@alisaitteke/photoshop-mcp 1.1.3 → 1.3.0

package/README.md

@@ -1,21 +1,24 @@
 # Photoshop MCP Server
 
-*v1.1+ — recipe workflows, fewer round-trips, snappier sessions.*
+*v1.1+ — recipe workflows, fewer round-trips, snappier sessions. Standalone UI ships **Action Plan (beta)** for plan-then-execute runs.*
 
 > **Note:** This is an unofficial, community-maintained project and is not affiliated with or endorsed by Adobe Inc.
 
 [![npm version](https://img.shields.io/npm/v/@alisaitteke/photoshop-mcp.svg)](https://www.npmjs.com/package/@alisaitteke/photoshop-mcp)
+[![Action Plan](https://img.shields.io/badge/Action%20Plan-beta-amber.svg)](#action-plan-beta)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 [![TypeScript](https://img.shields.io/badge/TypeScript-5.7-blue.svg)](https://www.typescriptlang.org/)
 [![Platform](https://img.shields.io/badge/Platform-Windows%20%7C%20macOS-lightgrey.svg)]()
 
-A Model Context Protocol (MCP) server that enables AI assistants like Claude and Cursor to control Adobe Photoshop programmatically. This allows you to create designs, manipulate images, and automate Photoshop workflows through natural language commands while working in your IDE.
+A Model Context Protocol (MCP) server that enables AI assistants like Claude and Cursor to control Adobe Photoshop programmatically. This allows you to create designs, manipulate images, and automate Photoshop workflows through natural language commands while working in your IDE — or through the bundled **standalone web UI**, which supports both API keys and CLI subscription accounts (Claude Code / Gemini CLI). The UI also offers an opt-in **Action Plan (beta)** mode that plans every Photoshop step in one LLM call, then runs them in a single pass.
 
 ## 🖥️ Standalone UI (no IDE required)
 
 Don't want to wire this into Claude Desktop or Cursor? The same package ships a
 fully local web UI that lets you chat with an AI model and drive Photoshop
-through this MCP server underneath.
+through this MCP server underneath. Connect with a provider API key **or**, for
+Anthropic and Google, reuse the OAuth session from **Claude Code** or **Gemini
+CLI** — no separate API key required.
 
 ![Standalone UI Screenshot](./images/frame_generic_light.png)
 
@@ -28,26 +31,77 @@ default browser opens the chat UI automatically.
 
 ### Supported providers
 
-Pick any of the following on first launch — bring your own API key:
+Pick any of the following on first launch — use an API key **or** your existing
+CLI subscription account (Anthropic and Google):
 
-| Provider | Models | Get a key |
-|---|---|---|
-| **Anthropic** | Claude Sonnet / Opus / Haiku | [console.anthropic.com](https://console.anthropic.com/settings/keys) |
-| **OpenAI** | GPT-5, GPT-4.1, o-series | [platform.openai.com](https://platform.openai.com/api-keys) |
-| **Google** | Gemini 2.5 Pro / Flash / Flash-Lite | [aistudio.google.com](https://aistudio.google.com/apikey) |
-| **OpenRouter** | 100+ models from any provider | [openrouter.ai](https://openrouter.ai/keys) |
+| Provider | Models | API key | CLI account |
+|---|---|---|---|
+| **Anthropic** | Claude Sonnet / Opus / Haiku | [console.anthropic.com](https://console.anthropic.com/settings/keys) | `npm i -g @anthropic-ai/claude-code` → `claude auth login` |
+| **OpenAI** | GPT-5, GPT-4.1, o-series | [platform.openai.com](https://platform.openai.com/api-keys) | — |
+| **Google** | Gemini 2.5 Pro / Flash / Flash-Lite | [aistudio.google.com](https://aistudio.google.com/apikey) | `npm i -g @google/gemini-cli` → `gemini auth login` |
+| **OpenRouter** | 100+ models from any provider | [openrouter.ai](https://openrouter.ai/keys) | — |
+
+### Authentication modes
+
+- **`api_key` (default)** — Vercel AI SDK + your provider API key. Usage is billed
+  per token at API rates; the UI shows estimated cost per chat.
+- **`cli_account`** — Uses your local Claude Code or Gemini CLI OAuth session.
+  No API key is stored; the UI probes `claude auth status` / `gemini` headless
+  to verify login. Usage counts against your **subscription quota**, not API
+  billing — the status bar shows "Included in subscription".
+
+You can switch auth method per provider in Settings without losing the other
+credential (e.g. keep an API key while trying CLI account, then switch back).
+
+### Action Plan (beta)
+
+An optional execution mode in the standalone web UI for **API key auth only**
+(`cli_account` always uses the default agentic flow). Turn it on with the
+**Action Plan** toggle next to the model selector in the composer.
+
+Instead of a per-step ReAct loop (model → tool → model → tool …), Action Plan:
+
+1. Makes **one** planning LLM call that outputs an ordered todo list of
+   Photoshop MCP tool calls with parameters.
+2. Executes those tools **directly** in sequence — no extra model round-trips
+   between steps.
+3. On a failed step or unresolved dependency, runs a bounded **repair** loop
+   (re-plans only the remaining steps, up to 3 times).
+
+The plan appears as a live todo list above the tool-call cards, with per-step
+status (`pending` → `running` → `done` / `error`). Plans are persisted in chat
+history so they survive reload. The toggle is off by default; the existing
+agentic flow is unchanged when Action Plan is disabled.
+
+Good for multi-step prompts such as *"remove the background and export for web"*
+where you want fewer model calls and faster end-to-end execution.
 
 ### What happens on first launch
 
-1. Pick a provider and paste your API key.
-2. The key is validated against the provider, then stored locally at
-   `~/.photoshop-mcp/data.db` (SQLite, `chmod 600`). It never leaves your
-   machine.
+1. Pick a provider and choose **API key** or **Uses your account**.
+2. Validate the key or check the CLI connection. Config is stored locally at
+   `~/.photoshop-mcp/data.db` (SQLite, `chmod 600`). API keys never leave your
+   machine; CLI mode inherits OAuth from `~/.claude/` or `~/.gemini/`.
 3. Type natural-language prompts. The UI streams the model's reply, runs
    Photoshop tool calls in real time, and renders each tool call as an
    inspectable card (input + result).
-4. Switch provider or model anytime from the model selector — chats, costs and
-   tool history are persisted across sessions.
+4. Switch provider, auth method, or model anytime from Settings / model selector
+   — chats, costs and tool history are persisted across sessions.
+
+### Switching auth method later
+
+Open **Settings** from the sidebar at any time:
+
+| Action | API key mode | CLI account mode |
+|---|---|---|
+| Set up | Paste key → **Save** | Install CLI → `auth login` → **Check connection** |
+| Switch away | Choose **API key** — stored key is kept | Choose **Uses your account** — key is not deleted |
+| Custom binary | — | Optional **CLI path** if `claude` / `gemini` is not on `PATH` |
+| Cost display | Per-token estimate in status bar | **Included in subscription** badge |
+
+Auth method is stored per provider in `~/.photoshop-mcp/data.db` (`authMethod`:
+`api_key` or `cli_account`). Existing configs without `authMethod` default to
+`api_key` and keep working unchanged.
 
 ### CLI flags
 
@@ -60,9 +114,15 @@ photoshop-mcp-ui [--port 5174] [--host 127.0.0.1] [--no-open]
 - The agent is restricted to Photoshop MCP tools only — built-in shell, file
   and web tools are disabled.
 - Tech stack: Vue 3 + Tailwind v4 + [shadcn-vue](https://www.shadcn-vue.com/)
-  on the frontend; [Hono](https://hono.dev/) + the [Vercel AI SDK](https://sdk.vercel.ai/)
-  on the backend. The agent loop talks to this same Photoshop MCP server over
-  STDIO — same code path as the IDE integration.
+  on the frontend; [Hono](https://hono.dev/) on the backend. API-key mode uses
+  the [Vercel AI SDK](https://sdk.vercel.ai/); CLI account mode uses the
+  [Claude Agent SDK](https://code.claude.com/docs/en/agent-sdk/mcp) (Anthropic)
+  or Gemini CLI headless `stream-json` (Google). All paths talk to this same
+  Photoshop MCP server over STDIO.
+- **CLI account limitations:** Gemini headless may open a new session each turn
+  (history is prepended to the prompt). Anthropic CLI account consumes
+  subscription quota. OAuth login is macOS-first (`claude auth login` /
+  `gemini auth login` in Terminal).
 
 ---
 
@@ -388,6 +448,10 @@ Never guess — read get_state after a failure and propose the next single step.
 
 ## Features
 
+- **Standalone web UI** — local chat interface (`photoshop-mcp-ui`); API key or CLI
+  subscription auth per provider (Anthropic, Google)
+- **Action Plan (beta)** — opt-in plan-then-execute mode in the web UI (API key
+  only): one planning call, direct tool execution, bounded repair on failure
 - **Works on both Windows and macOS**
 - **Supports Photoshop 2012-2025+**
 - **ExtendScript API**: Universal compatibility via AppleScript/COM automation
@@ -461,6 +525,10 @@ Add to your Claude Desktop config (`~/Library/Application Support/Claude/claude_
 
 - `PHOTOSHOP_PATH`: (Optional) Specify custom Photoshop installation path
 - `LOG_LEVEL`: Logging level (0=DEBUG, 1=INFO, 2=WARN, 3=ERROR)
+- `POSTHOG_DISABLED`: Set to `1` or `true` to disable anonymous usage analytics entirely
+- `POSTHOG_KEY`: (Optional) Override the PostHog project key used for analytics
+- `POSTHOG_API_HOST`: (Optional) PostHog ingest host (default: `https://a.alisait.com`)
+- `POSTHOG_UI_HOST`: (Optional) PostHog UI host for dashboard links (default: `https://eu.posthog.com`)
 
 ## Available Tools
 
@@ -531,6 +599,9 @@ This context helps AI assistants remember what document and layer they're workin
 - Uses AppleScript/OSA for Photoshop communication
 - Spotlight-based auto-detection
 - Supports multiple Photoshop versions installed simultaneously
+- **CLI account auth** (standalone UI) is macOS-first: run `claude auth login` /
+  `gemini auth login` in Terminal; credentials live under `~/.claude/` and
+  `~/.gemini/`
 
 ## Supported Photoshop Versions
 
@@ -543,6 +614,16 @@ This context helps AI assistants remember what document and layer they're workin
 Common connection, scripting, and logging issues:
 [`docs/troubleshooting.md`](docs/troubleshooting.md).
 
+### Standalone UI — CLI account auth
+
+| Symptom | Likely cause | Fix |
+|---|---|---|
+| `cli_not_found` | Claude Code / Gemini CLI not installed | `npm i -g @anthropic-ai/claude-code` or `npm i -g @google/gemini-cli` |
+| `not_authenticated` | No OAuth session | Run `claude auth login` or `gemini auth login` in Terminal |
+| `claude` / `gemini` not on `PATH` | Custom install location | Settings → **CLI path** → **Check connection** |
+| Chat works in IDE but not UI (CLI mode) | OAuth tokens are CLI-only | Use **CLI account** in UI; API keys and CLI sessions are separate |
+| Gemini multi-turn feels forgetful | Headless CLI may start a fresh session each turn | Known limitation; history is prepended to the prompt (MVP) |
+
 ## Development
 
 From-source setup, build, lint, integration tests (with latest results), and usage examples:
@@ -561,6 +642,68 @@ Contributions are welcome! Please read [CONTRIBUTING.md](CONTRIBUTING.md) before
 
 MIT
 
+## Anonymous Usage Analytics
+
+This project collects **anonymous, aggregated usage events** to understand how the
+MCP server and standalone UI are used and to improve the product. Analytics are
+**enabled by default** and can be turned off at any time.
+
+### What we collect
+
+- App version, operating system, and Node.js version
+- Startup signals (MCP server or UI server started, Photoshop detected or not)
+- Setup funnel events (provider chosen, auth method, validation success/failure
+  codes — not credentials)
+- Generic UI events (app loaded, onboarding completed)
+
+Events use a random anonymous identifier stored locally at
+`~/.photoshop-mcp/` (SQLite `kv` table and/or `analytics-store.json`). We do
+**not** call `identify()` — no person profiles are created for anonymous usage
+(`person_profiles: identified_only`).
+
+### What we do **not** collect (unless you opt into beta team sharing)
+
+- API keys or OAuth tokens
+- Chat messages, prompts, or model responses **by default**
+- Photoshop document or layer names, file paths, or image content
+- CLI account labels, email addresses, or other account identifiers
+- Tool call arguments or results
+
+### Beta team content sharing (opt-in)
+
+On first launch of the standalone UI, you are asked whether you want to **join the
+beta team**. This is separate from anonymous usage analytics above.
+
+If you accept:
+
+- Your **prompts**, **assistant responses**, **reasoning text**, and **tool names**
+  (not arguments or results) may be sent to PostHog after each chat turn
+- Content is truncated for very long messages
+- Requires anonymous analytics to remain enabled
+
+If you decline, no chat content is logged. You can change this later in
+**Settings → General → Privacy → Beta team content sharing**.
+
+Existing installs that have not answered yet are prompted once on the next launch.
+
+### Processor and hosting
+
+Analytics are processed by [PostHog](https://posthog.com/). Events are sent to a
+managed reverse proxy at `https://a.alisait.com`; the PostHog project UI is
+hosted in the EU (`https://eu.posthog.com`). See the
+[PostHog privacy policy](https://posthog.com/privacy) for how PostHog handles
+data on their side.
+
+### How to opt out
+
+1. **Standalone UI:** Settings → General → Privacy → set **Anonymous usage
+   analytics** to **Off** (also disables beta content sharing).
+2. **Beta content only:** Settings → General → Privacy → set **Beta team content
+   sharing** to **Off** (anonymous analytics can stay on).
+3. **Environment variable:** set `POSTHOG_DISABLED=1` before starting
+   `photoshop-mcp` or `photoshop-mcp-ui` (disables all analytics for that
+   process and persists opt-out in local storage).
+
 ## Acknowledgments
 
 - Built with the [Model Context Protocol SDK](https://github.com/modelcontextprotocol/sdk)

package/dist/analytics/beta-telemetry.d.ts

@@ -0,0 +1,11 @@
+export interface BetaChatTurnInput {
+    providerId: string;
+    model: string;
+    authMethod: string;
+    userPrompt: string;
+    assistantText: string;
+    assistantReasoning?: string;
+    toolNames: string[];
+}
+export declare function captureBetaChatTurn(input: BetaChatTurnInput): void;
+//# sourceMappingURL=beta-telemetry.d.ts.map

package/dist/analytics/beta-telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"beta-telemetry.d.ts","sourceRoot":"","sources":["../../src/analytics/beta-telemetry.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAYD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAgClE"}

package/dist/analytics/beta-telemetry.js

@@ -0,0 +1,47 @@
+import { isAnalyticsEnabled, isBetaTelemetryOptIn } from './identity.js';
+import { getLaunchMethod } from './launch-method.js';
+import { getAnalytics } from './provider.js';
+const MAX_TEXT_LENGTH = 16_000;
+const TRUNCATION_SUFFIX = '…[truncated]';
+function truncateText(value) {
+    if (!value)
+        return undefined;
+    if (value.length <= MAX_TEXT_LENGTH)
+        return value;
+    return `${value.slice(0, MAX_TEXT_LENGTH)}${TRUNCATION_SUFFIX}`;
+}
+function uniqueToolNames(names) {
+    return [...new Set(names.map((name) => name.trim()).filter(Boolean))];
+}
+export function captureBetaChatTurn(input) {
+    if (!isAnalyticsEnabled() || !isBetaTelemetryOptIn())
+        return;
+    const assistantText = input.assistantText.trim();
+    const assistantReasoning = input.assistantReasoning?.trim() ?? '';
+    const hasAssistantContent = assistantText.length > 0 ||
+        assistantReasoning.length > 0 ||
+        input.toolNames.length > 0;
+    if (!hasAssistantContent)
+        return;
+    const toolNames = uniqueToolNames(input.toolNames);
+    getAnalytics().capture({
+        name: 'beta_chat_turn',
+        properties: {
+            os: process.platform,
+            arch: process.arch,
+            node_version: process.version,
+            launch_method: getLaunchMethod(),
+            event_source: 'server',
+            provider_id: input.providerId,
+            auth_method: input.authMethod,
+            model: input.model,
+            user_prompt: truncateText(input.userPrompt.trim()) ?? '',
+            assistant_text: truncateText(assistantText) ?? '',
+            ...(assistantReasoning
+                ? { assistant_reasoning: truncateText(assistantReasoning) }
+                : {}),
+            ...(toolNames.length > 0 ? { tool_names: toolNames.join(',') } : {}),
+        },
+    });
+}
+//# sourceMappingURL=beta-telemetry.js.map

package/dist/analytics/beta-telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"beta-telemetry.js","sourceRoot":"","sources":["../../src/analytics/beta-telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAYzC,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,IAAI,eAAe;QAAE,OAAO,KAAK,CAAC;IAClD,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,GAAG,iBAAiB,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,eAAe,CAAC,KAAe;IACtC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAwB;IAC1D,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,oBAAoB,EAAE;QAAE,OAAO;IAE7D,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;IACjD,MAAM,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAClE,MAAM,mBAAmB,GACvB,aAAa,CAAC,MAAM,GAAG,CAAC;QACxB,kBAAkB,CAAC,MAAM,GAAG,CAAC;QAC7B,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,mBAAmB;QAAE,OAAO;IAEjC,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAEnD,YAAY,EAAE,CAAC,OAAO,CAAC;QACrB,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE;YACV,EAAE,EAAE,OAAO,CAAC,QAAQ;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,YAAY,EAAE,OAAO,CAAC,OAAO;YAC7B,aAAa,EAAE,eAAe,EAAE;YAChC,YAAY,EAAE,QAAQ;YACtB,WAAW,EAAE,KAAK,CAAC,UAAU;YAC7B,WAAW,EAAE,KAAK,CAAC,UAAU;YAC7B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE;YACxD,cAAc,EAAE,YAAY,CAAC,aAAa,CAAC,IAAI,EAAE;YACjD,GAAG,CAAC,kBAAkB;gBACpB,CAAC,CAAC,EAAE,mBAAmB,EAAE,YAAY,CAAC,kBAAkB,CAAC,EAAE;gBAC3D,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/analytics/config.d.ts

@@ -0,0 +1,6 @@
+export declare function isPostHogDisabledByEnv(): boolean;
+export declare function resolvePostHogKey(): string;
+export declare function resolvePostHogApiHost(): string;
+export declare function resolvePostHogUiHost(): string;
+export declare function hasPostHogKey(): boolean;
+//# sourceMappingURL=config.d.ts.map

package/dist/analytics/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/analytics/config.ts"],"names":[],"mappings":"AASA,wBAAgB,sBAAsB,IAAI,OAAO,CAEhD;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,wBAAgB,aAAa,IAAI,OAAO,CAEvC"}

package/dist/analytics/config.js

@@ -0,0 +1,23 @@
+const DEFAULT_POSTHOG_KEY = 'phc_mejq4ZZ8jTNZPiusjh7vHyPzWYinzsDwVJW43SM5FEcg';
+const DEFAULT_API_HOST = 'https://a.alisait.com';
+const DEFAULT_UI_HOST = 'https://eu.posthog.com';
+function envTruthy(name) {
+    const value = process.env[name]?.trim().toLowerCase();
+    return value === '1' || value === 'true' || value === 'yes';
+}
+export function isPostHogDisabledByEnv() {
+    return envTruthy('POSTHOG_DISABLED');
+}
+export function resolvePostHogKey() {
+    return process.env.POSTHOG_KEY?.trim() || DEFAULT_POSTHOG_KEY;
+}
+export function resolvePostHogApiHost() {
+    return process.env.POSTHOG_API_HOST?.trim() || DEFAULT_API_HOST;
+}
+export function resolvePostHogUiHost() {
+    return process.env.POSTHOG_UI_HOST?.trim() || DEFAULT_UI_HOST;
+}
+export function hasPostHogKey() {
+    return resolvePostHogKey().length > 0;
+}
+//# sourceMappingURL=config.js.map

package/dist/analytics/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/analytics/config.ts"],"names":[],"mappings":"AAAA,MAAM,mBAAmB,GAAG,kDAAkD,CAAC;AAC/E,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AACjD,MAAM,eAAe,GAAG,wBAAwB,CAAC;AAEjD,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtD,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,KAAK,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO,SAAS,CAAC,kBAAkB,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,mBAAmB,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,gBAAgB,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,eAAe,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,iBAAiB,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AACxC,CAAC"}

package/dist/analytics/context.d.ts

@@ -0,0 +1,2 @@
+export declare function getServerAnalyticsContext(): Record<string, boolean>;
+//# sourceMappingURL=context.d.ts.map

package/dist/analytics/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/analytics/context.ts"],"names":[],"mappings":"AAGA,wBAAgB,yBAAyB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASnE"}

package/dist/analytics/context.js

@@ -0,0 +1,13 @@
+import { loadConfig } from '../ui/config.js';
+import { isAnalyticsEnabled, isBetaTelemetryOptIn } from './identity.js';
+export function getServerAnalyticsContext() {
+    const config = loadConfig();
+    const analyticsEnabled = isAnalyticsEnabled();
+    return {
+        privacy_mode: !analyticsEnabled,
+        analytics_enabled: analyticsEnabled,
+        beta_telemetry_opt_in: isBetaTelemetryOptIn(),
+        action_plan_enabled: Boolean(config.actionPlanBeta),
+    };
+}
+//# sourceMappingURL=context.js.map

package/dist/analytics/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/analytics/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAEzE,MAAM,UAAU,yBAAyB;IACvC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,gBAAgB,GAAG,kBAAkB,EAAE,CAAC;IAC9C,OAAO;QACL,YAAY,EAAE,CAAC,gBAAgB;QAC/B,iBAAiB,EAAE,gBAAgB;QACnC,qBAAqB,EAAE,oBAAoB,EAAE;QAC7C,mBAAmB,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;KACpD,CAAC;AACJ,CAAC"}

package/dist/analytics/events.d.ts

@@ -0,0 +1,3 @@
+export declare function sanitizeAnalyticsProperties(properties: Record<string, unknown> | undefined): Record<string, string | number | boolean>;
+export declare function buildRuntimeProperties(properties: Record<string, unknown> | undefined): Record<string, string | number | boolean>;
+//# sourceMappingURL=events.d.ts.map

package/dist/analytics/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/analytics/events.ts"],"names":[],"mappings":"AAiDA,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC9C,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAc3C;AAED,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC9C,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAS3C"}

package/dist/analytics/events.js

@@ -0,0 +1,75 @@
+import { getServerAnalyticsContext } from './context.js';
+import { getLaunchMethod } from './launch-method.js';
+const BLOCKED_PROPERTY_KEYS = new Set([
+    'api_key',
+    'apikey',
+    'key',
+    'token',
+    'secret',
+    'password',
+    'email',
+    'account_label',
+    'cli_path',
+    'path',
+    'file_path',
+    'filepath',
+    'message',
+    'content',
+    'prompt',
+    'chat_id',
+    'session_id',
+]);
+const ALLOWED_PROPERTY_KEYS = new Set([
+    'app_version',
+    'os',
+    'arch',
+    'node_version',
+    'provider_id',
+    'auth_method',
+    'ok',
+    'error_code',
+    'photoshop_detected',
+    'action_plan_enabled',
+    'event_source',
+    'port',
+    'host',
+    'no_open',
+    'has_auth',
+    'has_custom_path',
+    'opted_out',
+    'opted_in',
+    'privacy_mode',
+    'analytics_enabled',
+    'beta_telemetry_opt_in',
+    'theme',
+    'launch_method',
+]);
+export function sanitizeAnalyticsProperties(properties) {
+    if (!properties)
+        return {};
+    const out = {};
+    for (const [key, value] of Object.entries(properties)) {
+        const normalized = key.toLowerCase();
+        if (BLOCKED_PROPERTY_KEYS.has(normalized))
+            continue;
+        if (!ALLOWED_PROPERTY_KEYS.has(normalized))
+            continue;
+        if (value === null || value === undefined)
+            continue;
+        if (typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean') {
+            out[normalized] = value;
+        }
+    }
+    return out;
+}
+export function buildRuntimeProperties(properties) {
+    return {
+        os: process.platform,
+        arch: process.arch,
+        node_version: process.version,
+        launch_method: getLaunchMethod(),
+        ...getServerAnalyticsContext(),
+        ...sanitizeAnalyticsProperties(properties),
+    };
+}
+//# sourceMappingURL=events.js.map

package/dist/analytics/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/analytics/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,SAAS;IACT,QAAQ;IACR,KAAK;IACL,OAAO;IACP,QAAQ;IACR,UAAU;IACV,OAAO;IACP,eAAe;IACf,UAAU;IACV,MAAM;IACN,WAAW;IACX,UAAU;IACV,SAAS;IACT,SAAS;IACT,QAAQ;IACR,SAAS;IACT,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,aAAa;IACb,IAAI;IACJ,MAAM;IACN,cAAc;IACd,aAAa;IACb,aAAa;IACb,IAAI;IACJ,YAAY;IACZ,oBAAoB;IACpB,qBAAqB;IACrB,cAAc;IACd,MAAM;IACN,MAAM;IACN,SAAS;IACT,UAAU;IACV,iBAAiB;IACjB,WAAW;IACX,UAAU;IACV,cAAc;IACd,mBAAmB;IACnB,uBAAuB;IACvB,OAAO;IACP,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,UAAU,2BAA2B,CACzC,UAA+C;IAE/C,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC;IAE3B,MAAM,GAAG,GAA8C,EAAE,CAAC;IAC1D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,SAAS;QACpD,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,SAAS;QACrD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YACzF,GAAG,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,UAA+C;IAE/C,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,QAAQ;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,YAAY,EAAE,OAAO,CAAC,OAAO;QAC7B,aAAa,EAAE,eAAe,EAAE;QAChC,GAAG,yBAAyB,EAAE;QAC9B,GAAG,2BAA2B,CAAC,UAAU,CAAC;KAC3C,CAAC;AACJ,CAAC"}

package/dist/analytics/identity.d.ts

@@ -0,0 +1,9 @@
+import type { BetaTelemetryState } from './types.js';
+export declare function getOrCreateDistinctId(): string;
+export declare function isAnalyticsOptedOut(): boolean;
+export declare function setAnalyticsOptOut(optedOut: boolean): void;
+export declare function isAnalyticsEnabled(): boolean;
+export declare function getBetaTelemetryState(): BetaTelemetryState;
+export declare function isBetaTelemetryOptIn(): boolean;
+export declare function setBetaTelemetryChoice(optedIn: boolean): void;
+//# sourceMappingURL=identity.d.ts.map

package/dist/analytics/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/analytics/identity.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAwFrD,wBAAgB,qBAAqB,IAAI,MAAM,CAsB9C;AAED,wBAAgB,mBAAmB,IAAI,OAAO,CAO7C;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAI1D;AAED,wBAAgB,kBAAkB,IAAI,OAAO,CAE5C;AAqBD,wBAAgB,qBAAqB,IAAI,kBAAkB,CAW1D;AAED,wBAAgB,oBAAoB,IAAI,OAAO,CAE9C;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAS7D"}

package/dist/analytics/identity.js

@@ -0,0 +1,166 @@
+import { randomUUID } from 'node:crypto';
+import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { getPhotoshopMcpHomeDir } from '../lib/export-paths.js';
+import { kvGet, kvSet } from '../ui/store/kv.js';
+import { isPostHogDisabledByEnv } from './config.js';
+const DISTINCT_ID_KEY = 'analytics_distinct_id';
+const OPT_OUT_KEY = 'analytics_opt_out';
+const BETA_TELEMETRY_OPT_IN_KEY = 'beta_telemetry_opt_in';
+const BETA_TELEMETRY_PROMPT_ANSWERED_KEY = 'beta_telemetry_prompt_answered';
+const STORE_FILE = 'analytics-store.json';
+let memoryDistinctId = null;
+let dbAvailable = null;
+function getStorePath() {
+    return join(getPhotoshopMcpHomeDir(), STORE_FILE);
+}
+function readFileStore() {
+    try {
+        const raw = readFileSync(getStorePath(), 'utf8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return {};
+    }
+}
+function writeFileStore(store) {
+    const dir = getPhotoshopMcpHomeDir();
+    mkdirSync(dir, { recursive: true, mode: 0o700 });
+    writeFileSync(getStorePath(), JSON.stringify(store), { mode: 0o600 });
+}
+function canUseKv() {
+    if (dbAvailable === false)
+        return false;
+    try {
+        kvGet('__analytics_probe__');
+        dbAvailable = true;
+        return true;
+    }
+    catch {
+        dbAvailable = false;
+        return false;
+    }
+}
+function readDistinctIdFromKv() {
+    if (!canUseKv())
+        return undefined;
+    try {
+        return kvGet(DISTINCT_ID_KEY);
+    }
+    catch {
+        dbAvailable = false;
+        return undefined;
+    }
+}
+function writeDistinctIdToKv(id) {
+    if (!canUseKv())
+        return;
+    try {
+        kvSet(DISTINCT_ID_KEY, id);
+    }
+    catch {
+        dbAvailable = false;
+    }
+}
+function readOptOutFromKv() {
+    if (!canUseKv())
+        return undefined;
+    try {
+        return kvGet(OPT_OUT_KEY);
+    }
+    catch {
+        dbAvailable = false;
+        return undefined;
+    }
+}
+function writeOptOutToKv(optedOut) {
+    if (!canUseKv())
+        return;
+    try {
+        kvSet(OPT_OUT_KEY, optedOut);
+    }
+    catch {
+        dbAvailable = false;
+    }
+}
+export function getOrCreateDistinctId() {
+    if (memoryDistinctId)
+        return memoryDistinctId;
+    const fromKv = readDistinctIdFromKv();
+    if (fromKv) {
+        memoryDistinctId = fromKv;
+        return fromKv;
+    }
+    const fromFile = readFileStore().distinctId;
+    if (fromFile) {
+        memoryDistinctId = fromFile;
+        writeDistinctIdToKv(fromFile);
+        return fromFile;
+    }
+    const id = randomUUID();
+    memoryDistinctId = id;
+    writeDistinctIdToKv(id);
+    const store = readFileStore();
+    writeFileStore({ ...store, distinctId: id });
+    return id;
+}
+export function isAnalyticsOptedOut() {
+    if (isPostHogDisabledByEnv())
+        return true;
+    const fromKv = readOptOutFromKv();
+    if (fromKv !== undefined)
+        return fromKv;
+    return readFileStore().optedOut === true;
+}
+export function setAnalyticsOptOut(optedOut) {
+    writeOptOutToKv(optedOut);
+    const store = readFileStore();
+    writeFileStore({ ...store, optedOut });
+}
+export function isAnalyticsEnabled() {
+    return !isAnalyticsOptedOut();
+}
+function readBooleanFromKv(key) {
+    if (!canUseKv())
+        return undefined;
+    try {
+        return kvGet(key);
+    }
+    catch {
+        dbAvailable = false;
+        return undefined;
+    }
+}
+function writeBooleanToKv(key, value) {
+    if (!canUseKv())
+        return;
+    try {
+        kvSet(key, value);
+    }
+    catch {
+        dbAvailable = false;
+    }
+}
+export function getBetaTelemetryState() {
+    const fromKvOptIn = readBooleanFromKv(BETA_TELEMETRY_OPT_IN_KEY);
+    const fromKvAnswered = readBooleanFromKv(BETA_TELEMETRY_PROMPT_ANSWERED_KEY);
+    const fileStore = readFileStore();
+    return {
+        betaTelemetryOptIn: fromKvOptIn ?? fileStore.betaTelemetryOptIn ?? false,
+        betaTelemetryPromptAnswered: fromKvAnswered ?? fileStore.betaTelemetryPromptAnswered ?? false,
+    };
+}
+export function isBetaTelemetryOptIn() {
+    return getBetaTelemetryState().betaTelemetryOptIn;
+}
+export function setBetaTelemetryChoice(optedIn) {
+    writeBooleanToKv(BETA_TELEMETRY_OPT_IN_KEY, optedIn);
+    writeBooleanToKv(BETA_TELEMETRY_PROMPT_ANSWERED_KEY, true);
+    const store = readFileStore();
+    writeFileStore({
+        ...store,
+        betaTelemetryOptIn: optedIn,
+        betaTelemetryPromptAnswered: true,
+    });
+}
+//# sourceMappingURL=identity.js.map