Consolidate Sentry initialization: single init, opt-in DSN, URL scrubbing

[bodhish]

Closes #16508

Stacked on #16514 (uses the Vitest harness for the new tests). GitHub will retarget this to develop when that merges.

What

• care.config.ts: sentry.dsn no longer falls back to a hardcoded external DSN — telemetry is now opt-in (REACT_SENTRY_DSN unset → Sentry disabled).
• src/index.tsx: removes the eager production Sentry.init (and the @sentry/browser import from the eager bundle). Previously both this and the Integrations/Sentry component initialized Sentry in production.
• src/Integrations/Sentry.tsx is now the single init, configured with sendDefaultPii: false and a beforeSend hook that strips query strings, normalizes UUID path segments to <id> in event/breadcrumb URLs, and drops request headers/cookies. The unset-DSN case is a quiet no-op instead of a console.error, since that's now a supported state.

Verification

• npm run typecheck → exit 0
• npm run test:unit → 8/8 (3 new scrubUrl tests + seed suite)
• grep -rn "Sentry.init" src/ care.config.ts → exactly one site
• No hardcoded DSN remains in the codebase

Deployment note

Deployments that relied on the old implicit default DSN stop reporting after this — set REACT_SENTRY_DSN explicitly where telemetry is wanted.

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 81b6ba10-4701-4e75-95a0-43f197579fb9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch issues/16508/sentry-init-consolidation

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

⚠️ Merge Checklist Incomplete

Thank you for your contribution! To help us review your PR efficiently, please complete the merge checklist in your PR description.

Your PR will be reviewed once you have marked the appropriate checklist items.

To update the checklist:

• Change - [ ] to - [x] for completed items
• Only check items that are relevant to your PR
• Leave items unchecked if they don't apply

The checklist helps ensure code quality, testing coverage, and documentation are properly addressed.

[cloudflare-workers-and-pages]

Deploying care-preview with    Cloudflare Pages

Latest commit:	41e49ed
Status:	✅  Deploy successful!
Preview URL:	https://595ce966.care-preview-a7w.pages.dev
Branch Preview URL:	https://issues-16508-sentry-init-con.care-preview-a7w.pages.dev

View logs

[greptile-apps]

Greptile Summary

This PR consolidates Sentry initialization to a single site (src/Integrations/Sentry.tsx), removes the hardcoded fallback DSN that was silently sending telemetry by default, and adds a beforeSend hook that scrubs query strings, normalizes UUID path segments to <id>, and strips request headers and cookies before events are sent.

• care.config.ts: sentry.dsn now resolves to undefined when REACT_SENTRY_DSN is unset, making telemetry fully opt-in; deployments that relied on the implicit default DSN will stop reporting until the env var is set explicitly.
• src/index.tsx: Removes the eager production Sentry.init with the hardcoded DSN and the @sentry/browser import from the main bundle, eliminating the double-init that could occur in production.
• src/Integrations/Sentry.tsx: New scrubUrl helper and beforeSend hook added with sendDefaultPii: false; the unset-DSN path is now a silent no-op instead of a console.error.
• src/Integrations/Sentry.test.ts: Four unit tests for scrubUrl covering query stripping, UUID replacement, the combined case, and clean pass-through URLs.

Confidence Score: 5/5

Safe to merge; the change correctly removes a hardcoded DSN and adds privacy-preserving URL scrubbing, with one breadcrumb-scrubbing detail worth verifying against the Sentry v9 runtime event shape.

The consolidation is clean, the opt-in DSN change is straightforward, and the beforeSend logic is well-structured. The only unverified detail is whether event.breadcrumbs in Sentry v9's beforeSend is a flat array or { values: Breadcrumb[] } — if it's the latter, the breadcrumb URL scrubbing is silently skipped rather than breaking anything, since Sentry catches errors in beforeSend. All other privacy scrubbing (URL query strings, headers, cookies) is unaffected.

The breadcrumb-scrubbing block in src/Integrations/Sentry.tsx (lines 32–43) is worth a quick sanity check against the actual beforeSend event shape in @sentry/browser v9 before merging.

Important Files Changed

Filename	Overview
care.config.ts	Removes the hardcoded fallback DSN from sentry.dsn, making telemetry opt-in via REACT_SENTRY_DSN env var
src/Integrations/Sentry.tsx	Adds scrubUrl helper and a beforeSend hook that strips query strings, replaces UUID segments, and deletes request headers/cookies; removes old console.error for unconfigured DSN
src/Integrations/Sentry.test.ts	New unit tests for scrubUrl covering query-strip, UUID replacement, combined case, and clean URLs — all four cases look correct
src/index.tsx	Removes the eager, production-only Sentry.init with the hardcoded DSN and the @sentry/browser eager import, leaving a single init site in the Sentry integration component

_{Reviews (2): Last reviewed commit: "test: add combined UUID-path + query-str..." | Re-trigger Greptile}

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: c84f51ddf6

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[github-actions]

Conflicts have been detected against the base branch. Please merge the base branch into your branch.
cc: @bodhish

See: https://docs.ohc.network/docs/contributing#how-to-resolve-merge-conflicts

[nihal467]

@copilot fix the merge conflict

[greptile-apps]

Too many files changed for review. (224 files found, 100 file limit)

Bypass the limit by tagging @greptile-apps to review.

[Copilot]

@copilot fix the merge conflict

Resolved the merge conflicts in commit 41e49ed:

• .github/workflows/linter.yml: Updated to Node 24, kept typecheck and test:unit steps, replaced unimported with knip.
• package.json: Kept vitest-based test:unit/typecheck scripts; adopted develop's newer package versions (vite ^8, typescript ^6, tsx ^4.22.3, etc.); removed ts-node, unimported, and vite-plugin-static-copy (dropped in develop).
• src/index.tsx: Kept the vite:preloadError handler from this PR; added the initApp() function from develop; removed the old hardcoded Sentry.init block.
• package-lock.json: Regenerated after resolving the above.