@polishd/next 0.2.2 → 0.2.3-dev.0

package/dist/server/telemetry.js.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/server/telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAEvD,kEAAkE;AAClE,MAAM,CAAC,MAAM,0BAA0B,GACrC,wDAAwD,CAAC;AAE3D,MAAM,WAAW,GAAG,mBAAmB,CAAC;AAiBxC,MAAM,UAAU,sBAAsB;IACpC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACxC,OAAO,CAAC,KAAK,SAAS,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACjE,CAAC;AAMD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,0BAA0B,CAAC;AAC9E,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAgB;IACzD,MAAM,OAAO,CACX,WAAW,EACX,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC7C,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;IAC5C,IAAI,sBAAsB,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACtE,0EAA0E;IAC1E,gEAAgE;IAChE,IAAI,CAAC,CAAC,MAAM,UAAU,EAAE,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IAEnE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QACvD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QACxE,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC"}
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/server/telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,kEAAkE;AAClE,MAAM,CAAC,MAAM,0BAA0B,GACrC,wDAAwD,CAAC;AAE3D,MAAM,WAAW,GAAG,mBAAmB,CAAC;AA+BxC,MAAM,UAAU,sBAAsB;IACpC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACxC,OAAO,CAAC,KAAK,SAAS,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACjE,CAAC;AAMD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,0BAA0B,CAAC;AAC9E,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAgB;IACzD,MAAM,OAAO,CACX,WAAW,EACX,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,KAAK,UAAU,gBAAgB;IAC7B,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;QAC7C,OAAO;YACL,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YACpC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;SACtB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACtD,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC7C,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,CAAC,MAA8B,EAAyB,EAAE,CAAC,CAAC;QACtE,MAAM;QACN,QAAQ;QACR,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,IAAI,sBAAsB,EAAE;QAAE,OAAO,GAAG,CAAC,UAAU,CAAC,CAAC;IACrD,0EAA0E;IAC1E,gEAAgE;IAChE,IAAI,CAAC,CAAC,MAAM,UAAU,EAAE,CAAC;QAAE,OAAO,GAAG,CAAC,UAAU,CAAC,CAAC;IAElD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QACvD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,gBAAgB,EAAE,EAAE,CAAC;QACjF,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;AACtB,CAAC"}

package/dist/shared/capture-status.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Polishd — capture health (shared: no server, no React).
+ *
+ * Two things live here, and they are the same subject seen from both ends:
+ * the on-disk shape ingest writes when it drops a cookie-less batch, and the
+ * rule the dashboard applies to decide whether that means "your proxy isn't
+ * running" or "some bots posted to a public endpoint".
+ *
+ * They are together, and pure, because the rule is the part that has been
+ * wrong: it compared an all-time drop total against an all-time event total
+ * gated on a one-hour recency check, so a single fresh drop re-armed every
+ * drop the site had ever recorded. Anything that can be tested without a
+ * database or a renderer belongs in one file that a test can import.
+ */
+/** Granularity drops are bucketed at. One hour. */
+export declare const NO_SESSION_BUCKET_MS = 3600000;
+/** How far back *both* sides of the comparison look. */
+export declare const CAPTURE_WINDOW_MS: number;
+/** One hour's worth of drops. */
+export interface NoSessionBucket {
+    /** Hour index — `Math.floor(ms / NO_SESSION_BUCKET_MS)`. */
+    h: number;
+    /** Drops recorded in that hour. */
+    n: number;
+}
+/** What ingest stores under its `polishd_meta` key. */
+export interface NoSessionRecord {
+    /** All-time drops. Never decays — a lifetime total, not an alert input. */
+    count: number;
+    /** Most recent drop (ms epoch). */
+    lastAt: number;
+    /** Per-hour drops, oldest first, trimmed to {@link MAX_BUCKETS}. */
+    buckets: NoSessionBucket[];
+}
+/**
+ * Read a stored record, tolerating both junk and the pre-0.2.3 `{count,
+ * lastAt}` shape. A legacy record parses with no buckets, which is the honest
+ * answer: those drops happened, but nothing recorded *when*, so none of them
+ * can count toward a window. That is the whole point — history stops voting.
+ */
+export declare function parseNoSessionRecord(raw: string | null | undefined): NoSessionRecord | null;
+/** Add `batch` drops observed at `now` to `prev` (null for a first drop). */
+export declare function foldNoSessionDrop(prev: NoSessionRecord | null, now: number, batch: number): NoSessionRecord;
+/**
+ * Drops recorded at or after `since`.
+ *
+ * Hour-granular, so the bucket straddling `since` contributes in full and the
+ * count leans high by up to an hour of drops. That bias is the safe direction
+ * for a diagnostic and it costs nothing to store.
+ */
+export declare function noSessionCountSince(rec: NoSessionRecord | null, since: number): number;
+/** Whether capture itself is wired up, as opposed to what it captured. */
+export interface CaptureHealth {
+    /** All-time beacons dropped for want of a session cookie. */
+    noSessionCount: number;
+    /** Of those, the ones inside {@link windowMs}. */
+    recentNoSessionCount: number;
+    /** When the most recent drop happened (ms epoch), or null for none. */
+    lastNoSessionAt: number | null;
+    /** When an event was last *stored*, by the server's clock, or null. */
+    lastStoredAt: number | null;
+    /** Events stored inside the window. */
+    recentEvents: number;
+    /** Batches stored inside the window (distinct arrival stamps — approximate). */
+    recentBatches: number;
+    /** The window both recent counts were measured over. */
+    windowMs: number;
+}
+export type CaptureStatusLevel = "ok" | "notice" | "broken";
+export interface CaptureStatus {
+    /**
+     * `broken` — nothing is being stored, say so in red.
+     * `notice`  — real capture plus some cookie-less batches; neutral and true.
+     * `ok`      — nothing worth a word.
+     */
+    level: CaptureStatusLevel;
+    /** Drops this status is talking about: the window's, or all-time when empty. */
+    droppedBatches: number;
+    /** Batches stored alongside them, over the same window. */
+    storedBatches: number;
+    /** Dropped share of all batches seen in the window, or null if unknowable. */
+    sharePct: number | null;
+    /** A store landed *after* the last drop — proof the proxy is minting now. */
+    storedSinceDrop: boolean;
+    /** Nothing has ever been stored. Gates the "nothing is being stored" copy. */
+    nothingStored: boolean;
+}
+/**
+ * Decide what, if anything, the dashboard should say about cookie-less
+ * batches.
+ *
+ * The load-bearing signal is `storedSinceDrop`. Every event is attributed to
+ * the cookie the proxy mints, so a proxy that isn't running drops *every*
+ * batch — one successful store after the most recent drop is proof it is
+ * running, and no threshold can argue with it. Everything else here only
+ * decides how loudly to describe traffic that is already known to be flowing.
+ */
+export declare function captureStatus(health: CaptureHealth, totalEvents: number, now?: number): CaptureStatus;
+//# sourceMappingURL=capture-status.d.ts.map

package/dist/shared/capture-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture-status.d.ts","sourceRoot":"","sources":["../../src/shared/capture-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,mDAAmD;AACnD,eAAO,MAAM,oBAAoB,UAAY,CAAC;AAE9C,wDAAwD;AACxD,eAAO,MAAM,iBAAiB,QAA4B,CAAC;AAoB3D,iCAAiC;AACjC,MAAM,WAAW,eAAe;IAC9B,4DAA4D;IAC5D,CAAC,EAAE,MAAM,CAAC;IACV,mCAAmC;IACnC,CAAC,EAAE,MAAM,CAAC;CACX;AAED,uDAAuD;AACvD,MAAM,WAAW,eAAe;IAC9B,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAC;IACd,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,OAAO,EAAE,eAAe,EAAE,CAAC;CAC5B;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,eAAe,GAAG,IAAI,CAgB3F;AAED,6EAA6E;AAC7E,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,eAAe,GAAG,IAAI,EAC5B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,GACZ,eAAe,CAYjB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAItF;AAED,0EAA0E;AAC1E,MAAM,WAAW,aAAa;IAC5B,6DAA6D;IAC7D,cAAc,EAAE,MAAM,CAAC;IACvB,kDAAkD;IAClD,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uEAAuE;IACvE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,uEAAuE;IACvE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,uCAAuC;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,aAAa,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,kBAAkB,GAAG,IAAI,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE5D,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,KAAK,EAAE,kBAAkB,CAAC;IAC1B,gFAAgF;IAChF,cAAc,EAAE,MAAM,CAAC;IACvB,2DAA2D;IAC3D,aAAa,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,6EAA6E;IAC7E,eAAe,EAAE,OAAO,CAAC;IACzB,8EAA8E;IAC9E,aAAa,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,aAAa,EACrB,WAAW,EAAE,MAAM,EACnB,GAAG,GAAE,MAAmB,GACvB,aAAa,CAqCf"}

package/dist/shared/capture-status.js

@@ -0,0 +1,133 @@
+/**
+ * Polishd — capture health (shared: no server, no React).
+ *
+ * Two things live here, and they are the same subject seen from both ends:
+ * the on-disk shape ingest writes when it drops a cookie-less batch, and the
+ * rule the dashboard applies to decide whether that means "your proxy isn't
+ * running" or "some bots posted to a public endpoint".
+ *
+ * They are together, and pure, because the rule is the part that has been
+ * wrong: it compared an all-time drop total against an all-time event total
+ * gated on a one-hour recency check, so a single fresh drop re-armed every
+ * drop the site had ever recorded. Anything that can be tested without a
+ * database or a renderer belongs in one file that a test can import.
+ */
+/** Granularity drops are bucketed at. One hour. */
+export const NO_SESSION_BUCKET_MS = 3_600_000;
+/** How far back *both* sides of the comparison look. */
+export const CAPTURE_WINDOW_MS = 24 * NO_SESSION_BUCKET_MS;
+/** Buckets retained: the window plus slack, so the oldest ages out cleanly. */
+const MAX_BUCKETS = 26;
+/**
+ * Drops in the window before a *neutral* note is worth showing. Below this,
+ * cookie-less batches are ordinary background on a public endpoint and saying
+ * so is clutter.
+ */
+const MIN_NOTICE_DROPS = 3;
+/**
+ * Drops in the window before "nothing stored in the window" is allowed to
+ * read as a broken proxy. A real proxy failure drops *every* batch, so on any
+ * site with traffic the count climbs fast; the floor is what keeps a dormant
+ * site poked twice by a crawler from accusing a working install.
+ */
+const MIN_BROKEN_DROPS = 5;
+/**
+ * Read a stored record, tolerating both junk and the pre-0.2.3 `{count,
+ * lastAt}` shape. A legacy record parses with no buckets, which is the honest
+ * answer: those drops happened, but nothing recorded *when*, so none of them
+ * can count toward a window. That is the whole point — history stops voting.
+ */
+export function parseNoSessionRecord(raw) {
+    if (!raw)
+        return null;
+    try {
+        const rec = JSON.parse(raw);
+        if (!rec || typeof rec !== "object")
+            return null;
+        const count = numOr(rec.count, 0);
+        const lastAt = numOr(rec.lastAt, 0);
+        const buckets = Array.isArray(rec.buckets)
+            ? rec.buckets
+                .filter((b) => !!b && Number.isFinite(b.h) && Number.isFinite(b.n))
+                .map((b) => ({ h: Math.floor(b.h), n: Math.max(0, Math.floor(b.n)) }))
+            : [];
+        return { count, lastAt, buckets };
+    }
+    catch {
+        return null;
+    }
+}
+/** Add `batch` drops observed at `now` to `prev` (null for a first drop). */
+export function foldNoSessionDrop(prev, now, batch) {
+    const h = Math.floor(now / NO_SESSION_BUCKET_MS);
+    const buckets = (prev?.buckets ?? []).filter((b) => b.h > h - MAX_BUCKETS);
+    const current = buckets.find((b) => b.h === h);
+    if (current)
+        current.n += batch;
+    else
+        buckets.push({ h, n: batch });
+    buckets.sort((a, b) => a.h - b.h);
+    return {
+        count: (prev?.count ?? 0) + batch,
+        lastAt: Math.max(now, prev?.lastAt ?? 0),
+        buckets: buckets.slice(-MAX_BUCKETS),
+    };
+}
+/**
+ * Drops recorded at or after `since`.
+ *
+ * Hour-granular, so the bucket straddling `since` contributes in full and the
+ * count leans high by up to an hour of drops. That bias is the safe direction
+ * for a diagnostic and it costs nothing to store.
+ */
+export function noSessionCountSince(rec, since) {
+    if (!rec)
+        return 0;
+    const first = Math.floor(since / NO_SESSION_BUCKET_MS);
+    return rec.buckets.reduce((sum, b) => (b.h >= first ? sum + b.n : sum), 0);
+}
+/**
+ * Decide what, if anything, the dashboard should say about cookie-less
+ * batches.
+ *
+ * The load-bearing signal is `storedSinceDrop`. Every event is attributed to
+ * the cookie the proxy mints, so a proxy that isn't running drops *every*
+ * batch — one successful store after the most recent drop is proof it is
+ * running, and no threshold can argue with it. Everything else here only
+ * decides how loudly to describe traffic that is already known to be flowing.
+ */
+export function captureStatus(health, totalEvents, now = Date.now()) {
+    const storedSinceDrop = health.lastStoredAt !== null &&
+        health.lastNoSessionAt !== null &&
+        health.lastStoredAt > health.lastNoSessionAt;
+    const nothingStored = totalEvents === 0;
+    const dropsInWindow = health.lastNoSessionAt !== null &&
+        health.lastNoSessionAt >= now - health.windowMs &&
+        health.recentNoSessionCount > 0;
+    const droppedBatches = dropsInWindow ? health.recentNoSessionCount : health.noSessionCount;
+    const storedBatches = health.recentBatches;
+    const totalBatches = droppedBatches + storedBatches;
+    const sharePct = totalBatches > 0 ? (droppedBatches * 100) / totalBatches : null;
+    const base = { droppedBatches, storedBatches, sharePct, storedSinceDrop, nothingStored };
+    // Never stored anything, and beacons are arriving: the drop *is* the whole
+    // story, whenever it happened. This is the case the banner was written for.
+    if (health.lastNoSessionAt !== null && nothingStored)
+        return { ...base, level: "broken" };
+    // Storing has happened at some point, so judge only the window: drops in it,
+    // nothing stored in it, and no store since the last drop. Enough drops to
+    // rule out a dormant site being poked by a crawler.
+    if (dropsInWindow &&
+        !storedSinceDrop &&
+        health.recentEvents === 0 &&
+        health.recentNoSessionCount >= MIN_BROKEN_DROPS) {
+        return { ...base, level: "broken" };
+    }
+    if (dropsInWindow && health.recentNoSessionCount >= MIN_NOTICE_DROPS) {
+        return { ...base, level: "notice" };
+    }
+    return { ...base, level: "ok" };
+}
+function numOr(v, fallback) {
+    return typeof v === "number" && Number.isFinite(v) ? v : fallback;
+}
+//# sourceMappingURL=capture-status.js.map

package/dist/shared/capture-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture-status.js","sourceRoot":"","sources":["../../src/shared/capture-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,mDAAmD;AACnD,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAE9C,wDAAwD;AACxD,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,oBAAoB,CAAC;AAE3D,+EAA+E;AAC/E,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAoB3B;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAA8B;IACjE,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6B,CAAC;QACxD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACjD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YACxC,CAAC,CAAC,GAAG,CAAC,OAAO;iBACR,MAAM,CAAC,CAAC,CAAC,EAAwB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;iBACxF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1E,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAC/B,IAA4B,EAC5B,GAAW,EACX,KAAa;IAEb,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,oBAAoB,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/C,IAAI,OAAO;QAAE,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC;;QAC3B,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,OAAO;QACL,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK;QACjC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC;QACxC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC;KACrC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAA2B,EAAE,KAAa;IAC5E,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC;IACnB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,oBAAoB,CAAC,CAAC;IACvD,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7E,CAAC;AAyCD;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAqB,EACrB,WAAmB,EACnB,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,MAAM,eAAe,GACnB,MAAM,CAAC,YAAY,KAAK,IAAI;QAC5B,MAAM,CAAC,eAAe,KAAK,IAAI;QAC/B,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,eAAe,CAAC;IAC/C,MAAM,aAAa,GAAG,WAAW,KAAK,CAAC,CAAC;IACxC,MAAM,aAAa,GACjB,MAAM,CAAC,eAAe,KAAK,IAAI;QAC/B,MAAM,CAAC,eAAe,IAAI,GAAG,GAAG,MAAM,CAAC,QAAQ;QAC/C,MAAM,CAAC,oBAAoB,GAAG,CAAC,CAAC;IAElC,MAAM,cAAc,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;IAC3F,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;IAC3C,MAAM,YAAY,GAAG,cAAc,GAAG,aAAa,CAAC;IACpD,MAAM,QAAQ,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,GAAG,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;IACjF,MAAM,IAAI,GAAG,EAAE,cAAc,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC;IAEzF,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,MAAM,CAAC,eAAe,KAAK,IAAI,IAAI,aAAa;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAE1F,6EAA6E;IAC7E,0EAA0E;IAC1E,oDAAoD;IACpD,IACE,aAAa;QACb,CAAC,eAAe;QAChB,MAAM,CAAC,YAAY,KAAK,CAAC;QACzB,MAAM,CAAC,oBAAoB,IAAI,gBAAgB,EAC/C,CAAC;QACD,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACtC,CAAC;IAED,IAAI,aAAa,IAAI,MAAM,CAAC,oBAAoB,IAAI,gBAAgB,EAAE,CAAC;QACrE,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,KAAK,CAAC,CAAU,EAAE,QAAgB;IACzC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpE,CAAC"}

package/dist/shared/error-noise.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Polishd — browser-extension error noise.
+ *
+ * A page's `error` and `unhandledrejection` handlers hear everything that
+ * throws in the tab, not just the site's own code. Extensions inject scripts
+ * into the page context, and when they fail — a wallet that can't reach its
+ * background worker, a content script whose port closed on navigation — the
+ * throw surfaces on `window` exactly like a real bug would. "Failed to connect
+ * to MetaMask" is the canonical one: nothing on the site can cause it, nothing
+ * on the site can fix it, and left unfiltered it can be the loudest error the
+ * dashboard shows.
+ *
+ * These are pure predicates, shared rather than client-local, so the browser
+ * capture layer and the ingest endpoint apply the same rule — a cached bundle
+ * can lag a config change by a full session, so the server keeps its own copy
+ * of the decision (the same reasoning as the dashboard-path exclusion).
+ */
+/** True when `url` was served by an extension or the browser, not the site. */
+export declare function isExtensionUrl(url: string): boolean;
+/** The shape of an error, reduced to what both the client and ingest can see. */
+export interface ErrorSignature {
+    /** The thrown message, already stringified. */
+    message: string;
+    /** The failing script's URL, if the browser gave one. */
+    source?: string;
+    /** The stack, when available. Only the client has this. */
+    stack?: string;
+    /** Extra ignore patterns from the host app's config. */
+    ignore?: readonly (string | RegExp)[];
+}
+/**
+ * True when this error is noise the site's owner cannot act on.
+ *
+ * Checked in order of confidence: where the script came from, then what the
+ * stack blames, then the small set of messages extension messaging emits, then
+ * the opaque cross-origin case, then whatever the host app chose to ignore.
+ */
+export declare function isIgnorableError({ message, source, stack, ignore }: ErrorSignature): boolean;
+//# sourceMappingURL=error-noise.d.ts.map

package/dist/shared/error-noise.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-noise.d.ts","sourceRoot":"","sources":["../../src/shared/error-noise.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AA8CH,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOnD;AAED,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC7B,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,MAAM,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;CACvC;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAW,EAAE,KAAU,EAAE,MAAM,EAAE,EAAE,cAAc,GAAG,OAAO,CAiBtG"}

package/dist/shared/error-noise.js

@@ -0,0 +1,101 @@
+/**
+ * Polishd — browser-extension error noise.
+ *
+ * A page's `error` and `unhandledrejection` handlers hear everything that
+ * throws in the tab, not just the site's own code. Extensions inject scripts
+ * into the page context, and when they fail — a wallet that can't reach its
+ * background worker, a content script whose port closed on navigation — the
+ * throw surfaces on `window` exactly like a real bug would. "Failed to connect
+ * to MetaMask" is the canonical one: nothing on the site can cause it, nothing
+ * on the site can fix it, and left unfiltered it can be the loudest error the
+ * dashboard shows.
+ *
+ * These are pure predicates, shared rather than client-local, so the browser
+ * capture layer and the ingest endpoint apply the same rule — a cached bundle
+ * can lag a config change by a full session, so the server keeps its own copy
+ * of the decision (the same reasoning as the dashboard-path exclusion).
+ */
+/**
+ * URL schemes that only ever belong to an extension or the browser itself.
+ * If the failing script came from one of these, the site did not load it.
+ */
+const EXTENSION_SCHEMES = [
+    "chrome-extension://",
+    "moz-extension://",
+    "safari-extension://",
+    "safari-web-extension://",
+    "ms-browser-extension://",
+    "extension://", // unknown vendors, and the bare form some builds report
+    "webkit-masked-url://", // Safari's opaque stand-in for injected scripts
+    "resource://", // Firefox internals and legacy add-ons
+    "chrome://", // browser-internal pages and resources
+];
+/**
+ * Messages produced by extension plumbing running *in page context*, where the
+ * filename is the page's own URL and the scheme check above can't help.
+ *
+ * Deliberately narrow: each of these is a string the extension messaging layer
+ * itself emits, not something a site's code would produce. Broad matching here
+ * (say, anything mentioning MetaMask) would swallow a dapp's genuine wallet
+ * errors, which are real bugs worth seeing.
+ */
+const EXTENSION_MESSAGE_PATTERNS = [
+    /failed to connect to metamask/i,
+    /could not establish connection\.\s*receiving end does not exist/i,
+    /the message port closed before a response was received/i,
+    /extension context invalidated/i,
+    /^chrome\.runtime\b/i,
+];
+/**
+ * The browser's placeholder for an error thrown by a cross-origin script it
+ * won't describe: no message, no file, no line. Extensions and third-party
+ * embeds are the usual sources, and either way there is nothing here to act
+ * on — the event is a report that *something* failed, with every detail
+ * stripped.
+ */
+function isOpaqueError(message, source) {
+    return /^script error\.?$/i.test(message.trim()) && !source;
+}
+/** True when `url` was served by an extension or the browser, not the site. */
+export function isExtensionUrl(url) {
+    // `blob:` and `filesystem:` wrap the origin that minted them, so an
+    // extension's blob reads as `blob:chrome-extension://…` — unwrap before
+    // testing the scheme, or code an extension generated at runtime slips past.
+    const u = url.trim().toLowerCase().replace(/^(?:blob|filesystem):/, "");
+    if (!u)
+        return false;
+    return EXTENSION_SCHEMES.some((scheme) => u.startsWith(scheme));
+}
+/**
+ * True when this error is noise the site's owner cannot act on.
+ *
+ * Checked in order of confidence: where the script came from, then what the
+ * stack blames, then the small set of messages extension messaging emits, then
+ * the opaque cross-origin case, then whatever the host app chose to ignore.
+ */
+export function isIgnorableError({ message, source = "", stack = "", ignore }) {
+    if (isExtensionUrl(source))
+        return true;
+    // A stack is a list of frames, not a single URL, so this looks anywhere in
+    // it: injected code often has the page as its top frame and the extension
+    // further down.
+    const lowerStack = stack.toLowerCase();
+    if (lowerStack && EXTENSION_SCHEMES.some((scheme) => lowerStack.includes(scheme)))
+        return true;
+    if (EXTENSION_MESSAGE_PATTERNS.some((re) => re.test(message)))
+        return true;
+    if (isOpaqueError(message, source))
+        return true;
+    if (ignore?.length) {
+        for (const pattern of ignore) {
+            if (typeof pattern === "string") {
+                if (pattern && message.toLowerCase().includes(pattern.toLowerCase()))
+                    return true;
+            }
+            else if (pattern.test(message))
+                return true;
+        }
+    }
+    return false;
+}
+//# sourceMappingURL=error-noise.js.map

package/dist/shared/error-noise.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-noise.js","sourceRoot":"","sources":["../../src/shared/error-noise.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;GAGG;AACH,MAAM,iBAAiB,GAAG;IACxB,qBAAqB;IACrB,kBAAkB;IAClB,qBAAqB;IACrB,yBAAyB;IACzB,yBAAyB;IACzB,cAAc,EAAE,wDAAwD;IACxE,sBAAsB,EAAE,gDAAgD;IACxE,aAAa,EAAE,uCAAuC;IACtD,WAAW,EAAE,uCAAuC;CACrD,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,0BAA0B,GAAa;IAC3C,gCAAgC;IAChC,kEAAkE;IAClE,yDAAyD;IACzD,gCAAgC;IAChC,qBAAqB;CACtB,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,OAAe,EAAE,MAAc;IACpD,OAAO,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;AAC9D,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,oEAAoE;IACpE,wEAAwE;IACxE,4EAA4E;IAC5E,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAClE,CAAC;AAcD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,EAAE,MAAM,EAAkB;IAC3F,IAAI,cAAc,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,2EAA2E;IAC3E,0EAA0E;IAC1E,gBAAgB;IAChB,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,UAAU,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/F,IAAI,0BAA0B,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,IAAI,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;QACnB,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;YAC7B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChC,IAAI,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;oBAAE,OAAO,IAAI,CAAC;YACpF,CAAC;iBAAM,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/shared/types.d.ts

@@ -10,7 +10,7 @@
  * the host notes app.
  */
 /** Every kind of signal we capture. Ordered roughly by synthesis value. */
-export type PolishdEventType = "page_view" | "click" | "rage_click" | "dead_click" | "scroll_depth" | "viewport" | "js_error" | "web_vital" | "hover" | "component_view" | "mount" | "session_end" | "design_scan";
+export type PolishdEventType = "page_view" | "click" | "rage_click" | "dead_click" | "scroll_depth" | "viewport" | "js_error" | "web_vital" | "hover" | "component_view" | "mount" | "session_end" | "design_scan" | "install_state";
 /**
  * A single captured event. The client sends these without a session id; the
  * ingest layer attaches `session_id` server-side from the signed cookie, so a

package/dist/shared/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,2EAA2E;AAC3E,MAAM,MAAM,gBAAgB,GACxB,WAAW,GACX,OAAO,GACP,YAAY,GACZ,YAAY,GACZ,cAAc,GACd,UAAU,GACV,UAAU,GACV,WAAW,GACX,OAAO,GACP,gBAAgB,GAChB,OAAO,GACP,aAAa,GACb,aAAa,CAAC;AAElB;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,gBAAgB,CAAC;IACvB,8EAA8E;IAC9E,EAAE,EAAE,MAAM,CAAC;IACX,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;CACzD;AAED,iDAAiD;AACjD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,8DAA8D;AAC9D,MAAM,WAAW,eAAgB,SAAQ,YAAY;IACnD,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,4DAA4D;AAC5D,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,gBAAgB,CAc3D,CAAC;AASH,2DAA2D;AAC3D,MAAM,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAC/E,mBAAmB;AACnB,MAAM,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAChD,2DAA2D;AAC3D,MAAM,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AACtE,+DAA+D;AAC/D,MAAM,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACjD,yBAAyB;AACzB,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE9C,MAAM,WAAW,wBAAwB;IACvC,8BAA8B;IAC9B,CAAC,EAAE,CAAC,CAAC;IACL,oCAAoC;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,oEAAoE;IACpE,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,sDAAsD;IACtD,IAAI,EAAE,gBAAgB,EAAE,CAAC;IACzB,kEAAkE;IAClE,EAAE,EAAE,gBAAgB,EAAE,CAAC;IACvB,mDAAmD;IACnD,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,uDAAuD;IACvD,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,gEAAgE;IAChE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,kEAAkE;IAClE,GAAG,EAAE,cAAc,EAAE,CAAC;CACvB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,2EAA2E;AAC3E,MAAM,MAAM,gBAAgB,GACxB,WAAW,GACX,OAAO,GACP,YAAY,GACZ,YAAY,GACZ,cAAc,GACd,UAAU,GACV,UAAU,GACV,WAAW,GACX,OAAO,GACP,gBAAgB,GAChB,OAAO,GACP,aAAa,GACb,aAAa,GACb,eAAe,CAAC;AAEpB;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,gBAAgB,CAAC;IACvB,8EAA8E;IAC9E,EAAE,EAAE,MAAM,CAAC;IACX,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;CACzD;AAED,iDAAiD;AACjD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,8DAA8D;AAC9D,MAAM,WAAW,eAAgB,SAAQ,YAAY;IACnD,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,4DAA4D;AAC5D,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,gBAAgB,CAkB3D,CAAC;AASH,2DAA2D;AAC3D,MAAM,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAC/E,mBAAmB;AACnB,MAAM,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAChD,2DAA2D;AAC3D,MAAM,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AACtE,+DAA+D;AAC/D,MAAM,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACjD,yBAAyB;AACzB,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE9C,MAAM,WAAW,wBAAwB;IACvC,8BAA8B;IAC9B,CAAC,EAAE,CAAC,CAAC;IACL,oCAAoC;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,oEAAoE;IACpE,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,sDAAsD;IACtD,IAAI,EAAE,gBAAgB,EAAE,CAAC;IACzB,kEAAkE;IAClE,EAAE,EAAE,gBAAgB,EAAE,CAAC;IACvB,mDAAmD;IACnD,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,uDAAuD;IACvD,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,gEAAgE;IAChE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,kEAAkE;IAClE,GAAG,EAAE,cAAc,EAAE,CAAC;CACvB"}

package/dist/shared/types.js

@@ -24,5 +24,9 @@ export const CLIENT_EVENT_TYPES = new Set([
     "mount",
     "session_end",
     "design_scan",
+    // Sent only by the dashboard telemetry emitter (once per session): whether
+    // the reporting install has a model connected, and which provider/model.
+    // Never carries a key or any secret — see dashboard/telemetry.tsx.
+    "install_state",
 ]);
 //# sourceMappingURL=types.js.map

package/dist/shared/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAgFH,4DAA4D;AAC5D,MAAM,CAAC,MAAM,kBAAkB,GAAkC,IAAI,GAAG,CAAmB;IACzF,WAAW;IACX,OAAO;IACP,YAAY;IACZ,YAAY;IACZ,cAAc;IACd,UAAU;IACV,UAAU;IACV,WAAW;IACX,OAAO;IACP,gBAAgB;IAChB,OAAO;IACP,aAAa;IACb,aAAa;CACd,CAAC,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAiFH,4DAA4D;AAC5D,MAAM,CAAC,MAAM,kBAAkB,GAAkC,IAAI,GAAG,CAAmB;IACzF,WAAW;IACX,OAAO;IACP,YAAY;IACZ,YAAY;IACZ,cAAc;IACd,UAAU;IACV,UAAU;IACV,WAAW;IACX,OAAO;IACP,gBAAgB;IAChB,OAAO;IACP,aAAa;IACb,aAAa;IACb,2EAA2E;IAC3E,yEAAyE;IACzE,mEAAmE;IACnE,eAAe;CAChB,CAAC,CAAC"}

package/docs/SETUP.md

@@ -476,9 +476,34 @@ export default definePolishdConfig({
   rageClick: { count: 3, windowMs: 500 },     // N clicks on one element
   flushIntervalMs: 10_000,
   dashboardRoute: "/polishd",                 // never captured; see below
+  ignoreErrors: [],                           // extra error messages to drop
 });
 ```
 
+Errors thrown by **browser extensions are dropped automatically**. Your page's
+`error` handler hears every throw in the tab, not just your code's, so a wallet
+extension failing to reach its background worker ("Failed to connect to
+MetaMask") would otherwise land in your dashboard as one of your site's loudest
+bugs.
+
+This isn't a list of known extensions — it's worked out per error. The browser
+records every script your document actually fetched (Resource Timing), and
+extension code is never in it: the browser injects content scripts, your page
+never asked for them. So an error is classified by where its stack points:
+
+| Verdict | Meaning | What happens |
+| --- | --- | --- |
+| `site` | every frame is code you shipped — including third-party scripts your page loads, like Stripe | recorded normally |
+| `extension` | a frame names an extension URL | dropped |
+| `foreign` | a frame names a script your document never loaded | recorded, marked *not your code* |
+| `unknown` | nothing attributable — an opaque cross-origin `Script error.`, an empty stack | recorded, marked *unattributable* |
+
+Only `extension` is dropped, because only it is certain. The other two are
+shown dimmed in Recent errors rather than hidden — a filter that quietly
+discards what it can't identify is how a real bug goes missing. `ignoreErrors`
+is the escape hatch if you want them gone anyway: strings match
+case-insensitively anywhere in the message, regexes are tested as-is.
+
 The dashboard's own traffic is **never captured**. Reading your analytics is
 browsing too, and left alone it would rank "Refresh summary" as your site's
 most-used feature. Nothing on `dashboardRoute` (or below it) is collected, and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@polishd/next",
-  "version": "0.2.2",
+  "version": "0.2.3-dev.0",
   "description": "Drop-in product analytics for Next.js — capture real user behavioral signals (rage/dead clicks, scroll depth, errors, web vitals) and explore them on a built-in dashboard. What gets measured gets improved.",
   "type": "module",
   "license": "MIT",
@@ -75,6 +75,7 @@
   "scripts": {
     "build": "tsc -p tsconfig.build.json && npm run build:css",
     "typecheck": "tsc -p tsconfig.json",
+    "test": "node --experimental-strip-types --test \"src/**/*.test.ts\"",
     "clean": "rm -rf dist",
     "prepublishOnly": "npm run clean && npm run build",
     "build:css": "node scripts/build-css.mjs"
@@ -84,6 +85,10 @@
     "react": ">=18",
     "react-dom": ">=18"
   },
+  "dependencies": {
+    "allpages": "^0.3.3",
+    "playwright-core": "^1.62.1"
+  },
   "optionalDependencies": {
     "pg": "^8.0.0"
   },