feat: add Sentry error monitoring, tracing, and session replay

- Install @sentry/react and @sentry/vite-plugin
- Create instrument.ts with error monitoring, browser tracing (20% prod),
  and session replay (10% sessions, 100% on errors)
- Wire React 19 reactErrorHandler() on createRoot error hooks
- Wrap router with wrapCreateBrowserRouterV7 for route-aware transactions
- Configure sentryVitePlugin for source map uploads
- Add VITE_SENTRY_DSN to .env.example

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

frontend/.env.example

@@ -1,2 +1,5 @@
 # API URL - defaults to http://localhost:8000 if not set
 VITE_API_URL=http://localhost:8000
+
+# Sentry error monitoring (optional in dev, required in production)
+VITE_SENTRY_DSN=

frontend/package.json

@@ -18,6 +18,8 @@
     "@dnd-kit/sortable": "^10.0.0",
     "@dnd-kit/utilities": "^3.2.2",
     "@monaco-editor/react": "^4.7.0",
+    "@sentry/react": "^10.42.0",
+    "@sentry/vite-plugin": "^5.1.1",
     "@stripe/stripe-js": "^8.7.0",
     "@xyflow/react": "^12.10.0",
     "axios": "^1.13.4",

frontend/src/instrument.ts

@@ -0,0 +1,25 @@
+import * as Sentry from "@sentry/react";
+
+Sentry.init({
+  dsn: import.meta.env.VITE_SENTRY_DSN,
+  environment: import.meta.env.MODE,
+
+  integrations: [
+    Sentry.browserTracingIntegration(),
+    Sentry.replayIntegration({
+      maskAllText: false,
+      blockAllMedia: false,
+    }),
+  ],
+
+  // Tracing — capture 100% in dev, 20% in production
+  tracesSampleRate: import.meta.env.PROD ? 0.2 : 1.0,
+  tracePropagationTargets: [
+    "localhost",
+    /^https:\/\/api\.resolutionflow\.com/,
+  ],
+
+  // Session Replay — record 10% of sessions, 100% of error sessions
+  replaysSessionSampleRate: 0.1,
+  replaysOnErrorSampleRate: 1.0,
+});

frontend/src/main.tsx

@@ -1,11 +1,18 @@
+import "./instrument"; // Sentry must init before any other imports
+
 import { StrictMode } from 'react'
 import { createRoot } from 'react-dom/client'
+import { reactErrorHandler } from '@sentry/react'
 import { HelmetProvider } from 'react-helmet-async'
 import { Toaster } from 'sonner'
 import './index.css'
 import App from './App'
 
-createRoot(document.getElementById('root')!).render(
+createRoot(document.getElementById('root')!, {
+  onUncaughtError: reactErrorHandler(),
+  onCaughtError: reactErrorHandler(),
+  onRecoverableError: reactErrorHandler(),
+}).render(
   <StrictMode>
     <HelmetProvider>
       {/* Toast notification system - theme syncs automatically via CSS custom properties */}

frontend/src/router.tsx

@@ -1,9 +1,12 @@
 import { createBrowserRouter } from 'react-router-dom'
+import * as Sentry from '@sentry/react'
 import { lazy, Suspense } from 'react'
 import { AppLayout, ProtectedRoute } from '@/components/layout'
 import { RouteError } from '@/components/common/RouteError'
 import { ErrorBoundary } from '@/components/common/ErrorBoundary'
 import { PageLoader } from '@/components/common/PageLoader'
+
+const sentryCreateBrowserRouter = Sentry.wrapCreateBrowserRouterV7(createBrowserRouter)
 import {
   LoginPage,
   RegisterPage,
@@ -73,7 +76,7 @@ function page(Component: React.LazyExoticComponent<React.ComponentType>) {
   )
 }
 
-export const router = createBrowserRouter([
+export const router = sentryCreateBrowserRouter([
   {
     path: '/login',
     element: <LoginPage />,

frontend/vite.config.ts

@@ -1,11 +1,20 @@
 /// <reference types="vitest/config" />
 import { defineConfig } from 'vite'
 import react from '@vitejs/plugin-react'
+import { sentryVitePlugin } from '@sentry/vite-plugin'
 import path from 'path'
 
 // https://vite.dev/config/
 export default defineConfig({
-  plugins: [react()],
+  plugins: [
+    react(),
+    sentryVitePlugin({
+      org: process.env.SENTRY_ORG,
+      project: process.env.SENTRY_PROJECT,
+      authToken: process.env.SENTRY_AUTH_TOKEN,
+      silent: !process.env.SENTRY_AUTH_TOKEN, // Don't error in local dev
+    }),
+  ],
   server: {
     host: '0.0.0.0',
     watch: {
@@ -24,6 +33,7 @@ export default defineConfig({
     include: ['src/**/*.{test,spec}.{ts,tsx}'],
   },
   build: {
+    sourcemap: 'hidden', // Generate source maps but don't expose them publicly
     rollupOptions: {
       output: {
         manualChunks: {