@veryfront/ext-observability-sentry-node 0.1.1238 → 0.1.1240

package/esm/application-error-contract.d.ts

@@ -14,6 +14,10 @@ export type ApplicationErrorContext = {
     spanId?: string;
     /** OpenTelemetry trace correlation identifier. */
     traceId?: string;
+    /** Stable failure classification (e.g. "tenant-build") tagged on the event. */
+    errorClass?: string;
+    /** Severity of the captured event; reporters default to "error" when unset. */
+    level?: "error" | "warning";
     /** Sanitized scalar metadata for the failure boundary. */
     attributes?: Record<string, ApplicationErrorAttributeValue>;
 };

package/esm/application-error-contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"application-error-contract.d.ts","sourceRoot":"","sources":["../src/application-error-contract.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,MAAM,MAAM,8BAA8B,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAEvE,8EAA8E;AAC9E,MAAM,MAAM,uBAAuB,GAAG;IACpC,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC;CAC7D,CAAC;AAEF,sEAAsE;AACtE,MAAM,MAAM,wBAAwB,GAAG;IACrC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,uBAAuB,GAAG,MAAM,GAAG,SAAS,CAAC;IAC9E,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7C,CAAC"}
+{"version":3,"file":"application-error-contract.d.ts","sourceRoot":"","sources":["../src/application-error-contract.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,MAAM,MAAM,8BAA8B,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAEvE,8EAA8E;AAC9E,MAAM,MAAM,uBAAuB,GAAG;IACpC,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5B,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC;CAC7D,CAAC;AAEF,sEAAsE;AACtE,MAAM,MAAM,wBAAwB,GAAG;IACrC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,uBAAuB,GAAG,MAAM,GAAG,SAAS,CAAC;IAC9E,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7C,CAAC"}

package/esm/policy.d.ts

@@ -3,6 +3,7 @@ export declare const DEFAULT_FINGERPRINT = "{{ default }}";
 export type SentryPolicyScope = {
     setContext(name: string, context: Record<string, unknown>): void;
     setFingerprint(fingerprint: string[]): void;
+    setLevel?(level: "error" | "warning"): void;
     setTag(key: string, value: string): void;
 };
 export type SentryPolicySdk = {
@@ -14,6 +15,7 @@ export type SentryPolicyEvent = {
     breadcrumbs?: unknown;
     exception?: {
         values?: Array<{
+            type?: string;
             value?: string;
             stacktrace?: {
                 frames?: Array<{

package/esm/policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACxB,MAAM,iCAAiC,CAAC;AAEzC,eAAO,MAAM,mBAAmB,kBAAkB,CAAC;AAWnD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACjE,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC5C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC;IACzC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAAG,IAAI,CAAC;CAC/D,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE;QACV,MAAM,CAAC,EAAE,KAAK,CAAC;YACb,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,UAAU,CAAC,EAAE;gBACX,MAAM,CAAC,EAAE,KAAK,CAAC;oBACb,QAAQ,CAAC,EAAE,MAAM,CAAC;oBAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;iBACnB,CAAC,CAAC;aACJ,CAAC;SACH,CAAC,CAAC;KACJ,CAAC;IACF,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,eAAe,EACpB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,uBAAuB,GAC/B,MAAM,GAAG,SAAS,CAWpB;AAED,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,EACnC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC,CAMlB;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,iBAAiB,EACxB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,uBAAuB,GAC/B,IAAI,CAoBN;AAED,wBAAgB,kBAAkB,CAAC,MAAM,SAAS,iBAAiB,EACjE,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,MAAM,GAAG,iBAAiB,CAwB5B;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOzD;AAED,wBAAgB,kCAAkC,CAChD,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,GACpD,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAU3C;AAOD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAW5D"}
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACxB,MAAM,iCAAiC,CAAC;AAEzC,eAAO,MAAM,mBAAmB,kBAAkB,CAAC;AA2CnD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACjE,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAG5C,QAAQ,CAAC,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC;IAC5C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC;IACzC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAAG,IAAI,CAAC;CAC/D,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE;QACV,MAAM,CAAC,EAAE,KAAK,CAAC;YACb,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,UAAU,CAAC,EAAE;gBACX,MAAM,CAAC,EAAE,KAAK,CAAC;oBACb,QAAQ,CAAC,EAAE,MAAM,CAAC;oBAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;iBACnB,CAAC,CAAC;aACJ,CAAC;SACH,CAAC,CAAC;KACJ,CAAC;IACF,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,eAAe,EACpB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,uBAAuB,GAC/B,MAAM,GAAG,SAAS,CAWpB;AAED,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,EACnC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC,CAMlB;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,iBAAiB,EACxB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,uBAAuB,GAC/B,IAAI,CAsBN;AAED,wBAAgB,kBAAkB,CAAC,MAAM,SAAS,iBAAiB,EACjE,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,MAAM,GAAG,iBAAiB,CA6B5B;AAwMD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOzD;AAED,wBAAgB,kCAAkC,CAChD,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,GACpD,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAU3C;AAOD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAW5D"}

package/esm/policy.js

@@ -1,4 +1,33 @@
 export const DEFAULT_FINGERPRINT = "{{ default }}";
+const DB_ERROR_FINGERPRINT = "veryfront-db-error";
+// pgbouncer reports these through the wire protocol, so postgres.js surfaces them as a
+// PostgresError whose message ends with "(<code>)".
+const PGBOUNCER_CONNECTION_ERROR_CODES = [
+    "server_login_retry",
+    "query_wait_timeout",
+];
+// postgres.js `Errors.connection()` builds a plain Error with the message
+// `write <CODE> <host>:<port>` for every client-side connection failure.
+const POSTGRES_JS_CONNECTION_ERROR_PATTERN = /^write (CONNECTION_CLOSED|CONNECTION_DESTROYED|CONNECTION_ENDED|CONNECT_TIMEOUT)(?:\s|$)/;
+const FAILED_QUERY_PREFIX = "Failed query: ";
+const FAILED_QUERY_PARAMS_DELIMITER = "\nparams:";
+const FAILED_QUERY_HEAD_MAX_LENGTH = 200;
+const SQL_DOLLAR_QUOTE_START_PATTERN = /^\$(?:[_\p{ID_Start}][_\p{ID_Continue}]*)?\$/u;
+// PostgreSQL's lexer accepts any high byte in a dollar-quote tag and imposes no length limit, so
+// tags outside ECMAScript `ID_Start` (an emoji tag, for example) are still treated as literals and
+// their contents cannot reach the title. The tag must nonetheless look like a tag: free of
+// PostgreSQL lexer whitespace, quotes and further dollar signs. PostgreSQL lexer whitespace is
+// ASCII-only, so a high byte that ECMAScript classifies as whitespace remains a legal tag byte.
+// Without the shape check, a `$` inside an ordinary identifier such as `col$a` swallows the rest
+// of the query.
+const SQL_UNRECOGNIZED_DOLLAR_QUOTE_START_PATTERN = /^\$[^ \t\n\r\f\v'"$]+\$/u;
+// A dollar quote cannot open straight after an identifier character: PostgreSQL prefers the longer
+// identifier match, so `col$tag$inner$tag$` is one identifier rather than `col` followed by a
+// literal. `$` is deliberately absent from this class so that adjacent literals such as
+// `$$a$$$$b$$` still parse as two dollar-quoted strings.
+const SQL_IDENTIFIER_BEFORE_DOLLAR_PATTERN = /[A-Za-z0-9_]|\P{ASCII}/u;
+const SQL_NUMERIC_LITERAL_PATTERN = /^(?:0[xX]_?[0-9A-Fa-f](?:_?[0-9A-Fa-f])*|0[oO]_?[0-7](?:_?[0-7])*|0[bB]_?[01](?:_?[01])*|(?:\d(?:_?\d)*(?:\.(?:\d(?:_?\d)*)?)?|\.\d(?:_?\d)*)(?:[eE][+-]?\d(?:_?\d)*)?)/;
+const SQL_IDENTIFIER_CHAR_PATTERN = /[A-Za-z0-9_$]/;
 const SENTRY_TOKEN_PATTERN = /\bsntrys_[A-Za-z0-9_+/=-]+\b/g;
 const BEARER_TOKEN_PATTERN = /\bBearer\s+[A-Za-z0-9._~+/=-]+\b/gi;
 const JWT_PATTERN = /\b[A-Za-z0-9_-]{16,}\.[A-Za-z0-9_-]{16,}\.[A-Za-z0-9_-]{16,}\b/g;
@@ -32,6 +61,10 @@ export function applySentryScopePolicy(scope, serviceName, context) {
     if (context.processRole)
         scope.setTag("process_role", context.processRole);
     scope.setTag("veryfront.boundary", context.boundary);
+    if (context.errorClass)
+        scope.setTag("veryfront.error_class", context.errorClass);
+    if (context.level)
+        scope.setLevel?.(context.level);
     if (context.method)
         scope.setTag("http.request.method", context.method);
     if (context.requestId)
@@ -52,7 +85,10 @@ export function prepareSentryEvent(event, serviceName) {
         ...event.tags,
         "service.name": serviceName,
     };
-    event.fingerprint = [serviceName, ...(event.fingerprint ?? [DEFAULT_FINGERPRINT])];
+    const dbConnectionErrorCode = detectDbConnectionErrorCode(event);
+    event.fingerprint = dbConnectionErrorCode
+        ? [serviceName, DB_ERROR_FINGERPRINT, dbConnectionErrorCode]
+        : [serviceName, ...(event.fingerprint ?? [DEFAULT_FINGERPRINT])];
     delete event.breadcrumbs;
     delete event.request;
     delete event.user;
@@ -62,8 +98,9 @@ export function prepareSentryEvent(event, serviceName) {
         event.logentry.message = redactSensitiveText(event.logentry.message);
     }
     for (const value of event.exception?.values ?? []) {
-        if (value.value)
-            value.value = redactSensitiveText(value.value);
+        if (value.value) {
+            value.value = normalizeFailedQueryValue(redactSensitiveText(value.value));
+        }
         for (const frame of value.stacktrace?.frames ?? []) {
             if (frame.filename)
                 frame.filename = sanitizeStackFramePath(frame.filename);
@@ -73,6 +110,180 @@ export function prepareSentryEvent(event, serviceName) {
     }
     return event;
 }
+function detectDbConnectionErrorCode(event) {
+    for (const exceptionValue of event.exception?.values ?? []) {
+        const message = exceptionValue.value ?? "";
+        if (exceptionValue.type === "PostgresError") {
+            const trimmedMessage = message.trimEnd();
+            const code = PGBOUNCER_CONNECTION_ERROR_CODES.find((candidate) => trimmedMessage.endsWith(`(${candidate})`));
+            if (code)
+                return code;
+        }
+        if (exceptionValue.type === "Error") {
+            const code = POSTGRES_JS_CONNECTION_ERROR_PATTERN.exec(message)?.[1];
+            if (code)
+                return code;
+        }
+    }
+    return undefined;
+}
+function normalizeFailedQueryValue(value) {
+    if (!value.startsWith(FAILED_QUERY_PREFIX.trimEnd()))
+        return value;
+    const remainder = value.slice(FAILED_QUERY_PREFIX.trimEnd().length);
+    const paramsDelimiterIndex = remainder.indexOf(FAILED_QUERY_PARAMS_DELIMITER);
+    const query = paramsDelimiterIndex === -1 ? remainder : remainder.slice(0, paramsDelimiterIndex);
+    const titleQuery = redactSqlLiteralsForTitle(query)
+        .replace(/\s+/g, " ")
+        .trim();
+    const head = titleQuery
+        .slice(0, FAILED_QUERY_HEAD_MAX_LENGTH)
+        .trimEnd();
+    const truncated = titleQuery.length > FAILED_QUERY_HEAD_MAX_LENGTH;
+    return `${FAILED_QUERY_PREFIX}${head}${truncated ? "…" : ""}`;
+}
+function redactSqlLiteralsForTitle(query) {
+    let redacted = "";
+    let index = 0;
+    while (index < query.length) {
+        const character = query.charAt(index);
+        if ((character === "E" || character === "e") &&
+            query[index + 1] === "'" &&
+            isSqlStringPrefixBoundary(query, index)) {
+            index = findQuotedSqlTokenEnd(query, index + 1, "'", { allowBackslashEscapes: true }).end;
+            redacted += "?";
+            continue;
+        }
+        if ((character === "U" || character === "u") &&
+            query[index + 1] === "&" &&
+            query[index + 2] === "'" &&
+            isSqlStringPrefixBoundary(query, index)) {
+            index = findQuotedSqlTokenEnd(query, index + 2, "'").end;
+            redacted += "?";
+            continue;
+        }
+        if (character === '"') {
+            // Deliberate non-redaction: a double-quoted token is a schema identifier, not data, and
+            // keeping it verbatim is what makes titles group by query shape. An unterminated identifier
+            // is malformed SQL, so redact it rather than emit the rest of the query untouched.
+            const { end, terminated } = findQuotedSqlTokenEnd(query, index, '"');
+            redacted += terminated ? query.slice(index, end) : "?";
+            index = end;
+            continue;
+        }
+        if (character === "'") {
+            // The event does not carry the server's `standard_conforming_strings` setting, and neither
+            // reading of a backslash is safe on its own: escaping exposes the next literal when the
+            // setting is on, not escaping exposes this one when it is off. Bail out on the ambiguous
+            // case instead of picking a side.
+            index = findQuotedSqlTokenEnd(query, index, "'", { bailOnAmbiguousBackslash: true }).end;
+            redacted += "?";
+            continue;
+        }
+        if (character === "$" &&
+            !SQL_IDENTIFIER_BEFORE_DOLLAR_PATTERN.test(query[index - 1] ?? "")) {
+            const dollarQuotedEnd = findDollarQuotedSqlTokenEnd(query, index);
+            if (dollarQuotedEnd !== undefined) {
+                index = dollarQuotedEnd;
+                redacted += "?";
+                continue;
+            }
+        }
+        if (character === "-" && query[index + 1] === "-") {
+            index += 2;
+            while (index < query.length && query[index] !== "\n" && query[index] !== "\r") {
+                index += 1;
+            }
+            redacted += "?";
+            continue;
+        }
+        if (character === "/" && query[index + 1] === "*") {
+            let depth = 1;
+            index += 2;
+            while (index < query.length && depth > 0) {
+                if (query[index] === "/" && query[index + 1] === "*") {
+                    depth += 1;
+                    index += 2;
+                }
+                else if (query[index] === "*" && query[index + 1] === "/") {
+                    depth -= 1;
+                    index += 2;
+                }
+                else {
+                    index += 1;
+                }
+            }
+            redacted += "?";
+            continue;
+        }
+        const canStartNumber = /[0-9]/.test(character) ||
+            (character === "." && /[0-9]/.test(query[index + 1] ?? ""));
+        const previousCharacter = query[index - 1] ?? "";
+        if (canStartNumber && !SQL_IDENTIFIER_CHAR_PATTERN.test(previousCharacter)) {
+            const literal = query.slice(index).match(SQL_NUMERIC_LITERAL_PATTERN)?.[0];
+            const nextCharacter = literal ? query[index + literal.length] ?? "" : "";
+            if (literal && !SQL_IDENTIFIER_CHAR_PATTERN.test(nextCharacter)) {
+                redacted += "?";
+                index += literal.length;
+                continue;
+            }
+        }
+        redacted += character;
+        index += 1;
+    }
+    return redacted;
+}
+function findDollarQuotedSqlTokenEnd(query, start) {
+    const recognizedDelimiter = query.slice(start).match(SQL_DOLLAR_QUOTE_START_PATTERN)?.[0];
+    if (recognizedDelimiter) {
+        const contentStart = start + recognizedDelimiter.length;
+        const closingDelimiter = query.indexOf(recognizedDelimiter, contentStart);
+        return closingDelimiter === -1 ? query.length : closingDelimiter + recognizedDelimiter.length;
+    }
+    if (/[0-9]/.test(query[start + 1] ?? ""))
+        return undefined;
+    const delimiter = query.slice(start).match(SQL_UNRECOGNIZED_DOLLAR_QUOTE_START_PATTERN)?.[0];
+    if (!delimiter)
+        return undefined;
+    const contentStart = start + delimiter.length;
+    const closingDelimiter = query.indexOf(delimiter, contentStart);
+    return closingDelimiter === -1 ? query.length : closingDelimiter + delimiter.length;
+}
+function isSqlStringPrefixBoundary(query, start) {
+    return !SQL_IDENTIFIER_CHAR_PATTERN.test(query[start - 1] ?? "");
+}
+function findQuotedSqlTokenEnd(query, start, quote, options = {}) {
+    let index = start + 1;
+    while (index < query.length) {
+        if (options.allowBackslashEscapes && query[index] === "\\" && index + 1 < query.length) {
+            index += 2;
+            continue;
+        }
+        if (query[index] !== quote) {
+            index += 1;
+            continue;
+        }
+        if (query[index + 1] === quote) {
+            index += 2;
+            continue;
+        }
+        // An ordinary literal means different things on different servers: under
+        // `standard_conforming_strings = off` a backslash escapes the quote that follows it, so an odd
+        // run of backslashes here leaves the literal's extent genuinely ambiguous — the same bytes are
+        // one literal on one server and two on another. Guessing either way emits the other reading's
+        // contents verbatim, so stop and let the caller redact the remainder.
+        if (options.bailOnAmbiguousBackslash && hasOddTrailingBackslashRun(query, index))
+            break;
+        return { end: index + 1, terminated: true };
+    }
+    return { end: query.length, terminated: false };
+}
+function hasOddTrailingBackslashRun(query, index) {
+    let backslashes = 0;
+    while (index - backslashes - 1 >= 0 && query[index - backslashes - 1] === "\\")
+        backslashes += 1;
+    return backslashes % 2 === 1;
+}
 export function redactSensitiveText(value) {
     return value
         .replace(SENTRY_TOKEN_PATTERN, "[REDACTED]")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@veryfront/ext-observability-sentry-node",
-  "version": "0.1.1238",
+  "version": "0.1.1240",
   "description": "Veryfront first-party extension package for ext-observability-sentry-node",
   "keywords": [
     "veryfront",