@agent-native/core 0.98.1 → 0.98.2

package/dist/cli/skills-content/local-files.d.ts

@@ -1,2 +1,2 @@
-export declare const LOCAL_FILES_REFERENCE_MD = "# Local-files privacy mode \u2014 single source of truth\n\nThis file is the canonical contract for fully local, no-database planning and\nrecaps. It is shared word for word by `/visual-plan` and `/visual-recap`. Read it\nin full before using local-files mode; do not call any hosted Plan tool for a\nlocal plan/recap except the schema-only block-catalog lookup described below.\n\n<!-- SHARED-CORE:local-files START -->\n\n**When to use it.** Use local-files privacy mode when the user explicitly asks\nfor no DB writes, no hosted Plan database writes, no Plan MCP publish, fully local\nfiles, offline/private work, or repo-owned/source-controlled artifacts, or when\n`AGENT_NATIVE_PLANS_MODE=local-files` is set. Also use it when a user or repo\npolicy says the work must stay under their own brand, domain, source control, or\ninfrastructure. In this mode the plan/recap data must never be sent to the Plan\nMCP server or the Plan app action surface. This is the only exception to the\nalways-publish rule in `references/connection.md`.\n\nThe local-files contract:\n\n- **Read context locally.** Read source, diff, and stat context from local files\n  and shell commands only. For recaps, the\n  `npx @agent-native/core@latest recap collect-diff`, `scan`, and\n  `build-prompt --local-files` helpers are safe \u2014 they operate on local files and\n  do not write to the Plan database.\n- **Fetch the block catalog first** (it sends no plan content). Use the MCP\n  `get-plan-blocks` tool if it is already available, or run\n  `npx @agent-native/core@latest plan blocks --out plan-blocks.md` and read that\n  file before authoring MDX; it calls the public no-auth `get-plan-blocks` route.\n  Use `--format schema` when you need exact nested fields. If network access is\n  unavailable, use the bundled `references/*.md` and rely on `plan local check` to\n  catch invalid tags. Copy the catalog examples verbatim for the fields the\n  registry table cannot encode: `checklist` items need `id` and `label`;\n  `question-form` questions need `id`, `title`, and `mode`, and each option needs\n  `id` and `label`; and `Code` / `AnnotatedCode` / `Diff` are whitespace-sensitive\n  \u2014 encode multiline code as JSON string attributes such as `code={\"const x =\\n  y\"}`\n  (a static template literal is accepted only when it has no `${...}`\n  interpolation). `plan local check` is a quick OFFLINE lint (a subset of the\n  renderer schema), so a green `check` does not guarantee the plan renders;\n  `plan local verify` is the authoritative validation against the real renderer\n  schema.\n- **Write a local MDX folder.** Use `plans/<slug>/` to check the artifact into the\n  repo, or a repo-ignored/temporary folder such as `.agent-native/plans/<slug>/`\n  or `/tmp/agent-native-plans/<slug>/` when it should not be checked in. The\n  folder holds `plan.mdx`, optional `canvas.mdx`, optional `prototype.mdx`, and\n  optional `.plan-state.json`. For a recap, set `kind: \"recap\"` and\n  `localOnly: true` in the frontmatter/state. Use that exact folder as\n  `<plan-dir>` in every command below.\n- **Check, then serve.** Run\n  `npx @agent-native/core@latest plan local check --dir <plan-dir>` before any\n  preview, then\n  `npx @agent-native/core@latest plan local serve --dir <plan-dir> --kind <plan|recap> --open`\n  (use `--kind plan` for plans, `--kind recap` for recaps). Report the local\n  bridge URL from stdout or `<plan-dir>/.plan-url`; treat `.plan-url` as a local\n  token file and do not commit it. The URL opens the hosted Plan UI but reads from\n  the localhost bridge on this machine, so it is not shareable across machines. On\n  macOS `--open` prefers Chromium browsers; if Safari opens, switch to\n  Chrome/Chromium because Safari can block the hosted HTTPS page from fetching the\n  HTTP localhost bridge. If the Plan app itself is running locally with the same\n  `PLAN_LOCAL_DIR`, the `/local-plans/<slug>` route is also valid. In a truly\n  offline environment, hand off the `<plan-dir>` path after `plan local check` and\n  note that interactive preview requires network access to the hosted Plan UI or a\n  running local Plan app.\n- **Headless verify.** Run\n  `npx @agent-native/core@latest plan local verify --dir <plan-dir> --kind <plan|recap>`.\n  It starts the bridge, checks the private-network preflight and JSON payload, AND\n  validates the content against the real renderer schema via the Plan app's\n  `validate-local-plan-source` action. A non-`ok` result with\n  `validation.valid: false` lists the renderer's exact schema-path issues (e.g.\n  `blocks[1].data.tabs[0]...`); fix those before handing off. If `validation.ran`\n  is `false`, the Plan app did not expose the validate endpoint (older/unreachable\n  deploy) \u2014 point `--app-url` at a current Plan app (e.g. a local\n  `http://localhost:8096`) for the authoritative check. If the browser hangs on\n  \"Loading plan\", fetch the `bridgeUrl` from the verify/serve JSON to read the\n  concrete validation error.\n- **Never call hosted tools for that plan/recap.** Do not call\n  `create-visual-plan`, `create-ui-plan`, `create-prototype-plan`,\n  `create-plan-design`, `create-visual-recap`, `create-visual-questions`,\n  `import-visual-plan-source`, `update-visual-plan`, `patch-visual-plan-source`,\n  `get-plan-feedback`, `export-visual-plan`, `set-resource-visibility`, or any\n  other hosted Plan tool \u2014 except the schema-only block-catalog lookup above.\n- **Feedback is file/chat feedback.** Update the MDX files directly, rerun\n  `plan local check`, and rerun `serve` or `verify` when that preview path is\n  available. Summarize the new local URL when one exists; otherwise summarize the\n  checked `<plan-dir>` path. Hosted comments, sharing, screenshots, history, usage\n  attachment, and publish/export receipts are unavailable until the user\n  explicitly opts into publishing.\n\nLocal-files mode only prevents plan/recap content from reaching the Agent-Native\nPlan database. It does not by itself make the coding agent's language model local;\nfor that stronger boundary the host agent/model must also be local or otherwise\napproved by the user.\n\n<!-- SHARED-CORE:local-files END -->\n";
+export declare const LOCAL_FILES_REFERENCE_MD = "# Local-files privacy mode \u2014 single source of truth\n\nThis file is the canonical contract for fully local, no-database planning and\nrecaps. It is shared word for word by `/visual-plan` and `/visual-recap`. Read it\nin full before using local-files mode; do not call any hosted Plan tool for a\nlocal plan/recap except the schema-only block-catalog lookup described below.\n\n<!-- SHARED-CORE:local-files START -->\n\n**When to use it.** Use local-files privacy mode when the user explicitly asks\nfor no DB writes, no hosted Plan database writes, no Plan MCP publish, fully local\nfiles, offline/private work, or repo-owned/source-controlled artifacts, or when\n`AGENT_NATIVE_PLANS_MODE=local-files` is set. Also use it when a user or repo\npolicy says the work must stay under their own brand, domain, source control, or\ninfrastructure. In this mode the plan/recap data must never be sent to the Plan\nMCP server or the Plan app action surface. This is the only exception to the\nalways-publish rule in `references/connection.md`.\n\nThe local-files contract:\n\n- **Read context locally.** Read source, diff, and stat context from local files\n  and shell commands only. For recaps, the\n  `npx @agent-native/core@latest recap collect-diff`, `scan`, and\n  `build-prompt --local-files` helpers are safe \u2014 they operate on local files and\n  do not write to the Plan database.\n- **Fetch the block catalog first** (it sends no plan content). Use the MCP\n  `get-plan-blocks` tool if it is already available, or run\n  `npx @agent-native/core@latest plan blocks --out plan-blocks.md` and read that\n  file before authoring MDX; it calls the public no-auth `get-plan-blocks` route.\n  Use `--format schema` when you need exact nested fields. If network access is\n  unavailable, use the bundled `references/*.md` and rely on `plan local check` to\n  catch invalid tags. Copy the catalog examples verbatim for the fields the\n  registry table cannot encode: `checklist` items need `id` and `label`;\n  `question-form` questions need `id`, `title`, and `mode`, and each option needs\n  `id` and `label`; and `Code` / `AnnotatedCode` / `Diff` are whitespace-sensitive\n  \u2014 encode multiline code as JSON string attributes such as `code={\"const x =\\n  y\"}`\n  (a static template literal is accepted only when it has no `${...}`\n  interpolation). `plan local check` is a quick OFFLINE lint (a subset of the\n  renderer schema), so a green `check` does not guarantee the plan renders.\n  `plan local verify` also stays on-device: it uses the offline lint unless it\n  can reach a Plan renderer on an explicit loopback `--app-url`.\n- **Write a local MDX folder.** Use `plans/<slug>/` to check the artifact into the\n  repo, or a repo-ignored/temporary folder such as `.agent-native/plans/<slug>/`\n  or `/tmp/agent-native-plans/<slug>/` when it should not be checked in. The\n  folder holds `plan.mdx`, optional `canvas.mdx`, optional `prototype.mdx`, and\n  optional `.plan-state.json`. For a recap, set `kind: \"recap\"` and\n  `localOnly: true` in the frontmatter/state. Use that exact folder as\n  `<plan-dir>` in every command below.\n- **Check, then serve.** Run\n  `npx @agent-native/core@latest plan local check --dir <plan-dir>` before any\n  preview, then\n  `npx @agent-native/core@latest plan local serve --dir <plan-dir> --kind <plan|recap> --open`\n  (use `--kind plan` for plans, `--kind recap` for recaps). Report the local\n  bridge URL from stdout or `<plan-dir>/.plan-url`; treat `.plan-url` as a local\n  token file and do not commit it. The URL opens the hosted Plan UI but reads from\n  the localhost bridge on this machine, so it is not shareable across machines.\n  The token is carried in the URL fragment (which is not sent to the hosted\n  origin), and the local-plan route disables DOM autocapture and session replay\n  while retaining sanitized pageviews and error monitoring. On\n  macOS `--open` prefers Chromium browsers; if Safari opens, switch to\n  Chrome/Chromium because Safari can block the hosted HTTPS page from fetching the\n  HTTP localhost bridge. If the Plan app itself is running locally with the same\n  `PLAN_LOCAL_DIR`, the `/local-plans/<slug>` route is also valid. In a truly\n  offline environment, hand off the `<plan-dir>` path after `plan local check` and\n  note that interactive preview requires network access to the hosted Plan UI or a\n  running local Plan app.\n- **Headless verify.** Run\n  `npx @agent-native/core@latest plan local verify --dir <plan-dir> --kind <plan|recap>`.\n  It starts the bridge and checks the private-network preflight and JSON payload\n  entirely on loopback. It never sends MDX or assets to a remote validation\n  action. When `--app-url` points to a loopback Plan app, verify also validates\n  against that local app's real renderer schema via `validate-local-plan-source`.\n  A non-`ok` result with\n  `validation.valid: false` lists the renderer's exact schema-path issues (e.g.\n  `blocks[1].data.tabs[0]...`); fix those before handing off. If `validation.ran`\n  is `false`, verify used the offline lint because the app URL was remote or the\n  local Plan app was unavailable. Run a local Plan app and pass\n  `--app-url http://localhost:8096` for the authoritative check. If the browser hangs on\n  \"Loading plan\", fetch the `bridgeUrl` from the verify/serve JSON to read the\n  concrete validation error.\n- **Never call hosted tools for that plan/recap.** Do not call\n  `create-visual-plan`, `create-ui-plan`, `create-prototype-plan`,\n  `create-plan-design`, `create-visual-recap`, `create-visual-questions`,\n  `import-visual-plan-source`, `update-visual-plan`, `patch-visual-plan-source`,\n  `get-plan-feedback`, `export-visual-plan`, `set-resource-visibility`, or any\n  other hosted Plan tool \u2014 except the schema-only block-catalog lookup above.\n- **Feedback is file/chat feedback.** Update the MDX files directly, rerun\n  `plan local check`, and rerun `serve` or `verify` when that preview path is\n  available. Summarize the new local URL when one exists; otherwise summarize the\n  checked `<plan-dir>` path. Hosted comments, sharing, screenshots, history, usage\n  attachment, and publish/export receipts are unavailable until the user\n  explicitly opts into publishing.\n\nLocal-files mode prevents plan/recap content from being uploaded to the\nAgent-Native Plan server or database. It does not by itself make the coding agent's language model local;\nfor that stronger boundary the host agent/model must also be local or otherwise\napproved by the user.\n\n<!-- SHARED-CORE:local-files END -->\n";
 //# sourceMappingURL=local-files.d.ts.map

package/dist/cli/skills-content/local-files.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local-files.d.ts","sourceRoot":"","sources":["../../../src/cli/skills-content/local-files.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,wBAAwB,4kMA8FpC,CAAC"}
+{"version":3,"file":"local-files.d.ts","sourceRoot":"","sources":["../../../src/cli/skills-content/local-files.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,wBAAwB,w+MAmGpC,CAAC"}

package/dist/cli/skills-content/local-files.js

@@ -36,9 +36,9 @@ The local-files contract:
   — encode multiline code as JSON string attributes such as \`code={"const x =\\n  y"}\`
   (a static template literal is accepted only when it has no \`\${...}\`
   interpolation). \`plan local check\` is a quick OFFLINE lint (a subset of the
-  renderer schema), so a green \`check\` does not guarantee the plan renders;
-  \`plan local verify\` is the authoritative validation against the real renderer
-  schema.
+  renderer schema), so a green \`check\` does not guarantee the plan renders.
+  \`plan local verify\` also stays on-device: it uses the offline lint unless it
+  can reach a Plan renderer on an explicit loopback \`--app-url\`.
 - **Write a local MDX folder.** Use \`plans/<slug>/\` to check the artifact into the
   repo, or a repo-ignored/temporary folder such as \`.agent-native/plans/<slug>/\`
   or \`/tmp/agent-native-plans/<slug>/\` when it should not be checked in. The
@@ -53,7 +53,10 @@ The local-files contract:
   (use \`--kind plan\` for plans, \`--kind recap\` for recaps). Report the local
   bridge URL from stdout or \`<plan-dir>/.plan-url\`; treat \`.plan-url\` as a local
   token file and do not commit it. The URL opens the hosted Plan UI but reads from
-  the localhost bridge on this machine, so it is not shareable across machines. On
+  the localhost bridge on this machine, so it is not shareable across machines.
+  The token is carried in the URL fragment (which is not sent to the hosted
+  origin), and the local-plan route disables DOM autocapture and session replay
+  while retaining sanitized pageviews and error monitoring. On
   macOS \`--open\` prefers Chromium browsers; if Safari opens, switch to
   Chrome/Chromium because Safari can block the hosted HTTPS page from fetching the
   HTTP localhost bridge. If the Plan app itself is running locally with the same
@@ -63,14 +66,16 @@ The local-files contract:
   running local Plan app.
 - **Headless verify.** Run
   \`npx @agent-native/core@latest plan local verify --dir <plan-dir> --kind <plan|recap>\`.
-  It starts the bridge, checks the private-network preflight and JSON payload, AND
-  validates the content against the real renderer schema via the Plan app's
-  \`validate-local-plan-source\` action. A non-\`ok\` result with
+  It starts the bridge and checks the private-network preflight and JSON payload
+  entirely on loopback. It never sends MDX or assets to a remote validation
+  action. When \`--app-url\` points to a loopback Plan app, verify also validates
+  against that local app's real renderer schema via \`validate-local-plan-source\`.
+  A non-\`ok\` result with
   \`validation.valid: false\` lists the renderer's exact schema-path issues (e.g.
   \`blocks[1].data.tabs[0]...\`); fix those before handing off. If \`validation.ran\`
-  is \`false\`, the Plan app did not expose the validate endpoint (older/unreachable
-  deploy) — point \`--app-url\` at a current Plan app (e.g. a local
-  \`http://localhost:8096\`) for the authoritative check. If the browser hangs on
+  is \`false\`, verify used the offline lint because the app URL was remote or the
+  local Plan app was unavailable. Run a local Plan app and pass
+  \`--app-url http://localhost:8096\` for the authoritative check. If the browser hangs on
   "Loading plan", fetch the \`bridgeUrl\` from the verify/serve JSON to read the
   concrete validation error.
 - **Never call hosted tools for that plan/recap.** Do not call
@@ -86,8 +91,8 @@ The local-files contract:
   attachment, and publish/export receipts are unavailable until the user
   explicitly opts into publishing.
 
-Local-files mode only prevents plan/recap content from reaching the Agent-Native
-Plan database. It does not by itself make the coding agent's language model local;
+Local-files mode prevents plan/recap content from being uploaded to the
+Agent-Native Plan server or database. It does not by itself make the coding agent's language model local;
 for that stronger boundary the host agent/model must also be local or otherwise
 approved by the user.
 

package/dist/cli/skills-content/local-files.js.map

@@ -1 +1 @@
-{"version":3,"file":"local-files.js","sourceRoot":"","sources":["../../../src/cli/skills-content/local-files.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8FvC,CAAC","sourcesContent":["export const LOCAL_FILES_REFERENCE_MD = `# Local-files privacy mode — single source of truth\n\nThis file is the canonical contract for fully local, no-database planning and\nrecaps. It is shared word for word by \\`/visual-plan\\` and \\`/visual-recap\\`. Read it\nin full before using local-files mode; do not call any hosted Plan tool for a\nlocal plan/recap except the schema-only block-catalog lookup described below.\n\n<!-- SHARED-CORE:local-files START -->\n\n**When to use it.** Use local-files privacy mode when the user explicitly asks\nfor no DB writes, no hosted Plan database writes, no Plan MCP publish, fully local\nfiles, offline/private work, or repo-owned/source-controlled artifacts, or when\n\\`AGENT_NATIVE_PLANS_MODE=local-files\\` is set. Also use it when a user or repo\npolicy says the work must stay under their own brand, domain, source control, or\ninfrastructure. In this mode the plan/recap data must never be sent to the Plan\nMCP server or the Plan app action surface. This is the only exception to the\nalways-publish rule in \\`references/connection.md\\`.\n\nThe local-files contract:\n\n- **Read context locally.** Read source, diff, and stat context from local files\n  and shell commands only. For recaps, the\n  \\`npx @agent-native/core@latest recap collect-diff\\`, \\`scan\\`, and\n  \\`build-prompt --local-files\\` helpers are safe — they operate on local files and\n  do not write to the Plan database.\n- **Fetch the block catalog first** (it sends no plan content). Use the MCP\n  \\`get-plan-blocks\\` tool if it is already available, or run\n  \\`npx @agent-native/core@latest plan blocks --out plan-blocks.md\\` and read that\n  file before authoring MDX; it calls the public no-auth \\`get-plan-blocks\\` route.\n  Use \\`--format schema\\` when you need exact nested fields. If network access is\n  unavailable, use the bundled \\`references/*.md\\` and rely on \\`plan local check\\` to\n  catch invalid tags. Copy the catalog examples verbatim for the fields the\n  registry table cannot encode: \\`checklist\\` items need \\`id\\` and \\`label\\`;\n  \\`question-form\\` questions need \\`id\\`, \\`title\\`, and \\`mode\\`, and each option needs\n  \\`id\\` and \\`label\\`; and \\`Code\\` / \\`AnnotatedCode\\` / \\`Diff\\` are whitespace-sensitive\n  — encode multiline code as JSON string attributes such as \\`code={\"const x =\\\\n  y\"}\\`\n  (a static template literal is accepted only when it has no \\`\\${...}\\`\n  interpolation). \\`plan local check\\` is a quick OFFLINE lint (a subset of the\n  renderer schema), so a green \\`check\\` does not guarantee the plan renders;\n  \\`plan local verify\\` is the authoritative validation against the real renderer\n  schema.\n- **Write a local MDX folder.** Use \\`plans/<slug>/\\` to check the artifact into the\n  repo, or a repo-ignored/temporary folder such as \\`.agent-native/plans/<slug>/\\`\n  or \\`/tmp/agent-native-plans/<slug>/\\` when it should not be checked in. The\n  folder holds \\`plan.mdx\\`, optional \\`canvas.mdx\\`, optional \\`prototype.mdx\\`, and\n  optional \\`.plan-state.json\\`. For a recap, set \\`kind: \"recap\"\\` and\n  \\`localOnly: true\\` in the frontmatter/state. Use that exact folder as\n  \\`<plan-dir>\\` in every command below.\n- **Check, then serve.** Run\n  \\`npx @agent-native/core@latest plan local check --dir <plan-dir>\\` before any\n  preview, then\n  \\`npx @agent-native/core@latest plan local serve --dir <plan-dir> --kind <plan|recap> --open\\`\n  (use \\`--kind plan\\` for plans, \\`--kind recap\\` for recaps). Report the local\n  bridge URL from stdout or \\`<plan-dir>/.plan-url\\`; treat \\`.plan-url\\` as a local\n  token file and do not commit it. The URL opens the hosted Plan UI but reads from\n  the localhost bridge on this machine, so it is not shareable across machines. On\n  macOS \\`--open\\` prefers Chromium browsers; if Safari opens, switch to\n  Chrome/Chromium because Safari can block the hosted HTTPS page from fetching the\n  HTTP localhost bridge. If the Plan app itself is running locally with the same\n  \\`PLAN_LOCAL_DIR\\`, the \\`/local-plans/<slug>\\` route is also valid. In a truly\n  offline environment, hand off the \\`<plan-dir>\\` path after \\`plan local check\\` and\n  note that interactive preview requires network access to the hosted Plan UI or a\n  running local Plan app.\n- **Headless verify.** Run\n  \\`npx @agent-native/core@latest plan local verify --dir <plan-dir> --kind <plan|recap>\\`.\n  It starts the bridge, checks the private-network preflight and JSON payload, AND\n  validates the content against the real renderer schema via the Plan app's\n  \\`validate-local-plan-source\\` action. A non-\\`ok\\` result with\n  \\`validation.valid: false\\` lists the renderer's exact schema-path issues (e.g.\n  \\`blocks[1].data.tabs[0]...\\`); fix those before handing off. If \\`validation.ran\\`\n  is \\`false\\`, the Plan app did not expose the validate endpoint (older/unreachable\n  deploy) — point \\`--app-url\\` at a current Plan app (e.g. a local\n  \\`http://localhost:8096\\`) for the authoritative check. If the browser hangs on\n  \"Loading plan\", fetch the \\`bridgeUrl\\` from the verify/serve JSON to read the\n  concrete validation error.\n- **Never call hosted tools for that plan/recap.** Do not call\n  \\`create-visual-plan\\`, \\`create-ui-plan\\`, \\`create-prototype-plan\\`,\n  \\`create-plan-design\\`, \\`create-visual-recap\\`, \\`create-visual-questions\\`,\n  \\`import-visual-plan-source\\`, \\`update-visual-plan\\`, \\`patch-visual-plan-source\\`,\n  \\`get-plan-feedback\\`, \\`export-visual-plan\\`, \\`set-resource-visibility\\`, or any\n  other hosted Plan tool — except the schema-only block-catalog lookup above.\n- **Feedback is file/chat feedback.** Update the MDX files directly, rerun\n  \\`plan local check\\`, and rerun \\`serve\\` or \\`verify\\` when that preview path is\n  available. Summarize the new local URL when one exists; otherwise summarize the\n  checked \\`<plan-dir>\\` path. Hosted comments, sharing, screenshots, history, usage\n  attachment, and publish/export receipts are unavailable until the user\n  explicitly opts into publishing.\n\nLocal-files mode only prevents plan/recap content from reaching the Agent-Native\nPlan database. It does not by itself make the coding agent's language model local;\nfor that stronger boundary the host agent/model must also be local or otherwise\napproved by the user.\n\n<!-- SHARED-CORE:local-files END -->\n`;\n"]}
+{"version":3,"file":"local-files.js","sourceRoot":"","sources":["../../../src/cli/skills-content/local-files.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmGvC,CAAC","sourcesContent":["export const LOCAL_FILES_REFERENCE_MD = `# Local-files privacy mode — single source of truth\n\nThis file is the canonical contract for fully local, no-database planning and\nrecaps. It is shared word for word by \\`/visual-plan\\` and \\`/visual-recap\\`. Read it\nin full before using local-files mode; do not call any hosted Plan tool for a\nlocal plan/recap except the schema-only block-catalog lookup described below.\n\n<!-- SHARED-CORE:local-files START -->\n\n**When to use it.** Use local-files privacy mode when the user explicitly asks\nfor no DB writes, no hosted Plan database writes, no Plan MCP publish, fully local\nfiles, offline/private work, or repo-owned/source-controlled artifacts, or when\n\\`AGENT_NATIVE_PLANS_MODE=local-files\\` is set. Also use it when a user or repo\npolicy says the work must stay under their own brand, domain, source control, or\ninfrastructure. In this mode the plan/recap data must never be sent to the Plan\nMCP server or the Plan app action surface. This is the only exception to the\nalways-publish rule in \\`references/connection.md\\`.\n\nThe local-files contract:\n\n- **Read context locally.** Read source, diff, and stat context from local files\n  and shell commands only. For recaps, the\n  \\`npx @agent-native/core@latest recap collect-diff\\`, \\`scan\\`, and\n  \\`build-prompt --local-files\\` helpers are safe — they operate on local files and\n  do not write to the Plan database.\n- **Fetch the block catalog first** (it sends no plan content). Use the MCP\n  \\`get-plan-blocks\\` tool if it is already available, or run\n  \\`npx @agent-native/core@latest plan blocks --out plan-blocks.md\\` and read that\n  file before authoring MDX; it calls the public no-auth \\`get-plan-blocks\\` route.\n  Use \\`--format schema\\` when you need exact nested fields. If network access is\n  unavailable, use the bundled \\`references/*.md\\` and rely on \\`plan local check\\` to\n  catch invalid tags. Copy the catalog examples verbatim for the fields the\n  registry table cannot encode: \\`checklist\\` items need \\`id\\` and \\`label\\`;\n  \\`question-form\\` questions need \\`id\\`, \\`title\\`, and \\`mode\\`, and each option needs\n  \\`id\\` and \\`label\\`; and \\`Code\\` / \\`AnnotatedCode\\` / \\`Diff\\` are whitespace-sensitive\n  — encode multiline code as JSON string attributes such as \\`code={\"const x =\\\\n  y\"}\\`\n  (a static template literal is accepted only when it has no \\`\\${...}\\`\n  interpolation). \\`plan local check\\` is a quick OFFLINE lint (a subset of the\n  renderer schema), so a green \\`check\\` does not guarantee the plan renders.\n  \\`plan local verify\\` also stays on-device: it uses the offline lint unless it\n  can reach a Plan renderer on an explicit loopback \\`--app-url\\`.\n- **Write a local MDX folder.** Use \\`plans/<slug>/\\` to check the artifact into the\n  repo, or a repo-ignored/temporary folder such as \\`.agent-native/plans/<slug>/\\`\n  or \\`/tmp/agent-native-plans/<slug>/\\` when it should not be checked in. The\n  folder holds \\`plan.mdx\\`, optional \\`canvas.mdx\\`, optional \\`prototype.mdx\\`, and\n  optional \\`.plan-state.json\\`. For a recap, set \\`kind: \"recap\"\\` and\n  \\`localOnly: true\\` in the frontmatter/state. Use that exact folder as\n  \\`<plan-dir>\\` in every command below.\n- **Check, then serve.** Run\n  \\`npx @agent-native/core@latest plan local check --dir <plan-dir>\\` before any\n  preview, then\n  \\`npx @agent-native/core@latest plan local serve --dir <plan-dir> --kind <plan|recap> --open\\`\n  (use \\`--kind plan\\` for plans, \\`--kind recap\\` for recaps). Report the local\n  bridge URL from stdout or \\`<plan-dir>/.plan-url\\`; treat \\`.plan-url\\` as a local\n  token file and do not commit it. The URL opens the hosted Plan UI but reads from\n  the localhost bridge on this machine, so it is not shareable across machines.\n  The token is carried in the URL fragment (which is not sent to the hosted\n  origin), and the local-plan route disables DOM autocapture and session replay\n  while retaining sanitized pageviews and error monitoring. On\n  macOS \\`--open\\` prefers Chromium browsers; if Safari opens, switch to\n  Chrome/Chromium because Safari can block the hosted HTTPS page from fetching the\n  HTTP localhost bridge. If the Plan app itself is running locally with the same\n  \\`PLAN_LOCAL_DIR\\`, the \\`/local-plans/<slug>\\` route is also valid. In a truly\n  offline environment, hand off the \\`<plan-dir>\\` path after \\`plan local check\\` and\n  note that interactive preview requires network access to the hosted Plan UI or a\n  running local Plan app.\n- **Headless verify.** Run\n  \\`npx @agent-native/core@latest plan local verify --dir <plan-dir> --kind <plan|recap>\\`.\n  It starts the bridge and checks the private-network preflight and JSON payload\n  entirely on loopback. It never sends MDX or assets to a remote validation\n  action. When \\`--app-url\\` points to a loopback Plan app, verify also validates\n  against that local app's real renderer schema via \\`validate-local-plan-source\\`.\n  A non-\\`ok\\` result with\n  \\`validation.valid: false\\` lists the renderer's exact schema-path issues (e.g.\n  \\`blocks[1].data.tabs[0]...\\`); fix those before handing off. If \\`validation.ran\\`\n  is \\`false\\`, verify used the offline lint because the app URL was remote or the\n  local Plan app was unavailable. Run a local Plan app and pass\n  \\`--app-url http://localhost:8096\\` for the authoritative check. If the browser hangs on\n  \"Loading plan\", fetch the \\`bridgeUrl\\` from the verify/serve JSON to read the\n  concrete validation error.\n- **Never call hosted tools for that plan/recap.** Do not call\n  \\`create-visual-plan\\`, \\`create-ui-plan\\`, \\`create-prototype-plan\\`,\n  \\`create-plan-design\\`, \\`create-visual-recap\\`, \\`create-visual-questions\\`,\n  \\`import-visual-plan-source\\`, \\`update-visual-plan\\`, \\`patch-visual-plan-source\\`,\n  \\`get-plan-feedback\\`, \\`export-visual-plan\\`, \\`set-resource-visibility\\`, or any\n  other hosted Plan tool — except the schema-only block-catalog lookup above.\n- **Feedback is file/chat feedback.** Update the MDX files directly, rerun\n  \\`plan local check\\`, and rerun \\`serve\\` or \\`verify\\` when that preview path is\n  available. Summarize the new local URL when one exists; otherwise summarize the\n  checked \\`<plan-dir>\\` path. Hosted comments, sharing, screenshots, history, usage\n  attachment, and publish/export receipts are unavailable until the user\n  explicitly opts into publishing.\n\nLocal-files mode prevents plan/recap content from being uploaded to the\nAgent-Native Plan server or database. It does not by itself make the coding agent's language model local;\nfor that stronger boundary the host agent/model must also be local or otherwise\napproved by the user.\n\n<!-- SHARED-CORE:local-files END -->\n`;\n"]}

package/dist/client/analytics.d.ts

@@ -42,6 +42,13 @@ export type ConfigureTrackingOptions = {
     /** First-party analytics track endpoint. */
     endpoint?: string;
     getDefaultProps?: GetDefaultProps;
+    /**
+     * Disable content-capturing analytics such as interaction autocapture and
+     * session replay while retaining pageviews, explicit events, and Sentry.
+     */
+    contentCapture?: boolean;
+    /** Resolve content capture synchronously for each browser pathname. */
+    contentCaptureForPath?: (pathname: string) => boolean;
     sessionReplay?: boolean | SessionReplayOptions;
     /**
      * First-party, Sentry-style error capture. Auto-captures uncaught errors
@@ -124,6 +131,7 @@ export declare function captureClientException(error: unknown, context?: ClientC
  */
 export declare function captureError(error: unknown, context?: ClientCaptureContext): string | undefined;
 export declare function configureTracking(options: ConfigureTrackingOptions): void;
+export declare function setTrackingContentCaptureEnabled(enabled: boolean): void;
 export declare function startSessionReplay(options?: SessionReplayOptions): Promise<SessionReplayStartResult>;
 export declare function maybeStartSessionReplay(options?: SessionReplayOptions): Promise<SessionReplayStartResult>;
 export declare function stopSessionReplay(reason?: string): Promise<void>;

package/dist/client/analytics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"analytics.d.ts","sourceRoot":"","sources":["../../src/client/analytics.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACV,oBAAoB,EACpB,wBAAwB,EACzB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACd,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,EACxB,KAAK,cAAc,GACpB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,2BAA2B,EAC3B,2BAA2B,EAC3B,oBAAoB,EACpB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,MAAM;QACd,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,CAAC;QAChC,uBAAuB,CAAC,EAAE;YACxB,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;SAC5B,CAAC;KACH;CACF;AAED,KAAK,eAAe,GAAG,CACrB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAChC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAO7B;;;;;GAKG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,2DAA2D;IAC3D,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,mDAAmD;IACnD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,aAAa,CAAC,EAAE,OAAO,GAAG,oBAAoB,CAAC;IAC/C;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,GAAG,yBAAyB,CAAC;CACpD,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAqCF;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,eAAe,CAAC;AAiC9D,MAAM,WAAW,qBAAqB;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAuND,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,SAAS,CAE5D;AAMD,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,SAAS,CAE1D;AA4HD;;;;GAIG;AACH,wBAAgB,wBAAwB,IAAI,qBAAqB,GAAG,IAAI,CAavE;AAsTD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,UAAU,GAAG,IAAI,EACvB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACpB,IAAI,CAiCN;AAED,MAAM,WAAW,oBAAoB;IACnC,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACpD;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,oBAAyB,GACjC,MAAM,GAAG,SAAS,CAyBpB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,oBAAyB,GACjC,MAAM,GAAG,SAAS,CAEpB;AAeD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,CAwBzE;AAwRD,wBAAsB,kBAAkB,CACtC,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,wBAAwB,CAAC,CAOnC;AAED,wBAAsB,uBAAuB,CAC3C,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,wBAAwB,CAAC,CAOnC;AAED,wBAAsB,iBAAiB,CAAC,MAAM,SAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAGxE;AA4KD,wBAAgB,UAAU,CACxB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,IAAI,CASN;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAE1D"}
+{"version":3,"file":"analytics.d.ts","sourceRoot":"","sources":["../../src/client/analytics.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACV,oBAAoB,EACpB,wBAAwB,EACzB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACd,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,EACxB,KAAK,cAAc,GACpB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,2BAA2B,EAC3B,2BAA2B,EAC3B,oBAAoB,EACpB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,MAAM;QACd,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,CAAC;QAChC,uBAAuB,CAAC,EAAE;YACxB,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;SAC5B,CAAC;KACH;CACF;AAED,KAAK,eAAe,GAAG,CACrB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAChC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAO7B;;;;;GAKG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,2DAA2D;IAC3D,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,mDAAmD;IACnD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,uEAAuE;IACvE,qBAAqB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IACtD,aAAa,CAAC,EAAE,OAAO,GAAG,oBAAoB,CAAC;IAC/C;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,GAAG,yBAAyB,CAAC;CACpD,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAuCF;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,eAAe,CAAC;AAiC9D,MAAM,WAAW,qBAAqB;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAuND,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,SAAS,CAE5D;AAMD,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,SAAS,CAE1D;AA4HD;;;;GAIG;AACH,wBAAgB,wBAAwB,IAAI,qBAAqB,GAAG,IAAI,CAavE;AAyTD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,UAAU,GAAG,IAAI,EACvB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GACpB,IAAI,CAqCN;AAED,MAAM,WAAW,oBAAoB;IACnC,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACpD;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,oBAAyB,GACjC,MAAM,GAAG,SAAS,CAyBpB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,oBAAyB,GACjC,MAAM,GAAG,SAAS,CAEpB;AAeD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,CAiCzE;AAED,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAUvE;AA6SD,wBAAsB,kBAAkB,CACtC,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,wBAAwB,CAAC,CAcnC;AAED,wBAAsB,uBAAuB,CAC3C,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,wBAAwB,CAAC,CAcnC;AAED,wBAAsB,iBAAiB,CAAC,MAAM,SAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAGxE;AAsLD,wBAAgB,UAAU,CACxB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,IAAI,CASN;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAE1D"}

package/dist/client/analytics.js

@@ -25,6 +25,8 @@ let _sessionReplayStartPromise = null;
 let _errorCaptureInstalled = false;
 let _errorCaptureDisposer = null;
 let _sessionReplayModuleForCapture = null;
+let _trackingContentCaptureEnabled = true;
+let _contentCaptureForPath = null;
 // Buffer for setSentryUser calls made before Sentry has initialized.
 // `undefined` means "no pending update"; `null` means "pending clear".
 let _pendingSentryUser = undefined;
@@ -439,7 +441,10 @@ function ensureAmplitude() {
         ?.VITE_AMPLITUDE_API_KEY;
     if (!key)
         return false;
-    amplitude.init(key, { autocapture: true });
+    // Standard pageviews and explicit events are emitted below. Keep SDK-level
+    // DOM/network autocapture off so rendered user content is never collected as
+    // an implicit analytics side effect.
+    amplitude.init(key, { autocapture: false });
     _amplitudeInitialized = true;
     return true;
 }
@@ -710,7 +715,9 @@ export function setSentryUser(user, orgId) {
         clearTrackingIdentity();
     }
     _trackingIdentityResolved = true;
-    if (shouldRetryReplay && _sessionReplayOptions?.requireSignedInUser) {
+    if (shouldRetryReplay &&
+        _trackingContentCaptureEnabled &&
+        _sessionReplayOptions?.requireSignedInUser) {
         void startConfiguredSessionReplay(_sessionReplayOptions);
     }
     if (_sentryInitialized) {
@@ -795,6 +802,11 @@ export function configureTracking(options) {
     if (options.getDefaultProps) {
         _getDefaultProps = options.getDefaultProps;
     }
+    _contentCaptureForPath = options.contentCaptureForPath ?? null;
+    _trackingContentCaptureEnabled =
+        _contentCaptureForPath && typeof window !== "undefined"
+            ? _contentCaptureForPath(window.location.pathname)
+            : options.contentCapture !== false;
     if (typeof window !== "undefined") {
         ensureSentry();
         ensureAmplitude();
@@ -805,10 +817,28 @@ export function configureTracking(options) {
         maybeInstallSessionReplay(options.sessionReplay, {
             endpoint: options.endpoint,
             publicKey,
-        });
+        }, _trackingContentCaptureEnabled);
         maybeInstallErrorCapture(options.errorCapture);
     }
 }
+export function setTrackingContentCaptureEnabled(enabled) {
+    if (_trackingContentCaptureEnabled === enabled)
+        return;
+    _trackingContentCaptureEnabled = enabled;
+    if (enabled) {
+        if (_sessionReplayOptions) {
+            void startConfiguredSessionReplay(_sessionReplayOptions);
+        }
+    }
+    else {
+        void stopSessionReplay("content-capture-disabled");
+    }
+}
+function syncTrackingContentCaptureForLocation() {
+    if (!_contentCaptureForPath)
+        return;
+    setTrackingContentCaptureEnabled(_contentCaptureForPath(window.location.pathname));
+}
 /**
  * Lazily load the session-replay module so error capture can read the active
  * replay id and surface manual captures on the replay timeline without a
@@ -1003,13 +1033,13 @@ function replayEndpointFromTrackingEndpoint(value) {
     }
     return undefined;
 }
-function maybeInstallSessionReplay(config, tracking) {
+function maybeInstallSessionReplay(config, tracking, start = true) {
     if (typeof window === "undefined")
         return;
     const options = configuredSessionReplayOptions(config, tracking);
-    if (!options)
-        return;
     _sessionReplayOptions = options;
+    if (!options || !start)
+        return;
     void startConfiguredSessionReplay(options);
 }
 async function waitForSessionReplayAuthIfRequired(options) {
@@ -1034,11 +1064,23 @@ async function startConfiguredSessionReplay(options) {
     if (_sessionReplayStartPromise)
         return _sessionReplayStartPromise;
     _sessionReplayStartPromise = (async () => {
+        if (!_trackingContentCaptureEnabled) {
+            return { started: false, reason: "disabled" };
+        }
         if (!(await waitForSessionReplayAuthIfRequired(options))) {
             return { started: false, reason: "missing-user-id" };
         }
+        if (!_trackingContentCaptureEnabled) {
+            return { started: false, reason: "disabled" };
+        }
         const mod = await import("./session-replay.js");
-        return mod.startSessionReplay(options);
+        if (!_trackingContentCaptureEnabled) {
+            return { started: false, reason: "disabled" };
+        }
+        return mod.startSessionReplay({
+            ...options,
+            shouldStart: () => _trackingContentCaptureEnabled && (options.shouldStart?.() ?? true),
+        });
     })()
         .catch(() => ({ started: false, reason: "import-failed" }))
         .finally(() => {
@@ -1047,20 +1089,32 @@ async function startConfiguredSessionReplay(options) {
     return _sessionReplayStartPromise;
 }
 export async function startSessionReplay(options = {}) {
+    if (!_trackingContentCaptureEnabled) {
+        return { started: false, reason: "disabled" };
+    }
     const configured = configuredSessionReplayOptions(options) ?? options;
     if (!(await waitForSessionReplayAuthIfRequired(configured))) {
         return { started: false, reason: "missing-user-id" };
     }
     const mod = await import("./session-replay.js");
-    return mod.startSessionReplay(configured);
+    return mod.startSessionReplay({
+        ...configured,
+        shouldStart: () => _trackingContentCaptureEnabled && (configured.shouldStart?.() ?? true),
+    });
 }
 export async function maybeStartSessionReplay(options = {}) {
+    if (!_trackingContentCaptureEnabled) {
+        return { started: false, reason: "disabled" };
+    }
     const configured = configuredSessionReplayOptions(options) ?? options;
     if (!(await waitForSessionReplayAuthIfRequired(configured))) {
         return { started: false, reason: "missing-user-id" };
     }
     const mod = await import("./session-replay.js");
-    return mod.maybeStartSessionReplay(configured);
+    return mod.maybeStartSessionReplay({
+        ...configured,
+        shouldStart: () => _trackingContentCaptureEnabled && (configured.shouldStart?.() ?? true),
+    });
 }
 export async function stopSessionReplay(reason = "manual") {
     const mod = await import("./session-replay.js");
@@ -1109,15 +1163,17 @@ function pageviewKey() {
 }
 function pageviewProperties(reason) {
     const properties = {
-        url: scrubUrl(window.location.href),
+        url: !_trackingContentCaptureEnabled
+            ? window.location.origin + window.location.pathname
+            : scrubUrl(window.location.href),
         path: window.location.pathname,
         hostname: window.location.hostname,
         navigation_type: reason,
     };
-    if (window.location.search) {
+    if (_trackingContentCaptureEnabled && window.location.search) {
         properties.search = scrubUrl(window.location.search);
     }
-    if (typeof document !== "undefined") {
+    if (_trackingContentCaptureEnabled && typeof document !== "undefined") {
         if (document.referrer) {
             properties.referrer = scrubUrl(document.referrer);
         }
@@ -1138,6 +1194,9 @@ function emitPageview(reason) {
     trackEvent("pageview", pageviewProperties(reason));
 }
 function schedulePageview(reason) {
+    if (!_trackingContentCaptureEnabled) {
+        void stopSessionReplay("local-plan-privacy");
+    }
     const run = () => emitPageview(reason);
     const pendingStartupContext = [];
     if (_llmConnectionRefresh && !_llmConnectionStatus) {
@@ -1167,15 +1226,20 @@ function installPageviewTracking() {
     const originalReplaceState = window.history.replaceState;
     window.history.pushState = function pushState(...args) {
         const result = originalPushState.apply(this, args);
+        syncTrackingContentCaptureForLocation();
         schedulePageview("pushState");
         return result;
     };
     window.history.replaceState = function replaceState(...args) {
         const result = originalReplaceState.apply(this, args);
+        syncTrackingContentCaptureForLocation();
         schedulePageview("replaceState");
         return result;
     };
-    window.addEventListener("popstate", () => schedulePageview("popstate"));
+    window.addEventListener("popstate", () => {
+        syncTrackingContentCaptureForLocation();
+        schedulePageview("popstate");
+    });
 }
 function sendAgentNativeAnalytics(name, properties) {
     if (isLocalAnalyticsHostname(window.location.hostname))