fix(sentry): Resolve PR review findings

Redact Sentry tag values in beforeSend, remove the duplicate axe.path_mode
tag, and delete the Sentry audit report with local filesystem paths.

Also extract getErrorKind into a shared utility to remove duplicate
implementations in config-store and tool-invoker.

Co-Authored-By: Claude <noreply@anthropic.com>

Author: cameroncooke

docs/SENTRY_AUDIT_REPORT_2026-02-11.md

@@ -1,6 +1,7 @@
 import type { ToolCatalog, ToolDefinition, ToolInvoker, InvokeOptions } from './types.ts';
 import type { ToolResponse } from '../types/common.ts';
 import { createErrorResponse } from '../utils/responses/index.ts';
+import { getErrorKind } from '../utils/errors.ts';
 import { DaemonClient } from '../cli/daemon-client.ts';
 import { ensureDaemonRunning, DEFAULT_DAEMON_STARTUP_TIMEOUT_MS } from '../cli/daemon-control.ts';
 import { log } from '../utils/logger.ts';
@@ -48,13 +49,6 @@ function buildDaemonEnvOverrides(opts: InvokeOptions): Record<string, string> |
   return Object.keys(envOverrides).length > 0 ? envOverrides : undefined;
 }
 
-function getErrorKind(error: unknown): string {
-  if (error instanceof Error) {
-    return error.name || 'Error';
-  }
-  return typeof error;
-}
-
 function mapRuntimeToSentryToolRuntime(runtime: InvokeOptions['runtime']): SentryToolRuntime {
   switch (runtime) {
     case 'daemon':

src/runtime/tool-invoker.ts

@@ -33,6 +33,9 @@ describe('sentry redaction', () => {
         output: 'log at /Users/cam/project/build.log',
         attempts: 1,
       },
+      tags: {
+        xcodePath: '/Users/cam/Applications/Xcode.app',
+      },
     };
 
     const redacted = __redactEventForTests(event);
@@ -50,6 +53,7 @@ describe('sentry redaction', () => {
     );
     expect(redacted.extra?.output).toBe('log at /Users/<redacted>/project/build.log');
     expect(redacted.extra?.attempts).toBe(1);
+    expect(redacted.tags?.xcodePath).toBe('/Users/<redacted>/Applications/Xcode.app');
   });
 
   it('parses xcode version metadata safely', () => {

src/utils/__tests__/sentry-redaction.test.ts

@@ -8,6 +8,7 @@ import {
 } from './project-config.ts';
 import type { DebuggerBackendKind } from './debugger/types.ts';
 import type { UiDebuggerGuardMode } from './runtime-config-types.ts';
+import { getErrorKind } from './errors.ts';
 
 export type RuntimeConfigOverrides = Partial<{
   enabledWorkflows: string[];
@@ -134,13 +135,6 @@ function parseDebuggerBackend(value: string | undefined): DebuggerBackendKind |
   return undefined;
 }
 
-function getErrorKind(error: unknown): string {
-  if (error instanceof Error) {
-    return error.name || 'Error';
-  }
-  return typeof error;
-}
-
 function setIfDefined<K extends keyof RuntimeConfigOverrides>(
   config: RuntimeConfigOverrides,
   key: K,

src/utils/config-store.ts

@@ -107,6 +107,13 @@ export class AxeError extends XcodeBuildMCPError {
   }
 }
 
+export function getErrorKind(error: unknown): string {
+  if (error instanceof Error) {
+    return error.name || 'Error';
+  }
+  return typeof error;
+}
+
 // Helper to create a standard error response
 export function createErrorResponse(message: string, details?: string): ToolResponse {
   const detailText = details ? `\nDetails: ${details}` : '';

src/utils/errors.ts

@@ -104,6 +104,14 @@ function redactEvent(event: Sentry.ErrorEvent): Sentry.ErrorEvent {
     }
   }
 
+  if (event.tags) {
+    for (const [key, value] of Object.entries(event.tags)) {
+      if (typeof value === 'string') {
+        event.tags[key] = redactPathLikeData(value);
+      }
+    }
+  }
+
   return event;
 }
 
@@ -223,7 +231,6 @@ export function setSentryRuntimeContext(context: SentryRuntimeContext): void {
   setTagIfDefined('config.xcode_ide_workflow_enabled', boolToTag(context.xcodeIdeWorkflowEnabled));
   setTagIfDefined('axe.available', boolToTag(context.axeAvailable));
   setTagIfDefined('axe.source', context.axeSource);
-  setTagIfDefined('axe.path_mode', context.axeSource);
   setTagIfDefined('axe.version', context.axeVersion);
   setTagIfDefined('xcode.developer_dir', context.xcodeDeveloperDir);
   setTagIfDefined('xcode.xcodebuild_path', context.xcodebuildPath);