error-mom 0.3.1 → 0.4.1

package/dist/cli.js

@@ -2,7 +2,7 @@
 
 // src/cli.ts
 import { execFileSync } from "child_process";
-import { chmod, mkdir, readFile, writeFile, appendFile } from "fs/promises";
+import { chmod, mkdir, readFile, writeFile } from "fs/promises";
 import { existsSync } from "fs";
 import { homedir } from "os";
 import { basename, join } from "path";
@@ -10,7 +10,7 @@ import { Command } from "commander";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
-var VERSION = "0.3.1";
+var VERSION = "0.4.1";
 var CONFIG_DIR = join(homedir(), ".error-mom");
 var CONFIG_FILE = join(CONFIG_DIR, "config.json");
 var program = new Command().name("error-mom").description("Query and operate a self-hosted Error Mom incident desk").version(VERSION);
@@ -120,21 +120,16 @@ program.command("init").description("Create/select a project, install the SDK, a
   }
   const framework = detectFramework(packageJson);
   if (!options.skipInstall) installSdk(detectPackageManager(process.cwd()));
-  const setupPath = await writeSetup(framework);
-  await writeFile(
-    join(process.cwd(), ".error-mom.json"),
-    `${JSON.stringify({ server: config.server, projectId: project.id, projectName: project.name, framework: framework.id }, null, 2)}
-`
-  );
-  await appendEnvironment(framework, config.server, project.ingestKey);
+  const setupPath = await writeSetup(framework, config.server, project.ingestKey);
   print({
     installed: !options.skipInstall,
     project: { id: project.id, name: project.name, slug: project.slug },
     framework: framework.id,
     setupFile: setupPath,
+    projectKey: project.ingestKey,
     verified: false,
     wiring: framework.wiring,
-    nextAction: `Wire it up: ${framework.wiring} For handlers where a framework catches errors itself (queue/cron jobs, webhooks, MCP tools), wrap each with errorMom.wrap(fn, { culprit: "<name>" }). Then run error-mom doctor --project-key <key>.`
+    nextAction: `Wire it up: ${framework.wiring} If the app routes caught errors through a central handler or error-broadcast function, call errorMom.captureError(err) inside it \u2014 that is where framework-caught and LLM errors surface. For handlers where a framework catches errors itself (queue/cron jobs, webhooks, MCP tools), wrap each with errorMom.wrap(fn, { culprit: "<name>" }). The setup file has the write-only project key baked in (safe to commit; ERROR_MOM_* env vars override when set), so production builds report without any configuration. Then run error-mom doctor --project-key ${project.ingestKey}.`
   });
 });
 program.command("mcp").description("Run Error Mom tools over MCP stdio for coding agents").action(async () => {
@@ -406,47 +401,46 @@ function installSdk(packageManager) {
     stdio: "inherit"
   });
 }
-async function writeSetup(framework) {
+async function writeSetup(framework, server, ingestKey) {
   const sourceDirectory = existsSync(join(process.cwd(), "src")) ? "src" : ".";
   const relativePath = join(sourceDirectory, "error-mom.ts");
-  if (framework.id === "next") await writeNextInstrumentation(sourceDirectory);
+  if (framework.id === "next") await writeNextInstrumentation(sourceDirectory, server, ingestKey);
   const environment = framework.envStyle === "next" ? "process.env.NEXT_PUBLIC_" : framework.envStyle === "vite" ? "import.meta.env.VITE_" : "process.env.";
   const moduleName = framework.envStyle === "node" ? "@kenkaiiii/error-mom/node" : "@kenkaiiii/error-mom";
   const contents = `${framework.id === "next" ? '"use client";\n\n' : ""}import { initErrorMom } from "${moduleName}";
 
-const server = ${environment}ERROR_MOM_SERVER;
-const projectKey = ${environment}ERROR_MOM_PROJECT_KEY;
+// The project key is write-only (submit errors, read nothing), so committing
+// it is safe \u2014 same model as a Sentry DSN. Env vars override when present.
+const server = ${environment}ERROR_MOM_SERVER ?? ${JSON.stringify(server)};
+const projectKey = ${environment}ERROR_MOM_PROJECT_KEY ?? ${JSON.stringify(ingestKey)};
 const release = ${environment}ERROR_MOM_RELEASE;
 
-export const errorMom =
-  server && projectKey
-    ? initErrorMom({
-        server,
-        projectKey,
-        environment: ${environment}ERROR_MOM_ENVIRONMENT ?? "production",
-        ...(release ? { release } : {}),
-      })
-    : undefined;
+export const errorMom = initErrorMom({
+  server,
+  projectKey,
+  environment: ${environment}ERROR_MOM_ENVIRONMENT ?? "production",
+  ...(release ? { release } : {}),
+});
 `;
   await writeFile(join(process.cwd(), relativePath), contents);
   return relativePath;
 }
-async function writeNextInstrumentation(sourceDirectory) {
+async function writeNextInstrumentation(sourceDirectory, configuredServer, ingestKey) {
   const file = join(process.cwd(), sourceDirectory, "instrumentation.ts");
   if (existsSync(file)) return;
   const contents = `import type { Instrumentation } from "next";
 
 // Reports server-side errors (API routes, SSR, server actions, middleware)
 // that Next.js catches before they can become uncaught exceptions.
+// The baked-in project key is write-only, so committing it is safe.
 export const onRequestError: Instrumentation.onRequestError = async (
   error,
   request,
   context,
 ) => {
   if (process.env.NEXT_RUNTIME !== "nodejs") return;
-  const server = process.env.NEXT_PUBLIC_ERROR_MOM_SERVER;
-  const projectKey = process.env.NEXT_PUBLIC_ERROR_MOM_PROJECT_KEY;
-  if (!server || !projectKey) return;
+  const server = process.env.NEXT_PUBLIC_ERROR_MOM_SERVER ?? ${JSON.stringify(configuredServer)};
+  const projectKey = process.env.NEXT_PUBLIC_ERROR_MOM_PROJECT_KEY ?? ${JSON.stringify(ingestKey)};
   const { initErrorMom } = await import("@kenkaiiii/error-mom/node");
   initErrorMom({
     server,
@@ -460,26 +454,6 @@ export const onRequestError: Instrumentation.onRequestError = async (
 `;
   await writeFile(file, contents);
 }
-async function appendEnvironment(framework, server, key) {
-  const prefix = framework.envStyle === "next" ? "NEXT_PUBLIC_" : framework.envStyle === "vite" ? "VITE_" : "";
-  const file = join(process.cwd(), ".env.local");
-  const existing = existsSync(file) ? await readFile(file, "utf8") : "";
-  const lines = [
-    [`${prefix}ERROR_MOM_SERVER`, server],
-    [`${prefix}ERROR_MOM_PROJECT_KEY`, key],
-    [`${prefix}ERROR_MOM_ENVIRONMENT`, "production"]
-  ].filter(([name]) => !existing.includes(`${name}=`));
-  if (lines.length) {
-    await appendFile(
-      file,
-      `${existing && !existing.endsWith("\n") ? "\n" : ""}${lines.map(([name, value]) => `${name}=${value}`).join("\n")}
-`,
-      {
-        mode: 384
-      }
-    );
-  }
-}
 function syntheticEvent() {
   return {
     eventId: crypto.randomUUID(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "error-mom",
-  "version": "0.3.1",
+  "version": "0.4.1",
   "description": "Agent-first CLI and MCP tools for self-hosted Error Mom",
   "type": "module",
   "bin": {