@opensip-cli/checks-universal 0.1.0

package/dist/checks/resilience/sentry/_helpers/sentry.js

@@ -0,0 +1,68 @@
+/**
+ * @fileoverview Shared helpers for Sentry fitness checks
+ * @module checks-builtin/checks/resilience/sentry/_helpers/sentry
+ */
+/**
+ * Quick bail-out: returns true if the file references Sentry at all.
+ * All Sentry checks should call this first to avoid unnecessary work.
+ */
+export function hasSentryUsage(content) {
+    return content.includes('@sentry/') || content.includes('Sentry.');
+}
+/**
+ * Returns true if the file contains a `Sentry.init(` call.
+ * Used by checks that validate init configuration.
+ */
+export function hasSentryInit(content) {
+    return content.includes('Sentry.init(') || content.includes('Sentry.init (');
+}
+/**
+ * Extracts the Sentry.init() call block from file content.
+ * Returns the line range (start/end indices) and the content of the init block.
+ * Handles multi-line init calls by tracking brace depth.
+ */
+// eslint-disable-next-line sonarjs/cognitive-complexity -- multi-line bracket scanner: handles nested braces, string literals, and the open-paren/close-paren state in Sentry.init({...})
+export function extractSentryInitBlock(content) {
+    const lines = content.split('\n');
+    let initLineIdx = -1;
+    for (const [i, line_] of lines.entries()) {
+        const line = line_ ?? '';
+        if (line.includes('Sentry.init(') || line.includes('Sentry.init (')) {
+            initLineIdx = i;
+            break;
+        }
+    }
+    if (initLineIdx === -1)
+        return null;
+    // Collect the full init block by tracking parenthesis depth
+    let parenDepth = 0;
+    let started = false;
+    const blockLines = [];
+    for (let i = initLineIdx; i < lines.length; i++) {
+        const line = lines[i] ?? '';
+        blockLines.push(line);
+        for (const char of line) {
+            if (char === '(') {
+                parenDepth++;
+                started = true;
+            }
+            if (char === ')') {
+                parenDepth--;
+            }
+        }
+        if (started && parenDepth <= 0) {
+            return {
+                startLine: initLineIdx,
+                endLine: i,
+                block: blockLines.join('\n'),
+            };
+        }
+    }
+    // Unclosed init — return what we have
+    return {
+        startLine: initLineIdx,
+        endLine: lines.length - 1,
+        block: blockLines.join('\n'),
+    };
+}
+//# sourceMappingURL=sentry.js.map

package/dist/checks/resilience/sentry/_helpers/sentry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentry.js","sourceRoot":"","sources":["../../../../../src/checks/resilience/sentry/_helpers/sentry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,OAAO,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;AAC/E,CAAC;AAED;;;;GAIG;AACH,0LAA0L;AAC1L,MAAM,UAAU,sBAAsB,CACpC,OAAe;IAEf,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACpE,WAAW,GAAG,CAAC,CAAC;YAChB,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,WAAW,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,4DAA4D;IAC5D,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,KAAK,IAAI,CAAC,GAAG,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEtB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjB,UAAU,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjB,UAAU,EAAE,CAAC;YACf,CAAC;QACH,CAAC;QAED,IAAI,OAAO,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO;gBACL,SAAS,EAAE,WAAW;gBACtB,OAAO,EAAE,CAAC;gBACV,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;aAC7B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,OAAO;QACL,SAAS,EAAE,WAAW;QACtB,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC;QACzB,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;KAC7B,CAAC;AACJ,CAAC"}

package/dist/checks/resilience/sentry/index.d.ts

@@ -0,0 +1,8 @@
+export * from './sentry-dsn-configured.js';
+export * from './sentry-environment-set.js';
+export * from './sentry-error-boundary.js';
+export * from './sentry-pii-scrubbing.js';
+export * from './sentry-release-set.js';
+export * from './sentry-sample-rate.js';
+export * from './sentry-source-maps.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/checks/resilience/sentry/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/checks/resilience/sentry/index.ts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC"}

package/dist/checks/resilience/sentry/index.js

@@ -0,0 +1,8 @@
+export * from './sentry-dsn-configured.js';
+export * from './sentry-environment-set.js';
+export * from './sentry-error-boundary.js';
+export * from './sentry-pii-scrubbing.js';
+export * from './sentry-release-set.js';
+export * from './sentry-sample-rate.js';
+export * from './sentry-source-maps.js';
+//# sourceMappingURL=index.js.map

package/dist/checks/resilience/sentry/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/checks/resilience/sentry/index.ts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC"}

package/dist/checks/resilience/sentry/sentry-dsn-configured.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @fileoverview Detect Sentry.init() calls without a DSN configured
+ * @module checks-builtin/checks/resilience/sentry/sentry-dsn-configured
+ */
+/**
+ * Check: sentry-dsn-configured
+ *
+ * Detects Sentry.init() calls that are missing a DSN.
+ * Without a DSN, the Sentry SDK silently drops all events — monitoring is dead.
+ */
+export declare const sentryDsnConfigured: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=sentry-dsn-configured.d.ts.map

package/dist/checks/resilience/sentry/sentry-dsn-configured.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentry-dsn-configured.d.ts","sourceRoot":"","sources":["../../../../src/checks/resilience/sentry/sentry-dsn-configured.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAiCH;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,sCAmB9B,CAAC"}

package/dist/checks/resilience/sentry/sentry-dsn-configured.js

@@ -0,0 +1,55 @@
+/**
+ * @fileoverview Detect Sentry.init() calls without a DSN configured
+ * @module checks-builtin/checks/resilience/sentry/sentry-dsn-configured
+ */
+import { defineCheck } from '@opensip-cli/fitness';
+import { hasSentryInit, extractSentryInitBlock } from './_helpers/sentry.js';
+function analyze(content, _filePath) {
+    if (!hasSentryInit(content))
+        return [];
+    const initBlock = extractSentryInitBlock(content);
+    if (!initBlock)
+        return [];
+    // Check if DSN is present in the init block
+    const hasDsn = initBlock.block.includes('dsn') ||
+        initBlock.block.includes('DSN') ||
+        initBlock.block.includes('SENTRY_DSN');
+    if (hasDsn)
+        return [];
+    return [
+        {
+            line: initBlock.startLine + 1,
+            message: 'Sentry.init() called without a DSN — Sentry will not report errors without a valid DSN',
+            severity: 'error',
+            suggestion: 'Add a dsn property to Sentry.init(): Sentry.init({ dsn: process.env.SENTRY_DSN, ... })',
+            type: 'sentry-missing-dsn',
+        },
+    ];
+}
+/**
+ * Check: sentry-dsn-configured
+ *
+ * Detects Sentry.init() calls that are missing a DSN.
+ * Without a DSN, the Sentry SDK silently drops all events — monitoring is dead.
+ */
+export const sentryDsnConfigured = defineCheck({
+    id: 'a1c7e3f0-4b2d-4e8a-9f01-d3c5a7b9e2f4',
+    slug: 'sentry-dsn-configured',
+    scope: { languages: ['typescript', 'javascript'], concerns: ['backend', 'frontend'] },
+    contentFilter: 'strip-strings-and-comments',
+    description: 'Detects Sentry.init() without a DSN — monitoring silently disabled',
+    longDescription: `**Purpose:** Ensures Sentry is actually configured to report errors by checking that a DSN is provided in the init call.
+
+**Detects:**
+- \`Sentry.init({})\` or \`Sentry.init({ integrations: [...] })\` with no \`dsn\` property
+- Init calls that configure everything except the DSN
+
+**Why it matters:** Without a DSN, the Sentry SDK initializes without error but silently drops all events. This is one of the most common Sentry misconfigurations — the app appears to have monitoring but nothing is actually being reported.
+
+**Scope:** Any file that calls \`Sentry.init()\`. Analyzes each file individually.`,
+    tags: ['sentry', 'resilience', 'observability'],
+    fileTypes: ['ts', 'js', 'tsx', 'jsx', 'mjs'],
+    confidence: 'high',
+    analyze,
+});
+//# sourceMappingURL=sentry-dsn-configured.js.map

package/dist/checks/resilience/sentry/sentry-dsn-configured.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentry-dsn-configured.js","sourceRoot":"","sources":["../../../../src/checks/resilience/sentry/sentry-dsn-configured.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAuB,MAAM,sBAAsB,CAAC;AAExE,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE7E,SAAS,OAAO,CAAC,OAAe,EAAE,SAAiB;IACjD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,SAAS,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAE1B,4CAA4C;IAC5C,MAAM,MAAM,GACV,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC/B,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC/B,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAEzC,IAAI,MAAM;QAAE,OAAO,EAAE,CAAC;IAEtB,OAAO;QACL;YACE,IAAI,EAAE,SAAS,CAAC,SAAS,GAAG,CAAC;YAC7B,OAAO,EACL,wFAAwF;YAC1F,QAAQ,EAAE,OAAO;YACjB,UAAU,EACR,wFAAwF;YAC1F,IAAI,EAAE,oBAAoB;SAC3B;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAC;IAC7C,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,uBAAuB;IAC7B,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE;IACrF,aAAa,EAAE,4BAA4B;IAC3C,WAAW,EAAE,oEAAoE;IACjF,eAAe,EAAE;;;;;;;;mFAQgE;IACjF,IAAI,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,eAAe,CAAC;IAC/C,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;IAC5C,UAAU,EAAE,MAAM;IAClB,OAAO;CACR,CAAC,CAAC"}

package/dist/checks/resilience/sentry/sentry-environment-set.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @fileoverview Detect Sentry.init() without environment option
+ * @module checks-builtin/checks/resilience/sentry/sentry-environment-set
+ */
+/**
+ * Check: sentry-environment-set
+ *
+ * Detects Sentry.init() calls missing the environment option.
+ * Without it, errors from all environments appear in one stream.
+ */
+export declare const sentryEnvironmentSet: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=sentry-environment-set.d.ts.map

package/dist/checks/resilience/sentry/sentry-environment-set.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentry-environment-set.d.ts","sourceRoot":"","sources":["../../../../src/checks/resilience/sentry/sentry-environment-set.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA8BH;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,sCAkB/B,CAAC"}

package/dist/checks/resilience/sentry/sentry-environment-set.js

@@ -0,0 +1,51 @@
+/**
+ * @fileoverview Detect Sentry.init() without environment option
+ * @module checks-builtin/checks/resilience/sentry/sentry-environment-set
+ */
+import { defineCheck } from '@opensip-cli/fitness';
+import { hasSentryInit, extractSentryInitBlock } from './_helpers/sentry.js';
+function analyze(content, _filePath) {
+    if (!hasSentryInit(content))
+        return [];
+    const initBlock = extractSentryInitBlock(content);
+    if (!initBlock)
+        return [];
+    const hasEnvironment = initBlock.block.includes('environment') || initBlock.block.includes('SENTRY_ENVIRONMENT');
+    if (hasEnvironment)
+        return [];
+    return [
+        {
+            line: initBlock.startLine + 1,
+            message: 'Sentry.init() called without environment — production and staging errors will be mixed together',
+            severity: 'warning',
+            suggestion: 'Add environment to Sentry.init(): Sentry.init({ environment: process.env.NODE_ENV, ... })',
+            type: 'sentry-missing-environment',
+        },
+    ];
+}
+/**
+ * Check: sentry-environment-set
+ *
+ * Detects Sentry.init() calls missing the environment option.
+ * Without it, errors from all environments appear in one stream.
+ */
+export const sentryEnvironmentSet = defineCheck({
+    id: 'b2d8f4a1-5c3e-4f9b-a012-e4d6b8c0f3a5',
+    slug: 'sentry-environment-set',
+    scope: { languages: ['typescript', 'javascript'], concerns: ['backend', 'frontend'] },
+    contentFilter: 'strip-strings-and-comments',
+    description: 'Detects Sentry.init() without environment — errors from all environments mixed',
+    longDescription: `**Purpose:** Ensures Sentry events are tagged with the deployment environment so errors can be filtered and triaged correctly.
+
+**Detects:**
+- \`Sentry.init()\` calls with no \`environment\` property
+
+**Why it matters:** Without an environment tag, production errors are mixed with staging and development noise. This makes issue triage significantly harder and can mask real production incidents behind a flood of non-production events.
+
+**Scope:** Any file that calls \`Sentry.init()\`. Analyzes each file individually.`,
+    tags: ['sentry', 'resilience', 'observability'],
+    fileTypes: ['ts', 'js', 'tsx', 'jsx', 'mjs'],
+    confidence: 'high',
+    analyze,
+});
+//# sourceMappingURL=sentry-environment-set.js.map

package/dist/checks/resilience/sentry/sentry-environment-set.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentry-environment-set.js","sourceRoot":"","sources":["../../../../src/checks/resilience/sentry/sentry-environment-set.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAuB,MAAM,sBAAsB,CAAC;AAExE,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE7E,SAAS,OAAO,CAAC,OAAe,EAAE,SAAiB;IACjD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,SAAS,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAE1B,MAAM,cAAc,GAClB,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAE5F,IAAI,cAAc;QAAE,OAAO,EAAE,CAAC;IAE9B,OAAO;QACL;YACE,IAAI,EAAE,SAAS,CAAC,SAAS,GAAG,CAAC;YAC7B,OAAO,EACL,iGAAiG;YACnG,QAAQ,EAAE,SAAS;YACnB,UAAU,EACR,2FAA2F;YAC7F,IAAI,EAAE,4BAA4B;SACnC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAAC;IAC9C,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,wBAAwB;IAC9B,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE;IACrF,aAAa,EAAE,4BAA4B;IAC3C,WAAW,EAAE,gFAAgF;IAC7F,eAAe,EAAE;;;;;;;mFAOgE;IACjF,IAAI,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,eAAe,CAAC;IAC/C,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;IAC5C,UAAU,EAAE,MAAM;IAClB,OAAO;CACR,CAAC,CAAC"}

package/dist/checks/resilience/sentry/sentry-error-boundary.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @fileoverview Detect React + Sentry without ErrorBoundary
+ * @module checks-builtin/checks/resilience/sentry/sentry-error-boundary
+ */
+/**
+ * Check: sentry-error-boundary
+ *
+ * Detects React components that import Sentry but don't use
+ * Sentry.ErrorBoundary or withErrorBoundary.
+ */
+export declare const sentryErrorBoundary: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=sentry-error-boundary.d.ts.map

package/dist/checks/resilience/sentry/sentry-error-boundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentry-error-boundary.d.ts","sourceRoot":"","sources":["../../../../src/checks/resilience/sentry/sentry-error-boundary.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAuDH;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,sCAiB9B,CAAC"}

package/dist/checks/resilience/sentry/sentry-error-boundary.js

@@ -0,0 +1,75 @@
+/**
+ * @fileoverview Detect React + Sentry without ErrorBoundary
+ * @module checks-builtin/checks/resilience/sentry/sentry-error-boundary
+ */
+import { defineCheck } from '@opensip-cli/fitness';
+import { hasSentryUsage } from './_helpers/sentry.js';
+// Sentry error boundary patterns (component or HOC)
+const ERROR_BOUNDARY_PATTERNS = [
+    'Sentry.ErrorBoundary',
+    'withErrorBoundary',
+    'Sentry.withErrorBoundary',
+    'ErrorBoundary', // Sentry re-export or custom with Sentry wiring
+];
+function analyze(content, filePath) {
+    // Only check React files (JSX/TSX)
+    if (!filePath.endsWith('.tsx') && !filePath.endsWith('.jsx'))
+        return [];
+    // Must use Sentry
+    if (!hasSentryUsage(content))
+        return [];
+    // Must be a React component file (has JSX return or render)
+    const hasJsx = content.includes('return (') || content.includes('return(');
+    const hasReactImport = content.includes('react') || content.includes('React');
+    if (!hasJsx && !hasReactImport)
+        return [];
+    // Check if any error boundary pattern is present
+    const hasErrorBoundary = ERROR_BOUNDARY_PATTERNS.some((pattern) => content.includes(pattern));
+    if (hasErrorBoundary)
+        return [];
+    // Find the Sentry import line for the violation location
+    const lines = content.split('\n');
+    let sentryImportLine = 1;
+    for (const [i, line_] of lines.entries()) {
+        const line = line_ ?? '';
+        if (line.includes('@sentry/') || line.includes('Sentry')) {
+            sentryImportLine = i + 1;
+            break;
+        }
+    }
+    return [
+        {
+            line: sentryImportLine,
+            message: 'React component uses Sentry but has no ErrorBoundary — unhandled render errors will crash the app without Sentry capture',
+            severity: 'warning',
+            suggestion: 'Wrap key route components with Sentry.ErrorBoundary: <Sentry.ErrorBoundary fallback={<ErrorFallback />}><App /></Sentry.ErrorBoundary>',
+            type: 'sentry-missing-error-boundary',
+            filePath,
+        },
+    ];
+}
+/**
+ * Check: sentry-error-boundary
+ *
+ * Detects React components that import Sentry but don't use
+ * Sentry.ErrorBoundary or withErrorBoundary.
+ */
+export const sentryErrorBoundary = defineCheck({
+    id: 'f6b2d8e5-9a7c-4d3f-e456-c8b0f2a4d7e9',
+    slug: 'sentry-error-boundary',
+    scope: { languages: ['typescript', 'javascript'], concerns: ['frontend'] },
+    description: 'Detects React + Sentry without ErrorBoundary — render crashes go unreported',
+    longDescription: `**Purpose:** Ensures React applications using Sentry wrap key components with error boundaries to capture render errors.
+
+**Detects:**
+- React component files (.tsx/.jsx) that import/use Sentry but contain no \`Sentry.ErrorBoundary\`, \`withErrorBoundary\`, or \`ErrorBoundary\` component
+
+**Why it matters:** React render errors that aren't caught by an error boundary will crash the entire component tree. Without Sentry's ErrorBoundary, these crashes are not reported to Sentry — you lose visibility into the most severe class of frontend errors. Sentry's ErrorBoundary also provides graceful fallback UI.
+
+**Scope:** React component files (.tsx, .jsx) that use the Sentry SDK. Analyzes each file individually.`,
+    tags: ['sentry', 'resilience', 'react', 'frontend'],
+    fileTypes: ['tsx', 'jsx'],
+    confidence: 'medium',
+    analyze,
+});
+//# sourceMappingURL=sentry-error-boundary.js.map

package/dist/checks/resilience/sentry/sentry-error-boundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentry-error-boundary.js","sourceRoot":"","sources":["../../../../src/checks/resilience/sentry/sentry-error-boundary.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAuB,MAAM,sBAAsB,CAAC;AAExE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,oDAAoD;AACpD,MAAM,uBAAuB,GAAG;IAC9B,sBAAsB;IACtB,mBAAmB;IACnB,0BAA0B;IAC1B,eAAe,EAAE,gDAAgD;CAClE,CAAC;AAEF,SAAS,OAAO,CAAC,OAAe,EAAE,QAAgB;IAChD,mCAAmC;IACnC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IAExE,kBAAkB;IAClB,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAExC,4DAA4D;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC3E,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9E,IAAI,CAAC,MAAM,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,CAAC;IAE1C,iDAAiD;IACjD,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9F,IAAI,gBAAgB;QAAE,OAAO,EAAE,CAAC;IAEhC,yDAAyD;IACzD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzD,gBAAgB,GAAG,CAAC,GAAG,CAAC,CAAC;YACzB,MAAM;QACR,CAAC;IACH,CAAC;IAED,OAAO;QACL;YACE,IAAI,EAAE,gBAAgB;YACtB,OAAO,EACL,0HAA0H;YAC5H,QAAQ,EAAE,SAAS;YACnB,UAAU,EACR,wIAAwI;YAC1I,IAAI,EAAE,+BAA+B;YACrC,QAAQ;SACT;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAC;IAC7C,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,uBAAuB;IAC7B,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE;IAC1E,WAAW,EAAE,6EAA6E;IAC1F,eAAe,EAAE;;;;;;;wGAOqF;IACtG,IAAI,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,CAAC;IACnD,SAAS,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;IACzB,UAAU,EAAE,QAAQ;IACpB,OAAO;CACR,CAAC,CAAC"}

package/dist/checks/resilience/sentry/sentry-pii-scrubbing.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @fileoverview Detect Sentry.init() without PII scrubbing callbacks
+ * @module checks-builtin/checks/resilience/sentry/sentry-pii-scrubbing
+ */
+/**
+ * Check: sentry-pii-scrubbing
+ *
+ * Two-tier PII detection for Sentry:
+ * 1. (High confidence) Sentry.init() without beforeSend/beforeBreadcrumb
+ * 2. (Medium confidence) PII field names in Sentry context-setting calls
+ */
+export declare const sentryPiiScrubbing: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=sentry-pii-scrubbing.d.ts.map

package/dist/checks/resilience/sentry/sentry-pii-scrubbing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentry-pii-scrubbing.d.ts","sourceRoot":"","sources":["../../../../src/checks/resilience/sentry/sentry-pii-scrubbing.ts"],"names":[],"mappings":"AACA;;;GAGG;AAwGH;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,sCAuB7B,CAAC"}

package/dist/checks/resilience/sentry/sentry-pii-scrubbing.js

@@ -0,0 +1,125 @@
+// @fitness-ignore-file sentry-pii-scrubbing -- check definition references beforeSend/beforeBreadcrumb as detection patterns
+/**
+ * @fileoverview Detect Sentry.init() without PII scrubbing callbacks
+ * @module checks-builtin/checks/resilience/sentry/sentry-pii-scrubbing
+ */
+import { defineCheck } from '@opensip-cli/fitness';
+import { hasSentryInit, extractSentryInitBlock } from './_helpers/sentry.js';
+// PII-sensitive Sentry API calls — setting user context, extras, or tags
+// that commonly carry personal data
+const PII_CONTEXT_PATTERNS = [
+    'setUser(',
+    'Sentry.setUser(',
+    'setExtra(',
+    'Sentry.setExtra(',
+    'setContext(',
+    'Sentry.setContext(',
+];
+// Field names that suggest PII in Sentry context calls
+const PII_FIELD_NAMES = [
+    'email',
+    'phone',
+    'ip_address',
+    'ipAddress',
+    'username',
+    'name',
+    'address',
+    'ssn',
+    'creditCard',
+    'credit_card',
+    'password',
+    'token',
+    'secret',
+    'apiKey',
+    'api_key',
+];
+// eslint-disable-next-line sonarjs/cognitive-complexity -- tiered detector: 3 tiers (init-level, capture-level, key-name) all need a single pass for clear precedence
+function analyze(content, filePath) {
+    const violations = [];
+    // --- Tier 1: Missing beforeSend/beforeBreadcrumb in Sentry.init (high confidence) ---
+    if (hasSentryInit(content)) {
+        const initBlock = extractSentryInitBlock(content);
+        if (initBlock) {
+            const hasBeforeSend = initBlock.block.includes('beforeSend');
+            const hasBeforeBreadcrumb = initBlock.block.includes('beforeBreadcrumb');
+            const hasBeforeSendTransaction = initBlock.block.includes('beforeSendTransaction');
+            if (!hasBeforeSend && !hasBeforeBreadcrumb && !hasBeforeSendTransaction) {
+                violations.push({
+                    line: initBlock.startLine + 1,
+                    message: 'Sentry.init() has no beforeSend or beforeBreadcrumb callback — PII may be sent to Sentry unfiltered',
+                    severity: 'warning',
+                    suggestion: 'Add a beforeSend callback to filter sensitive data: Sentry.init({ beforeSend(event) { /* scrub PII */ return event; }, ... })',
+                    type: 'sentry-no-pii-filter',
+                    filePath,
+                });
+            }
+        }
+    }
+    // --- Tier 2: PII field names in Sentry context calls (medium confidence) ---
+    const lines = content.split('\n');
+    for (const [i, line_] of lines.entries()) {
+        const line = line_ ?? '';
+        const trimmed = line.trim();
+        // Skip comments
+        if (trimmed.startsWith('//') || trimmed.startsWith('*'))
+            continue;
+        // Check if line has a Sentry context-setting call
+        const hasContextCall = PII_CONTEXT_PATTERNS.some((pattern) => line.includes(pattern));
+        if (!hasContextCall)
+            continue;
+        // Check for PII field names in the call
+        for (const field of PII_FIELD_NAMES) {
+            const fieldIdx = line.indexOf(field);
+            if (fieldIdx === -1)
+                continue;
+            // Verify it looks like a property (followed by : or ,)
+            const afterField = line.slice(fieldIdx + field.length).trimStart();
+            if (afterField.startsWith(':') || afterField.startsWith(',') || afterField.startsWith('}')) {
+                violations.push({
+                    line: i + 1,
+                    column: fieldIdx,
+                    message: `PII field '${field}' passed to Sentry context — may violate GDPR/CCPA`,
+                    severity: 'warning',
+                    suggestion: `Scrub or hash the '${field}' field before sending to Sentry. Consider using Sentry's data scrubbing settings or a beforeSend callback.`,
+                    type: 'sentry-pii-in-context',
+                    match: trimmed.slice(0, 120),
+                    filePath,
+                });
+                break; // One violation per line is enough
+            }
+        }
+    }
+    return violations;
+}
+/**
+ * Check: sentry-pii-scrubbing
+ *
+ * Two-tier PII detection for Sentry:
+ * 1. (High confidence) Sentry.init() without beforeSend/beforeBreadcrumb
+ * 2. (Medium confidence) PII field names in Sentry context-setting calls
+ */
+export const sentryPiiScrubbing = defineCheck({
+    id: 'd4f0b6c3-7e5a-4b1d-c234-a6f8d0e2b5c7',
+    slug: 'sentry-pii-scrubbing',
+    scope: { languages: ['typescript', 'javascript'], concerns: ['backend', 'frontend'] },
+    contentFilter: 'strip-strings-and-comments',
+    description: 'Detects missing PII scrubbing in Sentry — personal data may leak to third party',
+    longDescription: `**Purpose:** Ensures personal data is scrubbed before being sent to Sentry, preventing GDPR/CCPA violations.
+
+**Detects (two tiers):**
+
+*Tier 1 — Missing filter callbacks (high confidence):*
+- \`Sentry.init()\` with no \`beforeSend\`, \`beforeBreadcrumb\`, or \`beforeSendTransaction\` callback
+
+*Tier 2 — PII in context calls (medium confidence):*
+- \`Sentry.setUser()\`, \`setExtra()\`, \`setContext()\` calls containing field names that suggest PII: email, phone, ip_address, username, name, address, ssn, creditCard, password, token, secret, apiKey
+
+**Why it matters:** Sentry is a third-party service. Any PII sent to it becomes subject to Sentry's data retention policies and expands your compliance surface. A beforeSend callback is the standard defense-in-depth mechanism.
+
+**Scope:** Any file that uses the Sentry SDK. Analyzes each file individually.`,
+    tags: ['sentry', 'security', 'pii', 'privacy'],
+    fileTypes: ['ts', 'js', 'tsx', 'jsx', 'mjs'],
+    confidence: 'medium',
+    analyze,
+});
+//# sourceMappingURL=sentry-pii-scrubbing.js.map

package/dist/checks/resilience/sentry/sentry-pii-scrubbing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentry-pii-scrubbing.js","sourceRoot":"","sources":["../../../../src/checks/resilience/sentry/sentry-pii-scrubbing.ts"],"names":[],"mappings":"AAAA,6HAA6H;AAC7H;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAuB,MAAM,sBAAsB,CAAC;AAExE,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE7E,yEAAyE;AACzE,oCAAoC;AACpC,MAAM,oBAAoB,GAAG;IAC3B,UAAU;IACV,iBAAiB;IACjB,WAAW;IACX,kBAAkB;IAClB,aAAa;IACb,oBAAoB;CACrB,CAAC;AAEF,uDAAuD;AACvD,MAAM,eAAe,GAAG;IACtB,OAAO;IACP,OAAO;IACP,YAAY;IACZ,WAAW;IACX,UAAU;IACV,MAAM;IACN,SAAS;IACT,KAAK;IACL,YAAY;IACZ,aAAa;IACb,UAAU;IACV,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,SAAS;CACV,CAAC;AAEF,sKAAsK;AACtK,SAAS,OAAO,CAAC,OAAe,EAAE,QAAgB;IAChD,MAAM,UAAU,GAAqB,EAAE,CAAC;IAExC,uFAAuF;IAEvF,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC7D,MAAM,mBAAmB,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YACzE,MAAM,wBAAwB,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;YAEnF,IAAI,CAAC,aAAa,IAAI,CAAC,mBAAmB,IAAI,CAAC,wBAAwB,EAAE,CAAC;gBACxE,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,SAAS,CAAC,SAAS,GAAG,CAAC;oBAC7B,OAAO,EACL,qGAAqG;oBACvG,QAAQ,EAAE,SAAS;oBACnB,UAAU,EACR,+HAA+H;oBACjI,IAAI,EAAE,sBAAsB;oBAC5B,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,8EAA8E;IAE9E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE5B,gBAAgB;QAChB,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAElE,kDAAkD;QAClD,MAAM,cAAc,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,cAAc;YAAE,SAAS;QAE9B,wCAAwC;QACxC,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,QAAQ,KAAK,CAAC,CAAC;gBAAE,SAAS;YAE9B,uDAAuD;YACvD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC;YACnE,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3F,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,cAAc,KAAK,oDAAoD;oBAChF,QAAQ,EAAE,SAAS;oBACnB,UAAU,EAAE,sBAAsB,KAAK,6GAA6G;oBACpJ,IAAI,EAAE,uBAAuB;oBAC7B,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBAC5B,QAAQ;iBACT,CAAC,CAAC;gBACH,MAAM,CAAC,mCAAmC;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,WAAW,CAAC;IAC5C,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,sBAAsB;IAC5B,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE;IACrF,aAAa,EAAE,4BAA4B;IAC3C,WAAW,EAAE,iFAAiF;IAC9F,eAAe,EAAE;;;;;;;;;;;;+EAY4D;IAC7E,IAAI,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC;IAC9C,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;IAC5C,UAAU,EAAE,QAAQ;IACpB,OAAO;CACR,CAAC,CAAC"}

package/dist/checks/resilience/sentry/sentry-release-set.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @fileoverview Detect Sentry.init() without release option
+ * @module checks-builtin/checks/resilience/sentry/sentry-release-set
+ */
+/**
+ * Check: sentry-release-set
+ *
+ * Detects Sentry.init() calls missing the release option.
+ * Without it, Sentry can't track regressions across deploys.
+ */
+export declare const sentryReleaseSet: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=sentry-release-set.d.ts.map

package/dist/checks/resilience/sentry/sentry-release-set.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentry-release-set.d.ts","sourceRoot":"","sources":["../../../../src/checks/resilience/sentry/sentry-release-set.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA6BH;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,sCAkB3B,CAAC"}

package/dist/checks/resilience/sentry/sentry-release-set.js

@@ -0,0 +1,51 @@
+/**
+ * @fileoverview Detect Sentry.init() without release option
+ * @module checks-builtin/checks/resilience/sentry/sentry-release-set
+ */
+import { defineCheck } from '@opensip-cli/fitness';
+import { hasSentryInit, extractSentryInitBlock } from './_helpers/sentry.js';
+function analyze(content, _filePath) {
+    if (!hasSentryInit(content))
+        return [];
+    const initBlock = extractSentryInitBlock(content);
+    if (!initBlock)
+        return [];
+    const hasRelease = initBlock.block.includes('release') || initBlock.block.includes('SENTRY_RELEASE');
+    if (hasRelease)
+        return [];
+    return [
+        {
+            line: initBlock.startLine + 1,
+            message: 'Sentry.init() called without release — cannot link errors to deploys or commits',
+            severity: 'warning',
+            suggestion: 'Add release to Sentry.init(): Sentry.init({ release: process.env.SENTRY_RELEASE || "1.0.0", ... }). Pair with @sentry/webpack-plugin or @sentry/vite-plugin for automatic release creation.',
+            type: 'sentry-missing-release',
+        },
+    ];
+}
+/**
+ * Check: sentry-release-set
+ *
+ * Detects Sentry.init() calls missing the release option.
+ * Without it, Sentry can't track regressions across deploys.
+ */
+export const sentryReleaseSet = defineCheck({
+    id: 'c3e9a5b2-6d4f-4a0c-b123-f5e7c9d1a4b6',
+    slug: 'sentry-release-set',
+    scope: { languages: ['typescript', 'javascript'], concerns: ['backend', 'frontend'] },
+    contentFilter: 'strip-strings-and-comments',
+    description: 'Detects Sentry.init() without release — cannot track regressions across deploys',
+    longDescription: `**Purpose:** Ensures Sentry events include a release identifier so errors can be correlated with specific deploys and commits.
+
+**Detects:**
+- \`Sentry.init()\` calls with no \`release\` property
+
+**Why it matters:** The release field enables Sentry's most powerful features: regression detection (new errors in this release), deploy tracking, commit association, and suspect commits. Without it, Sentry treats all errors as if they come from the same undifferentiated codebase.
+
+**Scope:** Any file that calls \`Sentry.init()\`. Analyzes each file individually.`,
+    tags: ['sentry', 'quality', 'observability'],
+    fileTypes: ['ts', 'js', 'tsx', 'jsx', 'mjs'],
+    confidence: 'high',
+    analyze,
+});
+//# sourceMappingURL=sentry-release-set.js.map

package/dist/checks/resilience/sentry/sentry-release-set.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentry-release-set.js","sourceRoot":"","sources":["../../../../src/checks/resilience/sentry/sentry-release-set.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAuB,MAAM,sBAAsB,CAAC;AAExE,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE7E,SAAS,OAAO,CAAC,OAAe,EAAE,SAAiB;IACjD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,SAAS,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAE1B,MAAM,UAAU,GACd,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAEpF,IAAI,UAAU;QAAE,OAAO,EAAE,CAAC;IAE1B,OAAO;QACL;YACE,IAAI,EAAE,SAAS,CAAC,SAAS,GAAG,CAAC;YAC7B,OAAO,EAAE,iFAAiF;YAC1F,QAAQ,EAAE,SAAS;YACnB,UAAU,EACR,6LAA6L;YAC/L,IAAI,EAAE,wBAAwB;SAC/B;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC;IAC1C,EAAE,EAAE,sCAAsC;IAC1C,IAAI,EAAE,oBAAoB;IAC1B,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE;IACrF,aAAa,EAAE,4BAA4B;IAC3C,WAAW,EAAE,iFAAiF;IAC9F,eAAe,EAAE;;;;;;;mFAOgE;IACjF,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,CAAC;IAC5C,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;IAC5C,UAAU,EAAE,MAAM;IAClB,OAAO;CACR,CAAC,CAAC"}

package/dist/checks/resilience/sentry/sentry-sample-rate.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @fileoverview Detect missing or dangerous tracesSampleRate in Sentry.init()
+ * @module checks-builtin/checks/resilience/sentry/sentry-sample-rate
+ */
+/**
+ * Check: sentry-sample-rate
+ *
+ * Detects missing or problematic tracesSampleRate in Sentry.init().
+ * Catches both "too high" (1.0 in production) and "not set" (tracing silently off).
+ */
+export declare const sentrySampleRate: import("@opensip-cli/fitness").Check;
+//# sourceMappingURL=sentry-sample-rate.d.ts.map

package/dist/checks/resilience/sentry/sentry-sample-rate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentry-sample-rate.d.ts","sourceRoot":"","sources":["../../../../src/checks/resilience/sentry/sentry-sample-rate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA8DH;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,sCAmB3B,CAAC"}