@goliapkg/sentori-javascript 0.1.0

package/lib/breadcrumbs.d.ts

@@ -0,0 +1,9 @@
+import type { Breadcrumb, BreadcrumbType } from './types.js';
+export type AddBreadcrumbInput = {
+    data?: Record<string, unknown>;
+    type: BreadcrumbType;
+};
+export declare function addBreadcrumb(input: AddBreadcrumbInput): void;
+export declare function getBreadcrumbs(): Breadcrumb[];
+export declare function clearBreadcrumbs(): void;
+//# sourceMappingURL=breadcrumbs.d.ts.map

package/lib/breadcrumbs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"breadcrumbs.d.ts","sourceRoot":"","sources":["../src/breadcrumbs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAK5D,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,IAAI,EAAE,cAAc,CAAA;CACrB,CAAA;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAQ7D;AAED,wBAAgB,cAAc,IAAI,UAAU,EAAE,CAE7C;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC"}

package/lib/breadcrumbs.js

@@ -0,0 +1,19 @@
+const MAX = 100;
+const buf = [];
+export function addBreadcrumb(input) {
+    const crumb = {
+        data: input.data ?? {},
+        timestamp: new Date().toISOString(),
+        type: input.type,
+    };
+    buf.push(crumb);
+    if (buf.length > MAX)
+        buf.shift();
+}
+export function getBreadcrumbs() {
+    return [...buf];
+}
+export function clearBreadcrumbs() {
+    buf.length = 0;
+}
+//# sourceMappingURL=breadcrumbs.js.map

package/lib/breadcrumbs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"breadcrumbs.js","sourceRoot":"","sources":["../src/breadcrumbs.ts"],"names":[],"mappings":"AAEA,MAAM,GAAG,GAAG,GAAG,CAAA;AACf,MAAM,GAAG,GAAiB,EAAE,CAAA;AAO5B,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,MAAM,KAAK,GAAe;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;QACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAA;IACD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACf,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;QAAE,GAAG,CAAC,KAAK,EAAE,CAAA;AACnC,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,CAAC,GAAG,GAAG,CAAC,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;AAChB,CAAC"}

package/lib/capture.d.ts

@@ -0,0 +1,13 @@
+import type { CaptureExtras, User } from './types.js';
+/**
+ * Attach a stable user identifier to events captured after this call.
+ *
+ * PII policy: User shape is `{ id?, anonymous? }` only — no email,
+ * name, IP, or other identifying fields. The server schema enforces
+ * the same shape; extras would be rejected with `validationFailed`.
+ */
+export declare function setUser(user: User | null): void;
+export declare function getUser(): User | null;
+export declare function captureError(error: Error, extras?: CaptureExtras): void;
+export declare const captureException: typeof captureError;
+//# sourceMappingURL=capture.d.ts.map

package/lib/capture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture.d.ts","sourceRoot":"","sources":["../src/capture.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAuB,IAAI,EAAE,MAAM,YAAY,CAAA;AAK1E;;;;;;GAMG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,CAE/C;AAED,wBAAgB,OAAO,IAAI,IAAI,GAAG,IAAI,CAErC;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,IAAI,CAmBvE;AAED,eAAO,MAAM,gBAAgB,qBAAe,CAAA"}

package/lib/capture.js

@@ -0,0 +1,92 @@
+import { getBreadcrumbs } from './breadcrumbs.js';
+import { getConfig, isInitialized } from './config.js';
+import { parseStack } from './stack.js';
+import { send } from './transport.js';
+import { uuidV7 } from './uuid.js';
+let _user = null;
+/**
+ * Attach a stable user identifier to events captured after this call.
+ *
+ * PII policy: User shape is `{ id?, anonymous? }` only — no email,
+ * name, IP, or other identifying fields. The server schema enforces
+ * the same shape; extras would be rejected with `validationFailed`.
+ */
+export function setUser(user) {
+    _user = user;
+}
+export function getUser() {
+    return _user;
+}
+export function captureError(error, extras) {
+    if (!isInitialized())
+        return;
+    const cfg = getConfig();
+    const event = {
+        app: { version: parseRelease(cfg.release).version },
+        breadcrumbs: getBreadcrumbs(),
+        device: detectDevice(),
+        environment: cfg.environment,
+        error: errorToObject(error),
+        fingerprint: extras?.fingerprint,
+        id: uuidV7(),
+        kind: 'error',
+        platform: 'javascript',
+        release: cfg.release,
+        tags: extras?.tags,
+        timestamp: new Date().toISOString(),
+        user: extras?.user ?? _user,
+    };
+    void send({ ingestUrl: cfg.ingestUrl, token: cfg.token }, event);
+}
+export const captureException = captureError;
+function errorToObject(error) {
+    const causeRaw = error.cause;
+    let cause = null;
+    if (causeRaw instanceof Error)
+        cause = errorToObject(causeRaw);
+    return {
+        cause,
+        message: error.message,
+        stack: parseStack(error.stack),
+        type: error.name || 'Error',
+    };
+}
+function parseRelease(release) {
+    const m = /^(?:[^@]+@)?([^+]+)(?:\+(.+))?$/.exec(release);
+    return { build: m?.[2], version: m?.[1] ?? '0.0.0' };
+}
+function detectDevice() {
+    // Browser: light-touch UA sniff. We deliberately avoid full
+    // fingerprinting — the field is for grouping context, not analytics.
+    const w = globalThis.navigator;
+    if (w?.userAgent) {
+        return {
+            locale: w.language,
+            os: detectBrowserOs(w.userAgent),
+            osVersion: '0',
+        };
+    }
+    // Node
+    const p = globalThis.process;
+    if (p?.platform) {
+        return {
+            os: p.platform,
+            osVersion: p.version?.replace(/^v/, '') ?? '0',
+        };
+    }
+    return { os: 'unknown', osVersion: '0' };
+}
+function detectBrowserOs(ua) {
+    if (ua.includes('Mac OS X') || ua.includes('Macintosh'))
+        return 'macos';
+    if (ua.includes('Windows'))
+        return 'windows';
+    if (ua.includes('Linux'))
+        return 'linux';
+    if (ua.includes('Android'))
+        return 'android';
+    if (ua.includes('iPhone') || ua.includes('iPad'))
+        return 'ios';
+    return 'web';
+}
+//# sourceMappingURL=capture.js.map

package/lib/capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture.js","sourceRoot":"","sources":["../src/capture.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAA;AAErC,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AAElC,IAAI,KAAK,GAAgB,IAAI,CAAA;AAE7B;;;;;;GAMG;AACH,MAAM,UAAU,OAAO,CAAC,IAAiB;IACvC,KAAK,GAAG,IAAI,CAAA;AACd,CAAC;AAED,MAAM,UAAU,OAAO;IACrB,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAY,EAAE,MAAsB;IAC/D,IAAI,CAAC,aAAa,EAAE;QAAE,OAAM;IAC5B,MAAM,GAAG,GAAG,SAAS,EAAG,CAAA;IACxB,MAAM,KAAK,GAAU;QACnB,GAAG,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;QACnD,WAAW,EAAE,cAAc,EAAE;QAC7B,MAAM,EAAE,YAAY,EAAE;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC;QAC3B,WAAW,EAAE,MAAM,EAAE,WAAW;QAChC,EAAE,EAAE,MAAM,EAAE;QACZ,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,IAAI,EAAE,MAAM,EAAE,IAAI;QAClB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,KAAK;KAC5B,CAAA;IACD,KAAK,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAA;AAClE,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAA;AAE5C,SAAS,aAAa,CAAC,KAAY;IACjC,MAAM,QAAQ,GAAI,KAA6B,CAAC,KAAK,CAAA;IACrD,IAAI,KAAK,GAAwB,IAAI,CAAA;IACrC,IAAI,QAAQ,YAAY,KAAK;QAAE,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;IAC9D,OAAO;QACL,KAAK;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC;QAC9B,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,OAAO;KAC5B,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,CAAC,GAAG,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACzD,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAA;AACtD,CAAC;AAED,SAAS,YAAY;IACnB,4DAA4D;IAC5D,qEAAqE;IACrE,MAAM,CAAC,GAAI,UAAwE,CAAC,SAAS,CAAA;IAC7F,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;QACjB,OAAO;YACL,MAAM,EAAE,CAAC,CAAC,QAAQ;YAClB,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAChC,SAAS,EAAE,GAAG;SACf,CAAA;IACH,CAAC;IACD,OAAO;IACP,MAAM,CAAC,GAAI,UAAoE,CAAC,OAAO,CAAA;IACvF,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC;QAChB,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,QAAQ;YACd,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG;SAC/C,CAAA;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAA;AAC1C,CAAC;AAED,SAAS,eAAe,CAAC,EAAU;IACjC,IAAI,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,OAAO,CAAA;IACvE,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAA;IAC5C,IAAI,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAA;IACxC,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAA;IAC5C,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAA;IAC9D,OAAO,KAAK,CAAA;AACd,CAAC"}

package/lib/config.d.ts

@@ -0,0 +1,5 @@
+import type { InitOptions } from './types.js';
+export declare function setConfig(cfg: InitOptions): void;
+export declare function getConfig(): InitOptions | null;
+export declare function isInitialized(): boolean;
+//# sourceMappingURL=config.d.ts.map

package/lib/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAI7C,wBAAgB,SAAS,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAEhD;AAED,wBAAgB,SAAS,IAAI,WAAW,GAAG,IAAI,CAE9C;AAED,wBAAgB,aAAa,IAAI,OAAO,CAEvC"}

package/lib/config.js

@@ -0,0 +1,11 @@
+let _cfg = null;
+export function setConfig(cfg) {
+    _cfg = cfg;
+}
+export function getConfig() {
+    return _cfg;
+}
+export function isInitialized() {
+    return _cfg !== null;
+}
+//# sourceMappingURL=config.js.map

package/lib/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,IAAI,IAAI,GAAuB,IAAI,CAAA;AAEnC,MAAM,UAAU,SAAS,CAAC,GAAgB;IACxC,IAAI,GAAG,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,KAAK,IAAI,CAAA;AACtB,CAAC"}

package/lib/hooks/browser.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Wire window.onerror + unhandledrejection so uncaught browser errors
+ * land as Sentori events automatically. Idempotent — safe to call
+ * twice; the second call no-ops.
+ */
+export declare function installBrowserHooks(): boolean;
+/** Test helper — resets the idempotency latch. */
+export declare function _resetBrowserHooksForTesting(): void;
+//# sourceMappingURL=browser.d.ts.map

package/lib/hooks/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/hooks/browser.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CA4B7C;AAED,kDAAkD;AAClD,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD"}

package/lib/hooks/browser.js

@@ -0,0 +1,38 @@
+import { captureError } from '../capture.js';
+let installed = false;
+/**
+ * Wire window.onerror + unhandledrejection so uncaught browser errors
+ * land as Sentori events automatically. Idempotent — safe to call
+ * twice; the second call no-ops.
+ */
+export function installBrowserHooks() {
+    if (installed)
+        return true;
+    const w = globalThis;
+    if (typeof w.addEventListener !== 'function')
+        return false;
+    const onError = (e) => {
+        const err = e.error;
+        if (err instanceof Error)
+            captureError(err);
+        else if (typeof e.message === 'string') {
+            captureError(new Error(e.message));
+        }
+    };
+    const onRejection = (e) => {
+        const reason = e.reason;
+        if (reason instanceof Error)
+            captureError(reason);
+        else
+            captureError(new Error(typeof reason === 'string' ? reason : 'unhandled rejection'));
+    };
+    w.addEventListener('error', onError);
+    w.addEventListener('unhandledrejection', onRejection);
+    installed = true;
+    return true;
+}
+/** Test helper — resets the idempotency latch. */
+export function _resetBrowserHooksForTesting() {
+    installed = false;
+}
+//# sourceMappingURL=browser.js.map

package/lib/hooks/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../../src/hooks/browser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE5C,IAAI,SAAS,GAAG,KAAK,CAAA;AAErB;;;;GAIG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,SAAS;QAAE,OAAO,IAAI,CAAA;IAC1B,MAAM,CAAC,GAAG,UAKT,CAAA;IACD,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,UAAU;QAAE,OAAO,KAAK,CAAA;IAE1D,MAAM,OAAO,GAAG,CAAC,CAAqB,EAAE,EAAE;QACxC,MAAM,GAAG,GAAI,CAAgB,CAAC,KAAK,CAAA;QACnC,IAAI,GAAG,YAAY,KAAK;YAAE,YAAY,CAAC,GAAG,CAAC,CAAA;aACtC,IAAI,OAAQ,CAAgB,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACvD,YAAY,CAAC,IAAI,KAAK,CAAE,CAAgB,CAAC,OAAO,CAAC,CAAC,CAAA;QACpD,CAAC;IACH,CAAC,CAAA;IAED,MAAM,WAAW,GAAG,CAAC,CAAgC,EAAE,EAAE;QACvD,MAAM,MAAM,GAAI,CAA2B,CAAC,MAAM,CAAA;QAClD,IAAI,MAAM,YAAY,KAAK;YAAE,YAAY,CAAC,MAAM,CAAC,CAAA;;YAC5C,YAAY,CAAC,IAAI,KAAK,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAA;IAC3F,CAAC,CAAA;IAED,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACpC,CAAC,CAAC,gBAAgB,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAA;IACrD,SAAS,GAAG,IAAI,CAAA;IAChB,OAAO,IAAI,CAAA;AACb,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,4BAA4B;IAC1C,SAAS,GAAG,KAAK,CAAA;AACnB,CAAC"}

package/lib/hooks/node.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Wire process.on('uncaughtException') + 'unhandledRejection'.
+ * Idempotent. Returns false if not running on Node (no `process.on`).
+ *
+ * Node policy notes:
+ *   - We do NOT call process.exit on uncaughtException; Sentori doesn't
+ *     own the host's crash strategy. The host's existing handler
+ *     (default: log + exit 1) runs after ours.
+ *   - Bun + Deno expose process.on for compatibility; the same code
+ *     path covers them.
+ */
+export declare function installNodeHooks(): boolean;
+export declare function _resetNodeHooksForTesting(): void;
+//# sourceMappingURL=node.d.ts.map

package/lib/hooks/node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../src/hooks/node.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAc1C;AAED,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD"}

package/lib/hooks/node.js

@@ -0,0 +1,35 @@
+import { captureError } from '../capture.js';
+let installed = false;
+/**
+ * Wire process.on('uncaughtException') + 'unhandledRejection'.
+ * Idempotent. Returns false if not running on Node (no `process.on`).
+ *
+ * Node policy notes:
+ *   - We do NOT call process.exit on uncaughtException; Sentori doesn't
+ *     own the host's crash strategy. The host's existing handler
+ *     (default: log + exit 1) runs after ours.
+ *   - Bun + Deno expose process.on for compatibility; the same code
+ *     path covers them.
+ */
+export function installNodeHooks() {
+    if (installed)
+        return true;
+    const p = globalThis.process;
+    if (!p || typeof p.on !== 'function')
+        return false;
+    p.on('uncaughtException', (err) => {
+        captureError(err);
+    });
+    p.on('unhandledRejection', (reason) => {
+        if (reason instanceof Error)
+            captureError(reason);
+        else
+            captureError(new Error(typeof reason === 'string' ? reason : 'unhandled rejection'));
+    });
+    installed = true;
+    return true;
+}
+export function _resetNodeHooksForTesting() {
+    installed = false;
+}
+//# sourceMappingURL=node.js.map

package/lib/hooks/node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../../src/hooks/node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE5C,IAAI,SAAS,GAAG,KAAK,CAAA;AAErB;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB;IAC9B,IAAI,SAAS;QAAE,OAAO,IAAI,CAAA;IAC1B,MAAM,CAAC,GAAI,UAA2C,CAAC,OAAO,CAAA;IAC9D,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,UAAU;QAAE,OAAO,KAAK,CAAA;IAElD,CAAC,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAU,EAAE,EAAE;QACvC,YAAY,CAAC,GAAG,CAAC,CAAA;IACnB,CAAC,CAAC,CAAA;IACF,CAAC,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAe,EAAE,EAAE;QAC7C,IAAI,MAAM,YAAY,KAAK;YAAE,YAAY,CAAC,MAAM,CAAC,CAAA;;YAC5C,YAAY,CAAC,IAAI,KAAK,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAA;IAC3F,CAAC,CAAC,CAAA;IACF,SAAS,GAAG,IAAI,CAAA;IAChB,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,SAAS,GAAG,KAAK,CAAA;AACnB,CAAC"}

package/lib/index.d.ts

@@ -0,0 +1,5 @@
+export { addBreadcrumb, clearBreadcrumbs, getBreadcrumbs } from './breadcrumbs.js';
+export { captureError, captureException, getUser, setUser } from './capture.js';
+export { initSentori } from './init.js';
+export type { Breadcrumb, BreadcrumbType, CaptureExtras, Event, Frame, InitOptions, SentoriError, Tags, User, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAClF,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,YAAY,EACV,UAAU,EACV,cAAc,EACd,aAAa,EACb,KAAK,EACL,KAAK,EACL,WAAW,EACX,YAAY,EACZ,IAAI,EACJ,IAAI,GACL,MAAM,YAAY,CAAA"}

package/lib/index.js

@@ -0,0 +1,4 @@
+export { addBreadcrumb, clearBreadcrumbs, getBreadcrumbs } from './breadcrumbs.js';
+export { captureError, captureException, getUser, setUser } from './capture.js';
+export { initSentori } from './init.js';
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAClF,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA"}

package/lib/init.d.ts

@@ -0,0 +1,12 @@
+import type { InitOptions } from './types.js';
+/**
+ * Configure the SDK and (by default) wire global error handlers.
+ *
+ * Browser: window 'error' + 'unhandledrejection' → captureError.
+ * Node: process 'uncaughtException' + 'unhandledRejection' → captureError.
+ *
+ * Pass `enableGlobalHooks: false` if you want to drive captures
+ * manually (e.g. tests, or a host that owns its own crash plumbing).
+ */
+export declare function initSentori(options: InitOptions): void;
+//# sourceMappingURL=init.d.ts.map

package/lib/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE7C;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI,CAMtD"}

package/lib/init.js

@@ -0,0 +1,22 @@
+import { setConfig } from './config.js';
+import { installBrowserHooks } from './hooks/browser.js';
+import { installNodeHooks } from './hooks/node.js';
+/**
+ * Configure the SDK and (by default) wire global error handlers.
+ *
+ * Browser: window 'error' + 'unhandledrejection' → captureError.
+ * Node: process 'uncaughtException' + 'unhandledRejection' → captureError.
+ *
+ * Pass `enableGlobalHooks: false` if you want to drive captures
+ * manually (e.g. tests, or a host that owns its own crash plumbing).
+ */
+export function initSentori(options) {
+    setConfig(options);
+    if (options.enableGlobalHooks === false)
+        return;
+    // Browser comes first because both globals can exist in some
+    // bundlers' shims; we want browser semantics on the web.
+    if (!installBrowserHooks())
+        installNodeHooks();
+}
+//# sourceMappingURL=init.js.map

package/lib/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAGlD;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,OAAoB;IAC9C,SAAS,CAAC,OAAO,CAAC,CAAA;IAClB,IAAI,OAAO,CAAC,iBAAiB,KAAK,KAAK;QAAE,OAAM;IAC/C,6DAA6D;IAC7D,yDAAyD;IACzD,IAAI,CAAC,mBAAmB,EAAE;QAAE,gBAAgB,EAAE,CAAA;AAChD,CAAC"}

package/lib/stack.d.ts

@@ -0,0 +1,4 @@
+import type { Frame } from './types.js';
+/** Best-effort parse of an `Error.stack` string into Sentori frames. */
+export declare function parseStack(stack: string | undefined): Frame[];
+//# sourceMappingURL=stack.d.ts.map

package/lib/stack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack.d.ts","sourceRoot":"","sources":["../src/stack.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AASvC,wEAAwE;AACxE,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,KAAK,EAAE,CAoB7D"}

package/lib/stack.js

@@ -0,0 +1,39 @@
+// V8 / Node / Bun: "at fn (file:line:col)" or "at file:line:col" or "at fn file:line:col"
+// File can be a URL (https://…), so we anchor on the trailing `:\d+:\d+\)?$`
+// and let `(?<file>.+?)` swallow whatever comes before.
+const V8_RE = /^\s*at\s+(?:(?<fn>.+?)\s+)?\(?(?<file>.+?):(?<line>\d+):(?<col>\d+)\)?\s*$/;
+// SpiderMonkey / Safari: "fn@file:line:col" — same trailing anchor.
+const SPIDER_RE = /^(?:(?<fn>[^@]*)@)?(?<file>.+?):(?<line>\d+):(?<col>\d+)\s*$/;
+/** Best-effort parse of an `Error.stack` string into Sentori frames. */
+export function parseStack(stack) {
+    if (!stack)
+        return [];
+    const lines = stack.split('\n');
+    const out = [];
+    for (const raw of lines) {
+        const line = raw.trim();
+        if (!line)
+            continue;
+        const m = V8_RE.exec(line) ?? SPIDER_RE.exec(line);
+        if (!m?.groups)
+            continue;
+        const file = m.groups.file ?? '<anonymous>';
+        out.push({
+            absolutePath: file,
+            column: Number(m.groups.col),
+            file: shortFile(file),
+            function: m.groups.fn?.trim(),
+            inApp: !file.includes('node_modules') && !file.startsWith('node:'),
+            line: Number(m.groups.line),
+        });
+    }
+    return out;
+}
+function shortFile(absolute) {
+    // Strip protocol + leading path noise so the dashboard shows
+    // e.g. "App.tsx" instead of "https://example.com/static/App.tsx".
+    const noProto = absolute.replace(/^https?:\/\/[^/]+\//, '');
+    const tail = noProto.split('/').slice(-2).join('/');
+    return tail || absolute;
+}
+//# sourceMappingURL=stack.js.map

package/lib/stack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack.js","sourceRoot":"","sources":["../src/stack.ts"],"names":[],"mappings":"AAEA,0FAA0F;AAC1F,6EAA6E;AAC7E,wDAAwD;AACxD,MAAM,KAAK,GAAG,4EAA4E,CAAA;AAC1F,oEAAoE;AACpE,MAAM,SAAS,GAAG,8DAA8D,CAAA;AAEhF,wEAAwE;AACxE,MAAM,UAAU,UAAU,CAAC,KAAyB;IAClD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAA;IACrB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,GAAG,GAAY,EAAE,CAAA;IACvB,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;QACvB,IAAI,CAAC,IAAI;YAAE,SAAQ;QACnB,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClD,IAAI,CAAC,CAAC,EAAE,MAAM;YAAE,SAAQ;QACxB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,aAAa,CAAA;QAC3C,GAAG,CAAC,IAAI,CAAC;YACP,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAC5B,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC;YACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE;YAC7B,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAClE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;SAC5B,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IACjC,6DAA6D;IAC7D,kEAAkE;IAClE,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAA;IAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACnD,OAAO,IAAI,IAAI,QAAQ,CAAA;AACzB,CAAC"}

package/lib/transport.d.ts

@@ -0,0 +1,17 @@
+import type { Event } from './types.js';
+/**
+ * Minimal HTTP transport. POST /v1/events with a Bearer token.
+ * - Browser: prefers `navigator.sendBeacon` on page-unload paths;
+ *   otherwise plain fetch with `keepalive: true` so events survive
+ *   a tab close mid-flight.
+ * - Node: plain fetch (Node 18+ has it global).
+ *
+ * On 4xx/5xx the SDK currently drops the event silently — retry +
+ * persistent queue is a follow-up if anyone actually wants it.
+ */
+export type TransportConfig = {
+    ingestUrl: string;
+    token: string;
+};
+export declare function send(cfg: TransportConfig, event: Event): Promise<void>;
+//# sourceMappingURL=transport.d.ts.map

package/lib/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAEvC;;;;;;;;;GASG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AAED,wBAAsB,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAwC5E"}

package/lib/transport.js

@@ -0,0 +1,43 @@
+export async function send(cfg, event) {
+    const url = `${cfg.ingestUrl.replace(/\/+$/, '')}/v1/events`;
+    const body = JSON.stringify(event);
+    const headers = {
+        Authorization: `Bearer ${cfg.token}`,
+        'Content-Type': 'application/json',
+        'Sentori-Sdk': 'sentori-javascript/0.1.0',
+    };
+    // Browser: navigator.sendBeacon is fire-and-forget and survives
+    // tab close. Bound by user-agent quotas (~64KB), so we feature-detect
+    // and only use it for small bodies.
+    const beacon = globalThis
+        .navigator?.sendBeacon;
+    if (typeof beacon === 'function' && body.length < 60_000) {
+        try {
+            const blob = new Blob([body], { type: 'application/json' });
+            // sendBeacon doesn't carry headers — Authorization moves into
+            // a query param so the server's existing Bearer auth still works.
+            const beaconUrl = `${url}?token=${encodeURIComponent(cfg.token)}`;
+            if (beacon.call(globalThis.navigator, beaconUrl, blob))
+                return;
+        }
+        catch {
+            // fall through to fetch
+        }
+    }
+    try {
+        await fetch(url, {
+            body,
+            headers,
+            keepalive: true,
+            method: 'POST',
+        });
+    }
+    catch (e) {
+        // No retry — log and forget. Hosts that care can wrap and add
+        // their own retry policy at the app layer.
+        if (typeof console !== 'undefined') {
+            console.warn('[sentori] transport failed:', e.message);
+        }
+    }
+}
+//# sourceMappingURL=transport.js.map

package/lib/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAiBA,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,GAAoB,EAAE,KAAY;IAC3D,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAA;IAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAClC,MAAM,OAAO,GAAG;QACd,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE;QACpC,cAAc,EAAE,kBAAkB;QAClC,aAAa,EAAE,0BAA0B;KAC1C,CAAA;IAED,gEAAgE;IAChE,sEAAsE;IACtE,oCAAoC;IACpC,MAAM,MAAM,GAAI,UAA+E;SAC5F,SAAS,EAAE,UAAU,CAAA;IACxB,IAAI,OAAO,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAC3D,8DAA8D;YAC9D,kEAAkE;YAClE,MAAM,SAAS,GAAG,GAAG,GAAG,UAAU,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAA;YACjE,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC;gBAAE,OAAM;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,GAAG,EAAE;YACf,IAAI;YACJ,OAAO;YACP,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,MAAM;SACf,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,8DAA8D;QAC9D,2CAA2C;QAC3C,IAAI,OAAO,OAAO,KAAK,WAAW,EAAE,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,6BAA6B,EAAG,CAAW,CAAC,OAAO,CAAC,CAAA;QACnE,CAAC;IACH,CAAC;AACH,CAAC"}

package/lib/types.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Wire shape for an event sent to the Sentori `/v1/events` endpoint.
+ * Identical to the protocol documented in `docs/protocol.md` and the
+ * server's `event::Event` Rust type.
+ */
+export type Event = {
+    app: {
+        build?: string;
+        framework?: {
+            name: string;
+            version: string;
+        };
+        version: string;
+    };
+    breadcrumbs: Breadcrumb[];
+    device: {
+        locale?: string;
+        model?: string;
+        os: string;
+        osVersion: string;
+    };
+    environment: string;
+    error: SentoriError;
+    fingerprint?: string[];
+    id: string;
+    kind: 'error';
+    platform: 'javascript';
+    release: string;
+    spanId?: null | string;
+    tags?: Tags;
+    timestamp: string;
+    traceId?: null | string;
+    user?: null | User;
+};
+export type SentoriError = {
+    cause: null | SentoriError;
+    message: string;
+    stack: Frame[];
+    type: string;
+};
+export type Frame = {
+    absolutePath?: string;
+    column?: number;
+    file: string;
+    function?: string;
+    inApp: boolean;
+    line: number;
+};
+export type BreadcrumbType = 'custom' | 'log' | 'nav' | 'net' | 'user';
+export type Breadcrumb = {
+    data: Record<string, unknown>;
+    timestamp: string;
+    type: BreadcrumbType;
+};
+/** PII-minimal — same shape as the RN SDK and the server schema. */
+export type User = {
+    anonymous?: boolean;
+    id?: string;
+};
+export type Tags = Record<string, string>;
+export type CaptureExtras = {
+    fingerprint?: string[];
+    tags?: Tags;
+    user?: User;
+};
+export type InitOptions = {
+    /** Override automatic global hooks. Default: true on browser + node. */
+    enableGlobalHooks?: boolean;
+    /** "prod" / "dev" / "staging" / whatever you want. */
+    environment: string;
+    /** e.g. https://ingest.sentori.golia.jp */
+    ingestUrl: string;
+    /** e.g. "myapp@1.2.3+456" */
+    release: string;
+    /** st_pk_<26 base32 chars> */
+    token: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/lib/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,MAAM,KAAK,GAAG;IAClB,GAAG,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IACvF,WAAW,EAAE,UAAU,EAAE,CAAA;IACzB,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1E,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,YAAY,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,OAAO,CAAA;IACb,QAAQ,EAAE,YAAY,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,IAAI,GAAG,MAAM,CAAA;IACtB,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,IAAI,GAAG,MAAM,CAAA;IACvB,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,IAAI,GAAG,YAAY,CAAA;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,KAAK,EAAE,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED,MAAM,MAAM,KAAK,GAAG;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,OAAO,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,CAAA;AAEtE,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,cAAc,CAAA;CACrB,CAAA;AAED,oEAAoE;AACpE,MAAM,MAAM,IAAI,GAAG;IAAE,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvD,MAAM,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AAEzC,MAAM,MAAM,aAAa,GAAG;IAC1B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,IAAI,CAAC,EAAE,IAAI,CAAA;CACZ,CAAA;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,wEAAwE;IACxE,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,sDAAsD;IACtD,WAAW,EAAE,MAAM,CAAA;IACnB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAA;IACjB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAA;CACd,CAAA"}

package/lib/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/lib/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/lib/uuid.d.ts

@@ -0,0 +1,10 @@
+/**
+ * uuid v7 (timestamp-prefixed). Modern Node ≥ 19 + browsers expose
+ * `crypto.randomUUID()` for v4 — that gives us the entropy half;
+ * v7 layout is cheap to assemble manually.
+ *
+ * Layout (RFC 9562 v7):
+ *   ms (48 bits) | ver=7 (4) | rand_a (12) | var=10 (2) | rand_b (62)
+ */
+export declare function uuidV7(): string;
+//# sourceMappingURL=uuid.d.ts.map

package/lib/uuid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uuid.d.ts","sourceRoot":"","sources":["../src/uuid.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,MAAM,IAAI,MAAM,CAgC/B"}

package/lib/uuid.js

@@ -0,0 +1,54 @@
+/**
+ * uuid v7 (timestamp-prefixed). Modern Node ≥ 19 + browsers expose
+ * `crypto.randomUUID()` for v4 — that gives us the entropy half;
+ * v7 layout is cheap to assemble manually.
+ *
+ * Layout (RFC 9562 v7):
+ *   ms (48 bits) | ver=7 (4) | rand_a (12) | var=10 (2) | rand_b (62)
+ */
+export function uuidV7() {
+    const ms = Date.now();
+    const rand = new Uint8Array(10);
+    cryptoRandomFill(rand);
+    // 6 bytes of timestamp (ms), big-endian
+    const t = new Uint8Array(6);
+    let n = ms;
+    for (let i = 5; i >= 0; i--) {
+        t[i] = n & 0xff;
+        n = Math.floor(n / 256);
+    }
+    // pack version + variant
+    rand[0] = (rand[0] & 0x0f) | 0x70; // version 7 in high nibble of byte 6
+    rand[2] = (rand[2] & 0x3f) | 0x80; // variant 10 in high two bits of byte 8
+    const bytes = new Uint8Array(16);
+    bytes.set(t, 0);
+    bytes.set(rand, 6);
+    return (hex(bytes.subarray(0, 4)) +
+        '-' +
+        hex(bytes.subarray(4, 6)) +
+        '-' +
+        hex(bytes.subarray(6, 8)) +
+        '-' +
+        hex(bytes.subarray(8, 10)) +
+        '-' +
+        hex(bytes.subarray(10, 16)));
+}
+function cryptoRandomFill(buf) {
+    // Browser + Node 19+ + Bun all expose globalThis.crypto.
+    const c = globalThis.crypto;
+    if (c?.getRandomValues) {
+        c.getRandomValues(buf);
+        return;
+    }
+    // Last-resort Math.random (only hits in very old envs; entropy
+    // quality is bad but we still want a unique-ish id).
+    for (let i = 0; i < buf.length; i++)
+        buf[i] = Math.floor(Math.random() * 256);
+}
+function hex(b) {
+    let s = '';
+    for (const x of b)
+        s += x.toString(16).padStart(2, '0');
+    return s;
+}
+//# sourceMappingURL=uuid.js.map

package/lib/uuid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uuid.js","sourceRoot":"","sources":["../src/uuid.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM;IACpB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACrB,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAC/B,gBAAgB,CAAC,IAAI,CAAC,CAAA;IAEtB,wCAAwC;IACxC,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAA;IAC3B,IAAI,CAAC,GAAG,EAAE,CAAA;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAA;QACf,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAA;IACzB,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAA,CAAC,qCAAqC;IACxE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAA,CAAC,wCAAwC;IAE3E,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAChC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACf,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAElB,OAAO,CACL,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACzB,GAAG;QACH,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACzB,GAAG;QACH,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACzB,GAAG;QACH,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1B,GAAG;QACH,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAC5B,CAAA;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAe;IACvC,yDAAyD;IACzD,MAAM,CAAC,GAAI,UAAyE,CAAC,MAAM,CAAA;IAC3F,IAAI,CAAC,EAAE,eAAe,EAAE,CAAC;QACvB,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;QACtB,OAAM;IACR,CAAC;IACD,+DAA+D;IAC/D,qDAAqD;IACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAA;AAC/E,CAAC;AAED,SAAS,GAAG,CAAC,CAAa;IACxB,IAAI,CAAC,GAAG,EAAE,CAAA;IACV,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACvD,OAAO,CAAC,CAAA;AACV,CAAC"}

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@goliapkg/sentori-javascript",
+  "version": "0.1.0",
+  "description": "Sentori SDK for browsers and Node — error capture, breadcrumbs, and HTTP transport. Same wire protocol as @goliapkg/sentori-react-native.",
+  "license": "MIT",
+  "homepage": "https://sentori.golia.jp",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/goliajp/sentori.git",
+    "directory": "sdk/javascript"
+  },
+  "bugs": {
+    "url": "https://github.com/goliajp/sentori/issues"
+  },
+  "keywords": [
+    "sentori",
+    "error-tracking",
+    "crash-reporting",
+    "monitoring",
+    "javascript",
+    "browser",
+    "node"
+  ],
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "import": "./lib/index.js"
+    }
+  },
+  "files": [
+    "lib/",
+    "src/",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc --noEmit",
+    "test": "bun test",
+    "prepack": "bun run build"
+  },
+  "devDependencies": {
+    "@types/bun": "latest",
+    "typescript": "^5"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/src/breadcrumbs.ts

@@ -0,0 +1,27 @@
+import type { Breadcrumb, BreadcrumbType } from './types.js'
+
+const MAX = 100
+const buf: Breadcrumb[] = []
+
+export type AddBreadcrumbInput = {
+  data?: Record<string, unknown>
+  type: BreadcrumbType
+}
+
+export function addBreadcrumb(input: AddBreadcrumbInput): void {
+  const crumb: Breadcrumb = {
+    data: input.data ?? {},
+    timestamp: new Date().toISOString(),
+    type: input.type,
+  }
+  buf.push(crumb)
+  if (buf.length > MAX) buf.shift()
+}
+
+export function getBreadcrumbs(): Breadcrumb[] {
+  return [...buf]
+}
+
+export function clearBreadcrumbs(): void {
+  buf.length = 0
+}

package/src/capture.ts

@@ -0,0 +1,94 @@
+import { getBreadcrumbs } from './breadcrumbs.js'
+import { getConfig, isInitialized } from './config.js'
+import { parseStack } from './stack.js'
+import { send } from './transport.js'
+import type { CaptureExtras, Event, SentoriError, User } from './types.js'
+import { uuidV7 } from './uuid.js'
+
+let _user: User | null = null
+
+/**
+ * Attach a stable user identifier to events captured after this call.
+ *
+ * PII policy: User shape is `{ id?, anonymous? }` only — no email,
+ * name, IP, or other identifying fields. The server schema enforces
+ * the same shape; extras would be rejected with `validationFailed`.
+ */
+export function setUser(user: User | null): void {
+  _user = user
+}
+
+export function getUser(): User | null {
+  return _user
+}
+
+export function captureError(error: Error, extras?: CaptureExtras): void {
+  if (!isInitialized()) return
+  const cfg = getConfig()!
+  const event: Event = {
+    app: { version: parseRelease(cfg.release).version },
+    breadcrumbs: getBreadcrumbs(),
+    device: detectDevice(),
+    environment: cfg.environment,
+    error: errorToObject(error),
+    fingerprint: extras?.fingerprint,
+    id: uuidV7(),
+    kind: 'error',
+    platform: 'javascript',
+    release: cfg.release,
+    tags: extras?.tags,
+    timestamp: new Date().toISOString(),
+    user: extras?.user ?? _user,
+  }
+  void send({ ingestUrl: cfg.ingestUrl, token: cfg.token }, event)
+}
+
+export const captureException = captureError
+
+function errorToObject(error: Error): SentoriError {
+  const causeRaw = (error as { cause?: unknown }).cause
+  let cause: SentoriError | null = null
+  if (causeRaw instanceof Error) cause = errorToObject(causeRaw)
+  return {
+    cause,
+    message: error.message,
+    stack: parseStack(error.stack),
+    type: error.name || 'Error',
+  }
+}
+
+function parseRelease(release: string): { build?: string; version: string } {
+  const m = /^(?:[^@]+@)?([^+]+)(?:\+(.+))?$/.exec(release)
+  return { build: m?.[2], version: m?.[1] ?? '0.0.0' }
+}
+
+function detectDevice(): Event['device'] {
+  // Browser: light-touch UA sniff. We deliberately avoid full
+  // fingerprinting — the field is for grouping context, not analytics.
+  const w = (globalThis as { navigator?: { language?: string; userAgent?: string } }).navigator
+  if (w?.userAgent) {
+    return {
+      locale: w.language,
+      os: detectBrowserOs(w.userAgent),
+      osVersion: '0',
+    }
+  }
+  // Node
+  const p = (globalThis as { process?: { platform?: string; version?: string } }).process
+  if (p?.platform) {
+    return {
+      os: p.platform,
+      osVersion: p.version?.replace(/^v/, '') ?? '0',
+    }
+  }
+  return { os: 'unknown', osVersion: '0' }
+}
+
+function detectBrowserOs(ua: string): string {
+  if (ua.includes('Mac OS X') || ua.includes('Macintosh')) return 'macos'
+  if (ua.includes('Windows')) return 'windows'
+  if (ua.includes('Linux')) return 'linux'
+  if (ua.includes('Android')) return 'android'
+  if (ua.includes('iPhone') || ua.includes('iPad')) return 'ios'
+  return 'web'
+}

package/src/config.ts

@@ -0,0 +1,15 @@
+import type { InitOptions } from './types.js'
+
+let _cfg: InitOptions | null = null
+
+export function setConfig(cfg: InitOptions): void {
+  _cfg = cfg
+}
+
+export function getConfig(): InitOptions | null {
+  return _cfg
+}
+
+export function isInitialized(): boolean {
+  return _cfg !== null
+}

package/src/hooks/browser.ts

@@ -0,0 +1,43 @@
+import { captureError } from '../capture.js'
+
+let installed = false
+
+/**
+ * Wire window.onerror + unhandledrejection so uncaught browser errors
+ * land as Sentori events automatically. Idempotent — safe to call
+ * twice; the second call no-ops.
+ */
+export function installBrowserHooks(): boolean {
+  if (installed) return true
+  const w = globalThis as {
+    addEventListener?: (
+      type: string,
+      handler: (e: Event | PromiseRejectionEvent | ErrorEvent) => void
+    ) => void
+  }
+  if (typeof w.addEventListener !== 'function') return false
+
+  const onError = (e: Event | ErrorEvent) => {
+    const err = (e as ErrorEvent).error
+    if (err instanceof Error) captureError(err)
+    else if (typeof (e as ErrorEvent).message === 'string') {
+      captureError(new Error((e as ErrorEvent).message))
+    }
+  }
+
+  const onRejection = (e: Event | PromiseRejectionEvent) => {
+    const reason = (e as PromiseRejectionEvent).reason
+    if (reason instanceof Error) captureError(reason)
+    else captureError(new Error(typeof reason === 'string' ? reason : 'unhandled rejection'))
+  }
+
+  w.addEventListener('error', onError)
+  w.addEventListener('unhandledrejection', onRejection)
+  installed = true
+  return true
+}
+
+/** Test helper — resets the idempotency latch. */
+export function _resetBrowserHooksForTesting(): void {
+  installed = false
+}

package/src/hooks/node.ts

@@ -0,0 +1,34 @@
+import { captureError } from '../capture.js'
+
+let installed = false
+
+/**
+ * Wire process.on('uncaughtException') + 'unhandledRejection'.
+ * Idempotent. Returns false if not running on Node (no `process.on`).
+ *
+ * Node policy notes:
+ *   - We do NOT call process.exit on uncaughtException; Sentori doesn't
+ *     own the host's crash strategy. The host's existing handler
+ *     (default: log + exit 1) runs after ours.
+ *   - Bun + Deno expose process.on for compatibility; the same code
+ *     path covers them.
+ */
+export function installNodeHooks(): boolean {
+  if (installed) return true
+  const p = (globalThis as { process?: NodeJS.Process }).process
+  if (!p || typeof p.on !== 'function') return false
+
+  p.on('uncaughtException', (err: Error) => {
+    captureError(err)
+  })
+  p.on('unhandledRejection', (reason: unknown) => {
+    if (reason instanceof Error) captureError(reason)
+    else captureError(new Error(typeof reason === 'string' ? reason : 'unhandled rejection'))
+  })
+  installed = true
+  return true
+}
+
+export function _resetNodeHooksForTesting(): void {
+  installed = false
+}

package/src/index.ts

@@ -0,0 +1,14 @@
+export { addBreadcrumb, clearBreadcrumbs, getBreadcrumbs } from './breadcrumbs.js'
+export { captureError, captureException, getUser, setUser } from './capture.js'
+export { initSentori } from './init.js'
+export type {
+  Breadcrumb,
+  BreadcrumbType,
+  CaptureExtras,
+  Event,
+  Frame,
+  InitOptions,
+  SentoriError,
+  Tags,
+  User,
+} from './types.js'

package/src/init.ts

@@ -0,0 +1,21 @@
+import { setConfig } from './config.js'
+import { installBrowserHooks } from './hooks/browser.js'
+import { installNodeHooks } from './hooks/node.js'
+import type { InitOptions } from './types.js'
+
+/**
+ * Configure the SDK and (by default) wire global error handlers.
+ *
+ * Browser: window 'error' + 'unhandledrejection' → captureError.
+ * Node: process 'uncaughtException' + 'unhandledRejection' → captureError.
+ *
+ * Pass `enableGlobalHooks: false` if you want to drive captures
+ * manually (e.g. tests, or a host that owns its own crash plumbing).
+ */
+export function initSentori(options: InitOptions): void {
+  setConfig(options)
+  if (options.enableGlobalHooks === false) return
+  // Browser comes first because both globals can exist in some
+  // bundlers' shims; we want browser semantics on the web.
+  if (!installBrowserHooks()) installNodeHooks()
+}

package/src/stack.ts

@@ -0,0 +1,39 @@
+import type { Frame } from './types.js'
+
+// V8 / Node / Bun: "at fn (file:line:col)" or "at file:line:col" or "at fn file:line:col"
+// File can be a URL (https://…), so we anchor on the trailing `:\d+:\d+\)?$`
+// and let `(?<file>.+?)` swallow whatever comes before.
+const V8_RE = /^\s*at\s+(?:(?<fn>.+?)\s+)?\(?(?<file>.+?):(?<line>\d+):(?<col>\d+)\)?\s*$/
+// SpiderMonkey / Safari: "fn@file:line:col" — same trailing anchor.
+const SPIDER_RE = /^(?:(?<fn>[^@]*)@)?(?<file>.+?):(?<line>\d+):(?<col>\d+)\s*$/
+
+/** Best-effort parse of an `Error.stack` string into Sentori frames. */
+export function parseStack(stack: string | undefined): Frame[] {
+  if (!stack) return []
+  const lines = stack.split('\n')
+  const out: Frame[] = []
+  for (const raw of lines) {
+    const line = raw.trim()
+    if (!line) continue
+    const m = V8_RE.exec(line) ?? SPIDER_RE.exec(line)
+    if (!m?.groups) continue
+    const file = m.groups.file ?? '<anonymous>'
+    out.push({
+      absolutePath: file,
+      column: Number(m.groups.col),
+      file: shortFile(file),
+      function: m.groups.fn?.trim(),
+      inApp: !file.includes('node_modules') && !file.startsWith('node:'),
+      line: Number(m.groups.line),
+    })
+  }
+  return out
+}
+
+function shortFile(absolute: string): string {
+  // Strip protocol + leading path noise so the dashboard shows
+  // e.g. "App.tsx" instead of "https://example.com/static/App.tsx".
+  const noProto = absolute.replace(/^https?:\/\/[^/]+\//, '')
+  const tail = noProto.split('/').slice(-2).join('/')
+  return tail || absolute
+}

package/src/transport.ts

@@ -0,0 +1,58 @@
+import type { Event } from './types.js'
+
+/**
+ * Minimal HTTP transport. POST /v1/events with a Bearer token.
+ * - Browser: prefers `navigator.sendBeacon` on page-unload paths;
+ *   otherwise plain fetch with `keepalive: true` so events survive
+ *   a tab close mid-flight.
+ * - Node: plain fetch (Node 18+ has it global).
+ *
+ * On 4xx/5xx the SDK currently drops the event silently — retry +
+ * persistent queue is a follow-up if anyone actually wants it.
+ */
+export type TransportConfig = {
+  ingestUrl: string
+  token: string
+}
+
+export async function send(cfg: TransportConfig, event: Event): Promise<void> {
+  const url = `${cfg.ingestUrl.replace(/\/+$/, '')}/v1/events`
+  const body = JSON.stringify(event)
+  const headers = {
+    Authorization: `Bearer ${cfg.token}`,
+    'Content-Type': 'application/json',
+    'Sentori-Sdk': 'sentori-javascript/0.1.0',
+  }
+
+  // Browser: navigator.sendBeacon is fire-and-forget and survives
+  // tab close. Bound by user-agent quotas (~64KB), so we feature-detect
+  // and only use it for small bodies.
+  const beacon = (globalThis as { navigator?: { sendBeacon?: (u: string, b: Blob) => boolean } })
+    .navigator?.sendBeacon
+  if (typeof beacon === 'function' && body.length < 60_000) {
+    try {
+      const blob = new Blob([body], { type: 'application/json' })
+      // sendBeacon doesn't carry headers — Authorization moves into
+      // a query param so the server's existing Bearer auth still works.
+      const beaconUrl = `${url}?token=${encodeURIComponent(cfg.token)}`
+      if (beacon.call(globalThis.navigator, beaconUrl, blob)) return
+    } catch {
+      // fall through to fetch
+    }
+  }
+
+  try {
+    await fetch(url, {
+      body,
+      headers,
+      keepalive: true,
+      method: 'POST',
+    })
+  } catch (e) {
+    // No retry — log and forget. Hosts that care can wrap and add
+    // their own retry policy at the app layer.
+    if (typeof console !== 'undefined') {
+      console.warn('[sentori] transport failed:', (e as Error).message)
+    }
+  }
+}

package/src/types.ts

@@ -0,0 +1,70 @@
+/**
+ * Wire shape for an event sent to the Sentori `/v1/events` endpoint.
+ * Identical to the protocol documented in `docs/protocol.md` and the
+ * server's `event::Event` Rust type.
+ */
+export type Event = {
+  app: { build?: string; framework?: { name: string; version: string }; version: string }
+  breadcrumbs: Breadcrumb[]
+  device: { locale?: string; model?: string; os: string; osVersion: string }
+  environment: string
+  error: SentoriError
+  fingerprint?: string[]
+  id: string
+  kind: 'error'
+  platform: 'javascript'
+  release: string
+  spanId?: null | string
+  tags?: Tags
+  timestamp: string
+  traceId?: null | string
+  user?: null | User
+}
+
+export type SentoriError = {
+  cause: null | SentoriError
+  message: string
+  stack: Frame[]
+  type: string
+}
+
+export type Frame = {
+  absolutePath?: string
+  column?: number
+  file: string
+  function?: string
+  inApp: boolean
+  line: number
+}
+
+export type BreadcrumbType = 'custom' | 'log' | 'nav' | 'net' | 'user'
+
+export type Breadcrumb = {
+  data: Record<string, unknown>
+  timestamp: string
+  type: BreadcrumbType
+}
+
+/** PII-minimal — same shape as the RN SDK and the server schema. */
+export type User = { anonymous?: boolean; id?: string }
+
+export type Tags = Record<string, string>
+
+export type CaptureExtras = {
+  fingerprint?: string[]
+  tags?: Tags
+  user?: User
+}
+
+export type InitOptions = {
+  /** Override automatic global hooks. Default: true on browser + node. */
+  enableGlobalHooks?: boolean
+  /** "prod" / "dev" / "staging" / whatever you want. */
+  environment: string
+  /** e.g. https://ingest.sentori.golia.jp */
+  ingestUrl: string
+  /** e.g. "myapp@1.2.3+456" */
+  release: string
+  /** st_pk_<26 base32 chars> */
+  token: string
+}

package/src/uuid.ts

@@ -0,0 +1,59 @@
+/**
+ * uuid v7 (timestamp-prefixed). Modern Node ≥ 19 + browsers expose
+ * `crypto.randomUUID()` for v4 — that gives us the entropy half;
+ * v7 layout is cheap to assemble manually.
+ *
+ * Layout (RFC 9562 v7):
+ *   ms (48 bits) | ver=7 (4) | rand_a (12) | var=10 (2) | rand_b (62)
+ */
+export function uuidV7(): string {
+  const ms = Date.now()
+  const rand = new Uint8Array(10)
+  cryptoRandomFill(rand)
+
+  // 6 bytes of timestamp (ms), big-endian
+  const t = new Uint8Array(6)
+  let n = ms
+  for (let i = 5; i >= 0; i--) {
+    t[i] = n & 0xff
+    n = Math.floor(n / 256)
+  }
+
+  // pack version + variant
+  rand[0] = (rand[0]! & 0x0f) | 0x70 // version 7 in high nibble of byte 6
+  rand[2] = (rand[2]! & 0x3f) | 0x80 // variant 10 in high two bits of byte 8
+
+  const bytes = new Uint8Array(16)
+  bytes.set(t, 0)
+  bytes.set(rand, 6)
+
+  return (
+    hex(bytes.subarray(0, 4)) +
+    '-' +
+    hex(bytes.subarray(4, 6)) +
+    '-' +
+    hex(bytes.subarray(6, 8)) +
+    '-' +
+    hex(bytes.subarray(8, 10)) +
+    '-' +
+    hex(bytes.subarray(10, 16))
+  )
+}
+
+function cryptoRandomFill(buf: Uint8Array): void {
+  // Browser + Node 19+ + Bun all expose globalThis.crypto.
+  const c = (globalThis as { crypto?: { getRandomValues?: (b: Uint8Array) => void } }).crypto
+  if (c?.getRandomValues) {
+    c.getRandomValues(buf)
+    return
+  }
+  // Last-resort Math.random (only hits in very old envs; entropy
+  // quality is bad but we still want a unique-ish id).
+  for (let i = 0; i < buf.length; i++) buf[i] = Math.floor(Math.random() * 256)
+}
+
+function hex(b: Uint8Array): string {
+  let s = ''
+  for (const x of b) s += x.toString(16).padStart(2, '0')
+  return s
+}