@vyro-x/sentry 0.1.0

package/dist/esm/browser.d.ts

@@ -0,0 +1,29 @@
+import * as Sentry from '@sentry/react';
+import type { SentryScrubOptions } from './scrub';
+/** Re-exported SDK, for the rare escape hatch. Prefer the helpers below. */
+export { Sentry };
+/** Sentry's React error boundary, re-exported so apps don't import `@sentry/react` directly. */
+export declare const ErrorBoundary: typeof Sentry.ErrorBoundary;
+export declare const captureException: typeof Sentry.captureException;
+export interface BrowserSentryInitOptions {
+    /**
+     * DSN. Browsers read it from a build-time env (e.g. `import.meta.env.VITE_SENTRY_DSN`
+     * or `process.env.NEXT_PUBLIC_SENTRY_DSN`), so pass it in explicitly. When absent,
+     * init is skipped.
+     */
+    dsn?: string;
+    /** Performance tracing sample rate. Defaults to `0.2`. */
+    tracesSampleRate?: number;
+    /** Overrides the resolved `environment`. */
+    environment?: string;
+    /** Scrubber options (extra keys/patterns, placeholder, …). */
+    scrub?: SentryScrubOptions;
+    /** Extra `@sentry/react` init options, merged last so they can override defaults. */
+    init?: Parameters<typeof Sentry.init>[0];
+}
+/**
+ * Initialises `@sentry/react` for a Vyro frontend with secret-scrubbing already wired
+ * in. Idempotent and a no-op when no DSN is provided.
+ */
+export declare function initSentry(options?: BrowserSentryInitOptions): void;
+//# sourceMappingURL=browser.d.ts.map

package/dist/esm/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AAGjD,4EAA4E;AAC5E,OAAO,EAAE,MAAM,EAAE,CAAA;AACjB,gGAAgG;AAChG,eAAO,MAAM,aAAa,6BAAuB,CAAA;AACjD,eAAO,MAAM,gBAAgB,gCAA0B,CAAA;AAIvD,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,0DAA0D;IAC1D,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,kBAAkB,CAAA;IAC1B,qFAAqF;IACrF,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;CACzC;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,GAAE,wBAA6B,GAAG,IAAI,CAevE"}

package/dist/esm/browser.js

@@ -0,0 +1,31 @@
+import * as Sentry from '@sentry/react';
+import { DEFAULT_TRACES_SAMPLE_RATE, resolveEnvironment } from './config';
+import { createSentryScrubbers } from './scrubbers';
+/** Re-exported SDK, for the rare escape hatch. Prefer the helpers below. */
+export { Sentry };
+/** Sentry's React error boundary, re-exported so apps don't import `@sentry/react` directly. */
+export const ErrorBoundary = Sentry.ErrorBoundary;
+export const captureException = Sentry.captureException;
+let initialised = false;
+/**
+ * Initialises `@sentry/react` for a Vyro frontend with secret-scrubbing already wired
+ * in. Idempotent and a no-op when no DSN is provided.
+ */
+export function initSentry(options = {}) {
+    var _a, _b;
+    if (initialised)
+        return;
+    const dsn = options.dsn;
+    if (!dsn) {
+        initialised = true;
+        return;
+    }
+    Sentry.init({
+        ...createSentryScrubbers(options.scrub),
+        dsn,
+        environment: (_a = options.environment) !== null && _a !== void 0 ? _a : resolveEnvironment(),
+        tracesSampleRate: (_b = options.tracesSampleRate) !== null && _b !== void 0 ? _b : DEFAULT_TRACES_SAMPLE_RATE,
+        ...options.init,
+    });
+    initialised = true;
+}

package/dist/esm/config.d.ts

@@ -0,0 +1,8 @@
+/** Default performance tracing sample rate used across Vyro services. */
+export declare const DEFAULT_TRACES_SAMPLE_RATE = 0.2;
+/**
+ * Resolves the Sentry `environment` from the runtime env, falling back to
+ * `NODE_ENV`. Returns `undefined` in environments without `process` (some browsers).
+ */
+export declare const resolveEnvironment: () => string | undefined;
+//# sourceMappingURL=config.d.ts.map

package/dist/esm/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,eAAO,MAAM,0BAA0B,MAAM,CAAA;AAE7C;;;GAGG;AACH,eAAO,MAAM,kBAAkB,QAAO,MAAM,GAAG,SAG9C,CAAA"}

package/dist/esm/config.js

@@ -0,0 +1,12 @@
+/** Default performance tracing sample rate used across Vyro services. */
+export const DEFAULT_TRACES_SAMPLE_RATE = 0.2;
+/**
+ * Resolves the Sentry `environment` from the runtime env, falling back to
+ * `NODE_ENV`. Returns `undefined` in environments without `process` (some browsers).
+ */
+export const resolveEnvironment = () => {
+    var _a, _b;
+    if (typeof process === 'undefined' || !process.env)
+        return undefined;
+    return (_b = (_a = process.env.SENTRY_ENVIRONMENT) !== null && _a !== void 0 ? _a : process.env.NODE_ENV) !== null && _b !== void 0 ? _b : undefined;
+};

package/dist/esm/index.d.ts

@@ -0,0 +1,4 @@
+export { DEFAULT_TRACES_SAMPLE_RATE, resolveEnvironment } from './config';
+export { DEFAULT_SENSITIVE_KEY_PATTERN, type SentryScrubOptions, scrubSentrySensitiveData, } from './scrub';
+export { createSentryScrubbers, type SentryScrubbers } from './scrubbers';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AACzE,OAAO,EACL,6BAA6B,EAC7B,KAAK,kBAAkB,EACvB,wBAAwB,GACzB,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,qBAAqB,EAAE,KAAK,eAAe,EAAE,MAAM,aAAa,CAAA"}

package/dist/esm/index.js

@@ -0,0 +1,5 @@
+// SDK-agnostic surface. Import from `@vyro-x/sentry/node`, `/browser` or `/nextjs`
+// for an SDK-wired `initSentry`. This root entry has no `@sentry/*` dependency.
+export { DEFAULT_TRACES_SAMPLE_RATE, resolveEnvironment } from './config';
+export { DEFAULT_SENSITIVE_KEY_PATTERN, scrubSentrySensitiveData, } from './scrub';
+export { createSentryScrubbers } from './scrubbers';

package/dist/esm/nextjs.d.ts

@@ -0,0 +1,29 @@
+import * as Sentry from '@sentry/nextjs';
+import type { SentryScrubOptions } from './scrub';
+/** Re-exported SDK, for the rare escape hatch. Prefer the helper below. */
+export { Sentry };
+export declare const captureException: typeof Sentry.captureException;
+/**
+ * Options for `initSentry`. Used by all three Next.js runtimes
+ * (`sentry.server.config.ts`, `sentry.client.config.ts`, `sentry.edge.config.ts`).
+ */
+export interface NextSentryInitOptions {
+    /** DSN; defaults to `process.env.NEXT_PUBLIC_SENTRY_DSN` then `process.env.SENTRY_DSN`. */
+    dsn?: string;
+    /** Logical name shown as `server_name` (server/edge runtimes). */
+    serverName?: string;
+    /** Performance tracing sample rate. Defaults to `0.2`. */
+    tracesSampleRate?: number;
+    /** Overrides the resolved `environment`. */
+    environment?: string;
+    /** Scrubber options (extra keys/patterns, placeholder, …). */
+    scrub?: SentryScrubOptions;
+    /** Extra `@sentry/nextjs` init options, merged last so they can override defaults. */
+    init?: Parameters<typeof Sentry.init>[0];
+}
+/**
+ * Initialises `@sentry/nextjs` (server, client or edge) for the Vyro website with
+ * secret-scrubbing already wired in. Idempotent and a no-op when no DSN is configured.
+ */
+export declare function initSentry(options?: NextSentryInitOptions): void;
+//# sourceMappingURL=nextjs.d.ts.map

package/dist/esm/nextjs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nextjs.d.ts","sourceRoot":"","sources":["../../src/nextjs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAA;AAExC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AAGjD,2EAA2E;AAC3E,OAAO,EAAE,MAAM,EAAE,CAAA;AACjB,eAAO,MAAM,gBAAgB,gCAA0B,CAAA;AAEvD;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,2FAA2F;IAC3F,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,0DAA0D;IAC1D,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,kBAAkB,CAAA;IAC1B,sFAAsF;IACtF,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;CACzC;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,GAAE,qBAA0B,GAAG,IAAI,CAepE"}

package/dist/esm/nextjs.js

@@ -0,0 +1,26 @@
+import * as Sentry from '@sentry/nextjs';
+import { DEFAULT_TRACES_SAMPLE_RATE, resolveEnvironment } from './config';
+import { createSentryScrubbers } from './scrubbers';
+/** Re-exported SDK, for the rare escape hatch. Prefer the helper below. */
+export { Sentry };
+export const captureException = Sentry.captureException;
+/**
+ * Initialises `@sentry/nextjs` (server, client or edge) for the Vyro website with
+ * secret-scrubbing already wired in. Idempotent and a no-op when no DSN is configured.
+ */
+export function initSentry(options = {}) {
+    var _a, _b, _c, _d;
+    const dsn = (_a = options.dsn) !== null && _a !== void 0 ? _a : (typeof process !== 'undefined'
+        ? ((_b = process.env.NEXT_PUBLIC_SENTRY_DSN) !== null && _b !== void 0 ? _b : process.env.SENTRY_DSN)
+        : undefined);
+    if (!dsn)
+        return;
+    Sentry.init({
+        ...createSentryScrubbers(options.scrub),
+        dsn,
+        serverName: options.serverName,
+        environment: (_c = options.environment) !== null && _c !== void 0 ? _c : resolveEnvironment(),
+        tracesSampleRate: (_d = options.tracesSampleRate) !== null && _d !== void 0 ? _d : DEFAULT_TRACES_SAMPLE_RATE,
+        ...options.init,
+    });
+}

package/dist/esm/node.d.ts

@@ -0,0 +1,39 @@
+import * as Sentry from '@sentry/node';
+import type { SentryScrubOptions } from './scrub';
+/** Re-exported SDK, for the rare escape hatch. Prefer the helpers below. */
+export { Sentry };
+/**
+ * Express error handler (Sentry v8+). Call after your routes are registered so
+ * errors bubbling out of the app are reported. Replaces the removed
+ * `Sentry.Handlers.errorHandler()`.
+ */
+export declare const setupExpressErrorHandler: typeof Sentry.setupExpressErrorHandler;
+export interface NodeSentryInitOptions {
+    /** Logical service name — shown in Sentry as `server_name`. */
+    serverName: string;
+    /** DSN; defaults to `process.env.SENTRY_DSN`. When absent, init is skipped. */
+    dsn?: string;
+    /** Performance tracing sample rate. Defaults to `0.2`. */
+    tracesSampleRate?: number;
+    /** Overrides the resolved `environment`. */
+    environment?: string;
+    /** Scrubber options (extra keys/patterns, placeholder, …). */
+    scrub?: SentryScrubOptions;
+    /** Extra `@sentry/node` init options, merged last so they can override defaults. */
+    init?: Parameters<typeof Sentry.init>[0];
+}
+/**
+ * Initialises `@sentry/node` for a Vyro service with secret-scrubbing already wired
+ * in. Idempotent and a no-op when no DSN is configured.
+ */
+export declare function initSentry(options: NodeSentryInitOptions): void;
+export interface CaptureContext {
+    tags?: Record<string, string>;
+    extra?: Record<string, unknown>;
+}
+/**
+ * Reports an exception with optional tags/extra. No-op until `initSentry` has run
+ * with a DSN. Consolidates the helper previously copied into individual services.
+ */
+export declare function captureException(error: unknown, context?: CaptureContext): void;
+//# sourceMappingURL=node.d.ts.map

package/dist/esm/node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../src/node.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,cAAc,CAAA;AAEtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AAGjD,4EAA4E;AAC5E,OAAO,EAAE,MAAM,EAAE,CAAA;AACjB;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,wCAAkC,CAAA;AAIvE,MAAM,WAAW,qBAAqB;IACpC,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAA;IAClB,+EAA+E;IAC/E,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,0DAA0D;IAC1D,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,kBAAkB,CAAA;IAC1B,oFAAoF;IACpF,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;CACzC;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAgB/D;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAChC;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE,cAAc,GACvB,IAAI,CAeN"}

package/dist/esm/node.js

@@ -0,0 +1,57 @@
+import * as Sentry from '@sentry/node';
+import { DEFAULT_TRACES_SAMPLE_RATE, resolveEnvironment } from './config';
+import { createSentryScrubbers } from './scrubbers';
+/** Re-exported SDK, for the rare escape hatch. Prefer the helpers below. */
+export { Sentry };
+/**
+ * Express error handler (Sentry v8+). Call after your routes are registered so
+ * errors bubbling out of the app are reported. Replaces the removed
+ * `Sentry.Handlers.errorHandler()`.
+ */
+export const setupExpressErrorHandler = Sentry.setupExpressErrorHandler;
+let initialised = false;
+/**
+ * Initialises `@sentry/node` for a Vyro service with secret-scrubbing already wired
+ * in. Idempotent and a no-op when no DSN is configured.
+ */
+export function initSentry(options) {
+    var _a, _b, _c;
+    if (initialised)
+        return;
+    const dsn = (_a = options.dsn) !== null && _a !== void 0 ? _a : process.env.SENTRY_DSN;
+    if (!dsn) {
+        initialised = true;
+        return;
+    }
+    Sentry.init({
+        ...createSentryScrubbers(options.scrub),
+        dsn,
+        serverName: options.serverName,
+        environment: (_b = options.environment) !== null && _b !== void 0 ? _b : resolveEnvironment(),
+        tracesSampleRate: (_c = options.tracesSampleRate) !== null && _c !== void 0 ? _c : DEFAULT_TRACES_SAMPLE_RATE,
+        ...options.init,
+    });
+    initialised = true;
+}
+/**
+ * Reports an exception with optional tags/extra. No-op until `initSentry` has run
+ * with a DSN. Consolidates the helper previously copied into individual services.
+ */
+export function captureException(error, context) {
+    if (!initialised)
+        return;
+    if (!context) {
+        Sentry.captureException(error);
+        return;
+    }
+    Sentry.withScope((scope) => {
+        if (context.tags) {
+            for (const [key, value] of Object.entries(context.tags)) {
+                scope.setTag(key, value);
+            }
+        }
+        if (context.extra)
+            scope.setExtras(context.extra);
+        Sentry.captureException(error);
+    });
+}

package/dist/esm/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "module"
+}

package/dist/esm/scrub.d.ts

@@ -0,0 +1,36 @@
+/**
+ * SDK-agnostic Sentry scrubbing helpers.
+ *
+ * This package intentionally does NOT depend on any `@sentry/*` package so it can
+ * be dropped into services and frontends running different Sentry SDK versions
+ * (`@sentry/node`, `@sentry/react`, `@sentry/nextjs`, …). The public `beforeSend` /
+ * `beforeBreadcrumb` helpers use a generic identity signature (`<T>(x: T) => T`) so
+ * they satisfy every SDK's `beforeSend` / `beforeBreadcrumb` option type while
+ * operating on the event purely at runtime.
+ */
+/**
+ * Default set of key/header-name fragments that get redacted (case-insensitive).
+ * Matches `authorization`, `x-api-key` and every `api-key` / `apikey` / `api_key`
+ * variant, `x-hasura-admin-secret`, `access-token` / `refresh-token` / `token`,
+ * `secret`, `cookie`, `password` and `credential`.
+ */
+export declare const DEFAULT_SENSITIVE_KEY_PATTERN: RegExp;
+export interface SentryScrubOptions {
+    /** Extra regexes matched against key/header names (case-insensitive recommended). */
+    extraPatterns?: RegExp[];
+    /** Extra literal substrings matched against key/header names (case-insensitive). */
+    extraKeys?: string[];
+    /** Replace the whole default pattern instead of extending it. */
+    pattern?: RegExp;
+    /** Value written in place of a redacted entry. Defaults to `"[Filtered]"`. */
+    placeholder?: string;
+    /** Maximum object depth to walk. Defaults to `6`. */
+    maxDepth?: number;
+}
+/**
+ * Recursively redacts sensitive keys of `value` **in place**. Safe on any input:
+ * primitives and `null`/`undefined` are ignored, arrays are walked, and circular
+ * references are handled. Sensitive values are replaced with the placeholder.
+ */
+export declare const scrubSentrySensitiveData: (value: unknown, options?: SentryScrubOptions) => void;
+//# sourceMappingURL=scrub.d.ts.map

package/dist/esm/scrub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrub.d.ts","sourceRoot":"","sources":["../../src/scrub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,QACwF,CAAA;AAElI,MAAM,WAAW,kBAAkB;IACjC,qFAAqF;IACrF,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,oFAAoF;IACpF,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAkBD;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,UAC5B,OAAO,YACL,kBAAkB,KAC1B,IA2BF,CAAA"}

package/dist/esm/scrub.js

@@ -0,0 +1,66 @@
+/**
+ * SDK-agnostic Sentry scrubbing helpers.
+ *
+ * This package intentionally does NOT depend on any `@sentry/*` package so it can
+ * be dropped into services and frontends running different Sentry SDK versions
+ * (`@sentry/node`, `@sentry/react`, `@sentry/nextjs`, …). The public `beforeSend` /
+ * `beforeBreadcrumb` helpers use a generic identity signature (`<T>(x: T) => T`) so
+ * they satisfy every SDK's `beforeSend` / `beforeBreadcrumb` option type while
+ * operating on the event purely at runtime.
+ */
+/**
+ * Default set of key/header-name fragments that get redacted (case-insensitive).
+ * Matches `authorization`, `x-api-key` and every `api-key` / `apikey` / `api_key`
+ * variant, `x-hasura-admin-secret`, `access-token` / `refresh-token` / `token`,
+ * `secret`, `cookie`, `password` and `credential`.
+ */
+export const DEFAULT_SENSITIVE_KEY_PATTERN = /authorization|api[-_ ]?key|x-hasura-admin-secret|access[-_ ]?token|refresh[-_ ]?token|token|secret|cookie|password|credential/i;
+const buildMatcher = (options) => {
+    var _a, _b, _c;
+    const patterns = [
+        (_a = options.pattern) !== null && _a !== void 0 ? _a : DEFAULT_SENSITIVE_KEY_PATTERN,
+        ...((_b = options.extraPatterns) !== null && _b !== void 0 ? _b : []),
+    ];
+    const keys = ((_c = options.extraKeys) !== null && _c !== void 0 ? _c : []).map((key) => key.toLowerCase());
+    return (key) => {
+        if (patterns.some((pattern) => pattern.test(key)))
+            return true;
+        if (keys.length === 0)
+            return false;
+        const lower = key.toLowerCase();
+        return keys.some((needle) => lower.includes(needle));
+    };
+};
+/**
+ * Recursively redacts sensitive keys of `value` **in place**. Safe on any input:
+ * primitives and `null`/`undefined` are ignored, arrays are walked, and circular
+ * references are handled. Sensitive values are replaced with the placeholder.
+ */
+export const scrubSentrySensitiveData = (value, options = {}) => {
+    var _a, _b;
+    const placeholder = (_a = options.placeholder) !== null && _a !== void 0 ? _a : '[Filtered]';
+    const maxDepth = (_b = options.maxDepth) !== null && _b !== void 0 ? _b : 6;
+    const isSensitive = buildMatcher(options);
+    const seen = new WeakSet();
+    const walk = (node, depth) => {
+        if (!node || typeof node !== 'object' || depth > maxDepth)
+            return;
+        if (seen.has(node))
+            return;
+        seen.add(node);
+        if (Array.isArray(node)) {
+            for (const item of node)
+                walk(item, depth + 1);
+            return;
+        }
+        const record = node;
+        for (const key of Object.keys(record)) {
+            if (isSensitive(key)) {
+                record[key] = placeholder;
+                continue;
+            }
+            walk(record[key], depth + 1);
+        }
+    };
+    walk(value, 0);
+};

package/dist/esm/scrubbers.d.ts

@@ -0,0 +1,27 @@
+import { type SentryScrubOptions } from './scrub';
+/**
+ * A pair of scrubbing hooks. The signatures are generic identity functions so the
+ * object can be spread straight into any SDK's `Sentry.init({ ... })` regardless of
+ * its `Event` / `Breadcrumb` types.
+ */
+export interface SentryScrubbers {
+    beforeSend: <T>(event: T) => T;
+    beforeBreadcrumb: <T>(breadcrumb: T) => T;
+}
+/**
+ * Builds `beforeSend` / `beforeBreadcrumb` hooks that redact authorization headers,
+ * API keys, tokens and other secrets from outgoing Sentry events and breadcrumbs.
+ *
+ * @example
+ * ```ts
+ * import * as Sentry from "@sentry/node"
+ * import { createSentryScrubbers } from "@vyro-x/sentry"
+ *
+ * Sentry.init({
+ *   ...createSentryScrubbers(),
+ *   dsn: process.env.SENTRY_DSN,
+ * })
+ * ```
+ */
+export declare function createSentryScrubbers(options?: SentryScrubOptions): SentryScrubbers;
+//# sourceMappingURL=scrubbers.d.ts.map

package/dist/esm/scrubbers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrubbers.d.ts","sourceRoot":"","sources":["../../src/scrubbers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,kBAAkB,EAA4B,MAAM,SAAS,CAAA;AAE3E;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,CAAA;IAC9B,gBAAgB,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,KAAK,CAAC,CAAA;CAC1C;AA6BD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,kBAAuB,GAC/B,eAAe,CAWjB"}

package/dist/esm/scrubbers.js

@@ -0,0 +1,47 @@
+import { scrubSentrySensitiveData } from './scrub';
+const scrubEvent = (event, options) => {
+    if (!event || typeof event !== 'object')
+        return;
+    const record = event;
+    const request = record.request;
+    if (request) {
+        scrubSentrySensitiveData(request.headers, options);
+        scrubSentrySensitiveData(request.cookies, options);
+        scrubSentrySensitiveData(request.data, options);
+    }
+    scrubSentrySensitiveData(record.contexts, options);
+    scrubSentrySensitiveData(record.extra, options);
+    scrubSentrySensitiveData(record.tags, options);
+};
+const scrubBreadcrumb = (breadcrumb, options) => {
+    if (!breadcrumb || typeof breadcrumb !== 'object')
+        return;
+    scrubSentrySensitiveData(breadcrumb.data, options);
+};
+/**
+ * Builds `beforeSend` / `beforeBreadcrumb` hooks that redact authorization headers,
+ * API keys, tokens and other secrets from outgoing Sentry events and breadcrumbs.
+ *
+ * @example
+ * ```ts
+ * import * as Sentry from "@sentry/node"
+ * import { createSentryScrubbers } from "@vyro-x/sentry"
+ *
+ * Sentry.init({
+ *   ...createSentryScrubbers(),
+ *   dsn: process.env.SENTRY_DSN,
+ * })
+ * ```
+ */
+export function createSentryScrubbers(options = {}) {
+    return {
+        beforeSend: (event) => {
+            scrubEvent(event, options);
+            return event;
+        },
+        beforeBreadcrumb: (breadcrumb) => {
+            scrubBreadcrumb(breadcrumb, options);
+            return breadcrumb;
+        },
+    };
+}

package/package.json

@@ -0,0 +1,86 @@
+{
+  "name": "@vyro-x/sentry",
+  "version": "0.1.0",
+  "description": "Vyro's shared Sentry setup: environment-specific init wrappers with built-in secret scrubbing (authorization headers, API keys, tokens).",
+  "license": "UNLICENSED",
+  "main": "./dist/cjs/index.js",
+  "module": "./dist/esm/index.js",
+  "types": "./dist/cjs/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/esm/index.d.ts",
+        "default": "./dist/esm/index.js"
+      },
+      "require": {
+        "types": "./dist/cjs/index.d.ts",
+        "default": "./dist/cjs/index.js"
+      }
+    },
+    "./node": {
+      "import": {
+        "types": "./dist/esm/node.d.ts",
+        "default": "./dist/esm/node.js"
+      },
+      "require": {
+        "types": "./dist/cjs/node.d.ts",
+        "default": "./dist/cjs/node.js"
+      }
+    },
+    "./browser": {
+      "import": {
+        "types": "./dist/esm/browser.d.ts",
+        "default": "./dist/esm/browser.js"
+      },
+      "require": {
+        "types": "./dist/cjs/browser.d.ts",
+        "default": "./dist/cjs/browser.js"
+      }
+    },
+    "./nextjs": {
+      "import": {
+        "types": "./dist/esm/nextjs.d.ts",
+        "default": "./dist/esm/nextjs.js"
+      },
+      "require": {
+        "types": "./dist/cjs/nextjs.d.ts",
+        "default": "./dist/cjs/nextjs.js"
+      }
+    }
+  },
+  "typesVersions": {
+    "*": {
+      "node": ["dist/cjs/node.d.ts"],
+      "browser": ["dist/cjs/browser.d.ts"],
+      "nextjs": ["dist/cjs/nextjs.d.ts"]
+    }
+  },
+  "files": ["dist", "src"],
+  "keywords": ["sentry", "scrub", "redact", "pii", "security", "api-key"],
+  "scripts": {
+    "build": "tsc -p tsconfig.cjs.json && tsc -p tsconfig.esm.json && node scripts/finalize-dist.mjs",
+    "build:clean": "rm -rf dist",
+    "dev": "tsc -p tsconfig.esm.json --watch",
+    "test": "jest"
+  },
+  "peerDependencies": {
+    "@sentry/nextjs": "^9.9.0",
+    "@sentry/node": "^9.9.0",
+    "@sentry/react": "^9.9.0"
+  },
+  "peerDependenciesMeta": {
+    "@sentry/nextjs": { "optional": true },
+    "@sentry/node": { "optional": true },
+    "@sentry/react": { "optional": true }
+  },
+  "devDependencies": {
+    "@sentry/nextjs": "9.9.0",
+    "@sentry/node": "9.9.0",
+    "@sentry/react": "9.9.0",
+    "@types/jest": "^29.5.12",
+    "@types/node": "^24.0.0",
+    "jest": "^29.7.0",
+    "ts-jest": "^29.2.5",
+    "typescript": "5.4.3"
+  }
+}

package/src/browser.ts

@@ -0,0 +1,50 @@
+import * as Sentry from '@sentry/react'
+import { DEFAULT_TRACES_SAMPLE_RATE, resolveEnvironment } from './config'
+import type { SentryScrubOptions } from './scrub'
+import { createSentryScrubbers } from './scrubbers'
+
+/** Re-exported SDK, for the rare escape hatch. Prefer the helpers below. */
+export { Sentry }
+/** Sentry's React error boundary, re-exported so apps don't import `@sentry/react` directly. */
+export const ErrorBoundary = Sentry.ErrorBoundary
+export const captureException = Sentry.captureException
+
+let initialised = false
+
+export interface BrowserSentryInitOptions {
+  /**
+   * DSN. Browsers read it from a build-time env (e.g. `import.meta.env.VITE_SENTRY_DSN`
+   * or `process.env.NEXT_PUBLIC_SENTRY_DSN`), so pass it in explicitly. When absent,
+   * init is skipped.
+   */
+  dsn?: string
+  /** Performance tracing sample rate. Defaults to `0.2`. */
+  tracesSampleRate?: number
+  /** Overrides the resolved `environment`. */
+  environment?: string
+  /** Scrubber options (extra keys/patterns, placeholder, …). */
+  scrub?: SentryScrubOptions
+  /** Extra `@sentry/react` init options, merged last so they can override defaults. */
+  init?: Parameters<typeof Sentry.init>[0]
+}
+
+/**
+ * Initialises `@sentry/react` for a Vyro frontend with secret-scrubbing already wired
+ * in. Idempotent and a no-op when no DSN is provided.
+ */
+export function initSentry(options: BrowserSentryInitOptions = {}): void {
+  if (initialised) return
+  const dsn = options.dsn
+  if (!dsn) {
+    initialised = true
+    return
+  }
+  Sentry.init({
+    ...createSentryScrubbers(options.scrub),
+    dsn,
+    environment: options.environment ?? resolveEnvironment(),
+    tracesSampleRate: options.tracesSampleRate ?? DEFAULT_TRACES_SAMPLE_RATE,
+    ...options.init,
+  })
+  initialised = true
+}

package/src/config.ts

@@ -0,0 +1,11 @@
+/** Default performance tracing sample rate used across Vyro services. */
+export const DEFAULT_TRACES_SAMPLE_RATE = 0.2
+
+/**
+ * Resolves the Sentry `environment` from the runtime env, falling back to
+ * `NODE_ENV`. Returns `undefined` in environments without `process` (some browsers).
+ */
+export const resolveEnvironment = (): string | undefined => {
+  if (typeof process === 'undefined' || !process.env) return undefined
+  return process.env.SENTRY_ENVIRONMENT ?? process.env.NODE_ENV ?? undefined
+}

package/src/index.ts

@@ -0,0 +1,10 @@
+// SDK-agnostic surface. Import from `@vyro-x/sentry/node`, `/browser` or `/nextjs`
+// for an SDK-wired `initSentry`. This root entry has no `@sentry/*` dependency.
+
+export { DEFAULT_TRACES_SAMPLE_RATE, resolveEnvironment } from './config'
+export {
+  DEFAULT_SENSITIVE_KEY_PATTERN,
+  type SentryScrubOptions,
+  scrubSentrySensitiveData,
+} from './scrub'
+export { createSentryScrubbers, type SentryScrubbers } from './scrubbers'