@allstak/wizard 0.1.3

package/dist/telemetry/http-provider.d.ts

@@ -0,0 +1,28 @@
+import type { TelemetryProvider } from './provider.js';
+/**
+ * HTTP telemetry provider. POSTs the canonical payload to a dedicated
+ * telemetry endpoint with a short timeout.
+ *
+ * Backend contract (deferred — endpoint NOT verified to exist as of 2026-05-07):
+ *
+ *   POST <endpoint>
+ *     Content-Type: application/json
+ *     User-Agent:  allstak-wizard/<wizardVersion>
+ *
+ *     Body: TelemetryPayload (exact shape from src/telemetry/payload.ts)
+ *
+ *   Response: any 2xx is success. Non-2xx and network errors are swallowed
+ *             silently by `safeEmit` upstream.
+ *
+ * Until the backend lands a telemetry endpoint, the wizard's default is
+ * `noopTelemetry`. Operators (or future maintainers) can swap to this
+ * provider via `setTelemetryProvider(httpTelemetry({ endpoint }))`.
+ */
+export interface HttpTelemetryOptions {
+    /** Absolute URL of the telemetry endpoint. */
+    endpoint: string;
+    /** Timeout in ms — telemetry must be cheap. Default 1500. */
+    timeoutMs?: number;
+}
+export declare function httpTelemetry(options: HttpTelemetryOptions): TelemetryProvider;
+//# sourceMappingURL=http-provider.d.ts.map

package/dist/telemetry/http-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-provider.d.ts","sourceRoot":"","sources":["../../src/telemetry/http-provider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvD;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,WAAW,oBAAoB;IACnC,8CAA8C;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,iBAAiB,CAqB9E"}

package/dist/telemetry/http-provider.js

@@ -0,0 +1,24 @@
+export function httpTelemetry(options) {
+    return {
+        id: 'http',
+        async emit(payload) {
+            const controller = new AbortController();
+            const timer = setTimeout(() => controller.abort(), options.timeoutMs ?? 1500);
+            try {
+                await fetch(options.endpoint, {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json',
+                        'User-Agent': `allstak-wizard/${payload.wizardVersion}`,
+                    },
+                    body: JSON.stringify(payload),
+                    signal: controller.signal,
+                });
+            }
+            finally {
+                clearTimeout(timer);
+            }
+        },
+    };
+}
+//# sourceMappingURL=http-provider.js.map

package/dist/telemetry/http-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-provider.js","sourceRoot":"","sources":["../../src/telemetry/http-provider.ts"],"names":[],"mappings":"AA8BA,MAAM,UAAU,aAAa,CAAC,OAA6B;IACzD,OAAO;QACL,EAAE,EAAE,MAAM;QACV,KAAK,CAAC,IAAI,CAAC,OAAyB;YAClC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;YAC9E,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE;oBAC5B,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,YAAY,EAAE,kBAAkB,OAAO,CAAC,aAAa,EAAE;qBACxD;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;oBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/telemetry/index.d.ts

@@ -0,0 +1,7 @@
+export { noopTelemetry, setTelemetryProvider, getTelemetryProvider, resetTelemetryProvider, safeEmit, } from './provider.js';
+export type { TelemetryProvider } from './provider.js';
+export { httpTelemetry, type HttpTelemetryOptions } from './http-provider.js';
+export { emitRunTelemetry, isTelemetryEnabled, listDocumentedPayloadFields, type TelemetryRuntimeOptions, type TelemetryPayload, type PayloadInputs, } from './runtime.js';
+export { buildPayload, documentedFields, PAYLOAD_SCHEMA_VERSION, } from './payload.js';
+export { ensureInstallId, readInstallId } from './install-id.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/telemetry/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/telemetry/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,QAAQ,GACT,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,2BAA2B,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,aAAa,GACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/telemetry/index.js

@@ -0,0 +1,6 @@
+export { noopTelemetry, setTelemetryProvider, getTelemetryProvider, resetTelemetryProvider, safeEmit, } from './provider.js';
+export { httpTelemetry } from './http-provider.js';
+export { emitRunTelemetry, isTelemetryEnabled, listDocumentedPayloadFields, } from './runtime.js';
+export { buildPayload, documentedFields, PAYLOAD_SCHEMA_VERSION, } from './payload.js';
+export { ensureInstallId, readInstallId } from './install-id.js';
+//# sourceMappingURL=index.js.map

package/dist/telemetry/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/telemetry/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,QAAQ,GACT,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,aAAa,EAA6B,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,2BAA2B,GAI5B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/telemetry/install-id.d.ts

@@ -0,0 +1,3 @@
+export declare function readInstallId(): string | null;
+export declare function ensureInstallId(): string;
+//# sourceMappingURL=install-id.d.ts.map

package/dist/telemetry/install-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-id.d.ts","sourceRoot":"","sources":["../../src/telemetry/install-id.ts"],"names":[],"mappings":"AAoBA,wBAAgB,aAAa,IAAI,MAAM,GAAG,IAAI,CAS7C;AAED,wBAAgB,eAAe,IAAI,MAAM,CAaxC"}

package/dist/telemetry/install-id.js

@@ -0,0 +1,46 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, resolve } from 'node:path';
+import { randomUUID } from 'node:crypto';
+/**
+ * Anonymous install id — a v4 UUID stored in `~/.config/allstak/install-id`.
+ *
+ * - Generated on first telemetry-emitting run.
+ * - Reused across runs to coalesce events for the same install.
+ * - Users can rotate it by deleting the file (no PII tied to it).
+ * - Telemetry-disabled runs do NOT generate or read it.
+ */
+function configPath() {
+    const xdg = process.env.XDG_CONFIG_HOME;
+    const base = xdg && xdg.length > 0 ? xdg : resolve(homedir(), '.config');
+    return resolve(base, 'allstak', 'install-id');
+}
+export function readInstallId() {
+    const path = configPath();
+    if (!existsSync(path))
+        return null;
+    try {
+        const value = readFileSync(path, 'utf8').trim();
+        return value.length > 0 ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function ensureInstallId() {
+    const existing = readInstallId();
+    if (existing)
+        return existing;
+    const id = randomUUID();
+    const path = configPath();
+    try {
+        mkdirSync(dirname(path), { recursive: true });
+        writeFileSync(path, id, { encoding: 'utf8', mode: 0o600 });
+    }
+    catch {
+        // Best-effort — telemetry must never fail the wizard. If we can't write
+        // the id, just return the in-memory one.
+    }
+    return id;
+}
+//# sourceMappingURL=install-id.js.map

package/dist/telemetry/install-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-id.js","sourceRoot":"","sources":["../../src/telemetry/install-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;;;;;GAOG;AAEH,SAAS,UAAU;IACjB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACxC,MAAM,IAAI,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACzE,OAAO,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;IACjC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,yCAAyC;IAC3C,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/telemetry/payload.d.ts

@@ -0,0 +1,82 @@
+import type { IntegrationId, PackageManager } from '../detect/index.js';
+import type { StabilityLevel } from '../registry/manifest.js';
+import type { WizardErrorCode, WizardStage } from '../util/error-codes.js';
+/**
+ * Telemetry payload — every field that the wizard EVER sends.
+ *
+ * Privacy contract (also documented in docs/beta/privacy.md):
+ *
+ *   ✗ NO API keys, DSNs, refresh tokens, or any credential-shaped value.
+ *   ✗ NO project names, org names, project ids, org ids.
+ *   ✗ NO file paths (absolute or relative).
+ *   ✗ NO env-var values.
+ *   ✗ NO source code, error messages with user content, or stack frames.
+ *   ✗ NO email addresses, IP addresses, or hostnames.
+ *
+ *   ✓ Wizard version, command name, integration id, stability level.
+ *   ✓ OS family + Node major version + package manager + arch.
+ *   ✓ Outcome (success/failure/cancelled/noop).
+ *   ✓ Stage at which a failure occurred.
+ *   ✓ Canonical error code (NEVER message text).
+ *   ✓ Whether rollback was triggered (boolean).
+ *   ✓ Wall-clock duration ms.
+ *
+ * The TypeScript type IS the contract — adding a field here REQUIRES updating
+ * docs/beta/privacy.md AND incrementing `payloadSchemaVersion`.
+ */
+export declare const PAYLOAD_SCHEMA_VERSION = 1;
+export interface TelemetryPayload {
+    schemaVersion: typeof PAYLOAD_SCHEMA_VERSION;
+    /** Stable per-install id (anonymous, regenerable). */
+    installId: string | null;
+    wizardVersion: string;
+    command: string;
+    integration: IntegrationId | null;
+    stability: StabilityLevel | null;
+    os: {
+        /** "darwin" | "linux" | "win32" | "freebsd" | "openbsd" | … (Node's `process.platform`). */
+        family: NodeJS.Platform;
+        /** OS kernel version. Major-only ("23.x.x" → "23") to avoid fingerprinting. */
+        majorRelease: string;
+        arch: NodeJS.Architecture;
+    };
+    node: {
+        /** "20.12.0" → "20". */
+        major: string;
+    };
+    packageManager: PackageManager | null;
+    outcome: 'success' | 'failure' | 'cancelled' | 'noop';
+    /** Stage at which the run terminated (success or failure). */
+    stage: WizardStage | null;
+    /** Canonical code from src/util/error-codes.ts when outcome=failure; else null. */
+    errorCode: WizardErrorCode | null;
+    /** Was an in-process rollback triggered during this run? */
+    rollbackTriggered: boolean;
+    durationMs: number;
+}
+export interface PayloadInputs {
+    installId: string | null;
+    wizardVersion: string;
+    command: string;
+    integration: IntegrationId | null;
+    stability: StabilityLevel | null;
+    packageManager: PackageManager | null;
+    outcome: 'success' | 'failure' | 'cancelled' | 'noop';
+    stage: WizardStage | null;
+    errorCode: WizardErrorCode | null;
+    rollbackTriggered: boolean;
+    durationMs: number;
+}
+/**
+ * Build a payload from the inputs collected by the orchestrator. The function
+ * is the ONLY entry point — direct construction is discouraged so the
+ * sanitization rules above stay enforced.
+ */
+export declare function buildPayload(input: PayloadInputs): TelemetryPayload;
+/**
+ * `documentedFields` — programmatic source of truth for what we send.
+ * `npm test` and `docs/beta/privacy.md` both reference this list to enforce
+ * that the payload doesn't accidentally grow.
+ */
+export declare const documentedFields: readonly ["schemaVersion", "installId", "wizardVersion", "command", "integration", "stability", "os.family", "os.majorRelease", "os.arch", "node.major", "packageManager", "outcome", "stage", "errorCode", "rollbackTriggered", "durationMs"];
+//# sourceMappingURL=payload.d.ts.map

package/dist/telemetry/payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../src/telemetry/payload.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE3E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,OAAO,sBAAsB,CAAC;IAC7C,sDAAsD;IACtD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,aAAa,GAAG,IAAI,CAAC;IAClC,SAAS,EAAE,cAAc,GAAG,IAAI,CAAC;IACjC,EAAE,EAAE;QACF,4FAA4F;QAC5F,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC;QACxB,+EAA+E;QAC/E,YAAY,EAAE,MAAM,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC;KAC3B,CAAC;IACF,IAAI,EAAE;QACJ,wBAAwB;QACxB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IACF,cAAc,EAAE,cAAc,GAAG,IAAI,CAAC;IACtC,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,MAAM,CAAC;IACtD,8DAA8D;IAC9D,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IAC1B,mFAAmF;IACnF,SAAS,EAAE,eAAe,GAAG,IAAI,CAAC;IAClC,4DAA4D;IAC5D,iBAAiB,EAAE,OAAO,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,aAAa,GAAG,IAAI,CAAC;IAClC,SAAS,EAAE,cAAc,GAAG,IAAI,CAAC;IACjC,cAAc,EAAE,cAAc,GAAG,IAAI,CAAC;IACtC,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,MAAM,CAAC;IACtD,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,eAAe,GAAG,IAAI,CAAC;IAClC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,gBAAgB,CAuBnE;AAOD;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,gPAiBnB,CAAC"}

package/dist/telemetry/payload.js

@@ -0,0 +1,82 @@
+import { platform, release as osRelease, arch as osArch } from 'node:os';
+/**
+ * Telemetry payload — every field that the wizard EVER sends.
+ *
+ * Privacy contract (also documented in docs/beta/privacy.md):
+ *
+ *   ✗ NO API keys, DSNs, refresh tokens, or any credential-shaped value.
+ *   ✗ NO project names, org names, project ids, org ids.
+ *   ✗ NO file paths (absolute or relative).
+ *   ✗ NO env-var values.
+ *   ✗ NO source code, error messages with user content, or stack frames.
+ *   ✗ NO email addresses, IP addresses, or hostnames.
+ *
+ *   ✓ Wizard version, command name, integration id, stability level.
+ *   ✓ OS family + Node major version + package manager + arch.
+ *   ✓ Outcome (success/failure/cancelled/noop).
+ *   ✓ Stage at which a failure occurred.
+ *   ✓ Canonical error code (NEVER message text).
+ *   ✓ Whether rollback was triggered (boolean).
+ *   ✓ Wall-clock duration ms.
+ *
+ * The TypeScript type IS the contract — adding a field here REQUIRES updating
+ * docs/beta/privacy.md AND incrementing `payloadSchemaVersion`.
+ */
+export const PAYLOAD_SCHEMA_VERSION = 1;
+/**
+ * Build a payload from the inputs collected by the orchestrator. The function
+ * is the ONLY entry point — direct construction is discouraged so the
+ * sanitization rules above stay enforced.
+ */
+export function buildPayload(input) {
+    return {
+        schemaVersion: PAYLOAD_SCHEMA_VERSION,
+        installId: input.installId,
+        wizardVersion: input.wizardVersion,
+        command: input.command,
+        integration: input.integration,
+        stability: input.stability,
+        os: {
+            family: platform(),
+            majorRelease: pickMajor(osRelease()),
+            arch: osArch(),
+        },
+        node: {
+            major: pickMajor(process.versions.node),
+        },
+        packageManager: input.packageManager,
+        outcome: input.outcome,
+        stage: input.stage,
+        errorCode: input.errorCode,
+        rollbackTriggered: input.rollbackTriggered,
+        durationMs: input.durationMs,
+    };
+}
+function pickMajor(versionLike) {
+    const m = /^(\d+)/.exec(versionLike);
+    return m ? m[1] : 'unknown';
+}
+/**
+ * `documentedFields` — programmatic source of truth for what we send.
+ * `npm test` and `docs/beta/privacy.md` both reference this list to enforce
+ * that the payload doesn't accidentally grow.
+ */
+export const documentedFields = [
+    'schemaVersion',
+    'installId',
+    'wizardVersion',
+    'command',
+    'integration',
+    'stability',
+    'os.family',
+    'os.majorRelease',
+    'os.arch',
+    'node.major',
+    'packageManager',
+    'outcome',
+    'stage',
+    'errorCode',
+    'rollbackTriggered',
+    'durationMs',
+];
+//# sourceMappingURL=payload.js.map

package/dist/telemetry/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../src/telemetry/payload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,SAAS,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,SAAS,CAAC;AAKzE;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AA8CxC;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,KAAoB;IAC/C,OAAO;QACL,aAAa,EAAE,sBAAsB;QACrC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,EAAE,EAAE;YACF,MAAM,EAAE,QAAQ,EAAE;YAClB,YAAY,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC;YACpC,IAAI,EAAE,MAAM,EAAyB;SACtC;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;SACxC;QACD,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,WAAmB;IACpC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACrC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,eAAe;IACf,WAAW;IACX,eAAe;IACf,SAAS;IACT,aAAa;IACb,WAAW;IACX,WAAW;IACX,iBAAiB;IACjB,SAAS;IACT,YAAY;IACZ,gBAAgB;IAChB,SAAS;IACT,OAAO;IACP,WAAW;IACX,mBAAmB;IACnB,YAAY;CACJ,CAAC"}

package/dist/telemetry/provider.d.ts

@@ -0,0 +1,32 @@
+import type { TelemetryPayload } from './payload.js';
+/**
+ * Telemetry provider abstraction. The provider is invoked exactly once per
+ * wizard command — after the orchestrator has finalised the outcome and
+ * built the canonical payload. There is no streaming/event-by-event surface;
+ * that complicates privacy review for marginal value.
+ *
+ * Privacy invariants:
+ *   - The orchestrator passes a `TelemetryPayload` (see ./payload.ts) which is
+ *     the entire on-the-wire shape. No secondary fields are read by the
+ *     provider.
+ *   - Providers MUST NOT throw — the orchestrator calls `safeEmit()` which
+ *     wraps every provider call in a try/catch. Failures are debug-logged
+ *     but never propagated.
+ *   - Disabled-by-default behaviour lives in `runtime.ts:isTelemetryEnabled`.
+ */
+export interface TelemetryProvider {
+    readonly id: string;
+    /** Send the payload. Provider may be sync or async. */
+    emit(payload: TelemetryPayload): void | Promise<void>;
+}
+/** Default provider — does nothing. Always installed so callers can `await` unconditionally. */
+export declare const noopTelemetry: TelemetryProvider;
+export declare function setTelemetryProvider(provider: TelemetryProvider): void;
+export declare function getTelemetryProvider(): TelemetryProvider;
+export declare function resetTelemetryProvider(): void;
+/**
+ * Run a provider's `emit` and swallow any exception. The result is intentionally
+ * `void` — the orchestrator should never branch on telemetry success.
+ */
+export declare function safeEmit(provider: TelemetryProvider, payload: TelemetryPayload): Promise<void>;
+//# sourceMappingURL=provider.d.ts.map

package/dist/telemetry/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/telemetry/provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD;;;;;;;;;;;;;;GAcG;AAEH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,IAAI,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvD;AAED,gGAAgG;AAChG,eAAO,MAAM,aAAa,EAAE,iBAK3B,CAAC;AAIF,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAEtE;AAED,wBAAgB,oBAAoB,IAAI,iBAAiB,CAExD;AAED,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C;AAED;;;GAGG;AACH,wBAAsB,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAMpG"}

package/dist/telemetry/provider.js

@@ -0,0 +1,30 @@
+/** Default provider — does nothing. Always installed so callers can `await` unconditionally. */
+export const noopTelemetry = {
+    id: 'noop',
+    async emit() {
+        /* intentionally empty */
+    },
+};
+let active = noopTelemetry;
+export function setTelemetryProvider(provider) {
+    active = provider;
+}
+export function getTelemetryProvider() {
+    return active;
+}
+export function resetTelemetryProvider() {
+    active = noopTelemetry;
+}
+/**
+ * Run a provider's `emit` and swallow any exception. The result is intentionally
+ * `void` — the orchestrator should never branch on telemetry success.
+ */
+export async function safeEmit(provider, payload) {
+    try {
+        await Promise.resolve(provider.emit(payload));
+    }
+    catch {
+        // Telemetry failures are NEVER allowed to bubble.
+    }
+}
+//# sourceMappingURL=provider.js.map

package/dist/telemetry/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../src/telemetry/provider.ts"],"names":[],"mappings":"AAwBA,gGAAgG;AAChG,MAAM,CAAC,MAAM,aAAa,GAAsB;IAC9C,EAAE,EAAE,MAAM;IACV,KAAK,CAAC,IAAI;QACR,yBAAyB;IAC3B,CAAC;CACF,CAAC;AAEF,IAAI,MAAM,GAAsB,aAAa,CAAC;AAE9C,MAAM,UAAU,oBAAoB,CAAC,QAA2B;IAC9D,MAAM,GAAG,QAAQ,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,MAAM,GAAG,aAAa,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,QAA2B,EAAE,OAAyB;IACnF,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;AACH,CAAC"}

package/dist/telemetry/runtime.d.ts

@@ -0,0 +1,29 @@
+import { type PayloadInputs, type TelemetryPayload } from './payload.js';
+/**
+ * Telemetry runtime — applies the opt-in/opt-out policy, builds the payload,
+ * and dispatches to the active provider.
+ *
+ * Disabled by default. Enabled only when ALL of the following hold:
+ *   1. `--no-telemetry` was NOT passed.
+ *   2. `ALLSTAK_WIZARD_TELEMETRY` env var is NOT '0' / 'false' / 'off'.
+ *   3. A non-noop provider has been installed (see provider.ts).
+ *
+ * `--telemetry-debug` overrides the gate: it prints the payload to stderr
+ * but does NOT send (regardless of provider).
+ */
+export interface TelemetryRuntimeOptions {
+    /** From the global `--no-telemetry` flag. */
+    cliDisabled?: boolean;
+    /** From the global `--telemetry-debug` flag. */
+    debug?: boolean;
+}
+export declare function isTelemetryEnabled(opts: TelemetryRuntimeOptions): boolean;
+/**
+ * Run-end telemetry hook. Always called from the orchestrator regardless of
+ * gate state — the gate decides whether the payload reaches the provider.
+ */
+export declare function emitRunTelemetry(inputs: PayloadInputs, opts?: TelemetryRuntimeOptions): Promise<void>;
+/** Documentation hook — used in tests to assert the payload shape doesn't grow. */
+export declare function listDocumentedPayloadFields(): readonly string[];
+export type { TelemetryPayload, PayloadInputs };
+//# sourceMappingURL=runtime.d.ts.map

package/dist/telemetry/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/telemetry/runtime.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,KAAK,aAAa,EAAE,KAAK,gBAAgB,EAAoB,MAAM,cAAc,CAAC;AAGzG;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,uBAAuB;IACtC,6CAA6C;IAC7C,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gDAAgD;IAChD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAOzE;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,aAAa,EACrB,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED,mFAAmF;AACnF,wBAAgB,2BAA2B,IAAI,SAAS,MAAM,EAAE,CAE/D;AAED,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC"}

package/dist/telemetry/runtime.js

@@ -0,0 +1,44 @@
+import { log } from '../util/log.js';
+import { ensureInstallId, readInstallId } from './install-id.js';
+import { buildPayload, documentedFields } from './payload.js';
+import { getTelemetryProvider, safeEmit } from './provider.js';
+export function isTelemetryEnabled(opts) {
+    if (opts.debug)
+        return false; // debug always replaces emit
+    if (opts.cliDisabled)
+        return false;
+    const env = (process.env.ALLSTAK_WIZARD_TELEMETRY ?? '').trim().toLowerCase();
+    if (env === '0' || env === 'false' || env === 'off' || env === 'no')
+        return false;
+    // Default: enabled — provider may still be `noopTelemetry`.
+    return true;
+}
+/**
+ * Run-end telemetry hook. Always called from the orchestrator regardless of
+ * gate state — the gate decides whether the payload reaches the provider.
+ */
+export async function emitRunTelemetry(inputs, opts = {}) {
+    const enabled = isTelemetryEnabled(opts);
+    const installId = enabled ? ensureInstallId() : readInstallId();
+    const payload = buildPayload({ ...inputs, installId });
+    if (opts.debug) {
+        // Print to stderr (stdout is reserved for --json output of the command).
+        process.stderr.write(`[telemetry-debug] ${JSON.stringify(payload, null, 2)}\n`);
+        return;
+    }
+    if (!enabled) {
+        log.debug('telemetry: disabled, payload would have been sent');
+        return;
+    }
+    const provider = getTelemetryProvider();
+    if (provider.id === 'noop') {
+        log.debug('telemetry: provider=noop (no endpoint configured)');
+        return;
+    }
+    await safeEmit(provider, payload);
+}
+/** Documentation hook — used in tests to assert the payload shape doesn't grow. */
+export function listDocumentedPayloadFields() {
+    return documentedFields;
+}
+//# sourceMappingURL=runtime.js.map

package/dist/telemetry/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/telemetry/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,YAAY,EAA6C,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACzG,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAsB/D,MAAM,UAAU,kBAAkB,CAAC,IAA6B;IAC9D,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,6BAA6B;IAC3D,IAAI,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9E,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAClF,4DAA4D;IAC5D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAqB,EACrB,OAAgC,EAAE;IAElC,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAChE,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAEvD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,yEAAyE;QACzE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAChF,OAAO;IACT,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IACxC,IAAI,QAAQ,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;QAC3B,GAAG,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,2BAA2B;IACzC,OAAO,gBAAgB,CAAC;AAC1B,CAAC"}

package/dist/transaction/tx.d.ts

@@ -0,0 +1,58 @@
+import type { SnapshotWriter } from '../snapshot/store.js';
+export type SyntaxValidator = (path: string, content: string) => void | Promise<void>;
+export interface TransactionOptions {
+    /** When true, all writes are recorded but never flushed to disk; rollback becomes a no-op. */
+    dryRun?: boolean;
+    /** Project root, used to compute relative paths for diff output. */
+    cwd?: string;
+    /**
+     * Optional persistent snapshot writer. When provided, every captured file
+     * pre-image is also forwarded to the writer so a backup directory is left on
+     * disk after the transaction commits. The writer is committed on success and
+     * aborted on rollback.
+     */
+    snapshotWriter?: SnapshotWriter;
+}
+export interface PlannedDiff {
+    path: string;
+    before: string | null;
+    after: string;
+    kind: 'create' | 'modify' | 'delete';
+}
+/**
+ * Atomic file-mutation transaction. Every mutation is snapshotted before the write;
+ * on any failure (including a post-write syntax-validation failure) the entire
+ * transaction is rolled back in reverse order.
+ *
+ * Idempotency contract: callers writing into a file that already contains the same
+ * content should detect that and skip — Transaction does NOT dedupe writes for you.
+ */
+export declare class Transaction {
+    private readonly snapshots;
+    private readonly diffs;
+    private readonly written;
+    private readonly options;
+    private committed;
+    private rolledBack;
+    constructor(options?: TransactionOptions);
+    get dryRun(): boolean;
+    /**
+     * Stage a write. Snapshots the file (if it exists) and writes the new content.
+     * Pass a syntax validator to fail-fast on broken output.
+     */
+    write(filePath: string, content: string, validator?: SyntaxValidator): Promise<void>;
+    /**
+     * Stage a deletion (with snapshot for restore on rollback).
+     */
+    delete(filePath: string): Promise<void>;
+    commit(): Promise<void>;
+    rollback(): Promise<void>;
+    /**
+     * Run a unit of work inside this transaction. If the function throws, the transaction
+     * is rolled back and the original error is wrapped in TransactionAbortedError.
+     */
+    run<T>(work: () => Promise<T> | T): Promise<T>;
+    describeDiffs(cwd?: string): string[];
+    get plannedDiffs(): readonly PlannedDiff[];
+}
+//# sourceMappingURL=tx.d.ts.map

package/dist/transaction/tx.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tx.d.ts","sourceRoot":"","sources":["../../src/transaction/tx.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAQ3D,MAAM,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEtF,MAAM,WAAW,kBAAkB;IACjC,8FAA8F;IAC9F,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;CACtC;AAED;;;;;;;GAOG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsB;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAC3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,UAAU,CAAS;gBAEf,OAAO,GAAE,kBAAuB;IAI5C,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED;;;OAGG;IACG,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IA2C1F;;OAEG;IACG,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBvC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAYvB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAyB/B;;;OAGG;IACG,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAYpD,aAAa,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE;IAerC,IAAI,YAAY,IAAI,SAAS,WAAW,EAAE,CAEzC;CACF"}