@bigbinary/neeto-commons-rn 2.1.0 → 2.2.1

package/lib/typescript/config/axios/caseConversion.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"caseConversion.d.ts","sourceRoot":"","sources":["../../../../src/config/axios/caseConversion.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAkBrD,eAAO,MAAM,kBAAkB,GAC7B,MAAM,OAAO,EACb,UAAS,qBAA0B,YAcpC,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAC9B,MAAM,OAAO,EACb,UAAS,qBAA0B,QAcpC,CAAC"}
+{"version":3,"file":"caseConversion.d.ts","sourceRoot":"","sources":["../../../../src/config/axios/caseConversion.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAsBrD,eAAO,MAAM,kBAAkB,GAC7B,MAAM,OAAO,EACb,UAAS,qBAA0B,YAcpC,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAC9B,MAAM,OAAO,EACb,UAAS,qBAA0B,QAcpC,CAAC"}

package/lib/typescript/config/axios/constants.d.ts

@@ -2,4 +2,7 @@ import { type CaseConversionOptions } from "./types";
 export declare const DEFAULT_CASE_CONVERSION: boolean;
 export declare const UUID_SEGMENT: RegExp;
 export declare const shouldEnableCaseConversion: (options?: CaseConversionOptions) => boolean;
+export declare const SENSITIVE_KEY_PATTERNS: RegExp[];
+export declare const REDACTED = "<redacted>";
+export declare const MAX_REDACT_DEPTH = 6;
 //# sourceMappingURL=constants.d.ts.map

package/lib/typescript/config/axios/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/config/axios/constants.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAErD,eAAO,MAAM,uBAAuB,SAA2C,CAAC;AAEhF,eAAO,MAAM,YAAY,QAC0C,CAAC;AAEpE,eAAO,MAAM,0BAA0B,GACrC,UAAS,qBAA0B,YASpC,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/config/axios/constants.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAErD,eAAO,MAAM,uBAAuB,SAA2C,CAAC;AAEhF,eAAO,MAAM,YAAY,QAC0C,CAAC;AAEpE,eAAO,MAAM,0BAA0B,GACrC,UAAS,qBAA0B,YASpC,CAAC;AAOF,eAAO,MAAM,sBAAsB,UAQlC,CAAC;AAEF,eAAO,MAAM,QAAQ,eAAe,CAAC;AAErC,eAAO,MAAM,gBAAgB,IAAI,CAAC"}

package/lib/typescript/config/axios/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/config/axios/index.ts"],"names":[],"mappings":"AAIA,OAAc,EACZ,KAAK,UAAU,EAEf,KAAK,0BAA0B,EAChC,MAAM,OAAO,CAAC;AAoBf,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AA2CD,eAAO,MAAM,cAAc,GAAI,eAAe;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,WACG,CAAC;AAgCvE,eAAO,MAAM,eAAe,GAC1B,MAAM,YAAY,GAAG,SAAS,EAC9B,OAAO,UAAU,KAChB,MAMF,CAAC;AA+IF,eAAO,MAAM,wBAAwB,YAUpC,CAAC;AAEF,eAAO,MAAM,qBAAqB,GAChC,SAAS,0BAA0B,kDAepC,CAAC;AAEF,eAAO,MAAM,cAAc,YAI1B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/config/axios/index.ts"],"names":[],"mappings":"AAIA,OAAc,EACZ,KAAK,UAAU,EAEf,KAAK,0BAA0B,EAChC,MAAM,OAAO,CAAC;AAqBf,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAYD,eAAO,MAAM,cAAc,GAAI,eAAe;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,WACG,CAAC;AAgCvE,eAAO,MAAM,eAAe,GAC1B,MAAM,YAAY,GAAG,SAAS,EAC9B,OAAO,UAAU,KAChB,MAMF,CAAC;AAqJF,eAAO,MAAM,wBAAwB,YAUpC,CAAC;AAEF,eAAO,MAAM,qBAAqB,GAChC,SAAS,0BAA0B,kDAepC,CAAC;AAEF,eAAO,MAAM,cAAc,YAI1B,CAAC"}

package/lib/typescript/config/axios/redact.d.ts

@@ -0,0 +1,2 @@
+export declare const filterSensitiveData: (data: unknown) => unknown;
+//# sourceMappingURL=redact.d.ts.map

package/lib/typescript/config/axios/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../../../src/config/axios/redact.ts"],"names":[],"mappings":"AAgDA,eAAO,MAAM,mBAAmB,GAAI,MAAM,OAAO,YACK,CAAC"}

package/lib/typescript/config/bugsnag.d.ts

@@ -1,4 +1,5 @@
-import { type NotifiableError } from "@bugsnag/react-native";
-export declare const bugsnagErrorHandler: (err: NotifiableError, origin: string, groupingHash?: string) => void;
+import { type Event, type NotifiableError } from "@bugsnag/react-native";
+export declare const toNotifiableError: (error: unknown) => Error;
+export declare const bugsnagErrorHandler: (err: NotifiableError, origin: string, groupingHash?: string, severity?: Event["severity"]) => void;
 export declare const configureBugsnag: () => void;
 //# sourceMappingURL=bugsnag.d.ts.map

package/lib/typescript/config/bugsnag.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bugsnag.d.ts","sourceRoot":"","sources":["../../../src/config/bugsnag.ts"],"names":[],"mappings":"AACA,OAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAStE,eAAO,MAAM,mBAAmB,GAC9B,KAAK,eAAe,EACpB,QAAQ,MAAM,EAGd,eAAe,MAAM,SAkBtB,CAAC;AAEF,eAAO,MAAM,gBAAgB,YAsB5B,CAAC"}
+{"version":3,"file":"bugsnag.d.ts","sourceRoot":"","sources":["../../../src/config/bugsnag.ts"],"names":[],"mappings":"AACA,OAAgB,EACd,KAAK,KAAK,EACV,KAAK,eAAe,EACrB,MAAM,uBAAuB,CAAC;AAgD/B,eAAO,MAAM,iBAAiB,GAAI,OAAO,OAAO,KAAG,KAMlD,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAC9B,KAAK,eAAe,EACpB,QAAQ,MAAM,EAGd,eAAe,MAAM,EAGrB,WAAU,KAAK,CAAC,UAAU,CAAa,SAkBxC,CAAC;AAEF,eAAO,MAAM,gBAAgB,YAgD5B,CAAC"}

package/lib/typescript/hooks/query/useAuth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useAuth.d.ts","sourceRoot":"","sources":["../../../../src/hooks/query/useAuth.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,OAAO,CAAC;AAUxC,OAAO,EAAE,KAAK,YAAY,EAAmB,MAAM,oBAAoB,CAAC;AASxE,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAC;AAE3B,eAAO,MAAM,OAAO;4CAQf;QACD,YAAY,EAAE,YAAY,CAAC;KAC5B;;eAyIc,MAAM;4BAAsB,OAAO;;;cA1E1C,MAAM;gBACJ,MAAM;;;wBAqGyC,MAAM;;;2BAapC,MAAM;uBACV,MAAM;;;sBAYP,YAAY;;CAoBnC,CAAC"}
+{"version":3,"file":"useAuth.d.ts","sourceRoot":"","sources":["../../../../src/hooks/query/useAuth.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,OAAO,CAAC;AAUxC,OAAO,EAAE,KAAK,YAAY,EAAmB,MAAM,oBAAoB,CAAC;AASxE,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAC;AAE3B,eAAO,MAAM,OAAO;4CAQf;QACD,YAAY,EAAE,YAAY,CAAC;KAC5B;;eA8Ic,MAAM;4BAAsB,OAAO;;;cA/E1C,MAAM;gBACJ,MAAM;;;wBA0GyC,MAAM;;;2BAapC,MAAM;uBACV,MAAM;;;sBAYP,YAAY;;CAoBnC,CAAC"}

package/lib/typescript/initializers/constants.d.ts

@@ -0,0 +1,4 @@
+export declare const SAMPLE_STORAGE_KEY = "LOG_ROCKET_SAMPLED";
+export declare const DEFAULT_SAMPLE_RATE = 10;
+export declare const SAMPLE_DECISION_TTL_MS: number;
+//# sourceMappingURL=constants.d.ts.map

package/lib/typescript/initializers/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/initializers/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AACvD,eAAO,MAAM,mBAAmB,KAAK,CAAC;AACtC,eAAO,MAAM,sBAAsB,QAA2B,CAAC"}

package/lib/typescript/initializers/index.d.ts

@@ -1,3 +1,3 @@
-import { logRocket } from "./logRocket";
-export { logRocket };
+import { getLogRocketSessionURL, identifyLogRocketUser, initLogRocket, shutdownLogRocket } from "./logRocket";
+export { getLogRocketSessionURL, identifyLogRocketUser, initLogRocket, shutdownLogRocket, };
 //# sourceMappingURL=index.d.ts.map

package/lib/typescript/initializers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/initializers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,OAAO,EAAE,SAAS,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/initializers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,aAAa,EACb,iBAAiB,EAClB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,aAAa,EACb,iBAAiB,GAClB,CAAC"}

package/lib/typescript/initializers/logRocket.d.ts

@@ -1,2 +1,12 @@
-export declare const logRocket: () => void;
+interface LogRocketUser {
+    userId: string;
+    name: string;
+    email: string;
+    subdomain: string;
+}
+export declare const getLogRocketSessionURL: () => string | null;
+export declare const initLogRocket: () => Promise<void>;
+export declare const identifyLogRocketUser: ({ userId, name, email, subdomain, }: LogRocketUser) => Promise<void>;
+export declare const shutdownLogRocket: () => void;
+export {};
 //# sourceMappingURL=logRocket.d.ts.map

package/lib/typescript/initializers/logRocket.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logRocket.d.ts","sourceRoot":"","sources":["../../../src/initializers/logRocket.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,SAAS,YAmBrB,CAAC"}
+{"version":3,"file":"logRocket.d.ts","sourceRoot":"","sources":["../../../src/initializers/logRocket.ts"],"names":[],"mappings":"AAiBA,UAAU,aAAa;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAWD,eAAO,MAAM,sBAAsB,qBAAmB,CAAC;AA0BvD,eAAO,MAAM,aAAa,qBAyBzB,CAAC;AAEF,eAAO,MAAM,qBAAqB,GAAU,qCAKzC,aAAa,kBAYf,CAAC;AAEF,eAAO,MAAM,iBAAiB,YAU7B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bigbinary/neeto-commons-rn",
-  "version": "2.1.0",
+  "version": "2.2.1",
   "license": "UNLICENSED",
   "main": "./src/index.ts",
   "react-native": "./src/index.ts",

package/src/config/axios/caseConversion.ts

@@ -2,17 +2,21 @@ import {
   serializeKeysToSnakeCase,
   keysToCamelCase,
 } from "@bigbinary/neeto-cist";
-import Bugsnag, { type NotifiableError } from "@bugsnag/react-native";
+import Bugsnag from "@bugsnag/react-native";
 
 import { shouldEnableCaseConversion } from "./constants";
 import { type CaseConversionOptions } from "./types";
 
+import { toNotifiableError } from "../bugsnag";
+
 const logCaseConversionError = (
   error: unknown,
   context: Record<string, unknown>
 ) => {
   if (!__DEV__) {
-    Bugsnag.notify(error as NotifiableError, event => {
+    // Normalized rather than cast: a non-Error throw here would otherwise
+    // land in the same message-less "{}" group as everything else.
+    Bugsnag.notify(toNotifiableError(error), event => {
       event.severity = "warning";
       event.context = "case_conversion";
       event.addMetadata("caseConversion", {

package/src/config/axios/constants.ts

@@ -18,3 +18,22 @@ export const shouldEnableCaseConversion = (
 
   return DEFAULT_CASE_CONVERSION;
 };
+
+// Keys whose values must never leave the device on a Bugsnag report. Matched
+// case-insensitively, because axios hands back "Authorization" as readily as
+// "authorization" — and an exact-match list of literals let both that and
+// `auth_token`, the field the login response actually uses (slices/auth.ts),
+// through untouched.
+export const SENSITIVE_KEY_PATTERNS = [
+  /^authorization$/,
+  /^(set-)?cookie$/,
+  /^x-auth-(token|email)$/,
+  /password/,
+  /(^|[-_])api[-_]?key$/,
+  /(^|[-_])(auth|access|refresh|session|id)[-_]?token$/,
+  /^token$/,
+];
+
+export const REDACTED = "<redacted>";
+
+export const MAX_REDACT_DEPTH = 6;

package/src/config/axios/index.ts

@@ -14,6 +14,7 @@ import { convertRequestKeys, convertResponseKeys } from "./caseConversion";
 import { normalizeUrlForGrouping } from "./groupingKey";
 import { handleNetworkError } from "./networkErrorHandler";
 import setParamsSerializer from "./paramsSerializer";
+import { filterSensitiveData } from "./redact";
 
 import { STORAGE_KEYS } from "../../constants";
 import { removeItem } from "../../helpers/asyncStore";
@@ -31,37 +32,6 @@ export interface ApiErrorData {
   errors?: string[];
 }
 
-const filterSensitiveData = (data: unknown) => {
-  if (!data) return null;
-
-  const sensitiveKeys = [
-    "x-auth-token",
-    "x-auth-email",
-    "password",
-    "password_confirmation",
-    "current_password",
-    "token",
-    "access_token",
-    "refresh_token",
-  ];
-
-  const filteredData = { ...(data as Record<string, unknown>) };
-
-  const filterNestedData = (obj: Record<string, unknown>) => {
-    Object.keys(obj).forEach(key => {
-      if (sensitiveKeys.includes(key)) {
-        delete obj[key];
-      } else if (obj[key] && typeof obj[key] === "object") {
-        filterNestedData(obj[key] as Record<string, unknown>);
-      }
-    });
-  };
-
-  filterNestedData(filteredData);
-
-  return filteredData;
-};
-
 const isAuthEndpoint = (url: string) =>
   url.includes("/api/mobile/v1/verify_otp") ||
   url.includes("/api/mobile/v1/generate_otp") ||
@@ -194,6 +164,12 @@ const registerResponseIntercept = () => {
               message,
               name,
               code,
+              // Captured before `report.context` is overwritten below. The
+              // react-navigation plugin puts the current screen there, and
+              // the synthetic error's stack points at this interceptor, so
+              // without this the report says nothing about where the request
+              // came from.
+              screen: report.context,
               requestUrl: config?.url,
               requestMethod: config?.method?.toUpperCase(),
               baseURL: config?.baseURL,

package/src/config/axios/redact.ts

@@ -0,0 +1,50 @@
+// Redaction for anything attached to a Bugsnag report: request headers,
+// query params and response bodies all pass through here on the way out.
+
+import {
+  MAX_REDACT_DEPTH,
+  REDACTED,
+  SENSITIVE_KEY_PATTERNS,
+} from "./constants";
+
+const isSensitiveKey = (key: string) => {
+  const normalized = key.toLowerCase();
+
+  return SENSITIVE_KEY_PATTERNS.some(pattern => pattern.test(normalized));
+};
+
+// Builds a redacted deep copy. The previous version spread only the top level
+// and then deleted keys in place, so every nested object it walked was still
+// the caller's own — redacting for a bug report mutated the live response
+// body and request config. Cycles are cut rather than followed: axios configs
+// and error responses can self-reference, and the recursion used to overflow.
+const redact = (
+  value: unknown,
+  depth: number,
+  seen: WeakSet<object>
+): unknown => {
+  if (value === null || typeof value !== "object") return value;
+
+  if (depth > MAX_REDACT_DEPTH) return "<truncated>";
+
+  if (seen.has(value)) return "<circular>";
+
+  seen.add(value);
+
+  const redacted = Array.isArray(value)
+    ? value.map(item => redact(item, depth + 1, seen))
+    : Object.fromEntries(
+        Object.entries(value as Record<string, unknown>).map(([key, item]) => [
+          key,
+          isSensitiveKey(key) ? REDACTED : redact(item, depth + 1, seen),
+        ])
+      );
+
+  // Only ancestors can form a cycle; siblings sharing a reference are fine.
+  seen.delete(value);
+
+  return redacted;
+};
+
+export const filterSensitiveData = (data: unknown) =>
+  data ? redact(data, 0, new WeakSet<object>()) : null;

package/src/config/bugsnag.ts

@@ -1,27 +1,80 @@
 import BugsnagPluginReactNavigation from "@bugsnag/plugin-react-navigation";
-import Bugsnag, { type NotifiableError } from "@bugsnag/react-native";
+import Bugsnag, {
+  type Event,
+  type NotifiableError,
+} from "@bugsnag/react-native";
+import Config from "react-native-config";
 
 import {
   isEventErrorsNetworkRelated,
   isNetworkError,
 } from "./axios/networkErrorHandler";
 
+import { getLogRocketSessionURL } from "../initializers/logRocket";
 import { Store } from "../store";
 
+// Mirrors the stage the native layer reports. Host apps set ENVIRONMENT per
+// flavour in their .env files and feed the same value to the native Bugsnag
+// config; without it every build reported as "production" — the native
+// default for a release build — so QA traffic from staging installs was
+// indistinguishable from real user traffic in the dashboard.
+const releaseStage = Config.ENVIRONMENT || "production";
+
+// Errors we must see even though their message reads like network noise.
+// isNetworkError matches /timeout/i, and FCM rejects token registration with
+// "java.io.IOException: TIMEOUT" — so restoring a real message to these
+// reports would otherwise make them disappear entirely, which is worse than
+// the "{}" it replaced. The global onError filter runs *before* any
+// per-notify callback (@bugsnag/core/client.js), so a callback cannot undo
+// the drop; the marker has to travel on the error itself. A WeakSet keeps it
+// off the reported payload.
+const alwaysReported = new WeakSet<object>();
+
+const isAlwaysReported = (error: unknown): boolean =>
+  typeof error === "object" && error !== null && alwaysReported.has(error);
+
+// Survives a circular throw, and `undefined` rather than an empty message.
+const describeThrown = (error: unknown): string => {
+  try {
+    return JSON.stringify(error) ?? String(error);
+  } catch {
+    return String(error);
+  }
+};
+
+// Normalizes a caught `unknown` before it reaches Bugsnag, and exempts it
+// from the network filter above. Never hand a caught value to JSON.stringify
+// on the way in: Bugsnag reads `message` and `stack` off an Error and both
+// are non-enumerable, and NativeFirebaseError defines every one of its own
+// fields (`code`, `userInfo`, `nativeErrorCode`) non-enumerable too. A
+// stringified FCM rejection lands in the dashboard as the literal "{}" — no
+// message, and a "(native)" line-0 frame that groups it with every other
+// message-less report.
+export const toNotifiableError = (error: unknown): Error => {
+  const normalized =
+    error instanceof Error ? error : new Error(describeThrown(error));
+  alwaysReported.add(normalized);
+
+  return normalized;
+};
+
 export const bugsnagErrorHandler = (
   err: NotifiableError,
   origin: string,
   // Pass a hash for failures that would otherwise fragment into a group per
   // resource or per status code.
-  groupingHash?: string
+  groupingHash?: string,
+  // Handled reports default to "warning"; pass "error" for a failure that
+  // breaks the feature rather than degrading it.
+  severity: Event["severity"] = "warning"
 ) => {
   if (!__DEV__) {
     Bugsnag.notify(err, event => {
-      if (isNetworkError(err)) {
+      if (!isAlwaysReported(err) && isNetworkError(err)) {
         return false;
       }
 
-      event.severity = "warning";
+      event.severity = severity;
       event.context = origin;
 
       if (groupingHash) {
@@ -35,6 +88,12 @@ export const bugsnagErrorHandler = (
 
 export const configureBugsnag = () => {
   if (!__DEV__) {
+    // releaseStage and enabledReleaseStages are deliberately absent: the RN
+    // notifier only accepts onError/onBreadcrumb/logger/metadata/user/
+    // context/plugins/codeBundleId/featureFlags here, because the native
+    // layer owns the stage so that native crashes are tagged correctly too.
+    // Host apps set it in AndroidManifest.xml and Info.plist; see
+    // docs/bugsnag-release-stages.md.
     Bugsnag.start({
       onError: event => {
         const auth = Store.getState().auth;
@@ -42,14 +101,34 @@ export const configureBugsnag = () => {
           event.setUser(auth.userId, auth.email, auth.name);
         }
 
-        if (event.device?.emulator) {
+        // Only in production: QA runs release builds on emulators on purpose,
+        // and dropping those would hide the very failures they are hunting.
+        // Bugsnag's own flag is also unreliable — the Android 16 images QA
+        // uses report `emulator: false` — so this catches less than it looks
+        // like it does. Stage separation above is what actually keeps QA
+        // traffic out of the production dashboard.
+        if (releaseStage === "production" && event.device?.emulator) {
           return false;
         }
 
-        if (isEventErrorsNetworkRelated(event)) {
+        // Handled axios noise only. This filter matches on message text
+        // (/timeout/i, /network error/i…), and an unhandled crash whose
+        // message happens to contain one of those words is still a crash —
+        // "Timeout of 30000ms exceeded while rendering TicketList" was being
+        // discarded outright.
+        if (
+          !event.unhandled &&
+          !isAlwaysReported(event.originalError) &&
+          isEventErrorsNetworkRelated(event)
+        ) {
           return false;
         }
 
+        const sessionURL = getLogRocketSessionURL();
+        if (sessionURL) {
+          event.addMetadata("LogRocket", { sessionURL });
+        }
+
         return true;
       },
       plugins: [new BugsnagPluginReactNavigation()],

package/src/helpers/notifications/usePushNotification.ts

@@ -13,7 +13,7 @@ import {
   type PressedNotification,
 } from "./types";
 
-import { bugsnagErrorHandler } from "../../config/bugsnag";
+import { bugsnagErrorHandler, toNotifiableError } from "../../config/bugsnag";
 import { STORAGE_KEYS } from "../../constants";
 import { useNotification } from "../../hooks/query/useNotification";
 import { useAppState } from "../../hooks/useAppState";
@@ -52,7 +52,7 @@ export const usePushNotification = (
         const { status } = await checkNotifications();
         setNotificationPermission(status === RESULTS.GRANTED);
       } catch (error) {
-        bugsnagErrorHandler(JSON.stringify(error), "notification");
+        bugsnagErrorHandler(toNotifiableError(error), "notification");
       }
     };
 
@@ -194,7 +194,7 @@ export const usePushNotification = (
       }
       await handleTokenRegistration(token);
     } catch (error) {
-      bugsnagErrorHandler(JSON.stringify(error), "notification");
+      bugsnagErrorHandler(toNotifiableError(error), "notification");
     }
   }, [createChannels, handleTokenRegistration]);
 

package/src/hooks/query/useAuth.ts

@@ -166,7 +166,12 @@ export const useAuth = () => {
         text2: getErrorMessage(error?.response?.data, error),
       });
 
-      bugsnagErrorHandler(error, "verify_otp_error");
+      // A 401 here is a wrong or expired OTP — a user typo, not a defect.
+      // Reporting it made this the single loudest error in the project. The
+      // axios interceptor already skips 401s; this path bypassed it.
+      if (status !== 401) {
+        bugsnagErrorHandler(error, "verify_otp_error");
+      }
     }
   };
 

package/src/hooks/query/useNotification.ts

@@ -16,7 +16,7 @@ import {
   fetchNotificationsAPI,
   markAllNotificationsReadAPI,
 } from "../../api/notifications";
-import { bugsnagErrorHandler } from "../../config/bugsnag";
+import { bugsnagErrorHandler, toNotifiableError } from "../../config/bugsnag";
 import { STORAGE_KEYS, DEFAULT_PAGE_SIZE } from "../../constants";
 import { removeItem, setItem } from "../../helpers/asyncStore";
 import { removeSecureValue } from "../../helpers/keychain";
@@ -35,7 +35,7 @@ export const useNotification = () => {
           setItem(STORAGE_KEYS.DEVICE_TOKEN, response.device.device_token);
         },
         onError: error => {
-          bugsnagErrorHandler(JSON.stringify(error), "notification");
+          bugsnagErrorHandler(toNotifiableError(error), "notification");
         },
       }),
     useFetchNotifications: () => {

package/src/hooks/usePushNotificationPermissions.ts

@@ -8,7 +8,7 @@ import {
   type PermissionStatus,
 } from "react-native-permissions";
 
-import { bugsnagErrorHandler } from "../config/bugsnag";
+import { bugsnagErrorHandler, toNotifiableError } from "../config/bugsnag";
 import { STORAGE_KEYS } from "../constants";
 import { getItem, setItem } from "../helpers/asyncStore";
 
@@ -42,7 +42,7 @@ export const usePushNotificationPermissions = () => {
         status,
       };
     } catch (error) {
-      bugsnagErrorHandler(JSON.stringify(error), "notification");
+      bugsnagErrorHandler(toNotifiableError(error), "notification");
 
       return { isGranted: false };
     }
@@ -73,7 +73,7 @@ export const usePushNotificationPermissions = () => {
 
       return false;
     } catch (error) {
-      bugsnagErrorHandler(JSON.stringify(error), "notification");
+      bugsnagErrorHandler(toNotifiableError(error), "notification");
 
       return false;
     }
@@ -97,7 +97,7 @@ export const usePushNotificationPermissions = () => {
           setNotificationPermission(false);
         }
       } catch (error) {
-        bugsnagErrorHandler(JSON.stringify(error), "notification");
+        bugsnagErrorHandler(toNotifiableError(error), "notification");
         setNotificationPermission(false);
       }
     };

package/src/initializers/constants.ts

@@ -0,0 +1,3 @@
+export const SAMPLE_STORAGE_KEY = "LOG_ROCKET_SAMPLED";
+export const DEFAULT_SAMPLE_RATE = 10;
+export const SAMPLE_DECISION_TTL_MS = 30 * 24 * 60 * 60 * 1000;

package/src/initializers/index.ts

@@ -1,3 +1,13 @@
-import { logRocket } from "./logRocket";
+import {
+  getLogRocketSessionURL,
+  identifyLogRocketUser,
+  initLogRocket,
+  shutdownLogRocket,
+} from "./logRocket";
 
-export { logRocket };
+export {
+  getLogRocketSessionURL,
+  identifyLogRocketUser,
+  initLogRocket,
+  shutdownLogRocket,
+};

package/src/initializers/logRocket.ts

@@ -1,25 +1,116 @@
 import LogRocket from "@logrocket/react-native";
 import Config from "react-native-config";
 
-import { Store } from "../store";
-
-export const logRocket = () => {
-  if (!Config.LOG_ROCKET_API_KEY || __DEV__) return;
-
-  const { isLoggedIn, userId, name, email, subdomain } = Store.getState().auth;
-
-  LogRocket.init(Config.LOG_ROCKET_API_KEY);
-
-  if (!isLoggedIn) {
-    //End the current session gracefully during logout
-    LogRocket.shutdown();
-    // Reinitialize LogRocket to capture the login screen after logout
-    LogRocket.init(Config.LOG_ROCKET_API_KEY);
-  } else {
-    LogRocket.identify(userId, {
-      name,
-      email,
-      organization: subdomain,
-    });
+import {
+  DEFAULT_SAMPLE_RATE,
+  SAMPLE_DECISION_TTL_MS,
+  SAMPLE_STORAGE_KEY,
+} from "./constants";
+
+import { getItem, setItem } from "../helpers/asyncStore";
+
+interface SampleDecision {
+  sampled: boolean;
+  rate: number;
+  rolledAt: number;
+}
+
+interface LogRocketUser {
+  userId: string;
+  name: string;
+  email: string;
+  subdomain: string;
+}
+
+let initialized = false;
+let initPromise: Promise<void> | null = null;
+let sessionURL: string | null = null;
+// Bumped by shutdownLogRocket so an init still awaiting the sampling roll
+// knows it was cancelled and must not start recording.
+let generation = 0;
+
+// Null until LogRocket's backend accepts the session (1-5s after init), and
+// null on unsampled devices — callers must handle the absence.
+export const getLogRocketSessionURL = () => sessionURL;
+
+// 0 falls back to the default: turning recording off is done by removing or
+// rotating the API key, never through the sample rate.
+const getSampleRate = () =>
+  parseInt(Config.LOG_ROCKET_SAMPLE_RATE ?? "", 10) || DEFAULT_SAMPLE_RATE;
+
+// A device keeps its decision until the TTL passes or the rate changes, so
+// the sampled population rotates instead of locking in the first 10% forever.
+const shouldSample = async () => {
+  const rate = getSampleRate();
+  const stored = await getItem<SampleDecision>(SAMPLE_STORAGE_KEY);
+
+  const isCurrent =
+    stored !== null &&
+    stored.rate === rate &&
+    Date.now() - stored.rolledAt < SAMPLE_DECISION_TTL_MS;
+
+  if (isCurrent) return stored.sampled;
+
+  const sampled = Math.random() * 100 < rate;
+  await setItem(SAMPLE_STORAGE_KEY, { sampled, rate, rolledAt: Date.now() });
+
+  return sampled;
+};
+
+export const initLogRocket = async () => {
+  const apiKey = Config.LOG_ROCKET_API_KEY;
+  if (initialized || __DEV__ || !apiKey) return;
+
+  initPromise ??= (async () => {
+    try {
+      const startedAs = generation;
+      if (!(await shouldSample()) || startedAs !== generation) return;
+
+      LogRocket.init(apiKey);
+      initialized = true;
+      LogRocket.getSessionURL(url => {
+        // The backend accepts the session 1-5s after init; by then a logout
+        // may have ended it, and its URL must not resurface.
+        if (startedAs === generation) {
+          sessionURL = url;
+        }
+      });
+    } catch {
+      // Recording is expendable; a LogRocket failure must never reject the
+      // promise that initLogRocket and identifyLogRocketUser await.
+    }
+  })();
+
+  await initPromise;
+};
+
+export const identifyLogRocketUser = async ({
+  userId,
+  name,
+  email,
+  subdomain,
+}: LogRocketUser) => {
+  // Callers invoke this right after initLogRocket(), often in the same tick;
+  // waiting on the pending init keeps that pattern from dropping the identity.
+  if (initPromise) await initPromise;
+
+  if (!initialized) return;
+
+  try {
+    LogRocket.identify(userId, { name, email, organization: subdomain });
+  } catch {
+    // Fire-and-forget callers must never see a rejection from LogRocket.
   }
 };
+
+export const shutdownLogRocket = () => {
+  generation += 1;
+  initPromise = null;
+  // The replay ends here, so an error after logout must not link to it.
+  sessionURL = null;
+
+  if (!initialized) return;
+
+  LogRocket.shutdown();
+  initialized = false;
+};