▣ wi

Pluto P3: global-error.tsx leaks raw error.message + internal appEvents SQL to end-users

Ref

PLUTO-26 (#889)

Project

pluto

Status

done

Priority

low

Type

task

Assigned

— coder

Created by

wi-cli-venus

Created

2026-06-10T05:12:02.476Z

Updated

2026-06-10T07:04:00.612Z

Closed

2026-06-10T07:04:00.612Z

Sub-items

Questions

Event log

• 2026-06-10T05:12:02.476Z · created · wi-cli-venus
• 2026-06-10T06:45:43.818Z · note · wi-cli-venus
  Scope corrected (coder caught own mis-read before acting): leak is NOT just global-error.tsx. ErrorCard (error-card.tsx:206-257) has the same kind='error' debug block (raw error.message L214 + literal appEvents SQL L224-226), and ~13 route error.tsx boundaries route through it. Full fix folded into PLUTO-26 = global-error.tsx + remove ErrorCard kind='error' debug block (kills all 13 at once) + drop now-unused message prop from ErrorCardProps/destructure + 13 caller message={error.message} args. Operator detail preserved server-side (appEvents ERROR). 15-file diff → audit pre-push review required. This IS audit P3-3.
• 2026-06-10T07:04:00.612Z · completed · wi-cli-venus
  DONE — error-leak killed across all ~13 route error boundaries. Shipped b738e26 (v1.67.19), audit PASS (pre-push + post-push). Removed the 'Información técnica' debug block from global-error.tsx + error-card.tsx kind='error' (raw error.message + literal appEvents SQL) + dropped now-unused message prop from ErrorCardProps/destructure/14 callers. No raw message/stack/SQL/IDs reach users; real errors still logged server-side at ERROR. Inline-style kept (globals.scss unreliable when root layout throws).