@bywaretech/bysentinel-aws-lambda 0.1.0

package/dist/event.js

@@ -0,0 +1,72 @@
+import { detectSecuritySignals, newEventId, nowIso, redact, } from "@bywaretech/bysentinel-core";
+import { extractLambdaContext } from "./context.js";
+import { extractRequest } from "./request.js";
+const RUNTIME_VERSION = process.version;
+export function errorToInfo(error, includeStack) {
+    if (error instanceof Error) {
+        return {
+            type: error.name || "Error",
+            message: error.message,
+            stack: includeStack ? error.stack : undefined,
+        };
+    }
+    return { type: "NonError", message: String(error) };
+}
+/**
+ * Assemble a fully-sanitized BySentinelEvent. Security signals are detected on
+ * the RAW request (before redaction) so patterns are visible, then the request
+ * and custom context are redacted. `sanitized` is always true on the result.
+ */
+export function buildEvent(params) {
+    const { options, coldStart } = params;
+    const security = options.security;
+    const rawRequest = extractRequest(params.lambdaEvent, options);
+    const error = params.error !== undefined ? errorToInfo(params.error, options.capture.stackTrace) : undefined;
+    // Detect signals on raw data before it is redacted away.
+    const securitySignals = detectSecuritySignals({ request: rawRequest, error });
+    // Second: redact the request + custom context.
+    const request = security.sanitize && rawRequest ? redact(rawRequest, security) : rawRequest;
+    const customContext = params.customContext && security.sanitize
+        ? redact(params.customContext, security)
+        : params.customContext;
+    const lambda = extractLambdaContext(params.lambdaContext, coldStart);
+    const performance = params.performance;
+    // Timeline step metadata is developer-supplied and may contain secrets/PII.
+    const timeline = params.timeline && security.sanitize ? redact(params.timeline, security) : params.timeline;
+    return {
+        id: newEventId(),
+        timestamp: nowIso(),
+        project: options.project,
+        environment: options.environment,
+        release: options.release,
+        runtime: { provider: "aws", service: "lambda", language: "nodejs", version: RUNTIME_VERSION },
+        lambda,
+        git: options.git,
+        error,
+        performance,
+        timeline,
+        request,
+        customContext: mergeAiMeta(customContext, options),
+        securitySignals: securitySignals.length ? securitySignals : undefined,
+        sanitized: true,
+    };
+}
+/** Forward the SDK's AI preferences as metadata the collector/worker can honor. */
+function mergeAiMeta(customContext, options) {
+    if (!options.ai)
+        return customContext;
+    return {
+        ...customContext,
+        __bysentinel: {
+            ai: {
+                enabled: options.ai.enabled,
+                mode: options.ai.mode,
+                provider: options.ai.provider,
+                model: options.ai.model,
+                sendBodyToAI: options.ai.sendBodyToAI ?? false,
+                sendHeadersToAI: options.ai.sendHeadersToAI ?? false,
+            },
+        },
+    };
+}
+//# sourceMappingURL=event.js.map

package/dist/event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event.js","sourceRoot":"","sources":["../src/event.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,UAAU,EACV,MAAM,EACN,MAAM,GAOP,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,oBAAoB,EAA6B,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAG9C,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC;AAExC,MAAM,UAAU,WAAW,CAAC,KAAc,EAAE,YAAqB;IAC/D,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,OAAO;YAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACtD,CAAC;AAaD;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,MAAwB;IACjD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAElC,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE7G,yDAAyD;IACzD,MAAM,eAAe,GAAqB,qBAAqB,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IAEhG,+CAA+C;IAC/C,MAAM,OAAO,GACX,QAAQ,CAAC,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IAE9E,MAAM,aAAa,GACjB,MAAM,CAAC,aAAa,IAAI,QAAQ,CAAC,QAAQ;QACvC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC;QACxC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;IAE3B,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IAEvC,4EAA4E;IAC5E,MAAM,QAAQ,GACZ,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;IAE7F,OAAO;QACL,EAAE,EAAE,UAAU,EAAE;QAChB,SAAS,EAAE,MAAM,EAAE;QACnB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE;QAC7F,MAAM;QACN,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK;QACL,WAAW;QACX,QAAQ;QACR,OAAO;QACP,aAAa,EAAE,WAAW,CAAC,aAAa,EAAE,OAAO,CAAC;QAClD,eAAe,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;QACrE,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,SAAS,WAAW,CAClB,aAAkD,EAClD,OAAwB;IAExB,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,aAAa,CAAC;IACtC,OAAO;QACL,GAAG,aAAa;QAChB,YAAY,EAAE;YACZ,EAAE,EAAE;gBACF,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,OAAO;gBAC3B,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,IAAI;gBACrB,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,QAAQ;gBAC7B,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK;gBACvB,YAAY,EAAE,OAAO,CAAC,EAAE,CAAC,YAAY,IAAI,KAAK;gBAC9C,eAAe,EAAE,OAAO,CAAC,EAAE,CAAC,eAAe,IAAI,KAAK;aACrD;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/git.d.ts

@@ -0,0 +1,8 @@
+import type { GitContext } from "@bywaretech/bysentinel-core";
+/**
+ * Resolve Git/release correlation metadata (roadmap #4). Explicit `overrides`
+ * win; otherwise we read BySentinel vars first, then common CI providers
+ * (GitHub Actions, GitLab CI, Vercel). Returns undefined when nothing is known.
+ */
+export declare function resolveGitContext(overrides?: GitContext): GitContext | undefined;
+//# sourceMappingURL=git.d.ts.map

package/dist/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAU9D;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,CAsBhF"}

package/dist/git.js

@@ -0,0 +1,31 @@
+const pick = (...keys) => {
+    for (const k of keys) {
+        const v = process.env[k];
+        if (v && v.length > 0)
+            return v;
+    }
+    return undefined;
+};
+/**
+ * Resolve Git/release correlation metadata (roadmap #4). Explicit `overrides`
+ * win; otherwise we read BySentinel vars first, then common CI providers
+ * (GitHub Actions, GitLab CI, Vercel). Returns undefined when nothing is known.
+ */
+export function resolveGitContext(overrides) {
+    const repoFromGithub = pick("GITHUB_SERVER_URL") && pick("GITHUB_REPOSITORY")
+        ? `${process.env.GITHUB_SERVER_URL}/${process.env.GITHUB_REPOSITORY}`
+        : undefined;
+    const git = {
+        commitSha: overrides?.commitSha ??
+            pick("BYSENTINEL_GIT_SHA", "GIT_SHA", "GITHUB_SHA", "CI_COMMIT_SHA", "VERCEL_GIT_COMMIT_SHA"),
+        branch: overrides?.branch ??
+            pick("BYSENTINEL_GIT_BRANCH", "GITHUB_REF_NAME", "CI_COMMIT_BRANCH", "VERCEL_GIT_COMMIT_REF"),
+        version: overrides?.version ?? pick("BYSENTINEL_VERSION", "npm_package_version"),
+        release: overrides?.release ?? pick("BYSENTINEL_RELEASE"),
+        buildTimestamp: overrides?.buildTimestamp ?? pick("BYSENTINEL_BUILD_TIME"),
+        repositoryUrl: overrides?.repositoryUrl ?? pick("BYSENTINEL_GIT_REPO_URL", "CI_PROJECT_URL") ?? repoFromGithub,
+    };
+    // Drop the object entirely if every field is empty.
+    return Object.values(git).some((v) => v != null) ? git : undefined;
+}
+//# sourceMappingURL=git.js.map

package/dist/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAEA,MAAM,IAAI,GAAG,CAAC,GAAG,IAAc,EAAsB,EAAE;IACrD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAsB;IACtD,MAAM,cAAc,GAClB,IAAI,CAAC,mBAAmB,CAAC,IAAI,IAAI,CAAC,mBAAmB,CAAC;QACpD,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE;QACrE,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,GAAG,GAAe;QACtB,SAAS,EACP,SAAS,EAAE,SAAS;YACpB,IAAI,CAAC,oBAAoB,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,uBAAuB,CAAC;QAC/F,MAAM,EACJ,SAAS,EAAE,MAAM;YACjB,IAAI,CAAC,uBAAuB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,uBAAuB,CAAC;QAC/F,OAAO,EAAE,SAAS,EAAE,OAAO,IAAI,IAAI,CAAC,oBAAoB,EAAE,qBAAqB,CAAC;QAChF,OAAO,EAAE,SAAS,EAAE,OAAO,IAAI,IAAI,CAAC,oBAAoB,CAAC;QACzD,cAAc,EAAE,SAAS,EAAE,cAAc,IAAI,IAAI,CAAC,uBAAuB,CAAC;QAC1E,aAAa,EACX,SAAS,EAAE,aAAa,IAAI,IAAI,CAAC,yBAAyB,EAAE,gBAAgB,CAAC,IAAI,cAAc;KAClG,CAAC;IAEF,oDAAoD;IACpD,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export { withBySentinel, type LambdaHandler } from "./withBySentinel.js";
+export { captureException, captureMessage } from "./capture.js";
+export { startRuntime, BySentinel } from "./runtime.js";
+export { resolveOptions } from "./options.js";
+export { resolveGitContext } from "./git.js";
+export type { AwsLambdaContextLike } from "./context.js";
+export type { BySentinelOptions, ResolvedOptions, DeliveryOptions } from "./types.js";
+export type { BySentinelEvent, CaptureContext, CaptureOptions, SecurityOptions, AIOptions, GitContext, Timeline, ExecutionTimeline, TimelineStep, } from "@bywaretech/bysentinel-core";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,YAAY,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzD,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGtF,YAAY,EACV,eAAe,EACf,cAAc,EACd,cAAc,EACd,eAAe,EACf,SAAS,EACT,UAAU,EACV,QAAQ,EACR,iBAAiB,EACjB,YAAY,GACb,MAAM,6BAA6B,CAAC"}

package/dist/index.js

@@ -0,0 +1,6 @@
+export { withBySentinel } from "./withBySentinel.js";
+export { captureException, captureMessage } from "./capture.js";
+export { startRuntime, BySentinel } from "./runtime.js";
+export { resolveOptions } from "./options.js";
+export { resolveGitContext } from "./git.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAsB,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC"}

package/dist/options.d.ts

@@ -0,0 +1,4 @@
+import type { ResolvedOptions, BySentinelOptions } from "./types.js";
+/** Merge user options with environment variables and secure defaults. */
+export declare function resolveOptions(options: BySentinelOptions): ResolvedOptions;
+//# sourceMappingURL=options.d.ts.map

package/dist/options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAerE,yEAAyE;AACzE,wBAAgB,cAAc,CAAC,OAAO,EAAE,iBAAiB,GAAG,eAAe,CAmC1E"}

package/dist/options.js

@@ -0,0 +1,48 @@
+import { DEFAULT_CAPTURE_OPTIONS, DEFAULT_SECURITY_OPTIONS } from "@bywaretech/bysentinel-core";
+import { resolveGitContext } from "./git.js";
+const env = (key) => {
+    const v = process.env[key];
+    return v && v.length > 0 ? v : undefined;
+};
+const splitList = (value) => value
+    ? value
+        .split(",")
+        .map((item) => item.trim())
+        .filter(Boolean)
+    : [];
+/** Merge user options with environment variables and secure defaults. */
+export function resolveOptions(options) {
+    const security = { ...DEFAULT_SECURITY_OPTIONS, ...options.security };
+    const capture = { ...DEFAULT_CAPTURE_OPTIONS, ...options.capture };
+    // Strict mode overrides capture flags: bodies/headers never leave the process.
+    if (security.strictMode) {
+        capture.requestBody = false;
+        capture.headers = false;
+    }
+    return {
+        project: options.project ?? env("BYSENTINEL_PROJECT") ?? "unknown",
+        environment: options.environment ?? env("BYSENTINEL_ENVIRONMENT") ?? "development",
+        release: options.release ?? env("BYSENTINEL_RELEASE"),
+        collectorUrl: options.collectorUrl ?? env("BYSENTINEL_COLLECTOR_URL"),
+        apiKey: options.apiKey ?? env("BYSENTINEL_API_KEY"),
+        capture,
+        security,
+        ai: options.ai,
+        git: resolveGitContext(options.git),
+        delivery: {
+            mode: options.delivery?.mode ?? "background",
+            timeoutMs: options.delivery?.timeoutMs ?? 2000,
+            retries: options.delivery?.retries ?? 0,
+            maxEventBytes: options.delivery?.maxEventBytes ?? 262_144,
+            endpointPath: options.delivery?.endpointPath ?? "/v1/events",
+            webhooks: options.delivery?.webhooks ?? splitList(env("BYSENTINEL_DIRECT_WEBHOOK_URLS")),
+        },
+        onError: options.onError ??
+            ((error) => {
+                if (options.debug)
+                    console.debug("[bysentinel] internal error:", error);
+            }),
+        debug: options.debug ?? false,
+    };
+}
+//# sourceMappingURL=options.js.map

package/dist/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAChG,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAG7C,MAAM,GAAG,GAAG,CAAC,GAAW,EAAsB,EAAE;IAC9C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3C,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,KAAyB,EAAY,EAAE,CACxD,KAAK;IACH,CAAC,CAAC,KAAK;SACF,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC;IACpB,CAAC,CAAC,EAAE,CAAC;AAET,yEAAyE;AACzE,MAAM,UAAU,cAAc,CAAC,OAA0B;IACvD,MAAM,QAAQ,GAAG,EAAE,GAAG,wBAAwB,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IACtE,MAAM,OAAO,GAAG,EAAE,GAAG,uBAAuB,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAEnE,+EAA+E;IAC/E,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC;QAC5B,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC;IAC1B,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC,oBAAoB,CAAC,IAAI,SAAS;QAClE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC,wBAAwB,CAAC,IAAI,aAAa;QAClF,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC,oBAAoB,CAAC;QACrD,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC,0BAA0B,CAAC;QACrE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,oBAAoB,CAAC;QACnD,OAAO;QACP,QAAQ;QACR,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,GAAG,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC;QACnC,QAAQ,EAAE;YACR,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,YAAY;YAC5C,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,IAAI,IAAI;YAC9C,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC;YACvC,aAAa,EAAE,OAAO,CAAC,QAAQ,EAAE,aAAa,IAAI,OAAO;YACzD,YAAY,EAAE,OAAO,CAAC,QAAQ,EAAE,YAAY,IAAI,YAAY;YAC5D,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,IAAI,SAAS,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;SACzF;QACD,OAAO,EACL,OAAO,CAAC,OAAO;YACf,CAAC,CAAC,KAAK,EAAE,EAAE;gBACT,IAAI,OAAO,CAAC,KAAK;oBAAE,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;YAC1E,CAAC,CAAC;QACJ,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK;KAC9B,CAAC;AACJ,CAAC"}

package/dist/request.d.ts

@@ -0,0 +1,12 @@
+import type { RequestInfo } from "@bywaretech/bysentinel-core";
+import type { ResolvedOptions } from "./types.js";
+/**
+ * Best-effort extraction of HTTP request context from common Lambda event
+ * shapes: API Gateway REST (v1), HTTP API (v2), and ALB. Non-HTTP events yield
+ * an empty object.
+ *
+ * Capture flags decide which parts are collected; strict mode already forced
+ * `requestBody`/`headers` to false in `resolveOptions`.
+ */
+export declare function extractRequest(event: unknown, options: ResolvedOptions): RequestInfo | undefined;
+//# sourceMappingURL=request.d.ts.map

package/dist/request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../src/request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,GAAG,WAAW,GAAG,SAAS,CAiChG"}

package/dist/request.js

@@ -0,0 +1,67 @@
+/**
+ * Best-effort extraction of HTTP request context from common Lambda event
+ * shapes: API Gateway REST (v1), HTTP API (v2), and ALB. Non-HTTP events yield
+ * an empty object.
+ *
+ * Capture flags decide which parts are collected; strict mode already forced
+ * `requestBody`/`headers` to false in `resolveOptions`.
+ */
+export function extractRequest(event, options) {
+    if (!event || typeof event !== "object")
+        return undefined;
+    const e = event;
+    const method = e.httpMethod ?? e.requestContext?.http?.method ?? e.requestContext?.httpMethod;
+    const path = e.path ?? e.rawPath ?? e.requestContext?.http?.path;
+    const hasHeaders = e.headers && typeof e.headers === "object";
+    const hasBody = e.body != null;
+    // If it doesn't look like an HTTP-ish event, skip request context entirely.
+    // Some local Lambda invocations provide only `{ body }`, so keep body-only
+    // events when explicit body capture is enabled.
+    if (!method && !path && !hasHeaders && !(options.capture.requestBody && hasBody)) {
+        return undefined;
+    }
+    const info = {};
+    if (method)
+        info.method = method;
+    if (path)
+        info.path = path;
+    if (options.capture.query) {
+        info.query = normalizeQuery(e);
+    }
+    if (options.capture.headers && hasHeaders) {
+        info.headers = { ...e.headers };
+    }
+    if (options.capture.requestBody && hasBody) {
+        info.body = parseBody(e.body, e.isBase64Encoded);
+    }
+    return info;
+}
+function normalizeQuery(e) {
+    if (e.multiValueQueryStringParameters && typeof e.multiValueQueryStringParameters === "object") {
+        return { ...e.multiValueQueryStringParameters };
+    }
+    if (e.queryStringParameters && typeof e.queryStringParameters === "object") {
+        return { ...e.queryStringParameters };
+    }
+    return undefined;
+}
+function parseBody(body, isBase64) {
+    if (typeof body !== "string")
+        return body;
+    let raw = body;
+    if (isBase64) {
+        try {
+            raw = Buffer.from(body, "base64").toString("utf8");
+        }
+        catch {
+            return "[unparseable-base64-body]";
+        }
+    }
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return raw;
+    }
+}
+//# sourceMappingURL=request.js.map

package/dist/request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.js","sourceRoot":"","sources":["../src/request.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,OAAwB;IACrE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,CAAC,GAAG,KAA4B,CAAC;IAEvC,MAAM,MAAM,GACV,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,cAAc,EAAE,UAAU,CAAC;IACjF,MAAM,IAAI,GAAuB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC;IAErF,MAAM,UAAU,GAAG,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC;IAC9D,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC;IAE/B,4EAA4E;IAC5E,2EAA2E;IAC3E,gDAAgD;IAChD,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,EAAE,CAAC;QACjF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,IAAI,GAAgB,EAAE,CAAC;IAC7B,IAAI,MAAM;QAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACjC,IAAI,IAAI;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAE3B,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,UAAU,EAAE,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,IAAI,OAAO,EAAE,CAAC;QAC3C,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,CAAsB;IAC5C,IAAI,CAAC,CAAC,+BAA+B,IAAI,OAAO,CAAC,CAAC,+BAA+B,KAAK,QAAQ,EAAE,CAAC;QAC/F,OAAO,EAAE,GAAG,CAAC,CAAC,+BAA+B,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,CAAC,qBAAqB,IAAI,OAAO,CAAC,CAAC,qBAAqB,KAAK,QAAQ,EAAE,CAAC;QAC3E,OAAO,EAAE,GAAG,CAAC,CAAC,qBAAqB,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,SAAS,CAAC,IAAa,EAAE,QAAkB;IAClD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,2BAA2B,CAAC;QACrC,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC"}

package/dist/runtime.d.ts

@@ -0,0 +1,22 @@
+import { Timeline } from "@bywaretech/bysentinel-core";
+/**
+ * Start an execution timeline for the current invocation (roadmap #1).
+ *
+ * ```ts
+ * const runtime = BySentinel.start();
+ * runtime.step("Validate Request");
+ * runtime.step("Create Payment");
+ * runtime.finish();
+ * ```
+ *
+ * When called inside a `withBySentinel` handler the timeline is attached to the
+ * active scope, so it is automatically included in any captured event (and, on
+ * an unhandled error, finalized as aborted). Outside a handler it still works as
+ * a standalone timer.
+ */
+export declare function startRuntime(): Timeline;
+/** Spec-facing namespace: `BySentinel.start()`. */
+export declare const BySentinel: {
+    start: typeof startRuntime;
+};
+//# sourceMappingURL=runtime.d.ts.map

package/dist/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAGvD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,IAAI,QAAQ,CAKvC;AAED,mDAAmD;AACnD,eAAO,MAAM,UAAU;;CAEtB,CAAC"}

package/dist/runtime.js

@@ -0,0 +1,29 @@
+import { Timeline } from "@bywaretech/bysentinel-core";
+import { currentScope } from "./scope.js";
+/**
+ * Start an execution timeline for the current invocation (roadmap #1).
+ *
+ * ```ts
+ * const runtime = BySentinel.start();
+ * runtime.step("Validate Request");
+ * runtime.step("Create Payment");
+ * runtime.finish();
+ * ```
+ *
+ * When called inside a `withBySentinel` handler the timeline is attached to the
+ * active scope, so it is automatically included in any captured event (and, on
+ * an unhandled error, finalized as aborted). Outside a handler it still works as
+ * a standalone timer.
+ */
+export function startRuntime() {
+    const timeline = new Timeline();
+    const scope = currentScope();
+    if (scope)
+        scope.timeline = timeline;
+    return timeline;
+}
+/** Spec-facing namespace: `BySentinel.start()`. */
+export const BySentinel = {
+    start: startRuntime,
+};
+//# sourceMappingURL=runtime.js.map

package/dist/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,KAAK;QAAE,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACrC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,KAAK,EAAE,YAAY;CACpB,CAAC"}

package/dist/scope.d.ts

@@ -0,0 +1,14 @@
+import type { Timeline } from "@bywaretech/bysentinel-core";
+import type { AwsLambdaContextLike } from "./context.js";
+import type { ResolvedOptions } from "./types.js";
+export interface ActiveScope {
+    options: ResolvedOptions;
+    lambdaEvent?: unknown;
+    lambdaContext?: AwsLambdaContextLike;
+    coldStart: boolean;
+    /** Optional execution timeline started via `startRuntime()`. */
+    timeline?: Timeline;
+}
+export declare function runWithScope<T>(scope: ActiveScope, fn: () => Promise<T>): Promise<T>;
+export declare function currentScope(): ActiveScope | undefined;
+//# sourceMappingURL=scope.d.ts.map

package/dist/scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.d.ts","sourceRoot":"","sources":["../src/scope.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,eAAe,CAAC;IACzB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,SAAS,EAAE,OAAO,CAAC;IACnB,gEAAgE;IAChE,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAID,wBAAgB,YAAY,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEpF;AAED,wBAAgB,YAAY,IAAI,WAAW,GAAG,SAAS,CAEtD"}

package/dist/scope.js

@@ -0,0 +1,9 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+const storage = new AsyncLocalStorage();
+export function runWithScope(scope, fn) {
+    return storage.run(scope, fn);
+}
+export function currentScope() {
+    return storage.getStore();
+}
+//# sourceMappingURL=scope.js.map

package/dist/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../src/scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAcrD,MAAM,OAAO,GAAG,IAAI,iBAAiB,EAAe,CAAC;AAErD,MAAM,UAAU,YAAY,CAAI,KAAkB,EAAE,EAAoB;IACtE,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC;AAC5B,CAAC"}

package/dist/transport.d.ts

@@ -0,0 +1,19 @@
+import type { BySentinelEvent } from "@bywaretech/bysentinel-core";
+import type { ResolvedOptions } from "./types.js";
+/**
+ * Deliver an event to the collector. Always fails silently — a broken
+ * collector must never break the Lambda. Delivery is bounded by
+ * `delivery.timeoutMs` regardless of mode.
+ */
+export declare function sendEvent(options: ResolvedOptions, event: BySentinelEvent): Promise<{
+    delivered: boolean;
+}>;
+export declare function buildDeliveryUrl(collectorUrl: string, endpointPath: string): string;
+/**
+ * Run delivery according to `delivery.mode`. In "blocking" mode we await the
+ * send; in "background" mode we still await but the send itself is bounded by
+ * `timeoutMs`, so the wrapper is never blocked longer than that. Both swallow
+ * errors.
+ */
+export declare function deliver(options: ResolvedOptions, event: BySentinelEvent): Promise<void>;
+//# sourceMappingURL=transport.d.ts.map

package/dist/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD;;;;GAIG;AACH,wBAAsB,SAAS,CAC7B,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC;IAAE,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CAmBjC;AA2ED,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAKnF;AAED;;;;;GAKG;AACH,wBAAsB,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAM7F"}

package/dist/transport.js

@@ -0,0 +1,101 @@
+/**
+ * Deliver an event to the collector. Always fails silently — a broken
+ * collector must never break the Lambda. Delivery is bounded by
+ * `delivery.timeoutMs` regardless of mode.
+ */
+export async function sendEvent(options, event) {
+    const body = JSON.stringify(event);
+    if (Buffer.byteLength(body, "utf8") > options.delivery.maxEventBytes) {
+        options.onError(new Error(`event exceeds maxEventBytes (${options.delivery.maxEventBytes}); event dropped`));
+        return { delivered: false };
+    }
+    const targets = deliveryTargets(options, event);
+    if (targets.length === 0) {
+        options.onError(new Error("collectorUrl and delivery.webhooks are not configured; event dropped"));
+        return { delivered: false };
+    }
+    const results = await Promise.all(targets.map((target) => sendToTarget(options, target, body)));
+    return { delivered: results.some(Boolean) };
+}
+function deliveryTargets(options, event) {
+    const targets = [];
+    if (options.collectorUrl) {
+        targets.push({
+            url: buildDeliveryUrl(options.collectorUrl, options.delivery.endpointPath),
+            headers: {
+                "content-type": "application/json",
+                "x-api-key": options.apiKey ?? "",
+                "x-bysentinel-event-id": event.id,
+            },
+        });
+    }
+    for (const url of options.delivery.webhooks) {
+        targets.push({
+            url,
+            headers: {
+                "content-type": "application/json",
+                "x-bysentinel-event-id": event.id,
+                "x-bysentinel-delivery": "sdk-webhook",
+            },
+        });
+    }
+    return targets;
+}
+async function sendToTarget(options, target, body) {
+    const { retries, timeoutMs } = options.delivery;
+    for (let attempt = 0; attempt <= retries; attempt++) {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), timeoutMs);
+        try {
+            const res = await fetch(target.url, {
+                method: "POST",
+                headers: target.headers,
+                body,
+                signal: controller.signal,
+            });
+            clearTimeout(timer);
+            if (res.ok)
+                return true;
+            // 4xx are not retryable; 5xx may be.
+            if (res.status < 500 || attempt === retries) {
+                options.onError(new Error(`delivery target responded ${res.status} for ${target.url}`));
+                return false;
+            }
+        }
+        catch (error) {
+            clearTimeout(timer);
+            if (attempt === retries) {
+                options.onError(error);
+                return false;
+            }
+        }
+        // Exponential backoff before the next retry.
+        await delay(Math.min(1000, 100 * 2 ** attempt));
+    }
+    return false;
+}
+export function buildDeliveryUrl(collectorUrl, endpointPath) {
+    if (!endpointPath)
+        return collectorUrl;
+    const base = collectorUrl.replace(/\/$/, "");
+    const path = endpointPath.startsWith("/") ? endpointPath : `/${endpointPath}`;
+    return `${base}${path}`;
+}
+/**
+ * Run delivery according to `delivery.mode`. In "blocking" mode we await the
+ * send; in "background" mode we still await but the send itself is bounded by
+ * `timeoutMs`, so the wrapper is never blocked longer than that. Both swallow
+ * errors.
+ */
+export async function deliver(options, event) {
+    try {
+        await sendEvent(options, event);
+    }
+    catch (error) {
+        options.onError(error);
+    }
+}
+function delay(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=transport.js.map

package/dist/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAwB,EACxB,KAAsB;IAEtB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QACrE,OAAO,CAAC,OAAO,CACb,IAAI,KAAK,CAAC,gCAAgC,OAAO,CAAC,QAAQ,CAAC,aAAa,kBAAkB,CAAC,CAC5F,CAAC;QACF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,OAAO,CACb,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAClF,CAAC;QACF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAChG,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;AAC9C,CAAC;AAOD,SAAS,eAAe,CAAC,OAAwB,EAAE,KAAsB;IACvE,MAAM,OAAO,GAAqB,EAAE,CAAC;IAErC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC;YACX,GAAG,EAAE,gBAAgB,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC1E,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;gBACjC,uBAAuB,EAAE,KAAK,CAAC,EAAE;aAClC;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC;YACX,GAAG;YACH,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,uBAAuB,EAAE,KAAK,CAAC,EAAE;gBACjC,uBAAuB,EAAE,aAAa;aACvC;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAAwB,EACxB,MAAsB,EACtB,IAAY;IAEZ,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IAEhD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE;gBAClC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,IAAI;gBACJ,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,YAAY,CAAC,KAAK,CAAC,CAAC;YAEpB,IAAI,GAAG,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YAExB,qCAAqC;YACrC,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;gBAC5C,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,MAAM,QAAQ,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACxF,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;gBACxB,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACvB,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,6CAA6C;QAC7C,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,YAAoB,EAAE,YAAoB;IACzE,IAAI,CAAC,YAAY;QAAE,OAAO,YAAY,CAAC;IACvC,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC;IAC9E,OAAO,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAwB,EAAE,KAAsB;IAC5E,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,62 @@
+import type { AIOptions, CaptureOptions, GitContext, SecurityOptions } from "@bywaretech/bysentinel-core";
+export interface DeliveryOptions {
+    /**
+     * "background" (default): the event send is fire-and-forget, bounded by
+     * `timeoutMs`, and the wrapper does not block on it beyond that bound.
+     * "blocking": await delivery fully before returning (still bounded).
+     */
+    mode?: "background" | "blocking";
+    /** Hard cap on how long delivery may take. Default 2000ms. */
+    timeoutMs?: number;
+    /** Retries on network failure (exponential backoff). Default 0 in Lambda. */
+    retries?: number;
+    /** Drop events larger than this serialized size. Default 256 KiB. */
+    maxEventBytes?: number;
+    /**
+     * Path appended to `collectorUrl`. Defaults to `/v1/events` for the
+     * BySentinel collector. Use an empty string for exact webhook URLs.
+     */
+    endpointPath?: string;
+    /**
+     * Optional direct webhooks that receive the same sanitized event from the SDK.
+     * Useful when you want BySentinel plus an external raw notification, or when
+     * you are not running the dashboard/collector yet.
+     */
+    webhooks?: string[];
+}
+export interface BySentinelOptions {
+    project: string;
+    environment: string;
+    release?: string;
+    /** Collector base URL. Falls back to BYSENTINEL_COLLECTOR_URL. */
+    collectorUrl?: string;
+    /** Project API key. Falls back to BYSENTINEL_API_KEY. */
+    apiKey?: string;
+    capture?: CaptureOptions;
+    security?: SecurityOptions;
+    /** AI preferences forwarded to the collector as event metadata. */
+    ai?: AIOptions;
+    /** Explicit Git/release correlation. Falls back to env/CI detection. */
+    git?: GitContext;
+    delivery?: DeliveryOptions;
+    /** Called with internal errors instead of throwing. Off by default. */
+    onError?: (error: unknown) => void;
+    /** When true, internal diagnostics are logged with console.debug. */
+    debug?: boolean;
+}
+/** Fully-resolved options with env fallbacks + defaults applied. */
+export interface ResolvedOptions {
+    project: string;
+    environment: string;
+    release?: string;
+    collectorUrl?: string;
+    apiKey?: string;
+    capture: Required<CaptureOptions>;
+    security: Required<SecurityOptions>;
+    ai?: AIOptions;
+    git?: GitContext;
+    delivery: Required<DeliveryOptions>;
+    onError: (error: unknown) => void;
+    debug: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE1G,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,IAAI,CAAC,EAAE,YAAY,GAAG,UAAU,CAAC;IACjC,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,mEAAmE;IACnE,EAAE,CAAC,EAAE,SAAS,CAAC;IAEf,wEAAwE;IACxE,GAAG,CAAC,EAAE,UAAU,CAAC;IAEjB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAE3B,uEAAuE;IACvE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACnC,qEAAqE;IACrE,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAClC,QAAQ,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;IACpC,EAAE,CAAC,EAAE,SAAS,CAAC;IACf,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;IACpC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAClC,KAAK,EAAE,OAAO,CAAC;CAChB"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/withBySentinel.d.ts

@@ -0,0 +1,13 @@
+import { type AwsLambdaContextLike } from "./context.js";
+import type { BySentinelOptions } from "./types.js";
+export type LambdaHandler<TEvent = any, TResult = any, TContext extends AwsLambdaContextLike = AwsLambdaContextLike> = (event: TEvent, context: TContext) => Promise<TResult> | TResult;
+/**
+ * Wrap a Lambda handler with BySentinel. On an unhandled exception it captures
+ * a sanitized event, then re-throws so the Lambda still fails as expected. On
+ * success it optionally reports performance metadata (timeout risk / memory).
+ *
+ * The wrapper never changes the handler's return value and never swallows the
+ * business error.
+ */
+export declare function withBySentinel<TEvent = any, TResult = any, TContext extends AwsLambdaContextLike = AwsLambdaContextLike>(handler: LambdaHandler<TEvent, TResult, TContext>, options: BySentinelOptions): LambdaHandler<TEvent, TResult, TContext>;
+//# sourceMappingURL=withBySentinel.d.ts.map

package/dist/withBySentinel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"withBySentinel.d.ts","sourceRoot":"","sources":["../src/withBySentinel.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2C,KAAK,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAMlG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,MAAM,MAAM,aAAa,CACvB,MAAM,GAAG,GAAG,EACZ,OAAO,GAAG,GAAG,EACb,QAAQ,SAAS,oBAAoB,GAAG,oBAAoB,IAC1D,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAErE;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,MAAM,GAAG,GAAG,EACZ,OAAO,GAAG,GAAG,EACb,QAAQ,SAAS,oBAAoB,GAAG,oBAAoB,EAE5D,OAAO,EAAE,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,EACjD,OAAO,EAAE,iBAAiB,GACzB,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAsE1C"}