feat(desktop): add Sentry error tracking to desktop app

.github/workflows/release-desktop.yml

@@ -62,6 +62,7 @@ jobs:
           GH_CLIENT_ID: ${{ secrets.GH_CLIENT_ID }}
           NEXT_PUBLIC_WEB_URL: ${{ secrets.NEXT_PUBLIC_WEB_URL }}
           NEXT_PUBLIC_API_URL: ${{ secrets.NEXT_PUBLIC_API_URL }}
+          SENTRY_DSN_DESKTOP: ${{ secrets.SENTRY_DSN_DESKTOP }}
         run: bun run compile:app
 
       # Build the Electron app for macOS

apps/desktop/electron.vite.config.ts

@@ -88,6 +88,9 @@ export default defineConfig({
 				process.env.GOOGLE_CLIENT_ID,
 			),
 			"process.env.GH_CLIENT_ID": JSON.stringify(process.env.GH_CLIENT_ID),
+			"process.env.SENTRY_DSN_DESKTOP": JSON.stringify(
+				process.env.SENTRY_DSN_DESKTOP,
+			),
 		},
 
 		build: {
@@ -103,6 +106,7 @@ export default defineConfig({
 					"electron",
 					"better-sqlite3", // Native module - must stay external
 					"node-pty", // Native module - must stay external
+					/^@sentry\/electron/,
 				],
 			},
 		},
@@ -161,6 +165,9 @@ export default defineConfig({
 			"import.meta.env.NEXT_PUBLIC_POSTHOG_HOST": JSON.stringify(
 				process.env.NEXT_PUBLIC_POSTHOG_HOST,
 			),
+			"import.meta.env.SENTRY_DSN_DESKTOP": JSON.stringify(
+				process.env.SENTRY_DSN_DESKTOP,
+			),
 		},
 
 		server: {
@@ -205,6 +212,9 @@ export default defineConfig({
 				input: {
 					index: resolve("src/renderer/index.html"),
 				},
+
+				// Externalize Sentry - it uses IPC to communicate with main process
+				external: [/^@sentry\/electron/],
 			},
 		},
 	},

apps/desktop/package.json

@@ -37,6 +37,7 @@
 		"@monaco-editor/react": "^4.7.0",
 		"@radix-ui/react-dialog": "^1.1.15",
 		"@radix-ui/react-label": "^2.1.8",
+		"@sentry/electron": "^7.5.0",
 		"@superset/local-db": "workspace:*",
 		"@superset/shared": "workspace:*",
 		"@superset/trpc": "workspace:*",

apps/desktop/src/lib/trpc/index.ts

@@ -12,6 +12,38 @@ const t = initTRPC.create({
 	isServer: true,
 });
 
+/**
+ * Middleware that captures errors with Sentry
+ */
+const sentryMiddleware = t.middleware(async ({ next, path, type }) => {
+	const result = await next();
+
+	if (!result.ok) {
+		try {
+			const Sentry = await import("@sentry/electron/main");
+			const error = result.error;
+
+			// Get the original error if it's wrapped in a TRPCError
+			const originalError = error.cause instanceof Error ? error.cause : error;
+
+			Sentry.captureException(originalError, {
+				tags: {
+					trpc_path: path,
+					trpc_type: type,
+					trpc_code: error.code,
+				},
+				extra: {
+					trpc_message: error.message,
+				},
+			});
+		} catch {
+			// Sentry not available
+		}
+	}
+
+	return result;
+});
+
 export const router = t.router;
-export const publicProcedure = t.procedure;
+export const publicProcedure = t.procedure.use(sentryMiddleware);
 export const trpc = createTRPCReact<AppRouter>();

apps/desktop/src/main/env.main.ts

@@ -20,6 +20,7 @@ export const env = createEnv({
 		GH_CLIENT_ID: z.string().min(1),
 		NEXT_PUBLIC_POSTHOG_KEY: z.string().optional(),
 		NEXT_PUBLIC_POSTHOG_HOST: z.string().default("https://us.i.posthog.com"),
+		SENTRY_DSN_DESKTOP: z.string().optional(),
 	},
 
 	runtimeEnv: {
@@ -33,6 +34,7 @@ export const env = createEnv({
 		GH_CLIENT_ID: process.env.GH_CLIENT_ID,
 		NEXT_PUBLIC_POSTHOG_KEY: process.env.NEXT_PUBLIC_POSTHOG_KEY,
 		NEXT_PUBLIC_POSTHOG_HOST: process.env.NEXT_PUBLIC_POSTHOG_HOST,
+		SENTRY_DSN_DESKTOP: process.env.SENTRY_DSN_DESKTOP,
 	},
 	emptyStringAsUndefined: true,
 	skipValidation: !!process.env.SKIP_ENV_VALIDATION,

apps/desktop/src/main/index.ts

@@ -1,3 +1,7 @@
+import { initSentry } from "./lib/sentry";
+
+initSentry();
+
 import path from "node:path";
 import { app, BrowserWindow } from "electron";
 import { makeAppSetup } from "lib/electron-app/factories/app/setup";

apps/desktop/src/main/lib/sentry.ts

@@ -0,0 +1,28 @@
+import { env } from "../env.main";
+
+let sentryInitialized = false;
+
+export async function initSentry(): Promise<void> {
+	if (sentryInitialized) return;
+
+	if (!env.SENTRY_DSN_DESKTOP) {
+		return;
+	}
+
+	try {
+		// Dynamic import to avoid bundler issues
+		const Sentry = await import("@sentry/electron/main");
+
+		Sentry.init({
+			dsn: env.SENTRY_DSN_DESKTOP,
+			environment: env.NODE_ENV,
+			tracesSampleRate: env.NODE_ENV === "development" ? 1.0 : 0.1,
+			sendDefaultPii: false,
+		});
+
+		sentryInitialized = true;
+		console.log("[sentry] Initialized in main process");
+	} catch (error) {
+		console.error("[sentry] Failed to initialize:", error);
+	}
+}

apps/desktop/src/renderer/env.renderer.ts

@@ -19,6 +19,7 @@ const envSchema = z.object({
 	NEXT_PUBLIC_WEB_URL: z.url().default("https://app.superset.sh"),
 	NEXT_PUBLIC_POSTHOG_KEY: z.string().optional(),
 	NEXT_PUBLIC_POSTHOG_HOST: z.string().default("https://us.i.posthog.com"),
+	SENTRY_DSN_DESKTOP: z.string().optional(),
 });
 
 /**
@@ -38,6 +39,7 @@ const rawEnv = {
 	NEXT_PUBLIC_POSTHOG_HOST: import.meta.env.NEXT_PUBLIC_POSTHOG_HOST as
 		| string
 		| undefined,
+	SENTRY_DSN_DESKTOP: import.meta.env.SENTRY_DSN_DESKTOP as string | undefined,
 };
 
 export const env = process.env.SKIP_ENV_VALIDATION

apps/desktop/src/renderer/index.html

@@ -11,11 +11,11 @@
       - default-src 'self': Only allow resources from same origin
       - script-src 'self' 'wasm-unsafe-eval' https://*.posthog.com: Allow scripts from same origin + WebAssembly (for xterm ImageAddon) + PostHog
       - style-src 'self' 'unsafe-inline': Allow styles from same origin + inline (needed for CSS-in-JS)
-      - connect-src 'self' ws: wss: https://*.posthog.com: Allow WebSocket connections for HMR + PostHog analytics
+      - connect-src 'self' ws: wss: https://*.posthog.com https://*.sentry.io sentry-ipc:: Allow WebSocket connections for HMR + PostHog analytics + Sentry error reporting
       - img-src 'self' data: https://*.public.blob.vercel-storage.com: Allow images from same origin + data URIs + Vercel blob storage (avatars)
       - font-src 'self': Allow fonts from same origin
     -->
-    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'wasm-unsafe-eval' https://*.posthog.com; style-src 'self' 'unsafe-inline'; connect-src 'self' ws: wss: https://*.posthog.com; img-src 'self' data: https://*.public.blob.vercel-storage.com; font-src 'self';" />
+    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'wasm-unsafe-eval' https://*.posthog.com; style-src 'self' 'unsafe-inline'; connect-src 'self' ws: wss: https://*.posthog.com https://*.sentry.io sentry-ipc:; img-src 'self' data: https://*.public.blob.vercel-storage.com; font-src 'self';" />
   </head>
 
   <body>

apps/desktop/src/renderer/index.tsx

@@ -1,3 +1,7 @@
+import { initSentry } from "./lib/sentry";
+
+initSentry();
+
 import React from "react";
 import ReactDom from "react-dom/client";
 

apps/desktop/src/renderer/lib/sentry.ts

@@ -0,0 +1,29 @@
+import { env } from "../env.renderer";
+
+let sentryInitialized = false;
+
+export async function initSentry(): Promise<void> {
+	if (sentryInitialized) return;
+
+	if (!env.SENTRY_DSN_DESKTOP) {
+		return;
+	}
+
+	try {
+		// Dynamic import to avoid bundler issues
+		const Sentry = await import("@sentry/electron/renderer");
+
+		Sentry.init({
+			dsn: env.SENTRY_DSN_DESKTOP,
+			environment: env.NODE_ENV,
+			tracesSampleRate: env.NODE_ENV === "development" ? 1.0 : 0.1,
+			replaysSessionSampleRate: 0.1,
+			replaysOnErrorSampleRate: 1.0,
+		});
+
+		sentryInitialized = true;
+		console.log("[sentry] Initialized in renderer process");
+	} catch (error) {
+		console.error("[sentry] Failed to initialize in renderer:", error);
+	}
+}

biome.jsonc

@@ -1,5 +1,5 @@
 {
-	"$schema": "https://biomejs.dev/schemas/2.3.8/schema.json",
+	"$schema": "https://biomejs.dev/schemas/2.3.10/schema.json",
 	"vcs": {
 		"enabled": true,
 		"clientKind": "git",