better-ship 0.22.0 → 0.23.0

package/dist/sentry/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","names":[],"sources":["../../src/infrastructure/sentry/server.ts"],"sourcesContent":["import * as Sentry from '@sentry/cloudflare'\n\nimport type { ObservabilityScope, ObservabilityService, ObservabilityUser } from '@/application'\nimport type { LoggerErrorHook } from '@/core'\n\n/** Application-owned deployment settings with the full Cloudflare SDK option contract. */\nexport type SentryServerOptions = Sentry.CloudflareOptions & {\n  readonly dsn: string\n  readonly environment: string\n  readonly enabled: boolean\n}\n\n/** Options for Workers, Durable Objects, and Workflows, ported from Typist and Porte. */\nexport function createSentryOptions(options: SentryServerOptions): Sentry.CloudflareOptions {\n  return {\n    enableLogs: true,\n    ...options,\n    dataCollection: {\n      userInfo: false,\n      httpBodies: [],\n      ...options.dataCollection,\n      genAI: { inputs: false, outputs: false, ...options.dataCollection?.genAI },\n    },\n  }\n}\n\n/** Register with setLoggerErrorHook once at startup; an explicit user applies only to this report. */\nexport function createSentryLoggerErrorHook(): LoggerErrorHook {\n  return ({ error, userId, attributes }) => {\n    if (userId !== undefined) {\n      Sentry.captureException(error, { extra: attributes, user: { id: userId } })\n      return\n    }\n    Sentry.captureException(error, { extra: attributes })\n  }\n}\n\n/** Identity and scope adapter from Typist and Porte; call inside Sentry's instrumented runtime. */\nexport class SentryObservabilityService implements ObservabilityService {\n  /** Attribute subsequent reports in the current isolation scope. */\n  setUser(user: ObservabilityUser): void {\n    Sentry.setUser(user)\n  }\n\n  /** Await work in a separate scope for each queue message or concurrent operation. */\n  async withIsolationScope<T>(callback: (scope: ObservabilityScope) => T | Promise<T>): Promise<T> {\n    return await Sentry.withIsolationScope(callback)\n  }\n}\n\nexport { Sentry }\n"],"mappings":";;;;AAaA,SAAgB,oBAAoB,SAAwD;CAC1F,OAAO;EACL,YAAY;EACZ,GAAG;EACH,gBAAgB;GACd,UAAU;GACV,YAAY,CAAC;GACb,GAAG,QAAQ;GACX,OAAO;IAAE,QAAQ;IAAO,SAAS;IAAO,GAAG,QAAQ,gBAAgB;GAAM;EAC3E;CACF;AACF;;AAGA,SAAgB,8BAA+C;CAC7D,QAAQ,EAAE,OAAO,QAAQ,iBAAiB;EACxC,IAAI,WAAW,QAAW;GACxB,OAAO,iBAAiB,OAAO;IAAE,OAAO;IAAY,MAAM,EAAE,IAAI,OAAO;GAAE,CAAC;GAC1E;EACF;EACA,OAAO,iBAAiB,OAAO,EAAE,OAAO,WAAW,CAAC;CACtD;AACF;;AAGA,IAAa,6BAAb,MAAwE;;CAEtE,QAAQ,MAA+B;EACrC,OAAO,QAAQ,IAAI;CACrB;;CAGA,MAAM,mBAAsB,UAAqE;EAC/F,OAAO,MAAM,OAAO,mBAAmB,QAAQ;CACjD;AACF"}
+{"version":3,"file":"server.js","names":[],"sources":["../../src/infrastructure/sentry/server.ts"],"sourcesContent":["import * as Sentry from '@sentry/cloudflare'\n\nimport type { ObservabilityScope, ObservabilityService, ObservabilityUser } from '@/application'\nimport type { LoggerErrorHook } from '@/core'\n\n/** Application-owned deployment settings with the full Cloudflare SDK option contract. */\nexport type SentryServerOptions = Sentry.CloudflareOptions & {\n  readonly dsn: string\n  readonly environment: string\n  readonly enabled: boolean\n}\n\n/** Pass application options to Workers, Durable Objects, and Workflows with the SDK defaults. */\nexport function createSentryOptions(options: SentryServerOptions): Sentry.CloudflareOptions {\n  return options\n}\n\n/** Register with setLoggerErrorHook once at startup; an explicit user applies only to this report. */\nexport function createSentryLoggerErrorHook(): LoggerErrorHook {\n  return ({ error, userId, attributes }) => {\n    if (userId !== undefined) {\n      Sentry.captureException(error, { extra: attributes, user: { id: userId } })\n      return\n    }\n    Sentry.captureException(error, { extra: attributes })\n  }\n}\n\n/** Identity and scope adapter from Typist and Porte; call inside Sentry's instrumented runtime. */\nexport class SentryObservabilityService implements ObservabilityService {\n  /** Attribute subsequent reports in the current isolation scope. */\n  setUser(user: ObservabilityUser): void {\n    Sentry.setUser({ id: user.id })\n  }\n\n  /** Await work in a separate scope for each queue message or concurrent operation. */\n  async withIsolationScope<T>(callback: (scope: ObservabilityScope) => T | Promise<T>): Promise<T> {\n    return await Sentry.withIsolationScope((scope) =>\n      callback({ setUser: (user) => scope.setUser({ id: user.id }) }),\n    )\n  }\n}\n\nexport { Sentry }\n"],"mappings":";;;;AAaA,SAAgB,oBAAoB,SAAwD;CAC1F,OAAO;AACT;;AAGA,SAAgB,8BAA+C;CAC7D,QAAQ,EAAE,OAAO,QAAQ,iBAAiB;EACxC,IAAI,WAAW,QAAW;GACxB,OAAO,iBAAiB,OAAO;IAAE,OAAO;IAAY,MAAM,EAAE,IAAI,OAAO;GAAE,CAAC;GAC1E;EACF;EACA,OAAO,iBAAiB,OAAO,EAAE,OAAO,WAAW,CAAC;CACtD;AACF;;AAGA,IAAa,6BAAb,MAAwE;;CAEtE,QAAQ,MAA+B;EACrC,OAAO,QAAQ,EAAE,IAAI,KAAK,GAAG,CAAC;CAChC;;CAGA,MAAM,mBAAsB,UAAqE;EAC/F,OAAO,MAAM,OAAO,oBAAoB,UACtC,SAAS,EAAE,UAAU,SAAS,MAAM,QAAQ,EAAE,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC,CAChE;CACF;AACF"}

package/dist/sentry/tanstack.d.ts

@@ -0,0 +1,11 @@
+import { ot as ErrorTable } from "../index-DUFS0SJ_.js";
+import { ErrorEvent, EventHint } from "@sentry/cloudflare";
+//#region src/infrastructure/sentry/tanstack.d.ts
+/**
+ * Create a Sentry beforeSend filter from the application's error table, as Suparelay does.
+ * Drop known payloads and Router control flow after the error middleware reports the original failure.
+ * Preserve real errors and unknown failures. Register the logger error hook before using this filter.
+ */
+export declare function createSentryErrorFilter<Entries>(errors: ErrorTable<Entries>): (event: ErrorEvent, hint: EventHint) => ErrorEvent | null;
+//#endregion
+//# sourceMappingURL=tanstack.d.ts.map

package/dist/sentry/tanstack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tanstack.d.ts","names":[],"sources":["../../src/infrastructure/sentry/tanstack.ts"],"mappings":";;;;;;;;wBAUgB,wBAAwB,SAAS,QAAQ,WAAW,YAAQ,OACxC,YAAU,MAAQ,cAAY"}

package/dist/sentry/tanstack.js

@@ -0,0 +1,20 @@
+import { isNotFound, isRedirect } from "@tanstack/react-router";
+
+//#region src/infrastructure/sentry/tanstack.ts
+/**
+* Create a Sentry beforeSend filter from the application's error table, as Suparelay does.
+* Drop known payloads and Router control flow after the error middleware reports the original failure.
+* Preserve real errors and unknown failures. Register the logger error hook before using this filter.
+*/
+function createSentryErrorFilter(errors) {
+	return function beforeSend(event, hint) {
+		const thrown = hint.originalException;
+		if (thrown instanceof Error) return event;
+		if (isRedirect(thrown) || isNotFound(thrown)) return null;
+		return errors.parse(thrown) === null ? event : null;
+	};
+}
+
+//#endregion
+export { createSentryErrorFilter };
+//# sourceMappingURL=tanstack.js.map

package/dist/sentry/tanstack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tanstack.js","names":[],"sources":["../../src/infrastructure/sentry/tanstack.ts"],"sourcesContent":["import type { ErrorEvent, EventHint } from '@sentry/cloudflare'\nimport { isNotFound, isRedirect } from '@tanstack/react-router'\n\nimport type { ErrorTable } from '@/core'\n\n/**\n * Create a Sentry beforeSend filter from the application's error table, as Suparelay does.\n * Drop known payloads and Router control flow after the error middleware reports the original failure.\n * Preserve real errors and unknown failures. Register the logger error hook before using this filter.\n */\nexport function createSentryErrorFilter<Entries>(errors: ErrorTable<Entries>) {\n  return function beforeSend(event: ErrorEvent, hint: EventHint): ErrorEvent | null {\n    const thrown = hint.originalException\n    if (thrown instanceof Error) return event\n    if (isRedirect(thrown) || isNotFound(thrown)) return null\n    return errors.parse(thrown) === null ? event : null\n  }\n}\n"],"mappings":";;;;;;;;AAUA,SAAgB,wBAAiC,QAA6B;CAC5E,OAAO,SAAS,WAAW,OAAmB,MAAoC;EAChF,MAAM,SAAS,KAAK;EACpB,IAAI,kBAAkB,OAAO,OAAO;EACpC,IAAI,WAAW,MAAM,KAAK,WAAW,MAAM,GAAG,OAAO;EACrD,OAAO,OAAO,MAAM,MAAM,MAAM,OAAO,QAAQ;CACjD;AACF"}

package/dist/sentry/vite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vite.d.ts","names":[],"sources":["../../src/infrastructure/sentry/vite.ts"],"mappings":";;;YAMY,oBAAoB;;;;;wBAMhB,oBACd,UAAS,oBACR,kBAAkB"}
+{"version":3,"file":"vite.d.ts","names":["sentryPlugin"],"sources":["../../src/infrastructure/sentry/vite.ts"],"mappings":";;;YAMY,oBAAoB;;;;;wBAMhB,oBACd,UAAS,oBACR,kBAAkBA"}

package/dist/stripe/payment-service.error.js

@@ -1,4 +1,4 @@
-import { nt as AppError } from "../core-BIas38R0.js";
+import { nt as AppError } from "../core-BiN6S_cm.js";
 import Stripe from "stripe";
 
 //#region src/infrastructure/stripe/payment-service.error.ts

package/dist/stripe/payment-webhook.js

@@ -1,4 +1,4 @@
-import { t as WebhookVerificationError } from "../webhook-verification-CEUARY9X.js";
+import { t as WebhookVerificationError } from "../webhook-verification-lWso44-q.js";
 import Stripe from "stripe";
 
 //#region src/infrastructure/stripe/payment-webhook.ts

package/dist/tanstack.js

@@ -1,4 +1,4 @@
-import { H as StaleSessionError, R as ValidationError, W as AuthenticationError, nt as AppError, r as createLogger } from "./core-BIas38R0.js";
+import { H as StaleSessionError, R as ValidationError, W as AuthenticationError, nt as AppError, r as createLogger } from "./core-BiN6S_cm.js";
 import { z } from "zod";
 import { getReasonPhrase } from "http-status-codes";
 import { isNotFound, isRedirect, redirect } from "@tanstack/react-router";

package/dist/{webhook-verification-CEUARY9X.js → webhook-verification-lWso44-q.js}

@@ -1,4 +1,4 @@
-import { nt as AppError } from "./core-BIas38R0.js";
+import { nt as AppError } from "./core-BiN6S_cm.js";
 
 //#region src/infrastructure/http/webhook-verification.ts
 /** A webhook cannot be trusted or parsed. The HTTP handler logs the rejection once. */
@@ -15,4 +15,4 @@ var WebhookVerificationError = class extends AppError {
 
 //#endregion
 export { WebhookVerificationError as t };
-//# sourceMappingURL=webhook-verification-CEUARY9X.js.map
+//# sourceMappingURL=webhook-verification-lWso44-q.js.map

package/dist/{webhook-verification-CEUARY9X.js.map → webhook-verification-lWso44-q.js.map}

@@ -1 +1 @@
-{"version":3,"file":"webhook-verification-CEUARY9X.js","names":[],"sources":["../src/infrastructure/http/webhook-verification.ts"],"sourcesContent":["import { AppError } from '@/core'\n\n/** A webhook cannot be trusted or parsed. The HTTP handler logs the rejection once. */\nexport class WebhookVerificationError extends AppError {\n  readonly _tag = 'WebhookVerificationError'\n  readonly classification = 'terminal'\n\n  /** Keep secrets and payload details out of the public message. */\n  constructor(\n    readonly reason: 'missing_headers' | 'invalid_signature' | 'invalid_payload',\n    cause?: unknown,\n  ) {\n    super(`Webhook rejected: ${reason}`, { cause })\n  }\n}\n\n/** The provider owns signature verification, timestamp tolerance, and payload parsing. */\nexport interface WebhookVerifier<Verified> {\n  /**\n   * Verify the exact body before parsing it. Return null for an ignored webhook.\n   * @throws WebhookVerificationError when the request cannot be trusted or parsed.\n   */\n  verify(body: string, headers: Headers): Promise<Verified | null>\n}\n"],"mappings":";;;;AAGA,IAAa,2BAAb,cAA8C,SAAS;CAM1C;CALX,AAAS,OAAO;CAChB,AAAS,iBAAiB;;CAG1B,YACE,AAAS,QACT,OACA;EACA,MAAM,qBAAqB,UAAU,EAAE,MAAM,CAAC;EAHrC;CAIX;AACF"}
+{"version":3,"file":"webhook-verification-lWso44-q.js","names":[],"sources":["../src/infrastructure/http/webhook-verification.ts"],"sourcesContent":["import { AppError } from '@/core'\n\n/** A webhook cannot be trusted or parsed. The HTTP handler logs the rejection once. */\nexport class WebhookVerificationError extends AppError {\n  readonly _tag = 'WebhookVerificationError'\n  readonly classification = 'terminal'\n\n  /** Keep secrets and payload details out of the public message. */\n  constructor(\n    readonly reason: 'missing_headers' | 'invalid_signature' | 'invalid_payload',\n    cause?: unknown,\n  ) {\n    super(`Webhook rejected: ${reason}`, { cause })\n  }\n}\n\n/** The provider owns signature verification, timestamp tolerance, and payload parsing. */\nexport interface WebhookVerifier<Verified> {\n  /**\n   * Verify the exact body before parsing it. Return null for an ignored webhook.\n   * @throws WebhookVerificationError when the request cannot be trusted or parsed.\n   */\n  verify(body: string, headers: Headers): Promise<Verified | null>\n}\n"],"mappings":";;;;AAGA,IAAa,2BAAb,cAA8C,SAAS;CAM1C;CALX,AAAS,OAAO;CAChB,AAAS,iBAAiB;;CAG1B,YACE,AAAS,QACT,OACA;EACA,MAAM,qBAAqB,UAAU,EAAE,MAAM,CAAC;EAHrC;CAIX;AACF"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://www.schemastore.org/package.json",
   "name": "better-ship",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "description": "Foundation for applications on Cloudflare Workers: logger, errors, message bus, infrastructure adapters, and UI primitives",
   "license": "Apache-2.0",
   "repository": {
@@ -43,6 +43,7 @@
     "./resend": "./dist/resend.js",
     "./sentry/client": "./dist/sentry/client.js",
     "./sentry/server": "./dist/sentry/server.js",
+    "./sentry/tanstack": "./dist/sentry/tanstack.js",
     "./sentry/vite": "./dist/sentry/vite.js",
     "./stripe/client": "./dist/stripe/client.js",
     "./stripe/event-map": "./dist/stripe/event-map.js",
@@ -65,52 +66,52 @@
     "better-result": "^3.0.1",
     "http-status-codes": "^2.3.0",
     "uuid": "^14.0.2",
-    "zod": "^4.6.4"
+    "zod": "^4.6.5"
   },
   "devDependencies": {
-    "@better-auth/stripe": "^1.7.4",
-    "@cloudflare/vitest-plugin": "^1.1.8",
-    "@cloudflare/workers-types": "5.20260911.1",
-    "@posthog/react": "^1.10.6",
-    "@sentry/cloudflare": "^10.74.0",
-    "@sentry/tanstackstart-react": "^10.74.0",
-    "@tanstack/react-router": "^1.170.35",
-    "@tanstack/react-start": "^1.168.52",
-    "@tanstack/start-client-core": "^1.170.29",
-    "@tanstack/start-storage-context": "^1.167.31",
-    "@types/node": "^26.5.1",
+    "@better-auth/stripe": "^1.7.6",
+    "@cloudflare/vitest-plugin": "^1.2.8",
+    "@cloudflare/workers-types": "5.20260926.1",
+    "@posthog/react": "^1.11.2",
+    "@sentry/cloudflare": "^11.0.0",
+    "@sentry/tanstackstart-react": "^11.0.0",
+    "@tanstack/react-router": "^1.170.39",
+    "@tanstack/react-start": "^1.168.58",
+    "@tanstack/start-client-core": "^1.170.32",
+    "@tanstack/start-storage-context": "^1.167.34",
+    "@types/node": "^26.6.3",
     "@types/react": "^19.3.0",
     "@vitest/browser-playwright": "^4.1.11",
-    "auth": "^1.7.4",
-    "better-auth": "^1.7.4",
-    "drizzle-kit": "^0.31.10",
-    "drizzle-orm": "^0.45.2",
+    "auth": "^1.7.6",
+    "better-auth": "^1.7.6",
+    "drizzle-kit": "^0.31.11",
+    "drizzle-orm": "^0.45.3",
     "playwright": "^1.63.0",
     "postgres": "^3.4.9",
-    "posthog-js": "^1.430.3",
-    "posthog-node": "^5.52.1",
+    "posthog-js": "^1.434.14",
+    "posthog-node": "^5.54.1",
     "react": "^19.3.0",
-    "resend": "^6.28.0",
+    "resend": "^6.30.0",
     "standardwebhooks": "^1.1.1",
     "stripe": "^22.6.2",
     "tsdown": "^0.23.0",
     "typescript": "^7.0.2",
     "vitest": "^4.1.11",
-    "wrangler": "^4.131.1"
+    "wrangler": "^4.141.0"
   },
   "peerDependencies": {
-    "@better-auth/stripe": "^1.7.4",
-    "@posthog/react": "^1.10.6",
-    "@sentry/cloudflare": "^10.74.0",
-    "@sentry/tanstackstart-react": "^10.74.0",
-    "@tanstack/react-router": "^1.170.35",
-    "@tanstack/react-start": "^1.168.52",
-    "better-auth": "^1.7.4",
-    "drizzle-orm": "^0.45.2",
-    "posthog-js": "^1.430.3",
-    "posthog-node": "^5.52.1",
+    "@better-auth/stripe": "^1.7.6",
+    "@posthog/react": "^1.11.2",
+    "@sentry/cloudflare": "^11.0.0",
+    "@sentry/tanstackstart-react": "^11.0.0",
+    "@tanstack/react-router": "^1.170.39",
+    "@tanstack/react-start": "^1.168.58",
+    "better-auth": "^1.7.6",
+    "drizzle-orm": "^0.45.3",
+    "posthog-js": "^1.434.14",
+    "posthog-node": "^5.54.1",
     "react": "^19.3.0",
-    "resend": "^6.28.0",
+    "resend": "^6.30.0",
     "stripe": "^22.6.2"
   },
   "peerDependenciesMeta": {

package/src/core/transport-classification.ts

@@ -1,3 +1,28 @@
+/**
+ * Exact `TypeError` messages that `fetch` rejects with when the network fails.
+ *
+ * Ported from is-network-error 1.3.2. The Safari stack check is dropped, so a failed `import()` in Safari also matches.
+ * Source: https://github.com/sindresorhus/is-network-error/blob/57de24d4095c39ff19b75f35be846d4e47f1b687/index.js
+ */
+const FETCH_NETWORK_ERROR_MESSAGES = new Set([
+  'Failed to fetch', // Chrome
+  'Load failed', // Safari
+  'network error', // Chrome
+  'NetworkError when attempting to fetch resource.', // Firefox
+  'The Internet connection appears to be offline.', // Safari 16
+  'Network request failed', // cross-fetch
+  'fetch failed', // undici (Node.js)
+  'terminated', // undici (Node.js)
+  ' A network error occurred.', // Bun
+  'Network connection lost', // Cloudflare Workers
+])
+
+/** Messages that Chrome and Safari may end with the request hostname, such as `Failed to fetch (example.com)`. */
+const FETCH_NETWORK_ERROR_HOSTNAME_PREFIXES = ['Failed to fetch (', 'Load failed (']
+
+/** Deno starts its network error message with this text. */
+const DENO_NETWORK_ERROR_PREFIX = 'error sending request for url'
+
 /**
  * Messages that the platform-neutral transports raise for a failure that may pass.
  *
@@ -20,9 +45,22 @@ export function isAbortError(cause: unknown): boolean {
   return cause instanceof Error && cause.name === 'AbortError'
 }
 
+/** Match the `TypeError` that browser and server `fetch` raise when the network fails. */
+function isFetchNetworkError(cause: Error): boolean {
+  if (cause.name !== 'TypeError') return false
+  const { message } = cause
+  if (FETCH_NETWORK_ERROR_MESSAGES.has(message)) return true
+  if (message.startsWith(DENO_NETWORK_ERROR_PREFIX)) return true
+  return (
+    message.endsWith(')') &&
+    FETCH_NETWORK_ERROR_HOSTNAME_PREFIXES.some((prefix) => message.startsWith(prefix))
+  )
+}
+
 /** Match known transient transport messages while excluding explicit cancellation. */
 export function isTransientTransportError(cause: unknown): boolean {
   if (!(cause instanceof Error) || isAbortError(cause)) return false
+  if (isFetchNetworkError(cause)) return true
   const message = cause.message.toLowerCase()
   return TRANSIENT_TRANSPORT_PATTERNS.some((pattern) => pattern.test(message))
 }

package/src/infrastructure/sentry/client.ts

@@ -10,18 +10,14 @@ export type SentryClientOptions = Sentry.BrowserOptions & {
   readonly enabled: boolean
 }
 
-/** Privacy defaults from Porte and browser noise filtering from Typist; explicit SDK options take precedence. */
+/** Filter known DOM errors and use SDK collection defaults; application options take precedence. */
 export function createSentryClientOptions(options: SentryClientOptions): Sentry.BrowserOptions {
   return {
-    enableLogs: true,
-    ignoreErrors: [/Failed to execute '(insertBefore|removeChild)' on 'Node'/],
+    ignoreErrors: [
+      /^NotFoundError: Failed to execute 'removeChild' on 'Node': The node to be removed is not a child of this node\.$/,
+      /^NotFoundError: Failed to execute 'insertBefore' on 'Node': The node before which the new node is to be inserted is not a child of this node\.$/,
+    ],
     ...options,
-    dataCollection: {
-      userInfo: false,
-      httpBodies: [],
-      ...options.dataCollection,
-      genAI: { inputs: false, outputs: false, ...options.dataCollection?.genAI },
-    },
   }
 }
 

package/src/infrastructure/sentry/server.ts

@@ -10,18 +10,9 @@ export type SentryServerOptions = Sentry.CloudflareOptions & {
   readonly enabled: boolean
 }
 
-/** Options for Workers, Durable Objects, and Workflows, ported from Typist and Porte. */
+/** Pass application options to Workers, Durable Objects, and Workflows with the SDK defaults. */
 export function createSentryOptions(options: SentryServerOptions): Sentry.CloudflareOptions {
-  return {
-    enableLogs: true,
-    ...options,
-    dataCollection: {
-      userInfo: false,
-      httpBodies: [],
-      ...options.dataCollection,
-      genAI: { inputs: false, outputs: false, ...options.dataCollection?.genAI },
-    },
-  }
+  return options
 }
 
 /** Register with setLoggerErrorHook once at startup; an explicit user applies only to this report. */
@@ -39,12 +30,14 @@ export function createSentryLoggerErrorHook(): LoggerErrorHook {
 export class SentryObservabilityService implements ObservabilityService {
   /** Attribute subsequent reports in the current isolation scope. */
   setUser(user: ObservabilityUser): void {
-    Sentry.setUser(user)
+    Sentry.setUser({ id: user.id })
   }
 
   /** Await work in a separate scope for each queue message or concurrent operation. */
   async withIsolationScope<T>(callback: (scope: ObservabilityScope) => T | Promise<T>): Promise<T> {
-    return await Sentry.withIsolationScope(callback)
+    return await Sentry.withIsolationScope((scope) =>
+      callback({ setUser: (user) => scope.setUser({ id: user.id }) }),
+    )
   }
 }
 

package/src/infrastructure/sentry/tanstack.ts

@@ -0,0 +1,18 @@
+import type { ErrorEvent, EventHint } from '@sentry/cloudflare'
+import { isNotFound, isRedirect } from '@tanstack/react-router'
+
+import type { ErrorTable } from '@/core'
+
+/**
+ * Create a Sentry beforeSend filter from the application's error table, as Suparelay does.
+ * Drop known payloads and Router control flow after the error middleware reports the original failure.
+ * Preserve real errors and unknown failures. Register the logger error hook before using this filter.
+ */
+export function createSentryErrorFilter<Entries>(errors: ErrorTable<Entries>) {
+  return function beforeSend(event: ErrorEvent, hint: EventHint): ErrorEvent | null {
+    const thrown = hint.originalException
+    if (thrown instanceof Error) return event
+    if (isRedirect(thrown) || isNotFound(thrown)) return null
+    return errors.parse(thrown) === null ? event : null
+  }
+}