@tillstack/electron 0.2.1 → 0.4.0

package/README.md

@@ -37,6 +37,13 @@ The main-process SDK captures:
 
 Events are **PII-scrubbed on-device** and buffered in a **file-backed queue** in
 `userData` — so the report explaining a crash survives the restart after it.
+The file is encrypted with the OS keychain through Electron's `safeStorage`
+(Keychain on macOS, DPAPI on Windows, the secret service on Linux) and readable
+only by your user. A file that can't be decrypted is discarded, and with
+`enableThreatDetection` on, a `storage_tamper` security event is sent. Events
+older than 24 hours are dropped. On Linux without a secret store, the queue stays
+in memory unless you set `allowPlaintextQueue: true`. Call `TillPulse.clearQueue()`
+to wipe it, for example when a user signs out.
 Native minidump upload is opt-in (`uploadMinidumps: true`); by default dumps are
 kept locally and a metadata event is sent.
 
@@ -45,4 +52,5 @@ kept locally and a metadata event is sent.
 `dsn`, `release` required. Toggles (default on): `enableNativeCrashReporter`,
 `enableProcessMonitoring`, `enableHangDetection`, `enableSessionTracking`. Also
 `uploadMinidumps`, `environment`, `dist`, `disableDefaultPiiScrubbing`,
+`allowPlaintextQueue`,
 `beforeSend`, `initialTags`, `flushIntervalMs`, `debug`.

package/dist/index.d.mts

@@ -19,6 +19,8 @@ interface TillPulseElectronOptions {
     /** Opt in to TillShield desktop threat detection (DevTools-open on renderers). Off by default. */
     enableThreatDetection?: boolean;
     disableDefaultPiiScrubbing?: boolean;
+    /** Keep the offline queue on disk unencrypted where the OS offers no keychain (Linux without a secret store). Default false: memory only. */
+    allowPlaintextQueue?: boolean;
     beforeSend?: (e: TillPulseEvent) => TillPulseEvent | null | Promise<TillPulseEvent | null>;
     initialTags?: Record<string, string>;
     flushIntervalMs?: number;
@@ -61,6 +63,7 @@ declare class TillPulseElectronSDK {
     getQueueStats(): {
         size: number;
     };
+    clearQueue(): void;
     flush(useKeepalive?: boolean): Promise<boolean>;
     close(): void;
     private _device;

package/dist/index.d.ts

@@ -19,6 +19,8 @@ interface TillPulseElectronOptions {
     /** Opt in to TillShield desktop threat detection (DevTools-open on renderers). Off by default. */
     enableThreatDetection?: boolean;
     disableDefaultPiiScrubbing?: boolean;
+    /** Keep the offline queue on disk unencrypted where the OS offers no keychain (Linux without a secret store). Default false: memory only. */
+    allowPlaintextQueue?: boolean;
     beforeSend?: (e: TillPulseEvent) => TillPulseEvent | null | Promise<TillPulseEvent | null>;
     initialTags?: Record<string, string>;
     flushIntervalMs?: number;
@@ -61,6 +63,7 @@ declare class TillPulseElectronSDK {
     getQueueStats(): {
         size: number;
     };
+    clearQueue(): void;
     flush(useKeepalive?: boolean): Promise<boolean>;
     close(): void;
     private _device;

package/dist/index.js

@@ -2,8 +2,10 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
+var types = require('@tillstack/types');
 var electron = require('electron');
 var os = require('os');
+var crypto = require('crypto');
 var fs = require('fs');
 var path = require('path');
 
@@ -31,31 +33,65 @@ var path__namespace = /*#__PURE__*/_interopNamespace(path);
 
 // src/index.ts
 
-// src/scrub.ts
+// ../scrub-core/dist/rules.js
 var SCRUB_RULES = [
-  { pattern: /\bAKIA[0-9A-Z]{16}\b/g, replacement: "[aws_key]" },
-  { pattern: /(?:aws_secret|secret_access_key|AWS_SECRET)[^A-Za-z0-9+/]*([A-Za-z0-9+/]{40})\b/gi, replacement: "[aws_secret]" },
-  { pattern: /\bAIza[0-9A-Za-z_-]{35}\b/g, replacement: "[gcp_key]" },
-  { pattern: /\b(?:ghp|gho|ghs|ghr)_[A-Za-z0-9]{36,}\b/g, replacement: "[github_token]" },
-  { pattern: /\bgithub_pat_[A-Za-z0-9_]{82}\b/g, replacement: "[github_token]" },
-  { pattern: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g, replacement: "[slack_token]" },
-  { pattern: /\bxapp-\d-[A-Za-z0-9-]{10,}\b/g, replacement: "[slack_token]" },
-  { pattern: /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g, replacement: "[jwt]" },
-  { pattern: /Bearer\s+[A-Za-z0-9\-._~+/]+=*/gi, replacement: "Bearer [token]" },
-  { pattern: /\b(?:sk|pk|ak|rk)_(?:live|test)_[A-Za-z0-9]{16,}\b/g, replacement: "[apikey]" },
-  { pattern: /\b[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}\b/g, replacement: "[email]" },
-  { pattern: /\b[A-Z0-9]{10}\b(?=\s*confirmed|\s*transaction|\s*M-?Pesa)/gi, replacement: "[mpesa_tx]" },
-  { pattern: /\b(?:\d[ -]*?){13,19}\b/g, replacement: "[card]" },
-  { pattern: /\b\d{13}\b/g, replacement: "[id_number]" },
-  { pattern: /\b\d{11}\b/g, replacement: "[id_number]" },
-  { pattern: /\+?\d{1,3}[\s.-]?\(?\d{2,4}\)?[\s.-]?\d{3,4}[\s.-]?\d{3,4}\b/g, replacement: "[phone]" },
-  { pattern: /\b(?:\d{1,3}\.){3}\d{1,3}\b/g, replacement: "[ip]" }
+  { label: "private_key", pattern: /-----BEGIN [A-Z0-9 ]{0,40}PRIVATE KEY(?: BLOCK)?-----(?:[^-"\\]|\\[^"]|-Type|-Info)*(?:-----END [A-Z0-9 ]{0,40}PRIVATE KEY(?: BLOCK)?-----)?/g, replacement: "[private_key]" },
+  { label: "private_key", pattern: /\bAGE-SECRET-KEY-1[0-9A-Z]{58}/g, replacement: "[private_key]" },
+  { label: "aws_key", pattern: /\b(?:AKIA|ASIA|ABIA|ACCA)[0-9A-Z]{16}\b/g, replacement: "[aws_key]" },
+  { label: "aws_secret", pattern: /(?:aws_secret|secret_access_key|AWS_SECRET)[^A-Za-z0-9+/]*([A-Za-z0-9+/]{40})\b/gi, replacement: "[aws_secret]" },
+  { label: "gcp_key", pattern: /\bAIza[0-9A-Za-z_-]{35}\b/g, replacement: "[gcp_key]" },
+  { label: "gcp_key", pattern: /\bGOCSPX-[0-9A-Za-z_-]{28}/g, replacement: "[gcp_key]" },
+  { label: "github_token", pattern: /\bgh[pousr]_[A-Za-z0-9]{36,}\b/g, replacement: "[github_token]" },
+  { label: "github_token", pattern: /\bgithub_pat_[A-Za-z0-9_]{82}\b/g, replacement: "[github_token]" },
+  { label: "gitlab_token", pattern: /\bgl(?:pat|rt|ptt|ft|dt|soat|imt|cbt|agent)-[0-9A-Za-z_-]{20,}/g, replacement: "[gitlab_token]" },
+  { label: "slack_token", pattern: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g, replacement: "[slack_token]" },
+  { label: "slack_token", pattern: /\bxapp-\d-[A-Za-z0-9-]{10,}\b/g, replacement: "[slack_token]" },
+  { label: "webhook_url", pattern: /https:\/\/hooks\.slack\.com\/services\/[0-9A-Za-z_/]+/g, replacement: "[webhook_url]" },
+  { label: "webhook_url", pattern: /https:\/\/(?:canary\.|ptb\.)?discord(?:app)?\.com\/api\/webhooks\/[0-9]+\/[0-9A-Za-z_-]+/g, replacement: "[webhook_url]" },
+  { label: "jwt", pattern: /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g, replacement: "[jwt]" },
+  { label: "bearer", pattern: /Bearer\s+[A-Za-z0-9\-._~+/]+=*/gi, replacement: "Bearer [token]" },
+  { label: "apikey", pattern: /\b(?:sk|pk|ak|rk)_(?:live|test)_[A-Za-z0-9]{16,}\b/g, replacement: "[apikey]" },
+  { label: "apikey", pattern: /\bwhsec_[0-9A-Za-z]{24,}/g, replacement: "[apikey]" },
+  { label: "package_token", pattern: /\b(?:npm_[0-9A-Za-z]{36}|pypi-[0-9A-Za-z_-]{50,}|rubygems_[0-9a-f]{48}|dckr_pat_[0-9A-Za-z_-]{20,})/g, replacement: "[package_token]" },
+  { label: "ai_key", pattern: /\b(?:sk-(?:or-v1-[0-9a-f]{64}|ant-[0-9A-Za-z_-]{32,}|proj-[0-9A-Za-z_-]{32,})|hf_[0-9A-Za-z]{34,})/g, replacement: "[ai_key]" },
+  { label: "ai_key", pattern: /\bsk-[A-Za-z0-9]{48}\b/g, replacement: "[ai_key]" },
+  { label: "service_token", pattern: /\b(?:SG\.[0-9A-Za-z_-]{22}\.[0-9A-Za-z_-]{43}|do[oprt]_v1_[0-9a-f]{64}|hv[sb]\.[A-Za-z0-9_-]{24,}|lin_api_[0-9A-Za-z]{40}|shp(?:at|ss|pa|ca)_[0-9a-fA-F]{32}|sntry[su]_[0-9A-Za-z_-]{40,})/g, replacement: "[service_token]" },
+  { label: "tilldev_token", pattern: /\b(?:(?:tp|tc|ts|ta|tsc|tse|tark|tnot|tfp|tfd|tfr|tfb)_[0-9a-f]{32}\b|tfn_[0-9a-f]{64}\b|tg_secret_[0-9a-f]{40}\b|(?:tausec|tau_rt|tau_sso|tau_ssg|scim)_[A-Za-z0-9_-]{43}|tau_inv_[A-Za-z0-9_-]{38}|tdr_[A-Za-z0-9_-]{32})/g, replacement: "[tilldev_token]" },
+  { label: "db_url", pattern: /\b(?:postgres(?:ql)?|mysql|mariadb|mongodb(?:\+srv)?|rediss?|amqps?):\/\/[^:@/\s"']*:[^@/\s"']+@/g, replacement: "[db_credentials]@" },
+  { label: "email", pattern: /\b[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}\b/g, replacement: "[email]" },
+  { label: "mpesa_tx", pattern: /\b[A-Z0-9]{10}\b(?=\s*confirmed|\s*transaction|\s*M-?Pesa)/gi, replacement: "[mpesa_tx]" },
+  { label: "card", pattern: /\b(?:\d[ -]*?){13,19}\b/g, replacement: "[card]", outsideIds: true },
+  { label: "id_number", pattern: /\b\d{13}\b/g, replacement: "[id_number]", outsideIds: true },
+  { label: "id_number", pattern: /\b\d{11}\b/g, replacement: "[id_number]", outsideIds: true },
+  { label: "phone", pattern: /\+?\d{1,3}[\s.-]?\(?\d{2,4}\)?[\s.-]?\d{3,4}[\s.-]?\d{3,4}\b/g, replacement: "[phone]", outsideIds: true },
+  { label: "ip", pattern: /\b(?:[0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}\b|\b(?:[0-9A-Fa-f]{1,4}:){2,6}:[0-9A-Fa-f]{1,4}\b|\b[0-9A-Fa-f]{1,4}::(?:[0-9A-Fa-f]{1,4}:){1,5}[0-9A-Fa-f]{1,4}\b/g, replacement: "[ip]", outsideIds: true },
+  { label: "ip", pattern: /\b(?:\d{1,3}\.){3}\d{1,3}\b/g, replacement: "[ip]", outsideIds: true }
 ];
 var SENSITIVE_KEY = /^(?:password|passwd|pwd|secret|client[_-]?secret|token|access[_-]?token|refresh[_-]?token|id[_-]?token|api[_-]?key|apikey|authorization|auth|session|cookie|set[_-]?cookie|private[_-]?key|credit[_-]?card|card[_-]?number|cvv|cvc|ssn|pin|otp|mfa|totp)$/i;
+var ID_TOKEN = /\b[0-9A-Fa-f]{8}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{12}\b|\b[0-9A-Fa-f]{16,}\b/g;
+var HEX_LETTER = /[A-Fa-f]/;
+function applyRule(rule, text, onHit) {
+  const rep = () => rule.replacement;
+  if (!rule.outsideIds)
+    return text.replace(rule.pattern, rep);
+  let out = "";
+  let last = 0;
+  for (const m of text.matchAll(ID_TOKEN)) {
+    if (!HEX_LETTER.test(m[0]))
+      continue;
+    out += text.slice(last, m.index).replace(rule.pattern, rep) + m[0];
+    last = m.index + m[0].length;
+  }
+  return out + text.slice(last).replace(rule.pattern, rep);
+}
+
+// ../scrub-core/dist/scrub.js
 var MAX_REDACT_DEPTH = 24;
 function redactByKey(value, depth = 0) {
-  if (depth > MAX_REDACT_DEPTH || value === null || typeof value !== "object") return value;
-  if (Array.isArray(value)) return value.map((v) => redactByKey(v, depth + 1));
+  if (depth > MAX_REDACT_DEPTH || value === null || typeof value !== "object")
+    return value;
+  if (Array.isArray(value))
+    return value.map((v) => redactByKey(v, depth + 1));
   const out = {};
   for (const [k, v] of Object.entries(value)) {
     out[k] = SENSITIVE_KEY.test(k) ? "[redacted]" : redactByKey(v, depth + 1);
@@ -65,46 +101,115 @@ function redactByKey(value, depth = 0) {
 function scrubEvent(event) {
   try {
     let json = JSON.stringify(redactByKey(event));
-    for (const { pattern, replacement } of SCRUB_RULES) json = json.replace(pattern, replacement);
+    for (const rule of SCRUB_RULES)
+      json = applyRule(rule, json);
     return JSON.parse(json);
   } catch {
     return event;
   }
 }
 
-// src/index.ts
-var SDK_NAME = "@tillstack/electron";
-var SDK_VERSION = "0.1.0";
-function parseDsn(dsn) {
-  const m = dsn.match(/^(https?):\/\/([^@]+)@([^/]+)\/(.+)$/);
-  if (!m) throw new Error(`TillPulse: invalid DSN: ${dsn}`);
-  const scheme = m[1];
-  const host = m[3];
-  const local = /^(localhost|127\.0\.0\.1|::1)(:\d+)?$/i.test(host);
-  if (scheme !== "https" && !local) {
-    throw new Error("TillPulse: DSN must use https:// (refusing to send telemetry over cleartext http)");
-  }
-  return { scheme, host };
+// src/scrub.ts
+function scrubEvent2(event) {
+  return scrubEvent(event);
 }
-function generateId() {
-  return `${Date.now().toString(36)}${Math.random().toString(36).slice(2, 12)}`;
+var KEY_FILE = "tillpulse-queue.key";
+var AAD = Buffer.from("tillpulse.queue.v1");
+var VERSION = 1;
+function gcmCodec(dir, kw) {
+  let key = null;
+  const keyFile = path__namespace.join(dir, KEY_FILE);
+  const load = () => {
+    if (key) return key;
+    try {
+      const k = Buffer.from(kw.unwrap(fs__namespace.readFileSync(keyFile)), "base64");
+      if (k.length === 32) return key = k;
+    } catch {
+    }
+    const fresh = crypto.randomBytes(32);
+    const tmp = `${keyFile}.${process.pid}.tmp`;
+    fs__namespace.writeFileSync(tmp, kw.wrap(fresh.toString("base64")), { mode: 384 });
+    fs__namespace.renameSync(tmp, keyFile);
+    return key = fresh;
+  };
+  return {
+    encode(plain) {
+      const iv = crypto.randomBytes(12);
+      const c = crypto.createCipheriv("aes-256-gcm", load(), iv);
+      c.setAAD(AAD);
+      const ct = Buffer.concat([c.update(plain, "utf8"), c.final()]);
+      return Buffer.concat([Buffer.from([VERSION]), iv, ct, c.getAuthTag()]);
+    },
+    decode(data) {
+      if (data.length < 29 || data[0] !== VERSION) throw new Error("bad blob");
+      const d = crypto.createDecipheriv("aes-256-gcm", load(), data.subarray(1, 13));
+      d.setAAD(AAD);
+      d.setAuthTag(data.subarray(data.length - 16));
+      return Buffer.concat([d.update(data.subarray(13, data.length - 16)), d.final()]).toString("utf8");
+    }
+  };
 }
+var FILE = "tillpulse-queue.bin";
+var LEGACY_FILE = "tillpulse-queue.json";
+var MAX_ITEMS = 500;
+var MAX_AGE_MS = 24 * 60 * 60 * 1e3;
+var LEASE_MS = 2e4;
 var FileQueue = class {
-  constructor(dir) {
+  constructor() {
     this.items = [];
-    this.max = 500;
-    this.file = path__namespace.join(dir, "tillpulse-queue.json");
+    this.codec = null;
+    this.dir = null;
+    this.onTamper = null;
+  }
+  attach(dir, codec) {
+    this.dir = dir;
+    this.codec = codec;
+    const now = Date.now();
+    const legacy = path__namespace.join(dir, LEGACY_FILE);
     try {
-      if (fs__namespace.existsSync(this.file)) {
-        const parsed = JSON.parse(fs__namespace.readFileSync(this.file, "utf8"));
-        if (Array.isArray(parsed)) this.items = parsed;
+      if (fs__namespace.existsSync(legacy)) {
+        this.adopt(JSON.parse(fs__namespace.readFileSync(legacy, "utf8")), now);
+        fs__namespace.rmSync(legacy, { force: true });
       }
     } catch {
+      fs__namespace.rmSync(legacy, { force: true });
+    }
+    const file = path__namespace.join(dir, FILE);
+    if (codec && fs__namespace.existsSync(file)) {
+      try {
+        this.adopt(JSON.parse(codec.decode(fs__namespace.readFileSync(file))), now);
+      } catch {
+        fs__namespace.rmSync(file, { force: true });
+        this.onTamper?.();
+      }
+    } else if (!codec) {
+      fs__namespace.rmSync(file, { force: true });
+    }
+    this.persist();
+  }
+  adopt(list, now) {
+    if (!Array.isArray(list)) return;
+    const known = new Set(this.items.map((i) => i.id));
+    for (const raw of list) {
+      if (!raw || typeof raw.id !== "string" || typeof raw.payload !== "string" || typeof raw.event_type !== "string") continue;
+      if (known.has(raw.id)) continue;
+      const created = typeof raw.created === "number" ? raw.created : now;
+      if (now - created > MAX_AGE_MS) continue;
+      this.items.push({ id: raw.id, event_type: raw.event_type, payload: raw.payload, attempts: Number(raw.attempts) || 0, next: 0, created });
     }
+    if (this.items.length > MAX_ITEMS) this.items = this.items.slice(this.items.length - MAX_ITEMS);
   }
   persist() {
+    if (!this.dir || !this.codec) return;
+    const file = path__namespace.join(this.dir, FILE);
     try {
-      fs__namespace.writeFileSync(this.file, JSON.stringify(this.items));
+      if (this.items.length === 0) {
+        fs__namespace.rmSync(file, { force: true });
+        return;
+      }
+      const tmp = `${file}.${process.pid}.tmp`;
+      fs__namespace.writeFileSync(tmp, this.codec.encode(JSON.stringify(this.items)), { mode: 384 });
+      fs__namespace.renameSync(tmp, file);
     } catch {
     }
   }
@@ -115,13 +220,17 @@ var FileQueue = class {
     } catch {
       return;
     }
-    this.items.push({ id, event_type: eventType, payload, attempts: 0, next: 0 });
-    if (this.items.length > this.max) this.items = this.items.slice(this.items.length - this.max);
+    const now = Date.now();
+    this.items.push({ id, event_type: eventType, payload, attempts: 0, next: 0, created: now });
+    if (this.items.length > MAX_ITEMS) this.items = this.items.slice(this.items.length - MAX_ITEMS);
     this.persist();
   }
   due(limit) {
     const now = Date.now();
-    return this.items.filter((i) => i.next <= now).slice(0, limit);
+    this.items = this.items.filter((i) => now - i.created <= MAX_AGE_MS);
+    const out = this.items.filter((i) => i.next <= now).slice(0, limit);
+    for (const i of out) i.next = now + LEASE_MS;
+    return out;
   }
   ackOk(ids) {
     const s = new Set(ids);
@@ -139,10 +248,45 @@ var FileQueue = class {
     this.items = this.items.filter((i) => i.attempts <= 10);
     this.persist();
   }
+  clear() {
+    this.items = [];
+    if (this.dir) {
+      fs__namespace.rmSync(path__namespace.join(this.dir, FILE), { force: true });
+      fs__namespace.rmSync(path__namespace.join(this.dir, LEGACY_FILE), { force: true });
+    }
+  }
   size() {
     return this.items.length;
   }
 };
+
+// src/index.ts
+var SDK_NAME = "@tillstack/electron";
+var SDK_VERSION = "0.4.0" ;
+function parseDsn(dsn) {
+  const m = dsn.match(/^(https?):\/\/([^@]+)@([^/]+)\/(.+)$/);
+  if (!m) throw new Error(`TillPulse: invalid DSN: ${dsn}`);
+  const scheme = m[1];
+  const host = m[3];
+  const local = /^(localhost|127\.0\.0\.1|::1)(:\d+)?$/i.test(host);
+  if (scheme !== "https" && !local) {
+    throw new Error("TillPulse: DSN must use https:// (refusing to send telemetry over cleartext http)");
+  }
+  return { scheme, host };
+}
+function generateId() {
+  return `${Date.now().toString(36)}${Math.random().toString(36).slice(2, 12)}`;
+}
+function osCodec(dir, allowPlaintext) {
+  try {
+    const backend = process.platform === "linux" ? electron.safeStorage.getSelectedStorageBackend?.() : void 0;
+    if (electron.safeStorage.isEncryptionAvailable() && backend !== "basic_text" && backend !== "unknown") {
+      return gcmCodec(dir, { wrap: (t) => electron.safeStorage.encryptString(t), unwrap: (b) => electron.safeStorage.decryptString(b) });
+    }
+  } catch {
+  }
+  return allowPlaintext ? { encode: (t) => Buffer.from(t, "utf8"), decode: (b) => b.toString("utf8") } : null;
+}
 function osName() {
   if (process.platform === "darwin") return "macOS";
   if (process.platform === "win32") return "Windows";
@@ -182,7 +326,19 @@ var TillPulseElectronSDK = class {
       dir = electron.app.getPath("userData");
     } catch {
     }
-    this.queue = new FileQueue(dir);
+    this.queue = new FileQueue();
+    this.queue.onTamper = () => {
+      if (!this.opts?.enableThreatDetection) return;
+      this.captureSecurityEvent({
+        securityType: "storage_tamper",
+        severity: "medium",
+        confidence: 0.6,
+        message: "Stored TillPulse events failed their integrity check and were discarded"
+      });
+    };
+    const attach = () => this.queue?.attach(dir, osCodec(dir, options.allowPlaintextQueue === true));
+    if (electron.app.isReady()) attach();
+    else void electron.app.whenReady().then(attach);
     if (options.enableNativeCrashReporter !== false) {
       try {
         electron.crashReporter.start({
@@ -283,14 +439,12 @@ var TillPulseElectronSDK = class {
     if (this.timer.unref) this.timer.unref();
     if (options.debug) console.log("[TillPulse] electron SDK initialized", { release: options.release });
   }
-  // ── Public API ──
   captureException(error) {
     this._captureError(error, "high", "captureException");
   }
   captureMessage(message, level = "info") {
     this._enqueue(this._base("error", level, { exception: { type: "Message", value: message } }));
   }
-  // Report a security signal to TillShield (same shape as the other SDKs).
   captureSecurityEvent(input) {
     this._enqueue(
       this._base("security", input.severity ?? "high", {
@@ -321,6 +475,9 @@ var TillPulseElectronSDK = class {
   getQueueStats() {
     return { size: this.queue?.size() ?? 0 };
   }
+  clearQueue() {
+    this.queue?.clear();
+  }
   async flush(useKeepalive = false) {
     if (!this.queue || !this.opts) return false;
     const items = this.queue.due(50);
@@ -340,12 +497,16 @@ var TillPulseElectronSDK = class {
         headers: { "Content-Type": "application/x-sentry-envelope", Authorization: `DSN ${this.opts.dsn}` },
         body: lines.join("\n")
       });
-      if (res.ok || res.status >= 400 && res.status < 500 && res.status !== 429) {
-        this.queue.ackOk(ids);
-        return true;
+      const verdict = types.classifyIngestResponse({
+        status: res.status,
+        contentType: res.headers.get("content-type")
+      });
+      if (verdict.disposition === "retry") {
+        this.queue.ackFail(ids);
+        return false;
       }
-      this.queue.ackFail(ids);
-      return false;
+      this.queue.ackOk(ids);
+      return true;
     } catch {
       this.queue.ackFail(ids);
       return false;
@@ -360,7 +521,6 @@ var TillPulseElectronSDK = class {
     void this.flush(true);
     this.initialized = false;
   }
-  // ── Internals ──
   _device() {
     let total = 0;
     let free = 0;
@@ -462,7 +622,7 @@ var TillPulseElectronSDK = class {
       }
     }
     if (!final) return;
-    if (!o.disableDefaultPiiScrubbing) final = scrubEvent(final);
+    if (!o.disableDefaultPiiScrubbing) final = scrubEvent2(final);
     this.queue.enqueue(final.event_id, final.event_type, final);
   }
 };