@spfn/monitor 0.1.0-beta.21 → 0.1.0-beta.23

package/dist/server.d.ts

@@ -291,6 +291,13 @@ declare class ErrorGroupsRepository extends BaseRepository {
     findMany(filters?: ErrorGroupFilters): Promise<ErrorGroup[]>;
     create(data: NewErrorGroup): Promise<ErrorGroup>;
     incrementCount(id: number): Promise<ErrorGroup | null>;
+    /**
+     * Reopen a resolved group: set active, clear resolvedAt, and bump count +
+     * lastSeenAt in a SINGLE UPDATE (the reopen path used to do updateStatus then
+     * incrementCount — two round trips writing the same row, the second clobbering
+     * the first).
+     */
+    reactivate(id: number): Promise<ErrorGroup | null>;
     updateStatus(id: number, status: ErrorGroupStatus): Promise<ErrorGroup | null>;
     countByStatus(): Promise<Record<ErrorGroupStatus, number>>;
 }

package/dist/server.js

@@ -2786,6 +2786,23 @@ var ErrorGroupsRepository = class extends BaseRepository {
     }).where(eq(errorGroups.id, id4)).returning();
     return result[0] ?? null;
   }
+  /**
+   * Reopen a resolved group: set active, clear resolvedAt, and bump count +
+   * lastSeenAt in a SINGLE UPDATE (the reopen path used to do updateStatus then
+   * incrementCount — two round trips writing the same row, the second clobbering
+   * the first).
+   */
+  async reactivate(id4) {
+    const now = /* @__PURE__ */ new Date();
+    const result = await this.db.update(errorGroups).set({
+      status: "active",
+      resolvedAt: null,
+      count: sql`${errorGroups.count} + 1`,
+      lastSeenAt: now,
+      updatedAt: now
+    }).where(eq(errorGroups.id, id4)).returning();
+    return result[0] ?? null;
+  }
   async updateStatus(id4, status) {
     const now = /* @__PURE__ */ new Date();
     const result = await this.db.update(errorGroups).set({
@@ -2829,8 +2846,8 @@ var ErrorEventsRepository = class extends BaseRepository2 {
     return await this.readDb.select().from(errorEvents).where(eq2(errorEvents.groupId, groupId)).orderBy(desc2(errorEvents.createdAt)).limit(limit).offset(offset);
   }
   async deleteOlderThan(date) {
-    const result = await this.db.delete(errorEvents).where(lt(errorEvents.createdAt, date)).returning();
-    return result.length;
+    const result = await this.db.delete(errorEvents).where(lt(errorEvents.createdAt, date));
+    return result.rowCount ?? result.count ?? 0;
   }
 };
 var errorEventsRepository = new ErrorEventsRepository();
@@ -2905,8 +2922,8 @@ var LogsRepository = class extends BaseRepository3 {
     return counts;
   }
   async deleteOlderThan(date) {
-    const result = await this.db.delete(logs).where(lt2(logs.createdAt, date)).returning();
-    return result.length;
+    const result = await this.db.delete(logs).where(lt2(logs.createdAt, date));
+    return result.rowCount ?? result.count ?? 0;
   }
 };
 var logsRepository = new LogsRepository();
@@ -3053,8 +3070,7 @@ async function trackError(err, ctx, metadata) {
     return;
   }
   if (existing.status === "resolved") {
-    await errorGroupsRepository.updateStatus(existing.id, "active");
-    await errorGroupsRepository.incrementCount(existing.id);
+    await errorGroupsRepository.reactivate(existing.id);
     const event = await safeCreateEvent(existing.id, err, ctx, metadata);
     logger2.info("Error group reopened", { fingerprint, groupId: existing.id });
     if (event) {
@@ -3290,6 +3306,45 @@ var monitorRouter = defineRouter({
 
 // src/server/integrations/error-handler.ts
 import { getMinStatusCode } from "@spfn/monitor/config";
+var SENSITIVE_HEADERS = /* @__PURE__ */ new Set([
+  "authorization",
+  "proxy-authorization",
+  "cookie",
+  "set-cookie",
+  "x-api-key",
+  "x-auth-token",
+  "x-csrf-token",
+  "x-xsrf-token",
+  "x-spfn-proxy-signature",
+  "x-amz-security-token"
+]);
+var SENSITIVE_QUERY = /* @__PURE__ */ new Set([
+  "token",
+  "access_token",
+  "refresh_token",
+  "id_token",
+  "code",
+  "secret",
+  "client_secret",
+  "password",
+  "passwd",
+  "pwd",
+  "api_key",
+  "apikey",
+  "key",
+  "signature",
+  "sig",
+  "session",
+  "sessionid",
+  "auth"
+]);
+function redact(obj, deny) {
+  const out = {};
+  for (const [k, v] of Object.entries(obj)) {
+    out[k] = deny.has(k.toLowerCase()) ? "***" : v;
+  }
+  return out;
+}
 var logger4 = monitorLogger.errorTracking;
 function createMonitorErrorHandler(options = {}) {
   return async (err, ctx) => {
@@ -3303,8 +3358,10 @@ function createMonitorErrorHandler(options = {}) {
       method: ctx.method,
       requestId: ctx.requestId,
       userId: ctx.userId != null ? String(ctx.userId) : void 0,
-      headers: ctx.request.headers,
-      query: ctx.request.query,
+      // Redact secrets before they are persisted (error_events.headers) and
+      // forwarded to Slack (S-H3 / S-M2 / S-L3).
+      headers: redact(ctx.request.headers, SENSITIVE_HEADERS),
+      query: redact(ctx.request.query, SENSITIVE_QUERY),
       environment: options.environment
     };
     const metadata = options.extractMetadata?.(err, trackingCtx);