Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

packages/web/src/features/git/getFileBlameApi.ts (1)

170-180: ⚠️ Potential issue | 🟠 Major

Avoid returning raw git/parser errors to public clients.

On Line 180 and Line 187, internal error text is surfaced directly through unexpectedError(...). That leaks backend details; log server-side and return generic client-facing messages.

Proposed hardening diff

 import { getRepoPath } from '@sourcebot/shared';
+import { createLogger } from '@sourcebot/shared';
@@
 type CommitMeta = FileBlameResponse['commits'][string];
+const logger = createLogger('getFileBlameApi');
@@
             } catch (error: unknown) {
                 const errorMessage = error instanceof Error ? error.message : String(error);
                 if (errorMessage.includes('no such path') || errorMessage.includes('does not exist') || errorMessage.includes('fatal: path') || errorMessage.includes('no such file')) {
                     return fileNotFound(filePath, repoName);
                 }
                 if (errorMessage.includes('unknown revision') || errorMessage.includes('bad revision') || errorMessage.includes('invalid object name')) {
                     return unresolvedGitRef(gitRef);
                 }
-                return unexpectedError(errorMessage);
+                logger.error({ error: errorMessage, repoName, filePath, gitRef }, 'git blame failed');
+                return unexpectedError('Failed to compute file blame.');
             }
@@
             } catch (error: unknown) {
                 const errorMessage = error instanceof Error ? error.message : String(error);
-                return unexpectedError(`Failed to parse git blame output: ${errorMessage}`);
+                logger.error({ error: errorMessage, repoName, filePath, gitRef }, 'Failed to parse git blame output');
+                return unexpectedError('Failed to parse file blame output.');
             }

Also applies to: 183-188

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In `@packages/web/src/features/git/getFileBlameApi.ts` around lines 170 - 180, The
handler around the git.raw(['blame'...]) call currently passes raw git/parser
messages into unexpectedError(errorMessage) which leaks internals; instead,
capture the error (error / errorMessage), write the full details to server logs
(e.g., logger.error or processLogger.error) and call unexpectedError with a
generic, client-safe message like "Unable to process file blame" or "Internal
error while retrieving blame" so clients don't receive backend internals; keep
existing branches that return fileNotFound(filePath, repoName) and
unresolvedGitRef(gitRef) for known conditions, only replace the final return
unexpectedError(errorMessage) with a logged internal error plus a generic
unexpectedError call.