
-  /**
-   * For a `console` crumb (spec #122 §C): the `file:line` the call was made from,
-   * parsed best-effort from the call stack. Captured only for the levels that keep a
-   * source — `warn`/`error`/`assert` — and only when the stack yields a usable
-   * location; a chatty app's `log`/`info`/`debug` omit it. Absent on non-console crumbs.
-   */
-  readonly source?: SourceLocation;
-  /**
-   * For an auto-captured `error` crumb only (spec #122 §F): the ids of the entries
-   * immediately preceding the throw — a causal pointer into the same trace, so a
-   * machine-filed crash names its lead-up. Absent on every other crumb.
-   */
-  readonly causedBy?: readonly string[];
-  /**
-   * For a network crumb (`fetch` / `xhr` / `beacon`) — spec #122 §D, ticket #139.
-   * The rich request metadata the Network tab renders, lifted to the top level (the
-   * console-enrichment precedent) so the read model shapes each into a
-   * `NetworkTraceEntry`. **No field carries a request/response body or an arbitrary
-   * header** — `respSize` derives from the `content-length` response header only and
-   * `contentType` from `content-type`; nothing else is read. Absent on every other crumb.
-   */
-  readonly api?: NetworkApi;
-  /** The request method (network crumb) — e.g. `GET`, `POST`. */
-  readonly method?: string;
-  /** The scrubbed request URL (network crumb) — query dropped, path PII redacted. */
-  readonly url?: string;
-  /** The final HTTP status (network crumb), when one was known; absent on a network error/beacon. */
-  readonly status?: number;
-  /** The HTTP status text (network crumb), when the response carried one. */
-  readonly statusText?: string;
-  /** Wall-clock duration of the request in ms (network crumb) — a `performance.now()` delta. */
-  readonly durationMs?: number;
-  /** Request body size in bytes (network crumb) — only when trivially known (string/Blob/ArrayBuffer), never by reading a stream. */
-  readonly reqSize?: number;
-  /** Response body size in bytes (network crumb) — from the `content-length` response header only. */
-  readonly respSize?: number;
-  /** Response content type (network crumb) — the `content-type` header's media type. */
-  readonly contentType?: string;
-  /** The request's failure classification (network crumb) — see {@link NetworkOutcome}. */
-  readonly outcome?: NetworkOutcome;
-}

package/src/fingerprint.test.ts

@@ -1,96 +0,0 @@
-import { describe, expect, it } from "vitest";
-
-import { computeFingerprint, extractTopFrames, hashString, normalize } from "./fingerprint";
-
-describe("normalize — collapsing the volatile parts of an error message", () => {
-  it("replaces UUIDs, URLs, hex, and long digit runs with stable placeholders", () => {
-    expect(normalize("failed for 550e8400-e29b-41d4-a716-446655440000")).toBe(
-      "failed for <uuid>",
-    );
-    expect(
-      normalize("GET https://api.example.com/users/42?token=abc failed"),
-    ).toContain("<url>");
-    expect(normalize("bad pointer 0xdeadbeef")).toBe("bad pointer <hex>");
-    expect(normalize("chunk 3f9a1c2e4b7d8091 missing")).toBe("chunk <hex> missing");
-    expect(normalize("order 1234567 not found")).toBe("order <n> not found");
-  });
-
-  it("keeps short numbers and stable text so distinct bugs stay distinct", () => {
-    expect(normalize("code 42 raised")).toBe("code 42 raised");
-    expect(normalize("Cannot read properties of undefined")).toBe(
-      "Cannot read properties of undefined",
-    );
-  });
-
-  it("returns an empty string for a non-string or empty input", () => {
-    expect(normalize("")).toBe("");
-    expect(normalize(undefined as unknown as string)).toBe("");
-  });
-});
-
-describe("extractTopFrames — a compact top-of-stack signature", () => {
-  it("parses V8 frames to `function@basename:line:col`, origin stripped", () => {
-    const stack = [
-      "Error: boom",
-      "    at pay (https://acme.app/assets/checkout.abc123.js:10:5)",
-      "    at onClick (https://acme.app/assets/checkout.abc123.js:20:9)",
-    ].join("\n");
-    expect(extractTopFrames(stack)).toBe(
-      "pay@checkout.abc123.js:10:5 < onClick@checkout.abc123.js:20:9",
-    );
-  });
-
-  it("parses Firefox/Safari `fn@loc` frames", () => {
-    const stack = "pay@https://acme.app/checkout.js:10:5\n@https://acme.app/x.js:1:1";
-    expect(extractTopFrames(stack)).toBe("pay@checkout.js:10:5 < @x.js:1:1");
-  });
-
-  it("caps at the frame limit and returns '' for no usable stack", () => {
-    const many = Array.from(
-      { length: 10 },
-      (_v, i) => `    at fn${i} (https://acme.app/a.js:${i}:1)`,
-    ).join("\n");
-    expect(extractTopFrames(many).split(" < ")).toHaveLength(5);
-    expect(extractTopFrames(undefined)).toBe("");
-    expect(extractTopFrames("")).toBe("");
-  });
-});
-
-describe("hashString — dependency-free FNV-1a", () => {
-  it("is deterministic and distinguishes distinct inputs", () => {
-    expect(hashString("a|b|c")).toBe(hashString("a|b|c"));
-    expect(hashString("a|b|c")).not.toBe(hashString("a|b|d"));
-  });
-});
-
-describe("computeFingerprint — the cross-surface grouping key", () => {
-  it("is stable for the same logical error", () => {
-    const stack = "    at pay (https://acme.app/checkout.js:10:5)";
-    expect(computeFingerprint("TypeError", "boom", stack)).toBe(
-      computeFingerprint("TypeError", "boom", stack),
-    );
-  });
-
-  it("ignores the volatile parts of the message (same bug, changed ids)", () => {
-    const stack = "    at pay (https://acme.app/checkout.js:10:5)";
-    expect(computeFingerprint("Error", "order 111111 failed", stack)).toBe(
-      computeFingerprint("Error", "order 999999 failed", stack),
-    );
-  });
-
-  it("separates errors with different types or frames", () => {
-    const stack = "    at pay (https://acme.app/checkout.js:10:5)";
-    expect(computeFingerprint("TypeError", "boom", stack)).not.toBe(
-      computeFingerprint("RangeError", "boom", stack),
-    );
-    expect(computeFingerprint("Error", "boom", stack)).not.toBe(
-      computeFingerprint("Error", "boom", "    at other (https://acme.app/x.js:1:1)"),
-    );
-  });
-
-  it("falls back to type + normalised message when there is no stack", () => {
-    expect(computeFingerprint("Error", "order 5 failed")).toBe(
-      computeFingerprint("Error", "order 5 failed", undefined),
-    );
-  });
-});