@alumbwe/anvil 1.0.20 → 1.0.21

package/vendor/@anvil/common/src/constants/analytics-events.ts

@@ -0,0 +1,435 @@
+/**
+ * Enum of analytics event types used throughout the application
+ */
+export enum AnalyticsEvent {
+  // Cross-surface — DAU
+  // Emitted exactly once per user-submitted message/prompt, on each surface,
+  // and never sampled. `distinct_id` is the canonical anvil Postgres user
+  // id on every surface, so unique-users of this event gives accurate
+  // per-surface DAU (filter on the `surface` property) and a combined DAU (no
+  // filter). The `surface` property is one of: cli, web, chat, desktop, cloud
+  // (web = the anvil.com builder, cloud = connected-repo builder projects).
+  // Emission points: cli client analytics; chat's stream route (server-side);
+  // desktop's analytics module; web/cloud via the Convex send mutation
+  // (PostHog + Axiom, both direct from Convex — see convex/analytics.ts).
+  MESSAGE_SENT = 'message_sent',
+
+  // Cross-surface — engaged time
+  // Emitted once per minute of *active engagement* on each surface (cli / web /
+  // chat / cloud / desktop) while the user is present (visible+focused for
+  // browser surfaces, recently-active for the CLI) and not idle. Never sampled.
+  // `distinct_id` is the canonical user id where available (anonymous/device id
+  // otherwise). Because interval = 1 minute, a raw event COUNT equals minutes
+  // spent: sum per product = Total count broken down by `surface`; average per
+  // user = "Average count per user" broken down by `surface`. See
+  // common/src/util/engagement-tracker.ts.
+  PRODUCT_ACTIVE_MINUTE = 'product_active_minute',
+
+  // CLI
+  APP_LAUNCHED = 'cli.app_launched',
+  FINGERPRINT_GENERATED = 'cli.fingerprint_generated',
+  CHANGE_DIRECTORY = 'cli.change_directory',
+  INVALID_COMMAND = 'cli.invalid_command',
+  KNOWLEDGE_FILE_UPDATED = 'cli.knowledge_file_updated',
+  LOGIN = 'cli.login',
+  // Login funnel — the path between launch and a successful `cli.login`.
+  // Emitted from login-flow.ts (the chokepoint both the modal and the
+  // `login` command share); all tagged with `via` (modal | plain_command).
+  LOGIN_STARTED = 'cli.login_started',
+  LOGIN_FAILED = 'cli.login_failed',
+  LOGIN_TIMEOUT = 'cli.login_timeout',
+  LOGIN_ABORTED = 'cli.login_aborted',
+  SLASH_MENU_ACTIVATED = 'cli.slash_menu_activated',
+  SLASH_COMMAND_USED = 'cli.slash_command_used',
+  TERMINAL_BROKER_SPAWN_FAILED = 'cli.terminal_broker_spawn_failed',
+  TERMINAL_WATCHDOG_FAILED = 'cli.terminal_watchdog_failed',
+  TERMINAL_COMMAND_COMPLETED = 'cli.terminal_command_completed',
+  USER_INPUT_COMPLETE = 'cli.user_input_complete',
+  UPDATE_ANVIL_FAILED = 'cli.update_anvil_failed',
+  FEEDBACK_BUTTON_HOVERED = 'cli.feedback_button_hovered',
+  FOLLOWUP_CLICKED = 'cli.followup_clicked',
+  SUGGESTED_PROMPT_SHOWN = 'cli.suggested_prompt_shown',
+  SUGGESTED_PROMPT_CLICKED = 'cli.suggested_prompt_clicked',
+  // Sampled per eligible transcript slot; use response_id to recover the
+  // response-length distribution without ingesting every user's full stream.
+  CLI_INLINE_AD_SLOT_ELIGIBLE = 'cli.inline_ad_slot_eligible',
+  // Emitted once when a response needs a fifth slot and starts reusing its
+  // four-ad pool.
+  CLI_INLINE_AD_POOL_REUSED = 'cli.inline_ad_pool_reused',
+
+  // Backend
+  AGENT_STEP = 'backend.agent_step',
+  CREDIT_GRANT = 'backend.credit_grant',
+  CREDIT_CONSUMED = 'backend.credit_consumed',
+  MALFORMED_TOOL_CALL_JSON = 'backend.malformed_tool_call_json',
+  TOOL_USE = 'backend.tool_use',
+  UNKNOWN_TOOL_CALL = 'backend.unknown_tool_call',
+  USER_INPUT = 'backend.user_input',
+
+  // Backend - Database Operations
+  ADVISORY_LOCK_CONTENTION = 'backend.advisory_lock_contention',
+  TRANSACTION_RETRY_THRESHOLD_EXCEEDED = 'backend.transaction_retry_threshold_exceeded',
+
+  // Backend - Subscription
+  SUBSCRIPTION_CREATED = 'backend.subscription_created',
+  SUBSCRIPTION_CANCELED = 'backend.subscription_canceled',
+  SUBSCRIPTION_PAYMENT_FAILED = 'backend.subscription_payment_failed',
+  SUBSCRIPTION_BLOCK_CREATED = 'backend.subscription_block_created',
+  SUBSCRIPTION_BLOCK_LIMIT_HIT = 'backend.subscription_block_limit_hit',
+  SUBSCRIPTION_WEEKLY_LIMIT_HIT = 'backend.subscription_weekly_limit_hit',
+  SUBSCRIPTION_CREDITS_MIGRATED = 'backend.subscription_credits_migrated',
+  SUBSCRIPTION_TIER_CHANGED = 'backend.subscription_tier_changed',
+
+  // Web
+  SIGNUP = 'web.signup',
+
+  // Web - Authentication
+  AUTH_LOGIN_STARTED = 'auth.login_started',
+  AUTH_LOGOUT_COMPLETED = 'auth.logout_completed',
+
+  // Web - Cookie Consent
+  COOKIE_CONSENT_ACCEPTED = 'cookie_consent.accepted',
+  COOKIE_CONSENT_DECLINED = 'cookie_consent.declined',
+
+  // Web - Onboarding
+  ONBOARDING_STEP_COMPLETED = 'onboarding_step_completed',
+  ONBOARDING_STEP_VIEWED = 'onboarding_step_viewed',
+  ONBOARDING_PM_SELECTED = 'onboarding_pm_selected',
+  ONBOARDING_EDITOR_OPENED = 'onboarding_editor_opened',
+
+  // Web - Onboard Page
+  ONBOARD_PAGE_CD_COMMAND_COPIED = 'onboard_page.cd_command_copied',
+  ONBOARD_PAGE_RUN_COMMAND_COPIED = 'onboard_page.run_command_copied',
+  ONBOARD_PAGE_INSTALL_COMMAND_COPIED = 'onboard_page.install_command_copied',
+
+  // Web - Creator Attribution
+  ANVIL_REFERRER_ATTRIBUTED = 'anvil.referrer_attributed',
+
+  // Web - Install Dialog
+  INSTALL_DIALOG_CD_COMMAND_COPIED = 'install_dialog.cd_command_copied',
+  INSTALL_DIALOG_RUN_COMMAND_COPIED = 'install_dialog.run_command_copied',
+  INSTALL_DIALOG_INSTALL_COMMAND_COPIED = 'install_dialog.install_command_copied',
+
+  // Web - Home Page
+  HOME_FEATURE_LEARN_MORE_CLICKED = 'home.feature_learn_more_clicked',
+  HOME_INSTALL_COMMAND_COPIED = 'home.install_command_copied',
+  HOME_TRY_FREE_CLICKED = 'home.try_free_clicked',
+  HOME_TESTIMONIAL_CLICKED = 'home.testimonial_clicked',
+  HOME_CTA_INSTALL_GUIDE_CLICKED = 'home.cta_install_guide_clicked',
+  HOME_COMPETITION_TAB_CHANGED = 'home.competition_tab_changed',
+
+  // Web - Demo Terminal
+  DEMO_TERMINAL_COMMAND_EXECUTED = 'demo_terminal.command_executed',
+  DEMO_TERMINAL_HELP_VIEWED = 'demo_terminal.help_viewed',
+  DEMO_TERMINAL_OPTIMIZE_REQUESTED = 'demo_terminal.optimize_requested',
+  DEMO_TERMINAL_FIX_MEMORY_LEAK = 'demo_terminal.fix_memory_leak',
+  DEMO_TERMINAL_REFACTOR_REQUESTED = 'demo_terminal.refactor_requested',
+  DEMO_TERMINAL_FEATURE_REQUESTED = 'demo_terminal.feature_requested',
+  DEMO_TERMINAL_THEME_CHANGED = 'demo_terminal.theme_changed',
+
+  // Web - UI Components
+  TOAST_SHOWN = 'toast.shown',
+
+  // Web - API
+  AGENT_RUN_API_REQUEST = 'api.agent_run_request',
+  AGENT_RUN_CREATED = 'api.agent_run_created',
+  AGENT_RUN_COMPLETED = 'api.agent_run_completed',
+  AGENT_RUN_VALIDATION_ERROR = 'api.agent_run_validation_error',
+  AGENT_RUN_CREATION_ERROR = 'api.agent_run_creation_error',
+  AGENT_RUN_COMPLETION_ERROR = 'api.agent_run_completion_error',
+  ME_API_REQUEST = 'api.me_request',
+  ME_VALIDATION_ERROR = 'api.me_validation_error',
+  CHAT_COMPLETIONS_REQUEST = 'api.chat_completions_request',
+  CHAT_COMPLETIONS_AUTH_ERROR = 'api.chat_completions_auth_error',
+  CHAT_COMPLETIONS_VALIDATION_ERROR = 'api.chat_completions_validation_error',
+  CHAT_COMPLETIONS_INSUFFICIENT_CREDITS = 'api.chat_completions_insufficient_credits',
+  CHAT_COMPLETIONS_GENERATION_STARTED = 'api.chat_completions_generation_started',
+  CHAT_COMPLETIONS_STREAM_STARTED = 'api.chat_completions_stream_started',
+  CHAT_COMPLETIONS_ERROR = 'api.chat_completions_error',
+
+  // Web - Usage API
+  USAGE_API_REQUEST = 'api.usage_request',
+  USAGE_API_AUTH_ERROR = 'api.usage_auth_error',
+
+  // Web - Search API
+  WEB_SEARCH_REQUEST = 'api.web_search_request',
+  WEB_SEARCH_AUTH_ERROR = 'api.web_search_auth_error',
+  WEB_SEARCH_VALIDATION_ERROR = 'api.web_search_validation_error',
+  WEB_SEARCH_INSUFFICIENT_CREDITS = 'api.web_search_insufficient_credits',
+  WEB_SEARCH_ERROR = 'api.web_search_error',
+
+  DOCS_SEARCH_REQUEST = 'api.docs_search_request',
+  DOCS_SEARCH_AUTH_ERROR = 'api.docs_search_auth_error',
+  DOCS_SEARCH_VALIDATION_ERROR = 'api.docs_search_validation_error',
+  DOCS_SEARCH_INSUFFICIENT_CREDITS = 'api.docs_search_insufficient_credits',
+  DOCS_SEARCH_ERROR = 'api.docs_search_error',
+
+  GRAVITY_INDEX_REQUEST = 'api.gravity_index_request',
+  GRAVITY_INDEX_AUTH_ERROR = 'api.gravity_index_auth_error',
+  GRAVITY_INDEX_VALIDATION_ERROR = 'api.gravity_index_validation_error',
+  GRAVITY_INDEX_ERROR = 'api.gravity_index_error',
+
+  // Web - Feedback API
+  FEEDBACK_SUBMITTED = 'api.feedback_submitted',
+  FEEDBACK_AUTH_ERROR = 'api.feedback_auth_error',
+  FEEDBACK_VALIDATION_ERROR = 'api.feedback_validation_error',
+
+  // Web - Logs ingest API (client logs/events → BigQuery)
+  LOGS_INGEST_AUTH_ERROR = 'api.logs_ingest_auth_error',
+  LOGS_INGEST_VALIDATION_ERROR = 'api.logs_ingest_validation_error',
+
+  // Web - Ads API
+  ADS_API_AUTH_ERROR = 'api.ads_auth_error',
+  ADS_FETCH_COMPLETED = 'ads.fetch_completed',
+  ADS_IMPRESSION_RECORDED = 'ads.impression_recorded',
+  ADS_CLICKED = 'ads.clicked',
+
+  // Web - Token Count API
+  TOKEN_COUNT_REQUEST = 'api.token_count_request',
+  TOKEN_COUNT_AUTH_ERROR = 'api.token_count_auth_error',
+  TOKEN_COUNT_VALIDATION_ERROR = 'api.token_count_validation_error',
+  TOKEN_COUNT_ERROR = 'api.token_count_error',
+
+
+  // Anvil - Referral program server lifecycle (emitted from packages/billing
+  // via the server logger → Axiom `event` column).
+  ANVIL_REFERRAL_REDEEMED = 'anvil.referral.redeemed',
+  // A redemption attempt that hit one of the one-shot eligibility guards
+  // (signup_too_old, user_banned, referrer_limit_reached, reverse_referral,
+  // self_referral). Deliberately EXCLUDES the two repeat-prone errors —
+  // invalid_code (cookie intentionally kept for legacy codes) and
+  // already_referred (cookie can outlive redemption on the /onboard RSC hop)
+  // — which would otherwise re-fire on every <=10-min token mint; those log
+  // at debug only. Without this event, a "my friend's invite didn't count"
+  // support case is undiagnosable — the guards otherwise return silently.
+  ANVIL_REFERRAL_REDEEM_FAILED = 'anvil.referral.redeem_failed',
+  // Attribution went through and the referred user redeemed from an IP or
+  // browser the REFERRER was recently seen on. Evidence, NOT a verdict: this
+  // is also exactly what a genuine in-person referral looks like ("try it,
+  // here's my laptop" — a sibling on the family computer shares both). Only
+  // suspicious when corroborated by real farm signals (dormant GitHub, burst
+  // velocity, no product use); the sweep + scripts do that weighing.
+  ANVIL_REFERRAL_SOCK_SIGNAL = 'anvil.referral.sock_signal',
+  // Anvil - Get Started Page (referral onboarding funnel, in order:
+  //   viewed → sign_in_clicked → signed_in → eligibility_resolved →
+  //   [connect_github_clicked] → install_command_copied | web_clicked).
+  // Every event carries a `referrer` prop (the inviter's name) for per-referrer
+  // funnel breakdowns.
+  ANVIL_GET_STARTED_VIEWED = 'anvil.get_started_viewed',
+  ANVIL_GET_STARTED_SIGN_IN_CLICKED = 'anvil.get_started_sign_in_clicked',
+  ANVIL_GET_STARTED_SIGNED_IN = 'anvil.get_started_signed_in',
+  ANVIL_GET_STARTED_ELIGIBILITY_RESOLVED = 'anvil.get_started_eligibility_resolved',
+  ANVIL_GET_STARTED_CONNECT_GITHUB_CLICKED = 'anvil.get_started_connect_github_clicked',
+  ANVIL_GET_STARTED_INSTALL_COMMAND_COPIED = 'anvil.get_started_install_command_copied',
+  ANVIL_GET_STARTED_WEB_CLICKED = 'anvil.get_started_web_clicked',
+  // Deprecated (previous get-started design — no longer fired):
+  ANVIL_GET_STARTED_HELP_EXPANDED = 'anvil.get_started_help_expanded',
+  ANVIL_GET_STARTED_EDITOR_CLICKED = 'anvil.get_started_editor_clicked',
+
+  // Anvil - Chat
+  // Emitted once per new-thread title generation attempt (server-side). The
+  // `outcome` property is one of: generated | empty | unknown_model | error |
+  // aborted. Carries `latencyMs`, `model`, and `titleLength` so the failure/
+  // fallback rate and added latency are queryable.
+  ANVIL_CHAT_TITLE_GENERATED = 'anvil.chat_title_generated',
+
+  // Anvil - CLI landing page (/cli). Fired when the install command is
+  // copied; `location` distinguishes hero vs install section. Lets us measure
+  // install intent per campaign (utm_* ride along as super-properties) — the
+  // best proxy conversion for CLI traffic, since CLI activation happens in a
+  // separate identity space with no key back to the web landing.
+  ANVIL_CLI_INSTALL_COMMAND_COPIED = 'anvil.cli_install_command_copied',
+
+  // Anvil - Enterprise landing page (/enterprise). Fired when the contact
+  // form is submitted successfully; carries `companySize` and whether the
+  // sender self-identified as an AI lab, so inbound demand can be segmented
+  // without reading the emails. The lead itself lands in james@/victor@ inboxes
+  // — this event only measures the funnel into them.
+  ANVIL_ENTERPRISE_CONTACT_SUBMITTED = 'anvil.enterprise_contact_submitted',
+
+  // Anvil - Desktop download CTAs (home hero, products row, /desktop).
+  // Fired on every click of a download button; `location` distinguishes the
+  // CTA, `platform` the build, and `repeat: true` marks a click we swallowed
+  // because the same download had just started (the "did that work?" double
+  // click) — a direct read on whether the click feedback is landing.
+  ANVIL_DESKTOP_DOWNLOAD_CLICKED = 'anvil.desktop_download_clicked',
+
+  // Anvil Web creation gate: the user's idea was screened as something Web
+  // cannot build, and they clicked through to the surface we suggested.
+  // `surface` is desktop | cli | unsupported. Pairs with the Convex
+  // web_gate_decision row (which carries the same click) — PostHog answers
+  // "did the redirect land?" across the funnel, Convex answers "for which
+  // ideas?". Both exist because the Convex row cannot see what the user does
+  // after leaving /web.
+  ANVIL_WEB_GATE_REDIRECT_CLICKED = 'anvil.web_gate_redirect_clicked',
+
+  // Anvil Web first-session onboarding. The details sequence runs in the
+  // chat pane while the first build streams; its answers are composed into the
+  // user's SECOND prompt, which is the drop-off metric this exists to move
+  // (51% of Web projects never get one). `_STEP` fires per question with
+  // whether it was answered or skipped, so the funnel shows which question
+  // people bail on. `_FINISHED` carries `answered` (0-4) and `sent`.
+  ANVIL_WEB_ONBOARDING_STEP = 'anvil.web_onboarding_step',
+  ANVIL_WEB_ONBOARDING_FINISHED = 'anvil.web_onboarding_finished',
+
+  // The workspace spotlight tour that follows the first build. `_STEP` fires
+  // per pane shown (preview/database/logs/publish/chat); `_FINISHED` records
+  // completed vs skipped and where they stopped.
+  ANVIL_WEB_TOUR_STEP = 'anvil.web_tour_step',
+  ANVIL_WEB_TOUR_FINISHED = 'anvil.web_tour_finished',
+
+  // The bookmark gate: a blocking card shown once per browser, right after the
+  // user's first prompt in a Web or Cloud workspace, asking them to bookmark
+  // the page before continuing. `surface` is web | cloud and `variant` is
+  // pointer | touch (the two illustrations). `_SHOWN` minus `_CONFIRMED` is the
+  // abandon rate — the number to watch, since the card has no other exit and a
+  // gap between the two means people are closing the tab instead.
+  ANVIL_BOOKMARK_GATE_SHOWN = 'anvil.bookmark_gate_shown',
+  ANVIL_BOOKMARK_GATE_CONFIRMED = 'anvil.bookmark_gate_confirmed',
+
+  // Anvil - Cloud landing page (/cloud). Fired when a logged-out visitor
+  // clicks a "Continue with GitHub" / "Connect your repo" CTA; `location`
+  // distinguishes hero vs the migration/lovable section vs the final CTA. Best
+  // proxy for cloud sign-up intent (utm_* ride along as super-properties).
+  ANVIL_CLOUD_CONNECT_REPO_CLICKED = 'anvil.cloud_connect_repo_clicked',
+  ANVIL_CLOUD_BLANK_PROJECT_CLICKED = 'anvil.cloud_blank_project_clicked',
+
+  // Anvil - Home Page
+  ANVIL_HOME_INSTALL_COMMAND_COPIED = 'anvil.home_install_command_copied',
+  ANVIL_HOME_GITHUB_CLICKED = 'anvil.home_github_clicked',
+  ANVIL_HOME_INSTALL_GUIDE_EXPANDED = 'anvil.home_install_guide_expanded',
+  ANVIL_HOME_FAQ_OPENED = 'anvil.home_faq_opened',
+
+  // Anvil - Home savings calculator CTA. Fires alongside
+  // ANVIL_DESKTOP_DOWNLOAD_CLICKED (location: savings_calculator) but adds
+  // what the visitor had configured at the moment they converted: `savings`
+  // (the headline number they were looking at), `perSeat`, `seats`, `tools`
+  // and `toolCount`. The question it exists to answer is whether a bigger
+  // computed number actually converts better — bucket `savings` and compare
+  // click-through, which the download event alone cannot show.
+  ANVIL_HOME_SAVINGS_CTA_CLICKED = 'anvil.home_savings_cta_clicked',
+
+  // Anvil - acquisition attribution (UTM / ad-click params captured as
+  // super-properties; filter by utm_source, reddit_click_id, is_reddit_traffic)
+  ANVIL_ATTRIBUTED = 'anvil.attributed',
+  ANVIL_AFFILIATE_SIGNUP = 'anvil.affiliate.signup',
+  ANVIL_AFFILIATE_ACTIVATION = 'anvil.affiliate.activation',
+  // Anvil - Reddit ad funnel (filter in PostHog by reddit_click_id / utm_source)
+  ANVIL_REDDIT_FUNNEL_CLI_INSTALLED = 'anvil.reddit_funnel.cli_installed',
+  ANVIL_REDDIT_FUNNEL_LOGIN = 'anvil.reddit_funnel.login',
+  ANVIL_REDDIT_FUNNEL_SIGN_UP = 'anvil.reddit_funnel.sign_up',
+  ANVIL_REDDIT_FUNNEL_FIRST_PROMPT = 'anvil.reddit_funnel.first_prompt',
+  ANVIL_REDDIT_FUNNEL_RETENTION_1D = 'anvil.reddit_funnel.retention_1d',
+  ANVIL_REDDIT_FUNNEL_RETENTION_7D = 'anvil.reddit_funnel.retention_7d',
+  ANVIL_REDDIT_FUNNEL_RETENTION_24D = 'anvil.reddit_funnel.retention_24d',
+  // Legacy surface-specific names retained for historical dashboards.
+  ANVIL_REDDIT_FUNNEL_FIRST_PROMPT_CLI = 'anvil.reddit_funnel.first_prompt_cli',
+  ANVIL_REDDIT_FUNNEL_FIRST_PROMPT_WEB = 'anvil.reddit_funnel.first_prompt_web',
+  ANVIL_REDDIT_FUNNEL_FIRST_PROMPT_CHAT = 'anvil.reddit_funnel.first_prompt_chat',
+  ANVIL_REDDIT_FUNNEL_RETENTION_1D_CLI = 'anvil.reddit_funnel.retention_1d_cli',
+  ANVIL_REDDIT_FUNNEL_RETENTION_7D_CLI = 'anvil.reddit_funnel.retention_7d_cli',
+  ANVIL_REDDIT_FUNNEL_RETENTION_24D_CLI = 'anvil.reddit_funnel.retention_24d_cli',
+  ANVIL_REDDIT_FUNNEL_GRAVITY_AD_CLICK = 'anvil.reddit_funnel.gravity_ad_click',
+
+  // Anvil web /chat ads experiment (server-rendered Gravity ads vs the
+  // existing @gravity-ai/react inline slot; bucketed by user id — see
+  // anvil/web/src/app/chat/_components/ad-experiment.ts). Both events carry
+  // `experiment` + `variant` so PostHog can break down exposure and CTR by arm.
+  ANVIL_CHAT_ADS_EXPERIMENT_EXPOSED = 'anvil.chat_ads.experiment_exposed',
+  ANVIL_CHAT_ADS_AD_SHOWN = 'anvil.chat_ads.ad_shown',
+
+  // Anvil Desktop (Electron app)
+  // Mirrors the CLI's surface events so the desktop shows up in the same DAU /
+  // login funnels. `message_sent` (above) is reused with `surface: 'desktop'`;
+  // these capture the launch, auth, and per-turn activity unique to the app.
+  DESKTOP_APP_LAUNCHED = 'desktop.app_launched',
+  // The ATTEMPT, which `desktop.login` (the completion) cannot stand in for. A screen that gets
+  // more people to press the button and a screen nobody presses look identical in completions
+  // alone if sign-in itself is what breaks — and the first-run screen exists to move exactly this
+  // number. `surface` says which control started it, so a change to one of them is separable.
+  DESKTOP_LOGIN_STARTED = 'desktop.login_started',
+  DESKTOP_LOGIN = 'desktop.login',
+  // Every way device-code sign-in can fail on the client. Without it a user who
+  // cannot sign in is INVISIBLE: `/api/auth/cli/code` answers 200 on all of
+  // them (unreachable host, TLS interception, clock skew, an abandoned code),
+  // so the server sees a healthy login it never hears about again.
+  DESKTOP_LOGIN_FAILED = 'desktop.login_failed',
+  DESKTOP_LOGOUT = 'desktop.logout',
+  DESKTOP_THREAD_CREATED = 'desktop.thread_created',
+  DESKTOP_THREAD_TITLED = 'desktop.thread_titled',
+  DESKTOP_PROJECT_OPENED = 'desktop.project_opened',
+  DESKTOP_PROJECT_REMOVED = 'desktop.project_removed',
+  DESKTOP_TURN_COMPLETED = 'desktop.turn_completed',
+  DESKTOP_FAILED_TURN_RECOVERY = 'desktop.failed_turn_recovery',
+  DESKTOP_HARNESS_CHANGED = 'desktop.harness_changed',
+  DESKTOP_MODEL_CHANGED = 'desktop.model_changed',
+  DESKTOP_SKILL_RUN = 'desktop.skill_run',
+  DESKTOP_QUEUE_SEND_NOW = 'desktop.queue_send_now',
+  // Feature-adoption catch-all. ONE event for the long tail of desktop
+  // features (panels, worktrees, diffs, skills, terminal, preview, …), keyed
+  // by a bounded `feature` property from
+  // `anvil-desktop/src/core/features.ts`. A single PostHog insight
+  // ("desktop.feature_used, broken down by feature", unique users) answers
+  // "what do people actually use?" for the whole app, and adding a feature
+  // never means adding an event to this enum or to the sampling lists.
+  //
+  // Reserved for user-INTENT actions only — never render/effect churn. The
+  // first-class desktop.* events above stay separate because they anchor
+  // funnels (login, DAU, turns) or reliability alerts.
+  DESKTOP_FEATURE_USED = 'desktop.feature_used',
+  DESKTOP_AUTORUN_TOGGLED = 'desktop.autorun_toggled',
+  DESKTOP_AUTORUN_SCOPE_SET = 'desktop.autorun_scope_set',
+  // One-shot per process: which codex CLI the Codex harness resolved (or why
+  // none). Answers "is the packaged app finding users' codex?" in the field,
+  // where the stdout breadcrumb is unavailable.
+  DESKTOP_CODEX_RESOLUTION = 'desktop.codex_resolution',
+  // Sponsored ads interspersed into the transcript (server-side ads_* events
+  // in web/api/v1/ads capture the fetch/impression/click ledger; these are the
+  // desktop-surface funnels). `desktop.inline_ad_pool_reused` was retired
+  // along with the head-pool model (ads are now inline parts capped at
+  // MAX_MESSAGE_AD_COUNT); historical rows exist but nothing emits it. The
+  // CLI's `cli.inline_ad_pool_reused` sibling still fires.
+  DESKTOP_AD_SHOWN = 'desktop.ad_shown',
+  DESKTOP_AD_CLICKED = 'desktop.ad_clicked',
+  DESKTOP_INLINE_AD_SLOT_ELIGIBLE = 'desktop.inline_ad_slot_eligible',
+  // Shutdown/crash lifecycle of harness CLI children: turns aborted at quit so
+  // their CLIs terminate, orphans from a dead orchestrator reaped at launch,
+  // and interrupted turns auto-resumed by recovery. Together these answer "how
+  // often do users hit the orphaned-CLI zombie?" in the field.
+  DESKTOP_SHUTDOWN_TURNS_ABORTED = 'desktop.shutdown_turns_aborted',
+  DESKTOP_ORPHANS_REAPED = 'desktop.orphans_reaped',
+  DESKTOP_WORKTREES_RECLAIMED = 'desktop.worktrees_reclaimed',
+  DESKTOP_TURNS_RESURRECTED = 'desktop.turns_resurrected',
+  // Passive stall detector: a turn produced no harness stream activity for the
+  // configured window. Telemetry ONLY — the turn is not aborted. Join to
+  // desktop.turn_completed to tell a recovered long-silent tool call from a
+  // real hang, i.e. whether an *acting* watchdog is worth building.
+  DESKTOP_TURN_STALLED = 'desktop.turn_stalled',
+  // A turn that went quiet because it is PARKED on a background command, not
+  // because anything is wrong. Verified against the real Claude Code CLI: a
+  // background Bash wait emits no stream messages whatsoever for its entire
+  // duration, so the stall detector cannot tell it apart from a hang by
+  // listening. This event is what the detector reports instead, so a long wait
+  // is still counted — and stays out of desktop.turn_stalled, which is meant to
+  // mean "unexplained silence".
+  DESKTOP_TURN_BACKGROUND_WAIT = 'desktop.turn_background_wait',
+  // Saturation of the orchestrator's single event loop, one line per minute per
+  // running app. That process serves the renderer bundle, every SSE stream, all
+  // git work, agent turns, terminals and preview drives, so a stall anywhere
+  // reads to the user as the whole app hanging. The same numbers ride on
+  // `desktop.turn_completed`, which is what separates "the backend queued my
+  // turn" from "my own orchestrator was pinned" — the question the 2026-07
+  // "opening a new tab is incredibly slow" report could not be answered from
+  // server-side timings alone.
+  DESKTOP_EVENT_LOOP_HEALTH = 'desktop.event_loop_health',
+  // Background lifecycle outcomes. Counts are bucketed and conflict changes
+  // emit only on transitions, so periodic scans do not create cardinality or volume churn.
+  DESKTOP_THREADS_AUTO_ARCHIVED = 'desktop.threads_auto_archived',
+  DESKTOP_DELIVERY_CONFLICT_CHANGED = 'desktop.delivery_conflict_changed',
+
+  // Common
+  FLUSH_FAILED = 'common.flush_failed',
+
+  // Client Logging - for sending logger events to PostHog in production
+  CLI_LOG = 'cli.log',
+}

package/vendor/@anvil/common/src/constants/anthropic.ts

@@ -0,0 +1,73 @@
+/**
+ * OpenRouter → Anthropic model ID mapping. Used by the token-count API to
+ * route Anthropic-family requests to Anthropic's native counting endpoint.
+ */
+
+const OPENROUTER_TO_ANTHROPIC_MODEL_MAP: Record<string, string> = {
+  // Claude 3.x Haiku models
+  'anthropic/claude-3.5-haiku-20241022': 'claude-3-5-haiku-20241022',
+  'anthropic/claude-3.5-haiku': 'claude-3-5-haiku-20241022',
+  'anthropic/claude-3-5-haiku': 'claude-3-5-haiku-20241022',
+  'anthropic/claude-3-5-haiku-20241022': 'claude-3-5-haiku-20241022',
+  'anthropic/claude-3-haiku': 'claude-3-haiku-20240307',
+
+  // Claude 3.x Sonnet models
+  'anthropic/claude-3.5-sonnet': 'claude-3-5-sonnet-20241022',
+  'anthropic/claude-3-5-sonnet': 'claude-3-5-sonnet-20241022',
+  'anthropic/claude-3-5-sonnet-20241022': 'claude-3-5-sonnet-20241022',
+  'anthropic/claude-3-5-sonnet-20240620': 'claude-3-5-sonnet-20240620',
+  'anthropic/claude-3-sonnet': 'claude-3-sonnet-20240229',
+
+  // Claude 3.x Opus models
+  'anthropic/claude-3-opus': 'claude-3-opus-20240229',
+  'anthropic/claude-3-opus-20240229': 'claude-3-opus-20240229',
+
+  // Claude 4.x Haiku models
+  'anthropic/claude-haiku-4.5': 'claude-haiku-4-5-20251001',
+  'anthropic/claude-haiku-4': 'claude-haiku-4-20250514',
+
+  // Claude 4.x Sonnet models
+  'anthropic/claude-sonnet-4.6': 'claude-sonnet-4-6',
+  'anthropic/claude-sonnet-4.5': 'claude-sonnet-4-5-20250929',
+  'anthropic/claude-sonnet-4': 'claude-sonnet-4-20250514',
+  'anthropic/claude-4-sonnet-20250522': 'claude-sonnet-4-20250514',
+  'anthropic/claude-4-sonnet': 'claude-sonnet-4-20250514',
+
+  // Claude 5.x models
+  'anthropic/claude-fable-5': 'claude-fable-5',
+  'anthropic/claude-opus-5': 'claude-opus-5',
+
+  // Claude 4.x Opus models
+  'anthropic/claude-opus-4.8': 'claude-opus-4-8',
+  'anthropic/claude-opus-4.7': 'claude-opus-4-7',
+  'anthropic/claude-opus-4.6': 'claude-opus-4-6',
+  'anthropic/claude-opus-4.5': 'claude-opus-4-5-20251101',
+  'anthropic/claude-opus-4.1': 'claude-opus-4-1-20250805',
+  'anthropic/claude-opus-4': 'claude-opus-4-1-20250805',
+}
+
+export function isClaudeModel(model: string): boolean {
+  return model.startsWith('anthropic/') || model.startsWith('claude-')
+}
+
+/**
+ * Convert an OpenRouter model ID to an Anthropic model ID.
+ * Throws if the model has a non-anthropic provider prefix.
+ */
+export function toAnthropicModelId(openrouterModel: string): string {
+  // Already an Anthropic model ID (no provider prefix)
+  if (!openrouterModel.includes('/')) {
+    return openrouterModel
+  }
+
+  if (!openrouterModel.startsWith('anthropic/')) {
+    throw new Error(
+      `Cannot convert non-Anthropic model to Anthropic model ID: ${openrouterModel}`,
+    )
+  }
+
+  return (
+    OPENROUTER_TO_ANTHROPIC_MODEL_MAP[openrouterModel] ??
+    openrouterModel.replace('anthropic/', '')
+  )
+}

package/vendor/@anvil/common/src/constants/anvil-data-use.ts

@@ -0,0 +1,81 @@
+const POLICY_EFFECTIVE_DATE = 'July 23, 2026'
+
+export const ANVIL_POLICY_ROLLOUT = {
+  version: '2026-07-23',
+  effectiveDate: POLICY_EFFECTIVE_DATE,
+  lastUpdated: '07/23/2026',
+  noticeEndsAt: '2026-08-23T00:00:00-07:00',
+  notice: {
+    title: `We’ve updated our Terms and Privacy Policy, effective ${POLICY_EFFECTIVE_DATE}.`,
+    summary:
+      'Prompts may be used to personalize ads, AI training applies only to labeled models or features, and usage restrictions were updated.',
+  },
+} as const
+
+export const ANVIL_PRIVACY_POLICY_URL = 'https://anvil.com/privacy-policy'
+
+export const ANVIL_AI_TRAINING_NOTICE = 'May use data for AI training'
+
+export type AnvilModelDataUse = 'service' | 'training'
+
+/**
+ * Canonical short-form public copy derived from the July 23 Privacy Policy.
+ * Product surfaces should import these answers instead of restating data-use
+ * promises. Static Markdown/MDX copies are protected by the drift test in
+ * `anvil-public-data-use-copy.test.ts`.
+ */
+export const ANVIL_PUBLIC_DATA_USE_COPY = {
+  collectionQuestion: 'Does Anvil collect my data?',
+  collectionAnswer:
+    'Anvil is supported by text ads. We do not collect your traces or files unless the model provider does. Currently, this applies only to DeepSeek models.',
+  trainingQuestion: 'Is my data used to train AI?',
+  trainingAnswer:
+    'Only when a model or feature says data may be used for AI training. Anvil or the provider may then keep submissions to develop, train, test, evaluate, fine-tune, and improve AI models or products.',
+  storageQuestion: 'How is my data used and stored?',
+  storageAnswer:
+    'We use prompts, messages, code, files, and repository data to provide the service. We may analyze prompts and messages—including pasted content—to personalize ads, using Anvil systems and service providers acting on our behalf. Separate uploads and connected repositories are not provided to advertising providers. Where required by law, we provide advertising choices and honor recognized opt-out signals; elsewhere, this processing may be required to use the free service. See the Privacy Policy for retention and details.',
+  compactTrainingSummary: `Models or features labeled “${ANVIL_AI_TRAINING_NOTICE}” may keep submissions to develop, train, test, evaluate, fine-tune, and improve AI models or products.`,
+  compactPrivacySummary: `Prompts and messages may be analyzed to personalize ads, using Anvil systems and service providers acting on our behalf. Separate uploads and connected repositories are not provided to advertising providers. Models or features labeled “${ANVIL_AI_TRAINING_NOTICE}” may use submissions for that purpose.`,
+  localExecutionSummary:
+    'Anvil edits files locally but sends relevant prompts, code, files, and repository context to its servers and model providers. See the Privacy Policy for details.',
+  compactLocalExecutionSummary:
+    'Edits run locally, but relevant prompts, code, files, and repository context are sent to Anvil and model providers.',
+} as const
+
+export const ANVIL_DATA_USE_GENERATED_MARKDOWN_BLOCK = {
+  start: '<!-- BEGIN GENERATED ANVIL DATA USE -->',
+  end: '<!-- END GENERATED ANVIL DATA USE -->',
+} as const
+
+export const ANVIL_DATA_USE_GENERATED_MDX_BLOCK = {
+  start: '{/* BEGIN GENERATED ANVIL DATA USE */}',
+  end: '{/* END GENERATED ANVIL DATA USE */}',
+} as const
+
+export function renderAnvilDataUseFaqMarkdown(): string {
+  return `${ANVIL_DATA_USE_GENERATED_MARKDOWN_BLOCK.start}
+
+**${ANVIL_PUBLIC_DATA_USE_COPY.trainingQuestion}** ${ANVIL_PUBLIC_DATA_USE_COPY.trainingAnswer}
+
+**${ANVIL_PUBLIC_DATA_USE_COPY.storageQuestion}** ${ANVIL_PUBLIC_DATA_USE_COPY.storageAnswer}
+
+See the [Privacy Policy](${ANVIL_PRIVACY_POLICY_URL}) for complete details.
+
+${ANVIL_DATA_USE_GENERATED_MARKDOWN_BLOCK.end}`
+}
+
+export function renderAnvilDataUseFaqMdx(): string {
+  return `${ANVIL_DATA_USE_GENERATED_MDX_BLOCK.start}
+
+## ${ANVIL_PUBLIC_DATA_USE_COPY.storageQuestion}
+
+${ANVIL_PUBLIC_DATA_USE_COPY.storageAnswer}
+
+## ${ANVIL_PUBLIC_DATA_USE_COPY.trainingQuestion}
+
+${ANVIL_PUBLIC_DATA_USE_COPY.trainingAnswer}
+
+See the [Privacy Policy](${ANVIL_PRIVACY_POLICY_URL}) for complete details.
+
+${ANVIL_DATA_USE_GENERATED_MDX_BLOCK.end}`
+}

package/vendor/@anvil/common/src/constants/anvil-errors.ts

@@ -0,0 +1,7 @@
+/** Provider billing failures observed from CrofAI, OpenRouter, and similar APIs. */
+export const ANVIL_PROVIDER_USAGE_ERROR_PATTERN =
+  /\b(?:(?:not enough|insufficient|out of)\s+credits?|(?:add|refill|top up)\s+(?:more\s+)?credits?)\b/i
+
+/** Shared copy keeps every Anvil surface clear that the user is not billed. */
+export const ANVIL_PROVIDER_USAGE_MESSAGE =
+  'Anvil ran out of provider usage and needs a refill. This is on us, not your account.'

package/vendor/@anvil/common/src/constants/anvil-gemini-thinker.ts

@@ -0,0 +1,21 @@
+export const ANVIL_GEMINI_THINKER_AGENT_ID = 'thinker-with-files-gemini'
+
+/** Agent id the anvil WEB CHAT uses for its gemini-thinker child (see
+ *  agents/thinker/thinker-gemini.ts, spawned from agents/base-chat.ts). Distinct
+ *  from the CLI's ANVIL_GEMINI_THINKER_AGENT_ID. */
+export const ANVIL_CHAT_GEMINI_THINKER_AGENT_ID = 'thinker-gemini'
+
+/** The ONLY agents permitted to call the premium Gemini Pro model. Gemini Pro is
+ *  not a user-pickable model — its only legitimate callers are these two thinker
+ *  subagents (CLI + chat). The chat-completions endpoint rejects any other agent
+ *  that requests Gemini Pro on an unbilled path. */
+export const ANVIL_GEMINI_PRO_AGENT_IDS: ReadonlySet<string> = new Set([
+  ANVIL_GEMINI_THINKER_AGENT_ID,
+  ANVIL_CHAT_GEMINI_THINKER_AGENT_ID,
+])
+
+export const ANVIL_GEMINI_THINKER_SYSTEM_INSTRUCTION =
+  "Spawn the thinker-with-files-gemini agent to think through problems worth reasoning about -- it's very smart. Reach for it on non-trivial bugs, uncertain approaches, and tricky decisions, not just the hardest tasks. Skip it for routine, clearly-scoped edits. Pass the relevant filePaths since it has no conversation history."
+
+export const ANVIL_GEMINI_THINKER_INSTRUCTIONS_PROMPT =
+  '- For problems worth thinking through -- non-trivial bugs, uncertain approaches, or tricky decisions -- spawn the thinker-with-files-gemini agent after gathering context, not just for the hardest tasks. Skip it for routine, clearly-scoped edits. Pass the relevant filePaths.'

package/vendor/@anvil/common/src/constants/anvil-model-ids.ts

@@ -0,0 +1,11 @@
+/**
+ * Stable Anvil model identifiers that are safe to import from browser code.
+ *
+ * Keep this module dependency-free: the full Anvil model catalog pulls in
+ * server-side model configuration that is not part of the desktop renderer's
+ * type environment.
+ */
+export const ANVIL_DEEPSEEK_V4_FLASH_MODEL_ID =
+  'deepseek/deepseek-v4-flash'
+export const ANVIL_DEEPSEEK_V4_PRO_MODEL_ID = 'deepseek/deepseek-v4-pro'
+export const ANVIL_MINIMAX_M3_MODEL_ID = 'minimax/minimax-m3'