fix: telemetry hardening — nil guard, bounded queue, logger-to-Sentry wiring, source maps (#2477)

* docs: add telemetry hardening design spec (#41-#45)

Design for five telemetry issues: CaptureError nil guard, bounded
deferredMessages, FormData Blob validation, logger-to-Sentry wiring,
and CI source map uploads. Grouped into three independent PRs.

* docs: add telemetry hardening implementation plan

9-task plan across 3 PRs: backend telemetry hardening (nil guard,
bounded deferred queue), frontend telemetry wiring (Blob validation,
logger-to-Sentry injection), and CI source map uploads.

* fix: add nil guard to CaptureError to prevent panic

* fix: cap deferred message queue at 100 to prevent unbounded growth

* fix: drain deferred message queue when Sentry is disabled

* fix: remove incorrect t.Parallel from global-state-mutating test

TestCaptureError_NilError calls EnableTestMode/DisableTestMode which
mutate package-level atomics. Tests mutating global state must not
use t.Parallel per project testing guidelines.

* fix: count Blob size in FormData validation

* feat: add captureError function to frontend Sentry module

* feat: wire logger.error() to Sentry via dependency injection

* fix: align frontend Sentry release format with backend

* feat: enable hidden source map generation for Sentry

* ci: add source map upload to Sentry in release and nightly builds

* fix: clear stale Sentry logger hook on re-init and failed init

Clear setSentryCaptureError(null) before Sentry init and in the
.catch handler to prevent stale forwarding after opt-out or failure.
Add clarifying comment on args.length > 2 threshold in error() method.

---------

Co-authored-by: tphakala <tphakala@users.noreply.github.com>

Author: tphakala

.github/workflows/nightly-build.yml

@@ -81,20 +81,32 @@ jobs:
           PUPPETEER_SKIP_DOWNLOAD: true
           PUPPETEER_SKIP_CHROMIUM_DOWNLOAD: true
 
+      - name: Upload source maps to Sentry
+        if: matrix.goos == 'linux' && matrix.goarch == 'amd64'
+        env:
+          SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
+          SENTRY_ORG: tphakala
+          SENTRY_PROJECT: birdnet-go
+        run: |
+          npx @sentry/cli sourcemaps upload \
+            --release "birdnet-go@${{ env.BUILD_VERSION }}" \
+            --url-prefix '~/ui/assets/' \
+            frontend/dist/
+
       - name: Create Release Artifacts
         run: |
           # Create artifacts directory
           mkdir -p artifacts
-          
+
           # Set binary name based on OS
           BINARY_NAME=birdnet-go
           if [ "${{ matrix.goos }}" = "windows" ]; then
             BINARY_NAME=birdnet-go.exe
           fi
-          
+
           # Copy binary
           cp bin/$BINARY_NAME artifacts/
-          
+
           # Copy required library files based on OS and architecture
           if [ "${{ matrix.goos }}" = "linux" ]; then
             if [ "${{ matrix.goarch }}" = "amd64" ]; then
@@ -107,7 +119,7 @@ jobs:
           elif [ "${{ matrix.goos }}" = "darwin" ]; then
             cp /opt/homebrew/lib/libtensorflowlite_c.dylib artifacts/
           fi
-          
+
           # Create tarball
           cd artifacts
           tar czf ../birdnet-go-${{ matrix.goos }}-${{ matrix.goarch }}.tar.gz *

.github/workflows/release-build.yml

@@ -66,6 +66,24 @@ jobs:
           CGO_ENABLED: 1
           BUILD_VERSION: ${{ github.ref_name }}
 
+      - name: Setup Node.js for Sentry CLI
+        if: matrix.goos == 'linux' && matrix.goarch == 'amd64'
+        uses: actions/setup-node@v6
+        with:
+          node-version: '24'
+
+      - name: Upload source maps to Sentry
+        if: matrix.goos == 'linux' && matrix.goarch == 'amd64'
+        env:
+          SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
+          SENTRY_ORG: tphakala
+          SENTRY_PROJECT: birdnet-go
+        run: |
+          npx @sentry/cli sourcemaps upload \
+            --release "birdnet-go@${{ github.ref_name }}" \
+            --url-prefix '~/ui/assets/' \
+            frontend/dist/
+
       - name: Create Release Artifacts
         run: |
           # Create artifacts directory