@veryfront/ext-observability-sentry 0.1.1173 → 0.1.1174

package/README.md

@@ -14,3 +14,15 @@ binaries include the dormant adapter; npm consumers install
 `@veryfront/ext-observability-sentry` separately. The adapter captures
 unexpected application failures, tags them by service and boundary, and keeps
 OpenTelemetry as the owner of traces, metrics, and logs.
+
+## Runtime entrypoints
+
+- `@veryfront/ext-observability-sentry` keeps the V1 Deno-compatible root
+  reporter export.
+- `@veryfront/ext-observability-sentry/deno` exports the explicit Deno reporter.
+- `@veryfront/ext-observability-sentry/node` exports the explicit Node reporter.
+
+The Node and Deno reporters share the same privacy policy, service tags,
+`veryfront.boundary` tagging, Grafana trace correlation, fingerprinting, and
+bounded flush behavior. They only use Sentry for error capture; tracing, logs,
+request bodies, user data, and OpenTelemetry provider setup remain disabled.

package/esm/deno.d.ts

@@ -0,0 +1,9 @@
+import * as Sentry from "@sentry/deno";
+import type { ApplicationErrorReporter, SentryConfig } from "veryfront/observability/sentry";
+import { type SentryPolicySdk } from "./policy.js";
+type DenoSentrySdk = SentryPolicySdk & {
+    init(options: Parameters<typeof Sentry.init>[0]): unknown;
+};
+export declare function createDenoSentryApplicationErrorReporter(config: Required<SentryConfig>, sdk?: DenoSentrySdk): ApplicationErrorReporter;
+export {};
+//# sourceMappingURL=deno.d.ts.map

package/esm/deno.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deno.d.ts","sourceRoot":"","sources":["../src/deno.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AACvC,OAAO,KAAK,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC7F,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,aAAa,CAAC;AASrB,KAAK,aAAa,GAAG,eAAe,GAAG;IACrC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC;CAC3D,CAAC;AAEF,wBAAgB,wCAAwC,CACtD,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,EAC9B,GAAG,GAAE,aAAsB,GAC1B,wBAAwB,CA+B1B"}

package/esm/deno.js

@@ -0,0 +1,36 @@
+import * as Sentry from "@sentry/deno";
+import { captureWithSentryPolicy, flushWithSentryPolicy, prepareSentryEvent, } from "./policy.js";
+const DISABLED_DENO_INTEGRATIONS = new Set([
+    "Breadcrumbs",
+    "DenoHttp",
+    "DenoServe",
+    "GlobalHandlers",
+]);
+export function createDenoSentryApplicationErrorReporter(config, sdk = Sentry) {
+    sdk.init({
+        dsn: config.dsn,
+        ...(config.environment ? { environment: config.environment } : {}),
+        ...(config.release ? { release: config.release } : {}),
+        beforeSend: (event) => prepareSentryEvent(event, config.serviceName),
+        dataCollection: {
+            cookies: false,
+            databaseQueryData: false,
+            frameContextLines: 0,
+            genAI: { inputs: false, outputs: false },
+            graphQL: { document: false, variables: false },
+            httpBodies: [],
+            httpHeaders: { request: false, response: false },
+            stackFrameVariables: false,
+            urlQueryParams: false,
+            userInfo: false,
+        },
+        integrations: (defaultIntegrations) => defaultIntegrations.filter((integration) => !DISABLED_DENO_INTEGRATIONS.has(integration.name)),
+        skipOpenTelemetrySetup: true,
+    });
+    return {
+        capture(error, context) {
+            return captureWithSentryPolicy(sdk, config.serviceName, error, context);
+        },
+        flush: (timeoutMs) => flushWithSentryPolicy(sdk, timeoutMs),
+    };
+}

package/esm/index.d.ts

@@ -1,18 +1,5 @@
-import * as Sentry from "@sentry/deno";
 import type { ExtensionFactory } from "veryfront/extensions";
-import type { ApplicationErrorReporter, SentryConfig } from "veryfront/observability/sentry";
-type SentryScope = {
-    setContext(name: string, context: Record<string, unknown>): void;
-    setFingerprint(fingerprint: string[]): void;
-    setTag(key: string, value: string): void;
-};
-type SentrySdk = {
-    captureException(error: unknown): string;
-    flush(timeoutMs?: number): Promise<boolean>;
-    init(options: Parameters<typeof Sentry.init>[0]): unknown;
-    withScope(callback: (scope: SentryScope) => void): void;
-};
-export declare function createSentryApplicationErrorReporter(config: Required<SentryConfig>, sdk?: SentrySdk): ApplicationErrorReporter;
+export { createDenoSentryApplicationErrorReporter, createDenoSentryApplicationErrorReporter as createSentryApplicationErrorReporter, } from "./deno.js";
 declare const extSentry: ExtensionFactory;
 export default extSentry;
 //# sourceMappingURL=index.d.ts.map

package/esm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AACvC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,KAAK,EAEV,wBAAwB,EACxB,YAAY,EACb,MAAM,gCAAgC,CAAC;AAgBxC,KAAK,WAAW,GAAG;IACjB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACjE,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC5C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1C,CAAC;AAEF,KAAK,SAAS,GAAG;IACf,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC;IACzC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC;IAC1D,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,GAAG,IAAI,CAAC;CACzD,CAAC;AAEF,wBAAgB,oCAAoC,CAClD,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,EAC9B,GAAG,GAAE,SAAkB,GACtB,wBAAwB,CA6B1B;AA8ED,QAAA,MAAM,SAAS,EAAE,gBAOf,CAAC;AAEH,eAAe,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,OAAO,EACL,wCAAwC,EACxC,wCAAwC,IAAI,oCAAoC,GACjF,MAAM,WAAW,CAAC;AAEnB,QAAA,MAAM,SAAS,EAAE,gBAOf,CAAC;AAEH,eAAe,SAAS,CAAC"}

package/esm/index.js

@@ -1,111 +1,4 @@
-import * as Sentry from "@sentry/deno";
-const DEFAULT_FINGERPRINT = "{{ default }}";
-const DISABLED_INTEGRATIONS = new Set([
-    "Breadcrumbs",
-    "DenoHttp",
-    "DenoServe",
-    "GlobalHandlers",
-]);
-const SENTRY_TOKEN_PATTERN = /\bsntrys_[A-Za-z0-9_+/=-]+\b/g;
-const BEARER_TOKEN_PATTERN = /\bBearer\s+[A-Za-z0-9._~+/=-]+\b/gi;
-const JWT_PATTERN = /\b[A-Za-z0-9_-]{16,}\.[A-Za-z0-9_-]{16,}\.[A-Za-z0-9_-]{16,}\b/g;
-const URL_CREDENTIAL_PATTERN = /(https?:\/\/)[^@\s/]+(@[^/\s]+)/gi;
-const SENSITIVE_QUERY_PATTERN = /([?&](?:access_token|api_key|auth|authorization|dsn|password|secret|token)=)[^&#\s]+/gi;
-export function createSentryApplicationErrorReporter(config, sdk = Sentry) {
-    sdk.init({
-        dsn: config.dsn,
-        ...(config.environment ? { environment: config.environment } : {}),
-        ...(config.release ? { release: config.release } : {}),
-        beforeSend: (event) => prepareSentryEvent(event, config.serviceName),
-        dataCollection: {
-            cookies: false,
-            databaseQueryData: false,
-            frameContextLines: 0,
-            genAI: { inputs: false, outputs: false },
-            graphQL: { document: false, variables: false },
-            httpBodies: [],
-            httpHeaders: { request: false, response: false },
-            stackFrameVariables: false,
-            urlQueryParams: false,
-            userInfo: false,
-        },
-        integrations: (defaultIntegrations) => defaultIntegrations.filter((integration) => !DISABLED_INTEGRATIONS.has(integration.name)),
-        skipOpenTelemetrySetup: true,
-    });
-    return {
-        capture(error, context) {
-            return captureWithSentry(sdk, config.serviceName, error, context);
-        },
-        flush: (timeoutMs) => sdk.flush(timeoutMs),
-    };
-}
-function captureWithSentry(sdk, serviceName, error, context) {
-    let eventId;
-    sdk.withScope((scope) => {
-        scope.setFingerprint([serviceName, DEFAULT_FINGERPRINT]);
-        scope.setTag("service.name", serviceName);
-        scope.setTag("veryfront.boundary", context.boundary);
-        if (context.method)
-            scope.setTag("http.request.method", context.method);
-        if (context.requestId)
-            scope.setTag("veryfront.request_id", context.requestId);
-        if (context.traceId) {
-            scope.setTag("grafana.trace_id", context.traceId);
-            scope.setContext("grafana_trace", {
-                trace_id: context.traceId,
-                ...(context.spanId ? { span_id: context.spanId } : {}),
-            });
-        }
-        eventId = sdk.captureException(error);
-    });
-    return eventId;
-}
-function prepareSentryEvent(event, serviceName) {
-    event.tags = {
-        ...event.tags,
-        "service.name": serviceName,
-    };
-    event.fingerprint = [serviceName, ...(event.fingerprint ?? [DEFAULT_FINGERPRINT])];
-    delete event.breadcrumbs;
-    delete event.request;
-    delete event.user;
-    if (event.message)
-        event.message = redactSensitiveText(event.message);
-    if (event.logentry?.message) {
-        event.logentry.message = redactSensitiveText(event.logentry.message);
-    }
-    for (const value of event.exception?.values ?? []) {
-        if (value.value)
-            value.value = redactSensitiveText(value.value);
-        for (const frame of value.stacktrace?.frames ?? []) {
-            if (frame.filename)
-                frame.filename = sanitizeStackFramePath(frame.filename);
-            if (frame.abs_path)
-                frame.abs_path = sanitizeStackFramePath(frame.abs_path);
-        }
-    }
-    return event;
-}
-function redactSensitiveText(value) {
-    return value
-        .replace(SENTRY_TOKEN_PATTERN, "[REDACTED]")
-        .replace(BEARER_TOKEN_PATTERN, "[REDACTED]")
-        .replace(JWT_PATTERN, "[REDACTED]")
-        .replace(URL_CREDENTIAL_PATTERN, "$1[REDACTED]$2")
-        .replace(SENSITIVE_QUERY_PATTERN, "$1[REDACTED]");
-}
-function sanitizeStackFramePath(value) {
-    const redacted = redactSensitiveText(value);
-    const path = redacted.startsWith("file://") ? redacted.slice("file://".length) : redacted;
-    if (!path.startsWith("/") && !/^[A-Za-z]:[\\/]/.test(path))
-        return redacted;
-    const normalized = path.replaceAll("\\", "/");
-    const sourcePath = normalized.match(/(?:^|\/)((?:src|extensions|cli|dist)\/.+)$/)?.[1];
-    if (sourcePath)
-        return sourcePath;
-    const basename = normalized.split("/").filter(Boolean).at(-1);
-    return basename ? `[REDACTED]/${basename}` : "[REDACTED]";
-}
+export { createDenoSentryApplicationErrorReporter, createDenoSentryApplicationErrorReporter as createSentryApplicationErrorReporter, } from "./deno.js";
 const extSentry = () => ({
     name: "ext-observability-sentry",
     version: "0.1.0",

package/esm/node.d.ts

@@ -0,0 +1,9 @@
+import * as Sentry from "@sentry/node";
+import type { ApplicationErrorReporter, SentryConfig } from "veryfront/observability/sentry";
+import { type SentryPolicySdk } from "./policy.js";
+type NodeSentrySdk = SentryPolicySdk & {
+    init(options: Parameters<typeof Sentry.init>[0]): unknown;
+};
+export declare function createNodeSentryApplicationErrorReporter(config: Required<SentryConfig>, sdk?: NodeSentrySdk): ApplicationErrorReporter;
+export {};
+//# sourceMappingURL=node.d.ts.map

package/esm/node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AACvC,OAAO,KAAK,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC7F,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,aAAa,CAAC;AAErB,KAAK,aAAa,GAAG,eAAe,GAAG;IACrC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC;CAC3D,CAAC;AAEF,wBAAgB,wCAAwC,CACtD,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,EAC9B,GAAG,GAAE,aAAsB,GAC1B,wBAAwB,CA8B1B"}

package/esm/node.js

@@ -0,0 +1,32 @@
+import * as Sentry from "@sentry/node";
+import { captureWithSentryPolicy, flushWithSentryPolicy, prepareSentryEvent, } from "./policy.js";
+export function createNodeSentryApplicationErrorReporter(config, sdk = Sentry) {
+    sdk.init({
+        dsn: config.dsn,
+        ...(config.environment ? { environment: config.environment } : {}),
+        ...(config.release ? { release: config.release } : {}),
+        beforeSend: (event) => prepareSentryEvent(event, config.serviceName),
+        dataCollection: {
+            cookies: false,
+            databaseQueryData: false,
+            frameContextLines: 0,
+            genAI: { inputs: false, outputs: false },
+            graphQL: { document: false, variables: false },
+            httpBodies: [],
+            httpHeaders: { request: false, response: false },
+            stackFrameVariables: false,
+            urlQueryParams: false,
+            userInfo: false,
+        },
+        defaultIntegrations: false,
+        enableLogs: false,
+        sendDefaultPii: false,
+        skipOpenTelemetrySetup: true,
+    });
+    return {
+        capture(error, context) {
+            return captureWithSentryPolicy(sdk, config.serviceName, error, context);
+        },
+        flush: (timeoutMs) => flushWithSentryPolicy(sdk, timeoutMs),
+    };
+}

package/esm/policy.d.ts

@@ -0,0 +1,42 @@
+import type { ApplicationErrorContext } from "veryfront/observability/sentry";
+export declare const DEFAULT_FINGERPRINT = "{{ default }}";
+export type SentryPolicyScope = {
+    setContext(name: string, context: Record<string, unknown>): void;
+    setFingerprint(fingerprint: string[]): void;
+    setTag(key: string, value: string): void;
+};
+export type SentryPolicySdk = {
+    captureException(error: unknown): string;
+    flush(timeoutMs?: number): Promise<boolean>;
+    withScope(callback: (scope: SentryPolicyScope) => void): void;
+};
+export type SentryPolicyEvent = {
+    breadcrumbs?: unknown;
+    exception?: {
+        values?: Array<{
+            value?: string;
+            stacktrace?: {
+                frames?: Array<{
+                    abs_path?: string;
+                    filename?: string;
+                }>;
+            };
+        }>;
+    };
+    fingerprint?: string[];
+    logentry?: {
+        message?: string;
+    };
+    message?: string;
+    request?: unknown;
+    tags?: Record<string, unknown>;
+    type?: undefined;
+    user?: unknown;
+};
+export declare function captureWithSentryPolicy(sdk: SentryPolicySdk, serviceName: string, error: unknown, context: ApplicationErrorContext): string | undefined;
+export declare function flushWithSentryPolicy(sdk: Pick<SentryPolicySdk, "flush">, timeoutMs?: number): Promise<boolean>;
+export declare function applySentryScopePolicy(scope: SentryPolicyScope, serviceName: string, context: ApplicationErrorContext): void;
+export declare function prepareSentryEvent<TEvent extends SentryPolicyEvent>(event: TEvent, serviceName: string): TEvent & SentryPolicyEvent;
+export declare function redactSensitiveText(value: string): string;
+export declare function sanitizeStackFramePath(value: string): string;
+//# sourceMappingURL=policy.d.ts.map

package/esm/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAE9E,eAAO,MAAM,mBAAmB,kBAAkB,CAAC;AASnD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACjE,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC5C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC;IACzC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAAG,IAAI,CAAC;CAC/D,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE;QACV,MAAM,CAAC,EAAE,KAAK,CAAC;YACb,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,UAAU,CAAC,EAAE;gBACX,MAAM,CAAC,EAAE,KAAK,CAAC;oBACb,QAAQ,CAAC,EAAE,MAAM,CAAC;oBAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;iBACnB,CAAC,CAAC;aACJ,CAAC;SACH,CAAC,CAAC;KACJ,CAAC;IACF,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,eAAe,EACpB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,uBAAuB,GAC/B,MAAM,GAAG,SAAS,CAWpB;AAED,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,EACnC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC,CAMlB;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,iBAAiB,EACxB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,uBAAuB,GAC/B,IAAI,CAaN;AAED,wBAAgB,kBAAkB,CAAC,MAAM,SAAS,iBAAiB,EACjE,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,MAAM,GAAG,iBAAiB,CAwB5B;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOzD;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAW5D"}

package/esm/policy.js

@@ -0,0 +1,89 @@
+export const DEFAULT_FINGERPRINT = "{{ default }}";
+const SENTRY_TOKEN_PATTERN = /\bsntrys_[A-Za-z0-9_+/=-]+\b/g;
+const BEARER_TOKEN_PATTERN = /\bBearer\s+[A-Za-z0-9._~+/=-]+\b/gi;
+const JWT_PATTERN = /\b[A-Za-z0-9_-]{16,}\.[A-Za-z0-9_-]{16,}\.[A-Za-z0-9_-]{16,}\b/g;
+const URL_CREDENTIAL_PATTERN = /(https?:\/\/)[^@\s/]+(@[^/\s]+)/gi;
+const SENSITIVE_QUERY_PATTERN = /([?&](?:access_token|api_key|auth|authorization|dsn|password|secret|token)=)[^&#\s]+/gi;
+export function captureWithSentryPolicy(sdk, serviceName, error, context) {
+    try {
+        let eventId;
+        sdk.withScope((scope) => {
+            applySentryScopePolicy(scope, serviceName, context);
+            eventId = sdk.captureException(error);
+        });
+        return eventId;
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function flushWithSentryPolicy(sdk, timeoutMs) {
+    try {
+        return await sdk.flush(timeoutMs);
+    }
+    catch {
+        return false;
+    }
+}
+export function applySentryScopePolicy(scope, serviceName, context) {
+    scope.setFingerprint([serviceName, DEFAULT_FINGERPRINT]);
+    scope.setTag("service.name", serviceName);
+    scope.setTag("veryfront.boundary", context.boundary);
+    if (context.method)
+        scope.setTag("http.request.method", context.method);
+    if (context.requestId)
+        scope.setTag("veryfront.request_id", context.requestId);
+    if (context.traceId) {
+        scope.setTag("grafana.trace_id", context.traceId);
+        scope.setContext("grafana_trace", {
+            trace_id: context.traceId,
+            ...(context.spanId ? { span_id: context.spanId } : {}),
+        });
+    }
+}
+export function prepareSentryEvent(event, serviceName) {
+    event.tags = {
+        ...event.tags,
+        "service.name": serviceName,
+    };
+    event.fingerprint = [serviceName, ...(event.fingerprint ?? [DEFAULT_FINGERPRINT])];
+    delete event.breadcrumbs;
+    delete event.request;
+    delete event.user;
+    if (event.message)
+        event.message = redactSensitiveText(event.message);
+    if (event.logentry?.message) {
+        event.logentry.message = redactSensitiveText(event.logentry.message);
+    }
+    for (const value of event.exception?.values ?? []) {
+        if (value.value)
+            value.value = redactSensitiveText(value.value);
+        for (const frame of value.stacktrace?.frames ?? []) {
+            if (frame.filename)
+                frame.filename = sanitizeStackFramePath(frame.filename);
+            if (frame.abs_path)
+                frame.abs_path = sanitizeStackFramePath(frame.abs_path);
+        }
+    }
+    return event;
+}
+export function redactSensitiveText(value) {
+    return value
+        .replace(SENTRY_TOKEN_PATTERN, "[REDACTED]")
+        .replace(BEARER_TOKEN_PATTERN, "[REDACTED]")
+        .replace(JWT_PATTERN, "[REDACTED]")
+        .replace(URL_CREDENTIAL_PATTERN, "$1[REDACTED]$2")
+        .replace(SENSITIVE_QUERY_PATTERN, "$1[REDACTED]");
+}
+export function sanitizeStackFramePath(value) {
+    const redacted = redactSensitiveText(value);
+    const path = redacted.startsWith("file://") ? redacted.slice("file://".length) : redacted;
+    if (!path.startsWith("/") && !/^[A-Za-z]:[\\/]/.test(path))
+        return redacted;
+    const normalized = path.replaceAll("\\", "/");
+    const sourcePath = normalized.match(/(?:^|\/)((?:src|extensions|cli|dist)\/.+)$/)?.[1];
+    if (sourcePath)
+        return sourcePath;
+    const basename = normalized.split("/").filter(Boolean).at(-1);
+    return basename ? `[REDACTED]/${basename}` : "[REDACTED]";
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@veryfront/ext-observability-sentry",
-  "version": "0.1.1173",
+  "version": "0.1.1174",
   "description": "Veryfront first-party extension package for ext-observability-sentry",
   "keywords": [
     "veryfront",
@@ -23,6 +23,14 @@
     ".": {
       "import": "./esm/index.js",
       "types": "./esm/index.d.ts"
+    },
+    "./deno": {
+      "import": "./esm/deno.js",
+      "types": "./esm/deno.d.ts"
+    },
+    "./node": {
+      "import": "./esm/node.js",
+      "types": "./esm/node.d.ts"
     }
   },
   "scripts": {},
@@ -44,10 +52,11 @@
     ]
   },
   "dependencies": {
-    "@sentry/deno": "10.68.0"
+    "@sentry/deno": "10.68.0",
+    "@sentry/node": "10.68.0"
   },
   "peerDependencies": {
-    "veryfront": "^0.1.1173"
+    "veryfront": "^0.1.1174"
   },
   "type": "module",
   "types": "./esm/index.d.ts",