review: dobby fixes on the GlitchTip PR

- docker-compose.yml glitchtip-init: invert the DEV_KEY rewrite
  condition. GlitchTip auto-creates a default ProjectKey on Project
  save, so get_or_create returns that auto-created key
  (key_created=False) and the `defaults={'public_key': DEV_KEY}`
  clause is ignored. The previous `if key_created and …` branch was
  unreachable, leaving the DSN pinned UUID never applied on fresh
  volumes.
- errorReporting.ts: drop `navigator.platform` (deprecated; Firefox
  returns "" already).
- CrashReport.svelte:
  - Wrap reportError() in try/catch so a synchronous SDK throw can't
    leave the button stuck on "Sending…".
  - Add `:focus-visible` outline on .crash-btn (WCAG 2.4.7).
  - Move the failed-state <p> into a stable role=status / aria-live
    live region so screen readers announce it (WCAG 4.1.3).
- fileshare/+page.svelte: move <svelte:boundary> above <FileInput>
  so a render-time error in FileInput is caught by CrashReport
  instead of crashing the whole page.

Author: rubenhensen

docker-compose.yml

@@ -223,13 +223,20 @@ services:
                 # full volume wipe. Without this, a fresh postgres volume
                 # regenerates the UUID and any hardcoded DSN in
                 # static/config.js silently goes stale.
+                #
+                # GlitchTip auto-creates a default ProjectKey when a
+                # Project is saved, so on a fresh volume the get_or_create
+                # below returns that auto-created key (key_created=False)
+                # and the defaults= clause is ignored. The `not key_created`
+                # branch catches that case and rewrites public_key to
+                # DEV_KEY.
                 import uuid
                 DEV_KEY = uuid.UUID('1d8ea2a49c904f079b116550780c0ece')
                 key, key_created = ProjectKey.objects.get_or_create(
                     project=project,
                     defaults={'public_key': DEV_KEY},
                 )
-                if key_created and key.public_key != DEV_KEY:
+                if not key_created and key.public_key != DEV_KEY:
                     key.public_key = DEV_KEY
                     key.save()
                 dsn = f'http://{key.public_key.hex}@localhost:8001/{project.id}'

src/lib/components/filesharing/CrashReport.svelte

@@ -16,11 +16,18 @@
     async function sendReport() {
         if (sendState === 'sending' || sendState === 'sent') return
         sendState = 'sending'
-        const ok = await reportError(error, {
-            appVersion: APP_VERSION,
-            uiLocale: $locale,
-        })
-        sendState = ok ? 'sent' : 'failed'
+        // Sentry's transport is fire-and-forget but the SDK can still
+        // throw synchronously on a malformed DSN or an internal init
+        // failure. Catch so the button isn't stuck on "Sending…" forever.
+        try {
+            const ok = await reportError(error, {
+                appVersion: APP_VERSION,
+                uiLocale: $locale,
+            })
+            sendState = ok ? 'sent' : 'failed'
+        } catch {
+            sendState = 'failed'
+        }
     }
 
     let reportingEnabled = isErrorReportingEnabled()
@@ -31,11 +38,17 @@
         <h3 class="crash-title">{$_('filesharing.crash.title')}</h3>
         <p class="crash-message">{$_('filesharing.crash.message')}</p>
 
-        {#if sendState === 'failed'}
-            <p class="crash-status error">
-                {$_('filesharing.crash.failed')}
-            </p>
-        {/if}
+        <!-- Stable live-region wrapper so screen readers announce the
+             failed-state message when it appears (WCAG 4.1.3 Status
+             Messages, Level AA). The wrapper exists from first render;
+             only its child swaps in, which is the announcement trigger. -->
+        <div role="status" aria-live="polite" class="crash-status-region">
+            {#if sendState === 'failed'}
+                <p class="crash-status error">
+                    {$_('filesharing.crash.failed')}
+                </p>
+            {/if}
+        </div>
 
         <div class="crash-actions">
             {#if reportingEnabled}
@@ -150,4 +163,9 @@
     .crash-btn:not(:disabled):hover {
         transform: translateY(-1px);
     }
+
+    .crash-btn:focus-visible {
+        outline: 2px solid var(--pg-text);
+        outline-offset: 2px;
+    }
 </style>

src/lib/errorReporting.ts

@@ -37,7 +37,6 @@ export async function reportError(
     }
     if (typeof navigator !== 'undefined') {
         ctx.userAgent = navigator.userAgent
-        ctx.platform = navigator.platform
         ctx.language = navigator.language
     }
 

src/routes/(app)/fileshare/+page.svelte

@@ -86,13 +86,13 @@
         encryptState.encryptionState === EncryptionState.Error}
     class:done={encryptState.encryptionState === EncryptionState.Done}
 >
-    <FileInput
-        bind:files={encryptState.files}
-        bind:percentages={encryptState.percentages}
-        bind:done={encryptState.done}
-        bind:stage={encryptState.encryptionState}
-    />
     <svelte:boundary>
+        <FileInput
+            bind:files={encryptState.files}
+            bind:percentages={encryptState.percentages}
+            bind:done={encryptState.done}
+            bind:stage={encryptState.encryptionState}
+        />
         {#if encryptState.encryptionState === EncryptionState.FileSelection || encryptState.encryptionState === EncryptionState.Sign || encryptState.encryptionState === EncryptionState.Encrypting}
             <div class="inputs-container">
                 <RecipientSelection