error-mom 0.3.1 → 0.4.0

package/dist/cli.js

@@ -10,7 +10,7 @@ import { Command } from "commander";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
-var VERSION = "0.3.1";
+var VERSION = "0.4.0";
 var CONFIG_DIR = join(homedir(), ".error-mom");
 var CONFIG_FILE = join(CONFIG_DIR, "config.json");
 var program = new Command().name("error-mom").description("Query and operate a self-hosted Error Mom incident desk").version(VERSION);
@@ -120,7 +120,7 @@ program.command("init").description("Create/select a project, install the SDK, a
   }
   const framework = detectFramework(packageJson);
   if (!options.skipInstall) installSdk(detectPackageManager(process.cwd()));
-  const setupPath = await writeSetup(framework);
+  const setupPath = await writeSetup(framework, config.server, project.ingestKey);
   await writeFile(
     join(process.cwd(), ".error-mom.json"),
     `${JSON.stringify({ server: config.server, projectId: project.id, projectName: project.name, framework: framework.id }, null, 2)}
@@ -134,7 +134,7 @@ program.command("init").description("Create/select a project, install the SDK, a
     setupFile: setupPath,
     verified: false,
     wiring: framework.wiring,
-    nextAction: `Wire it up: ${framework.wiring} For handlers where a framework catches errors itself (queue/cron jobs, webhooks, MCP tools), wrap each with errorMom.wrap(fn, { culprit: "<name>" }). Then run error-mom doctor --project-key <key>.`
+    nextAction: `Wire it up: ${framework.wiring} If the app routes caught errors through a central handler or error-broadcast function, call errorMom.captureError(err) inside it \u2014 that is where framework-caught and LLM errors surface. For handlers where a framework catches errors itself (queue/cron jobs, webhooks, MCP tools), wrap each with errorMom.wrap(fn, { culprit: "<name>" }). The setup file has the write-only project key baked in so production builds report without any CI configuration. Then run error-mom doctor --project-key <key>.`
   });
 });
 program.command("mcp").description("Run Error Mom tools over MCP stdio for coding agents").action(async () => {
@@ -406,47 +406,46 @@ function installSdk(packageManager) {
     stdio: "inherit"
   });
 }
-async function writeSetup(framework) {
+async function writeSetup(framework, server, ingestKey) {
   const sourceDirectory = existsSync(join(process.cwd(), "src")) ? "src" : ".";
   const relativePath = join(sourceDirectory, "error-mom.ts");
-  if (framework.id === "next") await writeNextInstrumentation(sourceDirectory);
+  if (framework.id === "next") await writeNextInstrumentation(sourceDirectory, server, ingestKey);
   const environment = framework.envStyle === "next" ? "process.env.NEXT_PUBLIC_" : framework.envStyle === "vite" ? "import.meta.env.VITE_" : "process.env.";
   const moduleName = framework.envStyle === "node" ? "@kenkaiiii/error-mom/node" : "@kenkaiiii/error-mom";
   const contents = `${framework.id === "next" ? '"use client";\n\n' : ""}import { initErrorMom } from "${moduleName}";
 
-const server = ${environment}ERROR_MOM_SERVER;
-const projectKey = ${environment}ERROR_MOM_PROJECT_KEY;
+// The project key is write-only (submit errors, read nothing), so committing
+// it is safe \u2014 same model as a Sentry DSN. Env vars override when present.
+const server = ${environment}ERROR_MOM_SERVER ?? ${JSON.stringify(server)};
+const projectKey = ${environment}ERROR_MOM_PROJECT_KEY ?? ${JSON.stringify(ingestKey)};
 const release = ${environment}ERROR_MOM_RELEASE;
 
-export const errorMom =
-  server && projectKey
-    ? initErrorMom({
-        server,
-        projectKey,
-        environment: ${environment}ERROR_MOM_ENVIRONMENT ?? "production",
-        ...(release ? { release } : {}),
-      })
-    : undefined;
+export const errorMom = initErrorMom({
+  server,
+  projectKey,
+  environment: ${environment}ERROR_MOM_ENVIRONMENT ?? "production",
+  ...(release ? { release } : {}),
+});
 `;
   await writeFile(join(process.cwd(), relativePath), contents);
   return relativePath;
 }
-async function writeNextInstrumentation(sourceDirectory) {
+async function writeNextInstrumentation(sourceDirectory, configuredServer, ingestKey) {
   const file = join(process.cwd(), sourceDirectory, "instrumentation.ts");
   if (existsSync(file)) return;
   const contents = `import type { Instrumentation } from "next";
 
 // Reports server-side errors (API routes, SSR, server actions, middleware)
 // that Next.js catches before they can become uncaught exceptions.
+// The baked-in project key is write-only, so committing it is safe.
 export const onRequestError: Instrumentation.onRequestError = async (
   error,
   request,
   context,
 ) => {
   if (process.env.NEXT_RUNTIME !== "nodejs") return;
-  const server = process.env.NEXT_PUBLIC_ERROR_MOM_SERVER;
-  const projectKey = process.env.NEXT_PUBLIC_ERROR_MOM_PROJECT_KEY;
-  if (!server || !projectKey) return;
+  const server = process.env.NEXT_PUBLIC_ERROR_MOM_SERVER ?? ${JSON.stringify(configuredServer)};
+  const projectKey = process.env.NEXT_PUBLIC_ERROR_MOM_PROJECT_KEY ?? ${JSON.stringify(ingestKey)};
   const { initErrorMom } = await import("@kenkaiiii/error-mom/node");
   initErrorMom({
     server,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "error-mom",
-  "version": "0.3.1",
+  "version": "0.4.0",
   "description": "Agent-first CLI and MCP tools for self-hosted Error Mom",
   "type": "module",
   "bin": {