feat(observability): add GlitchTip source map uploads for un-minified stack traces

- Enable sourcemap:true in vite.config.ts
- Add sentryVitePlugin: uploads maps to errors.libnovel.cc, deletes them post-upload so they never ship in the Docker image
- Wire release: PUBLIC_BUILD_VERSION in both hooks.client.ts and hooks.server.ts so events correlate to the correct artifact
- Add upload-sourcemaps CI job in release.yaml (parallel to docker-ui, uses GLITCHTIP_AUTH_TOKEN secret)

ui/package-lock.json

@@ -17,6 +17,7 @@
 				"pocketbase": "^0.26.8"
 			},
 			"devDependencies": {
+				"@sentry/vite-plugin": "^5.1.1",
 				"@sveltejs/adapter-auto": "^7.0.0",
 				"@sveltejs/adapter-node": "^5.5.4",
 				"@sveltejs/kit": "^2.50.2",

ui/package.json

@@ -12,6 +12,7 @@
 		"check:watch": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json --watch"
 	},
 	"devDependencies": {
+		"@sentry/vite-plugin": "^5.1.1",
 		"@sveltejs/adapter-auto": "^7.0.0",
 		"@sveltejs/adapter-node": "^5.5.4",
 		"@sveltejs/kit": "^2.50.2",

ui/src/hooks.client.ts

@@ -6,7 +6,10 @@ import { env } from '$env/dynamic/public';
 if (env.PUBLIC_GLITCHTIP_DSN) {
 	Sentry.init({
 		dsn: env.PUBLIC_GLITCHTIP_DSN,
-		tracesSampleRate: 0.1
+		tracesSampleRate: 0.1,
+		// Must match the release name used when uploading source maps in CI
+		// (BUILD_VERSION injected by Dockerfile as PUBLIC_BUILD_VERSION).
+		release: env.PUBLIC_BUILD_VERSION || undefined
 	});
 }
 

ui/src/hooks.server.ts

@@ -13,7 +13,10 @@ import { drain as drainPresignCache } from '$lib/server/presignCache';
 if (pubEnv.PUBLIC_GLITCHTIP_DSN) {
 	Sentry.init({
 		dsn: pubEnv.PUBLIC_GLITCHTIP_DSN,
-		tracesSampleRate: 0.1
+		tracesSampleRate: 0.1,
+		// Must match the release name used when uploading source maps in CI
+		// (BUILD_VERSION injected by Dockerfile as PUBLIC_BUILD_VERSION).
+		release: pubEnv.PUBLIC_BUILD_VERSION || undefined
 	});
 }
 

ui/vite.config.ts

@@ -1,9 +1,36 @@
 import { sveltekit } from '@sveltejs/kit/vite';
 import tailwindcss from '@tailwindcss/vite';
 import { defineConfig } from 'vite';
+import { sentryVitePlugin } from '@sentry/vite-plugin';
 
+// Source maps are always generated so that the CI pipeline can upload them to
+// GlitchTip after a release build. The sentryVitePlugin upload step is only
+// active when SENTRY_AUTH_TOKEN is present (i.e. in the release CI job).
 export default defineConfig({
-	plugins: [tailwindcss(), sveltekit()],
+	build: {
+		sourcemap: true
+	},
+	plugins: [
+		tailwindcss(),
+		sveltekit(),
+		sentryVitePlugin({
+			org: 'libnovel',
+			project: 'libnovel-ui',
+			url: 'https://errors.libnovel.cc/',
+			// Auth token injected by CI via SENTRY_AUTH_TOKEN env var.
+			// When the env var is absent the plugin is a no-op.
+			authToken: process.env.SENTRY_AUTH_TOKEN,
+			// Release name matches the Docker image tag (e.g. "1.2.3").
+			release: { name: process.env.BUILD_VERSION },
+			// Don't upload source maps in local dev or CI type-check jobs.
+			disable: !process.env.SENTRY_AUTH_TOKEN,
+			// Source maps are uploaded to GlitchTip; do not ship them in the
+			// production bundle served to browsers.
+			sourceMapsUploadOptions: {
+				filesToDeleteAfterUpload: ['./build/**/*.map']
+			}
+		})
+	],
 	ssr: {
 		// Force these packages to be bundled into the server output rather than
 		// treated as external requires. The production Docker image has no