feat(sentry): land Phase 3 — backend loader + RPC tracing

[gmaclennan]

Wire the Node-backend into Sentry: argv-driven loader spawns Sentry
before importing the app, RPC method-level errors capture with full
stack traces, and JS-side IPC spans propagate sentry-trace/baggage
to the backend so both halves of an RPC land on the same trace.

Backend

• New loader.mjs spawn target parses --sentryDsn/etc and conditionally
  inits @sentry/node before dynamically importing ./index.js. Required
  ordering for OpenTelemetry's import-in-the-middle hook to instrument
  modules.
• rollup.config.ts now emits multi-entry output (loader/index/importHook
  /lib/register) with a code-split chunks/ subdir for @sentry/node and
  transitive deps. .js extension forced for importHook/lib/register so
  import-in-the-middle's hardcoded relative paths resolve.
• New rollup-plugin-import-hook.mjs rewrites
  module.register('import-in-the-middle/hook.mjs', ...) to point at
  the bundled ./importHook.js. Ported from comapeo-mobile.
• relocate-sourcemaps walks subdirs recursively (lib/, chunks/) and
  no-ops gracefully on auto-emitted helper chunks that bypass
  captureDebugIdsPlugin.
• index.js reads globalThis.__comapeoSentry / __comapeoSentryConfig
  set by the loader; wires handleFatal to Sentry.captureException
  (with source:native tag for FGS-forwarded errors) and a 100ms flush
  before process.exit. ComapeoRpcServer accepts {sentry,rpcArgsBytes}
  and registers an onRequestHook that wraps each RPC in a transaction
  with continueTrace from request metadata. rpc.args is gated behind
  an opt-in byte cap (PII risk).

JS/RN module

• sentry-internal no longer statically imports @sentry/react-native.
  The sub-export now calls registerAdapter(Sentry) at module load,
  so consumers without the optional peer dep don't break when the
  main barrel imports sentry-internal for RPC tracing.
• ComapeoCoreModule.ts registers an onRequestHook on the
  createMapeoClient call. Inert when no adapter is registered or no
  active root span; otherwise startSpan + getTraceData populates
  request.metadata for the backend hook to continueTrace.
• SentryAdapter gains getTraceData (lives on @sentry/core, not
  re-exported by RN@7); the sub-export attaches it at registration.

Native

• Android NodeJSService takes an optional SentryConfig and passes
  it to loader.mjs as --sentry* flags via buildBackendArgs.
  ComapeoCoreService threads the manifest-loaded config through.
  NODEJS_PROJECT_INDEX_FILENAME → loader.mjs.
• iOS NodeJSService gains a sentryConfig parameter (defaults to
  SentryConfig.loadFromMainBundle()) and a buildSentryArgs helper.
  AppLifecycleDelegate resolves loader.mjs from the app bundle.

The capture-application-data toggle (Phase 5) is wired through the
loader's tracesSampleRate gating but always reads as off until the
SharedPreferences/UserDefaults store and JS API land.

[Copilot]

Pull request overview

This PR lands “Phase 3” of the Sentry integration by bootstrapping Sentry inside the embedded Node backend before app imports (to enable OTel instrumentation), adding end-to-end RPC tracing with trace header propagation across RN ↔ Node, and introducing persisted user privacy toggles (diagnosticsEnabled, captureApplicationData) that gate initialization and data capture.

Changes:

• Add a Node backend loader.mjs which parses --sentry* argv, initializes @sentry/node (with an offline-forwarding transport to native), and then dynamically imports index.js.
• Implement distributed tracing for RPCs: RN injects sentry-trace/baggage into request metadata; backend continues the trace and wraps RPCs in Sentry spans/transactions.
• Add native+JS plumbing for persisted Sentry preferences (incl. outbox wipe on opt-out) and update build tooling/rollup output to support multi-entry bundling and sourcemap relocation.

Reviewed changes

Copilot reviewed 44 out of 46 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
src/sentry.ts	Introduces initSentry() ownership, preference gating, adapter registration, and host extension hooks.
src/sentry-internal.ts	Converts to a “registered adapter” holder to avoid forcing @sentry/react-native as a hard dependency for non-Sentry consumers.
src/ComapeoCoreModule.ts	Adds native config/preference readers and injects trace headers into RPC requests via onRequestHook.
src/tests/sentry.test.js	Unit tests for initSentry() merge/gating/throw behavior with mocked Sentry + native module.
README.md	Updates Sentry documentation (but currently still describes host-managed Sentry.init in the new section).
package-lock.json	Adds bin entry and bumps @sentry/react-native peer range to ^7.13.0.
ios/Tests/SentryConfigTests.swift	Adds coverage for diagnosticsEnabledDefault parsing.
ios/Tests/ControlFrameTests.swift	Adds tests for sentry-event and sentry-envelope control frames.
ios/Tests/ComapeoPrefsTests.swift	Adds unit tests for persisted Sentry prefs + outbox wipe semantics.
ios/SentryNativeBridge.swift	Adds SPI-based event decode/capture + envelope capture + trace header extraction.
ios/SentryConfig.swift	Adds diagnosticsEnabledDefault and toSentryInitMap() for JS-exposed init options.
ios/Package.swift	Includes new ComapeoPrefs.swift in SwiftPM sources.
ios/NodeJSService.swift	Threads Sentry config into loader argv; adds node-spawn boot span and Sentry frame handling.
ios/ControlFrame.swift	Adds parsing for sentry-event and sentry-envelope frames.
ios/ComapeoPrefs.swift	Implements persisted prefs + outbox wipe on iOS.
ios/ComapeoCoreModule.swift	Exposes sentryConfig + sentryPreferences constants and toggle setters to JS.
ios/AppLifecycleDelegate.swift	Resolves loader entrypoint and gates backend Sentry argv on diagnosticsEnabled.
docs/sentry-integration-plan.md	Updates plan status/details for Phase 3/10 and adds three-tier privacy model spec.
docs/ARCHITECTURE.md	Documents build-time config flow and tags/spans (currently still references host Sentry.init spread).
backend/rollup.config.ts	Switches to multi-entry build (loader/index/importHook) and copies iitm CJS register for correct ESM/CJS interop.
backend/rollup-plugins/rollup-plugin-sentry-debug-ids.js	Makes sourcemap relocation recursive and resilient to chunks without debug IDs.
backend/rollup-plugins/rollup-plugin-import-hook.mjs	Rewrites iitm hook registration to point at the bundled hook entry.
backend/package.json	Adds @sentry/node, @sentry/core, and import-in-the-middle.
backend/package-lock.json	Locks new backend dependencies pulled in by Sentry/Otel and iitm.
backend/loader.mjs	New backend spawn target: argv parsing, Sentry init, offline forwarding transport, boot spans, and dynamic import of index.js.
backend/lib/simple-rpc.js	Buffers Sentry frames until first client connects (pre-client boot window).
backend/lib/comapeo-rpc.js	Adds server-side RPC span/transaction wrapper with continueTrace and optional arg capture cap.
backend/index.js	Reads Sentry globals from loader, wires fatal capture+flush, forwards Sentry frames to native, and wraps boot phases in spans.
babel.config.cjs	Adds root Babel config for Jest to handle TS imports in tests.
apps/example/index.ts	Migrates example app to call initSentry() instead of Sentry.init directly.
apps/example/app.json	Enables tracesSampleRate via plugin config for the example app.
app.plugin.js	Adds diagnosticsEnabledDefault plumbing for Android/iOS config outputs.
android/src/test/java/com/comapeo/core/SentryFgsBridgeImplTest.kt	Adds test for boot.kind tag behavior on boot transaction.
android/src/test/java/com/comapeo/core/SentryConfigTest.kt	Adds diagnosticsEnabledDefault parse tests.
android/src/test/java/com/comapeo/core/ControlFrameTest.kt	Adds tests for sentry-event/sentry-envelope parsing.
android/src/test/java/com/comapeo/core/ComapeoPrefsTest.kt	Adds JVM unit tests for prefs defaults, persistence, and outbox wipe.
android/src/main/java/com/comapeo/core/SentryTags.kt	Adds boot.kind tag and values.
android/src/main/java/com/comapeo/core/SentryFgsBridgeImpl.kt	Adds backdated boot timestamps, trace header extraction, and Node event/envelope capture helpers.
android/src/main/java/com/comapeo/core/SentryFgsBridge.kt	Exposes new boot timing args, trace header getter, and capture helpers while keeping Sentry imports behind the guard.
android/src/main/java/com/comapeo/core/SentryConfig.kt	Adds diagnosticsEnabledDefault and toSentryInitMap() for JS constants.
android/src/main/java/com/comapeo/core/NodeJSService.kt	Switches spawn target to loader.mjs, forwards --sentry* argv, adds boot spans + trace propagation, and handles Sentry frames.
android/src/main/java/com/comapeo/core/ControlFrame.kt	Adds Sentry frame variants and parsers.
android/src/main/java/com/comapeo/core/ComapeoPrefs.kt	Adds persisted Sentry prefs with restart-to-activate semantics and outbox wiping.
android/src/main/java/com/comapeo/core/ComapeoCoreService.kt	Gates FGS Sentry init + backend argv forwarding on persisted diagnosticsEnabled.
android/src/main/java/com/comapeo/core/ComapeoCoreReactActivityLifecycleListener.kt	Stamps elapsedRealtime into the service intent for backdated boot spans.
android/src/main/java/com/comapeo/core/ComapeoCoreModule.kt	Exposes sentryConfig + sentryPreferences constants and toggle setters; ignores Node Sentry frames in main process.

Files not reviewed (1)

• backend/package-lock.json: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.