@vyro-x/sentry 0.1.0

package/README.md

@@ -0,0 +1,77 @@
+# @vyro-x/sentry
+
+Vyro's shared Sentry setup. One package that owns the Sentry version and gives every
+service and frontend a ready-to-use `initSentry(...)` with secret scrubbing already
+wired in — so `Authorization` headers, API keys, tokens and other secrets never reach
+Sentry.
+
+## Why
+
+Previously every project called `Sentry.init(...)` itself, on a different SDK version
+(`@sentry/node` alone spanned five v7 ranges plus v8), each re-implementing config and
+scrubbing. This package centralises all of it:
+
+- **One pinned Sentry version**, declared here as a peer dependency.
+- **Scrubbing on by default** — no way to forget it.
+- **Per-environment entry points**, because backends, SPAs and Next.js each need a
+  different SDK and config.
+
+## Entry points
+
+| Import | SDK (peer) | Use in |
+| --- | --- | --- |
+| `@vyro-x/sentry` | none | shared scrubbing / config helpers |
+| `@vyro-x/sentry/node` | `@sentry/node` | Express / Lambda services |
+| `@vyro-x/sentry/browser` | `@sentry/react` | Vite + React SPAs |
+| `@vyro-x/sentry/nextjs` | `@sentry/nextjs` | `modern-website` |
+
+The SDK peers are **optional** — installing `@vyro-x/sentry` in a backend pulls only
+`@sentry/node`.
+
+## Usage
+
+### Backend (`@sentry/node`)
+
+```ts
+// src/shared/sentry.ts (or inline)
+import { initSentry } from "@vyro-x/sentry/node"
+
+initSentry({ serverName: "users-api" }) // DSN read from process.env.SENTRY_DSN
+
+export { captureException, setupExpressErrorHandler } from "@vyro-x/sentry/node"
+```
+
+`Sentry.Handlers.requestHandler()` is gone in v8+. If a service needs Express error
+reporting, call `setupExpressErrorHandler(app)` after your routes.
+
+### Frontend SPA (`@sentry/react`)
+
+```ts
+import { initSentry, ErrorBoundary } from "@vyro-x/sentry/browser"
+
+initSentry({ dsn: import.meta.env.VITE_SENTRY_DSN, tracesSampleRate: 0.2 })
+```
+
+### Next.js (`@sentry/nextjs`)
+
+```ts
+// sentry.server.config.ts / sentry.client.config.ts / sentry.edge.config.ts
+import { initSentry } from "@vyro-x/sentry/nextjs"
+
+initSentry({ serverName: "modern-website-frontend" })
+```
+
+## What gets scrubbed
+
+`request.headers`, `request.cookies`, `request.data`, `contexts`, `extra`, `tags` on
+every event, and breadcrumb `data`. Default keys (case-insensitive): `authorization`,
+`api-key` / `apikey` / `api_key` / `x-api-key`, `x-hasura-admin-secret`, `access-token`,
+`refresh-token`, `token`, `secret`, `cookie`, `password`, `credential`. Extend via the
+`scrub` option (`extraKeys`, `extraPatterns`, `pattern`, `placeholder`, `maxDepth`), or
+use the low-level `scrubSentrySensitiveData` from the root entry.
+
+## Test
+
+```bash
+pnpm --filter @vyro-x/sentry test
+```

package/dist/cjs/browser.d.ts

@@ -0,0 +1,29 @@
+import * as Sentry from '@sentry/react';
+import type { SentryScrubOptions } from './scrub';
+/** Re-exported SDK, for the rare escape hatch. Prefer the helpers below. */
+export { Sentry };
+/** Sentry's React error boundary, re-exported so apps don't import `@sentry/react` directly. */
+export declare const ErrorBoundary: typeof Sentry.ErrorBoundary;
+export declare const captureException: typeof Sentry.captureException;
+export interface BrowserSentryInitOptions {
+    /**
+     * DSN. Browsers read it from a build-time env (e.g. `import.meta.env.VITE_SENTRY_DSN`
+     * or `process.env.NEXT_PUBLIC_SENTRY_DSN`), so pass it in explicitly. When absent,
+     * init is skipped.
+     */
+    dsn?: string;
+    /** Performance tracing sample rate. Defaults to `0.2`. */
+    tracesSampleRate?: number;
+    /** Overrides the resolved `environment`. */
+    environment?: string;
+    /** Scrubber options (extra keys/patterns, placeholder, …). */
+    scrub?: SentryScrubOptions;
+    /** Extra `@sentry/react` init options, merged last so they can override defaults. */
+    init?: Parameters<typeof Sentry.init>[0];
+}
+/**
+ * Initialises `@sentry/react` for a Vyro frontend with secret-scrubbing already wired
+ * in. Idempotent and a no-op when no DSN is provided.
+ */
+export declare function initSentry(options?: BrowserSentryInitOptions): void;
+//# sourceMappingURL=browser.d.ts.map

package/dist/cjs/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AAGjD,4EAA4E;AAC5E,OAAO,EAAE,MAAM,EAAE,CAAA;AACjB,gGAAgG;AAChG,eAAO,MAAM,aAAa,6BAAuB,CAAA;AACjD,eAAO,MAAM,gBAAgB,gCAA0B,CAAA;AAIvD,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,0DAA0D;IAC1D,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,kBAAkB,CAAA;IAC1B,qFAAqF;IACrF,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;CACzC;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,GAAE,wBAA6B,GAAG,IAAI,CAevE"}

package/dist/cjs/browser.js

@@ -0,0 +1,57 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.initSentry = exports.captureException = exports.ErrorBoundary = exports.Sentry = void 0;
+const Sentry = __importStar(require("@sentry/react"));
+exports.Sentry = Sentry;
+const config_1 = require("./config");
+const scrubbers_1 = require("./scrubbers");
+/** Sentry's React error boundary, re-exported so apps don't import `@sentry/react` directly. */
+exports.ErrorBoundary = Sentry.ErrorBoundary;
+exports.captureException = Sentry.captureException;
+let initialised = false;
+/**
+ * Initialises `@sentry/react` for a Vyro frontend with secret-scrubbing already wired
+ * in. Idempotent and a no-op when no DSN is provided.
+ */
+function initSentry(options = {}) {
+    var _a, _b;
+    if (initialised)
+        return;
+    const dsn = options.dsn;
+    if (!dsn) {
+        initialised = true;
+        return;
+    }
+    Sentry.init({
+        ...(0, scrubbers_1.createSentryScrubbers)(options.scrub),
+        dsn,
+        environment: (_a = options.environment) !== null && _a !== void 0 ? _a : (0, config_1.resolveEnvironment)(),
+        tracesSampleRate: (_b = options.tracesSampleRate) !== null && _b !== void 0 ? _b : config_1.DEFAULT_TRACES_SAMPLE_RATE,
+        ...options.init,
+    });
+    initialised = true;
+}
+exports.initSentry = initSentry;

package/dist/cjs/config.d.ts

@@ -0,0 +1,8 @@
+/** Default performance tracing sample rate used across Vyro services. */
+export declare const DEFAULT_TRACES_SAMPLE_RATE = 0.2;
+/**
+ * Resolves the Sentry `environment` from the runtime env, falling back to
+ * `NODE_ENV`. Returns `undefined` in environments without `process` (some browsers).
+ */
+export declare const resolveEnvironment: () => string | undefined;
+//# sourceMappingURL=config.d.ts.map

package/dist/cjs/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,eAAO,MAAM,0BAA0B,MAAM,CAAA;AAE7C;;;GAGG;AACH,eAAO,MAAM,kBAAkB,QAAO,MAAM,GAAG,SAG9C,CAAA"}

package/dist/cjs/config.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveEnvironment = exports.DEFAULT_TRACES_SAMPLE_RATE = void 0;
+/** Default performance tracing sample rate used across Vyro services. */
+exports.DEFAULT_TRACES_SAMPLE_RATE = 0.2;
+/**
+ * Resolves the Sentry `environment` from the runtime env, falling back to
+ * `NODE_ENV`. Returns `undefined` in environments without `process` (some browsers).
+ */
+const resolveEnvironment = () => {
+    var _a, _b;
+    if (typeof process === 'undefined' || !process.env)
+        return undefined;
+    return (_b = (_a = process.env.SENTRY_ENVIRONMENT) !== null && _a !== void 0 ? _a : process.env.NODE_ENV) !== null && _b !== void 0 ? _b : undefined;
+};
+exports.resolveEnvironment = resolveEnvironment;

package/dist/cjs/index.d.ts

@@ -0,0 +1,4 @@
+export { DEFAULT_TRACES_SAMPLE_RATE, resolveEnvironment } from './config';
+export { DEFAULT_SENSITIVE_KEY_PATTERN, type SentryScrubOptions, scrubSentrySensitiveData, } from './scrub';
+export { createSentryScrubbers, type SentryScrubbers } from './scrubbers';
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AACzE,OAAO,EACL,6BAA6B,EAC7B,KAAK,kBAAkB,EACvB,wBAAwB,GACzB,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,qBAAqB,EAAE,KAAK,eAAe,EAAE,MAAM,aAAa,CAAA"}

package/dist/cjs/index.js

@@ -0,0 +1,13 @@
+"use strict";
+// SDK-agnostic surface. Import from `@vyro-x/sentry/node`, `/browser` or `/nextjs`
+// for an SDK-wired `initSentry`. This root entry has no `@sentry/*` dependency.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSentryScrubbers = exports.scrubSentrySensitiveData = exports.DEFAULT_SENSITIVE_KEY_PATTERN = exports.resolveEnvironment = exports.DEFAULT_TRACES_SAMPLE_RATE = void 0;
+var config_1 = require("./config");
+Object.defineProperty(exports, "DEFAULT_TRACES_SAMPLE_RATE", { enumerable: true, get: function () { return config_1.DEFAULT_TRACES_SAMPLE_RATE; } });
+Object.defineProperty(exports, "resolveEnvironment", { enumerable: true, get: function () { return config_1.resolveEnvironment; } });
+var scrub_1 = require("./scrub");
+Object.defineProperty(exports, "DEFAULT_SENSITIVE_KEY_PATTERN", { enumerable: true, get: function () { return scrub_1.DEFAULT_SENSITIVE_KEY_PATTERN; } });
+Object.defineProperty(exports, "scrubSentrySensitiveData", { enumerable: true, get: function () { return scrub_1.scrubSentrySensitiveData; } });
+var scrubbers_1 = require("./scrubbers");
+Object.defineProperty(exports, "createSentryScrubbers", { enumerable: true, get: function () { return scrubbers_1.createSentryScrubbers; } });

package/dist/cjs/nextjs.d.ts

@@ -0,0 +1,29 @@
+import * as Sentry from '@sentry/nextjs';
+import type { SentryScrubOptions } from './scrub';
+/** Re-exported SDK, for the rare escape hatch. Prefer the helper below. */
+export { Sentry };
+export declare const captureException: typeof Sentry.captureException;
+/**
+ * Options for `initSentry`. Used by all three Next.js runtimes
+ * (`sentry.server.config.ts`, `sentry.client.config.ts`, `sentry.edge.config.ts`).
+ */
+export interface NextSentryInitOptions {
+    /** DSN; defaults to `process.env.NEXT_PUBLIC_SENTRY_DSN` then `process.env.SENTRY_DSN`. */
+    dsn?: string;
+    /** Logical name shown as `server_name` (server/edge runtimes). */
+    serverName?: string;
+    /** Performance tracing sample rate. Defaults to `0.2`. */
+    tracesSampleRate?: number;
+    /** Overrides the resolved `environment`. */
+    environment?: string;
+    /** Scrubber options (extra keys/patterns, placeholder, …). */
+    scrub?: SentryScrubOptions;
+    /** Extra `@sentry/nextjs` init options, merged last so they can override defaults. */
+    init?: Parameters<typeof Sentry.init>[0];
+}
+/**
+ * Initialises `@sentry/nextjs` (server, client or edge) for the Vyro website with
+ * secret-scrubbing already wired in. Idempotent and a no-op when no DSN is configured.
+ */
+export declare function initSentry(options?: NextSentryInitOptions): void;
+//# sourceMappingURL=nextjs.d.ts.map

package/dist/cjs/nextjs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nextjs.d.ts","sourceRoot":"","sources":["../../src/nextjs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAA;AAExC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AAGjD,2EAA2E;AAC3E,OAAO,EAAE,MAAM,EAAE,CAAA;AACjB,eAAO,MAAM,gBAAgB,gCAA0B,CAAA;AAEvD;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,2FAA2F;IAC3F,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,0DAA0D;IAC1D,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,kBAAkB,CAAA;IAC1B,sFAAsF;IACtF,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;CACzC;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,GAAE,qBAA0B,GAAG,IAAI,CAepE"}

package/dist/cjs/nextjs.js

@@ -0,0 +1,52 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.initSentry = exports.captureException = exports.Sentry = void 0;
+const Sentry = __importStar(require("@sentry/nextjs"));
+exports.Sentry = Sentry;
+const config_1 = require("./config");
+const scrubbers_1 = require("./scrubbers");
+exports.captureException = Sentry.captureException;
+/**
+ * Initialises `@sentry/nextjs` (server, client or edge) for the Vyro website with
+ * secret-scrubbing already wired in. Idempotent and a no-op when no DSN is configured.
+ */
+function initSentry(options = {}) {
+    var _a, _b, _c, _d;
+    const dsn = (_a = options.dsn) !== null && _a !== void 0 ? _a : (typeof process !== 'undefined'
+        ? ((_b = process.env.NEXT_PUBLIC_SENTRY_DSN) !== null && _b !== void 0 ? _b : process.env.SENTRY_DSN)
+        : undefined);
+    if (!dsn)
+        return;
+    Sentry.init({
+        ...(0, scrubbers_1.createSentryScrubbers)(options.scrub),
+        dsn,
+        serverName: options.serverName,
+        environment: (_c = options.environment) !== null && _c !== void 0 ? _c : (0, config_1.resolveEnvironment)(),
+        tracesSampleRate: (_d = options.tracesSampleRate) !== null && _d !== void 0 ? _d : config_1.DEFAULT_TRACES_SAMPLE_RATE,
+        ...options.init,
+    });
+}
+exports.initSentry = initSentry;

package/dist/cjs/node.d.ts

@@ -0,0 +1,39 @@
+import * as Sentry from '@sentry/node';
+import type { SentryScrubOptions } from './scrub';
+/** Re-exported SDK, for the rare escape hatch. Prefer the helpers below. */
+export { Sentry };
+/**
+ * Express error handler (Sentry v8+). Call after your routes are registered so
+ * errors bubbling out of the app are reported. Replaces the removed
+ * `Sentry.Handlers.errorHandler()`.
+ */
+export declare const setupExpressErrorHandler: typeof Sentry.setupExpressErrorHandler;
+export interface NodeSentryInitOptions {
+    /** Logical service name — shown in Sentry as `server_name`. */
+    serverName: string;
+    /** DSN; defaults to `process.env.SENTRY_DSN`. When absent, init is skipped. */
+    dsn?: string;
+    /** Performance tracing sample rate. Defaults to `0.2`. */
+    tracesSampleRate?: number;
+    /** Overrides the resolved `environment`. */
+    environment?: string;
+    /** Scrubber options (extra keys/patterns, placeholder, …). */
+    scrub?: SentryScrubOptions;
+    /** Extra `@sentry/node` init options, merged last so they can override defaults. */
+    init?: Parameters<typeof Sentry.init>[0];
+}
+/**
+ * Initialises `@sentry/node` for a Vyro service with secret-scrubbing already wired
+ * in. Idempotent and a no-op when no DSN is configured.
+ */
+export declare function initSentry(options: NodeSentryInitOptions): void;
+export interface CaptureContext {
+    tags?: Record<string, string>;
+    extra?: Record<string, unknown>;
+}
+/**
+ * Reports an exception with optional tags/extra. No-op until `initSentry` has run
+ * with a DSN. Consolidates the helper previously copied into individual services.
+ */
+export declare function captureException(error: unknown, context?: CaptureContext): void;
+//# sourceMappingURL=node.d.ts.map

package/dist/cjs/node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../src/node.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,cAAc,CAAA;AAEtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AAGjD,4EAA4E;AAC5E,OAAO,EAAE,MAAM,EAAE,CAAA;AACjB;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,wCAAkC,CAAA;AAIvE,MAAM,WAAW,qBAAqB;IACpC,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAA;IAClB,+EAA+E;IAC/E,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,0DAA0D;IAC1D,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,kBAAkB,CAAA;IAC1B,oFAAoF;IACpF,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;CACzC;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAgB/D;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAChC;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE,cAAc,GACvB,IAAI,CAeN"}

package/dist/cjs/node.js

@@ -0,0 +1,84 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.captureException = exports.initSentry = exports.setupExpressErrorHandler = exports.Sentry = void 0;
+const Sentry = __importStar(require("@sentry/node"));
+exports.Sentry = Sentry;
+const config_1 = require("./config");
+const scrubbers_1 = require("./scrubbers");
+/**
+ * Express error handler (Sentry v8+). Call after your routes are registered so
+ * errors bubbling out of the app are reported. Replaces the removed
+ * `Sentry.Handlers.errorHandler()`.
+ */
+exports.setupExpressErrorHandler = Sentry.setupExpressErrorHandler;
+let initialised = false;
+/**
+ * Initialises `@sentry/node` for a Vyro service with secret-scrubbing already wired
+ * in. Idempotent and a no-op when no DSN is configured.
+ */
+function initSentry(options) {
+    var _a, _b, _c;
+    if (initialised)
+        return;
+    const dsn = (_a = options.dsn) !== null && _a !== void 0 ? _a : process.env.SENTRY_DSN;
+    if (!dsn) {
+        initialised = true;
+        return;
+    }
+    Sentry.init({
+        ...(0, scrubbers_1.createSentryScrubbers)(options.scrub),
+        dsn,
+        serverName: options.serverName,
+        environment: (_b = options.environment) !== null && _b !== void 0 ? _b : (0, config_1.resolveEnvironment)(),
+        tracesSampleRate: (_c = options.tracesSampleRate) !== null && _c !== void 0 ? _c : config_1.DEFAULT_TRACES_SAMPLE_RATE,
+        ...options.init,
+    });
+    initialised = true;
+}
+exports.initSentry = initSentry;
+/**
+ * Reports an exception with optional tags/extra. No-op until `initSentry` has run
+ * with a DSN. Consolidates the helper previously copied into individual services.
+ */
+function captureException(error, context) {
+    if (!initialised)
+        return;
+    if (!context) {
+        Sentry.captureException(error);
+        return;
+    }
+    Sentry.withScope((scope) => {
+        if (context.tags) {
+            for (const [key, value] of Object.entries(context.tags)) {
+                scope.setTag(key, value);
+            }
+        }
+        if (context.extra)
+            scope.setExtras(context.extra);
+        Sentry.captureException(error);
+    });
+}
+exports.captureException = captureException;

package/dist/cjs/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "commonjs"
+}

package/dist/cjs/scrub.d.ts

@@ -0,0 +1,36 @@
+/**
+ * SDK-agnostic Sentry scrubbing helpers.
+ *
+ * This package intentionally does NOT depend on any `@sentry/*` package so it can
+ * be dropped into services and frontends running different Sentry SDK versions
+ * (`@sentry/node`, `@sentry/react`, `@sentry/nextjs`, …). The public `beforeSend` /
+ * `beforeBreadcrumb` helpers use a generic identity signature (`<T>(x: T) => T`) so
+ * they satisfy every SDK's `beforeSend` / `beforeBreadcrumb` option type while
+ * operating on the event purely at runtime.
+ */
+/**
+ * Default set of key/header-name fragments that get redacted (case-insensitive).
+ * Matches `authorization`, `x-api-key` and every `api-key` / `apikey` / `api_key`
+ * variant, `x-hasura-admin-secret`, `access-token` / `refresh-token` / `token`,
+ * `secret`, `cookie`, `password` and `credential`.
+ */
+export declare const DEFAULT_SENSITIVE_KEY_PATTERN: RegExp;
+export interface SentryScrubOptions {
+    /** Extra regexes matched against key/header names (case-insensitive recommended). */
+    extraPatterns?: RegExp[];
+    /** Extra literal substrings matched against key/header names (case-insensitive). */
+    extraKeys?: string[];
+    /** Replace the whole default pattern instead of extending it. */
+    pattern?: RegExp;
+    /** Value written in place of a redacted entry. Defaults to `"[Filtered]"`. */
+    placeholder?: string;
+    /** Maximum object depth to walk. Defaults to `6`. */
+    maxDepth?: number;
+}
+/**
+ * Recursively redacts sensitive keys of `value` **in place**. Safe on any input:
+ * primitives and `null`/`undefined` are ignored, arrays are walked, and circular
+ * references are handled. Sensitive values are replaced with the placeholder.
+ */
+export declare const scrubSentrySensitiveData: (value: unknown, options?: SentryScrubOptions) => void;
+//# sourceMappingURL=scrub.d.ts.map

package/dist/cjs/scrub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrub.d.ts","sourceRoot":"","sources":["../../src/scrub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,QACwF,CAAA;AAElI,MAAM,WAAW,kBAAkB;IACjC,qFAAqF;IACrF,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,oFAAoF;IACpF,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAkBD;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,UAC5B,OAAO,YACL,kBAAkB,KAC1B,IA2BF,CAAA"}

package/dist/cjs/scrub.js

@@ -0,0 +1,70 @@
+"use strict";
+/**
+ * SDK-agnostic Sentry scrubbing helpers.
+ *
+ * This package intentionally does NOT depend on any `@sentry/*` package so it can
+ * be dropped into services and frontends running different Sentry SDK versions
+ * (`@sentry/node`, `@sentry/react`, `@sentry/nextjs`, …). The public `beforeSend` /
+ * `beforeBreadcrumb` helpers use a generic identity signature (`<T>(x: T) => T`) so
+ * they satisfy every SDK's `beforeSend` / `beforeBreadcrumb` option type while
+ * operating on the event purely at runtime.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scrubSentrySensitiveData = exports.DEFAULT_SENSITIVE_KEY_PATTERN = void 0;
+/**
+ * Default set of key/header-name fragments that get redacted (case-insensitive).
+ * Matches `authorization`, `x-api-key` and every `api-key` / `apikey` / `api_key`
+ * variant, `x-hasura-admin-secret`, `access-token` / `refresh-token` / `token`,
+ * `secret`, `cookie`, `password` and `credential`.
+ */
+exports.DEFAULT_SENSITIVE_KEY_PATTERN = /authorization|api[-_ ]?key|x-hasura-admin-secret|access[-_ ]?token|refresh[-_ ]?token|token|secret|cookie|password|credential/i;
+const buildMatcher = (options) => {
+    var _a, _b, _c;
+    const patterns = [
+        (_a = options.pattern) !== null && _a !== void 0 ? _a : exports.DEFAULT_SENSITIVE_KEY_PATTERN,
+        ...((_b = options.extraPatterns) !== null && _b !== void 0 ? _b : []),
+    ];
+    const keys = ((_c = options.extraKeys) !== null && _c !== void 0 ? _c : []).map((key) => key.toLowerCase());
+    return (key) => {
+        if (patterns.some((pattern) => pattern.test(key)))
+            return true;
+        if (keys.length === 0)
+            return false;
+        const lower = key.toLowerCase();
+        return keys.some((needle) => lower.includes(needle));
+    };
+};
+/**
+ * Recursively redacts sensitive keys of `value` **in place**. Safe on any input:
+ * primitives and `null`/`undefined` are ignored, arrays are walked, and circular
+ * references are handled. Sensitive values are replaced with the placeholder.
+ */
+const scrubSentrySensitiveData = (value, options = {}) => {
+    var _a, _b;
+    const placeholder = (_a = options.placeholder) !== null && _a !== void 0 ? _a : '[Filtered]';
+    const maxDepth = (_b = options.maxDepth) !== null && _b !== void 0 ? _b : 6;
+    const isSensitive = buildMatcher(options);
+    const seen = new WeakSet();
+    const walk = (node, depth) => {
+        if (!node || typeof node !== 'object' || depth > maxDepth)
+            return;
+        if (seen.has(node))
+            return;
+        seen.add(node);
+        if (Array.isArray(node)) {
+            for (const item of node)
+                walk(item, depth + 1);
+            return;
+        }
+        const record = node;
+        for (const key of Object.keys(record)) {
+            if (isSensitive(key)) {
+                record[key] = placeholder;
+                continue;
+            }
+            walk(record[key], depth + 1);
+        }
+    };
+    walk(value, 0);
+};
+exports.scrubSentrySensitiveData = scrubSentrySensitiveData;

package/dist/cjs/scrubbers.d.ts

@@ -0,0 +1,27 @@
+import { type SentryScrubOptions } from './scrub';
+/**
+ * A pair of scrubbing hooks. The signatures are generic identity functions so the
+ * object can be spread straight into any SDK's `Sentry.init({ ... })` regardless of
+ * its `Event` / `Breadcrumb` types.
+ */
+export interface SentryScrubbers {
+    beforeSend: <T>(event: T) => T;
+    beforeBreadcrumb: <T>(breadcrumb: T) => T;
+}
+/**
+ * Builds `beforeSend` / `beforeBreadcrumb` hooks that redact authorization headers,
+ * API keys, tokens and other secrets from outgoing Sentry events and breadcrumbs.
+ *
+ * @example
+ * ```ts
+ * import * as Sentry from "@sentry/node"
+ * import { createSentryScrubbers } from "@vyro-x/sentry"
+ *
+ * Sentry.init({
+ *   ...createSentryScrubbers(),
+ *   dsn: process.env.SENTRY_DSN,
+ * })
+ * ```
+ */
+export declare function createSentryScrubbers(options?: SentryScrubOptions): SentryScrubbers;
+//# sourceMappingURL=scrubbers.d.ts.map

package/dist/cjs/scrubbers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrubbers.d.ts","sourceRoot":"","sources":["../../src/scrubbers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,kBAAkB,EAA4B,MAAM,SAAS,CAAA;AAE3E;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,CAAA;IAC9B,gBAAgB,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,KAAK,CAAC,CAAA;CAC1C;AA6BD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,kBAAuB,GAC/B,eAAe,CAWjB"}

package/dist/cjs/scrubbers.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSentryScrubbers = void 0;
+const scrub_1 = require("./scrub");
+const scrubEvent = (event, options) => {
+    if (!event || typeof event !== 'object')
+        return;
+    const record = event;
+    const request = record.request;
+    if (request) {
+        (0, scrub_1.scrubSentrySensitiveData)(request.headers, options);
+        (0, scrub_1.scrubSentrySensitiveData)(request.cookies, options);
+        (0, scrub_1.scrubSentrySensitiveData)(request.data, options);
+    }
+    (0, scrub_1.scrubSentrySensitiveData)(record.contexts, options);
+    (0, scrub_1.scrubSentrySensitiveData)(record.extra, options);
+    (0, scrub_1.scrubSentrySensitiveData)(record.tags, options);
+};
+const scrubBreadcrumb = (breadcrumb, options) => {
+    if (!breadcrumb || typeof breadcrumb !== 'object')
+        return;
+    (0, scrub_1.scrubSentrySensitiveData)(breadcrumb.data, options);
+};
+/**
+ * Builds `beforeSend` / `beforeBreadcrumb` hooks that redact authorization headers,
+ * API keys, tokens and other secrets from outgoing Sentry events and breadcrumbs.
+ *
+ * @example
+ * ```ts
+ * import * as Sentry from "@sentry/node"
+ * import { createSentryScrubbers } from "@vyro-x/sentry"
+ *
+ * Sentry.init({
+ *   ...createSentryScrubbers(),
+ *   dsn: process.env.SENTRY_DSN,
+ * })
+ * ```
+ */
+function createSentryScrubbers(options = {}) {
+    return {
+        beforeSend: (event) => {
+            scrubEvent(event, options);
+            return event;
+        },
+        beforeBreadcrumb: (breadcrumb) => {
+            scrubBreadcrumb(breadcrumb, options);
+            return breadcrumb;
+        },
+    };
+}
+exports.createSentryScrubbers = createSentryScrubbers;