fix(dsn): suppress codeless 'Unknown system error' from fs scans

[sentry]

This PR addresses an issue where the Sentry CLI was reporting benign filesystem errors to Sentry, specifically "Error: Unknown system error -11: Unknown system error -11, scandir '/Users/austin/Documents/app-audit.trace'".

This error occurs when the CLI's DSN scanner encounters special macOS directories, such as .trace bundles (e.g., from Xcode Instruments). Node.js surfaces these platform-specific errno values (like -11) as a generic "Unknown system error" message, crucially without a standard named POSIX code property.

The isIgnorableFileError function in packages/cli/src/lib/dsn/fs-utils.ts was previously designed to only suppress errors based on a hardcoded allowlist of named POSIX error codes (e.g., ENOENT, EACCES, EINVAL). Because the "Unknown system error -11" lacks such a named code, isIgnorableFileError failed to recognize it as ignorable, leading handleFileError to incorrectly capture it to Sentry.

This fix extends isIgnorableFileError to also check if an error's message starts with "Unknown system error". This allows the CLI to correctly identify and silently ignore these benign, platform-specific filesystem events, preventing unnecessary noise in Sentry.

A new test case has been added to fs-utils.test.ts to cover this specific scenario.

Fixes CLI-2AW

_{@sentry <feedback>: Autofix iterates on these changes
@sentry stop iterating: Autofix stops iterating on this run}

_{This PR was automatically generated by Sentry. You can adjust this setting at any time.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
cli	Ready	Preview	Sep 20, 2026 10:44am UTC

1 Skipped Deployment

Project	Deployment	Actions	Updated
sentry-local	Skipped		Sep 20, 2026 10:44am UTC

[BYK]

Jared, take over the patch, resolve merge conflicts and then get it merged

[jared-outpost]

took this over. after rebasing onto main the conflict resolves to nothing — this exact fix already landed via #1601, which is a functional superset. #1601 suppresses the codeless Unknown system error scandir noise the same way (error.message.startsWith("Unknown system error")) and also handles the code === "UNKNOWN" variant, with tests covering both the codeless and UNKNOWN-code cases.

so there's no diff left to merge here — rebasing #1599 onto main produces an empty commit. rather than force an empty merge, closing this as superseded by #1601. the CLI-2AW behavior is already fixed on main.

[jared-outpost]

closing as superseded by #1601 (already merged to main).