@agent-native/core 0.8.2 → 0.10.0

package/dist/cli/index.js

@@ -53,6 +53,13 @@ Sentry.init({
     // or process env contents to Sentry without explicit consent.
     sendDefaultPii: false,
     beforeSend(event) {
+        // Drop expected user-input rejections (validateRepoName, etc.) so they
+        // don't pollute Sentry with non-bug noise.
+        const exceptionType = event.exception?.values?.[0]?.type;
+        if (exceptionType === "ValidationError" ||
+            event.tags?.handled === "validation") {
+            return null;
+        }
         // Defense in depth: strip any sensitive fields that may have been
         // attached to the event despite sendDefaultPii: false (e.g. integrations
         // that capture request metadata).
@@ -72,7 +79,21 @@ Sentry.init({
             // Cookies are also exposed via event.request.cookies as a separate field
             delete event.request.cookies;
         }
-        delete event.user;
+        // Keep user info that was explicitly set via Sentry.setUser (id/email)
+        // so we can attribute crashes back to the operator. Always strip
+        // ip_address — the CLI runs on third-party machines and the IP is auto-
+        // collected without consent. If only auto-collected fields remain,
+        // drop the user object entirely.
+        if (event.user) {
+            const user = event.user;
+            delete user.ip_address;
+            const hasIdentity = typeof user.id === "string" ||
+                typeof user.email === "string" ||
+                typeof user.username === "string";
+            if (!hasIdentity) {
+                delete event.user;
+            }
+        }
         // Sentry's contexts can carry process.env snapshots — strip env-shaped
         // contexts so we don't leak deployment secrets.
         if (event.contexts && typeof event.contexts === "object") {
@@ -90,6 +111,20 @@ Sentry.init({
         return event;
     },
 });
+// Identify the operator so future CLI errors carry spaceId / builderUserId
+// that we can map back to a real Builder user. The CLI doesn't have a real
+// email today — only the env-managed identifiers from the workspace's .env.
+{
+    const builderUserId = process.env.BUILDER_USER_ID;
+    const builderPublicKey = process.env.BUILDER_PUBLIC_KEY;
+    if (builderUserId) {
+        Sentry.setUser({ id: builderUserId });
+        Sentry.setTag("builderUserId", builderUserId);
+    }
+    if (builderPublicKey) {
+        Sentry.setTag("spaceId", builderPublicKey);
+    }
+}
 const FEEDBACK_URL = "https://forms.agent-native.com/f/agent-native-feedback/_16ewV?source=cli";
 const BUGS_URL = "https://github.com/BuilderIO/agent-native/issues";
 const command = process.argv[2];
@@ -202,6 +237,110 @@ function run(cmd, cmdArgs, opts) {
     }
     return child;
 }
+/**
+ * Walk up from `cwd` and try to figure out which template / app this build
+ * is running for. We look for two patterns:
+ *
+ *   - `templates/<name>/...` — building inside the framework monorepo
+ *   - `apps/<name>/...`      — building inside a scaffolded workspace
+ *
+ * Both, neither, or one may match. Used purely as Sentry tags so we can
+ * filter the noisy "Command failed: react-router build" issues by template.
+ */
+function inferBuildContext(cwd) {
+    const segs = cwd.split(path.sep);
+    let template;
+    let app;
+    for (let i = 0; i < segs.length - 1; i++) {
+        if (segs[i] === "templates" && segs[i + 1] && !segs[i + 1].startsWith("."))
+            template = segs[i + 1];
+        if (segs[i] === "apps" && segs[i + 1] && !segs[i + 1].startsWith("."))
+            app = segs[i + 1];
+    }
+    return { template, app };
+}
+/**
+ * Run a build subcommand, streaming its stdout/stderr to the user's terminal
+ * in real time while also capturing bounded tails for Sentry. On non-zero
+ * exit we report a structured event (template, app, exit code, stderr/stdout
+ * tails) and exit with the child's code. We deliberately do NOT throw — the
+ * global uncaughtException handler would re-capture with a generic
+ * "Error: Command failed" title, collapsing every template's failure into
+ * one issue (which is exactly what we're trying to fix here).
+ */
+function runBuildStep(cmd, cmdArgs, opts) {
+    return new Promise((resolve) => {
+        const STDERR_TAIL_BYTES = 8000;
+        const STDOUT_TAIL_BYTES = 4000;
+        let stderrBuf = "";
+        let stdoutBuf = "";
+        const child = spawn(cmd, cmdArgs, {
+            stdio: ["inherit", "pipe", "pipe"],
+            shell: process.platform === "win32",
+            env: opts.env ?? process.env,
+        });
+        child.stdout?.on("data", (chunk) => {
+            process.stdout.write(chunk);
+            const next = stdoutBuf + chunk.toString("utf-8");
+            stdoutBuf =
+                next.length > STDOUT_TAIL_BYTES ? next.slice(-STDOUT_TAIL_BYTES) : next;
+        });
+        child.stderr?.on("data", (chunk) => {
+            process.stderr.write(chunk);
+            const next = stderrBuf + chunk.toString("utf-8");
+            stderrBuf =
+                next.length > STDERR_TAIL_BYTES ? next.slice(-STDERR_TAIL_BYTES) : next;
+        });
+        child.on("error", (err) => {
+            // Failure to spawn (ENOENT, etc.).
+            const cwd = process.cwd();
+            const { template, app } = inferBuildContext(cwd);
+            Sentry.captureException(err, {
+                tags: {
+                    buildStep: opts.label,
+                    ...(template ? { template } : {}),
+                    ...(app ? { app } : {}),
+                },
+                extra: {
+                    command: `${cmd} ${cmdArgs.join(" ")}`,
+                    cwd,
+                    stage: "spawn",
+                },
+            });
+            Sentry.flush(2000).finally(() => process.exit(1));
+        });
+        child.on("exit", (code, signal) => {
+            const exitCode = code ?? (signal ? 1 : 0);
+            if (exitCode === 0) {
+                resolve();
+                return;
+            }
+            const cwd = process.cwd();
+            const { template, app } = inferBuildContext(cwd);
+            const childCommand = `${cmd} ${cmdArgs.join(" ")}`;
+            const err = new Error(`Build step "${opts.label}" failed with exit code ${exitCode}` +
+                (template ? ` (template=${template})` : "") +
+                (app ? ` (app=${app})` : ""));
+            Sentry.captureException(err, {
+                tags: {
+                    buildStep: opts.label,
+                    ...(template ? { template } : {}),
+                    ...(app ? { app } : {}),
+                },
+                extra: {
+                    command: childCommand,
+                    cwd,
+                    exitCode,
+                    signal: signal ?? null,
+                    stderrTail: stderrBuf,
+                    stdoutTail: stdoutBuf,
+                },
+            });
+            // Don't throw — see comment on runBuildStep above.
+            Sentry.flush(2000).finally(() => process.exit(exitCode));
+        });
+    });
+}
 trackCli("cli.run");
 switch (command) {
     case "dev": {
@@ -221,30 +360,46 @@ switch (command) {
         // React Router framework mode uses `react-router build` which
         // internally runs `vite build` with proper environment orchestration.
         // Legacy SPA mode uses `vite build` directly.
-        if (isReactRouterFramework()) {
-            const rr = findReactRouterBin();
-            console.log("Building (React Router framework mode)...");
-            execSync(`${rr} build`, { stdio: "inherit" });
-        }
-        else {
-            const vite = findViteBin();
-            console.log("Building...");
-            execSync(`${vite} build`, { stdio: "inherit" });
-        }
-        // Post-build: framework-mode apps also need a Nitro server bundle for
-        // `agent-native start` and for serverless presets.
-        const preset = process.env.NITRO_PRESET;
-        if (isReactRouterFramework()) {
-            const __dirname = path.dirname(fileURLToPath(import.meta.url));
-            const deployBuild = path.resolve(__dirname, "../deploy/build.js");
-            if (fs.existsSync(deployBuild)) {
-                execSync(`node ${deployBuild}`, { stdio: "inherit", env: process.env });
+        //
+        // Each step uses runBuildStep so that on failure we get a Sentry event
+        // tagged with template/app and including stderr/stdout tails. If the
+        // child exits non-zero, runBuildStep calls process.exit itself; the
+        // continuation only runs on success.
+        (async () => {
+            if (isReactRouterFramework()) {
+                const rr = findReactRouterBin();
+                console.log("Building (React Router framework mode)...");
+                await runBuildStep(rr, ["build"], { label: "react-router-build" });
             }
             else {
-                console.warn(`[build] Deploy build script not found at ${deployBuild}. Skipping post-build step.`);
+                const vite = findViteBin();
+                console.log("Building...");
+                await runBuildStep(vite, ["build"], { label: "vite-build" });
             }
-        }
-        console.log("\nBuild complete.");
+            // Post-build: framework-mode apps also need a Nitro server bundle for
+            // `agent-native start` and for serverless presets.
+            if (isReactRouterFramework()) {
+                const __dirname = path.dirname(fileURLToPath(import.meta.url));
+                const deployBuild = path.resolve(__dirname, "../deploy/build.js");
+                if (fs.existsSync(deployBuild)) {
+                    await runBuildStep("node", [deployBuild], {
+                        label: "deploy-build",
+                        env: process.env,
+                    });
+                }
+                else {
+                    console.warn(`[build] Deploy build script not found at ${deployBuild}. Skipping post-build step.`);
+                }
+            }
+            console.log("\nBuild complete.");
+        })().catch((err) => {
+            // runBuildStep handles its own failures and exits, so reaching here
+            // implies a programming error in the orchestration above. Capture
+            // and exit so the global unhandledRejection handler doesn't double-
+            // report with a generic title.
+            Sentry.captureException(err);
+            Sentry.flush(2000).finally(() => process.exit(1));
+        });
         break;
     }
     case "start": {

package/dist/cli/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AAEvC,2EAA2E;AAC3E,IAAI,QAAQ,GAAG,SAAS,CAAC;AACzB,IAAI,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,yCAAyC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE,OAAO,CAAC,CACxE,CAAC;IACF,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC;AACzB,CAAC;AAAC,MAAM,CAAC,CAAA,CAAC;AAEV;;;;;;;GAOG;AACH,MAAM,cAAc,GAAG,+CAA+C,CAAC;AACvE,MAAM,iBAAiB,GACrB,sDAAsD,CAAC;AACzD,SAAS,uBAAuB,CAAC,IAAc;IAC7C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACZ,iDAAiD;YACjD,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBACxB,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACvB,CAAC,EAAE,CAAC;YACN,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,IAAI,CAAC;IACV,GAAG,EAAE,uFAAuF;IAC5F,OAAO,EAAE,oBAAoB,QAAQ,EAAE;IACvC,yEAAyE;IACzE,wEAAwE;IACxE,8DAA8D;IAC9D,cAAc,EAAE,KAAK;IACrB,UAAU,CAAC,KAAK;QACd,kEAAkE;QAClE,yEAAyE;QACzE,kCAAkC;QAClC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAiC,CAAC;gBAChE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBACrC,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;oBAC3B,IACE,EAAE,KAAK,QAAQ;wBACf,EAAE,KAAK,eAAe;wBACtB,EAAE,KAAK,YAAY;wBACnB,EAAE,KAAK,qBAAqB,EAC5B,CAAC;wBACD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;oBACpB,CAAC;gBACH,CAAC;YACH,CAAC;YACD,yEAAyE;YACzE,OAAQ,KAAK,CAAC,OAAmC,CAAC,OAAO,CAAC;QAC5D,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC;QAClB,uEAAuE;QACvE,gDAAgD;QAChD,IAAI,KAAK,CAAC,QAAQ,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACzD,OAAQ,KAAK,CAAC,QAAoC,CAAC,WAAW,CAAC;QACjE,CAAC;QAED,KAAK,CAAC,IAAI,GAAG;YACX,GAAG,KAAK,CAAC,IAAI;YACb,mEAAmE;YACnE,+DAA+D;YAC/D,OAAO,EAAE,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACvD,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM;YACrC,WAAW,EAAE,OAAO,CAAC,OAAO;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,YAAY,GAChB,0EAA0E,CAAC;AAC7E,MAAM,QAAQ,GAAG,kDAAkD,CAAC;AAEpE,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAChC,qFAAqF;AACrF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AAE7D,SAAS,iBAAiB,CAAC,IAAc;IAKvC,IAAI,IAAwB,CAAC;IAC7B,IAAI,QAA4B,CAAC;IACjC,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,YAAY,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACxC,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACzC,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;YAClC,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,GAAG,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AACxC,CAAC;AAED,8CAA8C;AAC9C,SAAS,QAAQ,CAAC,KAAa,EAAE,KAA+B;IAC9D,IAAI,CAAC;QACH,MAAM,CAAC,yBAAyB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3C,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5C,CAAC,CAAC,wBAAwB,EAAE,CAC7B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AACZ,CAAC;AAED,iEAAiE;AACjE,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;IACtC,OAAO,CAAC,KAAK,CAAC,yBAAyB,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,KAAK,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,KAAK,CAAC,sBAAsB,YAAY,IAAI,CAAC,CAAC;IACtD,QAAQ,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9C,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAW,EAAE,EAAE;IAC/C,OAAO,CAAC,KAAK,CAAC,wBAAwB,MAAM,EAAE,OAAO,IAAI,MAAM,IAAI,CAAC,CAAC;IACrE,OAAO,CAAC,KAAK,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,KAAK,CAAC,sBAAsB,YAAY,IAAI,CAAC,CAAC;IACtD,QAAQ,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpE,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,SAAS,WAAW;IAClB,qCAAqC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACzD,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,OAAO,MAAM,CAAC,CAAC,mBAAmB;AACpC,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACvD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAChE,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7C,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,yFAAyF;AACzF,SAAS,sBAAsB;IAC7B,OAAO,CACL,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACrD,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CACtD,CAAC;AACJ,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1D,OAAO,CACL,OAAO,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,aAAa,KAAK,QAAQ;YACxD,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CACpC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,GAAG,CACV,GAAW,EACX,OAAiB,EACjB,IAAqC;IAErC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE;QAChC,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,SAAS;QAC/B,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;QACnC,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACpD,iFAAiF;IACjF,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAU,EAAE,CAAC;QAC3D,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE;YACnB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC;oBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,QAAQ,CAAC,SAAS,CAAC,CAAC;AAEpB,QAAQ,OAAO,EAAE,CAAC;IAChB,KAAK,KAAK,CAAC,CAAC,CAAC;QACX,IAAI,eAAe,EAAE,EAAE,CAAC;YACtB,MAAM,CAAC,oBAAoB,CAAC,CAAC;YAC7B,MAAM;QACR,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChB,MAAM;IACR,CAAC;IAED,KAAK,eAAe,CAAC,CAAC,CAAC;QACrB,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC7B,MAAM;IACR,CAAC;IAED,KAAK,OAAO,CAAC,CAAC,CAAC;QACb,8DAA8D;QAC9D,sEAAsE;QACtE,8CAA8C;QAC9C,IAAI,sBAAsB,EAAE,EAAE,CAAC;YAC7B,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;YACzD,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC3B,QAAQ,CAAC,GAAG,IAAI,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,sEAAsE;QACtE,mDAAmD;QACnD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QACxC,IAAI,sBAAsB,EAAE,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;YAClE,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/B,QAAQ,CAAC,QAAQ,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YAC1E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CACV,4CAA4C,WAAW,6BAA6B,CACrF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjC,MAAM;IACR,CAAC;IAED,KAAK,OAAO,CAAC,CAAC,CAAC;QACb,mDAAmD;QACnD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC7D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,KAAK,CACX,4DAA4D,CAC7D,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,GAAG,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACpC,MAAM;IACR,CAAC;IAED,KAAK,QAAQ,CAAC,CAAC,CAAC;QACd,iEAAiE;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;QAC/B,wDAAwD;QACxD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;QACpE,GAAG,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACnC,MAAM;IACR,CAAC;IAED,KAAK,QAAQ,CAAC,CAAC,CAAC;QACd,kDAAkD;QAClD,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,wDAAwD;QACxD,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACxD,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACxD,MAAM,aAAa,GAAG,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC;YACnD,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,gBAAgB,CAAC;QACrB,GAAG,CAAC,GAAG,EAAE,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACnC,MAAM;IACR,CAAC;IAED,KAAK,WAAW,CAAC,CAAC,CAAC;QACjB,+BAA+B;QAC/B,0DAA0D;QAC1D,IAAI,sBAAsB,EAAE,EAAE,CAAC;YAC7B,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;YACnE,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QAChD,GAAG,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACnC,MAAM;IACR,CAAC;IAED,KAAK,QAAQ,CAAC,CAAC,CAAC;QACd,wEAAwE;QACxE,gDAAgD;QAChD,2EAA2E;QAC3E,gEAAgE;QAChE,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/B,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CACH,CAAC;QACF,MAAM;IACR,CAAC;IAED,KAAK,kBAAkB,CAAC,CAAC,CAAC;QACxB,sEAAsE;QACtE,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACzC,CAAC,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CACpE,CAAC;QACF,MAAM;IACR,CAAC;IAED,KAAK,SAAS,CAAC,CAAC,CAAC;QACf,iDAAiD;QACjD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/B,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAChE,CAAC;QACF,MAAM;IACR,CAAC;IAED,KAAK,QAAQ,CAAC,CAAC,CAAC;QACd,wEAAwE;QACxE,qCAAqC;QACrC,MAAM,CAAC,+BAA+B,CAAC;aACpC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;aAC3C,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QACL,MAAM;IACR,CAAC;IAED,KAAK,cAAc,CAAC,CAAC,CAAC;QACpB,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;QAC5D,MAAM;IACR,CAAC;IAED,KAAK,MAAM,CAAC,CAAC,CAAC;QACZ,qFAAqF;QACrF,0EAA0E;QAC1E,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM;IACR,CAAC;IAED,KAAK,WAAW,CAAC;IACjB,KAAK,IAAI,CAAC,CAAC,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtB,MAAM;IACR,CAAC;IAED,KAAK,QAAQ,CAAC;IACd,KAAK,IAAI,CAAC;IACV,KAAK,SAAS;QACZ,OAAO,CAAC,GAAG,CAAC,iBAAiB,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAgC5B,YAAY;aACZ,QAAQ,EAAE,CAAC,CAAC;QACrB,MAAM;IAER;QACE,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACtD,OAAO,CAAC,KAAK,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC","sourcesContent":["#!/usr/bin/env node\n\nimport { execSync, spawn } from \"child_process\";\nimport path from \"path\";\nimport fs from \"fs\";\nimport { fileURLToPath } from \"url\";\nimport * as Sentry from \"@sentry/node\";\n\n// Resolve version once at module scope — used by both --version and --help\nlet _version = \"unknown\";\ntry {\n  const __dirname = path.dirname(fileURLToPath(import.meta.url));\n  // dist/cli/index.js → ../../package.json\n  const pkg = JSON.parse(\n    fs.readFileSync(path.resolve(__dirname, \"../../package.json\"), \"utf-8\"),\n  );\n  _version = pkg.version;\n} catch {}\n\n/**\n * Build a redacted \"command\" tag from process.argv. Strips the value that\n * follows any --token / --key / --secret / --password / --api-key flag so\n * we don't ship developer secrets to Sentry alongside the crash.\n *\n * Supports both `--token foo` (separate argv item) and `--token=foo`\n * (combined argv item) forms.\n */\nconst SECRET_FLAG_RE = /^--?(token|key|secret|password|api[_-]?key)$/i;\nconst SECRET_FLAG_EQ_RE =\n  /^(--?(token|key|secret|password|api[_-]?key))=(.*)$/i;\nfunction buildRedactedCommandTag(argv: string[]): string {\n  const out: string[] = [];\n  for (let i = 0; i < argv.length; i++) {\n    const a = argv[i];\n    if (SECRET_FLAG_RE.test(a)) {\n      out.push(a);\n      // Consume the next argv item as the secret value\n      if (i + 1 < argv.length) {\n        out.push(\"<redacted>\");\n        i++;\n      }\n      continue;\n    }\n    const m = a.match(SECRET_FLAG_EQ_RE);\n    if (m) {\n      out.push(`${m[1]}=<redacted>`);\n      continue;\n    }\n    out.push(a);\n  }\n  return out.join(\" \");\n}\n\nSentry.init({\n  dsn: \"https://0d384e9eff2f6542af468b92769f2f5b@o117565.ingest.us.sentry.io/4511270386466816\",\n  release: `agent-native-cli@${_version}`,\n  // sendDefaultPii MUST stay false — the CLI runs in third-party developer\n  // environments and we never want to ship request headers, IPs, cookies,\n  // or process env contents to Sentry without explicit consent.\n  sendDefaultPii: false,\n  beforeSend(event) {\n    // Defense in depth: strip any sensitive fields that may have been\n    // attached to the event despite sendDefaultPii: false (e.g. integrations\n    // that capture request metadata).\n    if (event.request) {\n      if (event.request.headers) {\n        const headers = event.request.headers as Record<string, string>;\n        for (const k of Object.keys(headers)) {\n          const lk = k.toLowerCase();\n          if (\n            lk === \"cookie\" ||\n            lk === \"authorization\" ||\n            lk === \"set-cookie\" ||\n            lk === \"proxy-authorization\"\n          ) {\n            delete headers[k];\n          }\n        }\n      }\n      // Cookies are also exposed via event.request.cookies as a separate field\n      delete (event.request as Record<string, unknown>).cookies;\n    }\n    delete event.user;\n    // Sentry's contexts can carry process.env snapshots — strip env-shaped\n    // contexts so we don't leak deployment secrets.\n    if (event.contexts && typeof event.contexts === \"object\") {\n      delete (event.contexts as Record<string, unknown>).runtime_env;\n    }\n\n    event.tags = {\n      ...event.tags,\n      // Build the command tag from process.argv with secrets redacted so\n      // `agent-native ... --token foo` doesn't leak `foo` to Sentry.\n      command: buildRedactedCommandTag(process.argv.slice(2)),\n      subcommand: process.argv[2] ?? \"none\",\n      nodeVersion: process.version,\n      platform: process.platform,\n    };\n    return event;\n  },\n});\n\nconst FEEDBACK_URL =\n  \"https://forms.agent-native.com/f/agent-native-feedback/_16ewV?source=cli\";\nconst BUGS_URL = \"https://github.com/BuilderIO/agent-native/issues\";\n\nconst command = process.argv[2];\n// Filter out bare \"--\" separators that pnpm inserts between its args and script args\nconst args = process.argv.slice(3).filter((a) => a !== \"--\");\n\nfunction parseScaffoldArgs(argv: string[]): {\n  name?: string;\n  template?: string;\n  standalone: boolean;\n} {\n  let name: string | undefined;\n  let template: string | undefined;\n  let standalone = false;\n\n  for (let i = 0; i < argv.length; i++) {\n    const arg = argv[i];\n    if (arg === \"--template\" && argv[i + 1]) {\n      template = argv[++i];\n    } else if (arg.startsWith(\"--template=\")) {\n      template = arg.slice(\"--template=\".length);\n    } else if (arg === \"--standalone\") {\n      standalone = true;\n    } else if (!arg.startsWith(\"-\") && !name) {\n      name = arg;\n    }\n  }\n\n  return { name, template, standalone };\n}\n\n// Track CLI usage (best-effort, non-blocking)\nfunction trackCli(event: string, props?: Record<string, unknown>): void {\n  try {\n    import(\"../tracking/registry.js\").then((m) => {\n      m.track(event, { command, ...props });\n    });\n    import(\"../tracking/providers.js\").then((m) =>\n      m.registerBuiltinProviders(),\n    );\n  } catch {}\n}\n\n// Global error handler — show feedback link on unhandled crashes\nprocess.on(\"uncaughtException\", (err) => {\n  console.error(`\\n  Unexpected error: ${err.message}\\n`);\n  console.error(`  Report this bug: ${BUGS_URL}`);\n  console.error(`  Send feedback:   ${FEEDBACK_URL}\\n`);\n  trackCli(\"cli.crash\", { error: err.message });\n  Sentry.captureException(err);\n  Sentry.flush(2000).finally(() => process.exit(1));\n});\n\nprocess.on(\"unhandledRejection\", (reason: any) => {\n  console.error(`\\n  Unhandled error: ${reason?.message ?? reason}\\n`);\n  console.error(`  Report this bug: ${BUGS_URL}`);\n  console.error(`  Send feedback:   ${FEEDBACK_URL}\\n`);\n  trackCli(\"cli.crash\", { error: reason?.message ?? String(reason) });\n  Sentry.captureException(reason);\n  Sentry.flush(2000).finally(() => process.exit(1));\n});\n\nfunction findViteBin(): string {\n  // Look for vite in node_modules/.bin\n  const localVite = path.resolve(\"node_modules/.bin/vite\");\n  if (fs.existsSync(localVite)) return localVite;\n  return \"vite\"; // fallback to PATH\n}\n\nfunction findTsxBin(): string {\n  const localTsx = path.resolve(\"node_modules/.bin/tsx\");\n  if (fs.existsSync(localTsx)) return localTsx;\n  return \"tsx\";\n}\n\nfunction findReactRouterBin(): string {\n  const localBin = path.resolve(\"node_modules/.bin/react-router\");\n  if (fs.existsSync(localBin)) return localBin;\n  return \"react-router\";\n}\n\n/** Check if the project uses React Router framework mode (has react-router.config.ts) */\nfunction isReactRouterFramework(): boolean {\n  return (\n    fs.existsSync(path.resolve(\"react-router.config.ts\")) ||\n    fs.existsSync(path.resolve(\"react-router.config.js\"))\n  );\n}\n\nfunction isWorkspaceRoot(): boolean {\n  const pkgPath = path.resolve(\"package.json\");\n  if (!fs.existsSync(pkgPath)) return false;\n  try {\n    const pkg = JSON.parse(fs.readFileSync(pkgPath, \"utf-8\"));\n    return (\n      typeof pkg?.[\"agent-native\"]?.workspaceCore === \"string\" &&\n      fs.existsSync(path.resolve(\"apps\"))\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction run(\n  cmd: string,\n  cmdArgs: string[],\n  opts?: { stdio?: \"inherit\" | \"pipe\" },\n) {\n  const child = spawn(cmd, cmdArgs, {\n    stdio: opts?.stdio ?? \"inherit\",\n    shell: process.platform === \"win32\",\n    env: process.env,\n  });\n  child.on(\"exit\", (code) => process.exit(code ?? 0));\n  // Forward signals to child so Cmd+C doesn't leave zombie processes holding ports\n  for (const sig of [\"SIGINT\", \"SIGTERM\", \"SIGHUP\"] as const) {\n    process.on(sig, () => {\n      child.kill(sig);\n      setTimeout(() => {\n        try {\n          child.kill(\"SIGKILL\");\n        } catch {}\n        process.exit(1);\n      }, 5000).unref();\n    });\n  }\n  return child;\n}\n\ntrackCli(\"cli.run\");\n\nswitch (command) {\n  case \"dev\": {\n    if (isWorkspaceRoot()) {\n      import(\"./workspace-dev.js\");\n      break;\n    }\n    const vite = findViteBin();\n    run(vite, args);\n    break;\n  }\n\n  case \"workspace-dev\": {\n    import(\"./workspace-dev.js\");\n    break;\n  }\n\n  case \"build\": {\n    // React Router framework mode uses `react-router build` which\n    // internally runs `vite build` with proper environment orchestration.\n    // Legacy SPA mode uses `vite build` directly.\n    if (isReactRouterFramework()) {\n      const rr = findReactRouterBin();\n      console.log(\"Building (React Router framework mode)...\");\n      execSync(`${rr} build`, { stdio: \"inherit\" });\n    } else {\n      const vite = findViteBin();\n      console.log(\"Building...\");\n      execSync(`${vite} build`, { stdio: \"inherit\" });\n    }\n\n    // Post-build: framework-mode apps also need a Nitro server bundle for\n    // `agent-native start` and for serverless presets.\n    const preset = process.env.NITRO_PRESET;\n    if (isReactRouterFramework()) {\n      const __dirname = path.dirname(fileURLToPath(import.meta.url));\n      const deployBuild = path.resolve(__dirname, \"../deploy/build.js\");\n      if (fs.existsSync(deployBuild)) {\n        execSync(`node ${deployBuild}`, { stdio: \"inherit\", env: process.env });\n      } else {\n        console.warn(\n          `[build] Deploy build script not found at ${deployBuild}. Skipping post-build step.`,\n        );\n      }\n    }\n\n    console.log(\"\\nBuild complete.\");\n    break;\n  }\n\n  case \"start\": {\n    // Like `next start` — runs Nitro production server\n    const serverEntry = path.resolve(\".output/server/index.mjs\");\n    if (!fs.existsSync(serverEntry)) {\n      console.error(\n        'No production build found. Run \"agent-native build\" first.',\n      );\n      process.exit(1);\n    }\n    run(\"node\", [serverEntry, ...args]);\n    break;\n  }\n\n  case \"action\": {\n    // Run an action from actions/ (or scripts/ for backwards compat)\n    const actionName = args[0];\n    if (!actionName) {\n      console.error(\"Usage: agent-native action <name> [--args]\");\n      process.exit(1);\n    }\n    const tsxAction = findTsxBin();\n    // Try actions/run.ts first, fall back to scripts/run.ts\n    const actionsRun = path.resolve(\"actions/run.ts\");\n    const scriptsRun = path.resolve(\"scripts/run.ts\");\n    const runFile = fs.existsSync(actionsRun) ? actionsRun : scriptsRun;\n    run(tsxAction, [runFile, ...args]);\n    break;\n  }\n\n  case \"script\": {\n    // @deprecated — use `agent-native action` instead\n    const scriptName = args[0];\n    if (!scriptName) {\n      console.error(\"Usage: agent-native script <name> [--args]\");\n      process.exit(1);\n    }\n    const tsx = findTsxBin();\n    // Try actions/run.ts first, fall back to scripts/run.ts\n    const actionsRunScript = path.resolve(\"actions/run.ts\");\n    const scriptsRunScript = path.resolve(\"scripts/run.ts\");\n    const runFileScript = fs.existsSync(actionsRunScript)\n      ? actionsRunScript\n      : scriptsRunScript;\n    run(tsx, [runFileScript, ...args]);\n    break;\n  }\n\n  case \"typecheck\": {\n    // Run TypeScript type checking\n    // React Router framework mode generates route types first\n    if (isReactRouterFramework()) {\n      const rr = findReactRouterBin();\n      try {\n        execSync(`${rr} typegen`, { stdio: \"inherit\" });\n      } catch {\n        // typegen may fail if routes aren't set up yet — continue to tsc\n      }\n    }\n    const tsc = path.resolve(\"node_modules/.bin/tsc\");\n    const tscBin = fs.existsSync(tsc) ? tsc : \"tsc\";\n    run(tscBin, [\"--noEmit\", ...args]);\n    break;\n  }\n\n  case \"create\": {\n    // Defaults to creating a workspace with a multi-select template picker.\n    // Use --standalone for the old single-app flow.\n    //   --template foo,bar         Pre-select multiple templates in the picker\n    //   --standalone               Scaffold a single standalone app\n    const parsed = parseScaffoldArgs(args);\n    import(\"./create.js\").then((m) =>\n      m.createApp(parsed.name, {\n        template: parsed.template,\n        standalone: parsed.standalone,\n      }),\n    );\n    break;\n  }\n\n  case \"create-workspace\": {\n    // Deprecated alias for `create` (since workspace is now the default).\n    const parsed = parseScaffoldArgs(args);\n    import(\"./create-workspace.js\").then((m) =>\n      m.createWorkspace({ name: parsed.name, template: parsed.template }),\n    );\n    break;\n  }\n\n  case \"add-app\": {\n    // Add one or more apps to the current workspace.\n    const parsed = parseScaffoldArgs(args);\n    import(\"./create.js\").then((m) =>\n      m.addAppToWorkspace(parsed.name, { template: parsed.template }),\n    );\n    break;\n  }\n\n  case \"deploy\": {\n    // Build and deploy the entire workspace as one unit. Each app is served\n    // at /<app>/* under the same origin.\n    import(\"../deploy/workspace-deploy.js\")\n      .then((m) => m.runWorkspaceDeploy({ args }))\n      .catch((err) => {\n        console.error(\"Deploy failed:\", err?.message ?? err);\n        process.exit(1);\n      });\n    break;\n  }\n\n  case \"setup-agents\": {\n    import(\"./setup-agents.js\").then((m) => m.runSetupAgents());\n    break;\n  }\n\n  case \"info\": {\n    // Print read-only info about an installable package (e.g. @agent-native/scheduling).\n    // Lists subpath exports, source paths in node_modules, and docs pointers.\n    import(\"./info.js\").then((m) => m.runInfo(args[0]));\n    break;\n  }\n\n  case \"--version\":\n  case \"-v\": {\n    console.log(_version);\n    break;\n  }\n\n  case \"--help\":\n  case \"-h\":\n  case undefined:\n    console.log(`agent-native v${_version}\n\nUsage:\n  agent-native dev              Start development server\n                                (or the workspace gateway at a workspace root)\n  agent-native build            Build for production (client + server)\n  agent-native start            Start production server\n  agent-native action <name>    Run an action from actions/\n  agent-native script <name>    Run an action (deprecated alias for 'action')\n  agent-native typecheck        Run TypeScript type checking\n  agent-native create [name]    Scaffold a new agent-native workspace with a\n                                multi-select template picker. Use --standalone\n                                for a single-app scaffold.\n  agent-native add-app [name]   Add one or more apps to the current workspace\n  agent-native workspace-dev    Start the multi-app workspace gateway\n  agent-native deploy           Build & deploy every app in the workspace to\n                                a single origin (your-agents.com/<app>/*)\n  agent-native setup-agents     Create symlinks for all agent tools\n  agent-native info <pkg>       Print info about an installed package:\n                                exports, source paths, and docs links.\n\nOptions:\n  -h, --help                    Show this help message\n  -v, --version                 Show version number\n  --template <names>            Comma-separated templates to pre-select\n                                (mail,calendar,analytics,...) — or\n                                github:user/repo for community templates\n  --standalone                  Scaffold a single standalone app (no workspace)\n  --preset <name>               Workspace deploy preset:\n                                cloudflare_pages (default) or netlify\n  --build-only                  Build workspace deploy artifacts without publishing\n\nFeedback:  ${FEEDBACK_URL}\nBugs:      ${BUGS_URL}`);\n    break;\n\n  default:\n    console.error(`Unknown command: ${command}`);\n    console.error('Run \"agent-native --help\" for usage.');\n    console.error(`Bugs: ${BUGS_URL}`);\n    process.exit(1);\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AAEvC,2EAA2E;AAC3E,IAAI,QAAQ,GAAG,SAAS,CAAC;AACzB,IAAI,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,yCAAyC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE,OAAO,CAAC,CACxE,CAAC;IACF,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC;AACzB,CAAC;AAAC,MAAM,CAAC,CAAA,CAAC;AAEV;;;;;;;GAOG;AACH,MAAM,cAAc,GAAG,+CAA+C,CAAC;AACvE,MAAM,iBAAiB,GACrB,sDAAsD,CAAC;AACzD,SAAS,uBAAuB,CAAC,IAAc;IAC7C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACZ,iDAAiD;YACjD,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBACxB,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACvB,CAAC,EAAE,CAAC;YACN,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,IAAI,CAAC;IACV,GAAG,EAAE,uFAAuF;IAC5F,OAAO,EAAE,oBAAoB,QAAQ,EAAE;IACvC,yEAAyE;IACzE,wEAAwE;IACxE,8DAA8D;IAC9D,cAAc,EAAE,KAAK;IACrB,UAAU,CAAC,KAAK;QACd,uEAAuE;QACvE,2CAA2C;QAC3C,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;QACzD,IACE,aAAa,KAAK,iBAAiB;YACnC,KAAK,CAAC,IAAI,EAAE,OAAO,KAAK,YAAY,EACpC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,kEAAkE;QAClE,yEAAyE;QACzE,kCAAkC;QAClC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAiC,CAAC;gBAChE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBACrC,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;oBAC3B,IACE,EAAE,KAAK,QAAQ;wBACf,EAAE,KAAK,eAAe;wBACtB,EAAE,KAAK,YAAY;wBACnB,EAAE,KAAK,qBAAqB,EAC5B,CAAC;wBACD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;oBACpB,CAAC;gBACH,CAAC;YACH,CAAC;YACD,yEAAyE;YACzE,OAAQ,KAAK,CAAC,OAAmC,CAAC,OAAO,CAAC;QAC5D,CAAC;QACD,uEAAuE;QACvE,iEAAiE;QACjE,wEAAwE;QACxE,mEAAmE;QACnE,iCAAiC;QACjC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,KAAK,CAAC,IAA+B,CAAC;YACnD,OAAO,IAAI,CAAC,UAAU,CAAC;YACvB,MAAM,WAAW,GACf,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ;gBAC3B,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;gBAC9B,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;YACpC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,KAAK,CAAC,IAAI,CAAC;YACpB,CAAC;QACH,CAAC;QACD,uEAAuE;QACvE,gDAAgD;QAChD,IAAI,KAAK,CAAC,QAAQ,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACzD,OAAQ,KAAK,CAAC,QAAoC,CAAC,WAAW,CAAC;QACjE,CAAC;QAED,KAAK,CAAC,IAAI,GAAG;YACX,GAAG,KAAK,CAAC,IAAI;YACb,mEAAmE;YACnE,+DAA+D;YAC/D,OAAO,EAAE,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACvD,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM;YACrC,WAAW,EAAE,OAAO,CAAC,OAAO;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAC,CAAC;AAEH,2EAA2E;AAC3E,2EAA2E;AAC3E,4EAA4E;AAC5E,CAAC;IACC,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAClD,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACxD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,MAAM,YAAY,GAChB,0EAA0E,CAAC;AAC7E,MAAM,QAAQ,GAAG,kDAAkD,CAAC;AAEpE,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAChC,qFAAqF;AACrF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AAE7D,SAAS,iBAAiB,CAAC,IAAc;IAKvC,IAAI,IAAwB,CAAC;IAC7B,IAAI,QAA4B,CAAC;IACjC,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,YAAY,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACxC,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACzC,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;YAClC,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,GAAG,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AACxC,CAAC;AAED,8CAA8C;AAC9C,SAAS,QAAQ,CAAC,KAAa,EAAE,KAA+B;IAC9D,IAAI,CAAC;QACH,MAAM,CAAC,yBAAyB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3C,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5C,CAAC,CAAC,wBAAwB,EAAE,CAC7B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AACZ,CAAC;AAED,iEAAiE;AACjE,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;IACtC,OAAO,CAAC,KAAK,CAAC,yBAAyB,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,KAAK,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,KAAK,CAAC,sBAAsB,YAAY,IAAI,CAAC,CAAC;IACtD,QAAQ,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9C,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAW,EAAE,EAAE;IAC/C,OAAO,CAAC,KAAK,CAAC,wBAAwB,MAAM,EAAE,OAAO,IAAI,MAAM,IAAI,CAAC,CAAC;IACrE,OAAO,CAAC,KAAK,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,KAAK,CAAC,sBAAsB,YAAY,IAAI,CAAC,CAAC;IACtD,QAAQ,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpE,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,SAAS,WAAW;IAClB,qCAAqC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACzD,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,OAAO,MAAM,CAAC,CAAC,mBAAmB;AACpC,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACvD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAChE,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7C,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,yFAAyF;AACzF,SAAS,sBAAsB;IAC7B,OAAO,CACL,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACrD,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CACtD,CAAC;AACJ,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1D,OAAO,CACL,OAAO,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,aAAa,KAAK,QAAQ;YACxD,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CACpC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,GAAG,CACV,GAAW,EACX,OAAiB,EACjB,IAAqC;IAErC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE;QAChC,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,SAAS;QAC/B,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;QACnC,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACpD,iFAAiF;IACjF,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAU,EAAE,CAAC;QAC3D,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE;YACnB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC;oBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;gBACV,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,iBAAiB,CAAC,GAAW;IAIpC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,QAA4B,CAAC;IACjC,IAAI,GAAuB,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YACxE,QAAQ,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YACnE,GAAG,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,YAAY,CACnB,GAAW,EACX,OAAiB,EACjB,IAAgD;IAEhD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACnC,MAAM,iBAAiB,GAAG,IAAI,CAAC;QAC/B,MAAM,iBAAiB,GAAG,IAAI,CAAC;QAC/B,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,SAAS,GAAG,EAAE,CAAC;QAEnB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE;YAChC,KAAK,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;YAClC,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;YACnC,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;SAC7B,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,MAAM,IAAI,GAAG,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACjD,SAAS;gBACP,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5E,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,MAAM,IAAI,GAAG,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACjD,SAAS;gBACP,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5E,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,mCAAmC;YACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;YAC1B,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE;gBAC3B,IAAI,EAAE;oBACJ,SAAS,EAAE,IAAI,CAAC,KAAK;oBACrB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxB;gBACD,KAAK,EAAE;oBACL,OAAO,EAAE,GAAG,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;oBACtC,GAAG;oBACH,KAAK,EAAE,OAAO;iBACf;aACF,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAChC,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACnB,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;YAC1B,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,YAAY,GAAG,GAAG,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,MAAM,GAAG,GAAG,IAAI,KAAK,CACnB,eAAe,IAAI,CAAC,KAAK,2BAA2B,QAAQ,EAAE;gBAC5D,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAC/B,CAAC;YACF,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE;gBAC3B,IAAI,EAAE;oBACJ,SAAS,EAAE,IAAI,CAAC,KAAK;oBACrB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxB;gBACD,KAAK,EAAE;oBACL,OAAO,EAAE,YAAY;oBACrB,GAAG;oBACH,QAAQ;oBACR,MAAM,EAAE,MAAM,IAAI,IAAI;oBACtB,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;iBACtB;aACF,CAAC,CAAC;YACH,mDAAmD;YACnD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,QAAQ,CAAC,SAAS,CAAC,CAAC;AAEpB,QAAQ,OAAO,EAAE,CAAC;IAChB,KAAK,KAAK,CAAC,CAAC,CAAC;QACX,IAAI,eAAe,EAAE,EAAE,CAAC;YACtB,MAAM,CAAC,oBAAoB,CAAC,CAAC;YAC7B,MAAM;QACR,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChB,MAAM;IACR,CAAC;IAED,KAAK,eAAe,CAAC,CAAC,CAAC;QACrB,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC7B,MAAM;IACR,CAAC;IAED,KAAK,OAAO,CAAC,CAAC,CAAC;QACb,8DAA8D;QAC9D,sEAAsE;QACtE,8CAA8C;QAC9C,EAAE;QACF,uEAAuE;QACvE,qEAAqE;QACrE,oEAAoE;QACpE,qCAAqC;QACrC,CAAC,KAAK,IAAI,EAAE;YACV,IAAI,sBAAsB,EAAE,EAAE,CAAC;gBAC7B,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;gBAChC,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;gBACzD,MAAM,YAAY,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACrE,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBAC3B,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;YAC/D,CAAC;YAED,sEAAsE;YACtE,mDAAmD;YACnD,IAAI,sBAAsB,EAAE,EAAE,CAAC;gBAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;gBAClE,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC/B,MAAM,YAAY,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE;wBACxC,KAAK,EAAE,cAAc;wBACrB,GAAG,EAAE,OAAO,CAAC,GAAG;qBACjB,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CACV,4CAA4C,WAAW,6BAA6B,CACrF,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACnC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACjB,oEAAoE;YACpE,kEAAkE;YAClE,oEAAoE;YACpE,+BAA+B;YAC/B,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QACH,MAAM;IACR,CAAC;IAED,KAAK,OAAO,CAAC,CAAC,CAAC;QACb,mDAAmD;QACnD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC7D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,KAAK,CACX,4DAA4D,CAC7D,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,GAAG,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACpC,MAAM;IACR,CAAC;IAED,KAAK,QAAQ,CAAC,CAAC,CAAC;QACd,iEAAiE;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;QAC/B,wDAAwD;QACxD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;QACpE,GAAG,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACnC,MAAM;IACR,CAAC;IAED,KAAK,QAAQ,CAAC,CAAC,CAAC;QACd,kDAAkD;QAClD,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,wDAAwD;QACxD,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACxD,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACxD,MAAM,aAAa,GAAG,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC;YACnD,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,gBAAgB,CAAC;QACrB,GAAG,CAAC,GAAG,EAAE,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACnC,MAAM;IACR,CAAC;IAED,KAAK,WAAW,CAAC,CAAC,CAAC;QACjB,+BAA+B;QAC/B,0DAA0D;QAC1D,IAAI,sBAAsB,EAAE,EAAE,CAAC;YAC7B,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;YACnE,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QAChD,GAAG,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACnC,MAAM;IACR,CAAC;IAED,KAAK,QAAQ,CAAC,CAAC,CAAC;QACd,wEAAwE;QACxE,gDAAgD;QAChD,2EAA2E;QAC3E,gEAAgE;QAChE,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/B,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CACH,CAAC;QACF,MAAM;IACR,CAAC;IAED,KAAK,kBAAkB,CAAC,CAAC,CAAC;QACxB,sEAAsE;QACtE,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACzC,CAAC,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CACpE,CAAC;QACF,MAAM;IACR,CAAC;IAED,KAAK,SAAS,CAAC,CAAC,CAAC;QACf,iDAAiD;QACjD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/B,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAChE,CAAC;QACF,MAAM;IACR,CAAC;IAED,KAAK,QAAQ,CAAC,CAAC,CAAC;QACd,wEAAwE;QACxE,qCAAqC;QACrC,MAAM,CAAC,+BAA+B,CAAC;aACpC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;aAC3C,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QACL,MAAM;IACR,CAAC;IAED,KAAK,cAAc,CAAC,CAAC,CAAC;QACpB,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;QAC5D,MAAM;IACR,CAAC;IAED,KAAK,MAAM,CAAC,CAAC,CAAC;QACZ,qFAAqF;QACrF,0EAA0E;QAC1E,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM;IACR,CAAC;IAED,KAAK,WAAW,CAAC;IACjB,KAAK,IAAI,CAAC,CAAC,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtB,MAAM;IACR,CAAC;IAED,KAAK,QAAQ,CAAC;IACd,KAAK,IAAI,CAAC;IACV,KAAK,SAAS;QACZ,OAAO,CAAC,GAAG,CAAC,iBAAiB,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAgC5B,YAAY;aACZ,QAAQ,EAAE,CAAC,CAAC;QACrB,MAAM;IAER;QACE,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACtD,OAAO,CAAC,KAAK,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC","sourcesContent":["#!/usr/bin/env node\n\nimport { execSync, spawn } from \"child_process\";\nimport path from \"path\";\nimport fs from \"fs\";\nimport { fileURLToPath } from \"url\";\nimport * as Sentry from \"@sentry/node\";\n\n// Resolve version once at module scope — used by both --version and --help\nlet _version = \"unknown\";\ntry {\n  const __dirname = path.dirname(fileURLToPath(import.meta.url));\n  // dist/cli/index.js → ../../package.json\n  const pkg = JSON.parse(\n    fs.readFileSync(path.resolve(__dirname, \"../../package.json\"), \"utf-8\"),\n  );\n  _version = pkg.version;\n} catch {}\n\n/**\n * Build a redacted \"command\" tag from process.argv. Strips the value that\n * follows any --token / --key / --secret / --password / --api-key flag so\n * we don't ship developer secrets to Sentry alongside the crash.\n *\n * Supports both `--token foo` (separate argv item) and `--token=foo`\n * (combined argv item) forms.\n */\nconst SECRET_FLAG_RE = /^--?(token|key|secret|password|api[_-]?key)$/i;\nconst SECRET_FLAG_EQ_RE =\n  /^(--?(token|key|secret|password|api[_-]?key))=(.*)$/i;\nfunction buildRedactedCommandTag(argv: string[]): string {\n  const out: string[] = [];\n  for (let i = 0; i < argv.length; i++) {\n    const a = argv[i];\n    if (SECRET_FLAG_RE.test(a)) {\n      out.push(a);\n      // Consume the next argv item as the secret value\n      if (i + 1 < argv.length) {\n        out.push(\"<redacted>\");\n        i++;\n      }\n      continue;\n    }\n    const m = a.match(SECRET_FLAG_EQ_RE);\n    if (m) {\n      out.push(`${m[1]}=<redacted>`);\n      continue;\n    }\n    out.push(a);\n  }\n  return out.join(\" \");\n}\n\nSentry.init({\n  dsn: \"https://0d384e9eff2f6542af468b92769f2f5b@o117565.ingest.us.sentry.io/4511270386466816\",\n  release: `agent-native-cli@${_version}`,\n  // sendDefaultPii MUST stay false — the CLI runs in third-party developer\n  // environments and we never want to ship request headers, IPs, cookies,\n  // or process env contents to Sentry without explicit consent.\n  sendDefaultPii: false,\n  beforeSend(event) {\n    // Drop expected user-input rejections (validateRepoName, etc.) so they\n    // don't pollute Sentry with non-bug noise.\n    const exceptionType = event.exception?.values?.[0]?.type;\n    if (\n      exceptionType === \"ValidationError\" ||\n      event.tags?.handled === \"validation\"\n    ) {\n      return null;\n    }\n\n    // Defense in depth: strip any sensitive fields that may have been\n    // attached to the event despite sendDefaultPii: false (e.g. integrations\n    // that capture request metadata).\n    if (event.request) {\n      if (event.request.headers) {\n        const headers = event.request.headers as Record<string, string>;\n        for (const k of Object.keys(headers)) {\n          const lk = k.toLowerCase();\n          if (\n            lk === \"cookie\" ||\n            lk === \"authorization\" ||\n            lk === \"set-cookie\" ||\n            lk === \"proxy-authorization\"\n          ) {\n            delete headers[k];\n          }\n        }\n      }\n      // Cookies are also exposed via event.request.cookies as a separate field\n      delete (event.request as Record<string, unknown>).cookies;\n    }\n    // Keep user info that was explicitly set via Sentry.setUser (id/email)\n    // so we can attribute crashes back to the operator. Always strip\n    // ip_address — the CLI runs on third-party machines and the IP is auto-\n    // collected without consent. If only auto-collected fields remain,\n    // drop the user object entirely.\n    if (event.user) {\n      const user = event.user as Record<string, unknown>;\n      delete user.ip_address;\n      const hasIdentity =\n        typeof user.id === \"string\" ||\n        typeof user.email === \"string\" ||\n        typeof user.username === \"string\";\n      if (!hasIdentity) {\n        delete event.user;\n      }\n    }\n    // Sentry's contexts can carry process.env snapshots — strip env-shaped\n    // contexts so we don't leak deployment secrets.\n    if (event.contexts && typeof event.contexts === \"object\") {\n      delete (event.contexts as Record<string, unknown>).runtime_env;\n    }\n\n    event.tags = {\n      ...event.tags,\n      // Build the command tag from process.argv with secrets redacted so\n      // `agent-native ... --token foo` doesn't leak `foo` to Sentry.\n      command: buildRedactedCommandTag(process.argv.slice(2)),\n      subcommand: process.argv[2] ?? \"none\",\n      nodeVersion: process.version,\n      platform: process.platform,\n    };\n    return event;\n  },\n});\n\n// Identify the operator so future CLI errors carry spaceId / builderUserId\n// that we can map back to a real Builder user. The CLI doesn't have a real\n// email today — only the env-managed identifiers from the workspace's .env.\n{\n  const builderUserId = process.env.BUILDER_USER_ID;\n  const builderPublicKey = process.env.BUILDER_PUBLIC_KEY;\n  if (builderUserId) {\n    Sentry.setUser({ id: builderUserId });\n    Sentry.setTag(\"builderUserId\", builderUserId);\n  }\n  if (builderPublicKey) {\n    Sentry.setTag(\"spaceId\", builderPublicKey);\n  }\n}\n\nconst FEEDBACK_URL =\n  \"https://forms.agent-native.com/f/agent-native-feedback/_16ewV?source=cli\";\nconst BUGS_URL = \"https://github.com/BuilderIO/agent-native/issues\";\n\nconst command = process.argv[2];\n// Filter out bare \"--\" separators that pnpm inserts between its args and script args\nconst args = process.argv.slice(3).filter((a) => a !== \"--\");\n\nfunction parseScaffoldArgs(argv: string[]): {\n  name?: string;\n  template?: string;\n  standalone: boolean;\n} {\n  let name: string | undefined;\n  let template: string | undefined;\n  let standalone = false;\n\n  for (let i = 0; i < argv.length; i++) {\n    const arg = argv[i];\n    if (arg === \"--template\" && argv[i + 1]) {\n      template = argv[++i];\n    } else if (arg.startsWith(\"--template=\")) {\n      template = arg.slice(\"--template=\".length);\n    } else if (arg === \"--standalone\") {\n      standalone = true;\n    } else if (!arg.startsWith(\"-\") && !name) {\n      name = arg;\n    }\n  }\n\n  return { name, template, standalone };\n}\n\n// Track CLI usage (best-effort, non-blocking)\nfunction trackCli(event: string, props?: Record<string, unknown>): void {\n  try {\n    import(\"../tracking/registry.js\").then((m) => {\n      m.track(event, { command, ...props });\n    });\n    import(\"../tracking/providers.js\").then((m) =>\n      m.registerBuiltinProviders(),\n    );\n  } catch {}\n}\n\n// Global error handler — show feedback link on unhandled crashes\nprocess.on(\"uncaughtException\", (err) => {\n  console.error(`\\n  Unexpected error: ${err.message}\\n`);\n  console.error(`  Report this bug: ${BUGS_URL}`);\n  console.error(`  Send feedback:   ${FEEDBACK_URL}\\n`);\n  trackCli(\"cli.crash\", { error: err.message });\n  Sentry.captureException(err);\n  Sentry.flush(2000).finally(() => process.exit(1));\n});\n\nprocess.on(\"unhandledRejection\", (reason: any) => {\n  console.error(`\\n  Unhandled error: ${reason?.message ?? reason}\\n`);\n  console.error(`  Report this bug: ${BUGS_URL}`);\n  console.error(`  Send feedback:   ${FEEDBACK_URL}\\n`);\n  trackCli(\"cli.crash\", { error: reason?.message ?? String(reason) });\n  Sentry.captureException(reason);\n  Sentry.flush(2000).finally(() => process.exit(1));\n});\n\nfunction findViteBin(): string {\n  // Look for vite in node_modules/.bin\n  const localVite = path.resolve(\"node_modules/.bin/vite\");\n  if (fs.existsSync(localVite)) return localVite;\n  return \"vite\"; // fallback to PATH\n}\n\nfunction findTsxBin(): string {\n  const localTsx = path.resolve(\"node_modules/.bin/tsx\");\n  if (fs.existsSync(localTsx)) return localTsx;\n  return \"tsx\";\n}\n\nfunction findReactRouterBin(): string {\n  const localBin = path.resolve(\"node_modules/.bin/react-router\");\n  if (fs.existsSync(localBin)) return localBin;\n  return \"react-router\";\n}\n\n/** Check if the project uses React Router framework mode (has react-router.config.ts) */\nfunction isReactRouterFramework(): boolean {\n  return (\n    fs.existsSync(path.resolve(\"react-router.config.ts\")) ||\n    fs.existsSync(path.resolve(\"react-router.config.js\"))\n  );\n}\n\nfunction isWorkspaceRoot(): boolean {\n  const pkgPath = path.resolve(\"package.json\");\n  if (!fs.existsSync(pkgPath)) return false;\n  try {\n    const pkg = JSON.parse(fs.readFileSync(pkgPath, \"utf-8\"));\n    return (\n      typeof pkg?.[\"agent-native\"]?.workspaceCore === \"string\" &&\n      fs.existsSync(path.resolve(\"apps\"))\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction run(\n  cmd: string,\n  cmdArgs: string[],\n  opts?: { stdio?: \"inherit\" | \"pipe\" },\n) {\n  const child = spawn(cmd, cmdArgs, {\n    stdio: opts?.stdio ?? \"inherit\",\n    shell: process.platform === \"win32\",\n    env: process.env,\n  });\n  child.on(\"exit\", (code) => process.exit(code ?? 0));\n  // Forward signals to child so Cmd+C doesn't leave zombie processes holding ports\n  for (const sig of [\"SIGINT\", \"SIGTERM\", \"SIGHUP\"] as const) {\n    process.on(sig, () => {\n      child.kill(sig);\n      setTimeout(() => {\n        try {\n          child.kill(\"SIGKILL\");\n        } catch {}\n        process.exit(1);\n      }, 5000).unref();\n    });\n  }\n  return child;\n}\n\n/**\n * Walk up from `cwd` and try to figure out which template / app this build\n * is running for. We look for two patterns:\n *\n *   - `templates/<name>/...` — building inside the framework monorepo\n *   - `apps/<name>/...`      — building inside a scaffolded workspace\n *\n * Both, neither, or one may match. Used purely as Sentry tags so we can\n * filter the noisy \"Command failed: react-router build\" issues by template.\n */\nfunction inferBuildContext(cwd: string): {\n  template?: string;\n  app?: string;\n} {\n  const segs = cwd.split(path.sep);\n  let template: string | undefined;\n  let app: string | undefined;\n  for (let i = 0; i < segs.length - 1; i++) {\n    if (segs[i] === \"templates\" && segs[i + 1] && !segs[i + 1].startsWith(\".\"))\n      template = segs[i + 1];\n    if (segs[i] === \"apps\" && segs[i + 1] && !segs[i + 1].startsWith(\".\"))\n      app = segs[i + 1];\n  }\n  return { template, app };\n}\n\n/**\n * Run a build subcommand, streaming its stdout/stderr to the user's terminal\n * in real time while also capturing bounded tails for Sentry. On non-zero\n * exit we report a structured event (template, app, exit code, stderr/stdout\n * tails) and exit with the child's code. We deliberately do NOT throw — the\n * global uncaughtException handler would re-capture with a generic\n * \"Error: Command failed\" title, collapsing every template's failure into\n * one issue (which is exactly what we're trying to fix here).\n */\nfunction runBuildStep(\n  cmd: string,\n  cmdArgs: string[],\n  opts: { label: string; env?: NodeJS.ProcessEnv },\n): Promise<void> {\n  return new Promise<void>((resolve) => {\n    const STDERR_TAIL_BYTES = 8000;\n    const STDOUT_TAIL_BYTES = 4000;\n    let stderrBuf = \"\";\n    let stdoutBuf = \"\";\n\n    const child = spawn(cmd, cmdArgs, {\n      stdio: [\"inherit\", \"pipe\", \"pipe\"],\n      shell: process.platform === \"win32\",\n      env: opts.env ?? process.env,\n    });\n\n    child.stdout?.on(\"data\", (chunk: Buffer) => {\n      process.stdout.write(chunk);\n      const next = stdoutBuf + chunk.toString(\"utf-8\");\n      stdoutBuf =\n        next.length > STDOUT_TAIL_BYTES ? next.slice(-STDOUT_TAIL_BYTES) : next;\n    });\n    child.stderr?.on(\"data\", (chunk: Buffer) => {\n      process.stderr.write(chunk);\n      const next = stderrBuf + chunk.toString(\"utf-8\");\n      stderrBuf =\n        next.length > STDERR_TAIL_BYTES ? next.slice(-STDERR_TAIL_BYTES) : next;\n    });\n\n    child.on(\"error\", (err) => {\n      // Failure to spawn (ENOENT, etc.).\n      const cwd = process.cwd();\n      const { template, app } = inferBuildContext(cwd);\n      Sentry.captureException(err, {\n        tags: {\n          buildStep: opts.label,\n          ...(template ? { template } : {}),\n          ...(app ? { app } : {}),\n        },\n        extra: {\n          command: `${cmd} ${cmdArgs.join(\" \")}`,\n          cwd,\n          stage: \"spawn\",\n        },\n      });\n      Sentry.flush(2000).finally(() => process.exit(1));\n    });\n\n    child.on(\"exit\", (code, signal) => {\n      const exitCode = code ?? (signal ? 1 : 0);\n      if (exitCode === 0) {\n        resolve();\n        return;\n      }\n      const cwd = process.cwd();\n      const { template, app } = inferBuildContext(cwd);\n      const childCommand = `${cmd} ${cmdArgs.join(\" \")}`;\n      const err = new Error(\n        `Build step \"${opts.label}\" failed with exit code ${exitCode}` +\n          (template ? ` (template=${template})` : \"\") +\n          (app ? ` (app=${app})` : \"\"),\n      );\n      Sentry.captureException(err, {\n        tags: {\n          buildStep: opts.label,\n          ...(template ? { template } : {}),\n          ...(app ? { app } : {}),\n        },\n        extra: {\n          command: childCommand,\n          cwd,\n          exitCode,\n          signal: signal ?? null,\n          stderrTail: stderrBuf,\n          stdoutTail: stdoutBuf,\n        },\n      });\n      // Don't throw — see comment on runBuildStep above.\n      Sentry.flush(2000).finally(() => process.exit(exitCode));\n    });\n  });\n}\n\ntrackCli(\"cli.run\");\n\nswitch (command) {\n  case \"dev\": {\n    if (isWorkspaceRoot()) {\n      import(\"./workspace-dev.js\");\n      break;\n    }\n    const vite = findViteBin();\n    run(vite, args);\n    break;\n  }\n\n  case \"workspace-dev\": {\n    import(\"./workspace-dev.js\");\n    break;\n  }\n\n  case \"build\": {\n    // React Router framework mode uses `react-router build` which\n    // internally runs `vite build` with proper environment orchestration.\n    // Legacy SPA mode uses `vite build` directly.\n    //\n    // Each step uses runBuildStep so that on failure we get a Sentry event\n    // tagged with template/app and including stderr/stdout tails. If the\n    // child exits non-zero, runBuildStep calls process.exit itself; the\n    // continuation only runs on success.\n    (async () => {\n      if (isReactRouterFramework()) {\n        const rr = findReactRouterBin();\n        console.log(\"Building (React Router framework mode)...\");\n        await runBuildStep(rr, [\"build\"], { label: \"react-router-build\" });\n      } else {\n        const vite = findViteBin();\n        console.log(\"Building...\");\n        await runBuildStep(vite, [\"build\"], { label: \"vite-build\" });\n      }\n\n      // Post-build: framework-mode apps also need a Nitro server bundle for\n      // `agent-native start` and for serverless presets.\n      if (isReactRouterFramework()) {\n        const __dirname = path.dirname(fileURLToPath(import.meta.url));\n        const deployBuild = path.resolve(__dirname, \"../deploy/build.js\");\n        if (fs.existsSync(deployBuild)) {\n          await runBuildStep(\"node\", [deployBuild], {\n            label: \"deploy-build\",\n            env: process.env,\n          });\n        } else {\n          console.warn(\n            `[build] Deploy build script not found at ${deployBuild}. Skipping post-build step.`,\n          );\n        }\n      }\n\n      console.log(\"\\nBuild complete.\");\n    })().catch((err) => {\n      // runBuildStep handles its own failures and exits, so reaching here\n      // implies a programming error in the orchestration above. Capture\n      // and exit so the global unhandledRejection handler doesn't double-\n      // report with a generic title.\n      Sentry.captureException(err);\n      Sentry.flush(2000).finally(() => process.exit(1));\n    });\n    break;\n  }\n\n  case \"start\": {\n    // Like `next start` — runs Nitro production server\n    const serverEntry = path.resolve(\".output/server/index.mjs\");\n    if (!fs.existsSync(serverEntry)) {\n      console.error(\n        'No production build found. Run \"agent-native build\" first.',\n      );\n      process.exit(1);\n    }\n    run(\"node\", [serverEntry, ...args]);\n    break;\n  }\n\n  case \"action\": {\n    // Run an action from actions/ (or scripts/ for backwards compat)\n    const actionName = args[0];\n    if (!actionName) {\n      console.error(\"Usage: agent-native action <name> [--args]\");\n      process.exit(1);\n    }\n    const tsxAction = findTsxBin();\n    // Try actions/run.ts first, fall back to scripts/run.ts\n    const actionsRun = path.resolve(\"actions/run.ts\");\n    const scriptsRun = path.resolve(\"scripts/run.ts\");\n    const runFile = fs.existsSync(actionsRun) ? actionsRun : scriptsRun;\n    run(tsxAction, [runFile, ...args]);\n    break;\n  }\n\n  case \"script\": {\n    // @deprecated — use `agent-native action` instead\n    const scriptName = args[0];\n    if (!scriptName) {\n      console.error(\"Usage: agent-native script <name> [--args]\");\n      process.exit(1);\n    }\n    const tsx = findTsxBin();\n    // Try actions/run.ts first, fall back to scripts/run.ts\n    const actionsRunScript = path.resolve(\"actions/run.ts\");\n    const scriptsRunScript = path.resolve(\"scripts/run.ts\");\n    const runFileScript = fs.existsSync(actionsRunScript)\n      ? actionsRunScript\n      : scriptsRunScript;\n    run(tsx, [runFileScript, ...args]);\n    break;\n  }\n\n  case \"typecheck\": {\n    // Run TypeScript type checking\n    // React Router framework mode generates route types first\n    if (isReactRouterFramework()) {\n      const rr = findReactRouterBin();\n      try {\n        execSync(`${rr} typegen`, { stdio: \"inherit\" });\n      } catch {\n        // typegen may fail if routes aren't set up yet — continue to tsc\n      }\n    }\n    const tsc = path.resolve(\"node_modules/.bin/tsc\");\n    const tscBin = fs.existsSync(tsc) ? tsc : \"tsc\";\n    run(tscBin, [\"--noEmit\", ...args]);\n    break;\n  }\n\n  case \"create\": {\n    // Defaults to creating a workspace with a multi-select template picker.\n    // Use --standalone for the old single-app flow.\n    //   --template foo,bar         Pre-select multiple templates in the picker\n    //   --standalone               Scaffold a single standalone app\n    const parsed = parseScaffoldArgs(args);\n    import(\"./create.js\").then((m) =>\n      m.createApp(parsed.name, {\n        template: parsed.template,\n        standalone: parsed.standalone,\n      }),\n    );\n    break;\n  }\n\n  case \"create-workspace\": {\n    // Deprecated alias for `create` (since workspace is now the default).\n    const parsed = parseScaffoldArgs(args);\n    import(\"./create-workspace.js\").then((m) =>\n      m.createWorkspace({ name: parsed.name, template: parsed.template }),\n    );\n    break;\n  }\n\n  case \"add-app\": {\n    // Add one or more apps to the current workspace.\n    const parsed = parseScaffoldArgs(args);\n    import(\"./create.js\").then((m) =>\n      m.addAppToWorkspace(parsed.name, { template: parsed.template }),\n    );\n    break;\n  }\n\n  case \"deploy\": {\n    // Build and deploy the entire workspace as one unit. Each app is served\n    // at /<app>/* under the same origin.\n    import(\"../deploy/workspace-deploy.js\")\n      .then((m) => m.runWorkspaceDeploy({ args }))\n      .catch((err) => {\n        console.error(\"Deploy failed:\", err?.message ?? err);\n        process.exit(1);\n      });\n    break;\n  }\n\n  case \"setup-agents\": {\n    import(\"./setup-agents.js\").then((m) => m.runSetupAgents());\n    break;\n  }\n\n  case \"info\": {\n    // Print read-only info about an installable package (e.g. @agent-native/scheduling).\n    // Lists subpath exports, source paths in node_modules, and docs pointers.\n    import(\"./info.js\").then((m) => m.runInfo(args[0]));\n    break;\n  }\n\n  case \"--version\":\n  case \"-v\": {\n    console.log(_version);\n    break;\n  }\n\n  case \"--help\":\n  case \"-h\":\n  case undefined:\n    console.log(`agent-native v${_version}\n\nUsage:\n  agent-native dev              Start development server\n                                (or the workspace gateway at a workspace root)\n  agent-native build            Build for production (client + server)\n  agent-native start            Start production server\n  agent-native action <name>    Run an action from actions/\n  agent-native script <name>    Run an action (deprecated alias for 'action')\n  agent-native typecheck        Run TypeScript type checking\n  agent-native create [name]    Scaffold a new agent-native workspace with a\n                                multi-select template picker. Use --standalone\n                                for a single-app scaffold.\n  agent-native add-app [name]   Add one or more apps to the current workspace\n  agent-native workspace-dev    Start the multi-app workspace gateway\n  agent-native deploy           Build & deploy every app in the workspace to\n                                a single origin (your-agents.com/<app>/*)\n  agent-native setup-agents     Create symlinks for all agent tools\n  agent-native info <pkg>       Print info about an installed package:\n                                exports, source paths, and docs links.\n\nOptions:\n  -h, --help                    Show this help message\n  -v, --version                 Show version number\n  --template <names>            Comma-separated templates to pre-select\n                                (mail,calendar,analytics,...) — or\n                                github:user/repo for community templates\n  --standalone                  Scaffold a single standalone app (no workspace)\n  --preset <name>               Workspace deploy preset:\n                                cloudflare_pages (default) or netlify\n  --build-only                  Build workspace deploy artifacts without publishing\n\nFeedback:  ${FEEDBACK_URL}\nBugs:      ${BUGS_URL}`);\n    break;\n\n  default:\n    console.error(`Unknown command: ${command}`);\n    console.error('Run \"agent-native --help\" for usage.');\n    console.error(`Bugs: ${BUGS_URL}`);\n    process.exit(1);\n}\n"]}

package/dist/cli/workspace-dev.js

@@ -4,6 +4,7 @@ import fs from "node:fs";
 import http from "node:http";
 import net from "node:net";
 import path from "node:path";
+import * as Sentry from "@sentry/node";
 const root = process.cwd();
 const appsDir = path.join(root, "apps");
 fs.mkdirSync(path.join(root, "data"), { recursive: true });
@@ -23,8 +24,27 @@ function readJson(file) {
 function discoverApps() {
     if (!fs.existsSync(appsDir))
         return [];
-    return fs
-        .readdirSync(appsDir, { withFileTypes: true })
+    // existsSync → readdirSync is a TOCTOU race — appsDir can vanish between
+    // the two calls (e.g. user running `git checkout` on the workspace mid-dev).
+    // Treat ENOENT as "no apps right now" and let the next 2s sync recover.
+    // Other errors get surfaced to Sentry so we learn about new failure modes.
+    let entries;
+    try {
+        entries = fs.readdirSync(appsDir, { withFileTypes: true });
+    }
+    catch (err) {
+        const code = err.code;
+        if (code !== "ENOENT") {
+            console.warn(`[workspace] Could not read ${appsDir} (${code ?? "unknown"}): ` +
+                `${err.message}`);
+            Sentry.captureException(err, {
+                tags: { handled: "dev-discover-readdir" },
+                level: "warning",
+            });
+        }
+        return [];
+    }
+    return entries
         .filter((entry) => entry.isDirectory())
         .map((entry) => {
         const dir = path.join(appsDir, entry.name);
@@ -287,6 +307,41 @@ function proxyUpgrade(app, req, socket, head) {
 }
 let shuttingDown = false;
 let workspaceStarted = false;
+function handleWatcherError(err) {
+    // ENOSPC: system inotify watcher limit hit (Linux). Userland-fixable;
+    // capture as a warning so we still see frequency in Sentry but don't get
+    // paged. Print actionable guidance and continue without watching — the
+    // 2s polling interval below keeps app discovery working.
+    if (err.code === "ENOSPC") {
+        console.warn(`[workspace] Recursive file watcher hit the system limit (ENOSPC). ` +
+            `New apps will still be detected via polling every ~2s. ` +
+            `On Linux you can raise the limit with ` +
+            `\`sudo sysctl fs.inotify.max_user_watches=524288\` ` +
+            `(persist via /etc/sysctl.d/*.conf). On macOS/Windows this usually ` +
+            `means too many other watchers are running.`);
+        Sentry.captureException(err, {
+            tags: { handled: "dev-watch-enospc" },
+            level: "warning",
+        });
+        return;
+    }
+    // ENOENT: a watched directory disappeared (or a transient subdir under
+    // appsDir vanished mid-enumeration). Benign — the polling fallback and
+    // future scheduleSync calls will re-establish state. Don't capture.
+    if (err.code === "ENOENT") {
+        console.debug(`[workspace] Recursive file watcher saw a directory disappear ` +
+            `(ENOENT: ${err.path ?? "unknown"}). Polling fallback will recover.`);
+        return;
+    }
+    // Unknown failure mode — keep the dev experience alive (polling still
+    // runs) but surface to Sentry as a warning so we learn about new cases.
+    console.warn(`[workspace] Recursive file watcher failed (${err.code ?? "unknown"}): ${err.message}. ` +
+        `Falling back to polling.`);
+    Sentry.captureException(err, {
+        tags: { handled: "dev-watch-unknown" },
+        level: "warning",
+    });
+}
 function startWorkspaceProcesses() {
     if (workspaceStarted)
         return;
@@ -294,10 +349,16 @@ function startWorkspaceProcesses() {
     for (const app of apps)
         startApp(app);
     try {
-        fs.watch(appsDir, { recursive: true }, scheduleSync);
+        const watcher = fs.watch(appsDir, { recursive: true }, scheduleSync);
+        // Async errors (e.g. ENOENT when a subdir vanishes mid-watch) surface on
+        // the watcher rather than the original call site. Without an `error`
+        // listener, Node would treat them as uncaught and crash the dev process.
+        watcher.on("error", (err) => {
+            handleWatcherError(err);
+        });
     }
-    catch {
-        // Some platforms do not support recursive directory watches.
+    catch (err) {
+        handleWatcherError(err);
     }
     setInterval(syncApps, 2_000).unref();
 }