@genex-ai/cli-demo 0.38.0 → 0.39.0

package/README.md

@@ -184,6 +184,27 @@ GENEX_BROWSER="open -a Safari" genex init
 GENEX_BROWSER="'/Applications/My Browser.app/Contents/MacOS/My Browser'" genex init
 ```
 
+## Crash reporting
+
+When a command hits an **unexpected** error, the CLI reports the crash to Sentry
+so we can fix it. Expected failures (missing token, a rejected API request, bad
+input) are just printed — they're not sent. Before anything leaves your machine
+it's scrubbed: your `GENEX_TOKEN` and any credentials, credential-bearing URLs
+(e.g. the per-push git URL), your home-directory paths and hostname, and
+stack-frame locals are all stripped ([`src/lib/sentry-scrub.ts`](src/lib/sentry-scrub.ts)).
+No IP address or account identity is attached. Only the crash, the command name,
+and your CLI/Node/OS versions are sent.
+
+Opt out any time:
+
+```bash
+export GENEX_TELEMETRY=0     # our switch (on by default)
+export DO_NOT_TRACK=1        # the cross-tool standard — any value disables it
+```
+
+Reporting is also off whenever no DSN is baked into the build (the default in
+local/source runs), so nothing is sent during development.
+
 ## How authorization works
 
 The CLI uses a loopback-redirect flow (the same pattern as `gh auth login` and

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
-// src/commands/init.ts
-import path8 from "path";
+// src/instrument.ts
+import * as Sentry from "@sentry/node";
 
 // src/config.ts
 import fs from "fs";
@@ -89,6 +89,107 @@ function isDir(p) {
   }
 }
 
+// src/lib/sentry-scrub.ts
+import os2 from "os";
+var BEARER = /\bBearer\s+[A-Za-z0-9._~+/-]+=*/gi;
+var URL_CRED = /(https?:\/\/)[^/@\s:]+(?::[^/@\s]*)?@/gi;
+var TOKENISH_KV = /((?:token|secret|password|api[_-]?key|authorization)=)[^&#\s"']+/gi;
+var SENSITIVE_KEY = /token|secret|password|api[_-]?key|authorization|bearer/i;
+function scrubString(s) {
+  return s.replace(URL_CRED, "$1[redacted]@").replace(BEARER, "Bearer [redacted]").replace(TOKENISH_KV, "$1[redacted]");
+}
+function redactHome(s, home = os2.homedir()) {
+  if (!home) return s;
+  return s.split(home).join("~");
+}
+var clean = (s) => redactHome(scrubString(s));
+function scrubEvent(event) {
+  delete event.user;
+  delete event.server_name;
+  if (typeof event.message === "string") event.message = clean(event.message);
+  for (const ex of event.exception?.values ?? []) {
+    if (typeof ex.value === "string") ex.value = clean(ex.value);
+    for (const f of ex.stacktrace?.frames ?? []) {
+      if (typeof f.filename === "string") f.filename = redactHome(f.filename);
+      if (typeof f.abs_path === "string") f.abs_path = redactHome(f.abs_path);
+      delete f.vars;
+    }
+  }
+  if (event.request && typeof event.request.url === "string") {
+    event.request.url = clean(event.request.url);
+  }
+  for (const b of event.breadcrumbs ?? []) {
+    if (typeof b.message === "string") b.message = clean(b.message);
+    const d = b.data;
+    if (d) {
+      for (const k of Object.keys(d)) {
+        if (typeof d[k] === "string") d[k] = clean(d[k]);
+      }
+    }
+  }
+  for (const bag of [event.extra, event.tags]) {
+    if (!bag) continue;
+    for (const k of Object.keys(bag)) {
+      if (SENSITIVE_KEY.test(k)) bag[k] = "[Filtered]";
+      else if (typeof bag[k] === "string") bag[k] = clean(bag[k]);
+    }
+  }
+  return event;
+}
+
+// src/instrument.ts
+var GENEX_CLI_DSN = "https://43efc6f7d16c3e67cad6c60fa8175c20@o4511115493900288.ingest.us.sentry.io/4511706579599360";
+function bakedDsn() {
+  return import.meta.url.includes("/dist/") ? GENEX_CLI_DSN : "";
+}
+function resolveDsn() {
+  return (process.env.GENEX_SENTRY_DSN || bakedDsn()).trim();
+}
+function isTruthy(v) {
+  return v !== void 0 && v.trim() !== "" && !/^(0|false|off|no)$/i.test(v.trim());
+}
+function telemetryDisabled() {
+  if (isTruthy(process.env.DO_NOT_TRACK)) return true;
+  if (process.env.GENEX_TELEMETRY !== void 0 && !isTruthy(process.env.GENEX_TELEMETRY)) return true;
+  if (isTruthy(process.env.GENEX_DISABLE_SENTRY)) return true;
+  return false;
+}
+var dsn = resolveDsn();
+var sentryEnabled = !!dsn && !telemetryDisabled();
+if (sentryEnabled) {
+  Sentry.init({
+    dsn,
+    // release aligns with the AG-757 `x-genex-cli-version` telemetry stream so
+    // the two correlate; environment is prod unless pointed at a non-default API.
+    release: `@genex-ai/cli-demo@${getCliVersion()}`,
+    environment: getApiUrl() === DEFAULT_API_URL ? "production" : "development",
+    // A short-lived CLI has no meaningful tracing workload — errors only.
+    tracesSampleRate: 0,
+    // No IP / user auto-collection (opposite of the server apps' `userInfo: true`).
+    dataCollection: { userInfo: false },
+    // Keep @sentry/node's default onUncaughtException + onUnhandledRejection
+    // integrations (auto-registered) — they catch the fire-and-forget async
+    // paths in lib/updates.ts / lib/deploy.ts that otherwise swallow errors.
+    beforeSend(event) {
+      scrubEvent(event);
+      return event;
+    }
+  });
+}
+async function flushSentry(timeoutMs = 2e3) {
+  if (!sentryEnabled) return;
+  try {
+    await Sentry.flush(timeoutMs);
+  } catch {
+  }
+}
+
+// src/index.ts
+import * as Sentry2 from "@sentry/node";
+
+// src/commands/init.ts
+import path8 from "path";
+
 // src/lib/copy-templates.ts
 import fs2 from "fs/promises";
 import path2 from "path";
@@ -604,10 +705,10 @@ var structuredPrinted = /* @__PURE__ */ new WeakSet();
 function printedStructuredError(res) {
   return structuredPrinted.has(res);
 }
-async function apiFetch(url, init = {}) {
-  const headers = new Headers(init.headers);
+async function apiFetch(url, init2 = {}) {
+  const headers = new Headers(init2.headers);
   if (!headers.has(CLI_VERSION_HEADER)) headers.set(CLI_VERSION_HEADER, getCliVersion());
-  const res = await fetch(url, { ...init, headers });
+  const res = await fetch(url, { ...init2, headers });
   if (res.status === 426) {
     try {
       const body = await res.clone().json();
@@ -1157,7 +1258,7 @@ async function listOwnSlugs(apiUrl, token, log) {
 import { spawn as spawn3 } from "child_process";
 import crypto3 from "crypto";
 import fs9 from "fs/promises";
-import os2 from "os";
+import os3 from "os";
 import path10 from "path";
 function run(cmd, args, env) {
   return new Promise((resolve) => {
@@ -1354,7 +1455,7 @@ async function pushWorktree(cwd, pushUrl, managed, log) {
     log.error("Couldn't save your game's source \u2014 please try again.");
     return false;
   };
-  const gitDir = await fs9.mkdtemp(path10.join(os2.tmpdir(), "genex-source-"));
+  const gitDir = await fs9.mkdtemp(path10.join(os3.tmpdir(), "genex-source-"));
   const base = { GIT_DIR: gitDir };
   const ident = {
     GIT_AUTHOR_NAME: "genex",
@@ -2619,6 +2720,8 @@ ${c.bold("Environment")}
   GENEX_API_URL        Overrides the default API base URL.
   GENEX_COLYSEUS_URL   Overrides the default multiplayer URL.
   GENEX_BROWSER        Command used to open the browser (falls back to BROWSER).
+  GENEX_TELEMETRY      Set to 0 to disable anonymous crash reporting (Sentry).
+  DO_NOT_TRACK         Standard opt-out; any value disables crash reporting.
 
 ${c.bold("Examples")}
   genex init my-game
@@ -2854,6 +2957,17 @@ async function main() {
   const updateLog = createLogger({ quiet: parsed.options.quiet });
   if (parsed.command !== "init") await syncSkills(updateLog);
   const updateCheck = startUpdateCheck();
+  Sentry2.setTag("command", parsed.command);
+  Sentry2.setTag("cli.version", getCliVersion());
+  Sentry2.setTag("node.version", process.versions.node);
+  Sentry2.setTag("os.platform", process.platform);
+  Sentry2.setContext("runtime", {
+    cliVersion: getCliVersion(),
+    node: process.version,
+    platform: process.platform,
+    arch: process.arch,
+    ci: !!process.env.CI
+  });
   try {
     if (GEN_KINDS.has(parsed.command)) {
       await runGenerate(parsed.command, {
@@ -2891,10 +3005,13 @@ async function main() {
     }
   } finally {
     await reportUpdateNudges(updateCheck, updateLog);
+    await flushSentry();
   }
 }
-main().catch((err) => {
+main().catch(async (err) => {
+  Sentry2.captureException(err);
   const log = createLogger();
   log.error(err instanceof Error ? err.message : String(err));
+  await flushSentry();
   process.exitCode = 1;
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@genex-ai/cli-demo",
-  "version": "0.38.0",
+  "version": "0.39.0",
   "description": "Set up your ~/.claude workspace, authorize, create a game project, generate AI assets, and publish (genex CLI).",
   "type": "module",
   "bin": {
@@ -35,6 +35,9 @@
   "publishConfig": {
     "access": "public"
   },
+  "dependencies": {
+    "@sentry/node": "^10.63.0"
+  },
   "devDependencies": {
     "@dimforge/rapier3d-compat": "^0.19.3",
     "@pixiv/three-vrm": "^3.5.4",