sanitizeUrl (sentry/url-sanitize.ts)

* Strip sensitive values from URLs before they enter Sentry breadcrumbs. The browser SDK records navigation, `fetch`, and XHR breadcrumbs that include the full URL. URLs in our app can carry auth codes (OAuth redirect), invite tokens, and email query params; the hash fragment is

// Source: https://github.com/vellum-ai/vellum-assistant | License: MIT | Copyright 2025 Vellum AI
// Provided via justclaw.it.com; keep this notice with the code.
/**
 * Strip sensitive values from URLs before they enter Sentry breadcrumbs.
 *
 * The browser SDK records navigation, `fetch`, and XHR breadcrumbs that
 * include the full URL. URLs in our app can carry auth codes (OAuth
 * redirect), invite tokens, and email query params; the hash fragment
 * is the standard OAuth implicit-flow carrier for `access_token`.
 *
 * Server-side scrubbing in the Sentry dashboard catches CC/SSN/password
 * patterns by default — this module covers the URL surface that the
 * server-side scrubber does not see (because it is content within a
 * structured `data.url` field rather than a free-text messag

... (truncated -- full source via MCP)